last executing test programs: 25.345859772s ago: executing program 2 (id=2823): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0xe0, 0xa, 0x148, 0xe0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'ip6erspan0\x00', {}, {}, 0x89}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0xffffffffffffffff, 0x20, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004000001000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0xfe5, &(0x7f0000001840)=""/4069, 0x0, 0x2}, 0x94) 24.143129762s ago: executing program 2 (id=2836): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040040}, 0x4008804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x400c850) 23.863456612s ago: executing program 2 (id=2840): socket(0x10, 0x803, 0x0) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r6) sendmsg$IEEE802154_DISASSOCIATE_REQ(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x60) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x488c9) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdc02, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0x2, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400880b}, 0x20004804) 23.566201195s ago: executing program 2 (id=2844): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x1, 0xf7, 0xfffff008}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) 23.396380702s ago: executing program 2 (id=2845): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0xb, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0x7}, @var={0xc, 0x0, 0x0, 0xe, 0x2, 0x2}, @enum={0x1, 0x4, 0x0, 0x6, 0x4, [{0x2, 0x7cdb}, {}, {0x4, 0x40}, {0x7, 0xa}]}, @volatile={0xb, 0x0, 0x0, 0x9, 0x1}, @struct={0xa, 0x1, 0x0, 0x4, 0x1, 0x7, [{0xa, 0x4, 0x2}]}, @var={0xdc, 0x0, 0x0, 0xe, 0x4}, @enum={0x10, 0x2, 0x0, 0x6, 0x4, [{0xc, 0x8}, {0x1, 0x101}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x2e, 0x30, 0x30, 0x5f, 0x5f, 0x0]}}, &(0x7f0000000100)=""/15, 0xe3, 0xf, 0x1, 0x7, 0x10000}, 0x28) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000180)=[0x1, 0x3], 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000001c0)) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000240)=0x10) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000280)={0x0, r2, r1, 0x5, 0x0, '\x00', {0x91a, 0x3, 0x7, 0x0, 0x5, 0x8, 0x8, 0x4, {0x4, 0xbe63}, {0x5, 0x9}, {0x7ff, 0x8}, 0xffffffffffffffc0, 0x401, 0xff, 0x62d, 0xbfc, 0x100, 0x6, 0x2, 0x241, 0xfff7, '\x00', 0xfff, 0x6, 0xdc, 0x2}}) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000001480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001440)={&(0x7f00000003c0)={0x1060, 0x1, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [{{0x254, 0x1, {{0x2, 0x7f}, 0x2, 0x2, 0x3c, 0x5, 0x7, 'syz0\x00', "c438c707e8871a4c55b629aaa36c6a15ef6ff7d68d92951a7663468bb6c77686", "58f1b5b2380f8a03b6ba6f9d2d174bb5c35d8c6767bb9a9ec0ea0f457cc3a18b", [{0x9, 0x8, {0x0, 0x5d52cb38}}, {0x2, 0x3, {0x3, 0x5}}, {0x400, 0x7f, {0x1, 0x400}}, {0x0, 0x6, {0x1, 0x6}}, {0xa, 0x5, {0x1, 0xfff}}, {0x1, 0x3fe2, {0x3, 0x7}}, {0x4, 0x8000, {0x2, 0x4}}, {0x2, 0x7, {0x0, 0x5}}, {0x2, 0x0, {0x3, 0x80}}, {0x7, 0x2, {0x2, 0x6}}, {0x3, 0x5, {0x0, 0x1}}, {0x3, 0x5, {0x1, 0x375}}, {0x3, 0x5, {0x3}}, {0x7, 0x9, {0x3, 0x7}}, {0x8, 0x211, {0x3, 0x8}}, {0x2, 0x1, {0x2, 0x5}}, {0xfffe, 0x200, {0x1, 0x4a86}}, {0x0, 0x6, {0x3, 0x8}}, {0x3d79, 0x3, {0x3, 0xf}}, {0x8, 0x1, {0x2, 0xb}}, {0x9, 0x2, {0x1}}, {0x5, 0x6, {0x0, 0x9}}, {0xeda, 0x400, {0x2}}, {0x80, 0x2, {0x0, 0x800}}, {0x5913, 0xf6, {0x0, 0x80000001}}, {0x0, 0x6, {0x3, 0x2}}, {0x5, 0x5, {0x0, 0x2}}, {0x10, 0xc67, {0x1, 0x8}}, {0xc07, 0x1000, {0x0, 0x80000000}}, {0x0, 0x2, {0x1}}, {0x9, 0x0, {0x0, 0x1}}, {0x3, 0x8, {0x1, 0x3}}, {0xc267, 0x8000, {0x0, 0x8}}, {0x401, 0x0, {0x2, 0x6}}, {0x4, 0x3, {0x3, 0x7}}, {0x0, 0xf77b, {0x3, 0x9}}, {0xe492, 0x2, {0x0, 0x8}}, {0x4, 0xe, {0x0, 0xf6f2}}, {0x3, 0x2, {0x2, 0x5}}, {0x0, 0x2, {0x1, 0xfffffff7}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x5, 0x1, 0xffff, 0x4, 0xb, 'syz1\x00', "e13e52cdefcae48c97754c9b14e7fec34d50c62372c3384868b9553d352a1335", "518692b2144812f84a154c8ae4c70a0338092f061cfc651a9f45e9f09dab9d65", [{0xfff7, 0x8, {0x0, 0x1}}, {0x1, 0x8, {0x0, 0x5}}, {0x9, 0x7846, {0x0, 0x6}}, {0xf98f, 0x0, {0x2, 0x400}}, {0x81, 0xbf, {0x2, 0x10001}}, {0x9, 0xe9, {0x0, 0xc}}, {0x9, 0x47f, {0x1, 0x1}}, {0xff, 0x7, {0x1, 0x4}}, {0x300, 0x295, {0x1, 0x6}}, {0x12, 0x101, {0x3, 0x1b}}, {0x3ff, 0x9, {0x0, 0x1}}, {0x0, 0xe, {0x2, 0x3ff}}, {0x1, 0x4, {0x0, 0x81}}, {0x3, 0x7ff, {0x2, 0xffff}}, {0x7, 0x3be, {0x1, 0x4}}, {0x6, 0xfffb, {0x1, 0x2}}, {0x6, 0x200, {0x0, 0x9}}, {0x7fff, 0x6, {0x2, 0x2}}, {0x10, 0x1, {0x0, 0x6}}, {0x5, 0x1, {0x2, 0x7}}, {0x8, 0xf801, {0x2}}, {0x7, 0xa957, {0x2, 0x80000000}}, {0xdbe7, 0x0, {0x2, 0x9}}, {0x3, 0x68cd, {0x0, 0xfb}}, {0x5, 0x40, {0x1, 0xd8b6}}, {0x8, 0x1, {0x3, 0x4}}, {0x1, 0xfff8, {0x0, 0x69b}}, {0x10, 0x8, {0x2}}, {0x5, 0x2, {0x1, 0x59}}, {0x8, 0x3, {0x2, 0x5}}, {0x0, 0x81, {0x1, 0xffff}}, {0x9, 0x4, {0x3, 0x2}}, {0xe, 0xf8e6, {0x1, 0x7f}}, {0xa, 0x205a, {0x3, 0x7}}, {0x8000, 0x5, {0x3, 0x80000001}}, {0x2, 0x7, {0x0, 0x1beb}}, {0x1, 0x4940, {0x3, 0x5}}, {0x1, 0x9, {0x2, 0x1}}, {0xa52, 0xe93, {0x0, 0x1}}, {0x3, 0x3, {0x0, 0x10001}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0xab, 0x3, 0xb3, 0x5, 0x26, 'syz0\x00', "c68ad456ee8cc810b2f59fc0377181753d70e4154ed2a86ffb7ca75452a20619", "efcae7ac94e8c8a19fc0f2074b3d31ac21829fbec6ce67fe875064a435760089", [{0xd18b, 0x9, {0x0, 0x7fff}}, {0x2}, {0x3ff, 0x1000, {0x3, 0xb}}, {0x1000, 0x5, {0x2, 0xeb59}}, {0x4, 0x0, {0x0, 0x8cf1}}, {0x0, 0x5aaf, {0x3, 0x401}}, {0x400, 0x1, {0x1, 0x1}}, {0x5, 0x5, {0x1, 0x1}}, {0x0, 0x1, {0x1, 0x1ff}}, {0x0, 0xfff, {0x3}}, {0x8, 0x4, {0x0, 0x50b7}}, {0x49, 0x4, {0x2, 0x7}}, {0x8000, 0x8000, {0x3, 0x9}}, {0x3ff, 0x1, {0x2, 0xffffffff}}, {0x66, 0x0, {0x2, 0x80}}, {0x5, 0x1, {0x1, 0x40000000}}, {0x2, 0x8001, {0x3, 0x80000000}}, {0x2, 0x8, {0x3, 0xa444}}, {0x7fff, 0x4, {0x3, 0x9}}, {0xbc, 0x8, {0x2, 0x5}}, {0x85f, 0x6, {0x3, 0x2}}, {0x5, 0xff, {0x2, 0x7}}, {0x0, 0x2, {0x1, 0x3}}, {0xfff, 0x4, {0x2, 0x7fffffff}}, {0x3, 0xfe01, {0x2, 0xb50}}, {0x6, 0x4, {0x0, 0x80000001}}, {0x6, 0x3, {0x4, 0x4}}, {0x367b, 0x3, {0x1, 0x10001}}, {0xef1, 0x401, {0x1, 0x6}}, {0x9, 0xff81, {0x0, 0xfffffffc}}, {0x3, 0xffff, {0x0, 0x7}}, {0xfbbc, 0x7, {0x1, 0x5a}}, {0x0, 0x0, {0x0, 0x1000}}, {0x7, 0x3ff, {0x0, 0xfcd}}, {0xfbff, 0x7, {0x1, 0x8f}}, {0x81, 0x9, {0x0, 0x7b6c}}, {0x6, 0x7b, {0x1, 0x6}}, {0x2, 0x2, {0x2, 0xc49}}, {0x0, 0x3c6, {0x3, 0xffffffff}}, {0x3, 0x2, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x8, 0x5, 0xffff, 0xb2, 0x24, 'syz0\x00', "af7aef3b062678ae3d76cad4806a5e7e2dd9b7cb2ecfc4cf31400fa2a5f00762", "7a7c24db7264ca3f9e4bb1ccfa7fb10da87bb892aefadb0001461a27acb50c48", [{0x5, 0x3, {0x3, 0x6}}, {0x0, 0x1, {0x1, 0x2b}}, {0x88e8, 0x7, {0x1, 0x3}}, {0xfffe, 0x1, {0x2, 0x3f87}}, {0x1, 0xc, {0x1, 0x1ff}}, {0x3, 0xd, {0x0, 0x7f}}, {0x400, 0x9, {0x0, 0x2}}, {0x8, 0xb, {0x2, 0x80000001}}, {0xd, 0x4, {0x2, 0x7}}, {0x6, 0x9, {0x2, 0x8}}, {0x7, 0x2, {0x1, 0xffff8001}}, {0x7fff, 0x7, {0x2, 0x6}}, {0x81, 0x2, {0x2, 0x4b4}}, {0x8, 0x8001, {0x1, 0x80000000}}, {0x4, 0x7, {0x0, 0x7}}, {0xb, 0x401, {0x2, 0x7f}}, {0x185, 0x2, {0x3, 0x6}}, {0x6, 0xf800, {0x1, 0xff}}, {0x5, 0x1, {0x2}}, {0x9, 0x4, {0x0, 0xffffffff}}, {0x9, 0x3ff, {0x0, 0x5}}, {0x9, 0x2, {0x1, 0x5e}}, {0x5, 0x262, {0x0, 0x8000}}, {0x8001, 0x1ff, {0x1, 0x6}}, {0x6, 0xb6c, {0x0, 0x4}}, {0x2, 0x5, {0x1, 0x59}}, {0x5, 0x6, {0x0, 0x2}}, {0x8001, 0x81, {0x3, 0x1}}, {0x6, 0x7, {0x1, 0x7}}, {0x9, 0x5, {0x3, 0x6}}, {0xffff, 0x3, {0x3, 0xaf3e}}, {0x815, 0x4, {0x1, 0x46}}, {0x5, 0xff01, {0x2, 0x5}}, {0x2, 0xf, {0x7, 0x8ae9}}, {0xf, 0x5, {0x3, 0x2}}, {0x0, 0x8, {0x2, 0x2}}, {0x5, 0x7ff, {0x2, 0x8448}}, {0x75, 0x2, {0x1, 0x7}}, {0x9, 0x8, {0x40ec40bac604723c, 0x10001}}, {0x7, 0x4, {0x0, 0x2af9}}]}}}, {{0x254, 0x1, {{0x3, 0x200}, 0xd, 0x7, 0x2, 0xa, 0xd, 'syz0\x00', "bb8360674c556ab086f109a4c8bb77a5e727859c134d192f01b79a1405d9f739", "9ea4651b734753acbe765c694b1348e2c820a01f04d2a77b8832bc3d5fda8fb9", [{0x9, 0xff, {0x1, 0x6}}, {0x1, 0x6, {0x2, 0x6}}, {0x3, 0x9, {0x2, 0x9}}, {0x6, 0xae, {0x3, 0x8}}, {0x4, 0x9, {0x2, 0x7fffffff}}, {0x1, 0x9, {0x2, 0x297}}, {0xeef, 0x3, {0x2, 0x771}}, {0x7, 0xcf, {0x1, 0x3}}, {0x3, 0x2, {0x0, 0x400}}, {0x4, 0x0, {0x3, 0x80000000}}, {0x40, 0x1, {0x2, 0x5d}}, {0xc, 0xe, {0x1, 0x5}}, {0x6, 0x5, {0x0, 0x3}}, {0x4, 0x3, {0x1, 0x3}}, {0x1, 0x1, {0x2, 0x3}}, {0x208, 0x2, {0x1, 0x99}}, {0x8, 0x4, {0x1, 0x5}}, {0x5, 0x101, {0x3, 0x4}}, {0x8001, 0x9, {0x3, 0x1}}, {0x1, 0x1, {0x3}}, {0x9, 0x4, {0x3, 0x81}}, {0x7, 0xc40e, {0x0, 0xbc}}, {0x8000, 0x0, {0x0, 0x2}}, {0x40, 0x473, {0x0, 0x2}}, {0x7, 0xf, {0x0, 0xb}}, {0x6, 0x0, {0x2, 0x8c4a}}, {0x7, 0x0, {0x3, 0x7fffffff}}, {0x4, 0x0, {0x3, 0x400}}, {0x5, 0x4, {0x2}}, {0xcd4, 0x1, {0x1, 0x9}}, {0x2, 0x6, {0x3, 0x4}}, {0x3, 0x400, {0x0, 0x5}}, {0x312, 0x4, {0x2, 0x4}}, {0x8, 0x7f, {0x2, 0x10}}, {0x2, 0x22, {0x1, 0x7fff}}, {0x6, 0x0, {0x2, 0x4}}, {0x2, 0x2, {0x0, 0xbfeb}}, {0x2, 0x8000, {0x3, 0xf0}}, {0x1, 0xfffb, {0x0, 0x7}}, {0xa, 0xffff, {0x2, 0x80}}]}}}, {{0x254, 0x1, {{0x3, 0x4bef}, 0x5, 0x5, 0x8, 0x300, 0x4, 'syz1\x00', "dc448107486954b49a37d99ffddf4e1a5dd5b92a9242a0610bacfa1a74fd0272", "014f845bf75c33ada2de999ec55b5418061c2babb5f866c748682cf16c88d674", [{0x8, 0x77, {0x2, 0x8}}, {0x2bb, 0xe, {0x3, 0x2}}, {0x2, 0x2, {0x0, 0x8}}, {0x9, 0xb, {0x1, 0x8}}, {0x200, 0x7fff, {0x2}}, {0x6, 0xfff9, {0x2, 0x9}}, {0xb1, 0x36, {0x3, 0x2154}}, {0x200, 0x5, {0x1}}, {0xdca, 0x800, {0x3, 0x74}}, {0x58e, 0x0, {0x2, 0x7d}}, {0x2, 0x1000, {0x2, 0x7}}, {0xa0, 0x80, {0x1, 0x2}}, {0x9, 0x9, {0x0, 0x18}}, {0x0, 0x2, {0x1, 0x1fa}}, {0x6, 0x7, {0x2, 0x9}}, {0x6, 0x9, {0x2, 0x200}}, {0xb, 0x8, {0x2, 0x6}}, {0x0, 0xfff6, {0x2, 0x9}}, {0x4, 0xa9, {0x3, 0x5}}, {0x3, 0x0, {0x2, 0x6}}, {0xd, 0x4, {0x3, 0x337}}, {0x9, 0xfff8, {0x3, 0x8f}}, {0x7, 0x100, {0x2, 0x7}}, {0x648c, 0xfe01, {0x1, 0x80000001}}, {0x1, 0xd, {0x3, 0x4}}, {0x5, 0xfffb, {0x1, 0x44}}, {0xff, 0x401, {0x3, 0x9}}, {0x5, 0x40, {0x2, 0x8}}, {0x6, 0x7fff, {0x1, 0x9}}, {0x9, 0x5, {0x1, 0x62050ebb}}, {0x6, 0x2, {0x1, 0x5}}, {0x8, 0x5, {0x2, 0x6}}, {0x8, 0x30b3, {0x1, 0x2}}, {0xc000, 0xfffb, {0x2}}, {0x7, 0xd8, {0x1, 0x6}}, {0x6f0d, 0x8, {0x0, 0x7}}, {0xfc00, 0x0, {0x0, 0x9b}}, {0x1, 0x54, {0x1}}, {0x7, 0x81, {0x2, 0x101}}, {0x9, 0xfffe, {0x0, 0x400}}]}}}, {{0x254, 0x1, {{0x2, 0x8ac}, 0x7, 0xff, 0x3ff, 0xaad, 0x19, 'syz1\x00', "32dd16c62d8e43936410f7b7f72cc79e20cb04b933964345191463dbe995c31c", "1dcfda4e46b7335b715ca946dc8af3c153465da564eec35a30d58c3b6f8e698e", [{0x4, 0xfffc, {0x0, 0x4}}, {0xfff, 0x676d, {0x0, 0x32a}}, {0xe, 0xfff8, {0x2, 0x20000}}, {0x7cc6, 0x1, {0x2, 0x40}}, {0x100, 0x0, {0x2, 0x8}}, {0x7, 0x2, {0x1, 0x8}}, {0x3ff, 0x1, {0x2, 0x8}}, {0x2, 0x8, {0x3, 0x8}}, {0x100, 0x1, {0x3, 0x10000}}, {0x10, 0x2891, {0x3, 0xfffffffd}}, {0x1cd, 0x8, {0x0, 0xfff}}, {0x9, 0x3, {0x3, 0x2ff}}, {0x1, 0x6, {0x1, 0x5}}, {0xfff7, 0x3ff, {0x1}}, {0x80, 0x101, {0x3, 0x64b1}}, {0x2, 0x254, {0x3, 0x9f7}}, {0x200, 0x3, {0x0, 0x80000001}}, {0x0, 0x8, {0x3, 0x8}}, {0x8, 0xbd89, {0x2, 0x1}}, {0x81, 0x6, {0x1, 0x5}}, {0xf, 0x9, {0x1, 0x4}}, {0x8, 0x5, {0x2, 0x7}}, {0x7, 0x401, {0x0, 0x3}}, {0x5, 0x9, {0x1, 0x3}}, {0x22, 0x7, {0x2, 0x100}}, {0x0, 0x1, {0x3}}, {0x2, 0xf001, {0x0, 0x2}}, {0x3, 0x9, {0x0, 0x2a34}}, {0xb, 0x1, {0x3, 0x30}}, {0xc, 0x401, {0x3, 0x41}}, {0x7, 0x4495, {0x3, 0x7}}, {0x2, 0x0, {0x1, 0x80}}, {0x2, 0x8, {0x0, 0xc}}, {0x25, 0x5, {0x1, 0x6}}, {0xff, 0x0, {0x3, 0x5}}, {0x9, 0xb, {0x1, 0x1}}, {0x400, 0xf001, {0x0, 0x78}}, {0x2, 0x200, {0x3, 0xa7}}, {0x2, 0x61, {0x3, 0xc8}}, {0x0, 0x9, {0x3, 0x9}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) gettid() r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000001800)={&(0x7f0000001540)={0x298, r4, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf8, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xe3, 0x2, "b83f014b3225f40eb099786f2d55c067e47bd2cf9000f9e3dacce0eb62fe9bbeb36805de7d55cd9f10c599cdccdcfb31af93c9d91bccc0f7e2634f7db7e078a6cff53489ee8479d22f14b2ccbdcb83c329464e8e819dcc0362a611ba8c9f548663db12a356e362bb27b18bbdc68d461a3421ab92bd8ba9bb1605b5066c2db60bf213c9a8be48e495f8561e121d8207c09e5d34d3b0ee34e1448f7c7ad4e42c013272d6c39092d4bb1bff2642e32ed3c18446a4c1e55b37ec296b9ecd3b69ec836fd50668ce3c03d21ef049b107f4ef4db1f194a013d3b00cff112a74ba5405"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x16c, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc4, 0x2, "ba7d669eb1c2969adfe623b8f251ad356dfb931cef8f4b663a39b1495fd585668ac4e70fd64254cf9e0b180beb19edf90c7d17eafcf02826b88fc44068465b87527a53e967a2a53d82f44aa71061aa6764645238c4d6f48f7b1d09f0cbf3304d1d44fee6837c36165f69dbe3ec17a5c6d82f8ef6b269e5f959d2b8d40d96998d5156371be56e25c6f022e94e7fd0a110ec11df13c310b0eca9dfd9c808a9c12b306754a5c5d04a1367732e7443df7ee546bdb1583f904b61ded2d5f316fb498b"}}, {0xa0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x9c, 0x1, "8e21102793855409611074690c5b0e1a69c602055ff936040caeeeca3d5454f9f1eae32b3d1dd6a1376fd7044ca4e76352e4280d1610a555ac45af31cc1cbecbbab21a3cb83b027aa13eddc3bd8c130d0e86b6fe3cb231c496bdbbe2200cd901d674ffa5451857c7db87ddc3b1593ce8c28d7c8544705fe74fa08d9325b1ad286488447fc6bbff0382a03a63f4c57e57e71f3e0bdbebe188"}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x2004c802}, 0x240408c2) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x2989}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000844) r6 = accept4$unix(0xffffffffffffffff, &(0x7f00000019c0), &(0x7f0000001a40)=0x6e, 0x0) recvmmsg$unix(r6, &(0x7f0000002080)=[{{&(0x7f0000001a80)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001b00)=""/111, 0x6f}, {&(0x7f0000001b80)=""/176, 0xb0}, {&(0x7f0000001c40)=""/232, 0xe8}], 0x3, &(0x7f0000001d80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000001ec0)=@abs, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001f40)}, {&(0x7f0000001f80)=""/79, 0x4f}], 0x2, &(0x7f0000002040)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x2, &(0x7f0000002100)={0x0, 0x989680}) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f00000022c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002280)={&(0x7f0000002180)={0xdc, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xd}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x60}, {0xb}, {0x3, 0x1}, {0xc}, {0xc, 0x1}, {0x1b, 0x1}, {0x4, 0x1}, {0x2, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x63, 0xbe, "fcac1a2e0c15255ae0c9e39bbbe56467e0a2087b5045651f1776f1d407922ba92f2d2b70036d59c8eff71cd485bc272e267fa32afcc7afc77e8dd986a3be5b65af167db4ec3713dcd0fd1202032768afb579a2c5f02cf44ed7c9548ed6b0c1"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x6, 0x3, 0x9, 0xf]}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5d}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}]}, 0xdc}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r15 = accept4$inet6(r10, 0x0, &(0x7f0000002300), 0x0) ioctl$AUTOFS_IOC_CATATONIC(r15, 0x9362, 0x0) r16 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002380), r14) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f00000023c0)={0x0, @initdev, @private}, &(0x7f0000002400)=0xc) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000003140)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003100)={&(0x7f0000002440)={0xcb8, r16, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r17}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0xc54, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2e9}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}]}, {0x824, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}}, @WGPEER_A_ALLOWEDIPS={0x144, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x5b, @dev={0xfe, 0x80, '\x00', 0x31}}}, @WGPEER_A_ALLOWEDIPS={0x4ac, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1000, @empty, 0x80000000}}, @WGPEER_A_ALLOWEDIPS={0x1b8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "56d9667e1aea35a98ffaede5124010a76e0d0aa0a54dc37ca11f98ae555c945c"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x3cc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3ac, 0x9, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010102}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0xcb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000003280)={r8, &(0x7f0000003180)='\x00', 0x200, &(0x7f00000031c0)={@align=0x101, {0xf9d3, 0x2, 0x5, 0x28b}}, 0x7fff, &(0x7f0000003200), &(0x7f0000003240)=0x7fffffff}) ioctl$TUNDETACHFILTER(r18, 0x401054d6, 0x0) r19 = accept4$inet(r12, &(0x7f00000032c0)={0x2, 0x0, @private}, &(0x7f0000003300)=0x10, 0x800) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r19, 0x8008f512, &(0x7f0000003340)) bind$x25(r13, &(0x7f0000003380), 0x12) socketpair(0xa, 0x3, 0xffffffff, &(0x7f00000033c0)) bind$bt_l2cap(r7, &(0x7f0000003400)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffa, 0x2}, 0xe) 23.223432307s ago: executing program 2 (id=2847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 5.041067197s ago: executing program 4 (id=2925): unshare(0x6a040000) unshare(0x60000) 5.028539522s ago: executing program 1 (id=2926): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x4004010) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x80000003) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYRES64=r5], 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400000000010104210000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414aa0c0002800500010000000000080007400000000020000680080001"], 0x84}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655d28c}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x40010f00) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r7) sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, &(0x7f0000000100), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="d25025e6b005693871a4", @ANYBLOB='\x00\x00\x00\x00', @ANYRES8=r2], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x20) 4.738901739s ago: executing program 1 (id=2927): shutdown(0xffffffffffffffff, 0x1) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0x1f34}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x18, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) sendmmsg$nfc_llcp(r1, &(0x7f0000001280)=[{&(0x7f0000000040)={0x27, r4, 0x1, 0x4, 0xe, 0x2, "4f354eaa3435872974f5cfd1a05748f0673cd9ea0a7d53a0b57fa2aa59ef7023cc308f77a58e920533abd4768c616c3fcc69688d6699c0f82293d27e1a90a1", 0x26}, 0x60, &(0x7f0000001240)=[{&(0x7f0000000240)="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", 0x1000}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 3.221615627s ago: executing program 0 (id=2929): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="021605050a00000025bd7000fddbdf2508000001"], 0x50}}, 0x4c040) (async) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7eb, @mcast1, 0x8}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in6=@loopback, @in=@broadcast, 0x0, 0xd, 0x400, 0x6, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x101, 0x0, 0x2}, {0x0, 0x1765, 0x4000000000}, 0x2, 0x1000000, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x2b}, 0x2, @in=@local, 0x3507, 0x4, 0x0, 0x3, 0x4, 0x7f}]}]}, 0xfc}}, 0x10) (async, rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (rerun: 64) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)='7', 0x1}], 0x1, 0x0) (async) unshare(0x8040480) (async) vmsplice(r3, &(0x7f0000001500)=[{&(0x7f0000000180)="db", 0x1}], 0x1, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r9, 0x400454c9, 0xba98575a95aeb70d) (rerun: 64) ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f0000000000)={'dvmrp0\x00'}) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xcd}, 0x50) (async, rerun: 64) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCX25GSUBSCRIP(r11, 0x89e0, 0x0) (async) ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000000040)) 2.772989333s ago: executing program 0 (id=2931): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x29, 0xd, 0xb48c, {0x9, @usr_ip6_spec={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1000, 0x82, 0xfd}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x3, 0x2db, [0x800, 0x386a]}, @udp_ip4_spec={@remote, @empty, 0x4e20, 0x4e21, 0x4}, {0x0, @link_local, 0xa0d, 0x6bd3, [0x6, 0x800]}, 0x20003, 0xffff}}}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) unshare(0x6020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) getpeername$packet(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) splice(r1, 0x0, r2, &(0x7f00000002c0), 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0xc) pwritev(r0, &(0x7f0000001940)=[{&(0x7f0000000380)="6b8d28a185", 0x5}, {&(0x7f0000001800)="0d00e3c8ae0fef0b68f44caf4a2265f6a86e2db88094f068b984caf4d5ace297aa4bf122d166bad08731c9635ceb101a27134693298fd569986404287c860e666c43b2cc257485a1407964056a40b729a7cb7fd833afcd4c8e118d", 0x5b}, {&(0x7f0000001880)=';', 0x1}, {&(0x7f00000018c0)="06b5592d6d5c4e09443b07b0a0abc2db78b0657084f43d4cddeeb6457856871d6d538aeb01ca5d13e8d9d24b07aba2551adbdd2f764022e3008c3e2ffc83b93083314d6f00c80126edd87b4356a073a3fffe42acd4d5", 0x56}], 0x4, 0x5, 0xc15b) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[], 0xd8}}, 0xc4) clock_gettime(0x1, &(0x7f0000000300)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000017c0)={'ip6tnl0\x00', &(0x7f0000001740)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x2, 0x6, 0x28, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8791, 0x3, 0x8}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0xa}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r10, r10, 0x2e}, 0x20) close(0x4) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000001700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000016c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r11, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$inet(r8, &(0x7f0000001c00)={&(0x7f0000001980)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001b00)=[{&(0x7f00000019c0)="48929ba0aca6ce8e7bb773dc26a75018722bbbb463e4ea12c066cab5da5716e45a6eed6b838b412ae13d34210e567fb65487ffec25b3b82f9e8a4d9a9e1ee6bd71cad0aa245cec9e35ba", 0x4a}, {&(0x7f0000001a40)="e48533806a6e0e205f55", 0xa}, {&(0x7f0000001a80)="94303e7912347c8074a1b3294ab4e5e71e2ae3002e4bda78362e8e0d4d71dd8527ada39257e94e4ba73cc18f244f2c75d53af668ce779b426b4f5e03586a09caea3194f263ace7cbd7a5703c91c7a71737a705baecfb3dbc2c953d0751bb41fd4fcc06c37214869a3038e51c0a87b6807dc6d091131fc7297bccb3d1dea347", 0x7f}], 0x3, &(0x7f0000001b40)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@end, @lsrr={0x83, 0x1f, 0x94, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @multicast1, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp_addr={0x44, 0x3c, 0x7, 0x1, 0x3, [{@loopback, 0x401}, {@local, 0x3}, {@rand_addr=0x64010101, 0xfffffff8}, {@local, 0xa}, {@rand_addr=0x64010100, 0x2d0f0179}, {@broadcast, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}]}}}, @ip_ttl={{0x14}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0xa0}, 0x48080) 2.658348281s ago: executing program 3 (id=2933): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64841}, 0x40000) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x20000004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000380)="05ab386f21650452041c3513e34da88d4a18679d6da23b8d7f90fc3dc1e3fbc83cb435b8abcdb1c7a6ed3a54b8ecbabe930084dead285892419f890a4fd035402cbcfb61029535eae8882c770296b00982e800302d94df1f5d0bf0717e00cd804b5df0", 0x63}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) 2.497770879s ago: executing program 0 (id=2934): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x80800) writev(r2, &(0x7f00000017c0)=[{&(0x7f00000016c0)="d244", 0x2}], 0x1) (async) socket$rds(0x15, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)='A7', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)="26d06c46727355", 0x7}], 0x1}}], 0x2, 0x4000801) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) 2.352913883s ago: executing program 4 (id=2935): syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaf2ffffffffff0800450000380000000000019078ac14000045000000ffff00000033000064010101a54973d8eb867581b123f1e0000001040022eb00000000000000000000047dc14e7ebfbfaaf5444d9e6a85e85cbfe3818462bdf32b2e85979750b0f1722f4f60f6150cee0000000000001623e0b009c5584cb3eb2694f7f3b16ce75e146b496af3e3b23d3c04cdad60539e8b8f"], 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000005dc0ff26f8fac0eb6b746ae2c7a54bcb5106e2bff", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf250200000008000b00", @ANYRES32=r1, @ANYBLOB="08000800ffffffff060001004e2000000500040003000000050002000a0000000500040001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wg0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wg1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x8004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'gretap0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x4ca, 0x8, {{0x17, 0x4, 0x1, 0x0, 0x5c, 0x68, 0x0, 0x4, 0x4, 0x0, @remote, @local, {[@end, @timestamp_prespec={0x44, 0x0, 0x6b, 0x3, 0x4, [{@remote, 0xc8}, {@private=0xa010100, 0x7}, {@multicast1, 0x800}, {@local, 0x6}, {@local, 0x4f}]}, @timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0xc, [{@broadcast, 0x5}]}, @ssrr={0x89, 0x13, 0xb0, [@loopback, @multicast1, @loopback, @loopback]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000008c0)=0x14) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9}, 0x14) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r12, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000940)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0], 0x0, 0x72, &(0x7f0000000a40)=[{}], 0x8, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xaf, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r17, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r17, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x1f}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x38, 0x3, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001780)={&(0x7f0000002380)=ANY=[@ANYBLOB="c40a0000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="9c01028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000a00000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004009400000008000100", @ANYRES32=0x0, @ANYBLOB="180102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004009100000008000600", @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003400040001000305020000007f0005047c8300001a39050006000000d200800201000000030001020000000001000994ffffff7f38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400010001003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c0102803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000a00000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000e0000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="2002028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ffffffff4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRESHEX=r1, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004008000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400030000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r4, @ANYBLOB="380102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="b8000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040004000000"], 0xac4}, 0x1, 0x0, 0x0, 0x20048804}, 0x880) 2.254653601s ago: executing program 0 (id=2936): sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000871122b182d563dad3acc18a204d40226d261da5ba69d0c43413e99f90f83ee0853d9ebf22a9e70216da221bb726c8efa5", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf251000000008000b00010000000800320004000000"], 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x20000000000000a5, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x49f4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x646}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x55}, @alu={0x7, 0x0, 0x4, 0x8, 0x8, 0x80, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x3, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20002400}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1.92273312s ago: executing program 1 (id=2937): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0x2, 0x6}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="050000000d01000000008953764242ca94b5a716c75f3d2c7dfacba2fc334c2c737b3cd3c4bf559d32d7ed230dde28736c674c6a5e82d939c52781d53ca4d7252f86146ea1607849d71d22bb4117336ae56910f409e8682950434e314e68520d5198e52564dfa65e4a1476db434da00c7303a3ed6f58c8c8f155a3f9ad7e9545b383b7793fc19bd3e9c328ccca7b0be7c34751cfc2b3"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) unshare(0xe040400) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = socket(0x2b, 0x1, 0x0) listen(r9, 0x3) ppoll(&(0x7f0000000280)=[{r9, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000080)=0x6f89c659e9b3087f) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r3) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000b000000000000000100000044000180060001000200000008000500000000000c0007002a000000000000000800090000000000090006006e6f6e6500000000080008000000000008000b0073697000"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYRES8=r10, @ANYBLOB="010028bd7000fbdbdf254f00000008000300", @ANYRESHEX=r3, @ANYBLOB='@\x00z'], 0x5c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) 1.525160577s ago: executing program 4 (id=2938): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a0000140002800c000680080001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600060088a80000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000a11a4d52281c6a00100001be00000000000000000000000a20000000000a03000000000000000000050004000900010073797a300000000040000000030a01080000000000000000050000000900010073797a30000000000900030073797a3000000002000000800800024000000012f000014000000024140000001100010000000000000000000000000a"], 0x88}}, 0x0) 1.459780316s ago: executing program 3 (id=2939): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @remote, @random="eba7b00a4ba0", @remote}}}}, 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket(0x10, 0x803, 0x800000) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@ipv4_deladdr={0x40, 0x15, 0x10, 0x70bd26, 0x25dfdbfb, {0x2, 0x20, 0x12, 0xfe, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_FLAGS={0x8}, @IFA_RT_PRIORITY={0x8}, @IFA_FLAGS={0x8}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010100}]}, 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, 0x1040, 0x4611a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x4040000) 1.280353192s ago: executing program 1 (id=2940): socket$inet6(0xa, 0x2, 0x0) (async) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x88, 0x30, 0xb, 0x5, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xfe6d, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000480)={'gretap0\x00', r4, 0x40, 0x7, 0x5, 0xdbbe, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x65, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2, {[@end, @generic={0x89, 0x10, "c7465c2b9125a09c3b2767f7036b"}, @timestamp_prespec={0x44, 0x2c, 0x2f, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x5}, {@empty, 0x80000001}, {@multicast1, 0x7}, {@private=0xa010100, 0xffffff01}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x1, [{@multicast2, 0xb}, {@empty, 0x5}]}, @timestamp={0x44, 0x1c, 0x50, 0x0, 0x9, [0x1, 0x400, 0x6, 0x81, 0x83, 0x80]}, @timestamp={0x44, 0x14, 0xf, 0x0, 0x1, [0x8, 0x3, 0x6, 0x7]}]}}}}}) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) sendmsg$inet6(r7, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[], 0x380}, 0x8080) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r8}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e24, 0x5e, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) 1.20942424s ago: executing program 4 (id=2941): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000140)=""/161, 0xa1}, {&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/54, 0x36}], 0x4, &(0x7f0000000340)=""/51, 0x33}, 0x15c000}, {{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)=""/237, 0xed}, {&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f0000000580)=""/149, 0x95}], 0x3, &(0x7f0000000680)=""/251, 0xfb}, 0x400}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000780)=""/21, 0x15}], 0x1, &(0x7f0000000800)=""/69, 0x45}, 0x201}, {{&(0x7f0000000880)=@nfc, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000900)=""/31, 0x1f}, {&(0x7f0000000940)=""/252, 0xfc}, {&(0x7f0000000a40)=""/45, 0x2d}], 0x3, &(0x7f0000000ac0)=""/131, 0x83}, 0x80}, {{&(0x7f0000000b80)=@generic, 0x80, &(0x7f0000001340)=[{&(0x7f0000000c00)=""/230, 0xe6}, {&(0x7f0000000d00)=""/225, 0xe1}, {&(0x7f0000000e00)=""/247, 0xf7}, {&(0x7f0000000f00)=""/239, 0xef}, {&(0x7f0000001000)=""/79, 0x4f}, {&(0x7f0000001080)=""/200, 0xc8}, {&(0x7f0000001180)=""/200, 0xc8}, {&(0x7f0000001280)=""/138, 0x8a}], 0x8}, 0x5}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000013c0)=""/131, 0x83}], 0x1, &(0x7f00000014c0)=""/57, 0x39}, 0x3}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001500)=""/174, 0xae}, {&(0x7f00000015c0)=""/188, 0xbc}, {&(0x7f0000001680)=""/218, 0xda}, {&(0x7f0000001780)=""/253, 0xfd}, {&(0x7f0000001880)=""/119, 0x77}, {&(0x7f0000001900)=""/11, 0xb}, {&(0x7f0000001940)=""/113, 0x71}, {&(0x7f00000019c0)=""/105, 0x69}, {&(0x7f0000001a40)=""/37, 0x25}], 0x9, &(0x7f0000001b40)=""/83, 0x53}, 0x40}], 0x7, 0x40012002, &(0x7f0000001dc0)={r1, r2+60000000}) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000001e00)={'TPROXY\x00'}, &(0x7f0000001e40)=0x1e) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001e80), 0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000001ec0)={'HL\x00'}, &(0x7f0000001f00)=0x1e) sendmsg$tipc(r3, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001f40)="0cd201a46bc3d1483e36d12f8b9c90ef3447d2b5961af8c54dd71419a817ae76a21d2bb55b070094efaef44905552b85b44975d9424a6a7abd431e277e1dad77abfcb6343be535c7a06be4480a134f38c2fa769c12ba6a84a6b5efdc7397fe6ffb4d818c5d8a7442c6e0d54a69b16c4a7bec34d74c65556db05aebf350525f6d14984b41bff3918b51b6882616fdd6822b9e37728ea92bd6aa002aef3451089d8d467ebc9b25e4b3d831ad12878c05253fff2d408b98865a24ae501b4477b46714104cac35eaccca3d49b8a17f969ee9890afa906140e3b96cbe5cc0d8d9930c89982006ff0ee11977f0c3196d31b6cbc11408e9f41561c241", 0xf9}, {&(0x7f0000002040)="44911dc0991ccbe477251ca56d15c9fcf2733a97ea819f92f3b91bd5aa0382770695e7305270d40e80953bf4bacf111f7e9d06d91c90783aac9d14b1a7997f", 0x3f}, {&(0x7f0000002080)="b5a6bda3f1870f2ef9badce6e7d25f4e540f7a85cf521dfc3d46fcb093d009acba13e96277add7b4cc9e7438cbf69eb5ab8cde41cfa1947287592f328342a653464b3fd6e839d114448ecd46ad4e5ef268b0e674de08a8af183e82de771c0fe5fe175b4b583a6e89c158384924adb045d9e1c7250e9be4ef7d3bc5552d62f8e188e64d53f6016e7ad821a93f5518b3883fe9829f026119e3b72712fb0b4225be6f65236103a30ef13b7a44ac6c1c43945725e7e3c41ea2dd8684a18390088a6286208dfc39a9b902697b85c78792071161517246509954cf31d40e10410dfa5ed3aa259d4040117bb50f3f478d762b73b8d00d6bb3acfd3f", 0xf8}, {&(0x7f0000002180)="1d242e73df5ccef4800a7b249279171701f6ebada5fdb421cdf9e684e5d94520baf6bc678e4860e17c293a16ef447b7ccedf1f6c9a9bee5bbb180dc7cf7a19758852730e4c2b4ea90af62ba89507760724", 0x51}, {&(0x7f0000002200)="d2d8fb95b4af2b833b8e02d1ec6d2b6c0b6913ad9da919eedd76b9aa662681305e1ec111d2e76af5d90d680e28269844aeb4d42e48b26c255932431c9ba09613652b04d3822a4366c4e7887b9533a56b13f55482cee1c255aa6f08dd9a222140fb409b035bd3924d39c7e57a6e9ca16e4c32e46c659f5f4386905fb64e9517959087c61fba3dc5423f5c8e2ad6e3cb09bc797661bef28684", 0x98}, {&(0x7f00000022c0)="1dc6b2c0a498475db4202ea280f53522ce9b086650be8042692e72b3bbdf5916811537925f2aab1de3fc6afe908555bbb23b413b7cca6696d1edb2700ca08b465beab6e82fa12632e2800f1df431c5ef7eff45e5b553caee5f2fca99a303c434e987a8d011142647df2245a2c8bd46", 0x6f}], 0x6, &(0x7f00000023c0)="38814d79969e863cbf597df56be8b8becd79c01ae3997cefc7152b2472693e36302dea720723897fbf1fc17781a1d91ec44df03a9315feea47dfadb261769fde47ea5ab16bdabbbbfc57aa52b5cf29e391", 0x51}, 0x80) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000002480), &(0x7f00000024c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000002680)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002540)={0xe4, 0x13, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0xa2, 0x8, "a5fb1664200c693b48ac6a2909d77e14fd6bbeb7c43d93bb6f79cf3ab74cfba7e467252d4c15904163fa99111dc2f4e64a391a1da52300f900da8339cd494cde1bd8dc2186063f3d7499579cf7b147034c4cd022c12098aa4104370c7671596d24d85a13dcc7d8429416510db51cb06de31ac7e99d693442d45db00771ffdd7f019a64976dc0a532c21625de75265cc221fc5fc3b706b65aa6a040485da2"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x4080) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000002840)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002800)={&(0x7f0000002700)={0xd8, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xb7, 0x8, "01245aaa499d28c9f72675b6d94426468d4b49d3bfaf01c6914912765ba1eae76cdb26982e8b51ccc58d909c21a019492f29b2527bac6af458e2e7635d882ab06605d705c5557d96cfa70a27d9ac92600a5c9b4a8e60006dffc54216cdcc10a03f72c630d9af8d06ccc697a73159152b889f15465c8bc61632e82eee89fe8798f242eec94316d2871608796130791e00dcc7a4c882f4037d6ee0ab387c4925a0862e12f695b738fd8dd43b4a53cdc473b2c45d"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async, rerun: 64) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000002940)={&(0x7f0000002880)=""/149, 0x95}) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000002980)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x5a73}, &(0x7f0000002a40)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000002a80)={r5, 0x7, 0x20}, &(0x7f0000002ac0)=0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000002b00)={0x2, 0x0, 0x5, 0x7f, 0x6, 0x8, 0x6, 0x0, 0x7f, 0x7, 0xff, 0x96, 0x4b, 0x80}, 0xe) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000002b40)={0x80}) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000002c00), &(0x7f0000002c40)=0xe) (async) r8 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x110, r8, 0xa5dff000) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000002c80)={r6, @in6={{0xa, 0x4e24, 0x1000, @mcast2, 0x7}}, 0x6}, &(0x7f0000002d40)=0x90) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f0000002d80)={r5, 0xf}, 0x8) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000002dc0)=@req={0x7, 0x80, 0x7, 0x5}, 0x10) (async) preadv(0xffffffffffffffff, &(0x7f0000002f40)=[{&(0x7f0000002e00)}, {&(0x7f0000002e40)=""/118, 0x76}, {&(0x7f0000002ec0)=""/71, 0x47}], 0x3, 0x6, 0x7a) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000002f80)={0x0, 'wg0\x00', {0x4}, 0xe}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000033c0)={&(0x7f0000003040)={0x37c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x57}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x61}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x55}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6b}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfc}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf48}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x2a8, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x280, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd2f3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x22c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x80, 0x9, 0x80, 0x523, 0x1ff, 0xff56, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x0, 0x8000, 0x1000, 0xd, 0x438, 0x11a2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x101, 0x9, 0x0, 0x7fff, 0xc, 0x1]}}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x3, 0x6c, 0x6c, 0x48, 0x30, 0x30, 0x1b, 0x30, 0xb, 0x4, 0x12, 0x6c, 0xb, 0x30, 0x1b, 0x1b, 0x1, 0x9, 0x76, 0x30, 0x3, 0xb, 0xb, 0x0, 0x30, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xd7, 0x5, 0x9, 0x4, 0x3, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4af, 0x40, 0x7, 0x6, 0x7, 0x8, 0x10]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x72, 0x5, 0x400, 0x1, 0x5, 0xd3b, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x5, 0x6, 0x401, 0xce4, 0xe, 0x0, 0x1000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8dfe, 0x8, 0xbaaf, 0x1, 0x8000, 0x5, 0x9, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x4}, {0x4, 0x7}, {0x5, 0x8}, {0x0, 0x2}, {0x2, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x7}, {0x1}, {0x6, 0x2}, {0x0, 0x8}, {0x5}, {0x6, 0x7}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0x5}, {0x3, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x2, 0x5}, {0x3, 0x3}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0x1}, {0x1}, {0x1, 0x4}, {0x0, 0x4}, {0x1, 0x9}, {0x4, 0xa}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0x8}, {}, {0x7, 0x2}, {0x3, 0x1}, {0x6, 0x4}, {0x2, 0x2}, {0x1, 0x8}, {0x0, 0x4}, {0x3, 0x7}, {0x2, 0x3}, {0x1, 0x3}, {0x7, 0x8}, {0x4}, {0x0, 0x4}, {0x0, 0x5}, {0x3, 0x2}, {0x1, 0x2}, {0x7, 0x5}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x16, 0x9, 0x24, 0x0, 0x2, 0x30, 0xb, 0x60, 0x2, 0x2, 0x18, 0x30, 0x3, 0x0, 0x60, 0x30, 0x5, 0x7, 0xc, 0x9, 0x1b, 0x1b, 0x18, 0x9, 0x48, 0x16, 0x3, 0xc, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xbbb6, 0x1, 0x9, 0x3, 0x9, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0xfb3, 0x9, 0x101, 0x1, 0x94c, 0xfffc]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x2}, {0x5, 0x2}, {0x1, 0x2}, {0x4, 0x7}, {0x7, 0x1}, {0x3, 0x3}, {0x5, 0x1}, {0x6, 0x7}, {0x6, 0x1a}, {0x3, 0x5}, {0x2, 0x6}, {0x0, 0x4}, {0x4, 0x6}, {0x6, 0x2}, {0x1, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x5, 0x3}, {0x4, 0x9}, {0x0, 0x8}, {0x5, 0x5}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0xa}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x2, 0x6c, 0x4, 0x18, 0x60, 0x3, 0x36, 0x48, 0x9, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1000, 0xf7, 0xda8, 0x4, 0x7fff, 0x1, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0xb, 0x2f]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x3, 0x4}, {0x0, 0x5}, {0x3, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x5, 0xa}, {0x5, 0x8}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x7, 0x200, 0x5, 0x7ff, 0x3, 0x1, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x29}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x10}, 0x9810) 1.029909115s ago: executing program 4 (id=2942): r0 = socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000002840), 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) unshare(0x28000600) r1 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) 990.010055ms ago: executing program 3 (id=2943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x2b, @dev={0xac, 0x14, 0x14, 0x19}, 0x4e21, 0x3, 'fo\x00', 0x0, 0x800, 0x2f}, 0x2c) (async) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0x20}}}]}, 0x38}}, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async) listen(r8, 0x0) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) (async) accept(r8, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x80) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x10, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70ff2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x47}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r12, &(0x7f0000000000), 0xfdef) (async) recvmsg$unix(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) (async) unshare(0x2c020400) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) 812.96814ms ago: executing program 1 (id=2944): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1, &(0x7f0000001a80)=[{0x10, 0x1, 0xc}], 0x10}}], 0x1, 0x4004804) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000043c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x9000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10}}, 0xb0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0xffffffd3, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x409}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x3}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@cf_end={{}, {}, @broadcast}, 0x10) 734.648481ms ago: executing program 3 (id=2945): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) 500.040646ms ago: executing program 3 (id=2946): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000008d2b2b0400ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000002600000018240000d3b137c5f607e057c9bc718777b99f00"/43, @ANYRES32, @ANYBLOB="00000000040000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 293.146129ms ago: executing program 0 (id=2947): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x776}, 0x50) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x2}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x30, 0x4040001}, 0x4040004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 198.899306ms ago: executing program 3 (id=2948): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64841}, 0x40000) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x20000004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000380)="05ab386f21650452041c3513e34da88d4a18679d6da23b8d7f90fc3dc1e3fbc83cb435b8abcdb1c7a6ed3a54b8ecbabe930084dead285892419f890a4fd035402cbcfb61029535eae8882c770296b00982e800302d94df1f5d0bf0717e00cd804b5df0", 0x63}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) 151.792861ms ago: executing program 1 (id=2949): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc840) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xffff7fff}, @TCA_CAKE_MPU={0x8, 0xe, 0xfd}]}}]}, 0x44}}, 0x4800) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x34) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r11}, 0x18) 4.942987ms ago: executing program 0 (id=2950): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@generic={0x1, 0xfffffffffffffada, 0x5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4a22, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) getsockopt(r1, 0x4, 0x1, 0x0, &(0x7f0000000740)) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000600)="5cfcf69891696aa89e28d0610cff00de21c32a2e8c31", 0x4f587ee247167b0f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002000000000000000004a400850000002000000085000000050000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000640)) r11 = accept$alg(r10, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a2320c7ffc6b506e6e3c7f8bd478c56beb9520ea32612337688c4905af416fe75be77c3f12e55f3f657129e6daf6844369cf70c947ab82e778a4263f9b75692d4e5c905bb9119b28241e191e54e38a5357ad888c9cd225dae2276839bfcc7dc87c05ba539e435888d6677bd00"/169, 0xb7}, {&(0x7f0000000440)="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", 0x170}, {&(0x7f0000000680)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf577cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d5655a5d05c4024b8cb0fb4", 0xa5}, {&(0x7f0000000000)="3c969cd7b866d505f85d73a8b10fc685fb80f638aaee3c68edec508be1058a40d70e2c8feb6b5ec774b4765021967802b5c9c8341bbfdfdcfe5b820000", 0x3d}, {&(0x7f0000000040)="9fbe47e87659", 0x6}], 0x5, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000840)=""/236, 0xec}, {&(0x7f0000000b40)=""/252, 0xfc}, {&(0x7f0000000c40)=""/251, 0xfb}, {&(0x7f0000000d40)=""/96, 0x60}, {&(0x7f0000000dc0)=""/91, 0xffffffffffffff7d}], 0x5, &(0x7f0000000ec0)=""/18, 0x12}, 0xf0000000}, {{&(0x7f0000000f00)=@tipc=@id, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/92, 0x5c}, {&(0x7f0000001000)=""/174, 0xae}, {&(0x7f00000010c0)=""/174, 0xae}], 0x3, &(0x7f00000012c0)=""/195, 0xc3}, 0x4}, {{&(0x7f00000013c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)=""/168, 0xa8}, {&(0x7f00000011c0)=""/210, 0xd2}], 0x2, &(0x7f0000001700)=""/241, 0xf1}, 0x7}], 0x3, 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000000080101000000000000000002000073797a030000000006000240a10000000000000000"], 0x28}}, 0x0) 0s ago: executing program 4 (id=2951): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0x700001b, 0x148, 0x128, 0x148, 0x1e8, 0x206, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0x128, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x8000, 0x4, 0x6, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, [@inet]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xff74) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="39fb030300"/14, 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) kernel console output (not intermixed with test programs): 498841][T11986] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 368.519235][T11986] vlan2: entered promiscuous mode [ 368.532039][T11986] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 370.323667][T12074] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 371.292720][T12099] __nla_validate_parse: 6 callbacks suppressed [ 371.292741][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 371.515533][T12104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1553'. [ 372.696886][T12157] netlink: 'syz.4.1567': attribute type 4 has an invalid length. [ 372.860011][T12163] netlink: 'syz.1.1570': attribute type 1 has an invalid length. [ 373.021853][T12163] bond9: entered promiscuous mode [ 373.063024][T12163] bond9: entered allmulticast mode [ 373.093816][T12163] 8021q: adding VLAN 0 to HW filter on device bond9 [ 373.171630][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1572'. [ 373.219491][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 373.254619][T12179] erspan0: entered promiscuous mode [ 373.264615][T12179] macvlan2: entered promiscuous mode [ 373.357697][T12172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1572'. [ 373.400766][T12172] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1572'. [ 373.447608][T11281] net_ratelimit: 403 callbacks suppressed [ 373.447629][T11281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.462990][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.624764][T12199] netlink: 'syz.1.1576': attribute type 10 has an invalid length. [ 373.657949][T12199] netlink: 'syz.1.1576': attribute type 10 has an invalid length. [ 373.841916][T12202] netlink: 'syz.2.1577': attribute type 1 has an invalid length. [ 374.487106][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.636423][T12226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.647698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.687342][T12226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.736951][T12240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.748082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.764503][T12240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.773583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.023540][T12248] syzkaller0: entered promiscuous mode [ 375.036586][T12248] syzkaller0: entered allmulticast mode [ 377.011084][T12212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.325795][T12291] bond4: entered promiscuous mode [ 377.388238][T12305] netlink: 'syz.2.1600': attribute type 12 has an invalid length. [ 377.440242][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1600'. [ 377.553140][T12317] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1603'. [ 377.564489][T12317] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1603'. [ 377.590794][T12310] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 377.940452][T12348] netlink: 83 bytes leftover after parsing attributes in process `syz.0.1608'. [ 378.175309][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'. [ 378.353091][T12364] netlink: 'syz.3.1613': attribute type 4 has an invalid length. [ 378.571776][ T1314] net_ratelimit: 615 callbacks suppressed [ 378.571798][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.587190][T11281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.602586][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.785384][T12381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 378.954796][T12390] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1618'. [ 379.129770][T12396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1621'. [ 379.187956][T12396] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 379.206853][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.252783][T12398] netlink: 'syz.2.1620': attribute type 10 has an invalid length. [ 379.301795][T12398] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1620'. [ 379.913189][T12422] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 379.929269][T12422] bond10 (unregistering): Released all slaves [ 380.120950][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1628'. [ 380.432762][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1632'. [ 380.566799][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.819927][T12452] syzkaller1: entered promiscuous mode [ 380.836478][T12452] syzkaller1: entered allmulticast mode [ 381.250437][T12466] RDS: rds_bind could not find a transport for 0:b3::, load rds_tcp or rds_rdma? [ 381.382566][T12470] netlink: 'syz.3.1639': attribute type 13 has an invalid length. [ 381.399974][T12470] netlink: 'syz.3.1639': attribute type 17 has an invalid length. [ 381.419548][T12471] netlink: 'syz.4.1640': attribute type 21 has an invalid length. [ 381.497780][T12468] bridge0: port 4(veth0_virt_wifi) entered disabled state [ 381.506462][T12468] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.517157][T12468] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.430001][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.493017][T12470] erspan0: left promiscuous mode [ 382.618851][T12470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.633497][T12470] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.691466][T12470] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.699806][T12470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.721681][T12470] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.729851][T12470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.743825][T12470] bridge0: port 3(vlan2) entered blocking state [ 382.751231][T12470] bridge0: port 3(vlan2) entered forwarding state [ 382.805228][T12470] veth1_to_batadv: left promiscuous mode [ 382.829283][T12470] 0·: left allmulticast mode [ 382.834527][T12470] hsr_slave_0: left allmulticast mode [ 382.840852][T12470] hsr_slave_1: left allmulticast mode [ 382.853894][T12470] bridge0: port 4(veth0_virt_wifi) entered blocking state [ 382.861262][T12470] bridge0: port 4(veth0_virt_wifi) entered forwarding state [ 382.871415][T12470] veth1_vlan: left promiscuous mode [ 382.880335][T12470] veth0_vlan: left promiscuous mode [ 382.888117][T12470] veth0_vlan: entered promiscuous mode [ 382.902728][T12470] veth1_vlan: entered promiscuous mode [ 382.920346][T12470] veth1_macvtap: left promiscuous mode [ 382.928208][T12470] veth0_macvtap: left promiscuous mode [ 382.936944][T12470] veth0_macvtap: entered promiscuous mode [ 382.954440][T12470] veth1_macvtap: entered promiscuous mode [ 382.974123][T12470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.990216][T12470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.003943][T12470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.020326][T12470] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.093694][T12470] bond1: left allmulticast mode [ 383.101708][T12470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.112109][T12470] vxcan3: left promiscuous mode [ 383.118051][T12470] vxcan3: left allmulticast mode [ 383.132170][T12470] geneve2: left promiscuous mode [ 383.138416][T12470] geneve2: left allmulticast mode [ 383.147486][T12470] veth9: left promiscuous mode [ 383.159054][T12470] geneve3: left promiscuous mode [ 383.218419][T12470] bond2: left promiscuous mode [ 383.224925][T12470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.240373][T12470] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.249956][T12470] veth1_to_batadv: entered promiscuous mode [ 383.260337][T12470] ip6gre2: left promiscuous mode [ 383.265360][T12470] ip6gre2: left allmulticast mode [ 383.281059][T12470] erspan0: entered promiscuous mode [ 383.287678][T12470] macvlan2: left promiscuous mode [ 383.299811][T12470] bond4: left promiscuous mode [ 383.304987][T12470] 8021q: adding VLAN 0 to HW filter on device bond4 [ 383.314133][T12471] netlink: 'syz.4.1640': attribute type 4 has an invalid length. [ 383.328586][T12471] netlink: 'syz.4.1640': attribute type 3 has an invalid length. [ 383.343236][T12471] __nla_validate_parse: 2 callbacks suppressed [ 383.343272][T12471] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1640'. [ 383.458941][T12496] netlink: 'syz.3.1645': attribute type 1 has an invalid length. [ 383.606582][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.952643][T12512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1649'. [ 384.054615][T12515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1650'. [ 384.122471][T11284] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 384.255136][T12520] IPv6: NLM_F_REPLACE set, but no existing node found! [ 384.328053][ T54] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 384.347623][T11284] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 384.486973][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 384.878435][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 384.966922][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.153040][T12537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1656'. [ 385.322021][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'. [ 385.494264][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'. [ 385.577113][T12559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1661'. [ 385.620190][T12559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1661'. [ 385.806313][T12562] SET target dimension over the limit! [ 386.157238][T12571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1667'. [ 386.341947][T12566] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 386.382524][ T54] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.428242][ T54] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 386.466786][ T54] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.504567][ T54] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 386.548420][ T9] team_slave_0: entered promiscuous mode [ 386.554823][ T9] veth1_to_bond: entered promiscuous mode [ 386.587472][T12580] netlink: 'syz.1.1669': attribute type 1 has an invalid length. [ 386.609014][ T9] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 386.650628][ T8525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.678249][ T54] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.705248][ T54] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 386.750416][ T54] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.789546][ T54] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 386.859255][T12594] netlink: 'syz.2.1672': attribute type 12 has an invalid length. [ 386.907980][T12594] netlink: 'syz.2.1672': attribute type 11 has an invalid length. [ 387.165051][T12603] raw_sendmsg: syz.3.1675 forgot to set AF_INET. Fix it! [ 387.400092][T12614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.487931][T12614] block nbd3: Unsupported socket: should be TCP or UNIX. [ 387.642690][T12625] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 387.764490][T12625] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 387.993461][ T30] audit: type=1107 audit(1779050584.671:3): pid=12627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 388.123420][T12634] xt_limit: Overflow, try lower: 28676/2147483648 [ 388.312660][T12636] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 388.406085][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 388.486231][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 388.692498][T12651] __nla_validate_parse: 15 callbacks suppressed [ 388.692521][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1686'. [ 388.788110][T12651] netlink: 'syz.0.1686': attribute type 21 has an invalid length. [ 388.812256][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 389.040250][T12646] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 389.059488][T12646] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 389.081675][T12646] team1: left promiscuous mode [ 389.103465][T12646] team1: left allmulticast mode [ 389.141589][T12646] team2: left promiscuous mode [ 389.158436][T12646] team2: left allmulticast mode [ 389.173079][T12646] bond1: left promiscuous mode [ 389.196480][T12646] vti0: left promiscuous mode [ 389.202837][T12646] vti0: left allmulticast mode [ 389.233025][T12646] bond5: left allmulticast mode [ 389.268859][T12646] xfrm1: left promiscuous mode [ 389.282486][T12646] xfrm1: left allmulticast mode [ 389.374993][ T54] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 389.413765][ T54] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 389.443930][ T54] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 389.462572][ T3109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.472582][T11281] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 389.688742][ T8525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.699144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.709402][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.075249][T12694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1702'. [ 390.096484][T12694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1702'. [ 390.114628][T12694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1702'. [ 390.137839][T12694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1702'. [ 390.434940][T12711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1705'. [ 390.597570][T12720] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 390.619574][T12720] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 390.644893][T12721] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 390.727334][T11281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.754576][T12722] netlink: 'syz.3.1708': attribute type 1 has an invalid length. [ 390.789215][T12722] nbd: error processing sock list [ 391.280372][T12737] netlink: 'syz.3.1712': attribute type 1 has an invalid length. [ 391.445405][T12739] gretap1: entered allmulticast mode [ 391.461169][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'. [ 391.536014][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 392.019347][T12758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1717'. [ 392.213218][T12767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1720'. [ 392.227856][T12766] x_tables: ip_tables: ah match: only valid for protocol 51 [ 392.272023][T12767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1720'. [ 392.474308][T12767] team_slave_0: left promiscuous mode [ 392.489869][T12767] veth1_to_bond: left promiscuous mode [ 392.729252][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.820763][T12767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.937173][T12767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.201931][T12795] nicvf0: tun_chr_ioctl cmd 2148553947 [ 393.817335][T12822] __nla_validate_parse: 120 callbacks suppressed [ 393.817357][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'. [ 394.037269][T12831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1734'. [ 394.246057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.767714][ T8525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.776943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.997627][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1747'. [ 396.036427][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'. [ 396.134083][T12877] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20004 [ 396.491926][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.501129][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.711176][T12912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1755'. [ 396.877161][T12919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1756'. [ 396.929962][T12917] bond11: option all_slaves_active: invalid value (127) [ 396.946827][T12917] bond11 (unregistering): Released all slaves [ 397.066877][T12927] netlink: 'syz.1.1759': attribute type 3 has an invalid length. [ 397.098167][T12927] netlink: 'syz.1.1759': attribute type 3 has an invalid length. [ 397.130457][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 397.138707][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 397.191706][T12934] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1760'. [ 397.392874][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1760'. [ 397.554401][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1763'. [ 397.772939][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 397.817993][T12947] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 398.059726][T12947] bond6 (unregistering): Released all slaves [ 398.328627][T12964] trusted_key: syz.0.1768 sent an empty control message without MSG_MORE. [ 398.360888][T12969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.809494][ T8525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.818957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.547316][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 399.590244][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 400.198578][T13031] syzkaller0: entered promiscuous mode [ 400.219322][T13031] syzkaller0: entered allmulticast mode [ 400.383537][T13034] netlink: zone id is out of range [ 401.067509][T13055] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1792'. [ 401.090899][T13055] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1792'. [ 401.131982][T13055] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 401.270465][T13066] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1796'. [ 401.852497][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.861562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.922903][T13080] netlink: 'syz.3.1799': attribute type 4 has an invalid length. [ 401.933263][T13080] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1799'. [ 402.247050][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.624341][T13098] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 402.996579][T13114] netlink: 'syz.3.1808': attribute type 1 has an invalid length. [ 403.539191][ T3109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.590707][T11276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.660276][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.709461][ T3109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.752103][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 403.794395][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 403.839480][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 403.870808][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 404.085494][T13161] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 404.170949][T13164] xt_hashlimit: size too large, truncated to 1048576 [ 404.889753][T13172] __nla_validate_parse: 1 callbacks suppressed [ 404.889774][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 405.126951][T13176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1820'. [ 406.456617][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 406.713817][T13221] netlink: 'syz.1.1830': attribute type 11 has an invalid length. [ 406.734909][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1832'. [ 406.792426][T13224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1832'. [ 406.844471][T13221] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 406.858218][T13221] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 407.519218][T13239] netlink: 'syz.0.1836': attribute type 12 has an invalid length. [ 408.943535][T13260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1842'. [ 409.304430][T13273] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1845'. [ 409.345247][T13273] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1845'. [ 410.483621][T13304] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1854'. [ 410.516197][T13304] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1854'. [ 410.555480][T13305] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1853'. [ 410.822953][T13313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1857'. [ 411.646445][T13355] IPVS: length: 35 != 12583512 [ 412.073205][T13364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1868'. [ 412.095369][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1868'. [ 412.319085][T13332] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1864'. [ 412.331668][T13332] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1864'. [ 412.557317][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 412.675087][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1869'. [ 412.723062][T13377] xfrm1: entered promiscuous mode [ 412.738322][T13377] xfrm1: entered allmulticast mode [ 412.864055][T13380] bond10: entered promiscuous mode [ 412.870520][T13380] 8021q: adding VLAN 0 to HW filter on device bond10 [ 412.887925][T13384] netlink: 'syz.0.1872': attribute type 29 has an invalid length. [ 413.595082][T13414] xt_cgroup: xt_cgroup: no path or classid specified [ 414.406861][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 414.414955][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 414.490653][T13444] x_tables: unsorted entry at hook 3 [ 414.894690][T13456] netlink: 'syz.4.1885': attribute type 4 has an invalid length. [ 415.687801][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 415.851481][T13498] netlink: 'syz.3.1894': attribute type 1 has an invalid length. [ 415.984853][T13498] bond6: entered promiscuous mode [ 415.990929][T13498] bond6: entered allmulticast mode [ 415.999094][T13498] 8021q: adding VLAN 0 to HW filter on device bond6 [ 416.010481][T13508] xt_policy: output policy not valid in PREROUTING and INPUT [ 416.027525][T13507] macvlan3: entered promiscuous mode [ 416.033029][T13507] macvlan3: entered allmulticast mode [ 416.041143][T13507] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 416.103612][T13510] __nla_validate_parse: 3 callbacks suppressed [ 416.103632][T13510] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1895'. [ 416.204541][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1898'. [ 416.293932][T13520] netlink: 'syz.1.1898': attribute type 21 has an invalid length. [ 416.310146][T13520] netlink: 'syz.1.1898': attribute type 20 has an invalid length. [ 416.412086][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1898'. [ 416.447745][T13520] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1898'. [ 416.659705][T13534] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 417.034840][T13539] netlink: 'syz.3.1903': attribute type 49 has an invalid length. [ 417.811999][T13573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1911'. [ 417.874852][T13567] netlink: 'syz.0.1909': attribute type 1 has an invalid length. [ 418.512047][T13595] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1914'. [ 418.531377][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1914'. [ 418.561936][T13567] bond8: entered promiscuous mode [ 418.577563][T13567] 8021q: adding VLAN 0 to HW filter on device bond8 [ 418.681703][T13578] bond8: (slave bridge6): making interface the new active one [ 418.701301][T13578] bridge6: entered promiscuous mode [ 418.725133][T13578] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 419.074373][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 419.111897][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 420.324754][T13650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1924'. [ 420.783442][T13652] gretap0: entered promiscuous mode [ 420.821106][T13652] gretap0: entered allmulticast mode [ 421.335085][T13671] __nla_validate_parse: 1 callbacks suppressed [ 421.335132][T13671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1929'. [ 421.403958][T13669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1929'. [ 421.634916][T13675] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1931'. [ 422.202447][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1935'. [ 422.290688][T13697] netlink: 'syz.4.1935': attribute type 10 has an invalid length. [ 422.330954][T13697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1935'. [ 422.358678][T13697] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 422.468504][T13679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.716488][T13713] hsr0: entered promiscuous mode [ 422.831043][T13718] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1941'. [ 422.988854][T13727] netlink: 'syz.0.1945': attribute type 1 has an invalid length. [ 423.128725][T13727] 8021q: adding VLAN 0 to HW filter on device bond9 [ 423.137450][T13712] hsr0: left promiscuous mode [ 423.350034][T13740] : entered promiscuous mode [ 423.422816][T13746] netlink: 'syz.1.1949': attribute type 8 has an invalid length. [ 423.710570][T13759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.430452][T13751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1952'. [ 424.460281][T13751] vlan0: entered promiscuous mode [ 424.485845][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 424.567379][T13790] sctp: [Deprecated]: syz.0.1961 (pid 13790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.567379][T13790] Use struct sctp_sack_info instead [ 424.842554][T13795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1964'. [ 425.080476][T13771] sctp: [Deprecated]: syz.3.1958 (pid 13771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.080476][T13771] Use struct sctp_sack_info instead [ 425.302024][T13812] netlink: 'syz.2.1968': attribute type 13 has an invalid length. [ 425.325874][T13812] netlink: 'syz.2.1968': attribute type 17 has an invalid length. [ 425.597174][T13823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1970'. [ 425.800208][T13812] bridge0: left promiscuous mode [ 425.811777][T13812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.824484][T13812] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.838215][T13812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.878877][T13812] veth1_to_bond: left allmulticast mode [ 425.905210][T13812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.916950][T13812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.940460][T13812] veth1_macvtap: left promiscuous mode [ 425.950414][T13812] veth0_macvtap: left promiscuous mode [ 425.958530][T13812] veth0_macvtap: entered promiscuous mode [ 425.975509][T13812] veth1_macvtap: entered promiscuous mode [ 425.992874][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.008581][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.021876][T13812] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 426.031018][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.050828][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.074322][T13812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.088524][T13812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.111253][T13812] 8021q: adding VLAN 0 to HW filter on device bond3 [ 426.161064][T13812] 8021q: adding VLAN 0 to HW filter on device bond4 [ 426.183074][T13812] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.240926][T13812] bond6: left allmulticast mode [ 426.251144][T13812] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.263789][T13812] 8021q: adding VLAN 0 to HW filter on device bond7 [ 426.308385][T13812] 8021q: adding VLAN 0 to HW filter on device bond8 [ 426.320239][T13812] 8021q: adding VLAN 0 to HW filter on device bond9 [ 426.333182][T13812] bond10: left promiscuous mode [ 426.339526][T13812] veth0_to_bond: left promiscuous mode [ 426.350363][T13812] bond10: left allmulticast mode [ 426.357055][T13812] veth0_to_bond: left allmulticast mode [ 426.366717][T13812] 8021q: adding VLAN 0 to HW filter on device bond10 [ 426.393132][T13812] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 426.459721][ T6502] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.469969][ T6502] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.500836][ T3109] bridge0: entered promiscuous mode [ 426.512799][ T3109] team_slave_0: entered promiscuous mode [ 426.519380][ T3109] veth1_to_bond: entered promiscuous mode [ 426.541646][ T3109] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 426.611569][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.619828][ T1154] bridge0: port 2(bridge_slave_1) entered listening state [ 426.856820][T13839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1976'. [ 426.867598][T13839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1976'. [ 426.914088][ T6502] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.962335][ T6502] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.439901][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 427.491974][T13860] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1980'. [ 427.586774][T13857] gtp2: entered promiscuous mode [ 427.592962][T13857] gtp2: entered allmulticast mode [ 427.796375][T13865] netlink: 'syz.1.1983': attribute type 1 has an invalid length. [ 428.854312][T13899] FAULT_INJECTION: forcing a failure. [ 428.854312][T13899] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 428.878969][T13899] CPU: 1 UID: 0 PID: 13899 Comm: syz.3.1990 Not tainted syzkaller #0 PREEMPT(full) [ 428.878998][T13899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.879023][T13899] Call Trace: [ 428.879036][T13899] [ 428.879046][T13899] dump_stack_lvl+0xe8/0x150 [ 428.879076][T13899] should_fail_ex+0x412/0x560 [ 428.879109][T13899] _copy_from_user+0x2d/0xb0 [ 428.879140][T13899] __sys_bind+0x1c6/0x410 [ 428.879170][T13899] ? __pfx___sys_bind+0x10/0x10 [ 428.879211][T13899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.879237][T13899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.879259][T13899] __x64_sys_bind+0x7a/0x90 [ 428.879286][T13899] do_syscall_64+0x15f/0xf80 [ 428.879317][T13899] ? clear_bhb_loop+0x40/0x90 [ 428.879342][T13899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.879363][T13899] RIP: 0033:0x7f003259ce59 [ 428.879383][T13899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.879400][T13899] RSP: 002b:00007f003337c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 428.879421][T13899] RAX: ffffffffffffffda RBX: 00007f0032815fa0 RCX: 00007f003259ce59 [ 428.879435][T13899] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000003 [ 428.879447][T13899] RBP: 00007f003337c090 R08: 0000000000000000 R09: 0000000000000000 [ 428.879459][T13899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.879470][T13899] R13: 00007f0032816038 R14: 00007f0032815fa0 R15: 00007ffe71ac1b08 [ 428.879501][T13899] [ 429.071451][ T84] wlan1: Trigger new scan to find an IBSS to join [ 429.767722][T13940] netlink: 'syz.2.1999': attribute type 1 has an invalid length. [ 429.898850][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1999'. [ 429.908901][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2001'. [ 429.930840][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2001'. [ 429.967916][T13940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.040971][T13951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2003'. [ 430.051932][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2003'. [ 430.106826][T13940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.133555][T13955] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2004'. [ 430.152639][T11276] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.161156][T11276] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.169395][T11276] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.212898][T13958] netlink: 'syz.1.2002': attribute type 11 has an invalid length. [ 430.223380][T13958] tipc: Invalid UDP bearer configuration [ 430.223436][T13958] tipc: Enabling of bearer rejected, failed to enable media [ 430.237672][T11276] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.369209][T13962] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 430.379505][T13962] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 430.391690][T13964] tipc: Enabled bearer , priority 0 [ 430.399016][T13963] syzkaller0: entered promiscuous mode [ 430.408900][T13963] syzkaller0: entered allmulticast mode [ 430.418105][T13962] tipc: Enabled bearer , priority 0 [ 430.534706][T13963] tipc: Resetting bearer [ 430.559626][T13960] tipc: Resetting bearer [ 430.622699][T13960] tipc: Disabling bearer [ 430.705133][T13976] syzkaller0: entered promiscuous mode [ 430.716965][T13976] syzkaller0: entered allmulticast mode [ 430.868041][T13981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.875499][T13981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.883905][T13981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.891407][T13981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.689039][T14021] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 431.725389][T14021] ip6tnl4: entered allmulticast mode [ 431.979721][T14039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.044232][T14039] v: renamed from ip6tnl0 (while UP) [ 432.551151][T14059] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 432.906758][ T48] wlan1: Trigger new scan to find an IBSS to join [ 433.143626][T14089] sch_fq: defrate 8 ignored. [ 433.393925][T14108] __nla_validate_parse: 10 callbacks suppressed [ 433.393963][T14108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2049'. [ 433.414722][T14103] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2048'. [ 433.451885][T14111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2049'. [ 433.493362][T14111] netlink: 'syz.3.2049': attribute type 4 has an invalid length. [ 433.544137][T14110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2049'. [ 433.577044][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2051'. [ 433.598242][T14110] netlink: 'syz.3.2049': attribute type 4 has an invalid length. [ 434.136722][ T48] wlan1: Creating new IBSS network, BSSID 22:fc:34:58:2b:df [ 434.219475][T14154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2063'. [ 434.279423][T14159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2063'. [ 436.801544][T14128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.029358][T14191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2068'. [ 437.076782][T14193] netlink: 'syz.4.2072': attribute type 2 has an invalid length. [ 437.084587][T14193] netlink: 'syz.4.2072': attribute type 1 has an invalid length. [ 437.104190][T14196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2073'. [ 437.113571][T14196] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2073'. [ 437.154035][T14199] netlink: 'syz.0.2074': attribute type 2 has an invalid length. [ 437.174507][T14199] netlink: 'syz.0.2074': attribute type 2 has an invalid length. [ 437.218234][T14199] netlink: 'syz.0.2074': attribute type 1 has an invalid length. [ 437.424581][T14215] netlink: 'syz.0.2078': attribute type 1 has an invalid length. [ 437.448273][ T6502] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 437.468857][T14212] netlink: 'syz.0.2078': attribute type 1 has an invalid length. [ 437.954963][T14248] netlink: 'syz.1.2085': attribute type 1 has an invalid length. [ 438.802515][T14283] validate_nla: 1 callbacks suppressed [ 438.802535][T14283] netlink: 'syz.4.2098': attribute type 21 has an invalid length. [ 438.865465][T14287] netlink: 'syz.1.2100': attribute type 1 has an invalid length. [ 438.957243][T14287] bond11: entered promiscuous mode [ 438.962889][T14287] 8021q: adding VLAN 0 to HW filter on device bond11 [ 438.982730][T14287] vlan3: entered allmulticast mode [ 438.987932][T14287] bond11: entered allmulticast mode [ 439.054154][T14287] bond11: (slave bridge9): making interface the new active one [ 439.061787][T14287] bridge9: entered promiscuous mode [ 439.067225][T14287] bridge9: entered allmulticast mode [ 439.074715][T14287] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 439.152321][T14301] ªªªªªª: renamed from wg2 [ 439.762600][T14322] __nla_validate_parse: 1 callbacks suppressed [ 439.762622][T14322] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2112'. [ 440.017848][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.027138][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.178295][T14337] netlink: 'syz.4.2116': attribute type 21 has an invalid length. [ 440.220331][T14337] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2116'. [ 440.444999][T14346] netlink: 'syz.4.2117': attribute type 8 has an invalid length. [ 440.932942][T14350] tipc: Enabled bearer , priority 0 [ 440.946399][T14350] syzkaller0: entered promiscuous mode [ 440.951936][T14350] syzkaller0: entered allmulticast mode [ 440.968965][T14355] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 440.977522][T14355] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 440.986007][T14355] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 441.003549][T14349] tipc: Resetting bearer [ 441.055008][T14349] tipc: Disabling bearer [ 441.254237][T14362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2121'. [ 441.595570][T14376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2123'. [ 442.078833][T14384] sit0: entered promiscuous mode [ 442.107557][T14384] netlink: 'syz.3.2127': attribute type 1 has an invalid length. [ 442.115595][T14384] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2127'. [ 442.438795][T14390] netlink: 'syz.2.2129': attribute type 1 has an invalid length. [ 442.758601][T14402] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 443.427334][T14424] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 443.434360][T14424] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 443.442807][T14424] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 443.498538][T14420] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2136'. [ 443.511550][T14424] openvswitch: netlink: Message has 8 unknown bytes. [ 443.594960][T14429] netlink: 'syz.2.2139': attribute type 13 has an invalid length. [ 443.773301][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2139'. [ 443.938507][T14429] 8021q: adding VLAN 0 to HW filter on device bond11 [ 444.153932][ T84] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.340256][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 444.512657][T14456] netlink: 'syz.4.2145': attribute type 83 has an invalid length. [ 446.561563][T14467] tipc: Enabling of bearer rejected, media not registered [ 446.594143][T14472] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2148'. [ 446.619670][T14472] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2148'. [ 446.662712][T14475] netlink: 'syz.3.2148': attribute type 3 has an invalid length. [ 446.673688][T14471] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2148'. [ 446.696723][T14471] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2148'. [ 446.710479][T14475] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2148'. [ 446.886230][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 446.938740][T14489] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2151'. [ 446.938901][T14491] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 446.959367][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 447.033543][T14478] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2152'. [ 447.044322][T14481] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2152'. [ 447.085053][T14491] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 447.096239][T14491] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 447.810396][T14521] team1: entered promiscuous mode [ 447.817342][T14521] team1: entered allmulticast mode [ 447.827593][T14521] 8021q: adding VLAN 0 to HW filter on device team1 [ 447.853602][T14525] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 447.895668][T14525] team2: entered promiscuous mode [ 447.900833][T14525] team2: entered allmulticast mode [ 447.923395][T14525] 8021q: adding VLAN 0 to HW filter on device team2 [ 448.218637][T14544] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.424709][T14544] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.473413][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 448.494666][T14566] netlink: zone id is out of range [ 448.751583][T14576] ip6erspan0: entered allmulticast mode [ 448.764095][T14576] tipc: Enabled bearer , priority 10 [ 448.775471][T14576] netlink: 'syz.1.2180': attribute type 3 has an invalid length. [ 448.934419][T14544] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.607973][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 449.876302][ T5824] tipc: Node number set to 3290435705 [ 450.165238][T14607] netlink: 'syz.1.2191': attribute type 32 has an invalid length. [ 450.176786][T14544] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.248439][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 450.524273][T14624] netlink: 'syz.4.2195': attribute type 11 has an invalid length. [ 451.175211][T14623] xfrm0: entered allmulticast mode [ 451.294157][ T1154] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.367413][ T1154] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.444772][ T1154] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.528520][T11281] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.630046][T14657] nbd: must specify an index to disconnect [ 451.724656][T14668] netlink: 'syz.2.2205': attribute type 83 has an invalid length. [ 451.787788][T14671] __nla_validate_parse: 7 callbacks suppressed [ 451.787807][T14671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2203'. [ 452.008378][T14681] IPv6: NLM_F_CREATE should be specified when creating new route [ 452.036786][ T30] audit: type=1804 audit(1779050648.731:4): pid=14673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2208" name="/newroot/461/cgroup.controllers" dev="tmpfs" ino=2391 res=1 errno=0 [ 452.040075][T14681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 452.061926][ T30] audit: type=1800 audit(1779050648.771:5): pid=14673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2208" name="cgroup.controllers" dev="tmpfs" ino=2391 res=0 errno=0 [ 452.067912][T14681] IPv6: NLM_F_CREATE should be set when creating new route [ 452.067978][T14681] IPv6: NLM_F_CREATE should be set when creating new route [ 452.068057][T14681] IPv6: NLM_F_CREATE should be set when creating new route [ 452.169862][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.414975][T14694] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2213'. [ 452.730312][T14710] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 452.775154][T14706] gretap0: left promiscuous mode [ 452.796391][T14701] netlink: 'syz.3.2216': attribute type 16 has an invalid length. [ 452.851654][T14701] netlink: 'syz.3.2216': attribute type 17 has an invalid length. [ 452.990389][T14701] sit0: left promiscuous mode [ 453.063616][T14723] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2218'. [ 453.129614][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2219'. [ 453.297432][T14701] xfrm0: left allmulticast mode [ 453.344602][T14701] veth0_vlan: left promiscuous mode [ 453.352496][T14701] veth0_vlan: entered promiscuous mode [ 453.373155][T14731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2220'. [ 453.488404][T14701] 8021q: adding VLAN 0 to HW filter on device bond5 [ 453.497040][T14701] gretap1: left allmulticast mode [ 453.506254][T14701] bond6: left promiscuous mode [ 453.511175][T14701] bond6: left allmulticast mode [ 453.517525][T14701] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 453.524796][T14701] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 453.532531][T14701] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 453.594089][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 453.607793][T14717] 5nè‹Ò: entered promiscuous mode [ 453.623446][T14719] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2219'. [ 453.779250][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 453.801031][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 453.815281][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 453.848590][ T1154] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 453.869500][ T1154] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 453.879575][ T5824] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 454.026448][ T5824] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 454.045134][T14755] netlink: 'syz.3.2227': attribute type 1 has an invalid length. [ 454.085333][T14755] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2227'. [ 454.144322][T14755] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 454.148950][T14754] netlink: 'syz.3.2227': attribute type 1 has an invalid length. [ 454.217944][T14754] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2227'. [ 454.258668][T14754] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 454.407486][T11281] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 454.434074][T11281] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 454.447200][ T5824] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 454.527085][ T5824] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 454.582655][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 454.627691][T14780] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 454.647579][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 454.790712][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2234'. [ 454.889841][ T5824] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 454.889864][ T5824] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 455.176501][T14796] netlink: 'syz.2.2237': attribute type 11 has an invalid length. [ 455.457357][T14813] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 456.118711][T14841] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 456.154883][T14841] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 456.178392][T14845] lo speed is unknown, defaulting to 1000 [ 456.194513][T14845] lo speed is unknown, defaulting to 1000 [ 456.208853][T14845] lo speed is unknown, defaulting to 1000 [ 456.222789][T14845] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 456.244058][T14845] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 456.272725][T14845] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 456.291412][T14845] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 456.350247][T14845] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 456.430909][T14845] lo speed is unknown, defaulting to 1000 [ 456.483177][T14845] lo speed is unknown, defaulting to 1000 [ 456.513301][T14845] lo speed is unknown, defaulting to 1000 [ 456.535289][T14845] lo speed is unknown, defaulting to 1000 [ 456.546839][T14845] lo speed is unknown, defaulting to 1000 [ 456.651319][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 457.164243][T14893] netlink: 'syz.2.2259': attribute type 21 has an invalid length. [ 457.182556][T14893] netlink: 'syz.2.2259': attribute type 22 has an invalid length. [ 457.197555][T14893] netlink: 'syz.2.2259': attribute type 23 has an invalid length. [ 457.211848][T14893] netlink: 'syz.2.2259': attribute type 25 has an invalid length. [ 457.223691][T14893] netlink: 'syz.2.2259': attribute type 26 has an invalid length. [ 457.233359][T14893] __nla_validate_parse: 3 callbacks suppressed [ 457.233374][T14893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2259'. [ 457.250223][T14895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.278328][T14898] netlink: 'syz.1.2261': attribute type 22 has an invalid length. [ 457.286528][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 457.297115][T14895] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.310058][T14901] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2260'. [ 457.320644][T14898] netlink: 'syz.1.2261': attribute type 1 has an invalid length. [ 457.335609][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'. [ 457.347616][T14898] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2261'. [ 457.762669][T14915] netlink: 'syz.2.2264': attribute type 10 has an invalid length. [ 457.772247][T14915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2264'. [ 457.846359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.856827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.865317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.032887][T14895] veth1_macvtap: left promiscuous mode [ 458.040383][T14895] veth0_macvtap: left promiscuous mode [ 458.049725][T14895] veth0_macvtap: entered promiscuous mode [ 458.059632][T14895] veth1_macvtap: entered promiscuous mode [ 458.073946][T14895] 8021q: adding VLAN 0 to HW filter on device team1 [ 458.082575][T14895] 8021q: adding VLAN 0 to HW filter on device team2 [ 458.090244][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 458.104016][T14895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.115293][T14895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.126716][T14895] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.139774][T14895] gretap0: entered promiscuous mode [ 458.148410][T14895] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.157807][T14895] 8021q: adding VLAN 0 to HW filter on device bond5 [ 458.171251][T14895] 8021q: adding VLAN 0 to HW filter on device bond6 [ 458.180216][T14895] 8021q: adding VLAN 0 to HW filter on device bond7 [ 458.226602][T11276] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.233825][T11276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.326491][T14915] geneve1: entered promiscuous mode [ 458.337075][T14915] team0: Port device geneve1 added [ 458.353437][ T6502] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 458.373834][ T6502] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.393244][ T6502] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.412479][ T6502] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 458.441839][ T6502] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.470052][ T6502] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.523167][ T6502] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 458.546729][ T6502] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.563691][ T6502] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.567856][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 458.577970][ T6502] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 458.589201][ T6502] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.608247][ T6502] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.627268][ T6502] bond7: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 458.648754][T14937] netlink: 1304 bytes leftover after parsing attributes in process `syz.1.2267'. [ 458.682373][ T6502] bond7: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 458.739663][ T6502] bond7: (slave veth3): making interface the new active one [ 458.753948][ T6502] bond7: active interface up! [ 458.927710][T14950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.939004][T14956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.973405][T14959] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2273'. [ 459.113529][T14965] xt_TPROXY: Can be used only with -p tcp or -p udp [ 459.252193][T14974] lo speed is unknown, defaulting to 1000 [ 459.651807][T14987] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2281'. [ 459.683957][T14992] bond12: option lacp_active: invalid value (8) [ 459.700874][T14992] bond12 (unregistering): Released all slaves [ 460.072965][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'. [ 460.082021][T15020] netlink: 'syz.2.2290': attribute type 1 has an invalid length. [ 460.163603][T15020] bond12: entered promiscuous mode [ 460.170120][T15020] 8021q: adding VLAN 0 to HW filter on device bond12 [ 460.249389][T15027] ipvlan1: entered allmulticast mode [ 460.257871][T15027] bond12: entered allmulticast mode [ 460.274695][T15025] ip6erspan0: entered promiscuous mode [ 460.283189][T15025] ip6erspan0: entered allmulticast mode [ 460.321296][T15020] ipvlan2: entered allmulticast mode [ 460.401656][T15027] bond12: (slave bridge10): making interface the new active one [ 460.419924][T15027] bridge10: entered promiscuous mode [ 460.433532][T15027] bridge10: entered allmulticast mode [ 460.448841][T15027] bond12: (slave bridge10): Enslaving as an active interface with an up link [ 460.507761][T15039] macvtap0: entered promiscuous mode [ 461.107844][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'. [ 461.864724][T15101] netlink: 'syz.2.2311': attribute type 1 has an invalid length. [ 462.599887][T15128] syzkaller0: entered promiscuous mode [ 462.621552][T15128] syzkaller0: entered allmulticast mode [ 463.551712][T15167] __nla_validate_parse: 2 callbacks suppressed [ 463.551732][T15167] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2320'. [ 463.607675][ C0] net_ratelimit: 2 callbacks suppressed [ 463.607692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.622149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.630852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.928740][T15143] syzkaller1: entered promiscuous mode [ 465.934299][T15143] syzkaller1: entered allmulticast mode [ 466.102569][T15161] lo speed is unknown, defaulting to 1000 [ 466.247141][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 466.257855][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 466.291324][T15188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2327'. [ 466.365386][ T30] audit: type=1804 audit(1779050663.061:6): pid=15188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2327" name="/newroot/489/cgroup.controllers" dev="tmpfs" ino=2537 res=1 errno=0 [ 466.399983][ T30] audit: type=1800 audit(1779050663.061:7): pid=15188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2327" name="cgroup.controllers" dev="tmpfs" ino=2537 res=0 errno=0 [ 466.430356][T15201] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2330'. [ 466.449179][T15201] netlink: 'syz.1.2330': attribute type 9 has an invalid length. [ 466.464905][ T30] audit: type=1804 audit(1779050663.131:8): pid=15188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2327" name="/newroot/489/cgroup.controllers" dev="tmpfs" ino=2537 res=1 errno=0 [ 466.490934][T15201] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2330'. [ 466.503354][T15206] netlink: 548 bytes leftover after parsing attributes in process `syz.4.2328'. [ 466.515169][T15201] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2330'. [ 466.754323][T15212] bridge0: port 1(vlan2) entered blocking state [ 466.768236][T15212] bridge0: port 1(vlan2) entered disabled state [ 466.781904][T15212] vlan2: entered allmulticast mode [ 466.796556][T15212] vlan2: entered promiscuous mode [ 466.844203][T15217] netlink: 'syz.1.2332': attribute type 1 has an invalid length. [ 466.886826][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 466.908316][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 466.953788][T15219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2332'. [ 466.997709][T15219] 8021q: adding VLAN 0 to HW filter on device bond12 [ 467.494029][T15240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2336'. [ 467.538997][T15240] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2336'. [ 467.569682][T15242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2339'. [ 467.914339][ T30] audit: type=1804 audit(1779050664.611:9): pid=15257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2344" name="/newroot/451/cgroup.controllers" dev="tmpfs" ino=2336 res=1 errno=0 [ 467.971201][ T30] audit: type=1800 audit(1779050664.651:10): pid=15257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2344" name="cgroup.controllers" dev="tmpfs" ino=2336 res=0 errno=0 [ 468.849092][T15302] __nla_validate_parse: 4 callbacks suppressed [ 468.849115][T15302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2354'. [ 468.869070][T15303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2355'. [ 469.329906][T15326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2358'. [ 469.366244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.374971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.383681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.400058][T15330] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2364'. [ 469.465305][T15335] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2366'. [ 469.554268][T15337] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.596922][T15337] bond10: (slave veth0_to_bond): Releasing active interface [ 469.648240][T15337] bond0: (slave 45ÿ): Releasing backup interface [ 469.681684][T15337] veth1_to_bond: left promiscuous mode [ 469.700717][T15337] team0: Port device veth1_to_bond removed [ 469.722777][T15337] bond0: (slave bond_slave_1): Releasing backup interface [ 469.752529][T15337] team_slave_0: left promiscuous mode [ 469.778652][T15337] team0: Port device team_slave_0 removed [ 469.792862][T15337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.808546][T15337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.832248][T15337] bond0: (slave veth1_to_hsr): Releasing backup interface [ 469.863762][T15337] geneve1: left promiscuous mode [ 469.891385][T15337] team0: Port device geneve1 removed [ 469.918785][T15337] team0: Port device netdevsim1 removed [ 469.938612][T15337] bond2: (slave gretap1): Releasing active interface [ 469.960033][T15337] bond3: (slave veth7): Releasing active interface [ 469.980877][T15337] bond5: (slave bridge3): Releasing active interface [ 470.009376][T15337] bond7: (slave veth9): Releasing active interface [ 470.056221][T15337] bond12: (slave bridge10): Releasing backup interface [ 470.068576][T15337] bridge10: left promiscuous mode [ 470.077501][T15337] bridge10: left allmulticast mode [ 470.108736][T15337] vlan2: left allmulticast mode [ 470.113989][T15337] bridge_slave_1: left allmulticast mode [ 470.121145][T15337] vlan2: left promiscuous mode [ 470.127336][T15337] bridge_slave_1: left promiscuous mode [ 470.133627][T15337] bridge0: port 1(vlan2) entered disabled state [ 470.213150][T15343] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 470.221794][T15343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.318679][T15361] xt_hashlimit: size too large, truncated to 1048576 [ 470.330414][T15356] bond8 (unregistering): Released all slaves [ 470.653750][T15377] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2379'. [ 470.672971][T15380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.697359][T15381] netlink: 'syz.1.2378': attribute type 21 has an invalid length. [ 470.715778][T15381] netlink: 'syz.1.2378': attribute type 22 has an invalid length. [ 470.738259][T15381] netlink: 'syz.1.2378': attribute type 23 has an invalid length. [ 470.757614][T15381] netlink: 'syz.1.2378': attribute type 25 has an invalid length. [ 470.783634][T15381] netlink: 'syz.1.2378': attribute type 26 has an invalid length. [ 470.810461][T15381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2378'. [ 471.031021][T15401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2383'. [ 471.057796][T15401] nbd: must specify at least one socket [ 471.191550][T15393] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 471.221983][T15409] netlink: 'syz.0.2387': attribute type 1 has an invalid length. [ 471.320804][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 471.344633][T15415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2391'. [ 471.407647][T15422] xt_addrtype: ipv6 does not support BROADCAST matching [ 472.033369][T15450] netlink: 'syz.2.2398': attribute type 58 has an invalid length. [ 472.668311][T15473] tipc: Enabling of bearer rejected, failed to enable media [ 472.834128][T15482] vlan3: entered promiscuous mode [ 472.845156][T15482] gretap0: entered promiscuous mode [ 472.909526][T15480] lo speed is unknown, defaulting to 1000 [ 472.944999][T15481] lo speed is unknown, defaulting to 1000 [ 473.286866][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 474.213654][T15534] xt_hashlimit: overflow, try lower: 281474976710656/6 [ 474.258033][T15531] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 474.277166][T15531] bond13: (slave lo): Enslaving as an active interface with an up link [ 474.290820][T15531] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 474.424291][T15544] netlink: 'syz.2.2426': attribute type 12 has an invalid length. [ 474.454243][T15544] __nla_validate_parse: 3 callbacks suppressed [ 474.454264][T15544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2426'. [ 474.512473][T15541] smc: net device wlan0 applied user defined pnetid SYZ0 [ 474.838582][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2433'. [ 474.972492][T15573] lo speed is unknown, defaulting to 1000 [ 475.127690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.136436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.145104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.153819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.162557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.171214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.110094][T15613] netlink: 'syz.1.2443': attribute type 1 has an invalid length. [ 476.134301][T15613] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2443'. [ 476.200024][T15619] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2444'. [ 476.211339][T15619] netlink: 'syz.0.2444': attribute type 9 has an invalid length. [ 476.220831][T15619] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2444'. [ 476.231658][T15619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2444'. [ 476.271535][T15613] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20001 [ 476.464905][T15624] netlink: 'syz.0.2444': attribute type 21 has an invalid length. [ 476.509795][T15624] IPv6: NLM_F_CREATE should be specified when creating new route [ 476.560688][T15624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 476.568037][T15624] IPv6: NLM_F_CREATE should be set when creating new route [ 476.575348][T15624] IPv6: NLM_F_CREATE should be set when creating new route [ 476.582680][T15624] IPv6: NLM_F_CREATE should be set when creating new route [ 477.044756][T15657] tipc: Enabled bearer , priority 10 [ 477.115493][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'. [ 477.208725][T15665] netlink: 'syz.0.2444': attribute type 21 has an invalid length. [ 477.235537][T15665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 477.652892][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2457'. [ 477.730243][T15684] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 478.028888][T15702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2462'. [ 478.608878][T15720] netlink: 'syz.4.2466': attribute type 39 has an invalid length. [ 478.630735][T15726] lo speed is unknown, defaulting to 1000 [ 478.724691][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 478.738817][T15730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.749745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.755426][T15729] syzkaller1: entered promiscuous mode [ 478.765249][T15729] syzkaller1: entered allmulticast mode [ 478.766508][T15730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.832820][T15732] lo speed is unknown, defaulting to 1000 [ 479.448999][T15727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.821801][T15773] Can't find ip_set type hash:nS÷Ô`ort,net [ 480.166228][ C1] net_ratelimit: 3 callbacks suppressed [ 480.166251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.180548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.189137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.197917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.206515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.215097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.279813][T15796] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.287134][T15796] bridge0: port 2(bridge_slave_1) entered listening state [ 480.294701][T15796] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.302098][T15796] bridge0: port 1(bridge_slave_0) entered listening state [ 480.314433][T15796] bridge0: entered promiscuous mode [ 480.380850][T15796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.432281][T15796] veth1_vlan: left promiscuous mode [ 480.452927][T15796] veth0_vlan: left promiscuous mode [ 480.469921][T15796] veth0_vlan: entered promiscuous mode [ 480.498245][T15796] veth1_vlan: entered promiscuous mode [ 480.529322][T15796] tipc: Resetting bearer [ 480.547345][T15796] tipc: Resetting bearer [ 480.577258][T15796] veth0_macvtap: left promiscuous mode [ 480.592792][T15796] veth0_macvtap: entered promiscuous mode [ 480.608821][T15796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.620322][T15796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.630288][T15796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.640289][T15796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.654183][T15796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 480.665319][T15796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 480.841953][T15796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 480.858090][T15796] erspan0: entered promiscuous mode [ 480.900389][T15796] bond5: left promiscuous mode [ 480.910456][T15796] erspan1: left promiscuous mode [ 480.929109][T15796] 8021q: adding VLAN 0 to HW filter on device bond5 [ 480.973554][T15796] 8021q: adding VLAN 0 to HW filter on device bond6 [ 481.008545][T15796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.092055][T15796] bond9: left promiscuous mode [ 481.103487][T15796] xfrm1: left promiscuous mode [ 481.113173][T15796] bond10: left promiscuous mode [ 481.127683][T15796] bond11: left promiscuous mode [ 481.133558][T15796] bridge9: left promiscuous mode [ 481.161884][T11276] bond7: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 481.173068][T11276] bond7: (slave veth0_to_bond): making interface the new active one [ 481.188837][T11276] bond7: active interface up! [ 481.204420][ T3109] lo speed is unknown, defaulting to 1000 [ 481.279672][ T54] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.294035][ T54] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 481.306934][ T54] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.316064][ T54] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 481.326483][T15806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.359382][ T54] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.370491][ T54] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 481.379819][ T54] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.389704][ T54] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 481.415466][T15812] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.426534][T15812] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 481.452502][T15812] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.477752][T15812] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 481.503557][T15817] syzkaller0: entered promiscuous mode [ 481.509534][T15817] syzkaller0: entered allmulticast mode [ 481.516120][ C1] Dropped outbound packet type=88ca [ 481.597422][T15818] tipc: Enabled bearer , priority 0 [ 481.639300][T15812] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.654440][T15812] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 481.667195][T15812] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.679132][T15812] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 481.718274][T15818] tipc: Resetting bearer [ 481.739109][T15817] __nla_validate_parse: 2 callbacks suppressed [ 481.739131][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2488'. [ 481.841950][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 481.881975][T15812] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.898365][T15812] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 481.912588][T15827] can: request_module (can-proto-3) failed. [ 481.916048][T15812] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.930889][T15812] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 481.950465][T15816] tipc: Resetting bearer [ 482.001648][T15816] tipc: Disabling bearer [ 482.025398][T15812] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.044505][T15812] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 482.059164][T15812] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.069613][T15812] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 482.097736][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2495'. [ 482.129604][T15843] ip6tnl5: entered allmulticast mode [ 482.140380][T15845] netlink: 'syz.2.2496': attribute type 1 has an invalid length. [ 482.150382][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2496'. [ 482.166951][T15845] netlink: 'syz.2.2496': attribute type 1 has an invalid length. [ 482.233676][ T84] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.245863][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 482.256934][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 482.267932][ T84] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 482.300715][ T84] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 482.331873][ T84] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 482.395096][ T1154] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.425439][ T1154] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 482.454506][ T1154] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 482.469324][ T1154] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 482.543745][ T1154] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.561806][ T1154] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 482.575799][ C1] Dropped outbound packet type=88ca [ 482.581194][ T1154] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 482.590300][ T1154] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 482.668298][ T1154] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.677204][ T1154] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 482.685522][ T1154] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 482.694557][ T1154] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 482.976946][T15883] netlink: 'syz.4.2507': attribute type 1 has an invalid length. [ 483.055541][T15883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 483.097148][T15883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2507'. [ 483.167475][T15889] bond4: (slave gretap1): making interface the new active one [ 483.238965][T15889] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 483.285170][T15907] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 483.294811][T15883] bond4 (unregistering): (slave gretap1): Releasing active interface [ 483.353194][T15883] bond4 (unregistering): Released all slaves [ 483.372161][T15912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2516'. [ 483.470495][T15905] ipip0: entered promiscuous mode [ 483.529584][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 483.573482][T15908] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ipip0 [ 483.605800][ C1] Dropped outbound packet type=88ca [ 483.623495][T15908] gretap1: entered promiscuous mode [ 483.644481][T15908] gretap1: entered allmulticast mode [ 483.937319][T15930] bond1: entered allmulticast mode [ 484.029165][T15936] lo speed is unknown, defaulting to 1000 [ 484.042750][T15937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2524'. [ 484.536338][T15966] netlink: 'syz.0.2529': attribute type 11 has an invalid length. [ 484.625530][T15954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2529'. [ 484.645739][ C1] Dropped outbound packet type=88ca [ 485.023280][T15988] netlink: 'syz.0.2536': attribute type 10 has an invalid length. [ 485.031587][T15988] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2536'. [ 485.213051][T15988] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 485.685736][ C1] Dropped outbound packet type=88ca [ 485.730043][T16025] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2543'. [ 485.748239][ T30] audit: type=1804 audit(1779050682.441:11): pid=16018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2541" name="/newroot/488/memory.events" dev="tmpfs" ino=2515 res=1 errno=0 [ 485.823025][ T30] audit: type=1800 audit(1779050682.441:12): pid=16018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2541" name="memory.events" dev="tmpfs" ino=2515 res=0 errno=0 [ 486.068337][T16045] netlink: 'syz.0.2549': attribute type 1 has an invalid length. [ 486.345838][T16062] netlink: 'syz.2.2553': attribute type 13 has an invalid length. [ 486.373570][T16062] netlink: 'syz.2.2553': attribute type 17 has an invalid length. [ 486.428824][T16053] : option downdelay: invalid value (18446744073709547007) [ 486.445336][T16053] : option downdelay: allowed values 0 - 2147483647 [ 486.464124][T16053]  (unregistering): Released all slaves [ 486.646035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.654753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.663391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.672328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.680950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.689569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.698194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.706822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.715418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.726884][ C1] Dropped outbound packet type=88ca [ 486.770820][T16082] netlink: 'syz.1.2555': attribute type 30 has an invalid length. [ 486.893879][T16087] netlink: 'syz.4.2556': attribute type 13 has an invalid length. [ 486.914879][T16087] netlink: 'syz.4.2556': attribute type 17 has an invalid length. [ 487.108478][T16059] tipc: Resetting bearer [ 487.618976][T16062] bridge0: left promiscuous mode [ 487.629737][T16062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.649266][T16062] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.676629][T16062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.765724][ C1] Dropped outbound packet type=88ca [ 487.788864][T16062] veth1_macvtap: left promiscuous mode [ 487.798351][T16062] veth0_macvtap: left promiscuous mode [ 487.807602][T16062] veth0_macvtap: entered promiscuous mode [ 487.826771][T16062] veth1_macvtap: entered promiscuous mode [ 487.847121][T16062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.863509][T16062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.877037][T16062] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 487.886105][T16062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.900500][T16062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.913313][T16062] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 487.921250][T16062] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 487.936589][T16062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.954908][T16062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.978150][T16062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 488.036451][T16062] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.055822][T16062] 8021q: adding VLAN 0 to HW filter on device bond5 [ 488.120535][T16062] 8021q: adding VLAN 0 to HW filter on device bond6 [ 488.130607][T16062] 8021q: adding VLAN 0 to HW filter on device bond7 [ 488.179261][T16062] 8021q: adding VLAN 0 to HW filter on device bond8 [ 488.189604][T16062] 8021q: adding VLAN 0 to HW filter on device bond9 [ 488.211244][T16062] 8021q: adding VLAN 0 to HW filter on device bond10 [ 488.236782][T16062] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 488.300178][T16062] 8021q: adding VLAN 0 to HW filter on device bond11 [ 488.313642][T16062] bond12: left promiscuous mode [ 488.319325][T16062] 8021q: adding VLAN 0 to HW filter on device bond12 [ 488.328056][T16062] ipvlan1: left allmulticast mode [ 488.333783][T16062] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 488.343918][T16062] ipvlan2: left allmulticast mode [ 488.349277][T16062] bond12: left allmulticast mode [ 488.355083][T16062] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 488.368566][T16062] 8021q: adding VLAN 0 to HW filter on device bond13 [ 488.472841][ T29] bridge0: entered promiscuous mode [ 488.544927][T16087] gretap0: left promiscuous mode [ 488.566037][T16087] gretap0: left allmulticast mode [ 488.729229][ T30] audit: type=1804 audit(1779050685.431:13): pid=16137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2561" name="/newroot/493/cgroup.controllers" dev="tmpfs" ino=2541 res=1 errno=0 [ 488.788543][T16087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.805776][ C1] Dropped outbound packet type=88ca [ 488.814513][ T30] audit: type=1800 audit(1779050685.431:14): pid=16137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2561" name="cgroup.controllers" dev="tmpfs" ino=2541 res=0 errno=0 [ 488.968766][T16087] xfrm0: left allmulticast mode [ 489.024827][T16087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 489.053643][T16087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 489.511418][T16165] __nla_validate_parse: 4 callbacks suppressed [ 489.511440][T16165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2566'. [ 489.561112][T16165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2566'. [ 489.641076][T16087] veth1_vlan: left promiscuous mode [ 489.701796][T16087] vlan0: left promiscuous mode [ 489.708743][T16087] veth1_vlan: entered promiscuous mode [ 489.725271][T16087] veth1_macvtap: left promiscuous mode [ 489.733160][T16087] veth0_macvtap: left promiscuous mode [ 489.756282][T16087] veth0_macvtap: entered promiscuous mode [ 489.771129][T16087] veth1_macvtap: entered promiscuous mode [ 489.786336][T16087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.800416][T16087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.813093][T16087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.825353][T16087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.838613][T16087] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 489.855704][ C1] Dropped outbound packet type=88ca [ 489.867162][ T54] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.904153][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.911439][ T48] bridge0: port 1(bridge_slave_0) entered listening state [ 490.057845][ T54] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.067768][ T54] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.095984][ T54] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.186346][T16182] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2570'. [ 490.254806][T16182] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2570'. [ 490.283542][ T6502] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 490.366212][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2573'. [ 490.497779][T16184] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2571'. [ 490.584223][T16199] lo speed is unknown, defaulting to 1000 [ 490.895762][ C1] Dropped outbound packet type=88ca [ 491.059947][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'. [ 491.099366][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2581'. [ 491.159859][T16231] xt_hashlimit: size too large, truncated to 1048576 [ 491.171700][T16230] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2584'. [ 491.314051][T16238] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 491.332385][T16238] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 491.344596][T16238] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 491.668245][T16259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2592'. [ 491.766275][ C1] net_ratelimit: 1 callbacks suppressed [ 491.766297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.780651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.789339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.856013][T11284] wlan1: Trigger new scan to find an IBSS to join [ 491.868306][T16268] netlink: 'syz.2.2595': attribute type 29 has an invalid length. [ 491.925674][ C1] Dropped outbound packet type=88ca [ 492.399832][T16294] netlink: 'syz.0.2607': attribute type 3 has an invalid length. [ 492.912525][T16324] syzkaller1: entered promiscuous mode [ 492.925044][T16324] syzkaller1: entered allmulticast mode [ 492.965780][ C1] Dropped outbound packet type=88ca [ 493.392126][T16344] syzkaller0: entered promiscuous mode [ 493.400134][T16344] syzkaller0: entered allmulticast mode [ 493.416091][T16345] syzkaller0: entered promiscuous mode [ 493.421906][T16345] syzkaller0: entered allmulticast mode [ 494.005763][ C1] Dropped outbound packet type=88ca [ 494.101522][T16376] xt_hashlimit: size too large, truncated to 1048576 [ 494.258973][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 494.887535][ T54] wlan1: Trigger new scan to find an IBSS to join [ 495.057526][ C1] Dropped outbound packet type=88ca [ 495.839823][T11276] wlan1: Creating new IBSS network, BSSID f6:6b:72:5b:ec:3b [ 496.095735][ C1] Dropped outbound packet type=88ca [ 496.451710][T16366] __nla_validate_parse: 8 callbacks suppressed [ 496.451731][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2635'. [ 496.477915][T16366] netlink: 'syz.3.2635': attribute type 26 has an invalid length. [ 496.490002][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2635'. [ 496.514202][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2635'. [ 496.534597][T16366] netlink: 'syz.3.2635': attribute type 26 has an invalid length. [ 496.574135][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2635'. [ 496.663583][T16391] vlan0: entered promiscuous mode [ 496.884109][T16410] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2651'. [ 496.994720][T16413] netlink: 'syz.4.2654': attribute type 12 has an invalid length. [ 497.013278][T16413] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.2654'. [ 497.070763][T16420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2655'. [ 497.125764][ C1] Dropped outbound packet type=88ca [ 497.526036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.534719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.668642][T16403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.165809][ C1] Dropped outbound packet type=88ca [ 498.289006][T16456] netlink: 'syz.2.2665': attribute type 1 has an invalid length. [ 498.378593][T16460] macvlan1: entered promiscuous mode [ 498.392217][T16460] macvlan1: entered allmulticast mode [ 498.407657][T16460] bond14: entered promiscuous mode [ 498.425089][T16460] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 498.440244][T16460] bond14: left promiscuous mode [ 498.548514][T16471] bridge10: entered allmulticast mode [ 498.820922][T16484] netlink: 'syz.3.2672': attribute type 1 has an invalid length. [ 498.905434][T16484] bond8: (slave bridge3): making interface the new active one [ 498.915118][T16484] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 499.015899][T16484] macvlan4: entered promiscuous mode [ 499.026427][T16484] macvlan4: entered allmulticast mode [ 499.033398][T16484] bond8: entered promiscuous mode [ 499.039221][T16484] bridge3: entered promiscuous mode [ 499.048161][T16484] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 499.056144][T16484] bond8: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 499.072801][T16484] bond8: left promiscuous mode [ 499.077708][T16484] bridge3: left promiscuous mode [ 499.139258][T16490] netlink: 'syz.0.2674': attribute type 1 has an invalid length. [ 499.147481][T16490] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2674'. [ 499.205868][ C1] Dropped outbound packet type=88ca [ 499.259090][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2675'. [ 500.245803][ C1] Dropped outbound packet type=88ca [ 501.285805][ C1] Dropped outbound packet type=88ca [ 501.446978][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.325752][ C1] Dropped outbound packet type=88ca [ 502.728287][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 503.286267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.294751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.303374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.369928][ C1] Dropped outbound packet type=88ca [ 504.405747][ C1] Dropped outbound packet type=88ca [ 505.285875][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 505.445776][ C1] Dropped outbound packet type=88ca [ 506.485745][ C1] Dropped outbound packet type=88ca [ 507.535761][ C1] Dropped outbound packet type=88ca [ 508.406055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.414501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.423066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.565741][ C1] Dropped outbound packet type=88ca [ 509.605813][ C1] Dropped outbound packet type=88ca [ 510.407168][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 510.414417][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 510.645814][ C1] Dropped outbound packet type=88ca [ 511.687125][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 511.687413][ C1] Dropped outbound packet type=88ca [ 512.725781][ C1] Dropped outbound packet type=88ca [ 513.765788][ C1] Dropped outbound packet type=88ca [ 514.166089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.174532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.183118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.245944][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 514.805799][ C1] Dropped outbound packet type=88ca [ 515.527703][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 515.845820][ C1] Dropped outbound packet type=88ca [ 516.885734][ C1] Dropped outbound packet type=88ca [ 517.925774][ C1] Dropped outbound packet type=88ca [ 518.726068][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 518.965774][ C1] Dropped outbound packet type=88ca [ 519.926285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.934744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.943352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.006651][ C1] Dropped outbound packet type=88ca [ 520.442256][T16538] syzkaller1: entered promiscuous mode [ 520.455397][T16538] syzkaller1: entered allmulticast mode [ 520.645798][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.653179][ C0] bridge0: topology change detected, propagating [ 521.045754][ C1] Dropped outbound packet type=88ca [ 521.426052][T16576] netlink: zone id is out of range [ 521.438674][T16576] netlink: zone id is out of range [ 521.450196][T16576] netlink: zone id is out of range [ 521.461641][T16576] netlink: zone id is out of range [ 521.473279][T16576] netlink: zone id is out of range [ 521.485448][T16576] netlink: zone id is out of range [ 521.500343][T16576] netlink: zone id is out of range [ 521.675341][T16565] tipc: Resetting bearer [ 521.685749][T16595] SET target dimension over the limit! [ 522.085754][ C1] Dropped outbound packet type=88ca [ 522.114117][T16612] netlink: 'syz.0.2704': attribute type 1 has an invalid length. [ 522.495836][T16590] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2700'. [ 522.508751][T11276] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.518444][T11276] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.532953][T11276] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.551565][T11276] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.629865][T16612] 8021q: adding VLAN 0 to HW filter on device bond13 [ 522.751298][T16627] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2707'. [ 522.768235][T16616] bond13: (slave ip6gretap0): making interface the new active one [ 522.791298][T16616] bond13: (slave ip6gretap0): Enslaving as an active interface with an up link [ 522.802326][T11276] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.816192][T11276] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.825483][T11276] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.857534][T11276] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.013538][T16639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2710'. [ 523.125660][ C1] Dropped outbound packet type=88ca [ 523.203105][T16646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2712'. [ 523.247973][T16642] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 523.357348][T16639] syzkaller0: entered promiscuous mode [ 523.363063][T16639] syzkaller0: entered allmulticast mode [ 523.487363][T16656] netlink: 'syz.2.2713': attribute type 11 has an invalid length. [ 524.175751][ C1] Dropped outbound packet type=88ca [ 524.973509][ C1] net_ratelimit: 339 callbacks suppressed [ 524.973532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.987908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.208018][ C1] Dropped outbound packet type=88ca [ 526.229576][T16674] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2717'. [ 526.250608][ C1] Dropped outbound packet type=88ca [ 526.411810][T16681] netlink: 'syz.3.2718': attribute type 1 has an invalid length. [ 526.459217][T16681] netlink: 'syz.3.2718': attribute type 1 has an invalid length. [ 526.726527][T16703] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2723'. [ 526.740332][T16703] netlink: 'syz.1.2723': attribute type 1 has an invalid length. [ 526.757550][T16703] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2723'. [ 527.001710][T16717] netlink: 'syz.3.2725': attribute type 8 has an invalid length. [ 527.064428][T16719] tipc: New replicast peer: 255.255.255.255 [ 527.077664][T16719] tipc: Enabled bearer , priority 10 [ 527.160042][T16723] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2728'. [ 527.234735][T16723] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 527.244473][T16723] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 527.295680][ C1] Dropped outbound packet type=88ca [ 527.342365][T16727] x_tables: duplicate underflow at hook 1 [ 527.351265][T16727] x_tables: duplicate underflow at hook 1 [ 527.357823][T16727] x_tables: duplicate underflow at hook 1 [ 527.364020][T16727] x_tables: duplicate underflow at hook 1 [ 527.370779][T16727] x_tables: duplicate underflow at hook 1 [ 527.377379][T16727] x_tables: duplicate underflow at hook 1 [ 527.383408][T16727] x_tables: duplicate underflow at hook 1 [ 527.392789][T16727] x_tables: duplicate underflow at hook 1 [ 527.407532][T16727] x_tables: duplicate underflow at hook 1 [ 527.413712][T16727] x_tables: duplicate underflow at hook 1 [ 527.628596][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2731'. [ 528.167624][T16759] netlink: 'syz.1.2735': attribute type 11 has an invalid length. [ 528.196130][ T9] tipc: Node number set to 3898677227 [ 528.246054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.254797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.325718][ C1] Dropped outbound packet type=88ca [ 528.579453][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'. [ 528.579453][T16775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'. [ 528.622254][T16778] netlink: 'syz.1.2741': attribute type 1 has an invalid length. [ 529.083129][T16808] netlink: 'syz.0.2748': attribute type 2 has an invalid length. [ 529.092812][T16808] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2748'. [ 529.104284][T16808] netlink: 'syz.0.2748': attribute type 58 has an invalid length. [ 529.116017][T16808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2748'. [ 529.140694][T16785] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.152646][T16785] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.164950][T16785] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 529.365693][ C1] Dropped outbound packet type=88ca [ 529.401373][T16785] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.412133][T16785] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.423606][T16785] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 529.548442][T16824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2752'. [ 529.638544][T16785] team0: Failed to send options change via netlink (err -105) [ 529.678909][T16785] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 529.708948][T16785] team0: Port device netdevsim1 removed [ 529.760897][T16785] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.785912][T16833] iwpm_parse_nlmsg: Invalid attribute (msg type Remote Mapping info ret = -34) [ 529.792894][T16785] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.820931][T16785] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 529.882702][T16824] ip6gre3: entered promiscuous mode [ 529.901001][T16824] ip6gre3: entered allmulticast mode [ 529.923039][T16831] netlink: 'syz.4.2752': attribute type 6 has an invalid length. [ 529.970104][T16831] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2752'. [ 530.067752][T16785] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.092557][T16785] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.116755][T16785] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 530.179242][T16830] lo speed is unknown, defaulting to 1000 [ 530.405730][ C1] Dropped outbound packet type=88ca [ 530.892086][ T3294] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.910052][ T3294] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 530.935870][ T3294] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.031735][T11284] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.043663][T11284] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 531.057021][T16871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2762'. [ 531.075669][T11284] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.125897][T16871] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 531.143410][T16871] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 531.159884][ T48] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.182909][ T48] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 531.194812][T16871] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 531.203283][ T48] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.234160][ T48] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.243668][ T48] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 531.253337][ T48] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.445719][ C1] Dropped outbound packet type=88ca [ 531.465552][T16896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2770'. [ 531.520506][T16888] lo speed is unknown, defaulting to 1000 [ 531.583841][T16901] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2773'. [ 531.593718][T16901] netlink: ct family unspecified [ 531.632619][T16903] netlink: 'syz.0.2774': attribute type 8 has an invalid length. [ 531.771165][T16911] netlink: 'syz.0.2776': attribute type 1 has an invalid length. [ 531.817452][T16911] bond14: entered promiscuous mode [ 531.823319][T16911] 8021q: adding VLAN 0 to HW filter on device bond14 [ 532.090225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.098880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.172943][T16926] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 532.193015][T16926] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 532.463607][T16950] vlan0: entered promiscuous mode [ 532.485798][ C1] Dropped outbound packet type=88ca [ 532.840694][T16978] netlink: 'syz.1.2794': attribute type 2 has an invalid length. [ 532.860987][T16978] netlink: 'syz.1.2794': attribute type 8 has an invalid length. [ 532.881354][T16978] __nla_validate_parse: 4 callbacks suppressed [ 532.881374][T16978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2794'. [ 533.030951][T16991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2799'. [ 533.111453][T17001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2801'. [ 533.173908][T17008] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2802'. [ 533.197239][T17013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 533.204601][T17013] IPv6: NLM_F_CREATE should be set when creating new route [ 533.229193][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2802'. [ 533.525720][ C1] Dropped outbound packet type=88ca [ 533.869794][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2811'. [ 534.069544][T17051] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20002 [ 534.220590][T17060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2818'. [ 534.238302][T17057] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2817'. [ 534.257231][T17057] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2817'. [ 534.285117][T17060] bond9: entered promiscuous mode [ 534.291194][T17060] 8021q: adding VLAN 0 to HW filter on device bond9 [ 534.323120][T17065] 8021q: adding VLAN 0 to HW filter on device bond9 [ 534.342115][T17065] bond9: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 534.356527][T17065] bond9: (slave ip6gre4): Error -95 calling set_mac_address [ 534.565739][ C1] Dropped outbound packet type=88ca [ 534.640167][T17080] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 535.270963][T17101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2829'. [ 535.440762][T17103] syzkaller1: entered promiscuous mode [ 535.462944][T17103] syzkaller1: entered allmulticast mode [ 535.562665][T17108] Unsupported ieee802154 address type: 0 [ 535.605719][ C1] Dropped outbound packet type=88ca [ 535.906292][T17127] openvswitch: netlink: EtherType 80 is less than min 600 [ 536.566133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.575140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.583904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.646256][ C1] Dropped outbound packet type=88ca [ 536.852711][T17150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.417903][T17182] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 537.472683][T17178] lo speed is unknown, defaulting to 1000 [ 537.514811][ T30] audit: type=1800 audit(1779050734.211:15): pid=17182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2855" name="cgroup.controllers" dev="tmpfs" ino=2984 res=0 errno=0 [ 537.685662][ C1] Dropped outbound packet type=88ca [ 538.091674][T17208] __nla_validate_parse: 3 callbacks suppressed [ 538.091694][T17208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2860'. [ 538.118683][T17207] netlink: 'syz.3.2860': attribute type 10 has an invalid length. [ 538.550843][T17217] netlink: 'syz.3.2861': attribute type 1 has an invalid length. [ 538.662651][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 538.679377][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 538.690329][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 538.699339][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 538.709445][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 538.737082][ C1] Dropped outbound packet type=88ca [ 538.752662][T17217] 8021q: adding VLAN 0 to HW filter on device bond10 [ 538.886535][T17223] bond10: (slave gretap3): making interface the new active one [ 538.916782][T17223] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 539.331353][T17246] netlink: 'syz.1.2866': attribute type 1 has an invalid length. [ 539.427848][T17240] syzkaller0: entered promiscuous mode [ 539.433521][T17240] syzkaller0: entered allmulticast mode [ 539.512161][T17253] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2868'. [ 539.733823][T17270] netlink: 'syz.1.2870': attribute type 1 has an invalid length. [ 539.765768][ C1] Dropped outbound packet type=88ca [ 540.495957][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.503323][ C1] bridge0: topology change detected, propagating [ 540.511024][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.518338][ C1] bridge0: topology change detected, propagating [ 540.812152][ T5633] Bluetooth: hci5: command tx timeout [ 540.816135][ C1] Dropped outbound packet type=88ca [ 541.847373][ C1] Dropped outbound packet type=88ca [ 542.326078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.334737][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.343381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.739341][T17266] ip6gre2: entered promiscuous mode [ 542.754566][T17266] ip6gre2: entered allmulticast mode [ 542.895672][ C1] Dropped outbound packet type=88ca [ 542.901559][ T5633] Bluetooth: hci5: command tx timeout [ 543.043644][T17312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2873'. [ 543.258811][T17315] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 543.635474][T17165] lo speed is unknown, defaulting to 1000 [ 543.925653][ C1] Dropped outbound packet type=88ca [ 543.938906][T17347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2879'. [ 543.988204][T17347] netlink: 'syz.0.2879': attribute type 16 has an invalid length. [ 544.013556][T17347] netlink: 'syz.0.2879': attribute type 17 has an invalid length. [ 544.302117][T17347] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 544.669112][T17382] netlink: 'syz.0.2884': attribute type 1 has an invalid length. [ 544.720596][T17382] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2884'. [ 544.811035][T17366] syzkaller0: entered promiscuous mode [ 544.827183][T17366] syzkaller0: entered allmulticast mode [ 544.847241][T17378] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 544.857838][T17378] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 544.966338][ C1] Dropped outbound packet type=88ca [ 544.972853][ T5633] Bluetooth: hci5: command tx timeout [ 546.013939][ C1] Dropped outbound packet type=88ca [ 547.053956][ C1] Dropped outbound packet type=88ca [ 547.059375][ T5633] Bluetooth: hci5: command tx timeout [ 547.446088][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.454796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.463507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.919902][T11276] bond1: left allmulticast mode [ 547.978715][T17420] ipt_ECN: cannot use operation on non-tcp rule [ 548.086173][ C1] Dropped outbound packet type=88ca [ 548.092001][T17426] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2893'. [ 549.084486][T11276] bond0 (unregistering): Released all slaves [ 549.097824][T11276] bond1 (unregistering): Released all slaves [ 549.114262][T11276] bond2 (unregistering): Released all slaves [ 549.132373][T11276] bond3 (unregistering): Released all slaves [ 549.138540][ C1] Dropped outbound packet type=88ca [ 549.161975][T11276] bond4 (unregistering): Released all slaves [ 549.178639][T11276] bond5 (unregistering): Released all slaves [ 549.200069][T11276] bond6 (unregistering): Released all slaves [ 549.219683][T11276] bond7 (unregistering): Released all slaves [ 549.238928][T11276] bond8 (unregistering): Released all slaves [ 549.264865][T11276] bond9 (unregistering): Released all slaves [ 549.282198][T11276] bond10 (unregistering): Released all slaves [ 549.299925][T11276] bond11 (unregistering): Released all slaves [ 549.331502][T11276] bond12 (unregistering): Released all slaves [ 549.351418][T11276] bond13 (unregistering): (slave lo): Releasing backup interface [ 549.361205][T11276] bond13 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 549.379535][T11276] bond13 (unregistering): Released all slaves [ 549.395926][T11276] bond14 (unregistering): Released all slaves [ 549.425440][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2893'. [ 549.810344][T11276] 5nè‹Ò: left promiscuous mode [ 549.824274][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2897'. [ 549.908331][T17452] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2899'. [ 550.080381][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2903'. [ 550.105979][T17473] netlink: 'syz.4.2903': attribute type 5 has an invalid length. [ 550.125130][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2903'. [ 550.165655][ C1] Dropped outbound packet type=88ca [ 550.601928][T17473] geneve3: entered promiscuous mode [ 550.612739][T17473] geneve3: entered allmulticast mode [ 550.620379][T11276] tipc: Disabling bearer [ 550.641243][T11276] tipc: Disabling bearer [ 550.674957][T11276] tipc: Left network mode [ 550.683277][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 550.807231][ T48] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 550.838729][ T48] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 550.871679][T17455] lo speed is unknown, defaulting to 1000 [ 550.962042][T17490] netlink: 'syz.4.2906': attribute type 6 has an invalid length. [ 551.015801][ T48] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 551.029705][T17466] lo speed is unknown, defaulting to 1000 [ 551.124256][ T48] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 551.200961][T17165] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.208179][ C1] Dropped outbound packet type=88ca [ 551.250053][T17165] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.270825][T17165] bridge_slave_0: entered allmulticast mode [ 551.294159][T17165] bridge_slave_0: entered promiscuous mode [ 551.374993][T17165] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.391548][T17165] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.406725][T17165] bridge_slave_1: entered allmulticast mode [ 551.421429][T17165] bridge_slave_1: entered promiscuous mode [ 551.680057][T17165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.708115][T17495] macsec1: entered promiscuous mode [ 551.884206][T17517] netlink: 'syz.0.2909': attribute type 1 has an invalid length. [ 551.943729][T17165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.983073][T17517] bond15: entered promiscuous mode [ 551.989750][T17517] 8021q: adding VLAN 0 to HW filter on device bond15 [ 552.159867][T17165] team0: Port device team_slave_0 added [ 552.210991][T17165] team0: Port device team_slave_1 added [ 552.245658][ C1] Dropped outbound packet type=88ca [ 552.280630][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 552.375531][T17165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.383416][T17531] netlink: 'syz.0.2910': attribute type 161 has an invalid length. [ 552.403536][T17165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.479487][T17165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.510529][T17165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.534154][T17165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.595780][T17165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.206129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.214969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.223687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.296487][ C1] Dropped outbound packet type=88ca [ 553.420685][T17165] hsr_slave_0: entered promiscuous mode [ 553.445483][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2914'. [ 553.467773][T17165] hsr_slave_1: entered promiscuous mode [ 553.901026][T17570] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 553.945704][T17565] 8021q: VLANs not supported on xfrm0 [ 553.982224][T17574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2921'. [ 554.196144][T17566] lo speed is unknown, defaulting to 1000 [ 554.325848][ C1] Dropped outbound packet type=88ca [ 555.214006][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 555.354073][T17601] lo speed is unknown, defaulting to 1000 [ 555.365706][ C1] Dropped outbound packet type=88ca [ 555.633525][T17609] lo speed is unknown, defaulting to 1000 [ 556.405652][ C1] Dropped outbound packet type=88ca [ 556.771163][T17615] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 557.234679][T17660] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2931'. [ 557.445859][ C1] Dropped outbound packet type=88ca [ 557.665789][T11276] IPVS: stop unused estimator thread 0... [ 557.826008][T17675] netlink: 'syz.4.2935': attribute type 12 has an invalid length. [ 557.875766][T17675] netlink: 'syz.4.2935': attribute type 29 has an invalid length. [ 557.947973][T17675] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2935'. [ 557.982796][T17675] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2935'. [ 558.244944][T17694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2937'. [ 558.300533][T17679] lo speed is unknown, defaulting to 1000 [ 558.472304][T17699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.485645][ C1] Dropped outbound packet type=88ca [ 558.502340][T17165] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 558.524633][T17700] openvswitch: netlink: Invalid VLAN frame [ 558.543143][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 558.564429][T17165] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 558.593550][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 558.660132][T17165] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 558.708820][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 558.903818][T17165] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 558.951697][T17165] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 558.976130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.984837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.993479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.279984][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2945'. [ 559.535697][ C1] Dropped outbound packet type=88ca [ 559.554422][T17165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.595104][T17165] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.634154][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.641417][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.706215][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.713484][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.804614][T17760] netlink: 'syz.1.2949': attribute type 1 has an invalid length. [ 560.147999][ T54] [ 560.150390][ T54] ============================================ [ 560.156568][ T54] WARNING: possible recursive locking detected [ 560.162774][ T54] syzkaller #0 Not tainted [ 560.167344][ T54] -------------------------------------------- [ 560.173535][ T54] kworker/u8:4/54 is trying to acquire lock: [ 560.179547][ T54] ffff888021fa6158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 560.189703][ T54] [ 560.189703][ T54] but task is already holding lock: [ 560.197123][ T54] ffff88807db4f158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 560.207034][ T54] [ 560.207034][ T54] other info that might help us debug this: [ 560.215126][ T54] Possible unsafe locking scenario: [ 560.215126][ T54] [ 560.222612][ T54] CPU0 [ 560.225931][ T54] ---- [ 560.229240][ T54] lock(&qdisc_xmit_lock_key#3); [ 560.234313][ T54] lock(&qdisc_xmit_lock_key#3); [ 560.239387][ T54] [ 560.239387][ T54] *** DEADLOCK *** [ 560.239387][ T54] [ 560.247594][ T54] May be due to missing lock nesting notation [ 560.247594][ T54] [ 560.255951][ T54] 11 locks held by kworker/u8:4/54: [ 560.261177][ T54] #0: ffff888055fc2140 ((wq_completion)bond5){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 560.272144][ T54] #1: ffffc90000bf7c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 560.285042][ T54] #2: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 560.294866][ T54] #3: ffffffff8e95ce00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 560.304947][ T54] #4: ffff888052334228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 560.317606][ T54] #5: ffff88807db4f158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 560.327921][ T54] #6: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 560.328476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.336943][ T54] #7: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 560.337006][ T54] #8: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 560.363692][ T54] #9: ffffffff8e95ce00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 560.373644][ T54] #10: ffff88807a1a3228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 560.386378][ T54] [ 560.386378][ T54] stack backtrace: [ 560.392289][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 560.392309][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 560.392321][ T54] Workqueue: bond5 bond_alb_monitor [ 560.392347][ T54] Call Trace: [ 560.392354][ T54] [ 560.392360][ T54] dump_stack_lvl+0xe8/0x150 [ 560.392472][ T54] print_deadlock_bug+0x279/0x290 [ 560.392509][ T54] __lock_acquire+0x253f/0x2cf0 [ 560.392531][ T54] ? unwind_next_frame+0xa6/0x2550 [ 560.392566][ T54] ? sch_direct_xmit+0x15f/0x4c0 [ 560.392588][ T54] lock_acquire+0x106/0x350 [ 560.392603][ T54] ? sch_direct_xmit+0x15f/0x4c0 [ 560.392631][ T54] _raw_spin_lock+0x2e/0x40 [ 560.392706][ T54] ? sch_direct_xmit+0x15f/0x4c0 [ 560.392727][ T54] sch_direct_xmit+0x15f/0x4c0 [ 560.392751][ T54] ? __pfx_sch_direct_xmit+0x10/0x10 [ 560.392773][ T54] ? arp_create+0x100/0x980 [ 560.392796][ T54] __dev_queue_xmit+0x180f/0x3950 [ 560.392818][ T54] ? __dev_queue_xmit+0x2b6/0x3950 [ 560.392838][ T54] ? arpt_do_table+0x256/0x1e30 [ 560.392888][ T54] ? __pfx___dev_queue_xmit+0x10/0x10 [ 560.392909][ T54] ? __pfx_arpt_do_table+0x10/0x10 [ 560.392926][ T54] ? trace_kmem_cache_alloc+0x29/0xe0 [ 560.392976][ T54] ? NF_HOOK+0xa2/0x3c0 [ 560.392997][ T54] NF_HOOK+0x33a/0x3c0 [ 560.393018][ T54] ? __pfx_arp_xmit_finish+0x10/0x10 [ 560.393038][ T54] ? NF_HOOK+0xa2/0x3c0 [ 560.393057][ T54] ? __pfx_NF_HOOK+0x10/0x10 [ 560.393076][ T54] ? lock_acquire+0x106/0x350 [ 560.393093][ T54] ? __pfx_arp_xmit_finish+0x10/0x10 [ 560.393114][ T54] ? inet_addr_type_dev_table+0x25/0x190 [ 560.393221][ T54] arp_xmit+0x16c/0x270 [ 560.393240][ T54] ? arp_xmit+0x23/0x270 [ 560.393260][ T54] arp_solicit+0xbe0/0xe40 [ 560.393284][ T54] ? arp_solicit+0x119/0xe40 [ 560.393305][ T54] ? __pfx_arp_solicit+0x10/0x10 [ 560.393331][ T54] ? __pfx_arp_solicit+0x10/0x10 [ 560.393351][ T54] __neigh_event_send+0xf05/0x14d0 [ 560.393424][ T54] neigh_resolve_output+0x198/0x750 [ 560.393447][ T54] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 560.393475][ T54] ? ip_finish_output2+0x3c2/0x1070 [ 560.393497][ T54] ip_finish_output2+0xca9/0x1070 [ 560.393519][ T54] ? ip_skb_dst_mtu+0x80b/0xa50 [ 560.393541][ T54] ? ip_finish_output+0x40e/0x530 [ 560.393563][ T54] ip_output+0x29f/0x450 [ 560.393584][ T54] ? ip_output+0x5b/0x450 [ 560.393605][ T54] iptunnel_xmit+0x621/0xd10 [ 560.393657][ T54] ip_tunnel_xmit+0x193a/0x1f20 [ 560.393710][ T54] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 560.393733][ T54] ? __pfx_gre_build_header+0x10/0x10 [ 560.393778][ T54] __gre_xmit+0x19e/0x240 [ 560.393797][ T54] ? __pfx___gre_xmit+0x10/0x10 [ 560.393819][ T54] erspan_xmit+0xa41/0x14d0 [ 560.393860][ T54] ? dev_queue_xmit_nit+0x2d/0xad0 [ 560.393886][ T54] ? __pfx_erspan_xmit+0x10/0x10 [ 560.393910][ T54] dev_hard_start_xmit+0x2cd/0x830 [ 560.393934][ T54] sch_direct_xmit+0x251/0x4c0 [ 560.393958][ T54] ? __pfx_sch_direct_xmit+0x10/0x10 [ 560.393980][ T54] ? kthread+0x310/0x470 [ 560.394004][ T54] __dev_queue_xmit+0x180f/0x3950 [ 560.394024][ T54] ? __dev_queue_xmit+0x2b6/0x3950 [ 560.394046][ T54] ? __pfx___dev_queue_xmit+0x10/0x10 [ 560.394064][ T54] ? rcu_is_watching+0x15/0xb0 [ 560.394089][ T54] ? trace_kmem_cache_alloc+0x29/0xe0 [ 560.394110][ T54] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 560.394139][ T54] ? alb_send_lp_vid+0x14e/0x550 [ 560.394169][ T54] alb_send_lp_vid+0x348/0x550 [ 560.394194][ T54] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 560.394223][ T54] alb_send_learning_packets+0x12c/0x300 [ 560.394246][ T54] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 560.394269][ T54] ? bond_alb_monitor+0xf8/0x17e0 [ 560.394293][ T54] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 560.394317][ T54] bond_alb_monitor+0x3d5/0x17e0 [ 560.394341][ T54] ? bond_alb_monitor+0xf8/0x17e0 [ 560.394362][ T54] ? __pfx_bond_alb_monitor+0x10/0x10 [ 560.394385][ T54] ? process_scheduled_works+0xa70/0x1860 [ 560.394401][ T54] ? process_scheduled_works+0xa70/0x1860 [ 560.394418][ T54] process_scheduled_works+0xb5d/0x1860 [ 560.394448][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 560.394467][ T54] ? assign_work+0x3d5/0x5e0 [ 560.394484][ T54] worker_thread+0xa53/0xfc0 [ 560.394512][ T54] kthread+0x389/0x470 [ 560.394532][ T54] ? __pfx_worker_thread+0x10/0x10 [ 560.394548][ T54] ? __pfx_kthread+0x10/0x10 [ 560.394568][ T54] ret_from_fork+0x514/0xb70 [ 560.394600][ T54] ? __pfx_ret_from_fork+0x10/0x10 [ 560.394616][ T54] ? __switch_to+0xc79/0x1410 [ 560.394640][ T54] ? __pfx_kthread+0x10/0x10 [ 560.394662][ T54] ret_from_fork_asm+0x1a/0x30 [ 560.394689][ T54] [ 560.846630][ C1] Dropped outbound packet type=88ca [ 561.203212][T17760] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.210676][T17760] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.342860][T17760] bridge_slave_0: left allmulticast mode [ 561.361024][T17760] bridge_slave_0: left promiscuous mode [ 561.367802][T17760] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.391340][T17760] bridge_slave_1: left allmulticast mode [ 561.405734][T17760] bridge_slave_1: left promiscuous mode [ 561.411679][T17760] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.424384][T17760] bond7: (slave veth0_to_bond): Releasing active interface [ 561.490923][T17760] `: Port device team_slave_0 removed [ 561.526729][T17760] `: Port device team_slave_1 removed [ 561.620836][T17760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 561.651366][ T9] lo speed is unknown, defaulting to 1000 [ 561.671716][ T9] syz2: Port: 1 Link DOWN [ 561.911998][T17165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.935656][ C1] Dropped outbound packet type=88ca [ 561.955344][T17165] veth0_vlan: entered promiscuous mode [ 561.965227][T17165] veth1_vlan: entered promiscuous mode [ 561.987112][T17165] veth0_macvtap: entered promiscuous mode [ 561.996994][T17165] veth1_macvtap: entered promiscuous mode [ 562.011430][T17165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.023830][T17165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.036303][ T84] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.045215][ T84] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.059450][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.068630][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.097363][T17165] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 562.126028][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.131050][T17165] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 562.142907][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.181580][T11281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.190376][T11281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.886393][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.965744][ C1] Dropped outbound packet type=88ca [ 564.015728][ C1] Dropped outbound packet type=88ca [ 564.725982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.734475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.742983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.045688][ C1] Dropped outbound packet type=88ca [ 566.095700][ C1] Dropped outbound packet type=88ca [ 567.125701][ C1] Dropped outbound packet type=88ca [ 568.165720][ C1] Dropped outbound packet type=88ca [ 569.215694][ C1] Dropped outbound packet type=88ca [ 569.765963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.774368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.783093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog