last executing test programs: 4.927265524s ago: executing program 4 (id=18569): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0xffffffff}, 0x50) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmsg(r1, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x142) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000500)="e87a0e9ad61304a8b59000957bb26569908190442261bd645dc4107d26b7c92a738b761561ce44df2ced095748dc743e5c9200e5999a78d91c85eb4107ae76b32d299f377fd2cfcf553d7e0d9edf717c1decca77dce55fc276f7f81cab7e69bd368f1972184d9d3c26e00c5f7394c9a2b598817e62bf28986cf7eca20c29fa8b95b42e8969613d54ee6dc69cbda7fc7b75737a08ad6faddaf4d1e6d8e9c3be42eb8a33b7e8da0d0e64977b5f43a106a6602ed862b1dea23b09ec303a", 0xbc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000208000b400000000070000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000003800018008000100636d70002c00028018000380090001009c979b32261fbabdae20b34f870e0000080001400000000208000240000000000900010073797a30"], 0x10c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet6(0xa, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond0\x00'}) shutdown(0xffffffffffffffff, 0x1) unshare(0x20000400) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.259535716s ago: executing program 4 (id=18572): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "4ab27a5bbf34f8bb", "801f5316346f6be5e67ad1b39021558717e2a4267e0661c1025ae933d34a275f", "1e4fba9a", "c6bbc09f5c48fece"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2}, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(0xffffffffffffffff, 0x3) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, 0x0}, 0x40085) sendfile(r0, r3, 0x0, 0x20000000002) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r5, &(0x7f0000000000)={&(0x7f0000000300)=@in6={0xa, 0x4e20, 0x20000f07, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x80, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 3.895704487s ago: executing program 2 (id=18575): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x64, 0xd99d}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r4, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xa, &(0x7f0000000580)=@raw=[@alu={0x4, 0x0, 0xc, 0x9, 0x7, 0x1, 0xfffffffffffffff0}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @jmp={0x5, 0x1, 0x1, 0x5, 0x5, 0xfffffffffffffff8, 0x8}, @ldst={0x1, 0x2, 0x0, 0x499577cbc3120a9b, 0x4, 0x2, 0x4}, @alu={0x4, 0x1, 0x8, 0x9, 0xa, 0xc, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit], &(0x7f0000000600)='syzkaller\x00', 0xe8, 0xbf, &(0x7f0000000640)=""/191, 0x41000, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[r1, r1, r1, r0, r1], &(0x7f0000000780)=[{0x0, 0x2, 0xd, 0x2}], 0x10, 0x6}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "bfbfa4bd535b3efe", "77ad5d4fec403bfc0ea13c4f321e3363", "b46cf287", "05bc4943def2665b"}, 0x28) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r11, 0xe09, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11c, 0x11c, 0x5, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0x10000}, @fwd={0x9}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @restrict={0x9, 0x0, 0x0, 0xb, 0x5}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x2, 0x4}, {0x4, 0x2}, {0x9, 0x2}, {0x10, 0x2}, {0x5, 0x1}, {0x6}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}]}, @enum64={0x3, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x2, 0xfffffffd, 0x4}, {0x3, 0x6, 0xe}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x77c}}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xf}, {0xc, 0x4}, {0x10, 0x1}, {0x8, 0x4}, {0x0, 0x5}, {0x6, 0x5}]}, @fwd={0xc}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x31, 0x3}]}, {0x0, [0x2e, 0x61, 0x30]}}, &(0x7f0000000440)=""/110, 0x139, 0x6e, 0x0, 0x7fff}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x6, 0x0, r1, 0x1, '\x00', r2, r12, 0x4, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 3.206888692s ago: executing program 4 (id=18579): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x700}, 0x10}, 0x94) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.147924048s ago: executing program 2 (id=18580): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r4, 0xd371f000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r3, 0x12574000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="09000000170000000a0000004000000042000000", @ANYRES32=0x1, @ANYBLOB="0500000000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) 2.994137689s ago: executing program 3 (id=18581): epoll_create(0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x40, 0xf, 0x51, @private0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x700, 0x8, 0x1}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000000010002", 0x7) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, 0x0, 0x40) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 2.991060758s ago: executing program 1 (id=18582): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg(r3, &(0x7f0000001dc0)={&(0x7f0000000400)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000680)="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", 0xfc}, {&(0x7f0000000840)="4705f1a6a781e35c1a9c24831b135d4cd2cc3b801bf2983dd744ac99f98177e17652e4007b8fd84c5969451672ffa24a52a1701f9607a71b78bf0ec107da8614acd0045b64a63da84311d9d64b171e80566e225f7335cc9fd077d7cc751545aa696687736048870d34163669708be6be12e1a8fef0dd812e1ff7ab0bd5fccd921bb801a46f", 0x85}, {&(0x7f0000000900)="37c4daa6cbd5d1b0a2a89b404e4ab6233240d8563f337882ad3f6bf530219b319fee83a831db35374a7b9a247874099ad192d5d494c351dfc3930f70fa1fef36992518ce4f05971facbfbe71608f53271d9cff6650703937a2a67a175edaeb53a61e6afab5b13d70976a48cd240bb25bfcc3f8908ed8aac55f7def295f29a75d039b437df2c6c6da3f6e40fa388bf36742dae6286fae148480143267490c", 0x9e}], 0x3, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1258}, 0x40) r5 = socket(0x2, 0x80805, 0x0) getpeername$tipc(r0, &(0x7f0000000140), &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="07000300010001", 0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000007c0000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340100000000800024000000000080001400000001508000440000000020900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', r4, 0x29, 0x3, 0x0, 0x68ec, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x8, 0x8000, 0xfffffffa, 0x6}}) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c0000004800000425bd7000fbdbdf250a000000", @ANYRES32=r8, @ANYBLOB="aa0c000014000100fe88000000000000000000000000000114000100fe80000000000000000000000000000e080002000700000008000200040000001400010000000000000000000000000000000000000000000200"/100], 0x7c}, 0x1, 0x0, 0x0, 0x20008014}, 0x4040000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r4, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100003052bbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280050001000500000008000a00", @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 2.736453865s ago: executing program 4 (id=18583): socket$inet(0x2, 0xa, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0xe, 0x4) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) accept4(r0, 0x0, &(0x7f0000000240), 0x80c00) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010725bd7000fbdbdf2502000000200800000000010040a61364ba0daa0cdbc80f2291696823d763f735c6c629c6742da9b8e201e0c520ae7d484d15e58c9937c464961d716b12b157d0b57e89cd0d0798e693f68f8a403bc886eea4a0bb54c2e5972357", @ANYRES32=r5, @ANYBLOB="1400020070696d36726567310000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000800000006"], 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x7a7c2000) 2.493251318s ago: executing program 3 (id=18584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x10, 0x700, 0x2, 0x47da, {{0x17, 0x4, 0x0, 0x2d, 0x5c, 0x66, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@end, @rr={0x7, 0x13, 0x55, [@multicast2, @multicast1, @loopback, @rand_addr=0x64010100]}, @generic={0x83, 0xd, "7d98a7e189020c2142d2b9"}, @rr={0x7, 0xf, 0x3a, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @timestamp={0x44, 0x10, 0xff, 0x0, 0xc, [0x6, 0x7, 0xf]}, @lsrr={0x83, 0x7, 0x6e, [@multicast1]}]}}}}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_generic(r5, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="500200001900000829bd7000fddbdf250e00000048001980040082801b0047001a173d703a61e9ebaf8d1a188e4198b205c0fe8c71515c0008004a00", @ANYRES32=r6, @ANYBLOB="0800b100a4a1", @ANYRES32=0x0, @ANYBLOB="040025800800ac00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="f444b2c482d8ed433a0b0bdae6fa579981569f162fc016d7fe37ad654ed0856f82480ac0657df4adc6e398e9b85bd7ae62ffb72e3710713fd95e7c6cae679ca2969743000000"], 0x250}, 0x1, 0x0, 0x0, 0x4000000}, 0x841) getpeername$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=@polexpire={0x1334, 0x1b, 0x1, 0x70bd28, 0x25dfdbfd, {{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x4e22, 0x8, 0x2, 0x80, 0xa0, 0xc, r3, r7}, {0x80000001, 0x80000000, 0x8, 0x9, 0x6, 0x100000001, 0x800, 0x6}, {0x2a3, 0x4, 0x3}, 0x9, 0x0, 0x2, 0x0, 0x1, 0x1}}, [@coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00'}, @algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "816e185ec9614a8e0fb25e28bc97a26de42d4a5686a32031a284a4c6414e78a7350b03fa226357b0734267ac91f81039f3b5cb69f93f14ac8d239b3fc4886d43dbc83a17db5e53018d5a0e5b6f40d205582104d187bc4ae0304656d493a6399bb2748055f89d44626f2f8749504a785a29c7adbf905f4d6e3c87bc738e1b4a5e284aedad286ffa04533d4bb1de718ec01d0a3b9a189e9e426eff17752e8c4cd2041153d0263ea4e2254ef730253b0c7e56a68c38eb92f95a653c95841172c0439e76fb8281489d11260e00c670dbeb6748d6a0e3cbd6bbabc1c2e6bf23ab0b1831c89b430e55b6101c965857d42e3c8845b875fdca7b6a1e9c2345c9852b48ee784b5ce3677228c27ade2b24e9c0984cc151ca489bcb1703b8492ed42c1cc45d433d0b7d0e8e2cff5a8de0f8f4997ce9f64e6242e697902f603ce03de73ced21bb46fddd68bb1530e1948e043553ea06cdc7d8e3b6c9a649b51c0c897dd8f0779cc1f874a2a3e0132f0e339273a56a2da40300187dea04c680c3f2e5be439432935e3a289af3b9fd21abdce54282ee8f2beda31982f4dab781e5cefe609a956a0673b389cd76cdc2cdf5a5ee02fc1fd7277c3c758f9b98b63529bcd0fe1900f95b365b453cd46e098f8d93f1a793ea16a5f84615a4568aa363a0b9a8a8e10f335cc53f7a670bb5783384494c8ac3b345fae57d8a49acc6cf026e347a2a63c34c31fc22877e65854532b2a890f5741b055cea9c535755347d8246851f41ac7f0d5d68d96be1b8b9c21b1137c81b1f4e20c40b59c6109bb4be24ac2667aab08877e53490d25173a43fd54408c2618e568c00c66339e5e57a8e60411b42e9f0a26c74e525a2450157b5fc1345c8202046d4a4e7177e18c2d48398d4d474e1eb4d9f39a7fd227bd59a7808e86f84ddce7d87e85fc73468af9f4721bdeba06db0c5ca5865057f78d5f6681290403e3f329fed8b0a443b451757fe0924ca38953c98d14ba8d13413d3fe08e5bc720d1b77732ac009f6eba48942aa904c01210df1f2136193a56e859e5bdde0ae52981a36a22d3d985f5819064d23774bf977d9d795b7574eb6a4c9ee8fec1dfa9e59b637e11af2be350e1977c0ea81c737b902b5b7ba7c586c1d9cf4675b8b820cf5fb2c13c8e3fd4ba5419d637a8501d15b73273780e85f4e681cc6abd1547c03fa95e638cd2f5b325a4ebb9141631a0d8eeea97dcfd75da9cbab0da8f56d8c650503823c64bd3f2ec16d5d0410fe2ae871e5e57d8a11b064250c45c22f1078ccc90e5dd543ee9ceae4b90c05fbb4e92556c0cbf038cde53c2fef7ddf81dcafc121f358b693923048bb491e1fac841e19be172faa3cae837fe7df262b870c3cb73dddff693cd54bc14f1f17997fcbd7a13151afa90788fb3190de5e8664566c3244a4fc811d0004ac28636055dcc2afadb232afa0a8a0f1212ccfe7c81b191c3afc73f9aebd3393c3453f61a4c415dacb9d72b7313d514e0371e288814f7815b9df4dedcc5db3c36e10742698cafc442bb4d60b60708d2377b3b1f61597ffce4e5b1e266d326665e99814e395ad3f88f72e5d59336ac952e2b0c0d300c4f40bab02020aafdab974b10021e08a2a3bf2aca7b1838f99cc97aa0f7927201f2136f30490330542956b7674c1c003e6db36df767997d5ba787f6e3b585e4cda40bcac86e51757f1fe311e21156a0c40c2f7f2ab1195c42b79b7d28dbca1d31cc0cae73ade5d044e23c50297aab3a9c35ce1b198292b9fa2e4d36d3d24ba8fa2673b5b7f00ce3692664f2f993f7ea5a722410d9ff46ac6d983058425fe5ac8676c03edede5d19c2cb2e52d674426e5d23fe455cf380ccaf96505c8d6193e6a898188e8e614e6e1f2464739a8fa2432119c7936c6d140002df05932f3afcf0478794edd45eb78389d08ec7c90b9ff1a8ce2f8452833b4ddc4801c09b287a3cfb3a7dee2ae663f742628fe60fc2780bd828b2bc5adb8bac42c3226924df5883b16ad48e7a7d3c54b7396183decacdda2a520f292662bc8b4eea1e4d3933b6c915762de31755db1640516aadabcf7ea9faff54e4b9a3062e72f4ea8fcca2fbe5f79cc28fdf52d4efa816aa87940eac0b1d247a83bcc1f5ce716fe87eb0edc6ce3b93b28aac0f6fe6e8e3eceb727492ab6438c8d921c4af0060478a27f1f171eff8157e36200f7abfd5809cbc1cd431e074d8686c1041d8f0d4bb031cd0c8d6faef10ff62233cfa1489f452754e7edb3bd366123ba3995beed69ed78d718068189887ecebddbc2525e01329d81965305acc62727000ff48c21d98f2a194b77821a34a91df5b921e2711157436249142b68e48e737b5465977cc5742c6f4384a9d03597450b139b841777efa13706738e53375bd9fcbeb33335d8970ecbeee3c274a1736f4eb18c98fb1a538b7de876d11ad1e05a0d8ece901b2d58f85a9a8ff7ae94bba0514da4e03ca1a400a91eabbae89b6c78cfaf78bde8c71915b8f2680be0d3083aadcc00259e7d8175fcadcfe053bef01b9f2457cbb9e70dad090f859505f60038137734a2e2053697c49489235fc279498f7496bcd67710dc597d6e173ac7176dc19f6121dd3111b2c977c036330ad3c08e4c5e6f442d72b26479a17d562471bda2ba07cc5154b91d111796ac29abca8b6eb245892be106b6c280f01c6d19c91415e5e191b9d3bfbd915d725d545a18ffec2dc5ebdbd7171f1a7c877fb5e96d7659903b4789c30cadd46a68b7bb6dafce0bdc539cb208d02194e6d67706cd86381ee837ecd13ec5139f85edfd4f579ab99782656a5c7b375c3e048c4685c2afc20873cd42b6442cb9f5821b4c7a39c0814e0908690c6fc7364d9fa6e7d096e35420a374c3307fdf560165d00bb001c59ba0d895b4134061550838196137b69d2190fcd6bbd1cf91e76900f92545fa444bd244d91bd130ae3362f452e99d2bea773ebcc2903d401f891d443e1fe98170533ae0fb4837dcb9fdc1a5e3a3f06e327d81854acdfd83fb2ad9ada457c0e2b103daedab0ed0c9f7393c2935962e808f2d8c665d43e235adc784069ef769f39f8b193274efdc69058cca1ecd204f63513a32bccf0e8b20fe6c06083044b5160c27b0ee4f29b1773be4c6dbebf13f393b6daace2fb19de5a652b7e8eb833e2ef48647137458c66168de5e17070832f9758f73b864d77cb4bf9aa6532ff42a14352b176d0b4a082a709cfc7a2ceb82117fcb94ea8e20e1fc10fe3dc02df91f2b6fe012d4d7aa9cc78dab44e52744ad2370144c2d7190cf67ccdf3d7f0a34331810aab05f8cf2e929c8ec82f8f8a7b9019b9699772416bc753057510dae3b8409a4ba26b779aa575756d77c854f1ef2f2bb1d1f3a069ac5b951b5aa91863662e18ad2a2d85004b40b3005395e42a94dc11bc57b0e8f8d130760bbcec64d9559a8ca1ea1222233baf2120645f21dd8bf8161602a7a545220ee1cce038b54002a2224e086902b143bfed362e5a885866926d4afe1b7bba07d6b944dfb5d88149d09c5aa1fef585b92a49c68d2a804589c0843096b29a52e2c851ff93bd1745c624bf862bd39a440af94d4d9162dd2e5de988b8ebc52b5940d15d845066431e75832e08aa8e8864128b11da5e5133834c7a5648ec84ac0a9e861db2d3032e3769c48dc0796b298ce0c06c30ae3c9c58ff6e2da181e7ea2423616e3bd6f9d4572e17982ea9fa1e0318584ac7ef6f7f57ed2675ec45d9b7baa2937ad583c4c91ff20b88d5cf6b5ef19db270e5aeec3f3beec00021ace789422d446f39a06338388a4920ced0a542a61bec13ac2af21afeac0431f09db63b36074da7b2f4b8412075a2fd49b4126c38b2ed9ebde74e72e446f5d9fa565d15e29983728ac1089ff45691b2aae9c8cc58c6974a4d07631f3b6952c3651107c323a903f6c206f70a06e4c3c935c3ce01881973112e91808f1c3c0b3852a1e8c472f61ad00dbe1477287fbebbf3b7d0b7c660c49f99e21f1567021949f8a59d7992426ce04d58ed1977762bc2caca13da2860a50403a44373a156f11d74fbffb8a1583cba06a5d13bef0a42b0ef18629c9aa6da7b2df379b89c884604517d42ec1c12d9683e93f23f115aa4147709834451772b7e2f23d63913e2390cdda8a6746be80a7064bd9f8f726d6fcaab37a5b6a7e4b9c337592ffda3d894028a5652f6be7d7ef198bd05d5c33f464fe46c0550e0ab7cab1f8b59ba305f9164df4d648c18945808f956ffa1d9125f930417eb6d61234c83d610b52334d0684e1a5bd2c1ad993ca307297c3c64c5f604bd87433b0ed2da346b2128c495fefad9dbed790323870b4ff16746c091ce5e4940cbb49a0832d3410e58366cddbaed09ba1f238acf9d1a096f5fba906f37ae63ebf7ab2332cc8c237d67e922a337fa6c697d5476bce0c2a4a7b0bb9949d6067739488633b39a957a5b7972ff89d882fbaca443bbed6bf45ecb8446982e2fa65ebee005a6fea734a3b68fd7757b9bb0ecf10ba59de2e794de4122420da2e860097648d223652c444b2ea159f88ee09b015c9311c9ea0942e5aa213d871bcb70c2ac8474560f16b836d0f83c6dc2e9a52295be13bff38426522ee44469bc3be877243aac5619cb053da7d5962b80a912814feba13d8aa59286343958fdbd7e01372ebfae88dd89bcd8ce09346ae87907e69273c279324c7a9d292362493a38fc449dfe59b1c61125b9274fda3b1787a858af9de197238bb55e1206f82ac37f7d97f372eb8c4166e75710c27ee609c20b1384e3bacecc36c35e2a6471e01766f13020278edc803001e136284fc7c5451e6929221d0939ce6a93287fe09b7f488476a37d6c0a1ca20b9e30daa9adaa4769af045c6997f96b87820ca3a94efba75e7bb714d5de0e87fb987294a5f35493f5e4f575f1737b91e65af10fed38f2c1917a29bf2fac60b47460e913e9ca0f61dfc24fef708078d87ee6cac3375db8770e2c3c190275371ef24575f52d585be538b62fcabf083e244b79fb47651888f073cdc8e5a249124468c9df54270cc641709b9d71a66cf64c7b5585d3ef079a3eb8ec42a7c4a324bee79a1872dd9298db9ddb91f27a62461e1a1f1016f1b34d771aac708afb52ca701f8b7ec73a2d0b3bbd87f3c64489257e09ee808cfee3bbffc6c8aad81eb9a1a67b2e7f533907ef1240dd2da92aa2639b7003488cf8e196238e5f34edbc154c0d1f78fb6eecce565c523e95c7082ba736ab6afdeb6b08e558ab4596af7f9c64858f04f9e5d64c86f603b7f90b8b92cec12ca3592e2defc96b1b3f3d8ba9a51e110c31d4640f770175bd4e2e7d6b0d1865133ff52fbc17e9b5b08eb245966f27ad8c3576a248b2e969540f27e1b6e56ccbed4367c802c030cbeebf0ef1fe2424827f6a2b553fe3f913f1c050daaf8c42653a02fb1cdb42c847141d1001d7a573ae734c4db231a1f14f614eaa6667c8374b01168e5cec89de7152c2163e48943d5b5bb1f4a642725c60085a9811b875f85cf643c4c7c4e7ab0c72ec47924f1202d256d7e7b4e7e75cc3d6693c6d4150f61c339451e19c7340db66decb875af0b38944974322b810694e8c3ded2674efa0f16b217fe399b03dd3f445b1715359828e9dcc2d6cd174daf06c3039517e4bd327d3b9796bd5edb3783633df77e81bc2c0b262dba8f5f324d7c434514a94e37378a434a1b50f7ecf95fc50bb9a8787bf1403441a9edd565f4354b4db1bed8fdabf3f98d91fe1346a37d50b240dcfb57d58645fd80dbb676436a0e424f07579b60add606a188e22b59a9e2b7f80871040c6c61"}}, @extra_flags={0x8, 0x18, 0x9}, @tmpl={0x44, 0x5, [{{@in=@empty, 0x4d6, 0x2b}, 0x2, @in=@local, 0x3500, 0x4, 0x2, 0x1, 0xe, 0x9, 0xfffffffb}]}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd2c, 0x70bd2a, 0x70bd2b, 0xa, [0x7ff, 0x7, 0x401, 0x12, 0xfffffffd]}}, @algo_crypt={0xb8, 0x2, {{'xts-serpent-avx2\x00'}, 0x380, "8580b1fe24e56530ca273b50ff44553ed0a1a4bb732c40aefc48a9c26b32709121d6fd0e082f19fa39e7365db11d48227c3b62ebe6a8ef13f85a7c2af0a98fb645aa8420569b4297eaf6c682a6dffce16bf908e86a9fbbd8df5fd74c27f75de7fdea5838ac24ca1d4798f9fa862d8bc9"}}, @sa={0xe4, 0x6, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x4e23, 0x8, 0xa, 0x80, 0x60, 0x2c, r8}, {@in6=@mcast2, 0x4d2, 0x32}, @in6=@private0, {0x3, 0xa8ea, 0xe930, 0xffff, 0xbcde, 0xd66, 0x7f, 0x1ff}, {0x7, 0x2, 0x3ff, 0x8}, {0xdc500000, 0x3, 0x1}, 0x70bd2d, 0x3506, 0x10, 0x0, 0x5, 0xc0}}]}, 0x1334}}, 0x0) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x8, 0x6, {{0x9, 0x4, 0x2, 0x25, 0x24, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0xf, "37cf010c80d952c1e7cef44021"}]}}}}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r10, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}], 0x1, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0xa8, 0x4, 0xcc8, 0x18, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback={0x1000000}, 0x10, 0x20, 0x6, 0x1}}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="280100001016170829bd7efb2dd7e4a23ba43d9a4a6f650b1e7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e2002000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 2.117670007s ago: executing program 3 (id=18586): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfa, 0x20000000}, 0xc) 2.113668908s ago: executing program 0 (id=18587): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006f00)=[{{&(0x7f00000005c0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x4000000) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000640)={0xa, 0x4622, 0xb57, @mcast1, 0x7}, 0x1c) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x100, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0900000004000000080000000f0000000000", @ANYRES32=0x1, @ANYBLOB='i\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000b70000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000004000010018010000202078a500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fbffffff850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f0000000200)='$', 0x1, 0x4004001, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x8929, &(0x7f0000000600)={'ip6tnl0\x00', 0x0}) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r8}, 0x38) socket$rds(0x15, 0x5, 0x0) 2.067760567s ago: executing program 1 (id=18588): r0 = socket(0x18, 0x6, 0x3) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, 0x0, 0x0) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000"], 0x18, 0x20000084}, 0x40880) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001300050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="00300000000000000c001a800800048004000680"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x10a8, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1078, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_POLICE={0x1064, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x1, 0x6, 0x0, 0xfffffff9, 0x8, 0x5, 0x2, 0x27, 0x5, 0x7199, 0x0, 0x24b, 0xffffff73, 0x1, 0x8, 0x10000, 0x8000, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x3, 0x10000, 0x5, 0xf, 0x0, 0x4, 0x1000, 0xf29, 0xd, 0xa, 0x2, 0x2, 0x1, 0xffffff7f, 0x7fff, 0x400, 0x2, 0x2552, 0x7, 0x7, 0x200, 0x10, 0x2, 0x2, 0xfedc, 0xf, 0x0, 0xa, 0xae5, 0x6, 0x4, 0x4, 0x10, 0x7ff, 0x7, 0x8001, 0x4, 0x4, 0x9, 0x9, 0x5, 0x8, 0x0, 0x1, 0x0, 0xefa6, 0x9, 0x56, 0xff, 0xb0d, 0x5e, 0x1ff, 0x0, 0x1, 0x9, 0x7, 0x8001, 0x6, 0x1000, 0xfffffffb, 0x2, 0x0, 0xd38e, 0x864, 0x3, 0x7fffffff, 0x401, 0x8, 0x13, 0x64a, 0x4, 0x19020e0c, 0x7, 0x3, 0xe, 0x4bbc, 0xf, 0x3, 0xc98, 0x6, 0x717, 0xc, 0x7, 0x9, 0x7fff, 0x1, 0x6, 0x101, 0xaeb, 0x4, 0x0, 0x1, 0xe, 0x4, 0xa0, 0x3ff, 0x64, 0x7, 0x2fb2c8d0, 0x0, 0x2000, 0x2, 0x10001, 0xfffff800, 0x5, 0x6, 0x7, 0x1, 0x8, 0x5, 0xffffff58, 0x28, 0x3, 0x5, 0x8, 0x5, 0xffffb268, 0x1, 0x9, 0x2, 0x3ff, 0x3, 0x4, 0x1, 0x2, 0x81, 0x8, 0x8, 0x9, 0x800, 0x0, 0x3, 0x0, 0x4, 0xfffff695, 0x8, 0x5, 0x6018b320, 0x2, 0x49c, 0x2, 0x0, 0x81, 0x0, 0xd, 0x1, 0xf95, 0x7, 0x8, 0x1e4, 0x7, 0x4, 0x80000001, 0x6, 0x0, 0x800, 0x1, 0x7, 0x1, 0x80, 0x58409cec, 0xff, 0x7, 0xfff, 0x3, 0x3, 0xf0bd, 0x5, 0x4, 0x9, 0x3, 0x3, 0x4, 0x6, 0x7, 0x3, 0xd66, 0x1000, 0x6, 0x7, 0x9, 0x7ff, 0x1ac, 0xfffff1c6, 0xfffffff8, 0xb42, 0x3, 0xba, 0x9, 0x6, 0x9, 0x5, 0x6, 0x47a1, 0x9, 0x8, 0x7, 0x1, 0x299e, 0x8000, 0x3d, 0x4, 0xffff48d6, 0x1ff, 0x3, 0x5af6, 0x0, 0xfffffffe, 0x6, 0xe, 0x6, 0x9, 0x1, 0x4, 0x10000, 0x1, 0x10, 0xe5ff, 0x6, 0x3, 0xa, 0x0, 0x7f, 0x3e0, 0x9, 0x10000, 0x200, 0x7, 0x3, 0x80000001, 0x9, 0x5, 0x7fff, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0xed43, 0x1, 0x4, 0xdda, 0x80000000, 0x7fffffff, 0x1, 0x0, 0x1, 0x3, 0x0, 0x9339, 0x2, 0x4, 0x6, 0x400, 0x5, 0x1, 0x7, 0x2, 0x3, 0x5ac, 0x0, 0x83, 0x6, 0x3, 0x6, 0x9, 0x100, 0x7, 0x7, 0x800, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x4, 0x5, 0x4, 0x6, 0x6f, 0x991f5d4, 0x3, 0xd7b, 0x8, 0xfff, 0x9, 0x1, 0x0, 0x5ceec768, 0x8, 0x7, 0xfffffff8, 0x7, 0x3, 0x4, 0x8, 0x6, 0x5, 0x1, 0x2, 0x8, 0x1941, 0xda, 0x2, 0xa, 0x9, 0x2, 0x10, 0x7, 0x81, 0x8001, 0x5, 0x9, 0x2, 0x8000, 0x8, 0x81, 0x6, 0x2, 0x3, 0x5, 0x6, 0x0, 0x10, 0x0, 0x2, 0x3, 0x9, 0x2, 0x4, 0x5, 0xeb90, 0x39, 0x762, 0xe2ac, 0x0, 0x101, 0x9, 0xfbd, 0x3, 0x912, 0x80000000, 0xa, 0x4, 0x7, 0x7, 0xfffffff8, 0x4, 0x5, 0x0, 0x3b072ea0, 0x9, 0x1000, 0x1000, 0x1ff, 0x0, 0x5, 0xc4, 0xd, 0x2, 0x0, 0x7, 0x1, 0x4ec2bd09, 0x5ea0, 0x200, 0x5, 0x75, 0x6, 0x40, 0x4, 0x5, 0x7, 0x5, 0x8, 0x9, 0x7, 0xfff, 0x7, 0x0, 0x7a1c, 0x9c, 0x9, 0x5, 0x5, 0x9, 0xfffffffb, 0x40, 0xc1b, 0x2, 0xb54, 0x8, 0x4a000000, 0x0, 0x1, 0x1, 0x9, 0x0, 0xeaf2, 0x6, 0x81, 0xff, 0x5e06, 0x3, 0x5, 0xfffffffe, 0x3ff, 0x0, 0x1, 0xe19, 0x8, 0x0, 0x3, 0x3, 0x9, 0xffff3cc4, 0x9, 0x6, 0x80000001, 0x5, 0x1ff, 0x3, 0x8, 0x3, 0xffff, 0xffffffff, 0xc12c, 0x8, 0x8, 0x9, 0x7, 0x5, 0xc, 0x0, 0x7, 0xfffffffd, 0x5, 0xf, 0x40, 0x8001, 0x5, 0xd, 0x7fff, 0xfffffff9, 0xaa6, 0x80000000, 0x4, 0x2, 0x2, 0xd9e, 0xb7a, 0x2, 0x0, 0x1, 0x255, 0x349b, 0x3ff, 0x1, 0xfff, 0x30000000, 0x3, 0x7, 0x800, 0x4, 0x5, 0x6, 0x0, 0x1, 0x4, 0x0, 0x10000, 0xa6, 0x8, 0x5, 0x3, 0x5, 0x7, 0xffff7898, 0x3, 0x3, 0xffffffc0, 0x80, 0x9, 0x2, 0x2ec6, 0x6, 0x1000, 0x7, 0x136, 0x3, 0x333, 0x8001, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa57d, 0x6, 0xc71a, 0x80, 0x8000, {0x3, 0x1, 0x2, 0x4, 0x1, 0xd}, {0x3, 0xb36fca9e8a418ad1, 0x171, 0x1, 0x8, 0x1}, 0x1, 0x1, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0x3, 0x7, 0x4, 0x3, 0x7, 0xfffffffb, 0xfff, 0x7f, 0xc, 0x6, 0x0, 0x3ff, 0x4, 0x7, 0xffffffff, 0x7ff, 0x6, 0xcd5, 0x10, 0x1, 0x10000, 0x615a, 0x7ff, 0x1, 0x80, 0xd, 0xb5e9, 0x75, 0x2, 0x401, 0x2, 0x1, 0x4, 0x7ff, 0x9800000, 0x40, 0x77fc, 0x4, 0x5, 0xa7, 0x0, 0x2, 0x4, 0x8, 0x3, 0xa, 0x2, 0x400, 0x3f, 0x7, 0x3a, 0x0, 0xa, 0x0, 0x5, 0xa9, 0x7, 0xfffffff9, 0x2e9, 0x2, 0x1, 0x0, 0x7f, 0x8, 0x7, 0x6f, 0x1, 0x6, 0x1, 0x2, 0x7, 0x1, 0x4, 0x1, 0x4, 0xc, 0x4, 0x9, 0x80000001, 0x8, 0x3, 0xffff8001, 0x2, 0x3, 0x3, 0x1, 0x10001, 0x80000001, 0x8, 0x9, 0x40, 0x0, 0x101, 0x87e1, 0x4, 0xffffffff, 0x2, 0x22e, 0x59eb, 0x3, 0xf4, 0x621, 0x6, 0x8000, 0x1, 0xff, 0x10000, 0x3, 0x1, 0x86, 0x81, 0x1000, 0x5, 0x8001, 0x101, 0xf4bc, 0x2, 0x5, 0x1ff, 0x2292, 0xfc, 0x80000000, 0x7, 0x7, 0x10001, 0x0, 0x8, 0x200, 0xffffffff, 0x1000, 0x9, 0x28a0, 0x1c, 0xf5, 0xed7, 0x6, 0x6, 0xffff, 0xd90, 0x4, 0xc1, 0xffff, 0xfffffff7, 0x8, 0x4, 0x4, 0x7ff, 0x9, 0x7, 0x2, 0x2, 0x1000, 0x5, 0x1, 0x0, 0x7, 0x9, 0xe, 0x5, 0x6, 0x243, 0x54, 0x80, 0x8, 0x3, 0x2, 0x100, 0xe, 0x81, 0xd, 0xd, 0x4, 0x6, 0x2, 0xa5, 0x2, 0x1ff, 0xff, 0x18, 0x5, 0xc0, 0x8, 0xe, 0x8, 0x4, 0x5, 0x48, 0x0, 0x0, 0x95fc, 0x6, 0x1000, 0x6, 0x4, 0x7, 0x92, 0x272d5848, 0x3, 0x3, 0x5, 0x40, 0x0, 0x6, 0x0, 0x0, 0x401, 0xa, 0x5, 0x7, 0xffffffa9, 0x9, 0x1, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7fff, 0x7fffffff, 0x1, 0x2, 0x7e73, 0x4d0, 0x8, 0x999c, 0x80000000, 0x4d, 0xfffeffff, 0x8, 0x0, 0x8, 0x2, 0x9, 0x7fffffff, 0x1ff, 0x6, 0x5, 0x4, 0xc, 0x7ff, 0x9, 0x7, 0x8, 0x331, 0x5, 0x6, 0x10001, 0x0, 0xc, 0x2, 0x7f, 0x200, 0x1, 0x8d24, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x99, 0x9, 0x6, 0xfa5, 0xf, 0x9, 0x2, 0x1, 0x3, 0x8, 0x1, 0x5, 0x8000, 0x7, 0x7, 0xc, 0x5, 0x6ac, 0x5, 0x7129, 0x7fffffff, 0x2, 0x7, 0x4, 0x6c, 0x8, 0x1, 0x10000, 0x80000001, 0x10001, 0x9, 0xe, 0x4, 0x1, 0x2, 0xfffff800, 0x4, 0x80, 0x1, 0xfffffffa, 0x0, 0xf8, 0x8, 0x4, 0x1921ccf6, 0x3, 0xffffffff, 0x2, 0x8001, 0x7, 0x5, 0x5, 0xf, 0x8, 0x7, 0x6, 0xb, 0x4, 0x8, 0x61c, 0x7, 0x10000, 0x684a, 0x5, 0x5, 0x100, 0x9, 0x8, 0x6, 0xff, 0x0, 0x886f, 0x79da, 0x2, 0x8, 0x6, 0x8b8, 0x7f9, 0x5, 0x6, 0x9, 0x6, 0x7, 0x0, 0x6, 0x9, 0x4, 0x8001, 0x40, 0x7, 0x4, 0x2, 0x8, 0x8, 0x6, 0x5, 0x400, 0x7, 0x1, 0xbe, 0x8b8, 0xe, 0x3, 0x1, 0x91c, 0x101, 0xfffffe00, 0x9, 0x1, 0x7d, 0x8, 0xee5, 0xf7d, 0x9, 0x3, 0x20d, 0xa, 0x0, 0x1ff, 0x1, 0x100, 0xffff8001, 0x4, 0x5, 0x7, 0x9, 0x80000001, 0x55, 0xfffffc00, 0xb9, 0x4, 0x5, 0x2, 0x7, 0x3, 0x4, 0x8311c48, 0x8, 0x3, 0xfb, 0x5, 0xa, 0x5, 0x835, 0xd8d, 0x9, 0x7, 0x5, 0xb, 0xd55, 0xf12, 0x3, 0x742, 0x400, 0xb883, 0x3a, 0x7, 0x10000, 0x9, 0x200, 0x7f, 0x40, 0x47a6, 0x2, 0x10, 0x6, 0x9, 0x7, 0xc4, 0x8, 0x3, 0xf1, 0x4, 0x0, 0x1, 0x7, 0x6, 0x7, 0x0, 0x5, 0x9, 0x4, 0xfff, 0xc, 0x0, 0x101, 0xb, 0x100, 0x4, 0xbd6f, 0x5, 0x0, 0x1, 0xfffffffc, 0x1000, 0x8, 0x100, 0x80000000, 0x87, 0x9, 0x23, 0x6, 0x6, 0xaf52, 0x7fff, 0xfffffffc, 0xffffffff, 0x8001, 0x8, 0x5, 0x1, 0x9, 0x8, 0x9, 0x0, 0x0, 0xffffffff, 0x1, 0x9, 0xa5f, 0xa, 0x1, 0xe, 0x3, 0x6, 0x0, 0x6, 0xff, 0x7, 0x0, 0x2, 0xffff8000, 0x7, 0x0, 0x7, 0xb77, 0x60000000, 0x5, 0x8, 0x6, 0x3, 0x80, 0x3, 0x80000001, 0x5f535161, 0xec, 0x2, 0xa, 0x2, 0x6, 0x8, 0x7fffffff, 0x1410, 0x10000]}]}]}}]}, 0x10a8}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r8, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000014c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 1.94105116s ago: executing program 3 (id=18589): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "4ab27a5bbf34f8bb", "801f5316346f6be5e67ad1b39021558717e2a4267e0661c1025ae933d34a275f", "1e4fba9a", "c6bbc09f5c48fece"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2}, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(0xffffffffffffffff, 0x3) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, 0x0}, 0x40085) sendfile(r0, r3, 0x0, 0x20000000002) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r5, &(0x7f0000000000)={&(0x7f0000000300)=@in6={0xa, 0x4e20, 0x20000f07, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x80, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 1.676102676s ago: executing program 4 (id=18590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x928, 0x30, 0x8101, 0xe501, 0x1000, {}, [{0x914, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}, 0x8001, 0x0, 0x5}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0x8a4, 0x2, 0x0, 0x0, {{0xb}, {0x878, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1b}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x253}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xf1d, 0x1, 0x6, 0x6, 0x81, 0xc, 0x3, 0xab99, 0xe, 0xffff, 0x2, 0x80000000, 0x9, 0x4, 0xfff, 0x1ff, 0xfffffff9, 0x4, 0x1, 0xa7e, 0x5f8b, 0x2, 0x7, 0x8001, 0x6, 0x1, 0x6f, 0x5098, 0x3a, 0x3, 0xff, 0x7, 0x1ff, 0x7fffffff, 0x4, 0x2, 0x2, 0x8, 0x10, 0x70bb, 0xb, 0x8, 0x9, 0x7f, 0x2, 0x8, 0x4, 0x0, 0x80000001, 0x1, 0x9, 0x65a, 0x0, 0x5, 0xe1, 0x3, 0x1, 0xf61, 0x3, 0x4, 0x4, 0x5, 0x2, 0x1, 0x9, 0x6, 0xc5bb, 0x3, 0x8, 0x8, 0x2, 0x7, 0x3, 0x8, 0x9, 0xb6b7, 0x3, 0x0, 0xfffffff8, 0x3, 0x6, 0x200, 0x0, 0x7, 0xd497, 0x6, 0x1, 0x8, 0x0, 0x2, 0x7, 0x4, 0x3, 0xdc, 0xc2b0, 0x9, 0x2, 0x10000, 0x6, 0xff, 0x5, 0x3, 0x2, 0x6, 0x8001, 0x8001, 0x200, 0x4, 0x1, 0x7, 0x4, 0x9, 0xffffff5f, 0x2, 0x3, 0xc8, 0x1, 0x1, 0x8, 0x5, 0x7fffffff, 0x2445, 0x1, 0x53c9, 0x2, 0x4f0, 0x7fffffff, 0x2, 0x0, 0xcd6, 0x9, 0x3, 0x9489, 0xc, 0xf3, 0x1, 0x67f4, 0x101, 0x9, 0x9, 0x4, 0x3, 0x8001, 0xb, 0x7ff, 0xb91, 0xd, 0x930, 0x3, 0x7, 0x2, 0x6, 0x4f58, 0x9, 0xd, 0x5, 0x4, 0x5, 0x2, 0x9, 0xd84, 0x5, 0x8, 0x400, 0x7c, 0x6, 0x5477, 0x1, 0x100, 0xa5, 0x3b3, 0xb04, 0x9, 0x6, 0xfffffffb, 0x9, 0x7, 0x2, 0xf02, 0x9, 0x1, 0x4, 0x9, 0x7, 0x6e5, 0x7, 0x2, 0x7fffffff, 0x7, 0xffff, 0x10001, 0x2, 0x400, 0x6, 0xa7, 0x7444, 0x0, 0x0, 0x4, 0x80000001, 0x40ac, 0xfffffff7, 0x1, 0x5, 0x9a83, 0x10001, 0x100, 0xc6cf, 0xb5fd, 0x2, 0x0, 0x7, 0x80000001, 0x7, 0x8, 0x9, 0xff, 0xffff8001, 0x80000000, 0x7, 0x5, 0xe, 0xe, 0x10, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1000, 0x1, 0xa1, 0xfffffffe, 0xd5c, 0x20001ff, 0x6, 0x0, 0xc6, 0x1, 0x8, 0xe078, 0x8, 0x3, 0xf, 0x9, 0x7, 0x6a59, 0x7, 0x2, 0xbe9, 0x40, 0x7fffffff, 0x3, 0x0, 0x5]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3, 0x6, 0x7, 0xdae, 0x5, 0x5, 0xbe0, 0xc119, 0x3, 0x5, 0x7, 0x27, 0x135f43c3, 0x200, 0x9, 0xf8, 0x10, 0xff, 0x40, 0x7b, 0xb31abe6, 0x400, 0x90000000, 0x2, 0x7, 0x7, 0x7a40, 0x9, 0xa4fb, 0x7, 0x400, 0x101, 0x2, 0x8001, 0x6, 0x400, 0x7, 0xd, 0xb59, 0x800, 0x9288, 0x5, 0x89, 0x7fffffff, 0xa, 0x80000000, 0xffff, 0x9, 0x8, 0x5, 0x40, 0x414d, 0x7822, 0xfe73, 0x800, 0x6, 0x10000, 0x3, 0x6, 0xa, 0x7, 0x3, 0x800, 0x3, 0x81, 0x80, 0x10000, 0x4, 0xfffff61b, 0x6, 0x5e00, 0x4, 0x7, 0xffffffff, 0x1, 0x5, 0xfffffd61, 0x8, 0x7fffffff, 0x5, 0xe, 0xd0, 0xe58dfa9, 0xffffffff, 0x802000, 0x6, 0x8, 0x0, 0x6, 0x984, 0x9, 0x10001, 0x6, 0xbb4, 0xc, 0x4, 0x63, 0x3, 0x8, 0x100, 0x6221, 0x3, 0x6, 0x0, 0x6, 0x9, 0x2, 0x4, 0x44a, 0x3, 0x400, 0xffff, 0x5, 0xfff, 0x2, 0x6, 0x9, 0x5, 0x4, 0x4, 0x4, 0x2, 0x10001, 0x1, 0x1ff, 0x6, 0x8, 0x8, 0x4, 0x8, 0x9, 0x1, 0x4, 0x81, 0x6, 0x7ff, 0x9, 0xffffffff, 0x2, 0xd0, 0x3, 0x20, 0x7659, 0xdf, 0x9, 0x0, 0x0, 0x1, 0x7, 0x7, 0x0, 0x6, 0x1, 0x270, 0xa, 0x0, 0x0, 0x9, 0x80000000, 0x100, 0x4, 0x81, 0x401, 0x8, 0x7fffffff, 0x8, 0xffff, 0x5, 0x80000000, 0xc40, 0x1000, 0x6, 0x7, 0x1c00, 0x81, 0xcf5, 0x4b, 0x0, 0xb69, 0x1, 0x7fffffff, 0x6, 0xdbce, 0x6, 0xffffffff, 0x0, 0xf, 0x4, 0x3, 0x3, 0xfffff800, 0x3, 0x7fff, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x8, 0x0, 0x345, 0x0, 0x81, 0x8, 0x3, 0x7f, 0x9, 0x6, 0x9e0, 0x1, 0x3, 0x8, 0x0, 0x4, 0xffffffff, 0x1, 0x11fb3e66, 0x9, 0x3, 0x1, 0x1, 0x6, 0x3, 0x7, 0xfffffff5, 0x79ea, 0x2, 0x101, 0x0, 0x0, 0x2, 0xfff, 0x2, 0xfffff801, 0x2, 0x5, 0x401, 0x7fffffff, 0x2, 0x714, 0x600, 0x3, 0xb33, 0xffffffff, 0x100, 0x0, 0x7, 0x4, 0x9, 0x3, 0xd, 0xeb, 0x5, 0x1e]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x928}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000b80)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0x0, 0x13}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000bc0)="2705000059feff000600002fb96dbcf7babe05000700810000f5080612008100accb", 0x22}, {&(0x7f00000002c0)="88", 0x1}, {&(0x7f00000005c0)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a84", 0xee}], 0x3}, 0x8884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000009980)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f000000051a0000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x0) recvfrom(r5, &(0x7f0000000300)=""/224, 0xe0, 0x60, &(0x7f0000000400)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x80) recvmmsg(r6, &(0x7f0000000080), 0x72a, 0x0, 0x0) poll(&(0x7f0000000180)=[{r6, 0x8004}, {r6, 0x28}], 0x2, 0x939a) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r7 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d", 0x2a}], 0x2}], 0x1, 0x40800) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x2}, 0x94) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r8, &(0x7f0000000040), 0x8) 1.642062887s ago: executing program 2 (id=18591): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r2, 0x1, 0x9, 0x0, &(0x7f0000000f80)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, 0x0, 0x20004840) write$cgroup_devices(r1, &(0x7f0000000400)=ANY=[], 0xfffffeff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@deltaction={0x24, 0x31, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r7, @ANYBLOB="05000000000000000000010000000600060000000000c40c0880e400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030000000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e0003008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050000000000d002098058000080060001000200000008000200ac1e00010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300000000007c000080060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000dc000080060001000a0000001400020000000000000000000000ffffac1414aa05000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1e0001050003000000000094000080060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e00000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000200000008000200ffffffff050003000000000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff020000000000000000000000000001050003000000000064000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002000000000000000000000000000000d807008000030980f4000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200ac1e00010500030000000000060001000200000008000200e000000105000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000a00000014000200fc01000000000000000000000000000005000300000000004c000080060001000200000008000200ac1414bb0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb05000300000000000c010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000940000800600010002000000080002000000000005000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200e00000020500030000000000060001000200000008000200ac1414000500030000000000060001000200000008000200ac14140005000300000000001c000080060001000200000008000200ffffffff0500030000000000080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221d0004000a0000000000000000000000000000000000ffffac1e0001000000001c04098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fe880000000000000000000000000001050003000000000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030000000000060001000a0000001400020000000000000000000000ffffe00000020500030000000000ac000080060001000200000008000200000000000500030000000000060001000a00000014000200fe80000000000000000000000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000064000080060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414000500030000000000f4000080060001000200000008000200000000000500030000000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414000500030000000000060001000a00000014000200200100000000000000000000000000020500030000000000a0000080060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac14140005000300000000007c000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2400020055fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030000000000060006000000000008000100", @ANYBLOB], 0xd40}}, 0x8) 1.241141498s ago: executing program 1 (id=18592): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 1.210054716s ago: executing program 4 (id=18593): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) preadv(r2, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000180)="4cd1", 0x2, 0x40008895, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000740)={0x0, 0xfffffffffffffe3b, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x1) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, &(0x7f0000001580)=ANY=[@ANYBLOB="9a40000000000000"], 0x8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x1f}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x38, 0x3, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.113232167s ago: executing program 0 (id=18594): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 982.264096ms ago: executing program 2 (id=18595): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) 938.292809ms ago: executing program 3 (id=18596): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$kcm(0xa, 0x3, 0x3a) socket(0x2a, 0x2, 0x0) socket$kcm(0x23, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x1e, 0x4, 0x0) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 814.092578ms ago: executing program 0 (id=18597): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000640)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = accept(r2, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)}, {&(0x7f0000000540)="983a726ab58440145c692e12e742f1100be909a2e33eb6145706c4eb34b72a6d7364fad9e05293131b8a830c638487aaf1d869cb851c669e4c6af956fd5349314d52470d93362d9aec24418af3f637862d6c6956be4d636f736d5c888ec1ab8a76", 0x61}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x5}}], 0x1, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x6, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0x9, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x8, 0x2, 0x6, 0x7, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000000) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x24000004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x10) 783.67015ms ago: executing program 2 (id=18598): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, 0x0, 0x20008004) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 741.534813ms ago: executing program 1 (id=18599): openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB="02065508b3907a000902000000020000"], 0x10}}, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb70259b40363cf91600", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r2, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x66) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000001c0)="87", 0x1, 0x81, &(0x7f0000000280)={0x11, 0xc, r4, 0x1, 0x5, 0x6, @broadcast}, 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 616.641916ms ago: executing program 0 (id=18600): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x3978, 0x4) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x2b62}], 0x1, 0x40012021, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f0000000080)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x200008c0}, 0x6008045) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1, 0x20000000, 0x9, 0xfffffffc}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff7, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xcc, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xcc}}, 0x0) 327.851374ms ago: executing program 3 (id=18601): socket$inet(0x2, 0xa, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0xe, 0x4) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) accept4(r0, 0x0, &(0x7f0000000240), 0x80c00) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010725bd7000fbdbdf2502000000200800000000010040a61364ba0daa0cdbc80f2291696823d763f735c6c629c6742da9b8e201e0c520ae7d484d15e58c9937c464961d716b12b157d0b57e89cd0d0798e693f68f8a403bc886eea4a0bb54c2e5972357", @ANYRES32=r5, @ANYBLOB="1400020070696d36726567310000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000800000006"], 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x7a7c2000) 294.12659ms ago: executing program 2 (id=18602): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x6e22c2, 0x0) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32=0x1, @ANYRES16, @ANYRES8=r2, @ANYBLOB='\x00'/27, @ANYRES16=r0, @ANYRES8=r1], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0xe0, 0x8, 0x539, 0xb96d, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x64, 0x0, 0xc, 0x29, 0x0, @multicast2, @rand_addr=0x64010102, {[@lsrr={0x83, 0x27, 0xc2, [@multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x27}, @multicast2, @multicast2, @empty, @multicast2]}]}}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 240.549119ms ago: executing program 0 (id=18603): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, 0x0, 0x25, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r4, r5, 0x0, r0}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000100)=r7) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 212.158119ms ago: executing program 1 (id=18604): socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa4408004900008401ac1414aa830f0ee0000002ac1414bbac1414aa000c019078e00000e0460000000067000000730000ac1414aae0000001830389070300443c00030000000000000008ac1414aa000000008c1414bb00000000ac141441000000007f00"], 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x51}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$sock(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 27.947282ms ago: executing program 1 (id=18605): socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r4, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 0s ago: executing program 0 (id=18606): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "4ab27a5bbf34f8bb", "801f5316346f6be5e67ad1b39021558717e2a4267e0661c1025ae933d34a275f", "1e4fba9a", "c6bbc09f5c48fece"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(0xffffffffffffffff, 0x3) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, 0x0}, 0x40085) sendfile(r0, r3, 0x0, 0x20000000002) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r5, &(0x7f0000000000)={&(0x7f0000000300)=@in6={0xa, 0x4e20, 0x20000f07, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x80, 0x0, 0x0, &(0x7f0000000040)}, 0x0) kernel console output (not intermixed with test programs): eeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1454.332090][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1454.557123][T16193] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.16218'. [ 1454.587153][T16193] openvswitch: netlink: Message has 512 unknown bytes. [ 1454.857173][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1454.871731][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1455.060912][T16213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16223'. [ 1455.468712][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1455.484249][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1455.534633][T16190] xfrm0: left allmulticast mode [ 1456.046544][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1456.061318][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1456.587097][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1456.799531][T16190] bridge0: port 2(vlan4) entered disabled state [ 1456.807394][T16190] bridge0: left promiscuous mode [ 1456.812502][T16190] bridge0: left allmulticast mode [ 1456.939180][T16190] ip6gre3: left allmulticast mode [ 1456.949218][T16190] ip6gre4: left promiscuous mode [ 1456.960638][T16190] ip6gre4: left allmulticast mode [ 1456.985148][T16191] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 1457.023928][T16196] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1457.067320][T16196] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1457.086616][T16196] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1457.121734][T27543] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1457.162596][T27543] netdevsim netdevsim4 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1457.210709][T27543] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1457.251278][T27543] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1457.300417][T27543] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1457.329237][T27543] netdevsim netdevsim4 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1457.346967][T27543] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1457.373991][T27543] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1457.400814][T27543] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1457.425746][T16242] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16227'. [ 1457.444930][T27543] netdevsim netdevsim4 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1457.477529][T27543] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1457.503103][T27543] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1457.538412][T27543] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1457.573201][T27543] netdevsim netdevsim4 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1457.622959][T27543] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1457.635152][T16249] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16231'. [ 1457.664238][T27543] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1458.277340][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16232'. [ 1458.930728][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16233'. [ 1459.667904][T27406] net_ratelimit: 12 callbacks suppressed [ 1459.667924][T27406] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1459.689251][T27406] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1459.824553][T16327] netlink: 220 bytes leftover after parsing attributes in process `syz.1.16244'. [ 1460.191200][T16344] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16246'. [ 1460.338233][T27406] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1460.353697][T27406] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1460.617742][T16360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1460.946693][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1460.962238][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1461.527578][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1461.542483][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1461.824082][T16401] can: request_module (can-proto-5) failed. [ 1462.136842][T27406] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1462.418137][T16425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16263'. [ 1462.589563][T16429] sch_tbf: burst 88 is lower than device veth21 mtu (1514) ! [ 1462.647142][T16437] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16268'. [ 1463.147031][T16449] netlink: 'syz.4.16272': attribute type 32 has an invalid length. [ 1463.318692][T16453] xfrm0 speed is unknown, defaulting to 1000 [ 1464.584021][T16486] netlink: 80 bytes leftover after parsing attributes in process `syz.2.16285'. [ 1464.736005][T27543] net_ratelimit: 9 callbacks suppressed [ 1464.736027][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1464.756572][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1464.780987][T16489] netlink: 'syz.2.16287': attribute type 32 has an invalid length. [ 1465.196083][T16501] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16289'. [ 1465.231084][T16505] =v: renamed from veth0_to_bond [ 1465.347015][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1465.362217][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1465.611491][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16295'. [ 1465.958474][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1465.973601][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1466.191547][T16532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16299'. [ 1466.548346][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1466.562967][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1467.146757][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1467.162169][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1467.362037][T16566] can: request_module (can-proto-5) failed. [ 1467.529064][T16573] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16311'. [ 1468.111682][T16593] netlink: 'syz.1.16317': attribute type 4 has an invalid length. [ 1468.141668][T16593] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16317'. [ 1469.302183][T16640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16330'. [ 1469.477237][T16636] can: request_module (can-proto-5) failed. [ 1469.682050][T16654] geneve1: entered promiscuous mode [ 1469.797197][ T57] net_ratelimit: 9 callbacks suppressed [ 1469.797218][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1469.817411][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1469.988376][T16667] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1470.001191][T16665] netlink: 'syz.4.16340': attribute type 10 has an invalid length. [ 1470.417107][T27406] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1470.431871][T27406] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1470.986054][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1471.000613][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1471.253057][T16695] can: request_module (can-proto-5) failed. [ 1471.617178][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1471.632697][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1472.137656][T16743] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16356'. [ 1472.189559][T16749] netlink: 'syz.1.16363': attribute type 2 has an invalid length. [ 1472.207033][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1472.222717][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1472.480437][T16757] netlink: 'syz.4.16364': attribute type 32 has an invalid length. [ 1472.949683][T16773] can: request_module (can-proto-5) failed. [ 1473.478362][T16787] wireguard: wg1: Could not create IPv4 socket [ 1474.072910][T16812] netlink: 'syz.0.16381': attribute type 32 has an invalid length. [ 1474.802321][T16844] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16387'. [ 1474.822646][T16838] can: request_module (can-proto-5) failed. [ 1474.846688][T27543] net_ratelimit: 9 callbacks suppressed [ 1474.846710][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1474.866901][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1475.012467][T16846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16388'. [ 1475.033291][T16846] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1475.330316][T16848] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1475.428499][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1475.443208][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1475.636591][T16866] netlink: 'syz.2.16396': attribute type 32 has an invalid length. [ 1475.988004][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1476.003706][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1476.407113][T16899] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16406'. [ 1476.597927][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1476.612431][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1476.774349][T16906] wireguard: wg1: Could not create IPv4 socket [ 1476.932845][T16910] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1477.194722][T16922] netlink: 140 bytes leftover after parsing attributes in process `syz.2.16416'. [ 1477.222749][T16922] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16416'. [ 1477.279571][T16926] bond0: entered promiscuous mode [ 1477.306613][T16926] bond0: entered allmulticast mode [ 1477.410513][T16930] netlink: 'syz.2.16422': attribute type 32 has an invalid length. [ 1478.180867][T16956] tipc: Resetting bearer [ 1478.739613][T16973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16432'. [ 1478.926000][T16985] netlink: 'syz.3.16437': attribute type 32 has an invalid length. [ 1479.341224][T16998] tipc: Resetting bearer [ 1479.535311][T16998] geneve1: left promiscuous mode [ 1479.681656][T17011] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16446'. [ 1479.698183][T17008] syzkaller0: entered promiscuous mode [ 1479.702993][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16446'. [ 1479.713507][T17008] syzkaller0: entered allmulticast mode [ 1479.889907][T17016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16448'. [ 1480.015046][T17024] netlink: 'syz.2.16452': attribute type 32 has an invalid length. [ 1480.246361][T27409] net_ratelimit: 15 callbacks suppressed [ 1480.246382][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1480.266786][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1480.836112][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1480.850587][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1480.881960][T17038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16455'. [ 1481.030245][T17042] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16458'. [ 1481.171855][T17046] tipc: Resetting bearer [ 1481.241830][T17046] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1481.292474][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16460'. [ 1481.406836][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1481.421990][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1481.790925][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16466'. [ 1481.958159][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1481.972597][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1482.127247][T17090] netlink: 'syz.4.16472': attribute type 32 has an invalid length. [ 1482.275362][T17095] tipc: Resetting bearer [ 1482.338895][T17095] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1483.147794][T17107] netlink: 80 bytes leftover after parsing attributes in process `syz.3.16479'. [ 1483.157683][T17107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16479'. [ 1483.404617][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16480'. [ 1483.778125][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16486'. [ 1484.293349][T17157] wireguard: wg1: Could not create IPv4 socket [ 1485.548728][T17198] tipc: Resetting bearer [ 1485.591803][T17198] net_ratelimit: 14 callbacks suppressed [ 1485.591829][T17198] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1485.616579][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1485.631425][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1486.176941][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1486.191454][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1486.382785][T17228] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16518'. [ 1486.737635][T17245] netlink: 'syz.1.16526': attribute type 32 has an invalid length. [ 1486.777462][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1486.792951][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1487.397191][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1487.412335][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1487.464609][T17274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16534'. [ 1487.545759][T17278] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16536'. [ 1487.556350][T17278] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16536'. [ 1487.739944][T17288] vlan4: entered allmulticast mode [ 1487.758016][T17288] bond0: entered allmulticast mode [ 1487.798044][T17292] wireguard: wg1: Could not create IPv4 socket [ 1487.818530][T17292] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1487.881767][T17296] netlink: 'syz.1.16544': attribute type 32 has an invalid length. [ 1488.179506][T17310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16547'. [ 1488.213853][T17310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16547'. [ 1488.677158][T17336] tipc: Resetting bearer [ 1488.990140][T17351] netlink: 'syz.1.16562': attribute type 32 has an invalid length. [ 1490.126425][T17385] tipc: Resetting bearer [ 1491.029451][T17409] netlink: 'syz.4.16584': attribute type 32 has an invalid length. [ 1491.038890][ T57] net_ratelimit: 14 callbacks suppressed [ 1491.038912][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1491.059145][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1491.226898][T17407] syzkaller0: entered promiscuous mode [ 1491.240180][T17407] syzkaller0: entered allmulticast mode [ 1491.673955][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1491.688436][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1492.238238][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1492.253106][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1492.784535][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1492.799844][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1493.288341][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1493.303934][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1494.895229][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16587'. [ 1494.905219][T17422] bridge_slave_1: entered promiscuous mode [ 1495.190584][T17453] xt_hashlimit: size too large, truncated to 1048576 [ 1495.781251][T17477] syzkaller0: entered promiscuous mode [ 1495.821777][T17477] syzkaller0: entered allmulticast mode [ 1496.395013][T27543] net_ratelimit: 10 callbacks suppressed [ 1496.395035][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1496.417642][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1496.680766][T17503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16614'. [ 1496.947248][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1496.962143][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1497.506049][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1497.520702][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1498.036439][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1498.051024][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1498.580810][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1498.595711][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1500.331637][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16632'. [ 1500.449081][T17560] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16633'. [ 1500.930559][T17574] syzkaller0: entered promiscuous mode [ 1500.948222][T17574] syzkaller0: entered allmulticast mode [ 1501.095443][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16641'. [ 1501.232844][T17590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16643'. [ 1501.368279][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16645'. [ 1501.647678][T27413] net_ratelimit: 11 callbacks suppressed [ 1501.647701][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1501.668131][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1501.685315][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16647'. [ 1501.754764][T17607] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.16648'. [ 1502.196085][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1502.210615][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1502.726794][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1502.741401][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1503.268889][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1503.283421][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1503.823874][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1503.838456][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1505.463208][T17627] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16654'. [ 1505.955548][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16661'. [ 1505.981747][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16661'. [ 1506.860847][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16673'. [ 1506.871190][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16672'. [ 1506.888600][T17682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16673'. [ 1506.905964][T27404] net_ratelimit: 10 callbacks suppressed [ 1506.905986][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1506.926150][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1507.241543][T17695] syzkaller0: entered promiscuous mode [ 1507.255994][T17695] syzkaller0: entered allmulticast mode [ 1507.526984][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1507.542129][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1507.620879][T17710] tipc: Enabled bearer , priority 10 [ 1507.832755][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16686'. [ 1508.154489][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1508.169007][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1508.175691][T17733] xt_hashlimit: size too large, truncated to 1048576 [ 1508.448780][T17747] netlink: 'syz.0.16695': attribute type 5 has an invalid length. [ 1508.747361][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1508.762171][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1508.868151][T17756] netlink: 27 bytes leftover after parsing attributes in process `syz.4.16699'. [ 1508.901898][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16700'. [ 1508.955372][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16700'. [ 1509.342160][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1509.357039][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1511.230482][T17855] __nla_validate_parse: 3 callbacks suppressed [ 1511.230506][T17855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16731'. [ 1511.325670][T17861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16731'. [ 1511.480444][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16735'. [ 1511.489974][T17868] block nbd0: not configured, cannot reconfigure [ 1511.654904][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16736'. [ 1511.804878][T17878] wireguard: wg1: Could not create IPv4 socket [ 1511.943832][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16740'. [ 1511.987774][T27404] net_ratelimit: 9 callbacks suppressed [ 1511.987795][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1512.008590][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1512.297326][T17896] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16742'. [ 1512.616094][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1512.630996][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1512.674616][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16748'. [ 1512.721450][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16748'. [ 1513.071511][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16754'. [ 1513.178967][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1513.193861][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1513.360565][T17942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16757'. [ 1513.600469][T17950] netlink: 'syz.4.16762': attribute type 14 has an invalid length. [ 1513.756617][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1513.772319][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1513.968458][T17963] bond0: entered promiscuous mode [ 1513.988321][T17963] batadv0: entered promiscuous mode [ 1514.020365][T17963] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1514.066058][T17963] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1514.152337][T17963] bond0: left promiscuous mode [ 1514.178652][T17963] batadv0: left promiscuous mode [ 1514.347544][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1514.362054][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1516.763498][T18060] __nla_validate_parse: 6 callbacks suppressed [ 1516.763518][T18060] netlink: 280 bytes leftover after parsing attributes in process `syz.2.16792'. [ 1517.129738][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16799'. [ 1517.212497][ T50] block nbd0: Receive control failed (result -1) [ 1517.476545][ T13] net_ratelimit: 10 callbacks suppressed [ 1517.476567][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1517.497148][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1517.500994][T18093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16804'. [ 1517.649646][T18098] tipc: Enabling of bearer rejected, failed to enable media [ 1517.830846][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16810'. [ 1518.068741][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1518.084348][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1518.638059][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1518.653555][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1518.854442][T18139] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16821'. [ 1518.870015][T18134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16817'. [ 1518.875641][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16818'. [ 1519.029277][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16822'. [ 1519.073282][T18150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16824'. [ 1519.174043][ T50] block nbd4: Receive control failed (result -1) [ 1519.218647][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1519.233721][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1519.450090][T18166] xt_hashlimit: size too large, truncated to 1048576 [ 1519.818949][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1519.834106][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1520.438228][T18208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16843'. [ 1520.820193][ T50] block nbd9: Receive control failed (result -107) [ 1521.211480][T18247] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1521.251538][T18247] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1521.784190][T18269] syzkaller0: entered promiscuous mode [ 1521.802304][T18269] syzkaller0: entered allmulticast mode [ 1521.870069][T18276] netlink: 'syz.2.16868': attribute type 32 has an invalid length. [ 1522.499732][T18304] __nla_validate_parse: 1 callbacks suppressed [ 1522.499756][T18304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16876'. [ 1522.610180][ T50] block nbd10: Receive control failed (result -107) [ 1522.821640][T18310] syzkaller0: entered promiscuous mode [ 1522.827625][T18310] syzkaller0: entered allmulticast mode [ 1522.976619][ T57] net_ratelimit: 10 callbacks suppressed [ 1522.976642][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1522.996867][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1523.494060][T18328] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16883'. [ 1523.557690][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1523.575537][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1524.137099][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1524.151553][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1524.669679][T18351] IPVS: Scheduler module ip_vs_sip not found [ 1524.711823][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1524.727100][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1525.128652][T18361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16895'. [ 1525.196519][ T50] block nbd11: Receive control failed (result -107) [ 1525.267686][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1525.282826][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1526.289675][T18409] netlink: 'syz.2.16910': attribute type 32 has an invalid length. [ 1527.046369][T18433] netlink: 'syz.4.16918': attribute type 32 has an invalid length. [ 1527.824314][T18456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16923'. [ 1528.144197][T18466] netlink: 'syz.0.16929': attribute type 1 has an invalid length. [ 1528.339953][T18474] netlink: 'syz.0.16931': attribute type 32 has an invalid length. [ 1528.438049][T27413] net_ratelimit: 10 callbacks suppressed [ 1528.438069][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1528.460010][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1528.712040][T18486] ip6gre5: entered promiscuous mode [ 1528.739539][T18490] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1528.740101][T18486] ip6gre5: entered allmulticast mode [ 1529.038577][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1529.053772][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1529.189092][T18503] netlink: 'syz.0.16941': attribute type 32 has an invalid length. [ 1529.243287][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16943'. [ 1529.570522][T18522] tipc: Resetting bearer [ 1529.589148][T18522] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1529.608657][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1529.623527][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1530.053532][T18539] syzkaller1: entered promiscuous mode [ 1530.078392][T18539] syzkaller1: entered allmulticast mode [ 1530.131773][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16955'. [ 1530.187564][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1530.202638][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1530.990179][T18567] 8021q: adding VLAN 0 to HW filter on device  [ 1531.713585][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16969'. [ 1531.933692][T18608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16970'. [ 1532.380862][T18624] bond0: left promiscuous mode [ 1533.237033][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16982'. [ 1533.266220][T18661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16982'. [ 1533.494540][T18675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16987'. [ 1533.810899][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16989'. [ 1533.828454][T27409] net_ratelimit: 14 callbacks suppressed [ 1533.828475][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1533.850203][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1534.377516][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1534.392185][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1534.833363][T18728] syzkaller1: entered promiscuous mode [ 1534.840770][T18728] syzkaller1: entered allmulticast mode [ 1534.967619][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1534.982148][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1535.529886][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1535.544371][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1535.687143][T18767] netlink: 'syz.1.17017': attribute type 32 has an invalid length. [ 1535.694302][T18769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17015'. [ 1536.045604][T18781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17019'. [ 1536.064110][T18785] netlink: 'syz.4.17021': attribute type 32 has an invalid length. [ 1536.117492][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1536.132955][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1536.380420][T18795] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17024'. [ 1537.597592][T18827] netlink: 'syz.0.17036': attribute type 2 has an invalid length. [ 1537.610029][T18827] netlink: 'syz.0.17036': attribute type 2 has an invalid length. [ 1537.859298][T18835] netlink: 'syz.2.17039': attribute type 32 has an invalid length. [ 1538.123462][T18843] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17041'. [ 1538.355541][T18851] syzkaller1: entered promiscuous mode [ 1538.369296][T18851] syzkaller1: entered allmulticast mode [ 1539.266011][T27409] net_ratelimit: 10 callbacks suppressed [ 1539.266033][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1539.288199][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1539.828934][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1539.844091][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1539.935727][T18911] netlink: 'syz.2.17060': attribute type 32 has an invalid length. [ 1540.279170][T18929] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17063'. [ 1540.387264][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1540.403214][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1540.976770][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1540.991752][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1541.556505][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1541.571297][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1541.941778][T18983] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17082'. [ 1542.670136][T19006] syzkaller1: entered promiscuous mode [ 1542.677438][T19006] syzkaller1: entered allmulticast mode [ 1543.213358][T19018] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17095'. [ 1543.594775][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17099'. [ 1544.632267][T19065] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17105'. [ 1544.676637][T27409] net_ratelimit: 10 callbacks suppressed [ 1544.676659][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1544.697831][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1544.738296][T19065] ip6gre5: entered promiscuous mode [ 1544.764290][T19065] ip6gre5: entered allmulticast mode [ 1545.126906][T19075] netlink: 48 bytes leftover after parsing attributes in process `syz.3.17109'. [ 1545.297382][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1545.312049][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1545.859215][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1545.874407][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1546.149472][ T1318] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1546.437106][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1546.452223][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1546.884248][T19135] syzkaller0: entered promiscuous mode [ 1546.900092][T19135] syzkaller0: entered allmulticast mode [ 1547.016698][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1547.201774][T19137] syzkaller0: entered promiscuous mode [ 1547.228452][T19137] syzkaller0: entered allmulticast mode [ 1548.008232][T19163] xt_hashlimit: size too large, truncated to 1048576 [ 1548.819954][T19184] netlink: 'syz.1.17142': attribute type 32 has an invalid length. [ 1550.123448][ T57] net_ratelimit: 11 callbacks suppressed [ 1550.123473][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1550.144132][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1550.666297][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1550.680927][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1551.213964][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1551.228620][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1551.672573][T19172] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1551.684204][T19172] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1551.717688][T19172] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1551.749529][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1551.765140][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1552.308145][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1552.323749][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1552.348487][T19209] tipc: Resetting bearer [ 1552.577702][T19221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17157'. [ 1552.859843][T19230] netlink: 'syz.3.17161': attribute type 32 has an invalid length. [ 1553.039163][T19235] netlink: 'syz.3.17163': attribute type 1 has an invalid length. [ 1553.127203][T19235] 8021q: adding VLAN 0 to HW filter on device bond33 [ 1553.565090][T19261] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17169'. [ 1553.923882][T19274] netlink: 'syz.4.17173': attribute type 32 has an invalid length. [ 1554.659482][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17177'. [ 1554.683013][T19286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17177'. [ 1554.703106][T19286] geneve5: entered promiscuous mode [ 1554.709015][T19286] geneve5: entered allmulticast mode [ 1554.716924][T27409] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.741237][T27409] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.757965][T27409] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.780685][T27409] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.438643][ T57] net_ratelimit: 11 callbacks suppressed [ 1555.438667][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1555.458899][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1555.499516][T19319] netlink: 'syz.2.17186': attribute type 32 has an invalid length. [ 1555.687569][T19329] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17188'. [ 1556.026694][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1556.041418][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1556.067822][T19340] netlink: 'syz.3.17193': attribute type 4 has an invalid length. [ 1556.116111][T19340] netlink: 'syz.3.17193': attribute type 4 has an invalid length. [ 1556.240309][T19342] xfrm0 speed is unknown, defaulting to 1000 [ 1556.599397][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1556.613895][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1556.886952][T19365] netlink: 'syz.1.17202': attribute type 32 has an invalid length. [ 1557.166329][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1557.185108][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1557.758895][ T199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1557.774039][ T199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1558.144059][T19414] netlink: 'syz.2.17217': attribute type 32 has an invalid length. [ 1558.751139][T19428] netlink: 'syz.0.17218': attribute type 32 has an invalid length. [ 1559.942101][T19441] netlink: 'syz.1.17221': attribute type 10 has an invalid length. [ 1559.951213][T19441] netlink: 'syz.1.17221': attribute type 10 has an invalid length. [ 1560.876960][ T199] net_ratelimit: 10 callbacks suppressed [ 1560.876985][ T199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1560.897506][ T199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1560.944230][T19402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1561.418877][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1561.433527][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1561.987152][ T199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1562.001651][ T199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1562.211470][T19488] netlink: 'syz.4.17235': attribute type 32 has an invalid length. [ 1562.233641][T19490] netlink: 'syz.0.17236': attribute type 32 has an invalid length. [ 1562.577015][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1562.591641][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1563.115670][T19518] syzkaller0: entered promiscuous mode [ 1563.146972][T19518] syzkaller0: entered allmulticast mode [ 1563.186686][ T199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1563.201101][ T199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1563.283980][T19531] netlink: 'syz.3.17248': attribute type 32 has an invalid length. [ 1563.729786][T19546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17252'. [ 1564.558315][T19569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17258'. [ 1564.644136][T19572] syzkaller0: entered promiscuous mode [ 1564.656003][T19572] syzkaller0: entered allmulticast mode [ 1565.280333][T19593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17267'. [ 1565.840807][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17272'. [ 1566.306552][ T199] net_ratelimit: 10 callbacks suppressed [ 1566.306574][ T199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1566.330228][ T199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1566.933446][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1566.948947][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1567.238149][T19645] syzkaller0: entered promiscuous mode [ 1567.243844][T19645] syzkaller0: entered allmulticast mode [ 1567.475994][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1567.490515][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1567.609805][T19663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17281'. [ 1568.058806][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1568.075123][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1568.637092][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1568.661174][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1571.751849][ T199] net_ratelimit: 10 callbacks suppressed [ 1571.751870][ T199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1571.773520][ T199] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1572.018402][T19732] netlink: 48 bytes leftover after parsing attributes in process `syz.3.17301'. [ 1572.316693][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1572.333315][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1572.581465][T19743] netlink: 52 bytes leftover after parsing attributes in process `syz.0.17309'. [ 1572.896678][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1572.911329][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1573.401080][T19773] netlink: 'syz.4.17316': attribute type 32 has an invalid length. [ 1573.487127][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1573.501622][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1573.618009][T19783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17320'. [ 1573.662909][T19784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17319'. [ 1574.065989][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1574.080498][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1574.612205][T19818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17332'. [ 1575.242888][T19836] xfrm0 speed is unknown, defaulting to 1000 [ 1576.019214][T19867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17345'. [ 1576.110657][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17347'. [ 1576.204413][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17347'. [ 1576.469939][T19886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17352'. [ 1576.489628][T19880] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17350'. [ 1576.511739][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1576.526147][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1576.541054][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1576.564268][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1576.662399][T19895] syzkaller0: entered promiscuous mode [ 1576.669271][T19895] syzkaller0: entered allmulticast mode [ 1577.031116][T19904] wireguard: wg1: Could not create IPv4 socket [ 1577.059618][T19904] net_ratelimit: 11 callbacks suppressed [ 1577.059642][T19904] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1577.206937][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1577.222316][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1577.502557][T19920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17362'. [ 1577.798771][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1577.813230][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1578.207110][T19952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17374'. [ 1578.378968][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1578.394498][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1578.967229][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1578.982615][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1578.998889][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17382'. [ 1579.142074][T19980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17382'. [ 1579.152145][T19982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17385'. [ 1579.537069][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1579.834901][T20015] netlink: 'syz.0.17393': attribute type 32 has an invalid length. [ 1580.018105][T20022] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17394'. [ 1580.344261][T20038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17397'. [ 1580.369696][T20038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17397'. [ 1580.401665][T20038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17397'. [ 1580.798509][T20062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17407'. [ 1581.156622][T20080] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 1582.116797][T27413] net_ratelimit: 11 callbacks suppressed [ 1582.116819][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1582.138274][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1582.622615][T20134] __nla_validate_parse: 6 callbacks suppressed [ 1582.622636][T20134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17426'. [ 1582.654692][T20134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17426'. [ 1582.756923][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1582.771394][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1582.842393][T20140] tipc: Resetting bearer [ 1582.863410][T20140] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1582.903259][T20144] bridge0: port 1(vlan4) entered blocking state [ 1582.911305][T20144] bridge0: port 1(vlan4) entered disabled state [ 1582.919558][T20144] vlan4: entered allmulticast mode [ 1582.924799][T20144] dummy0: entered allmulticast mode [ 1582.936884][T20144] vlan4: entered promiscuous mode [ 1582.943699][T20144] dummy0: entered promiscuous mode [ 1583.119243][T20150] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17432'. [ 1583.296527][T20164] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 1583.301073][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1583.319098][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1583.844933][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17440'. [ 1583.907844][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1583.922665][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1584.250170][T20197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17444'. [ 1584.418667][T20203] syzkaller0: entered promiscuous mode [ 1584.451369][T20203] syzkaller0: entered allmulticast mode [ 1584.501010][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1585.469653][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17456'. [ 1585.524019][T20231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17456'. [ 1585.607478][T20240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17459'. [ 1585.646084][T20243] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17458'. [ 1585.779007][T20246] netlink: 7 bytes leftover after parsing attributes in process `syz.3.17461'. [ 1585.915713][T20253] syzkaller0: entered promiscuous mode [ 1585.922336][T20253] syzkaller0: entered allmulticast mode [ 1586.191485][T20261] netlink: 'syz.4.17466': attribute type 32 has an invalid length. [ 1586.470776][T20270] tipc: Resetting bearer [ 1586.815022][T20278] xfrm0 speed is unknown, defaulting to 1000 [ 1587.388086][T20299] syzkaller0: entered promiscuous mode [ 1587.403928][T20299] syzkaller0: entered allmulticast mode [ 1587.438768][T20293] xfrm0 speed is unknown, defaulting to 1000 [ 1587.582666][ T13] net_ratelimit: 12 callbacks suppressed [ 1587.582689][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1587.603721][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1587.847149][T20315] tipc: Resetting bearer [ 1587.866941][T20315] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1588.186972][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1588.202204][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1588.361650][T20331] netlink: 'syz.2.17487': attribute type 32 has an invalid length. [ 1588.727049][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1588.741581][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1589.215307][T20354] syzkaller0: entered promiscuous mode [ 1589.234374][T20354] syzkaller0: entered allmulticast mode [ 1589.298602][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1589.313077][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1589.449561][T20361] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1589.605557][T20366] netlink: 'syz.1.17496': attribute type 32 has an invalid length. [ 1589.965734][T20379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17501'. [ 1590.021200][T20381] netlink: 'syz.1.17502': attribute type 32 has an invalid length. [ 1590.397801][T20395] syzkaller0: entered promiscuous mode [ 1590.403572][T20395] syzkaller0: entered allmulticast mode [ 1590.490496][T20399] netlink: 'syz.4.17509': attribute type 21 has an invalid length. [ 1590.499672][T20399] netlink: 'syz.4.17509': attribute type 21 has an invalid length. [ 1590.673892][T20405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17513'. [ 1590.754503][T20414] tipc: Resetting bearer [ 1590.925549][T20421] netlink: 'syz.1.17517': attribute type 32 has an invalid length. [ 1591.219390][T20431] bridge21: entered promiscuous mode [ 1591.225000][T20431] bridge21: entered allmulticast mode [ 1591.241484][T20431] team0: Port device bridge21 added [ 1591.402169][T20440] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 1592.100609][T20468] netlink: 'syz.1.17532': attribute type 32 has an invalid length. [ 1592.258633][T20474] syzkaller0: entered promiscuous mode [ 1592.264546][T20474] syzkaller0: entered allmulticast mode [ 1592.588503][T20481] xfrm0 speed is unknown, defaulting to 1000 [ 1592.632202][T20488] xt_hashlimit: size too large, truncated to 1048576 [ 1592.988329][T27543] net_ratelimit: 15 callbacks suppressed [ 1592.988352][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1593.009598][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1593.070931][T20503] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1593.113413][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17544'. [ 1593.156866][T20505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17544'. [ 1593.414853][T20516] netlink: 'syz.4.17549': attribute type 32 has an invalid length. [ 1593.607191][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1593.622431][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1593.880465][T20529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17551'. [ 1593.984031][T20534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17551'. [ 1594.080730][T20539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17556'. [ 1594.098516][T20539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17556'. [ 1594.148219][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1594.163159][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1594.560736][T20551] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1594.701460][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1594.716372][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1594.959886][T20563] "syz.3.17564" (20563) uses obsolete ecb(arc4) skcipher [ 1595.259460][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17569'. [ 1595.421861][T20576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17569'. [ 1595.790415][T20583] syzkaller0: entered promiscuous mode [ 1595.814548][T20583] syzkaller0: entered allmulticast mode [ 1595.849364][T20590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17572'. [ 1596.095917][T20596] tipc: Resetting bearer [ 1596.195921][T20607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17577'. [ 1596.713094][T20624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17583'. [ 1596.827761][T20620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17583'. [ 1597.024462][T20631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17587'. [ 1597.143405][T20636] syzkaller0: entered promiscuous mode [ 1597.157604][T20636] syzkaller0: entered allmulticast mode [ 1597.567790][T20662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17594'. [ 1597.607894][T20663] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17595'. [ 1597.758262][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17597'. [ 1598.161328][T20676] net_ratelimit: 13 callbacks suppressed [ 1598.161352][T20676] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1598.306960][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1598.322465][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1598.842862][T20699] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1598.887879][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1598.903460][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1599.294970][T20719] tipc: Resetting bearer [ 1599.374022][T20719] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1599.498747][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1599.513910][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1600.056687][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1600.071287][ T57] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1600.155581][T20738] xfrm0 speed is unknown, defaulting to 1000 [ 1600.627164][T20757] tipc: Resetting bearer [ 1600.933803][T20738] dvmrp0: entered allmulticast mode [ 1600.950463][T20759] syzkaller1: entered promiscuous mode [ 1600.969960][T20759] syzkaller1: entered allmulticast mode [ 1600.989661][ T57] dvmrp0: left allmulticast mode [ 1600.998943][T20770] __nla_validate_parse: 8 callbacks suppressed [ 1600.998966][T20770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17629'. [ 1602.122563][T20786] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 1602.148043][T20786] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 1602.425355][T20799] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17637'. [ 1602.839155][T20810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17641'. [ 1602.920049][T20811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17641'. [ 1603.186973][T27409] net_ratelimit: 11 callbacks suppressed [ 1603.186995][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1603.207258][T27409] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1603.397286][T20823] can: request_module (can-proto-5) failed. [ 1603.837090][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1603.851714][T27413] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1604.282898][T20860] netlink: 'syz.1.17656': attribute type 1 has an invalid length. [ 1604.406571][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1604.421063][T27404] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1604.471587][T20862] gretap5: entered allmulticast mode [ 1604.488715][T20862] bond21: (slave gretap5): making interface the new active one [ 1604.498013][T20862] bond21: (slave gretap5): Enslaving as an active interface with an up link [ 1604.553232][T20872] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17658'. [ 1604.946878][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1604.962233][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1605.355863][T20896] can: request_module (can-proto-5) failed. [ 1605.519743][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1605.534724][T27543] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1605.688686][T20912] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17670'. [ 1605.830370][T20916] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17671'. [ 1606.033581][T20922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17674'. [ 1606.072130][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17674'. [ 1606.224084][T20926] syzkaller1: entered promiscuous mode [ 1606.238436][T20926] syzkaller1: entered allmulticast mode [ 1606.320107][T20933] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17678'. [ 1607.018923][T20953] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17683'. [ 1607.151893][T20959] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17684'. [ 1607.183121][T20958] tipc: Resetting bearer [ 1607.222980][T20961] netlink: 48 bytes leftover after parsing attributes in process `syz.3.17686'. [ 1607.443456][T20971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17688'. [ 1607.563587][T20975] netlink: 'syz.2.17690': attribute type 1 has an invalid length. [ 1607.657366][T20975] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1607.697156][T20978] batman_adv: batadv0: Interface deactivated: dummy0 [ 1607.729127][T20978] batman_adv: batadv0: Removing interface: dummy0 [ 1607.781078][T20978] bond26: (slave dummy0): making interface the new active one [ 1607.827649][T20978] bond26: (slave dummy0): Enslaving as an active interface with an up link [ 1607.852412][T20982] : renamed from dummy0 (while UP) [ 1608.231892][T21000] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17697'. [ 1608.499210][T21015] netlink: 48 bytes leftover after parsing attributes in process `syz.4.17701'. [ 1608.580460][T21016] xfrm0 speed is unknown, defaulting to 1000 [ 1608.580505][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17703'. [ 1609.605134][T21035] bond_slave_0: left promiscuous mode [ 1609.612378][T21035] bond_slave_0: entered promiscuous mode [ 1609.640189][T21035] bond_slave_0: entered allmulticast mode [ 1611.859544][T21124] netlink: 'syz.1.17727': attribute type 4 has an invalid length. [ 1611.914068][T21127] netlink: 'syz.1.17727': attribute type 4 has an invalid length. [ 1612.065662][T21134] __nla_validate_parse: 6 callbacks suppressed [ 1612.065682][T21134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17728'. [ 1612.756536][T21142] nbd: nbd0 already in use [ 1612.761821][T21142] block nbd0: NBD_DISCONNECT [ 1612.768068][T21142] block nbd0: Send disconnect failed -32 [ 1612.773863][T21142] block nbd0: shutting down sockets [ 1614.848736][T21149] syzkaller1: entered promiscuous mode [ 1614.858200][T21149] syzkaller1: entered allmulticast mode [ 1614.886599][T21154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17733'. [ 1614.938132][T21157] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17735'. [ 1615.740581][T21182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17743'. [ 1616.135939][T21195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17746'. [ 1616.161929][T21197] netlink: 'syz.4.17747': attribute type 1 has an invalid length. [ 1616.179312][T21197] netlink: 1323 bytes leftover after parsing attributes in process `syz.4.17747'. [ 1616.392438][T21205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17751'. [ 1617.304136][T21235] xfrm0 speed is unknown, defaulting to 1000 [ 1617.438904][T21241] syzkaller1: entered promiscuous mode [ 1617.461137][T21241] syzkaller1: entered allmulticast mode [ 1618.029832][T21256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17764'. [ 1618.091384][T21259] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17767'. [ 1618.196982][T21266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1618.302365][T21250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1618.644265][T21272] syzkaller1: entered promiscuous mode [ 1618.659827][T21272] syzkaller1: entered allmulticast mode [ 1619.146468][T21280] syzkaller1: entered promiscuous mode [ 1619.152427][T21280] syzkaller1: entered allmulticast mode [ 1619.662021][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17784'. [ 1619.994694][T21320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17786'. [ 1620.080597][T21325] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17787'. [ 1620.912103][T21343] net_ratelimit: 10 callbacks suppressed [ 1620.912126][T21343] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1621.363320][T21361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17801'. [ 1621.669185][T21377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17805'. [ 1622.230547][T21396] syzkaller1: entered promiscuous mode [ 1622.258610][T21396] syzkaller1: entered allmulticast mode [ 1622.988880][T21420] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17814'. [ 1623.332140][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17816'. [ 1624.407035][T21467] bond0: entered promiscuous mode [ 1624.429789][T21467] bond0: left promiscuous mode [ 1624.449552][T21468] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17827'. [ 1624.487148][T21472] bond0: entered promiscuous mode [ 1624.504994][T21472] bond0: left promiscuous mode [ 1625.240295][T21500] bond20: option arp_all_targets: invalid value (3) [ 1625.313146][T21500] bond20 (unregistering): Released all slaves [ 1625.532127][T21507] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1625.560754][T21507] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 57567 - 0 [ 1625.653073][T21507] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1625.689995][T21507] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 57567 - 0 [ 1625.830817][T21507] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1625.867599][T21507] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 57567 - 0 [ 1626.207717][T21542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17846'. [ 1626.338786][T21507] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1626.379400][T21507] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 57567 - 0 [ 1626.629665][T27413] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1626.653454][T27413] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 57567 - 0 [ 1626.967903][T27543] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1626.987578][T27543] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 57567 - 0 [ 1627.026890][T27543] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1627.065993][T27543] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 57567 - 0 [ 1627.117778][ T57] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1627.138674][ T57] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 57567 - 0 [ 1627.415031][T21579] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17856'. [ 1627.578441][T21582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17857'. [ 1628.524937][T21618] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17867'. [ 1630.004929][T21659] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17880'. [ 1630.647962][T21669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17885'. [ 1631.387600][T21680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17890'. [ 1631.445619][T21687] syzkaller0: entered promiscuous mode [ 1631.452341][T21687] syzkaller0: entered allmulticast mode [ 1632.883409][T21725] bond20: entered allmulticast mode [ 1632.890024][T21725] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1632.932752][T21730] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1632.984147][T21730] bond20: (slave macvlan0): Enslaving as an active interface with a down link [ 1633.177749][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1633.241147][T21734] syzkaller0: entered promiscuous mode [ 1633.263348][T21734] syzkaller0: entered allmulticast mode [ 1634.015062][T21759] xfrm0 speed is unknown, defaulting to 1000 [ 1634.360244][T21775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17917'. [ 1635.194555][T21790] syzkaller0: entered promiscuous mode [ 1635.208774][T21790] syzkaller0: entered allmulticast mode [ 1635.451425][T21805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17923'. [ 1635.519742][T21809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17923'. [ 1639.462058][T21829] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1639.477788][T21829] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1639.489261][T21829] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1639.840732][T21852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17937'. [ 1642.291137][T21863] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1642.850280][T21905] netlink: 'syz.0.17946': attribute type 4 has an invalid length. [ 1642.905377][T21905] netlink: 'syz.0.17946': attribute type 4 has an invalid length. [ 1642.930299][T21908] netlink: 128 bytes leftover after parsing attributes in process `syz.3.17947'. [ 1642.970568][T21908] bridge_slave_0: entered promiscuous mode [ 1643.989512][T21928] syzkaller0: entered promiscuous mode [ 1644.019389][T21928] syzkaller0: entered allmulticast mode [ 1644.237586][T21940] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 1644.249214][T21940] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 1644.377555][T21949] netlink: 'syz.2.17959': attribute type 11 has an invalid length. [ 1644.428221][T21949] wireguard: wg1: Could not create IPv4 socket [ 1644.434705][T21949] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1645.008941][T21976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17970'. [ 1645.590462][T21999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17978'. [ 1645.632997][T22000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1646.052465][T22022] syzkaller0: entered promiscuous mode [ 1646.074943][T22022] syzkaller0: entered allmulticast mode [ 1646.150600][T22024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17983'. [ 1646.400617][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17988'. [ 1646.546683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.781818][T22036] syzkaller0: entered promiscuous mode [ 1646.795180][T22036] syzkaller0: entered allmulticast mode [ 1646.929216][T22063] block nbd3: reconnected socket [ 1646.944655][ T50] block nbd3: Receive control failed (result -32) [ 1651.057410][T22112] xfrm0 speed is unknown, defaulting to 1000 [ 1651.889937][T22138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18010'. [ 1652.089681][T22142] netlink: 'syz.3.18012': attribute type 1 has an invalid length. [ 1652.100710][T22140] syzkaller1: entered promiscuous mode [ 1652.112699][T22140] syzkaller1: entered allmulticast mode [ 1652.215432][T22142] bond34: entered promiscuous mode [ 1652.249704][T22142] 8021q: adding VLAN 0 to HW filter on device bond34 [ 1652.279881][T22144] bridge0: Device is already in use. [ 1652.313613][T22145] bridge0: Device is already in use. [ 1652.571176][T22155] syzkaller0: entered promiscuous mode [ 1652.593590][T22155] syzkaller0: entered allmulticast mode [ 1653.022238][T22172] syzkaller1: entered promiscuous mode [ 1653.041933][T22172] syzkaller1: entered allmulticast mode [ 1654.019464][T22188] syzkaller0: entered promiscuous mode [ 1654.043106][T22188] syzkaller0: entered allmulticast mode [ 1654.585390][T22200] syzkaller0: entered promiscuous mode [ 1654.593249][T22200] syzkaller0: entered allmulticast mode [ 1655.890370][T22242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18045'. [ 1657.027656][T22274] syzkaller0: entered promiscuous mode [ 1657.053120][T22274] syzkaller0: entered allmulticast mode [ 1657.253262][T22288] xfrm0 speed is unknown, defaulting to 1000 [ 1657.282882][T22289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18056'. [ 1657.454236][T22294] tipc: Enabled bearer , priority 0 [ 1657.516624][T22294] +: renamed from syzkaller0 [ 1657.533619][T22294] tipc: Disabling bearer [ 1657.834842][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18058'. [ 1657.859448][T22298] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18058'. [ 1657.902446][T22300] syzkaller0: entered promiscuous mode [ 1657.961713][T22300] syzkaller0: entered allmulticast mode [ 1658.819726][T22316] xfrm0 speed is unknown, defaulting to 1000 [ 1659.240181][T22329] syzkaller0: entered promiscuous mode [ 1659.266492][T22329] syzkaller0: entered allmulticast mode [ 1659.959918][T22359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18074'. [ 1660.219237][T22377] netlink: 'syz.3.18078': attribute type 1 has an invalid length. [ 1660.257753][T22377] 8021q: adding VLAN 0 to HW filter on device bond35 [ 1660.759487][T22381] bond35: (slave dummy0): making interface the new active one [ 1660.787802][T22381] bond35: (slave dummy0): Enslaving as an active interface with an up link [ 1660.842014][T22377] vlan5: entered allmulticast mode [ 1660.847683][T22377] bond35: entered allmulticast mode [ 1660.853277][T22377] dummy0: entered allmulticast mode [ 1661.212689][T22410] tipc: Resetting bearer [ 1661.300675][T22410] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1661.680816][T22427] syzkaller0: entered promiscuous mode [ 1661.697153][T22427] syzkaller0: entered allmulticast mode [ 1661.728596][T22428] tipc: Enabled bearer , priority 0 [ 1661.783711][T22426] tipc: Resetting bearer [ 1661.872381][T22426] tipc: Disabling bearer [ 1661.968118][T22442] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18089'. [ 1662.171380][T22451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18089'. [ 1663.634941][T22467] tipc: Resetting bearer [ 1664.362271][T22467] tipc: Resetting bearer [ 1665.500640][T22480] wireguard: wg1: Could not create IPv4 socket [ 1665.518185][T22480] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1665.569859][T29200] xfrm0 speed is unknown, defaulting to 1000 [ 1665.573213][T27406] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.586806][T29200] syz2: Port: 1 Link DOWN [ 1665.620798][T27406] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1665.654482][T27406] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.690925][T27406] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1665.730778][T27404] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.776562][T27404] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1665.867263][T22516] tipc: Enabled bearer , priority 0 [ 1665.940806][T22524] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18104'. [ 1666.155647][T22531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18104'. [ 1666.320876][T22516] syzkaller0: entered promiscuous mode [ 1666.335629][T22516] syzkaller0: entered allmulticast mode [ 1666.352254][T22516] tipc: Resetting bearer [ 1666.429663][T22511] tipc: Resetting bearer [ 1669.025566][ T1318] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1670.083618][T22511] tipc: Disabling bearer [ 1670.280528][T22562] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1670.369408][T22567] netlink: 'syz.4.18117': attribute type 32 has an invalid length. [ 1670.497480][T22571] syzkaller0: entered promiscuous mode [ 1670.506910][T22571] syzkaller0: entered allmulticast mode [ 1670.765564][T22586] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18119'. [ 1670.960915][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18119'. [ 1671.519406][T22599] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1671.563800][T22599] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1671.745840][T22616] netlink: 'syz.3.18128': attribute type 1 has an invalid length. [ 1671.765888][T22616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18128'. [ 1671.786684][T22616] netlink: 'syz.3.18128': attribute type 21 has an invalid length. [ 1671.794977][T22616] netlink: 'syz.3.18128': attribute type 22 has an invalid length. [ 1671.812202][T22616] netlink: 'syz.3.18128': attribute type 23 has an invalid length. [ 1671.820669][T22616] netlink: 'syz.3.18128': attribute type 25 has an invalid length. [ 1671.823174][T22618] syzkaller0: entered promiscuous mode [ 1671.831044][T22616] netlink: 96 bytes leftover after parsing attributes in process `syz.3.18128'. [ 1671.856994][T22618] syzkaller0: entered allmulticast mode [ 1672.193591][T22631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18131'. [ 1672.488658][T22634] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1672.602890][T22639] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18135'. [ 1672.742950][T22648] netlink: 'syz.0.18137': attribute type 32 has an invalid length. [ 1672.754723][T22650] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18136'. [ 1673.178806][T22669] netlink: 'syz.2.18142': attribute type 1 has an invalid length. [ 1673.237379][T22669] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1673.344114][T22669] bond27 (unregistering): Released all slaves [ 1673.435367][T22679] syzkaller0: entered promiscuous mode [ 1673.441480][T22679] syzkaller0: entered allmulticast mode [ 1673.470404][T22665] can: request_module (can-proto-5) failed. [ 1673.560646][T22685] netlink: 'syz.2.18146': attribute type 10 has an invalid length. [ 1673.664050][T22687] syzkaller0: entered promiscuous mode [ 1673.670634][T22687] syzkaller0: entered allmulticast mode [ 1673.862287][T22697] netlink: 'syz.2.18151': attribute type 32 has an invalid length. [ 1673.878176][T22695] erspan0: left promiscuous mode [ 1673.914780][T22695] tipc: Resetting bearer [ 1674.183702][T22695] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1674.295044][T29173] xfrm0 speed is unknown, defaulting to 1000 [ 1674.314748][T29173] syz2: Port: 1 Link ACTIVE [ 1675.170154][T22746] syzkaller0: entered promiscuous mode [ 1675.177042][T22746] syzkaller0: entered allmulticast mode [ 1675.555527][T22753] syzkaller0: entered promiscuous mode [ 1675.561293][T22753] syzkaller0: entered allmulticast mode [ 1675.771433][T22758] can: request_module (can-proto-5) failed. [ 1676.253580][T22783] syzkaller0: entered promiscuous mode [ 1676.266501][T22783] syzkaller0: entered allmulticast mode [ 1676.523192][T22793] syzkaller0: entered promiscuous mode [ 1676.529181][T22793] syzkaller0: entered allmulticast mode [ 1676.800627][T22804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18176'. [ 1676.884220][T22800] tipc: Enabling of bearer rejected, already enabled [ 1677.934531][T22851] can: request_module (can-proto-5) failed. [ 1681.075594][T22828] syzkaller0: entered promiscuous mode [ 1681.082579][T22828] syzkaller0: entered allmulticast mode [ 1681.214460][T22871] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18185'. [ 1684.751559][T22854] syzkaller0: entered promiscuous mode [ 1684.757175][T22854] syzkaller0: entered allmulticast mode [ 1688.193978][T22910] tipc: Resetting bearer [ 1688.763736][T22933] can: request_module (can-proto-5) failed. [ 1689.125648][T22947] syzkaller0: entered promiscuous mode [ 1689.134822][T22947] syzkaller0: entered allmulticast mode [ 1689.394000][T22951] syzkaller0: entered promiscuous mode [ 1689.407563][T22951] syzkaller0: entered allmulticast mode [ 1690.071999][T22967] xfrm0 speed is unknown, defaulting to 1000 [ 1690.652987][T22995] syzkaller0: entered promiscuous mode [ 1690.680190][T22995] syzkaller0: entered allmulticast mode [ 1691.110934][T23002] can: request_module (can-proto-5) failed. [ 1691.162708][T23012] syzkaller0: entered promiscuous mode [ 1691.177094][T23012] syzkaller0: entered allmulticast mode [ 1691.285081][T23018] netlink: 'syz.3.18216': attribute type 32 has an invalid length. [ 1692.745045][T23019] syzkaller0: entered promiscuous mode [ 1692.764824][T23019] syzkaller0: entered allmulticast mode [ 1692.822229][T23054] syzkaller0: entered promiscuous mode [ 1692.839989][T23054] syzkaller0: entered allmulticast mode [ 1696.058962][T23080] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1696.679322][T23105] can: request_module (can-proto-5) failed. [ 1696.782387][T23109] syzkaller0: entered promiscuous mode [ 1696.796804][T23109] syzkaller0: entered allmulticast mode [ 1700.566132][T23150] syzkaller0: entered promiscuous mode [ 1700.588627][T23150] syzkaller0: entered allmulticast mode [ 1700.595913][T23155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18235'. [ 1701.454768][T23191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18246'. [ 1701.553439][T23194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18246'. [ 1701.584901][T23191] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1701.618557][T23194] bond22: entered promiscuous mode [ 1701.634908][T23195] can: request_module (can-proto-5) failed. [ 1701.647046][T23194] bond22: entered allmulticast mode [ 1701.736272][T23201] syzkaller0: entered promiscuous mode [ 1701.742133][T23201] syzkaller0: entered allmulticast mode [ 1701.854342][T23204] netlink: 'syz.1.18249': attribute type 2 has an invalid length. [ 1701.877826][T23204] netlink: 'syz.1.18249': attribute type 11 has an invalid length. [ 1701.901808][T23204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18249'. [ 1702.279515][T23220] xfrm0 speed is unknown, defaulting to 1000 [ 1702.484592][T23224] syzkaller0: entered promiscuous mode [ 1702.497631][T23224] syzkaller0: entered allmulticast mode [ 1702.964449][T23239] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18258'. [ 1704.293512][T23253] tipc: Enabled bearer , priority 0 [ 1704.319099][T23255] syzkaller0: entered promiscuous mode [ 1704.337250][T23255] syzkaller0: entered allmulticast mode [ 1704.465081][T23253] tipc: Resetting bearer [ 1704.482016][T23257] syzkaller0: entered promiscuous mode [ 1704.488549][T23257] syzkaller0: entered allmulticast mode [ 1704.497832][T23261] syzkaller0: entered promiscuous mode [ 1704.512066][T23261] syzkaller0: entered allmulticast mode [ 1704.544371][T23251] tipc: Resetting bearer [ 1704.592510][T23251] tipc: Disabling bearer [ 1704.753866][T23272] netlink: 'syz.2.18271': attribute type 1 has an invalid length. [ 1704.812150][T23272] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1704.843996][T23272] bond27: entered promiscuous mode [ 1704.849318][T23272] bond27: entered allmulticast mode [ 1705.174388][T23289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18274'. [ 1705.404877][T23295] syzkaller0: entered promiscuous mode [ 1705.411830][T23295] syzkaller0: entered allmulticast mode [ 1705.600099][T23299] syzkaller0: entered promiscuous mode [ 1705.625927][T23299] syzkaller0: entered allmulticast mode [ 1705.640618][T23301] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1705.656677][T23301] syzkaller0: entered promiscuous mode [ 1705.662260][T23301] syzkaller0: entered allmulticast mode [ 1705.739858][T23301] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1706.788763][T23346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18287'. [ 1709.530774][T23322] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1709.830491][T23357] syzkaller0: entered promiscuous mode [ 1709.853548][T23357] syzkaller0: entered allmulticast mode [ 1710.032234][T23367] syzkaller0: entered promiscuous mode [ 1710.059852][T23367] syzkaller0: entered allmulticast mode [ 1710.545924][T23385] syzkaller0: entered promiscuous mode [ 1710.556175][T23385] syzkaller0: entered allmulticast mode [ 1710.822203][T23395] netlink: 'syz.4.18303': attribute type 1 has an invalid length. [ 1710.844166][T23392] syzkaller0: entered promiscuous mode [ 1710.857908][T23392] syzkaller0: entered allmulticast mode [ 1710.991841][T23395] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1711.108432][T23396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18302'. [ 1711.192858][T23401] bond21: (slave ip6gretap2): making interface the new active one [ 1711.224655][T23401] bond21: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1711.526731][T23419] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.18305'. [ 1711.632235][T23426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18306'. [ 1711.721621][T23415] syzkaller0: entered promiscuous mode [ 1711.742422][T23415] syzkaller0: entered allmulticast mode [ 1711.926303][T23427] syzkaller0: entered promiscuous mode [ 1711.931869][T23427] syzkaller0: entered allmulticast mode [ 1715.780910][T23452] tipc: Enabling of bearer rejected, failed to enable media [ 1715.980902][T11892] page_pool_release_retry() stalled pool shutdown: id 17584, 1 inflight 60 sec [ 1719.209062][T23506] bond8: entered allmulticast mode [ 1719.216746][T23508] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1719.225603][T23505] bond8: left allmulticast mode [ 1719.412545][T23521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18317'. [ 1719.469496][T23524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18321'. [ 1719.690968][T23528] syzkaller0: entered promiscuous mode [ 1719.708990][T23528] syzkaller0: entered allmulticast mode [ 1720.288195][T23549] syzkaller0: entered promiscuous mode [ 1720.302669][T23549] syzkaller0: entered allmulticast mode [ 1720.444958][T23552] tipc: Enabling of bearer rejected, already enabled [ 1720.644387][T23561] netlink: 'syz.0.18334': attribute type 10 has an invalid length. [ 1720.677596][T23561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18334'. [ 1720.803148][T23566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18336'. [ 1720.822762][T23566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18336'. [ 1720.842932][T23566] netlink: 'syz.2.18336': attribute type 6 has an invalid length. [ 1720.916951][T23566] TC_ACT_REPEAT abuse ? [ 1721.185489][T23581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18337'. [ 1721.532462][T23590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18339'. [ 1722.351150][T23605] syzkaller0: entered promiscuous mode [ 1722.386921][T23605] syzkaller0: entered allmulticast mode [ 1726.329678][T23635] tipc: Enabled bearer , priority 0 [ 1726.351217][T23639] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1726.416848][T23636] syzkaller0: entered promiscuous mode [ 1726.432122][T23636] syzkaller0: entered allmulticast mode [ 1726.452912][T23640] tipc: Resetting bearer [ 1726.472016][T23633] tipc: Resetting bearer [ 1726.539497][T23633] tipc: Disabling bearer [ 1726.744787][T23675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18353'. [ 1727.160741][T23683] xfrm0 speed is unknown, defaulting to 1000 [ 1728.001826][T23712] tipc: Resetting bearer [ 1728.022343][T23712] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1728.050373][T23713] tipc: Enabling of bearer rejected, already enabled [ 1728.176464][T23713] tipc: Resetting bearer [ 1728.663240][T23723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18369'. [ 1729.205259][T23741] syzkaller0: entered promiscuous mode [ 1729.220661][T23741] syzkaller0: entered allmulticast mode [ 1729.750934][T23747] syzkaller0: entered promiscuous mode [ 1729.791345][T23747] syzkaller0: entered allmulticast mode [ 1730.450720][T23774] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18382'. [ 1730.462127][ T1318] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1730.570087][T23760] syzkaller0: entered promiscuous mode [ 1730.571268][T23780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18381'. [ 1730.581503][T23760] syzkaller0: entered allmulticast mode [ 1732.713011][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18387'. [ 1732.723198][T23798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18387'. [ 1732.743918][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18387'. [ 1732.753587][T23798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18387'. [ 1735.208879][T23773] syzkaller0: entered promiscuous mode [ 1735.214398][T23773] syzkaller0: entered allmulticast mode [ 1738.290765][T23803] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1738.325837][T23803] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1738.347825][T23803] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1738.524541][T23820] syzkaller0: entered promiscuous mode [ 1738.788992][T23833] bridge0: port 1(ipvlan0) entered blocking state [ 1738.821843][T23833] bridge0: port 1(ipvlan0) entered disabled state [ 1738.856200][T23833] ipvlan0: entered allmulticast mode [ 1738.895591][T23833] bridge0: entered allmulticast mode [ 1738.952978][T23833] ipvlan0: left allmulticast mode [ 1738.997496][T23833] bridge0: left allmulticast mode [ 1739.434384][T23854] xfrm0 speed is unknown, defaulting to 1000 [ 1739.953905][T23873] tipc: Failed to remove unknown binding: 66,0,0/16966:979852750/979852752 [ 1739.981187][T23873] tipc: Failed to remove unknown binding: 66,0,0/16966:979852750/979852751 [ 1740.010057][T23873] tipc: Failed to remove unknown binding: 66,0,0/16966:979852750/979852752 [ 1740.033136][T23873] tipc: Failed to remove unknown binding: 66,0,0/16966:979852750/979852751 [ 1740.534873][T23890] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1740.582057][T23891] syzkaller0: entered promiscuous mode [ 1740.612943][T23891] syzkaller0: entered allmulticast mode [ 1740.796963][T23887] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1741.231188][T23908] xt_CT: No such helper "syz1" [ 1741.250488][T23912] syzkaller0: entered promiscuous mode [ 1741.277229][T23912] syzkaller0: entered allmulticast mode [ 1741.683837][T23926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18412'. [ 1741.692230][T23922] netlink: 164 bytes leftover after parsing attributes in process `syz.2.18414'. [ 1741.703695][T23922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18414'. [ 1741.891143][T23937] nft_compat: unsupported protocol 1 [ 1742.046963][T23940] syzkaller0: entered promiscuous mode [ 1742.055146][T23940] syzkaller0: entered allmulticast mode [ 1742.877520][T23967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18422'. [ 1742.973690][T23956] xfrm0 speed is unknown, defaulting to 1000 [ 1744.818414][T24024] syzkaller0: entered promiscuous mode [ 1744.831778][T24024] syzkaller0: entered allmulticast mode [ 1744.843427][T24014] syzkaller0: entered promiscuous mode [ 1744.852177][T24014] syzkaller0: entered allmulticast mode [ 1748.137808][T24009] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1748.401394][T24041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18440'. [ 1748.421193][T24043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18442'. [ 1748.493622][ T50] block nbd0: Receive control failed (result -1) [ 1748.503493][T24041] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1748.933752][T24068] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1748.972455][T24068] syzkaller0: entered promiscuous mode [ 1748.995960][T24068] syzkaller0: entered allmulticast mode [ 1749.031502][T24068] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1750.129143][T24114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18456'. [ 1750.216074][T24120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18456'. [ 1753.528322][T24115] tipc: Resetting bearer [ 1753.541153][T24115] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1753.582754][T24138] tipc: Enabling of bearer rejected, already enabled [ 1753.639363][T24142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18460'. [ 1753.654114][T24142] netlink: 'syz.1.18460': attribute type 1 has an invalid length. [ 1753.674184][T24142] netlink: 756 bytes leftover after parsing attributes in process `syz.1.18460'. [ 1753.844604][T24144] tipc: Enabled bearer , priority 0 [ 1753.872279][T24144] syzkaller0: entered promiscuous mode [ 1753.892984][T24144] syzkaller0: entered allmulticast mode [ 1753.916165][T24154] netlink: 84 bytes leftover after parsing attributes in process `syz.3.18464'. [ 1754.040967][T24151] tipc: Resetting bearer [ 1756.079498][T24187] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18470'. [ 1756.088984][T24187] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18470'. [ 1756.100489][T24187] netlink: 'syz.3.18470': attribute type 6 has an invalid length. [ 1756.108764][T24187] netlink: 'syz.3.18470': attribute type 5 has an invalid length. [ 1756.117160][T24187] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18470'. [ 1758.188291][T24143] tipc: Resetting bearer [ 1758.215165][T24143] tipc: Disabling bearer [ 1758.231927][T24185] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18470'. [ 1758.403591][T24194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18471'. [ 1758.440895][T24197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18473'. [ 1758.821642][T24214] xfrm0 speed is unknown, defaulting to 1000 [ 1759.889742][T24239] syzkaller0: entered promiscuous mode [ 1759.915108][T24239] syzkaller0: entered allmulticast mode [ 1760.871169][T24275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18492'. [ 1760.914289][T24275] ip6gre5: entered promiscuous mode [ 1760.930090][T24275] ip6gre5: entered allmulticast mode [ 1761.114031][T24279] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18491'. [ 1761.138418][T24283] sctp: [Deprecated]: syz.4.18494 (pid 24283) Use of int in max_burst socket option. [ 1761.138418][T24283] Use struct sctp_assoc_value instead [ 1761.187941][T24283] netlink: 104 bytes leftover after parsing attributes in process `syz.4.18494'. [ 1761.444785][T24289] bond10: left allmulticast mode [ 1761.456542][T24289] bond10: left promiscuous mode [ 1761.462379][T24289] bridge0: port 1(bond10) entered disabled state [ 1761.489364][T24289] vlan4: left promiscuous mode [ 1761.494325][T24289] geneve0: left promiscuous mode [ 1761.510036][T24289] bond11: (slave bridge13): Releasing backup interface [ 1761.532592][T24289] bond12: (slave bridge14): Releasing backup interface [ 1761.548831][T24289] vlan4: left allmulticast mode [ 1761.564336][T24289] geneve0: left allmulticast mode [ 1761.586618][T24289] bridge0: port 2(vlan4) entered disabled state [ 1761.659069][T24289] bond15: (slave bridge15): Releasing backup interface [ 1761.696684][T24289] bond17: (slave bond18): Releasing backup interface [ 1761.717161][T24289] bond20: (slave macvlan0): Releasing active interface [ 1761.733505][T24289] bond21: (slave ip6gretap2): Releasing active interface [ 1761.785172][T24300] tipc: Enabling of bearer rejected, failed to enable media [ 1762.521352][T24327] netlink: 'syz.2.18504': attribute type 1 has an invalid length. [ 1762.654436][T24331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18504'. [ 1763.190923][T24305] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1763.224577][T24305] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1763.234347][T24305] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1763.340267][T24329] bond28: (slave geneve4): Opening slave failed [ 1763.446922][T24331] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1763.522500][T24332] tipc: Resetting bearer [ 1763.700312][T27543] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.710229][T24349] netlink: 'syz.0.18510': attribute type 1 has an invalid length. [ 1763.717143][T27543] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.743388][T27543] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.762585][T27543] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.933175][T24358] netlink: 204 bytes leftover after parsing attributes in process `syz.2.18511'. [ 1764.444834][T24374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18513'. [ 1764.485246][T24376] netlink: 'syz.1.18515': attribute type 1 has an invalid length. [ 1764.652113][T24376] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1764.663772][T24372] bond0: left allmulticast mode [ 1764.834539][T24372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1764.853109][T24372] bond24: (slave bond0): Enslaving as an active interface with an up link [ 1764.886560][T24378] bond24: entered promiscuous mode [ 1764.891885][T24378] bond0: entered promiscuous mode [ 1764.901447][T24378] bond24: entered allmulticast mode [ 1764.926885][T24378] bond0: entered allmulticast mode [ 1765.136787][T24391] syzkaller0: entered promiscuous mode [ 1765.152773][T24391] syzkaller0: entered allmulticast mode [ 1765.181314][T24397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18520'. [ 1765.243407][T24400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18516'. [ 1765.312604][T24391] tipc: Enabled bearer , priority 0 [ 1765.354614][T24390] tipc: Resetting bearer [ 1765.448966][T24390] tipc: Disabling bearer [ 1765.622375][T24409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18522'. [ 1765.665501][T24409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18522'. [ 1766.272615][T24447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18529'. [ 1766.677247][T24456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18535'. [ 1767.062902][T24470] netlink: 'syz.0.18536': attribute type 1 has an invalid length. [ 1767.329228][T24478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18538'. [ 1767.514305][ T50] block nbd12: Receive control failed (result -1) [ 1767.703279][T24489] netlink: 'syz.0.18540': attribute type 5 has an invalid length. [ 1767.826905][T24493] netlink: 'syz.3.18541': attribute type 32 has an invalid length. [ 1767.879769][T24496] netlink: 'syz.1.18543': attribute type 10 has an invalid length. [ 1767.900248][T24496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18543'. [ 1767.911985][T24492] xfrm0 speed is unknown, defaulting to 1000 [ 1768.660423][T24507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18546'. [ 1768.850044][T24512] syzkaller0: entered promiscuous mode [ 1768.863079][T24512] syzkaller0: entered allmulticast mode [ 1768.943930][T24512] tipc: Enabled bearer , priority 0 [ 1768.943933][T24492] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1768.975504][T24512] tipc: Resetting bearer [ 1769.263911][T24510] tipc: Resetting bearer [ 1769.373398][T24510] tipc: Disabling bearer [ 1769.393467][T24523] netlink: 3 bytes leftover after parsing attributes in process `syz.2.18549'. [ 1769.440099][T24523] 0ªX¹¦À: renamed from batadv0 (while UP) [ 1769.459708][T24523] 0ªX¹¦À: entered allmulticast mode [ 1769.468434][T24523] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1769.485973][T24526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18550'. [ 1769.726912][T24526] IPVS: Unknown mcast interface: vcan0 [ 1769.762594][T24536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18552'. [ 1769.874384][T24542] netlink: 'syz.0.18554': attribute type 5 has an invalid length. [ 1769.995602][T24544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18555'. [ 1770.047583][ T50] block nbd13: Receive control failed (result -1) [ 1770.875340][T24565] tipc: Resetting bearer [ 1771.209615][T24577] netlink: 'syz.1.18562': attribute type 41 has an invalid length. [ 1772.041897][T24566] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1772.075768][T24566] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1772.100714][T24566] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1772.142922][ T57] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.179755][ T57] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.227025][ T57] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.268608][ T57] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.503491][T24604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18568'. [ 1772.576719][T24594] geneve0: entered promiscuous mode [ 1772.588908][T24609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18569'. [ 1772.599054][T24594] macvlan1: entered promiscuous mode [ 1772.610833][T24609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18569'. [ 1773.287953][T24619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18572'. [ 1773.428936][ T50] block nbd14: Receive control failed (result -1) [ 1773.614254][T24629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18575'. [ 1773.757642][T24630] tipc: Resetting bearer [ 1773.780000][T24630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1773.802466][T24630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1773.902446][T24630] veth1_vlan: left promiscuous mode [ 1773.920116][T24630] veth0_vlan: left promiscuous mode [ 1773.941467][T24630] veth0_vlan: entered promiscuous mode [ 1773.958664][T24630] veth1_vlan: entered promiscuous mode [ 1773.982328][T24630] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1774.124809][ T57] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.146027][ T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.178115][ T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.216877][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.553094][T24651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18582'. [ 1774.630133][T24656] tipc: Resetting bearer [ 1774.637124][T24656] tipc: Resetting bearer [ 1774.679266][T24656] tipc: Resetting bearer [ 1774.773631][T28381] xfrm0 speed is unknown, defaulting to 1000 [ 1774.782894][T24652] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 1774.819875][T24652] netlink: 'syz.2.18580': attribute type 1 has an invalid length. [ 1774.851345][T24666] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18583'. [ 1774.877716][T24652] netlink: 1 bytes leftover after parsing attributes in process `syz.2.18580'. [ 1774.999504][T24651] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1775.080276][T24651] bond26 (unregistering): Released all slaves [ 1775.493243][T24681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18587'. [ 1775.563592][T24685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18589'. [ 1775.643580][ T50] block nbd15: Receive control failed (result -1) [ 1775.843228][T24681] bond16: entered promiscuous mode [ 1775.888785][T24681] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1777.722115][T24759] [ 1777.724525][T24759] ====================================================== [ 1777.731597][T24759] WARNING: possible circular locking dependency detected [ 1777.738667][T24759] syzkaller #0 Not tainted [ 1777.743123][T24759] ------------------------------------------------------ [ 1777.750182][T24759] syz.0.18606/24759 is trying to acquire lock: [ 1777.756373][T24759] ffff88807d82b398 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 1777.765324][T24759] [ 1777.765324][T24759] but task is already holding lock: [ 1777.772725][T24759] ffff88802716c6b8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1777.782214][T24759] [ 1777.782214][T24759] which lock already depends on the new lock. [ 1777.782214][T24759] [ 1777.792659][T24759] [ 1777.792659][T24759] the existing dependency chain (in reverse order) is: [ 1777.801709][T24759] [ 1777.801709][T24759] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1777.809607][T24759] __mutex_lock+0x19d/0x1550 [ 1777.814779][T24759] elevator_change+0x1af/0x480 [ 1777.820119][T24759] elevator_set_none+0xb5/0x140 [ 1777.825554][T24759] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1777.831940][T24759] nbd_start_device+0x189/0xb30 [ 1777.837363][T24759] nbd_genl_connect+0x1597/0x1c10 [ 1777.842956][T24759] genl_family_rcv_msg_doit+0x233/0x340 [ 1777.849082][T24759] genl_rcv_msg+0x614/0x7a0 [ 1777.854161][T24759] netlink_rcv_skb+0x226/0x4a0 [ 1777.859493][T24759] genl_rcv+0x28/0x40 [ 1777.864050][T24759] netlink_unicast+0x7bb/0x940 [ 1777.869384][T24759] netlink_sendmsg+0x813/0xb40 [ 1777.874726][T24759] sock_sendmsg_nosec+0x13a/0x180 [ 1777.880415][T24759] ____sys_sendmsg+0x54e/0x850 [ 1777.885758][T24759] ___sys_sendmsg+0x2a5/0x360 [ 1777.891172][T24759] __x64_sys_sendmsg+0x1b1/0x290 [ 1777.896669][T24759] do_syscall_64+0x174/0x580 [ 1777.901819][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.908270][T24759] [ 1777.908270][T24759] -> #5 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 1777.916939][T24759] blk_alloc_queue+0x544/0x690 [ 1777.922294][T24759] __blk_mq_alloc_disk+0x194/0x390 [ 1777.927983][T24759] nbd_dev_add+0x494/0xb60 [ 1777.932963][T24759] nbd_init+0x15f/0x1e0 [ 1777.937702][T24759] do_one_initcall+0x250/0x870 [ 1777.943050][T24759] do_initcall_level+0x10a/0x1a0 [ 1777.948571][T24759] do_initcalls+0x59/0xa0 [ 1777.953475][T24759] kernel_init_freeable+0x29d/0x3e0 [ 1777.959259][T24759] kernel_init+0x1d/0x1d0 [ 1777.964155][T24759] ret_from_fork+0x514/0xb70 [ 1777.969313][T24759] ret_from_fork_asm+0x1a/0x30 [ 1777.974679][T24759] [ 1777.974679][T24759] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1777.981945][T24759] fs_reclaim_acquire+0x71/0x100 [ 1777.987449][T24759] __kmalloc_cache_node_noprof+0x66/0x630 [ 1777.993747][T24759] create_worker+0x112/0x7b0 [ 1777.998905][T24759] workqueue_prepare_cpu+0xe4/0x170 [ 1778.004673][T24759] cpuhp_invoke_callback+0x434/0x810 [ 1778.010521][T24759] _cpu_up+0x2ce/0x5b0 [ 1778.015167][T24759] cpu_up+0x1d2/0x220 [ 1778.019732][T24759] cpuhp_bringup_mask+0xb2/0x1a0 [ 1778.025250][T24759] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 1778.031666][T24759] bringup_nonboot_cpus+0x17/0x30 [ 1778.037270][T24759] smp_init+0x32/0x110 [ 1778.041913][T24759] kernel_init_freeable+0x27f/0x3e0 [ 1778.047669][T24759] kernel_init+0x1d/0x1d0 [ 1778.052580][T24759] ret_from_fork+0x514/0xb70 [ 1778.057748][T24759] ret_from_fork_asm+0x1a/0x30 [ 1778.063066][T24759] [ 1778.063066][T24759] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 1778.070829][T24759] cpus_read_lock+0x42/0x160 [ 1778.075981][T24759] static_key_slow_inc+0x12/0x30 [ 1778.081484][T24759] nbd_genl_reconfigure+0x1301/0x1e80 [ 1778.087461][T24759] genl_family_rcv_msg_doit+0x233/0x340 [ 1778.093824][T24759] genl_rcv_msg+0x614/0x7a0 [ 1778.098882][T24759] netlink_rcv_skb+0x226/0x4a0 [ 1778.104199][T24759] genl_rcv+0x28/0x40 [ 1778.108778][T24759] netlink_unicast+0x7bb/0x940 [ 1778.114106][T24759] netlink_sendmsg+0x813/0xb40 [ 1778.119430][T24759] sock_sendmsg_nosec+0x13a/0x180 [ 1778.125011][T24759] ____sys_sendmsg+0x54e/0x850 [ 1778.130327][T24759] ___sys_sendmsg+0x2a5/0x360 [ 1778.135559][T24759] __x64_sys_sendmsg+0x1b1/0x290 [ 1778.141040][T24759] do_syscall_64+0x174/0x580 [ 1778.146174][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.152614][T24759] [ 1778.152614][T24759] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1778.160292][T24759] __mutex_lock+0x19d/0x1550 [ 1778.165431][T24759] nbd_queue_rq+0x373/0x1150 [ 1778.170567][T24759] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1778.176670][T24759] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1778.183559][T24759] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1778.190094][T24759] blk_mq_run_work_fn+0x16c/0x300 [ 1778.195671][T24759] process_scheduled_works+0xa8e/0x14e0 [ 1778.201791][T24759] worker_thread+0xa47/0xfb0 [ 1778.207028][T24759] kthread+0x388/0x470 [ 1778.211649][T24759] ret_from_fork+0x514/0xb70 [ 1778.216790][T24759] ret_from_fork_asm+0x1a/0x30 [ 1778.222103][T24759] [ 1778.222103][T24759] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1778.229344][T24759] __mutex_lock+0x19d/0x1550 [ 1778.234507][T24759] nbd_queue_rq+0xc1/0x1150 [ 1778.239649][T24759] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1778.245747][T24759] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1778.252624][T24759] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1778.259150][T24759] blk_mq_run_work_fn+0x16c/0x300 [ 1778.264747][T24759] process_scheduled_works+0xa8e/0x14e0 [ 1778.270854][T24759] worker_thread+0xa47/0xfb0 [ 1778.275999][T24759] kthread+0x388/0x470 [ 1778.280626][T24759] ret_from_fork+0x514/0xb70 [ 1778.285767][T24759] ret_from_fork_asm+0x1a/0x30 [ 1778.291081][T24759] [ 1778.291081][T24759] -> #0 (set->srcu){.+.+}-{0:0}: [ 1778.298244][T24759] __lock_acquire+0x1520/0x2cf0 [ 1778.303645][T24759] lock_sync+0x9d/0x120 [ 1778.308347][T24759] __synchronize_srcu+0xc9/0x2f0 [ 1778.313831][T24759] elevator_switch+0x1e8/0x7b0 [ 1778.319151][T24759] elevator_change+0x2fa/0x480 [ 1778.324504][T24759] elevator_set_default+0x375/0x440 [ 1778.330262][T24759] blk_register_queue+0x3f3/0x4e0 [ 1778.335833][T24759] __add_disk+0x6cb/0xe30 [ 1778.340710][T24759] add_disk_fwnode+0xfb/0x4b0 [ 1778.345942][T24759] nbd_dev_add+0x733/0xb60 [ 1778.350919][T24759] nbd_genl_connect+0x992/0x1c10 [ 1778.356407][T24759] genl_family_rcv_msg_doit+0x233/0x340 [ 1778.362511][T24759] genl_rcv_msg+0x614/0x7a0 [ 1778.367567][T24759] netlink_rcv_skb+0x226/0x4a0 [ 1778.372872][T24759] genl_rcv+0x28/0x40 [ 1778.377412][T24759] netlink_unicast+0x7bb/0x940 [ 1778.382729][T24759] netlink_sendmsg+0x813/0xb40 [ 1778.388103][T24759] sock_sendmsg_nosec+0x13a/0x180 [ 1778.393686][T24759] ____sys_sendmsg+0x54e/0x850 [ 1778.398992][T24759] ___sys_sendmsg+0x2a5/0x360 [ 1778.404219][T24759] __x64_sys_sendmsg+0x1b1/0x290 [ 1778.409706][T24759] do_syscall_64+0x174/0x580 [ 1778.414841][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.421282][T24759] [ 1778.421282][T24759] other info that might help us debug this: [ 1778.421282][T24759] [ 1778.431543][T24759] Chain exists of: [ 1778.431543][T24759] set->srcu --> &q->q_usage_counter(io)#55 --> &q->elevator_lock [ 1778.431543][T24759] [ 1778.445238][T24759] Possible unsafe locking scenario: [ 1778.445238][T24759] [ 1778.452713][T24759] CPU0 CPU1 [ 1778.458100][T24759] ---- ---- [ 1778.463482][T24759] lock(&q->elevator_lock); [ 1778.468111][T24759] lock(&q->q_usage_counter(io)#55); [ 1778.476086][T24759] lock(&q->elevator_lock); [ 1778.483238][T24759] sync(set->srcu); [ 1778.487167][T24759] [ 1778.487167][T24759] *** DEADLOCK *** [ 1778.487167][T24759] [ 1778.495371][T24759] 6 locks held by syz.0.18606/24759: [ 1778.500670][T24759] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1778.508894][T24759] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1778.517898][T24759] #2: ffff888029a8f1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x4b0 [ 1778.528295][T24759] #3: ffff88802716c740 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 1778.538164][T24759] #4: ffff88802716c1c8 (&q->q_usage_counter(queue)#56){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1778.549114][T24759] #5: ffff88802716c6b8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1778.558996][T24759] [ 1778.558996][T24759] stack backtrace: [ 1778.564909][T24759] CPU: 1 UID: 0 PID: 24759 Comm: syz.0.18606 Not tainted syzkaller #0 PREEMPT(full) [ 1778.564932][T24759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1778.564945][T24759] Call Trace: [ 1778.564954][T24759] [ 1778.564963][T24759] dump_stack_lvl+0xe8/0x150 [ 1778.564987][T24759] print_circular_bug+0x2e1/0x300 [ 1778.565013][T24759] check_noncircular+0x12e/0x150 [ 1778.565040][T24759] __lock_acquire+0x1520/0x2cf0 [ 1778.565059][T24759] ? check_noncircular+0xda/0x150 [ 1778.565086][T24759] ? lockdep_unlock+0x5d/0xd0 [ 1778.565100][T24759] ? __lock_acquire+0x13e8/0x2cf0 [ 1778.565123][T24759] ? __synchronize_srcu+0xb5/0x2f0 [ 1778.565140][T24759] lock_sync+0x9d/0x120 [ 1778.565157][T24759] ? __synchronize_srcu+0xb5/0x2f0 [ 1778.565178][T24759] __synchronize_srcu+0xc9/0x2f0 [ 1778.565197][T24759] ? __pfx___synchronize_srcu+0x10/0x10 [ 1778.565223][T24759] ? do_raw_spin_lock+0x12b/0x2f0 [ 1778.565253][T24759] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1778.565278][T24759] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1778.565308][T24759] ? synchronize_srcu+0x20a/0x260 [ 1778.565327][T24759] elevator_switch+0x1e8/0x7b0 [ 1778.565354][T24759] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1778.565376][T24759] elevator_change+0x2fa/0x480 [ 1778.565403][T24759] ? do_raw_spin_unlock+0xf5/0x210 [ 1778.565430][T24759] elevator_set_default+0x375/0x440 [ 1778.565459][T24759] ? __pfx_elevator_set_default+0x10/0x10 [ 1778.565492][T24759] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 1778.565520][T24759] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1778.565549][T24759] blk_register_queue+0x3f3/0x4e0 [ 1778.565572][T24759] __add_disk+0x6cb/0xe30 [ 1778.565598][T24759] add_disk_fwnode+0xfb/0x4b0 [ 1778.565621][T24759] nbd_dev_add+0x733/0xb60 [ 1778.565645][T24759] ? __pfx_nbd_dev_add+0x10/0x10 [ 1778.565674][T24759] ? bpf_lsm_capable+0x9/0x20 [ 1778.565694][T24759] ? security_capable+0x7e/0x2c0 [ 1778.565724][T24759] nbd_genl_connect+0x992/0x1c10 [ 1778.565747][T24759] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1778.565768][T24759] ? rcu_is_watching+0x15/0xb0 [ 1778.565789][T24759] ? trace_kmalloc+0x2a/0xf0 [ 1778.565818][T24759] ? __kmalloc_noprof+0x396/0x720 [ 1778.565847][T24759] ? __nla_parse+0x40/0x60 [ 1778.565876][T24759] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1778.565904][T24759] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1778.565935][T24759] genl_family_rcv_msg_doit+0x233/0x340 [ 1778.565965][T24759] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1778.565996][T24759] ? __lock_acquire+0x683/0x2cf0 [ 1778.566019][T24759] genl_rcv_msg+0x614/0x7a0 [ 1778.566046][T24759] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1778.566071][T24759] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1778.566097][T24759] netlink_rcv_skb+0x226/0x4a0 [ 1778.566116][T24759] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1778.566142][T24759] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1778.566168][T24759] ? down_read+0x2be/0x330 [ 1778.566188][T24759] genl_rcv+0x28/0x40 [ 1778.566216][T24759] netlink_unicast+0x7bb/0x940 [ 1778.566239][T24759] netlink_sendmsg+0x813/0xb40 [ 1778.566265][T24759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1778.566287][T24759] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1778.566311][T24759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1778.566330][T24759] sock_sendmsg_nosec+0x13a/0x180 [ 1778.566357][T24759] ____sys_sendmsg+0x54e/0x850 [ 1778.566379][T24759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1778.566403][T24759] ? import_iovec+0x73/0xa0 [ 1778.566422][T24759] ___sys_sendmsg+0x2a5/0x360 [ 1778.566441][T24759] ? __lock_acquire+0x683/0x2cf0 [ 1778.566460][T24759] ? __pfx____sys_sendmsg+0x10/0x10 [ 1778.566481][T24759] ? futex_wake+0x51b/0x5f0 [ 1778.566521][T24759] ? __fget_files+0x2a/0x420 [ 1778.566537][T24759] ? __fget_files+0x3a2/0x420 [ 1778.566559][T24759] __x64_sys_sendmsg+0x1b1/0x290 [ 1778.566580][T24759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1778.566608][T24759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.566628][T24759] do_syscall_64+0x174/0x580 [ 1778.566644][T24759] ? trace_irq_disable+0x3b/0x140 [ 1778.566660][T24759] ? clear_bhb_loop+0x40/0x90 [ 1778.566681][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.566700][T24759] RIP: 0033:0x7f5a05b9ce59 [ 1778.566719][T24759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1778.566736][T24759] RSP: 002b:00007f5a03df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1778.566755][T24759] RAX: ffffffffffffffda RBX: 00007f5a05e15fa0 RCX: 00007f5a05b9ce59 [ 1778.566768][T24759] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000006 [ 1778.566781][T24759] RBP: 00007f5a05c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1778.566792][T24759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1778.566804][T24759] R13: 00007f5a05e16038 R14: 00007f5a05e15fa0 R15: 00007ffd6e044c68 [ 1778.566826][T24759] [ 1779.053054][T24759] __nla_validate_parse: 2 callbacks suppressed [ 1779.053075][T24759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18606'. [ 1779.089001][ T50] block nbd16: Receive control failed (result -1)