last executing test programs: 2.921360736s ago: executing program 4 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="30de1cee2fc8", 0x6}, {&(0x7f0000001840)="3011f0fb8b9aefc9a650fc6ee3c6edd29472412f437a8ad2386411644928cf4d70fc110d3672d68552c9a4784ff26705cd70b62a76c5ac781aa6", 0x3a}], 0x2, 0x0, 0x0, 0x24008000}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000300)=""/57, 0x39}], 0x2}, 0x6}], 0x1, 0x28144, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) (async) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) (async) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) (async) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) 2.398385545s ago: executing program 0 (id=1236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x0, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)='H', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0xa5, &(0x7f0000000580)={@random="3939227da779", @random="82f51d6efb14", @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x9, 0x6, "3bfd13", 0x6b, 0x21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[], {{0x4e22, 0x4e23, 0x4, 0x1, 0x2, 0x0, 0x0, 0xc, 0x5, 'aO#', 0xf, "73cabb"}, "cc522968cd143aa6f5f3b7bdd0a7cefcd453c9f954f59ec1d205a6e16def4e81161d55f49f1eea47501b6073ace30130f4ef2318b29c4fc1e757948b0ca61960d66a286f826b5a94090b53596b86b758d3c600db08ad874cdb1dfe"}}}}}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000140)=0x4, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20044054}, 0x0) write$cgroup_devices(r6, &(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRESHEX=r6, @ANYRES8=r4, @ANYRESDEC=r7, @ANYRES32=r5, @ANYRESOCT=r5, @ANYRESHEX=r7, @ANYBLOB="59613fbef0883817edbcc14f7ed0adffd057980023f28a04fba634ca94", @ANYRES64=r3], 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r8, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.328514602s ago: executing program 4 (id=1237): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000800"/20, @ANYRES32=0x0, @ANYBLOB="0c00040000000000280012800b0001006272696467650000180002800a"], 0x48}}, 0x4000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001214010027bd7000ffdbdf250800010001000000080015000000000008004b0013000000080003009d6e00000800"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x4008804) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200006c7a520a850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r7, r4, 0x25, 0x4, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000ec0)=ANY=[@ANYBLOB="aaaaaaaa0045078de50d02000000119078000000000000000000004e2000089078c7e014261b2fb4a1d596765a46a9e84b62128a8088fcfc5c2106238dc2b6c9c721a56063051882007e2062f252cca0c9979d7226295f3c3ca434bcd5ffc66163ad782bde15702d57e92c3c8e856de384dbdb8b7d8d25f847bde15593870c3c4bdc23d3c52f50917b"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getpeername(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000200)) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0d3328bd7000fedbdf256b00000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800) r11 = gettid() syz_open_procfs$namespace(r11, &(0x7f00000003c0)='ns/pid_for_children\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001580)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) r13 = socket(0x2a, 0x2, 0x0) getsockname$packet(r13, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) recvmmsg$unix(r13, &(0x7f0000001280)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/66, 0x42}], 0x1}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000580)=[{&(0x7f0000001480)=""/255, 0xff}, {&(0x7f0000000240)=""/54, 0x36}], 0x2, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000680)=""/76, 0x4c}, {&(0x7f0000000640)=""/33, 0x21}], 0x2, &(0x7f0000000ac0)}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000b80)=""/54, 0x36}, {&(0x7f0000000bc0)=""/179, 0xb3}, {&(0x7f0000000c80)=""/95, 0x5f}, {&(0x7f0000000d00)=""/223, 0xdf}, {&(0x7f0000000e00)=""/164, 0xa4}, {&(0x7f00000013c0)=""/151, 0x97}], 0x6, &(0x7f0000001000)}}, {{&(0x7f0000001040), 0x6e, &(0x7f0000001240)=[{&(0x7f00000010c0)=""/41, 0x29}, {&(0x7f0000001100)=""/175, 0xaf}, {&(0x7f00000011c0)=""/81, 0x51}], 0x3}}], 0x5, 0x100, &(0x7f0000000980)={r15, r16+10000000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0xf1, 0x1}}]}, 0x34}}, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r17, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a40)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="0000d5d79f59933479b1b1fff5e5370de9ab490d439839c3ef8204cecb536c47da0b95c6b486d75b91da000000649154ce9ff93af9d1b08bdc869c93a66feb4c3f58c22d210b7108d849feaa008dbe5dd045433383b43e3f3a1a8c0f81da2d93c2fef50f77e57c53bfbd85398591448057a0e76436c0b94936689ad633968fed503d333f1abaff3dd009e6a4763aa1de57e8271d39efaf6d60"], 0x159c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) 2.098315204s ago: executing program 2 (id=1240): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt(r0, 0x9, 0x2, &(0x7f0000000000)="55496ac43f62cc79588c3acbb71708d2dd840e6760e30f70ada066246c2a19fbc75225b4648f8983cd7bcaa7ecaf663601b25aeebf995c7edf24942946fe5ff212ec8943f0", 0x45) unshare(0x30040000) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth1_macvtap\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r1 = accept4(r0, &(0x7f00000000c0)=@l2={0x1f, 0x0, @none}, &(0x7f0000000140)=0x80, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000200)={0x4c0, r2, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x6c}}}}, [@NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x1, 0x3, 0x65, 0x10, 0x6, 0x324, 0xc7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x4, 0x8, 0x4, 0x7f, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7, 0x5, 0x5, 0x4c, 0x5, 0x0, 0xfffa]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x60, 0x3, 0x2, 0x30, 0x6, 0x48, 0x18, 0x1, 0xc, 0x48, 0x1, 0x16, 0x5, 0x3, 0x30, 0x30, 0x24, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x2}, {0x4, 0x1}, {0x4, 0x4}, {}, {0x2, 0xa}, {0x0, 0x9}, {0x0, 0x3}, {0x2, 0x5}, {0x5, 0x6}, {}, {0x6, 0x3}, {0x3, 0x6}, {0x7, 0x5}, {0x2}, {0x2, 0x2}, {0x4, 0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x7}, {0x2, 0x8}, {0x7, 0x3}, {0x6, 0x2}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x3}, {0x5, 0xa}, {0x4, 0x9}, {0x3, 0xa}, {}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x3c4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x3, 0x6c, 0x6c, 0x16, 0xb, 0x1b, 0x18]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x1, 0x18, 0xb, 0x16, 0x16, 0x7, 0x6c, 0x6, 0x18, 0x6c, 0x4, 0x6c, 0x6c, 0x12, 0x24, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x18, 0x30, 0x12, 0x9, 0x24, 0x16, 0x24, 0x9, 0x4, 0x1b, 0x9, 0xc, 0x6c, 0x36]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x4, 0xc, 0x30, 0x4, 0x24, 0xc, 0xc, 0xb, 0x6, 0x4, 0x60, 0xc, 0x3, 0x1, 0x12, 0x12, 0xb, 0x24, 0x48, 0x1b, 0x18]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x60, 0x60, 0x3, 0x24, 0xb, 0x6c, 0x1, 0x44, 0x18, 0x3b, 0x1, 0x5, 0x6, 0x30, 0x36, 0x4, 0xb, 0x48, 0x16, 0x60, 0x6, 0x12]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x10, 0x60, 0x60, 0x16, 0x6, 0x24, 0x4, 0x4, 0xb, 0xc, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x1}, {0x3, 0x9}, {0x0, 0xa}, {0x3, 0x6}, {0x3, 0x5}, {0x5, 0x5}, {0x7, 0x2}, {0x3, 0x7}, {0x7, 0x7}, {0x5, 0x9}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x0, 0x8}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x2}, {0x6, 0x9}, {0x4, 0x9}, {0x4}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x7, 0x4}, {0x4}, {0x7, 0x5}, {0x6}, {0x4, 0x5}, {0x3, 0x6}, {0x4, 0x3}, {0x3, 0xa}, {0x3, 0x9}, {0x0, 0x9}, {0x6, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x5, 0x8, 0x5, 0x3, 0x0, 0x3ea6]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x9, 0x5, 0x2, 0x3ff, 0x7, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x5, 0x3, 0x8000, 0x0, 0x1, 0x3, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x3, 0x28b, 0xe, 0x4, 0x4c, 0xff13]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xdd26, 0x3, 0x521, 0x0, 0x6, 0x40, 0xd907, 0x7aa]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x30, 0x60, 0x16, 0xb, 0x48, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ad, 0x81, 0x9, 0xaef, 0x2, 0xe2, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x7}, {0x3, 0x2}, {0x4, 0xa}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x2, 0x4}, {0x4, 0x1}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x9}, {0x0, 0x6}, {0x4, 0x2}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x4}, {0x0, 0x6}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x2}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x7}, {0x7, 0x8}, {0x5}, {0x0, 0x5}, {0x5, 0xa}, {0x3, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x7, 0x2}, {0x1, 0x8}, {0x1, 0x7}, {0x3}, {0x3, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x1, 0xa}, {0x1, 0x9}, {0x1}, {0x2, 0x9}, {0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x101, 0x2, 0x618, 0xf413, 0x2, 0x200]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x8}, {0x1, 0x1}, {0x4, 0x2}, {0x1}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x7, 0xc16b, 0x2, 0x1, 0x8, 0x5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x0, 0xd, 0xffff, 0x2, 0x7, 0xfffc]}}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3b, 0x9, 0x3, 0xa6, 0x6, 0x5, 0xd844, 0xcee]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x18, 0x2, 0x6c, 0x24, 0x72, 0x79, 0x6c, 0x4, 0x24, 0x6c, 0xc, 0x16273fd94d081a58, 0x16, 0x60, 0x48, 0x5, 0x6c, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x0, 0x6e, 0x1, 0x7, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x3}, {0x0, 0x4}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x5, 0x4}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x5}, {0x2}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0xd}, {0x4, 0xa}, {0x1, 0x1}, {0x3, 0x1}, {0x6, 0x2}, {0x2, 0x6}, {0x2}, {0x5, 0x4}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x4}, {0x6}, {0x1, 0xa}, {0x2, 0xa}, {0x7, 0x1}, {0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x3, 0x6}, {0x6, 0x5}, {0x4, 0x1}, {0x4, 0x6}, {0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x5, 0xa86, 0x1, 0x4, 0x7, 0x3, 0x8fc2]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x27, 0x12, 0x36, 0x49, 0x30, 0x2, 0x6c, 0x1, 0x6, 0x18, 0x12, 0x6c, 0x6, 0x6, 0x9, 0x30, 0x2, 0x6c, 0x2, 0x6, 0x5, 0x6c, 0x2, 0x30, 0x4640acd3afe469b1, 0x18, 0x26aaf02196483909, 0x16, 0xc, 0x16, 0x6c, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0xc, 0xfff, 0xcdc, 0xe2e0, 0x5f, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x1}, {0x4, 0x1}, {0x1, 0x6}, {0x3, 0x7}, {0x5, 0x1}, {0x6, 0x4}, {0x0, 0x7}, {0x2, 0x8}, {0x6, 0xa}, {0x1, 0x9}, {0x6, 0x5}, {0x1, 0x5}, {0x3}, {0x0, 0x3}, {0x7, 0x5}, {0x1, 0x5}, {0x2, 0xa}, {0x2, 0xa}, {0x1, 0x5}, {0x4, 0x4}, {0x2, 0x7}, {0x7, 0x2}, {0x5, 0x7}, {0x2, 0x6}, {0x4, 0x6}, {0x3, 0x11}, {0x7, 0x9}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0x9}, {0x2}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x7, 0x3}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x3}, {0x7}, {0x3, 0x8}, {0x3, 0x5}, {0x3, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x6, 0xa}, {0x5, 0x8}, {0x4}, {0x3, 0x9}, {0x7, 0x8}, {0x6, 0x1}, {0x5, 0x4}, {0x3, 0x5}, {0x1, 0x3}, {0x7}, {0x7, 0x9}, {0x1, 0x9}, {0x0, 0xa}, {0x2, 0x9}, {0x1, 0x9}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x5, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0xa}, {0x0, 0x9}, {0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x2}, {0x6, 0x5}, {0x1, 0xa}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x2, 0x9}, {0x7, 0x7}, {0x2, 0x5}, {0x1, 0x5}, {0x7, 0xa}, {0x2, 0x5}, {0x2}, {0x4, 0x3}, {0x0, 0xa}, {0x6, 0x2}, {0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x3, 0x5}, {0x3, 0x8}, {0x5, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x4}, {0x3, 0x9}, {0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r2, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x5e255c2595b26855}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f00000008c0)='veth0_macvtap\x00') bind$inet(r1, &(0x7f0000000900)={0x2, 0x4e24, @broadcast}, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000001000)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000980)={0x570, r2, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x156, 0xf, [@peer_mgmt={0x75, 0x16, {0x0, 0x4, @void, @val=0x10, @val="6bf99ddf2a6bf407964c54d1cbb8a615"}}, @mic={0x8c, 0x18, {0xbc9, "db7e18aaa63e", @long="b2ebdd66a194286afc9d3977278df72b"}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0xd147ab26e8dfc04e, 0x8}}, @peer_mgmt={0x75, 0x4, {0x1, 0x3, @void, @void, @void}}, @ssid={0x0, 0x3, @random="e9dfec"}, @perr={0x84, 0xe3, {0xc, 0xf, [{{}, @broadcast, 0x6, @void, 0xc}, {{}, @broadcast, 0x0, @void, 0x13}, {{}, @device_a, 0x5, @void, 0x1d}, {{0x0, 0x1}, @device_b, 0x10000, @value=@broadcast, 0x3e}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x3c}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x30}, {{}, @device_b, 0x4, @void, 0x21}, {{}, @device_a, 0x2, @void, 0x28}, {{}, @broadcast, 0x8001, @void, 0xe}, {{}, @device_b, 0x3, @void, 0x14}, {{}, @device_a, 0x3c, @void, 0x40}, {{}, @device_b, 0x901, @void, 0x16}, {{}, @device_a, 0x3}, {{0x0, 0x1}, @broadcast, 0xc, @value, 0x28}, {{0x0, 0x1}, @device_b, 0xfffffff8, @value=@device_b, 0x7}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x1, @device_a, 0xf, @value=@device_b, 0x1db, 0xe, @device_b, 0x3}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x157, 0x7f, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x1}}, @random={0xe, 0x5b, "5e3f00f6f4dfda682be0380117193dfbcd1642f462937d52081ef669b580d5c8a505ad624e56cc2a4346489a207fe99f034c3ec231e7f0a2755e6fd70566be63cbac3c716dc8b4248090191c3f0faf4300cd818ed51daf14004297"}, @dsss={0x3, 0x1, 0x68}, @measure_req={0x26, 0xe0, {0x0, 0x2e, 0xa, "be66a8e4629b9f8eb7d03ef5709b255bfeaded4cd275afd488de59ce6ad6acb68591d53637bfae26e5e3b137a55b0db9e566b8945cff8483469e1539948ceb731ce148b6381c783467457d547e10e6e2fb67b04f122cfe1a614dc6227e08972f7e905b06b72b70099221c0dafa9397ee11bf9b1e19fcffe3b433799be9b03dd482c2dd83516d1af3a9ca3581bc5f565033d65145d79a530bbfd3f4141379f40d7146d72049349651af25a81206678cae8898d7a8f8390407a804b7c3a58fdd93d763ad0070ce1274d8e1de7e42783d7383311bc49fa8b0301eb806d00d"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE={0x2e, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xf, 0x6, @device_a, 0x4c, @value=@broadcast, 0x33, 0x6, @broadcast, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_IE_PROBE_RESP={0x13, 0x7f, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0xb0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4a, 0x7c, 0x5}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_IE={0x24a, 0x2a, [@mesh_chsw={0x76, 0x6, {0x74, 0x5, 0x21, 0x4}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @device_b}}, @random_vendor={0xdd, 0xe7, "3dd44a0eb5d3764690bc8507af5c4727543fc301b49a898bd578fe4d5b8994157593b1a6ffc3a2f3acf3ba9d2caf5c3003f73261111c43b8aef8b90e348855fb0f264efcdca09333c3ba7411dd8d8e5db8fdc4ec803cd7e9b65f2fbeddb479be90faf95ae83c5458cb7be7cdca7204880b8684066bb0851a1b034bd4eafc224b13c14d918893de7b316877e67f3199909ab47c0e7ec314b0fade438661442e003935a0641e1a5330abf5cf42129cdba987ebdb051a1baca581367ef5f1cca4d631dec6b376ef9f7304da9819d7736f0b125cfabcc65b55e02c6b068551411d9387fae583c0df98"}, @perr={0x84, 0x22, {0x4, 0x2, [{{}, @broadcast, 0xd91a, @void, 0x5}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x3d}]}}, @sec_chan_ofs={0x3e, 0x1}, @perr={0x84, 0xf7, {0x7, 0x11, [{{}, @device_a, 0x2, @void, 0x38}, {{}, @device_b, 0x7f, @void, 0x13}, {{}, @device_a, 0x0, @void, 0x24}, {{0x0, 0x1}, @device_a, 0x8, @value, 0x1}, {{}, @device_a, 0xa79, @void, 0x11}, {{}, @device_a, 0x2, @void, 0x29}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x17}, {{}, @device_a, 0x7, @void, 0x2c}, {{}, @broadcast, 0xa3, @void, 0x15}, {{}, @device_a, 0x9, @void, 0x13}, {{}, @broadcast, 0x8000, @void, 0x6}, {{0x0, 0x1}, @device_b, 0x5, @value=@device_b, 0x33}, {{}, @device_a, 0xfffffffd, @void, 0x3c}, {{}, @broadcast, 0x9, @void, 0x13}, {{}, @broadcast, 0x80000001, @void, 0x24}, {{0x0, 0x1}, @device_b, 0x9, @value=@device_b, 0x1b}, {{}, @device_b, 0x8, @void, 0x16}]}}, @prep={0x83, 0x1f, {{}, 0x9, 0x81, @broadcast, 0x8, @void, 0x8, 0x8b, @device_a, 0x6}}]}]}, 0x570}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x80, r5, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x80}}, 0x4000000) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xc8, r6, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x40, 0xc}}}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0xfffffffb, 0xff, 0xf, 0x6, 0x2, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x5]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xff, 0x4, 0x2]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffc01}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x100}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x43}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xed9}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x40f}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x4008055) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000013c0)={r1, 0x101, 0x9177, 0x7}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000014c0)={'syztnl2\x00', &(0x7f0000001400)={'ip_vti0\x00', 0x0, 0x7, 0x20, 0x2b5, 0x7ff, {{0x19, 0x4, 0x3, 0x2, 0x64, 0x64, 0x0, 0x1, 0x2f, 0x0, @empty, @loopback, {[@ra={0x94, 0x4}, @generic={0x82, 0xb, "acf9f96d10a30838a3"}, @timestamp_addr={0x44, 0xc, 0x95, 0x1, 0x9, [{@local, 0x81}]}, @lsrr={0x83, 0xf, 0x3a, [@remote, @dev={0xac, 0x14, 0x14, 0x16}, @remote]}, @ssrr={0x89, 0x23, 0x4a, [@dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101, @empty, @broadcast, @multicast1, @local, @private=0xa010100, @multicast2]}]}}}}}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001540)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x6, '\x00', r8, r9, 0x0, 0x3}, 0x50) socket$netlink(0x10, 0x3, 0xe) unshare(0x70000) socket$inet(0x2, 0x1, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x1b, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x66a, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000016c0)='GPL\x00', 0x1, 0x93, &(0x7f0000001700)=""/147, 0x40f00, 0x3, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001800)={0x2, 0xe, 0x3, 0xfffffa64}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001840)=[r7, r7], &(0x7f0000001880), 0x10, 0x7fff}, 0x94) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000001980)={0xffffffffffffffff, 0x1, 0x2, r8, 0xdba000}, 0xc) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000001ac0)={&(0x7f00000019c0), 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x20, r10, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x523}]}]}, 0x20}}, 0x851) openat$tun(0xffffffffffffff9c, &(0x7f0000001b00), 0x28800, 0x0) 1.880948886s ago: executing program 4 (id=1242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="27050200d40f0000060000", 0xb}, {&(0x7f0000000240)="07df34090031c7", 0x7}], 0x2}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.603860511s ago: executing program 3 (id=1244): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000140)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c001800fffc020000000000000000000000000001fc010000000000000000000000000001060105"], 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt(r0, 0x1, 0x8, &(0x7f00000008c0), 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000300)=0x100000001, 0x4) recvfrom$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x88885}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200e508000000b70300000000000085000000b00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r9 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r9, 0x0, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) close(0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.5016489s ago: executing program 2 (id=1245): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="10002abd7000fedbdf25090000000e00010000000064657673696d0000000f0002006e657464657673696d30000008000300000000000800090001000000000001007063690000000200303030303a30303a31302e300000000008000300020000000800090007000000080001007063690011000200303030053a30303a31302e30000000000800030003000000c7ff090003000000080001007063690011000200303030303a30303a31302e300000000008000300000000000800090002000000080001007063690011000200303030303a30303a31302e300000000008000300010000000800090002000000"], 0xf4}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) 1.450870141s ago: executing program 4 (id=1246): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000001480)={0x13cc, 0x1e, 0x200, 0x70bd2b, 0x25dfdbfb, {0xe}, [@typed={0x4, 0xd0}, @typed={0x8, 0x132, 0x0, 0x0, @fd=r1}, @nested={0x10, 0x13f, 0x0, 0x1, [@typed={0x4, 0x108}, @typed={0x8, 0x9b, 0x0, 0x0, @fd=r1}]}, @generic="4427d0b974f39b58c33982fb541190d08fe321ea2dff0e0e5509eb851bf1beb0050f396957a75fef9180772bcfecc0ef3c4732753c6e4ef48c5b71f73fa06f7b6ed2c5b1f84ebe4aa010c47b04de4a9cbb21cbf5e3114140d0d1f203429ca5ac32d1339c9b73985d61dfd5e4c933ab8cd02fe7805a0ed1bfeda787cbbf35864f34b159f93827ff5f26c0394412a23db553903064a81d3fec34a0b27bfa3b396b0efb779814643a02d550ebe3d9da2dce075925727a9a92a21195", @nested={0x1208, 0x39, 0x0, 0x1, [@nested={0x1201, 0x28, 0x0, 0x1, [@typed={0x9, 0x105, 0x0, 0x0, @str='sit0\x00'}, @nested={0x1020, 0x62, 0x0, 0x1, [@typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x123, 0x0, 0x0, @uid}, @generic="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"]}, @nested={0x4, 0xdd}, @generic="2a6754fe59d537586b89dae228ab91c2e8ca9b304f1eea33a645a70e342ac778c85e1893cc4851b7403fa4d29f4b6e6d207fbebe967f7db6bf36d2f9ad27e38f8fc510e786754a115667239c60dd7a2fcee36684887ab9e5c33932e2b68d16d336cdbb36371d2cd075cc7783b060d48c3fd1941b533ea220f33fde41f2d29afe407338d48824148e8710ea3aa421a95b65fe8d05143ac188ad38a3c1784f6451e8d3cb14865b55a1b8d47545dfdf4d89cb1b66cbb1714a3d9f51331ebd2ec6327ead72ebfd5b70aa4fb83aaee400cdaf49b8d38e88", @typed={0x8, 0x66, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xb3}, @generic="faec653be474f8c6e63c44a12cc9173644c32c16552cd31b0a605c074f85ddd5b235c462548572ae48e52f633e7f02931976f4910eb279d63fec02411213b3ad84ebaecb3477c65bf2692417b3790b11", @generic="8d7db4daf088481bbf5593bcd6669d69c21df2e16f64034da6c3e723ad11ddf9a151f81135b6945ac158edc43bbea017f50892ae4ace80854c4aecb0509195f5abc0de8a7c6fa80fcf2adbdcd76aec3b75357c39747c681bcd2ead92cf9cb933f9e54b34c7690236f83a26e3ce2b7e041d54d1e1b276a0e24cf1bb60eccf4e1160ae998be9017713b667715f28c1672868557d6b", @typed={0x8, 0x5c, 0x0, 0x0, @uid}]}]}, @typed={0x8, 0x67, 0x0, 0x0, @str=')($\x00'}, @generic="3578f34380747ef8d7bfd1d08e5ea68d716ad3ccfe69253cf077c7b01539422312c9429873ed70f581207f4b234242e8974877f3f8ed5088d5a414efe10c0fa49370617eef183fb0609d35a1c0a8988bc3314b54dd6e7c339149d77e159073caf2b84f974e46811f00164ddc9a8f7d50636ef3a0469be46882983c1f4c0a1eb033404f4170f13e633d9b1d764b8f0fef9224dfb9c770ba59363259412bec9e1d71132255b1f19220533f00b1e25f5098be91223f458146", @generic="898d50b3bfd4db27afb880b8871dffcffe9b5bd81457cc03a87e"]}, 0x13cc}, 0x1, 0x0, 0x0, 0x4000}, 0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r4, 0x111, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x18, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000a40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44040}, 0x80c1) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'virt_wifi0\x00'}, 0x18) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="050000007f0020001000010000000000", @ANYRES64=r1, @ANYRESOCT=r0], 0x48}, 0x1, 0x0, 0x0, 0xc008050}, 0x20004801) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000580)=0xd, 0x4) recvmmsg(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)=""/124, 0x7c}], 0x2}, 0x6}], 0x1, 0x40000022, 0x0) r8 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="f78d9ca38fff48f3be3448412ba80000", 0x10}, {&(0x7f0000000200)="ebe3a0e9796cfd16", 0x8}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="d0000000000000001701000002000000b5000000d794022e5321a63a83fab47a00db452f126b91f48dfb7fd3048c4093c11931a20a94491ca4b6dadabd2111eb85c61c4300c95f5346a3b2dab5711c2211d8322a73badbe55bef0ed5f59b2def4e4d261de28778a4472cd313771e844b8cdffd236dca2b7309f269435f53ab1d2bfd22fcd452845c61b9f391a0e33ad457e2c060669779e52329c94889dfc9460d5a47742e5a50493d10811f88977e54d79b4730cb2f4b1f609cdbebbe0731e6e209bae7ea112557f06205f869000000"], 0xd0}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800000006000000010000000400000f0000000000002e"], 0x0, 0x46, 0x0, 0x1}, 0x28) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a"], 0x54}}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x8, 0x47, 0x8000, 0x3, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @remote, @private=0xa010102}}}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000080000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100f4008500000082000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.286636108s ago: executing program 2 (id=1247): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) (async) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0xde, 0x9, "e932bd392f73"}}) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000f80)={0x0, 0x40, 0xb3d}, 0x8) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500000010000000000000000000000007004e2200289078040000ac000000000e0000006af2081bec07a28e633f20aee79189ab0529751c"], 0x0) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001180)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x138, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xd}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x7}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x6, 0xff}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x4, 0x80}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xa}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5}]}}, @CTA_PROTOINFO={0x60, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x5c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xfff}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xf3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x80}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x101}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8c}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x2}]}}, @CTA_NAT_DST={0x74, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x138}, 0x1, 0x0, 0x0, 0x20004084}, 0x40002) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000001ac0)={0x0, 0x0, "889ad2", 0x5, 0x2}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff}}]}}]}, 0x38}}, 0x4000) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0) r8 = socket$inet(0x2, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 1.28604354s ago: executing program 1 (id=1248): r0 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xe4, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x110, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x378}}, 0x0) 1.222637712s ago: executing program 0 (id=1249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) unshare(0x2020600) writev(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x2, 0x20, 0x11c2}]}, 0x10) close(0x3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket(0x10, 0x3, 0x0) epoll_pwait(r9, &(0x7f0000000180), 0x0, 0xfffffe35, &(0x7f00000001c0)={[0x200]}, 0x8) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r10, 0x28, 0x2, 0xfffffffffffffffc, &(0x7f0000000040)) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x7fff, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x80000001, 0x267, 0x0, 0x25, 0x19dd, 0xd}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) 1.161647787s ago: executing program 2 (id=1250): syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, &(0x7f0000000080)=0x80, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x100, 0x6, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xc483c4866d1015cd}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x8014) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x4040000) 1.08279466s ago: executing program 1 (id=1251): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@default, @remote, @remote, @null, @bcast, @netrom, @rose, @bcast]}, &(0x7f00000000c0)=0x48) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2d0, r2, 0x8, 0xf, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf23b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd374}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x492}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x77e9b1be}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x692}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff80}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xcb, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4de}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x1}, 0x800) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @null}, [@default, @remote, @netrom, @remote, @null, @default, @rose, @bcast]}, &(0x7f00000005c0)=0x48) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x4010, r1}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x17, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x3, 0x8, 0x7, 0x5, 0x2}, @func, @alu={0x7, 0x0, 0xa, 0x4, 0xa, 0x30, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x26, &(0x7f0000000780)=""/38, 0x41000, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xa, 0xe9c, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a80)=[r4, r5, r1, r6, r7], &(0x7f0000000ac0)=[{0x1, 0x5, 0x3, 0x9}, {0x1, 0x1, 0xf, 0x6}, {0x1, 0x4, 0x1, 0x9}], 0x10, 0x8}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000bc0)={0x0, 0x6, 0x9, 0x7f}, &(0x7f0000000c00)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000cc0)={r8, 0x68, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x7ff, @empty, 0xa}, @in6={0xa, 0x4e21, 0x1, @private2, 0x1}]}, &(0x7f0000000d00)=0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = accept(r1, &(0x7f0000000d40)=@nfc, &(0x7f0000000dc0)=0x80) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000e00)={r8, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000e40)={r9, 0x0, 0x1, 0xe, 0x9, 0x2ba}, &(0x7f0000000e80)=0x14) sendmsg$TIPC_CMD_GET_MAX_PORTS(r11, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x910}, 0x4800) socket$inet_udp(0x2, 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000fc0), r12) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r12) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r13, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x8080) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001140)='memory.pressure\x00', 0x2, 0x0) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r12) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r11, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r14, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004000}, 0x1) 1.02077813s ago: executing program 2 (id=1252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcffffff320000001800018014000200"], 0x2c}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="9f", 0x1, 0x4040000, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'syzkaller0\x00', &(0x7f0000000e80)=@ethtool_perm_addr={0x4b}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r6, 0x9}, &(0x7f0000000180)=0x8) sendto$inet6(r0, &(0x7f0000000340)="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", 0x180, 0x40800, 0x0, 0x0) recvfrom(r0, &(0x7f0000000200)=""/62, 0x3e, 0x99bcb88de02507d2, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) accept4$packet(r8, 0x0, 0x0, 0x80000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) ioctl$SIOCAX25DELUID(r8, 0x89e2, &(0x7f00000000c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r9}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xac, 0x9, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x120}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4000}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xb}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x48001) sendmsg$can_raw(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) 1.003630942s ago: executing program 1 (id=1253): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 913.911567ms ago: executing program 1 (id=1254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000005800)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000140) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xe}, {}, {0xfff2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70200, 0x440}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c000180080001c000000004080008400000005c05000500020000000500010006"], 0x6c}}, 0x8000) 831.059358ms ago: executing program 0 (id=1255): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbc}}, 0x0) unshare(0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x554}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) pwritev(r6, &(0x7f0000000b00)=[{0x0}, {&(0x7f00000006c0)="0fbd1d674b", 0x5}], 0x2, 0x3, 0x4) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$ax25_int(r2, 0x101, 0x9, &(0x7f0000000040)=0x1000, 0x4) 791.205807ms ago: executing program 0 (id=1256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="27050200d40f0000060000", 0xb}, {&(0x7f0000000240)="07df34090031c7", 0x7}], 0x2}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 743.449789ms ago: executing program 1 (id=1257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x1d, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) 646.822511ms ago: executing program 3 (id=1258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd49032800030020000c00600000000404730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) (async, rerun: 32) r2 = socket(0x10, 0x2, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xaa2c}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000200100085000000a000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) 645.992693ms ago: executing program 1 (id=1259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRES16=r2], 0x28}}, 0x20008044) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd700000000000766c616e31000000000000000000"], 0x2c}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x3}}}}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r10, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) close(r9) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getlink={0x20, 0x12, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9, 0x2420e}}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r8) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe80000000000000000000000000000000000000000890780200000000000000"], 0x0) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_generic(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r7, @ANYRES32=r13, @ANYBLOB="00f900"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00v', @ANYRES16=r12, @ANYBLOB="0100000000000000000006000009080004006401010008000500e00000020f000700756e636f6e66696e65640000"], 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x0) sendmmsg$inet6(r6, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4622, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000280)="4f14c6bbaafdbbaeec4156088eff8b3e89ca6cecf7b7b80a5001ca26a5c249ce7013f19a74b1b7f163cd569f6d54357600d98fa3f4631ec4865e1d4b52", 0x3d}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) 495.03131ms ago: executing program 0 (id=1260): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x30, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x4, 0x1}]}]}, {0x0, [0x61, 0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4079, 0x36, 0xfef, 0x8}, 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x53, &(0x7f00000002c0)={0x0, 0x0}, 0x10) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000006bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r4, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r4}, 0x20) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x40041}, 0x20000050) 457.606326ms ago: executing program 4 (id=1261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x3, 0xa) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x20}}], 0x1, 0x24000004) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=@newchain={0x454, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xb, 0xffff}, {0xb, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x428, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r6}, @TCA_BPF_POLICE={0x410, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x280000}, @TCA_POLICE_RATE={0x404, 0x2, [0x1fe, 0x80, 0x9, 0x1, 0xce, 0x5, 0xbf1a, 0x401, 0xf6b, 0x0, 0x7, 0x7, 0x0, 0x2, 0x4, 0x8, 0x9, 0x1, 0x7, 0x2, 0x9, 0x4, 0x0, 0xc67, 0x80000000, 0x4, 0xe0000000, 0xffffffff, 0x1, 0x0, 0x3, 0x80000001, 0x3, 0x2, 0x10, 0x5, 0x9, 0x3, 0x3, 0x10001, 0x9, 0x4, 0x5, 0x0, 0x7, 0x40, 0xffff7fff, 0xb5, 0xff, 0x7db, 0x4, 0x7a, 0x7fff, 0x7fffffff, 0xffffffff, 0x9, 0x4, 0x805, 0x0, 0x7, 0x7, 0x0, 0x8, 0x1, 0x2d2a, 0x3, 0x6, 0x6, 0x5, 0x200, 0x7fff, 0x5, 0xffff8001, 0x74, 0x2, 0x0, 0x101, 0xa00, 0xf, 0xf03, 0xc53, 0x7, 0x2, 0x4, 0x7, 0x9c0f, 0x0, 0x6, 0x2, 0x4, 0x10000, 0xe9, 0x3, 0x7, 0x6f1, 0x9, 0x140, 0x5, 0x0, 0x6, 0x5, 0x3, 0x9, 0x1000, 0x3, 0x3, 0xffff, 0x1, 0x3, 0x580, 0xfffffffa, 0xffffffc0, 0x2, 0x80000000, 0x1ff, 0xd, 0x3, 0x800, 0x9, 0xfffffff2, 0x7, 0xe, 0x8, 0x3, 0xfffffff8, 0xcc, 0x5, 0x4, 0x4, 0x6, 0x4, 0x5, 0x4, 0x0, 0x3e, 0xfffffff8, 0x45d, 0x8, 0x3f3898ed, 0x2, 0x8, 0x3, 0x1, 0x1, 0x9, 0xffffff62, 0xfffffffc, 0x4c72, 0x7, 0x5, 0x9, 0xfffffbf5, 0xa4, 0x101, 0x9, 0x1, 0x7, 0x38, 0x8, 0x401, 0x5, 0x2, 0xb, 0x0, 0x6, 0x6, 0x1ff, 0x4, 0x6, 0x2, 0x3, 0x8, 0x7, 0x9, 0x7, 0x0, 0x6b, 0x7, 0x5, 0xb, 0x1ff, 0xe00000, 0x6, 0x9, 0x6, 0x3, 0x81, 0x5, 0x1, 0x401, 0x9, 0x6, 0x804, 0xfffffff9, 0x4, 0x3ff, 0x2017, 0x82, 0x2d59, 0x9c64, 0x623, 0x4, 0xe, 0x6, 0x2, 0x0, 0x593, 0x200, 0x7, 0x4, 0x4f2eb6dd, 0x7fffffff, 0x3ff, 0x401, 0x4, 0x0, 0x22d, 0x1, 0x4d17, 0x7, 0x3, 0x4, 0x6da, 0x7, 0x1, 0xb400000, 0x8000004, 0x9, 0x800, 0x4, 0x2, 0x4, 0x7, 0x6, 0x5, 0x2, 0x3ff, 0xffffff7f, 0x7, 0x0, 0x3, 0x2, 0x6, 0x3, 0x7, 0x3b5, 0x400, 0x7, 0x0, 0x2, 0x8, 0x400, 0xbbc5, 0x3, 0x2, 0x2]}]}]}}]}, 0x454}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) r7 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}}], 0x2, 0x40000043, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000005400e5012cbd70000000000007000000", @ANYRES32, @ANYBLOB="100001"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20044050) 362.952076ms ago: executing program 3 (id=1262): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00183afffe800000000000000000000b73677ba000000000bbff0200000000000000000000000000018900907800000000fe880000000000000000000000000001"], 0x0) 308.766172ms ago: executing program 3 (id=1263): r0 = socket(0x1, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) poll(&(0x7f0000000080)=[{r2, 0x9431}, {r0, 0x8426}], 0x2, 0xe) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="85000000a400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0xe20, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x81}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x800) 230.144687ms ago: executing program 0 (id=1264): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xf8, 0x0, 0x1, 0x0, 0x4020000, 0x0, 0xff, 0x0, 0xfffffeff, [0x0, 0xd257]}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r0, 0x180000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x2, 0x1000}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x5}}, 0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r6, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x4c, r7, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x12}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r9, 0x6, 0x4, 0x0, &(0x7f0000000240)) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x40c1) 94.562561ms ago: executing program 3 (id=1265): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 79.766637ms ago: executing program 2 (id=1266): bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, r0}, 0xc) r1 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40090421}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_GETMDB={0x18, 0x56, 0x800, 0x70bd27, 0x25dfdbfc, {0x7, r2}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x850) r3 = socket$kcm(0x29, 0x7, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e21, 0x3c7, @local, 0x5}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x65, r2}) (async) close(r5) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2f6b}, &(0x7f00000003c0)=0x8) (async) r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=0xe, 0x80000) getsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000480), 0x2) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x44005) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (rerun: 32) bpf$ENABLE_STATS(0x20, &(0x7f0000000600), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000640)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) (async) sendmsg$AUDIT_USER_AVC(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x453, 0x10, 0x70bd2a, 0x25dfdbff, "2f2c7d0835ca88ea0df5d81f12c1d435d9546191e164673bccf16fa2c52cf8d95449f36eef9239e19322fd9abc08c71f55", ["", ""]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000840)="a315af0491", 0x5}, {&(0x7f0000000880)="b7f401fc7a69e299663103c309418155066337aac004c4583e2782406d29b07aa37b2d16f4295553ce77d2fcc80eef5c8f915ead01aa81be4384c4f691337efae7f7270e9677a5a14da62fc74049ccdfd1f39224f58d41dbf10beafc68f0a1c9ea86e25504ac5036602bb61bfa264419d9", 0x71}, {&(0x7f0000000900)="ac64788953a533a88a72b0509342af24ec5d331afd28bc64ae7785ff3a0afc1d0a68e953f62baec2f35219f894b4a6453e17a78cc93a10c74ec3d6a6553d1cb2244d0939081c37dac7f0cc2e246f1f4b79fd7a9c906df67a178e9663153e0a18a7f382bd5da14f37dfc2a6c04a4e5a54cc03300787a1fb1c69093321089ff8d8ca29a2e7c00f909d556d2cf8e55d9cf4e47f6dcc2027614098b42f66921e81ad00fc64ab60efe3576d0e961a39d1add48f7ca06e2787ece5a978d27c471bacbb1f52a09eba3816383c67031cc01c", 0xce}], 0x3, &(0x7f0000000a40)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x92, 0x3, 0x6, [{@multicast1, 0x8}, {@local, 0xfffffffd}, {@broadcast, 0x40}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x10000}]}, @generic={0x7, 0x5, "0900d3"}, @rr={0x7, 0x1b, 0xf1, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x52, 0x0, 0x0, [0xfffffffb, 0xe]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9d}}], 0x110}}, {{&(0x7f0000000b80)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="c8c4d5fea308bc856f8a30107523f04068454806b6e3b559467c22923b7364eac4f3c7431f9e528ed45a360ff26d1ac5fc094010268a6c", 0x37}], 0x1, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@generic={0x94, 0x4, "c0eb"}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0xd1, [@empty]}, @lsrr={0x83, 0xb, 0x3a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @cipso={0x86, 0x53, 0x0, [{0x7, 0xf, "ad1b5a4e19dc2add64aa40eb8b"}, {0x7, 0x10, "fafb0aa358d0fc7ca1b7413d19a0"}, {0x6, 0x2}, {0x4, 0x12, "30b870bf231e472d318c9b9692ea99ed"}, {0x7, 0x2}, {0x4, 0x6, "6aef6124"}, {0x2, 0x4, "98da"}, {0x5, 0xe, "6bc88060665dd4a76af3b635"}]}, @ssrr={0x89, 0xb, 0xdf, [@private=0xa010102, @rand_addr=0x64010101]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xc0}}], 0x2, 0x10) (async, rerun: 32) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000d80)={0x1, 0x3}) (async, rerun: 32) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000dc0)={r2, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) (async) socketpair(0x28, 0x4, 0xfffffffb, &(0x7f0000000e00)={0xffffffffffffffff}) sendmsg$IPSET_CMD_PROTOCOL(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, 0x1, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x881) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000fc0)) 52.807369ms ago: executing program 4 (id=1267): unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x1}) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}, 0x33}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x3, 0x2, 0x6, 0xb, 0xfffffffffffffff0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0xb, 0x2, 0x0, r4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xd0, &(0x7f0000000400)=""/208, 0x41000, 0xb, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000dc15f0ffffffff00ffff00000000", @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) 0s ago: executing program 3 (id=1268): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, 0x0) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="430ab3bf6e19041699c47106ec3a5d5afd16f32a49a00d06f8360cf9f295cb2736f2227c9c7633abbc2dc19803b11dfa9028c28b67bca351cd3f74c613e488e6e6682f814de0f13d46c9c767", 0x4c}], 0x1}, 0x810) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000b00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fbdbdf25070000000a0004007770616e330000000a0004007770616e330000000c0017000203aaaaaaaaaaaa080005000000000008000300", @ANYRES32=r11], 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x40) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. [ 83.046156][ T5815] cgroup: Unknown subsys name 'net' [ 83.178804][ T5815] cgroup: Unknown subsys name 'cpuset' [ 83.188937][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.906267][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.901270][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.909764][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.916880][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.925149][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.955131][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.962637][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.970952][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.978689][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.987464][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.988760][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.996165][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.008856][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.011231][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.017555][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.027428][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.031612][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.038007][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.046235][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.058231][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.059302][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.068720][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.073592][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.087240][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.098919][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.108991][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.757227][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 88.788560][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 88.849725][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.992001][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 89.145348][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.153216][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.161322][ T5825] bridge_slave_0: entered allmulticast mode [ 89.168917][ T5825] bridge_slave_0: entered promiscuous mode [ 89.197118][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.204329][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.212351][ T5826] bridge_slave_0: entered allmulticast mode [ 89.219783][ T5826] bridge_slave_0: entered promiscuous mode [ 89.228560][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.235852][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.243069][ T5826] bridge_slave_1: entered allmulticast mode [ 89.251312][ T5826] bridge_slave_1: entered promiscuous mode [ 89.258744][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.266095][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.273276][ T5825] bridge_slave_1: entered allmulticast mode [ 89.281104][ T5825] bridge_slave_1: entered promiscuous mode [ 89.338410][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 89.416559][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.427016][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.434256][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.441597][ T5829] bridge_slave_0: entered allmulticast mode [ 89.449003][ T5829] bridge_slave_0: entered promiscuous mode [ 89.472636][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.494070][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.515818][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.523717][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.531082][ T5829] bridge_slave_1: entered allmulticast mode [ 89.538602][ T5829] bridge_slave_1: entered promiscuous mode [ 89.561035][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.613052][ T5825] team0: Port device team_slave_0 added [ 89.632693][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.640330][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.647954][ T5832] bridge_slave_0: entered allmulticast mode [ 89.655738][ T5832] bridge_slave_0: entered promiscuous mode [ 89.687531][ T5825] team0: Port device team_slave_1 added [ 89.711539][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.719481][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.727105][ T5832] bridge_slave_1: entered allmulticast mode [ 89.734555][ T5832] bridge_slave_1: entered promiscuous mode [ 89.742851][ T5826] team0: Port device team_slave_0 added [ 89.770362][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.796700][ T5826] team0: Port device team_slave_1 added [ 89.831024][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.866500][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.873496][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.899559][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.939566][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.962863][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.969962][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.996884][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.015942][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.023138][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.030632][ T5828] bridge_slave_0: entered allmulticast mode [ 90.038103][ T5828] bridge_slave_0: entered promiscuous mode [ 90.060697][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.071147][ T52] Bluetooth: hci1: command tx timeout [ 90.088530][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.095712][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.122005][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.135481][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.142686][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.150107][ T5828] bridge_slave_1: entered allmulticast mode [ 90.154736][ T5842] Bluetooth: hci0: command tx timeout [ 90.158655][ T5828] bridge_slave_1: entered promiscuous mode [ 90.161808][ T52] Bluetooth: hci2: command tx timeout [ 90.184952][ T5829] team0: Port device team_slave_0 added [ 90.204679][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.211688][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.225526][ T52] Bluetooth: hci3: command tx timeout [ 90.237869][ T5842] Bluetooth: hci4: command tx timeout [ 90.249344][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.282429][ T5829] team0: Port device team_slave_1 added [ 90.290402][ T5832] team0: Port device team_slave_0 added [ 90.332335][ T5825] hsr_slave_0: entered promiscuous mode [ 90.339586][ T5825] hsr_slave_1: entered promiscuous mode [ 90.349903][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.363109][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.389177][ T5832] team0: Port device team_slave_1 added [ 90.492695][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.500093][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.526370][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.550524][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.557866][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.583924][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.604111][ T5828] team0: Port device team_slave_0 added [ 90.611546][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.618581][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.644825][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.661199][ T5826] hsr_slave_0: entered promiscuous mode [ 90.668070][ T5826] hsr_slave_1: entered promiscuous mode [ 90.674273][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 90.680213][ T5826] Cannot create hsr debugfs directory [ 90.686553][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.693532][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.719751][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.745407][ T5828] team0: Port device team_slave_1 added [ 90.864793][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.871811][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.899920][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.930808][ T5829] hsr_slave_0: entered promiscuous mode [ 90.937876][ T5829] hsr_slave_1: entered promiscuous mode [ 90.944096][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 90.950533][ T5829] Cannot create hsr debugfs directory [ 90.985929][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.992931][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.018970][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.092811][ T5832] hsr_slave_0: entered promiscuous mode [ 91.099978][ T5832] hsr_slave_1: entered promiscuous mode [ 91.106593][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 91.112355][ T5832] Cannot create hsr debugfs directory [ 91.338132][ T5828] hsr_slave_0: entered promiscuous mode [ 91.345558][ T5828] hsr_slave_1: entered promiscuous mode [ 91.351799][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 91.358196][ T5828] Cannot create hsr debugfs directory [ 91.609666][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.622295][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.652183][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.689642][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.788022][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.800348][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.812224][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.823672][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.931590][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.942948][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.953873][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.971181][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.085082][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.095933][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.107885][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.120808][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.147179][ T5842] Bluetooth: hci1: command tx timeout [ 92.192433][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.226264][ T5842] Bluetooth: hci2: command tx timeout [ 92.226273][ T52] Bluetooth: hci0: command tx timeout [ 92.271558][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.293344][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.301032][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.304823][ T5842] Bluetooth: hci4: command tx timeout [ 92.310053][ T52] Bluetooth: hci3: command tx timeout [ 92.336097][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.350541][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.362402][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.403495][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.410821][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.447490][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.457521][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.464765][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.531168][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.538403][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.549356][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.556552][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.603116][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.678723][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.732580][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.755473][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.810864][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.818156][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.838422][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.845681][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.892477][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.899740][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.913713][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.920977][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.958235][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.092871][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.120516][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.180758][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.187982][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.227426][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.234712][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.270360][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.320288][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.469404][ T5825] veth0_vlan: entered promiscuous mode [ 93.506651][ T5825] veth1_vlan: entered promiscuous mode [ 93.621078][ T5825] veth0_macvtap: entered promiscuous mode [ 93.673341][ T5825] veth1_macvtap: entered promiscuous mode [ 93.729476][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.753549][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.797202][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.852526][ T3461] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.878403][ T3461] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.908406][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.931231][ T3461] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.944263][ T3461] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.068879][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.083891][ T5832] veth0_vlan: entered promiscuous mode [ 94.138391][ T5829] veth0_vlan: entered promiscuous mode [ 94.160054][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.171567][ T5832] veth1_vlan: entered promiscuous mode [ 94.179453][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.202563][ T5826] veth0_vlan: entered promiscuous mode [ 94.225988][ T52] Bluetooth: hci1: command tx timeout [ 94.245183][ T5829] veth1_vlan: entered promiscuous mode [ 94.252822][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.263709][ T5826] veth1_vlan: entered promiscuous mode [ 94.264751][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.305347][ T52] Bluetooth: hci2: command tx timeout [ 94.305979][ T5842] Bluetooth: hci0: command tx timeout [ 94.332560][ T5832] veth0_macvtap: entered promiscuous mode [ 94.367364][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.368690][ T5832] veth1_macvtap: entered promiscuous mode [ 94.385433][ T5842] Bluetooth: hci4: command tx timeout [ 94.393786][ T5842] Bluetooth: hci3: command tx timeout [ 94.443139][ T5826] veth0_macvtap: entered promiscuous mode [ 94.459140][ T5829] veth0_macvtap: entered promiscuous mode [ 94.497252][ T5828] veth0_vlan: entered promiscuous mode [ 94.506590][ T5826] veth1_macvtap: entered promiscuous mode [ 94.518099][ T5829] veth1_macvtap: entered promiscuous mode [ 94.533548][ T5951] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.557916][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.572881][ T5828] veth1_vlan: entered promiscuous mode [ 94.599773][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.637859][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.647452][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.673722][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.687697][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.695800][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.706795][ T1161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.738957][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.753800][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.789857][ T5828] veth0_macvtap: entered promiscuous mode [ 94.815601][ T1161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.828908][ T1161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.851863][ T5828] veth1_macvtap: entered promiscuous mode [ 94.868431][ T1161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.911928][ T1161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.966030][ T1161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.005550][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.025291][ T1161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.034245][ T1161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.084202][ T1161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.118340][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.139299][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.148233][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.157887][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.167691][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.204307][ T75] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.247440][ T75] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.268740][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.292450][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.300551][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.310031][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.369666][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.381176][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.441826][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.502226][ T5966] bond0: (slave rose0): Enslaving as an active interface with an up link [ 95.521750][ T5970] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4'. [ 95.594934][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.638184][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.832097][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.863045][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.029048][ T5978] netlink: 'syz.1.2': attribute type 13 has an invalid length. [ 96.050325][ T5978] netlink: 'syz.1.2': attribute type 17 has an invalid length. [ 96.050784][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.130783][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.277059][ T5986] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 96.304540][ T5842] Bluetooth: hci1: command tx timeout [ 96.355650][ T5978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.374854][ T5996] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11'. [ 96.388183][ T5842] Bluetooth: hci0: command tx timeout [ 96.388194][ T52] Bluetooth: hci2: command tx timeout [ 96.417597][ T5996] netlink: 43 bytes leftover after parsing attributes in process `syz.3.11'. [ 96.430361][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.465404][ T5842] Bluetooth: hci3: command tx timeout [ 96.465808][ T52] Bluetooth: hci4: command tx timeout [ 96.477461][ T5996] netlink: 'syz.3.11': attribute type 5 has an invalid length. [ 96.484742][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.488869][ T5996] netlink: 43 bytes leftover after parsing attributes in process `syz.3.11'. [ 96.504170][ T5994] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 96.522049][ T5992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.532451][ T5994] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.683406][ T6000] Zero length message leads to an empty skb [ 97.182206][ T6007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.286791][ T10] cfg80211: failed to load regulatory.db [ 97.908863][ T6007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.098202][ T5997] lo: entered allmulticast mode [ 98.124009][ T5997] lo: left allmulticast mode [ 98.359180][ T6007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.533049][ T6063] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.620143][ T6007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.724758][ T6069] netlink: 100 bytes leftover after parsing attributes in process `syz.0.22'. [ 98.885531][ T6071] netlink: 'syz.3.24': attribute type 1 has an invalid length. [ 98.909528][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 98.963032][ T6069] veth3: entered promiscuous mode [ 98.973354][ T6075] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.015662][ T6077] netlink: 'syz.3.24': attribute type 1 has an invalid length. [ 99.107452][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 99.236902][ T6071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 99.662841][ T33] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.746552][ T3531] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.803866][ T6092] syz.1.26 uses obsolete (PF_INET,SOCK_PACKET) [ 99.893783][ T3461] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.008526][ T3461] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.730661][ T6123] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 100.815547][ T6126] sock: sock_timestamping_bind_phc: sock not bind to device [ 100.909903][ T6117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.267559][ T6140] nbd0: detected capacity change from 0 to 63 [ 101.327037][ T6145] block nbd0: NBD_DISCONNECT [ 101.338431][ T6145] block nbd0: Disconnected due to user request. [ 101.358340][ T6145] block nbd0: shutting down sockets [ 101.426878][ T6142] bridge0: port 3(erspan0) entered blocking state [ 101.433620][ T6142] bridge0: port 3(erspan0) entered disabled state [ 101.451980][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.461849][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 101.480765][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.490075][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 101.499754][ T6142] erspan0: entered allmulticast mode [ 101.511788][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.521039][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 101.528953][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.538133][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 101.546436][ T5883] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.564136][ T5883] Buffer I/O error on dev nbd0, logical block 0, async page read [ 101.580565][ T5883] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.594606][ T6142] erspan0: entered promiscuous mode [ 101.600319][ T5883] Buffer I/O error on dev nbd0, logical block 1, async page read [ 101.609679][ T5883] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.631363][ T6142] bridge0: port 3(erspan0) entered blocking state [ 101.634525][ T5883] Buffer I/O error on dev nbd0, logical block 2, async page read [ 101.638211][ T6142] bridge0: port 3(erspan0) entered forwarding state [ 101.689899][ T5883] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.730052][ T5883] Buffer I/O error on dev nbd0, logical block 3, async page read [ 101.767140][ T5883] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.782657][ T5883] Buffer I/O error on dev nbd0, logical block 0, async page read [ 101.835190][ T5883] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.871322][ T5883] Buffer I/O error on dev nbd0, logical block 1, async page read [ 101.889243][ T5883] ldm_validate_partition_table(): Disk read failed. [ 101.908707][ T5883] Dev nbd0: unable to read RDB block 0 [ 101.919908][ T5883] nbd0: unable to read partition table [ 101.947267][ T5883] ldm_validate_partition_table(): Disk read failed. [ 101.976475][ T5883] Dev nbd0: unable to read RDB block 0 [ 101.985289][ T5883] nbd0: unable to read partition table [ 102.132309][ T6158] tipc: Started in network mode [ 102.147176][ T6158] tipc: Node identity 1a3ec81943cc, cluster identity 4711 [ 102.157546][ T6158] tipc: Enabled bearer , priority 0 [ 102.299688][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.308042][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.411314][ T6175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.426850][ T6175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.552166][ T6151] tipc: Disabling bearer [ 102.651595][ T75] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.791717][ T1161] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.823642][ T1161] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.845395][ T6196] netlink: 7 bytes leftover after parsing attributes in process `syz.2.44'. [ 102.857014][ T1161] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.880204][ T6196] netlink: 'syz.2.44': attribute type 10 has an invalid length. [ 102.905305][ T6196] netlink: 40 bytes leftover after parsing attributes in process `syz.2.44'. [ 103.112108][ T6196] team0: Failed to send options change via netlink (err -105) [ 103.138152][ T6196] team0: Port device geneve0 added [ 103.173426][ T6226] netlink: 'syz.4.51': attribute type 1 has an invalid length. [ 103.463185][ T6235] netlink: 'syz.3.54': attribute type 1 has an invalid length. [ 103.721456][ T6253] netlink: 40 bytes leftover after parsing attributes in process `syz.4.58'. [ 104.051515][ T6251] pimreg: entered allmulticast mode [ 104.060374][ T6255] bridge0: port 3(erspan0) entered blocking state [ 104.084292][ T6255] bridge0: port 3(erspan0) entered disabled state [ 104.102629][ T6255] erspan0: entered allmulticast mode [ 104.114787][ T6255] erspan0: entered promiscuous mode [ 104.133645][ T6255] bridge0: port 3(erspan0) entered blocking state [ 104.140415][ T6255] bridge0: port 3(erspan0) entered forwarding state [ 104.575076][ T6274] syz_tun: entered allmulticast mode [ 104.601226][ T6273] syz_tun: left allmulticast mode [ 104.912298][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 105.808973][ T6299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.143674][ T6321] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.76'. [ 106.153275][ T6323] netlink: 'syz.4.73': attribute type 142 has an invalid length. [ 106.770329][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 106.817563][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.267152][ T6377] netlink: 'syz.1.85': attribute type 1 has an invalid length. [ 107.283696][ T6379] netlink: 'syz.2.86': attribute type 1 has an invalid length. [ 107.318312][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 107.319588][ T6383] netlink: 'syz.1.85': attribute type 1 has an invalid length. [ 107.455451][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 107.487075][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 108.150132][ T6414] netlink: 'syz.1.93': attribute type 13 has an invalid length. [ 108.165755][ T6414] netlink: 'syz.1.93': attribute type 17 has an invalid length. [ 108.182901][ T6413] netlink: 80 bytes leftover after parsing attributes in process `syz.2.94'. [ 108.456191][ T6414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.634285][ T6430] netlink: 40 bytes leftover after parsing attributes in process `syz.3.97'. [ 108.846417][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.951626][ T6442] netlink: 36 bytes leftover after parsing attributes in process `syz.2.101'. [ 109.042453][ T6445] netlink: 40 bytes leftover after parsing attributes in process `syz.2.101'. [ 109.207438][ T6451] sctp: [Deprecated]: syz.0.105 (pid 6451) Use of int in maxseg socket option. [ 109.207438][ T6451] Use struct sctp_assoc_value instead [ 109.553121][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 109.710565][ T6473] netlink: 248 bytes leftover after parsing attributes in process `syz.1.113'. [ 109.863936][ T6476] netlink: 244 bytes leftover after parsing attributes in process `syz.1.113'. [ 109.991665][ T6486] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 110.034489][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 110.059553][ T6486] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 110.169542][ T6487] netlink: 88 bytes leftover after parsing attributes in process `syz.2.116'. [ 110.233953][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 110.328845][ T6486] bond1: entered promiscuous mode [ 110.357898][ T6486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.755998][ T6506] netlink: 'syz.3.117': attribute type 12 has an invalid length. [ 111.453850][ T6535] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 111.529875][ T6535] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 111.868907][ T6535] bond1: entered promiscuous mode [ 111.900220][ T6535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.936597][ T6544] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 112.441406][ T6563] netlink: 'syz.4.129': attribute type 1 has an invalid length. [ 112.500573][ T6563] netlink: 'syz.4.129': attribute type 1 has an invalid length. [ 112.549914][ T6563] netlink: 'syz.4.129': attribute type 1 has an invalid length. [ 113.484212][ T6616] tipc: Started in network mode [ 113.550008][ T6616] tipc: Node identity b60883c913f5, cluster identity 4711 [ 113.577875][ T6625] __nla_validate_parse: 10 callbacks suppressed [ 113.577906][ T6625] netlink: 308 bytes leftover after parsing attributes in process `syz.2.138'. [ 113.588400][ T6616] tipc: Enabled bearer , priority 0 [ 113.649495][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 113.789503][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.140'. [ 113.830155][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.140'. [ 113.845487][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.140'. [ 113.894807][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.140'. [ 113.953797][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.140'. [ 113.967716][ T6646] validate_nla: 3 callbacks suppressed [ 113.967736][ T6646] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 113.981866][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 114.011400][ T6646] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 114.017630][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.140'. [ 114.062666][ T6649] netlink: 48 bytes leftover after parsing attributes in process `syz.0.142'. [ 114.238232][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.246219][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.829667][ T6666] tipc: Node number set to 2784854985 [ 114.883205][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.900301][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.179883][ T6616] tipc: Disabling bearer [ 115.208765][ T6646] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 115.211250][ T6654] !: renamed from dummy0 [ 115.331344][ T6670] kthread_run failed with err -4 [ 115.353606][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.399015][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.479876][ T6714] tipc: Enabled bearer , priority 0 [ 115.538786][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.590660][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.689070][ T6714] tipc: Disabling bearer [ 116.253819][ T6756] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 116.261046][ T6756] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 116.979808][ T6787] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 116.999209][ T6787] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 117.088736][ T6787] bond1: entered promiscuous mode [ 117.108823][ T6787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.441158][ T6805] netlink: 'syz.4.163': attribute type 2 has an invalid length. [ 117.464149][ T6805] netlink: 'syz.4.163': attribute type 5 has an invalid length. [ 117.485794][ T6805] netlink: 'syz.4.163': attribute type 9 has an invalid length. [ 117.521364][ T6806] tipc: Enabling of bearer rejected, failed to enable media [ 117.533808][ T6805] netem: incorrect ge model size [ 117.541120][ T6805] netem: change failed [ 117.683716][ T6813] tipc: Started in network mode [ 117.702821][ T6813] tipc: Node identity ac14142f, cluster identity 4711 [ 117.749824][ T6813] tipc: Enabling of bearer rejected, failed to enable media [ 117.776771][ T6800] mpoa:mpoad_close: () going down [ 118.280355][ T6838] netlink: 'syz.3.170': attribute type 29 has an invalid length. [ 119.307654][ T6846] __nla_validate_parse: 183 callbacks suppressed [ 119.307680][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.172'. [ 119.380026][ T6855] delete_channel: no stack [ 119.725454][ T6874] netlink: 64 bytes leftover after parsing attributes in process `syz.1.176'. [ 120.052823][ T6893] macvtap1: entered allmulticast mode [ 120.070897][ T6893] veth1_vlan: entered allmulticast mode [ 120.094029][ T6893] veth1_vlan: left allmulticast mode [ 120.133777][ T6889] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 120.251958][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 120.273179][ T6905] erspan0: left allmulticast mode [ 120.300636][ T6905] erspan0: left promiscuous mode [ 120.319431][ T6905] bridge0: port 3(erspan0) entered disabled state [ 120.341752][ T6905] bridge_slave_1: left allmulticast mode [ 120.354419][ T6905] bridge_slave_1: left promiscuous mode [ 120.369958][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.407330][ T6905] bridge_slave_0: left allmulticast mode [ 120.413053][ T6905] bridge_slave_0: left promiscuous mode [ 120.440658][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.950629][ T6915] erspan1: entered allmulticast mode [ 120.967898][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 121.032578][ T6912] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.196347][ T6912] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.392622][ T6912] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.578149][ T6912] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.691841][ T6962] syz_tun: entered allmulticast mode [ 121.780420][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.827424][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.020493][ T6685] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.050515][ T6685] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.292572][ T6978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'. [ 122.641156][ T6960] syz_tun: left allmulticast mode [ 122.657034][ T6993] IPVS: length: 24 != 119185342488 [ 123.360559][ T7011] netlink: 'syz.4.213': attribute type 1 has an invalid length. [ 123.381374][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 123.422891][ T7011] netlink: 'syz.4.213': attribute type 1 has an invalid length. [ 123.491900][ T7011] bond1: entered promiscuous mode [ 123.497636][ T7016] netlink: 88 bytes leftover after parsing attributes in process `syz.4.213'. [ 123.508447][ T7011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.551228][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 123.621076][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 123.681042][ T6996] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.726550][ T6996] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 123.844733][ T6996] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.851154][ T6996] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 123.927151][ T6996] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.946824][ T6996] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 124.068670][ T6996] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.094730][ T6996] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 124.226223][ T6996] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.232463][ T6996] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 124.427280][ T7046] netlink: 'syz.4.218': attribute type 32 has an invalid length. [ 124.746612][ T7054] netlink: 'syz.4.221': attribute type 83 has an invalid length. [ 124.985238][ T7064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.223'. [ 125.066947][ T7064] netlink: 'syz.4.223': attribute type 1 has an invalid length. [ 125.162024][ T7069] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 125.182051][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 125.214313][ T7069] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 125.267964][ T7071] netlink: 88 bytes leftover after parsing attributes in process `syz.0.224'. [ 125.355327][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 125.398092][ T7069] bond1: entered promiscuous mode [ 125.403827][ T7069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.486282][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'. [ 125.729786][ T7086] netlink: 88 bytes leftover after parsing attributes in process `syz.0.226'. [ 125.842572][ T7088] bond0: (slave gre0): Error: Device type is different from other slaves [ 125.946012][ T7093] netlink: 'syz.4.227': attribute type 39 has an invalid length. [ 126.758208][ T7127] Cannot find add_set index 2 as target [ 127.074804][ T7147] netlink: 76 bytes leftover after parsing attributes in process `syz.1.239'. [ 127.196388][ T7147] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 127.211475][ T7147] netlink: 52 bytes leftover after parsing attributes in process `syz.1.239'. [ 127.412819][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 127.427668][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.443775][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.766569][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 127.798742][ T7156] netlink: 'syz.0.241': attribute type 3 has an invalid length. [ 127.840566][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.862108][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.097756][ T7193] veth0: entered promiscuous mode [ 128.648701][ T7191] Driver unsupported XDP return value 0 on prog (id 86) dev N/A, expect packet loss! [ 128.836018][ T7217] netlink: 'syz.2.254': attribute type 2 has an invalid length. [ 129.027837][ T7228] x_tables: duplicate underflow at hook 1 [ 129.679627][ T7267] ip6t_REJECT: ECHOREPLY is not supported [ 129.765075][ T7267] netlink: 'syz.1.265': attribute type 11 has an invalid length. [ 129.794916][ T7267] netlink: 'syz.1.265': attribute type 4 has an invalid length. [ 130.049312][ T7278] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 130.083934][ T7278] __nla_validate_parse: 7 callbacks suppressed [ 130.083956][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 130.122204][ T7278] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 130.203923][ T7285] netlink: 88 bytes leftover after parsing attributes in process `syz.1.267'. [ 130.217102][ T7278] bond2: entered promiscuous mode [ 130.222981][ T7278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.297413][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 130.475323][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 131.394087][ T7292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.437304][ T7292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.457897][ T7292] bond0 (unregistering): Released all slaves [ 131.526288][ T7312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.272'. [ 131.669379][ T7313] netlink: 32 bytes leftover after parsing attributes in process `syz.1.272'. [ 131.735351][ T7333] netlink: 108 bytes leftover after parsing attributes in process `syz.2.275'. [ 131.970025][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 132.034868][ T7345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.277'. [ 132.120779][ T7350] Bluetooth: MGMT ver 1.23 [ 132.212632][ T7363] Bluetooth: MGMT ver 1.23 [ 132.840327][ T7389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.363024][ T7408] netlink: 'syz.4.288': attribute type 1 has an invalid length. [ 133.451418][ T7414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.288'. [ 133.498132][ T7408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.873405][ T7420] veth3: entered promiscuous mode [ 133.893124][ T7420] bond2: (slave veth3): Enslaving as an active interface with a down link [ 133.908222][ T7408] erspan0: entered allmulticast mode [ 133.919461][ T7408] bond2: (slave erspan0): making interface the new active one [ 133.929498][ T7408] erspan0: entered promiscuous mode [ 133.935769][ T7408] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 133.963920][ T7425] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 134.404540][ T7457] Bluetooth: MGMT ver 1.23 [ 134.747990][ T7457] geneve2: entered promiscuous mode [ 138.036404][ T7505] tipc: Can't bind to reserved service type 0 [ 138.050893][ T7507] __nla_validate_parse: 1 callbacks suppressed [ 138.050912][ T7507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.312'. [ 138.086222][ T7505] syz_tun: entered allmulticast mode [ 138.106246][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 138.155948][ T7505] syz_tun (unregistering): left allmulticast mode [ 138.230825][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.237670][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.243861][ T7517] syzkaller1: entered allmulticast mode [ 138.278488][ T7521] ip6gre1: entered allmulticast mode [ 138.308342][ T7527] batadv2: entered allmulticast mode [ 138.333804][ T7527] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 138.568889][ T7542] netlink: 'syz.1.320': attribute type 9 has an invalid length. [ 138.610918][ T7541] macsec1: entered promiscuous mode [ 138.629508][ T7541] macsec1: entered allmulticast mode [ 138.734863][ T7545] tipc: Enabled bearer , priority 0 [ 138.744124][ T7547] syzkaller0: entered promiscuous mode [ 138.760389][ T7547] syzkaller0: entered allmulticast mode [ 138.785660][ T7551] veth0: entered promiscuous mode [ 138.861032][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 138.879162][ T7538] tipc: Resetting bearer [ 139.165353][ T7562] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.215833][ T7566] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 139.238675][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 139.258924][ T7566] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 139.286529][ T7565] netlink: 44 bytes leftover after parsing attributes in process `syz.4.324'. [ 139.317124][ T7572] netlink: 88 bytes leftover after parsing attributes in process `syz.1.325'. [ 139.355529][ T7566] bond3: entered promiscuous mode [ 139.361282][ T7566] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.402281][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 139.436451][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 139.519912][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'. [ 139.690232][ T7595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.335'. [ 139.703218][ T7592] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 139.716686][ T7592] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 139.734822][ T6707] tipc: Node number set to 1509083161 [ 139.751060][ T7592] bond4: entered promiscuous mode [ 139.757635][ T7592] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.790826][ T7597] IPVS: Scheduler module ip_vs_sip not found [ 139.800617][ T7601] IPVS: length: 141 != 8 [ 139.816807][ T7607] delete_channel: no stack [ 139.913236][ T7607] tipc: Started in network mode [ 139.925235][ T7607] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 139.935131][ T7607] tipc: Enabling of bearer rejected, failed to enable media [ 140.088147][ T7618] team0: Device gtp0 is of different type [ 140.352790][ T7630] netlink: 'syz.3.342': attribute type 10 has an invalid length. [ 140.460348][ T7630] dummy0: entered promiscuous mode [ 140.495866][ T7630] bridge0: port 3(dummy0) entered blocking state [ 140.502857][ T7630] bridge0: port 3(dummy0) entered disabled state [ 140.529787][ T7630] dummy0: entered allmulticast mode [ 140.934039][ T6707] IPVS: starting estimator thread 0... [ 141.155252][ T7658] IPVS: using max 30 ests per chain, 72000 per kthread [ 141.554639][ T7673] netlink: 'syz.2.354': attribute type 1 has an invalid length. [ 141.607799][ T7677] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 141.725984][ T7673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.962882][ T7689] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 142.543244][ T7710] syzkaller1: entered promiscuous mode [ 142.554831][ T7710] syzkaller1: entered allmulticast mode [ 143.942531][ T7731] __nla_validate_parse: 12 callbacks suppressed [ 143.942556][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.368'. [ 144.014605][ T7735] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 144.157204][ T7743] netlink: 'syz.1.371': attribute type 1 has an invalid length. [ 144.176216][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 144.231455][ T7743] netlink: 'syz.1.371': attribute type 1 has an invalid length. [ 144.341278][ T7750] netlink: 88 bytes leftover after parsing attributes in process `syz.1.371'. [ 144.419422][ T7743] bond5: entered promiscuous mode [ 144.442363][ T7743] 8021q: adding VLAN 0 to HW filter on device bond5 [ 144.442430][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 144.788755][ T7756] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 144.946960][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 145.120247][ T7763] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.170876][ T7767] bond3: (slave macsec1): Error -34 calling dev_set_mtu [ 145.496325][ T7777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.377'. [ 145.634464][ T7782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.377'. [ 145.876124][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.381'. [ 146.143345][ T7803] Bluetooth: MGMT ver 1.23 [ 146.841701][ T7791] tipc: Enabled bearer , priority 0 [ 146.862716][ T7794] syzkaller0: entered promiscuous mode [ 146.882374][ T7794] syzkaller0: entered allmulticast mode [ 146.900891][ T6690] erspan0: left promiscuous mode [ 146.928198][ T7804] tipc: Resetting bearer [ 147.074389][ T7810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.383'. [ 147.116808][ T7804] tipc: Resetting bearer [ 147.165488][ T7804] tipc: Disabling bearer [ 147.239731][ T7824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.389'. [ 147.438409][ T7828] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 147.498560][ T7832] netlink: 'syz.2.391': attribute type 9 has an invalid length. [ 147.592102][ T6687] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 148.065867][ T7860] netlink: zone id is out of range [ 148.077678][ T7860] netlink: zone id is out of range [ 148.092714][ T7860] netlink: zone id is out of range [ 148.107164][ T7860] netlink: zone id is out of range [ 148.124793][ T7848] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 148.173620][ T7860] netlink: zone id is out of range [ 148.191820][ T7860] netlink: zone id is out of range [ 148.202861][ T7860] netlink: zone id is out of range [ 148.216308][ T7860] netlink: zone id is out of range [ 148.228859][ T7860] netlink: zone id is out of range [ 148.250973][ T7860] netlink: zone id is out of range [ 148.415522][ T7868] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 148.898029][ T7890] netlink: 'syz.1.404': attribute type 3 has an invalid length. [ 149.462326][ T7899] __nla_validate_parse: 5 callbacks suppressed [ 149.462349][ T7899] netlink: 248 bytes leftover after parsing attributes in process `syz.0.409'. [ 149.484239][ T7901] netlink: 'syz.1.408': attribute type 1 has an invalid length. [ 149.529948][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 149.570657][ T7901] netlink: 'syz.1.408': attribute type 1 has an invalid length. [ 149.622453][ T7902] netlink: 88 bytes leftover after parsing attributes in process `syz.1.408'. [ 149.677621][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 149.791899][ T7901] bond6: entered promiscuous mode [ 149.809647][ T7901] 8021q: adding VLAN 0 to HW filter on device bond6 [ 149.863967][ T7911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.410'. [ 150.016092][ T7919] netlink: 'syz.2.414': attribute type 10 has an invalid length. [ 150.076054][ T7919] netlink: 'syz.2.414': attribute type 10 has an invalid length. [ 150.183255][ T7924] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 150.186691][ T7919] syz.2.414 (7919) used greatest stack depth: 17832 bytes left [ 151.640685][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 151.837840][ T8003] batadv1: entered promiscuous mode [ 151.867048][ T8003] batadv1: entered allmulticast mode [ 151.967817][ T8012] netlink: 84 bytes leftover after parsing attributes in process `syz.0.441'. [ 151.984970][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 152.086871][ T8023] netlink: 'syz.1.440': attribute type 83 has an invalid length. [ 152.099660][ T8015] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 152.117685][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.442'. [ 152.254308][ T8033] netlink: 'syz.3.445': attribute type 1 has an invalid length. [ 152.262984][ T8033] netlink: 'syz.3.445': attribute type 6 has an invalid length. [ 152.271997][ T8033] netlink: 'syz.3.445': attribute type 3 has an invalid length. [ 152.366881][ T8007] netlink: 44 bytes leftover after parsing attributes in process `syz.2.442'. [ 152.385206][ T6707] syzkaller1: tun_net_xmit 90 [ 152.442655][ T8007] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 152.450720][ T8007] syzkaller1: Linktype set failed because interface is up [ 153.245699][ T8083] netlink: 232 bytes leftover after parsing attributes in process `syz.0.452'. [ 153.457104][ T8091] netlink: 'syz.4.455': attribute type 1 has an invalid length. [ 153.467533][ T8092] can: request_module (can-proto-0) failed. [ 153.982829][ T8104] netlink: 'syz.4.457': attribute type 4 has an invalid length. [ 154.144608][ T52] Bluetooth: hci4: command tx timeout [ 157.172265][ T8140] nbd0: detected capacity change from 0 to 127 [ 157.221967][ T52] block nbd0: Receive control failed (result -32) [ 157.292704][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 157.528104][ T8155] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 3942. macoff=106 [ 157.816108][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 157.905293][ T8186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.476'. [ 158.526711][ T8205] nbd1: detected capacity change from 0 to 127 [ 158.557606][ T52] block nbd1: Receive control failed (result -32) [ 159.238514][ T8229] net_ratelimit: 332 callbacks suppressed [ 159.238552][ T8229] netlink: zone id is out of range [ 159.272074][ T8229] netlink: zone id is out of range [ 159.284423][ T8229] netlink: zone id is out of range [ 159.289687][ T8229] netlink: zone id is out of range [ 159.314426][ T8229] netlink: set zone limit has 4 unknown bytes [ 159.613346][ T8236] tipc: Enabling of bearer rejected, already enabled [ 159.645840][ T8236] validate_nla: 1 callbacks suppressed [ 159.645860][ T8236] netlink: 'syz.3.491': attribute type 8 has an invalid length. [ 159.774622][ T8243] nbd2: detected capacity change from 0 to 127 [ 159.812271][ T8246] ip6gre1: entered allmulticast mode [ 159.849278][ T52] block nbd2: Receive control failed (result -32) [ 160.311062][ T8268] lo: entered allmulticast mode [ 160.322812][ T8270] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 160.339025][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 160.370974][ T8270] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 160.382806][ T8273] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 160.410922][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 160.414496][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 160.432422][ T8276] netlink: 88 bytes leftover after parsing attributes in process `syz.0.502'. [ 160.433815][ T8273] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 160.470846][ T8270] bond2: entered promiscuous mode [ 160.476402][ T8270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.485652][ T8279] netlink: 88 bytes leftover after parsing attributes in process `syz.1.503'. [ 160.523412][ T8273] bond7: entered promiscuous mode [ 160.529043][ T8273] 8021q: adding VLAN 0 to HW filter on device bond7 [ 160.536469][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 160.578265][ T8267] lo: left allmulticast mode [ 160.587753][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 160.624615][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 161.004510][ T8291] nbd3: detected capacity change from 0 to 127 [ 161.072390][ T52] block nbd3: Receive control failed (result -32) [ 161.528229][ T8321] netlink: 'syz.3.513': attribute type 7 has an invalid length. [ 161.725281][ T8327] netlink: 'syz.1.516': attribute type 1 has an invalid length. [ 161.745836][ T8327] netlink: 'syz.1.516': attribute type 1 has an invalid length. [ 161.798946][ T8327] bond8: entered promiscuous mode [ 161.807853][ T8327] 8021q: adding VLAN 0 to HW filter on device bond8 [ 162.142763][ T8345] nbd4: detected capacity change from 0 to 127 [ 162.229403][ T52] block nbd4: Receive control failed (result -32) [ 170.620111][ T8401] nbd5: detected capacity change from 0 to 127 [ 170.682744][ T52] block nbd5: Receive control failed (result -32) [ 171.043131][ T8418] __nla_validate_parse: 15 callbacks suppressed [ 171.043149][ T8418] netlink: 52 bytes leftover after parsing attributes in process `syz.0.541'. [ 171.155136][ T8419] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.543'. [ 171.355293][ T8422] netlink: 'syz.4.543': attribute type 13 has an invalid length. [ 171.363095][ T8422] netlink: 'syz.4.543': attribute type 17 has an invalid length. [ 171.431405][ T8422] erspan0: left allmulticast mode [ 171.607723][ T8422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.629441][ T8422] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.658273][ T8422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.993685][ T8449] netlink: 'syz.2.553': attribute type 4 has an invalid length. [ 172.073502][ T8460] netlink: 36 bytes leftover after parsing attributes in process `syz.0.555'. [ 172.382344][ T8469] rose0: entered promiscuous mode [ 172.433519][ T8453] rose0 (unregistering): left promiscuous mode [ 172.678622][ T8482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.561'. [ 172.803363][ T8487] netlink: 'syz.1.562': attribute type 1 has an invalid length. [ 172.813470][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 172.826988][ T8487] netlink: 'syz.1.562': attribute type 1 has an invalid length. [ 172.877291][ T8491] netlink: 88 bytes leftover after parsing attributes in process `syz.1.562'. [ 172.898491][ T8487] bond9: entered promiscuous mode [ 172.904098][ T8487] 8021q: adding VLAN 0 to HW filter on device bond9 [ 172.918696][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 172.929361][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.562'. [ 173.097691][ T6665] IPVS: starting estimator thread 0... [ 173.146668][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 173.171859][ T8505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.566'. [ 173.217474][ T8501] IPVS: using max 31 ests per chain, 74400 per kthread [ 173.264296][ T8507] x_tables: duplicate underflow at hook 3 [ 173.537347][ T8516] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.581443][ T8525] erspan0: left allmulticast mode [ 173.588122][ T8525] erspan0: left promiscuous mode [ 173.594274][ T8525] bridge0: port 3(erspan0) entered disabled state [ 173.605943][ T8525] bridge_slave_1: left allmulticast mode [ 173.636081][ T8525] bridge_slave_1: left promiscuous mode [ 173.643368][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.650516][ T8530] netlink: 'syz.1.572': attribute type 3 has an invalid length. [ 173.697800][ T8525] bridge_slave_0: left allmulticast mode [ 173.704207][ T8525] bridge_slave_0: left promiscuous mode [ 173.712253][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.822155][ T8538] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 173.832556][ T8538] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 173.895250][ T8516] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.048587][ T8538] bond3: entered promiscuous mode [ 174.070089][ T8538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.091967][ T8516] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.291664][ T8516] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.532990][ T8165] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.617010][ T8516] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.876986][ T8573] Àÿ: renamed from team_slave_1 (while UP) [ 174.928425][ T8573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.014236][ T8573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.118697][ T8573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.261968][ T8573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.324015][ T8587] dvmrp8: entered allmulticast mode [ 175.385789][ T8590] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 175.403952][ T8590] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 175.430251][ T8165] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.470708][ T8590] bond10: entered promiscuous mode [ 175.477435][ T8590] 8021q: adding VLAN 0 to HW filter on device bond10 [ 175.514706][ T6370] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.547181][ T6370] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.569634][ T6370] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.826779][ T8615] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 176.100439][ T8625] __nla_validate_parse: 17 callbacks suppressed [ 176.100461][ T8625] netlink: 124 bytes leftover after parsing attributes in process `syz.2.600'. [ 176.375499][ T8635] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 176.387943][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'. [ 176.402678][ T8635] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 176.456007][ T8639] netlink: 88 bytes leftover after parsing attributes in process `syz.2.604'. [ 176.468117][ T8635] bond2: entered promiscuous mode [ 176.474129][ T8635] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.513831][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 176.559360][ T8635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'. [ 176.900079][ T8660] netlink: 'syz.4.610': attribute type 6 has an invalid length. [ 176.965927][ T8660] netlink: 'syz.4.610': attribute type 12 has an invalid length. [ 176.984062][ T8660] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.610'. [ 177.812376][ T8694] netlink: 'syz.2.619': attribute type 13 has an invalid length. [ 177.829744][ T8694] netlink: 'syz.2.619': attribute type 17 has an invalid length. [ 177.856162][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 177.893437][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 177.904721][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 177.944674][ T8700] netlink: 'syz.4.622': attribute type 14 has an invalid length. [ 178.014944][ T8694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.216274][ T8694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.343304][ T8708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.022953][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.632'. [ 179.042735][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.632'. [ 179.182749][ T8737] ip6gretap0: entered promiscuous mode [ 179.190771][ T8737] ip6gretap0: left promiscuous mode [ 179.571595][ T8753] nbd: socks must be embedded in a SOCK_ITEM attr [ 181.251530][ T8819] netlink: 'syz.1.657': attribute type 1 has an invalid length. [ 181.270037][ T8819] __nla_validate_parse: 4 callbacks suppressed [ 181.270058][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 181.303471][ T8819] netlink: 'syz.1.657': attribute type 1 has an invalid length. [ 181.312072][ T8821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.658'. [ 181.339943][ T8819] bond11: entered promiscuous mode [ 181.353050][ T8819] 8021q: adding VLAN 0 to HW filter on device bond11 [ 181.363442][ T8823] netlink: 88 bytes leftover after parsing attributes in process `syz.1.657'. [ 181.382481][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 181.393214][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.657'. [ 181.634700][ T8831] nbd6: detected capacity change from 0 to 127 [ 181.730506][ T8839] lo speed is unknown, defaulting to 1000 [ 181.746779][ T8839] lo speed is unknown, defaulting to 1000 [ 181.758504][ T8839] lo speed is unknown, defaulting to 1000 [ 181.773424][ T8839] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 181.796844][ T8839] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 181.828771][ T8844] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 181.850837][ T8839] lo speed is unknown, defaulting to 1000 [ 181.860116][ T8839] lo speed is unknown, defaulting to 1000 [ 181.869386][ T8839] lo speed is unknown, defaulting to 1000 [ 181.877784][ T52] block nbd6: Receive control failed (result -32) [ 181.878414][ T8839] lo speed is unknown, defaulting to 1000 [ 181.886578][ T8844] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 181.900874][ T8839] lo speed is unknown, defaulting to 1000 [ 181.911510][ T8839] lo speed is unknown, defaulting to 1000 [ 181.974127][ T8846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.665'. [ 182.178274][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 182.211137][ T8853] macvlan2: entered promiscuous mode [ 182.217532][ T8852] dummy0: left allmulticast mode [ 182.223062][ T8852] bridge0: port 3(dummy0) entered disabled state [ 182.238710][ T8852] bridge_slave_1: left allmulticast mode [ 182.245166][ T8852] bridge_slave_1: left promiscuous mode [ 182.251002][ T8852] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.268831][ T8852] bridge_slave_0: left allmulticast mode [ 182.275168][ T8852] bridge_slave_0: left promiscuous mode [ 182.281004][ T8852] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.366410][ T8867] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 182.374252][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 182.408817][ T8867] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 182.477799][ T8873] netlink: 88 bytes leftover after parsing attributes in process `syz.4.671'. [ 182.492476][ T8867] bond4: entered promiscuous mode [ 182.499205][ T8867] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.524938][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 182.820130][ T8888] nbd7: detected capacity change from 0 to 127 [ 182.917532][ T8879] lo speed is unknown, defaulting to 1000 [ 183.013980][ T52] block nbd7: Receive control failed (result -32) [ 183.127880][ T8883] lo speed is unknown, defaulting to 1000 [ 183.198814][ T8899] netlink: 'syz.3.679': attribute type 1 has an invalid length. [ 183.224867][ T8899] netlink: 'syz.3.679': attribute type 1 has an invalid length. [ 183.321474][ T8899] bond3: entered promiscuous mode [ 183.329050][ T8899] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.641117][ T8928] lo speed is unknown, defaulting to 1000 [ 183.864895][ T8940] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 183.891304][ T8943] netlink: 'syz.4.690': attribute type 1 has an invalid length. [ 183.901157][ T8940] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 183.924200][ T8943] netlink: 'syz.4.690': attribute type 1 has an invalid length. [ 183.963797][ T8942] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 184.008049][ T8943] bond5: entered promiscuous mode [ 184.013672][ T8943] 8021q: adding VLAN 0 to HW filter on device bond5 [ 184.109235][ T8940] bond12: entered promiscuous mode [ 184.118508][ T8940] 8021q: adding VLAN 0 to HW filter on device bond12 [ 184.661986][ T8976] bond4: entered promiscuous mode [ 184.686051][ T8976] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.895519][ T8996] syzkaller1: entered promiscuous mode [ 184.901061][ T8996] syzkaller1: entered allmulticast mode [ 184.924970][ T30] audit: type=1800 audit(1760110055.322:2): pid=9001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.702" name="memory.events" dev="tmpfs" ino=688 res=0 errno=0 [ 184.929271][ T8996] macsec0: entered allmulticast mode [ 184.970643][ T8996] veth1_macvtap: entered allmulticast mode [ 185.004408][ T8996] macsec0: left allmulticast mode [ 185.009535][ T8996] veth1_macvtap: left allmulticast mode [ 185.046522][ T6708] IPVS: starting estimator thread 0... [ 185.154602][ T9012] IPVS: using max 27 ests per chain, 64800 per kthread [ 185.208045][ T9014] bond3: entered promiscuous mode [ 185.237328][ T9014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.269516][ T9020] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 185.280549][ T8165] bond0: (slave bond_slave_0): interface is now down [ 185.293839][ T8165] bond0: (slave bond_slave_1): interface is now down [ 185.325918][ T8165] bond0: (slave bond_slave_0): interface is now down [ 185.342574][ T8165] bond0: (slave bond_slave_1): interface is now down [ 185.394610][ T8165] bond0: (slave bond_slave_0): interface is now down [ 185.401371][ T8165] bond0: (slave bond_slave_1): interface is now down [ 185.429817][ T8165] bond0: now running without any active interface! [ 185.864910][ T9046] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 185.890752][ T9046] bond4: (slave macvlan3): Enslaving as an active interface with a down link [ 185.912076][ T9041] rdma_rxe: rxe_newlink: failed to add syz_tun [ 186.621034][ T9062] tipc: Started in network mode [ 186.627590][ T9062] tipc: Node identity 080211, cluster identity 4711 [ 186.635235][ T9062] tipc: Enabled bearer , priority 0 [ 186.643729][ T9062] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 186.652313][ T9062] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 186.724673][ T9062] tipc: Resetting bearer [ 187.030845][ T9075] syzkaller1: entered promiscuous mode [ 187.036569][ T9075] syzkaller1: entered allmulticast mode [ 187.043783][ T9077] tipc: Enabling of bearer rejected, failed to enable media [ 187.053274][ T9069] bridge_slave_1: entered allmulticast mode [ 187.174631][ T9069] can: request_module (can-proto-0) failed. [ 187.183330][ T9071] lo speed is unknown, defaulting to 1000 [ 187.190236][ T9085] __nla_validate_parse: 31 callbacks suppressed [ 187.190255][ T9085] netlink: 52 bytes leftover after parsing attributes in process `syz.3.723'. [ 187.466239][ T9096] nbd8: detected capacity change from 0 to 127 [ 187.609507][ T9103] validate_nla: 7 callbacks suppressed [ 187.609530][ T9103] netlink: 'syz.2.730': attribute type 4 has an invalid length. [ 187.706188][ T24] tipc: Node number set to 134353152 [ 187.856659][ T52] block nbd8: Receive control failed (result -32) [ 188.228267][ T9126] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 188.307664][ T9129] netlink: 'syz.4.734': attribute type 13 has an invalid length. [ 188.318249][ T9129] netlink: 'syz.4.734': attribute type 17 has an invalid length. [ 188.388628][ T9126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.736'. [ 188.527520][ T9129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.573121][ T9129] netlink: 36 bytes leftover after parsing attributes in process `syz.4.734'. [ 188.609379][ T9129] netlink: 48 bytes leftover after parsing attributes in process `syz.4.734'. [ 188.619071][ T9133] lo speed is unknown, defaulting to 1000 [ 188.625485][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 188.742094][ T9142] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 188.752069][ T9142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.739'. [ 189.048573][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 189.189956][ T9155] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 189.190070][ T6687] bond0: (slave bond_slave_0): interface is now down [ 189.214899][ T6687] bond0: (slave bond_slave_1): interface is now down [ 189.245545][ T6687] bond0: (slave bond_slave_0): interface is now down [ 189.252605][ T6687] bond0: (slave bond_slave_1): interface is now down [ 189.305672][ T9165] netlink: 'syz.0.744': attribute type 3 has an invalid length. [ 189.313386][ T9165] netlink: 'syz.0.744': attribute type 1 has an invalid length. [ 189.314679][ T6687] bond0: (slave bond_slave_0): interface is now down [ 189.344377][ T6687] bond0: (slave bond_slave_1): interface is now down [ 189.351010][ T9165] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.744'. [ 189.374461][ T6687] bond0: (slave bond_slave_0): interface is now down [ 189.394159][ T6687] bond0: (slave bond_slave_1): interface is now down [ 189.425828][ T8069] bond0: (slave bond_slave_0): interface is now down [ 189.433522][ T8069] bond0: (slave bond_slave_1): interface is now down [ 189.446393][ T8069] bond0: now running without any active interface! [ 189.863441][ T9177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.747'. [ 190.238392][ T9197] pim6reg1: entered promiscuous mode [ 190.241771][ T9199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.753'. [ 190.248251][ T9197] pim6reg1: entered allmulticast mode [ 190.572379][ T9212] netlink: 'syz.1.756': attribute type 21 has an invalid length. [ 190.906532][ T9224] tipc: Enabled bearer , priority 0 [ 190.914172][ T9224] syzkaller0: entered promiscuous mode [ 190.920257][ T9224] syzkaller0: entered allmulticast mode [ 191.025162][ T9224] tipc: Resetting bearer [ 191.063583][ T9223] tipc: Resetting bearer [ 191.124145][ T9226] can: request_module (can-proto-0) failed. [ 191.135530][ T9223] tipc: Disabling bearer [ 191.225614][ T9233] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 191.260036][ T9235] batadv2: entered promiscuous mode [ 191.270844][ T9235] batadv2: entered allmulticast mode [ 191.278595][ T9235] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 191.509868][ T9248] lo speed is unknown, defaulting to 1000 [ 192.197285][ T9283] syz_tun: entered allmulticast mode [ 192.489616][ T9282] syz_tun: left allmulticast mode [ 192.497094][ T9294] pim6reg1: entered promiscuous mode [ 192.502625][ T9294] pim6reg1: entered allmulticast mode [ 192.822708][ T9326] __nla_validate_parse: 3 callbacks suppressed [ 192.822728][ T9326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.783'. [ 192.868097][ T9322] pim6reg1: entered promiscuous mode [ 192.882836][ T9322] pim6reg1: entered allmulticast mode [ 192.909588][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.781'. [ 193.038457][ T9327] lo speed is unknown, defaulting to 1000 [ 193.404054][ T9351] tipc: Enabled bearer , priority 0 [ 193.446752][ T9351] netlink: 'syz.2.791': attribute type 21 has an invalid length. [ 193.472297][ T9351] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 193.509853][ T9351] tipc: Resetting bearer [ 193.578637][ T9350] tipc: Disabling bearer [ 193.917178][ T9377] x_tables: duplicate underflow at hook 2 [ 194.123658][ T9400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.802'. [ 194.150223][ T9398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.802'. [ 194.183230][ T9397] lo speed is unknown, defaulting to 1000 [ 194.255927][ T9409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.805'. [ 194.480175][ T9419] netlink: 32 bytes leftover after parsing attributes in process `syz.1.809'. [ 194.697049][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'. [ 194.720618][ T9419] veth1_macvtap: left promiscuous mode [ 194.880226][ T9426] netlink: 288 bytes leftover after parsing attributes in process `syz.1.809'. [ 194.886204][ T9441] netlink: 'syz.4.812': attribute type 10 has an invalid length. [ 194.897759][ T9441] netlink: 40 bytes leftover after parsing attributes in process `syz.4.812'. [ 194.994513][ T9441] team0: Port device geneve0 added [ 195.064856][ T9438] lo speed is unknown, defaulting to 1000 [ 195.105419][ T9442] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 195.173521][ T9452] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 195.181543][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 195.219527][ T9452] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 195.222662][ T9450] wg1 speed is unknown, defaulting to 1000 [ 195.279190][ T9452] bond4: entered promiscuous mode [ 195.296287][ T9452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.391722][ T9450] wg1 speed is unknown, defaulting to 1000 [ 195.436128][ T9450] wg1 speed is unknown, defaulting to 1000 [ 195.465647][ T9450] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 195.513332][ T9450] wg1 speed is unknown, defaulting to 1000 [ 195.556597][ T9450] wg1 speed is unknown, defaulting to 1000 [ 195.582552][ T9450] wg1 speed is unknown, defaulting to 1000 [ 195.598121][ T9450] wg1 speed is unknown, defaulting to 1000 [ 195.631729][ T9450] wg1 speed is unknown, defaulting to 1000 [ 195.705319][ T9450] wg1 speed is unknown, defaulting to 1000 [ 195.952883][ T9496] xt_HMARK: proto mask must be zero with L3 mode [ 196.112855][ T9502] netlink: 'syz.0.825': attribute type 12 has an invalid length. [ 196.149624][ T9493] lo speed is unknown, defaulting to 1000 [ 196.188642][ T9493] wg1 speed is unknown, defaulting to 1000 [ 196.937602][ T9517] tipc: Enabling of bearer rejected, already enabled [ 197.121149][ T9526] tipc: Enabled bearer , priority 10 [ 197.169709][ T9528] syzkaller0: left promiscuous mode [ 197.202316][ T9528] syzkaller0: left allmulticast mode [ 197.225201][ T9534] bridge_slave_1: left promiscuous mode [ 197.241399][ T9534] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.318497][ T9534] bridge_slave_0: left allmulticast mode [ 197.324488][ T9534] bridge_slave_0: left promiscuous mode [ 197.341471][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.525069][ T9558] netlink: 'syz.1.835': attribute type 10 has an invalid length. [ 197.617744][ T8166] bond0: (slave dummy0): interface is now down [ 197.628630][ T9558] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 197.641744][ T8166] bond0: (slave dummy0): interface is now down [ 197.684834][ T8166] bond0: (slave dummy0): interface is now down [ 197.716884][ T6372] bond0: (slave dummy0): interface is now down [ 197.745067][ T6372] bond0: (slave dummy0): interface is now down [ 197.765837][ T6372] bond0: (slave dummy0): interface is now down [ 197.794459][ T8069] bond0: (slave dummy0): interface is now down [ 197.814602][ T6372] bond0: (slave dummy0): interface is now down [ 197.840345][ T6372] bond0: now running without any active interface! [ 198.137596][ T9580] __nla_validate_parse: 13 callbacks suppressed [ 198.137619][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 198.234448][ T24] tipc: Node number set to 4227858433 [ 198.385702][ T9587] 8021q: VLANs not supported on ip_vti0 [ 198.397098][ T9591] netlink: 'syz.3.852': attribute type 1 has an invalid length. [ 198.400878][ T9587] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 198.404899][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 198.412140][ T9587] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 198.433631][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.848'. [ 198.451688][ T9591] netlink: 'syz.3.852': attribute type 1 has an invalid length. [ 198.503732][ T9597] netlink: 88 bytes leftover after parsing attributes in process `syz.3.852'. [ 198.589574][ T9591] bond5: entered promiscuous mode [ 198.596120][ T9591] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.608837][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 199.371993][ T9597] kthread_run failed with err -4 [ 199.631287][ T9632] netlink: 60 bytes leftover after parsing attributes in process `syz.3.859'. [ 199.671596][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.678925][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.725344][ T9632] vlan2: entered promiscuous mode [ 199.740705][ T9632] geneve1: entered promiscuous mode [ 199.764910][ T9632] vlan2: entered allmulticast mode [ 199.772563][ T9632] geneve1: entered allmulticast mode [ 199.797756][ T9634] tipc: Enabled bearer , priority 0 [ 199.818654][ T9634] syzkaller0: entered promiscuous mode [ 199.824191][ T9634] syzkaller0: entered allmulticast mode [ 199.904109][ T9634] tipc: Resetting bearer [ 199.954700][ T9633] tipc: Resetting bearer [ 199.993281][ T9633] tipc: Disabling bearer [ 200.043290][ T9654] netlink: 248 bytes leftover after parsing attributes in process `syz.3.864'. [ 200.081177][ T9653] lo speed is unknown, defaulting to 1000 [ 200.097350][ T9658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.866'. [ 200.154867][ T9660] netlink: 'syz.0.867': attribute type 1 has an invalid length. [ 200.174464][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 200.183509][ T9653] wg1 speed is unknown, defaulting to 1000 [ 200.230448][ T9660] netlink: 'syz.0.867': attribute type 1 has an invalid length. [ 200.282674][ T9667] netlink: 88 bytes leftover after parsing attributes in process `syz.0.867'. [ 200.409478][ T9660] bond7: entered promiscuous mode [ 200.415963][ T9660] 8021q: adding VLAN 0 to HW filter on device bond7 [ 200.814584][ T9682] netlink: 'syz.0.872': attribute type 83 has an invalid length. [ 201.898391][ T9702] syzkaller0: Caught tx_queue_len zero misconfig [ 202.604892][ T9730] tipc: Enabled bearer , priority 0 [ 202.613624][ T9730] syzkaller0: entered promiscuous mode [ 202.619621][ T9730] syzkaller0: entered allmulticast mode [ 202.672443][ T9730] tipc: Resetting bearer [ 202.767696][ T9728] tipc: Resetting bearer [ 202.853642][ T9728] tipc: Disabling bearer [ 202.998003][ T9743] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 203.008540][ T9743] geneve1: entered promiscuous mode [ 203.065565][ T9746] netlink: 'syz.1.893': attribute type 1 has an invalid length. [ 203.082594][ T9746] netlink: 'syz.1.893': attribute type 1 has an invalid length. [ 203.187603][ T9750] __nla_validate_parse: 7 callbacks suppressed [ 203.187623][ T9750] netlink: 88 bytes leftover after parsing attributes in process `syz.1.893'. [ 203.203772][ T9746] bond14: entered promiscuous mode [ 203.209556][ T9746] 8021q: adding VLAN 0 to HW filter on device bond14 [ 203.283480][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 203.479549][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 204.051268][ T9786] IPVS: set_ctl: invalid protocol: 188 255.255.255.255:20002 [ 204.059000][ T9785] IPVS: set_ctl: invalid protocol: 188 255.255.255.255:20002 [ 204.128797][ T9788] lo speed is unknown, defaulting to 1000 [ 204.189636][ T9788] wg1 speed is unknown, defaulting to 1000 [ 204.749740][ T9803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.907'. [ 204.790066][ T9806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.910'. [ 204.837885][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.910'. [ 205.857578][ T9842] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 205.871921][ T9843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.917'. [ 206.197097][ T9854] gre1: entered allmulticast mode [ 206.390571][ T9866] netlink: 28 bytes leftover after parsing attributes in process `syz.3.924'. [ 206.484984][ T9872] raw_sendmsg: syz.2.925 forgot to set AF_INET. Fix it! [ 207.324722][ T9884] FAULT_INJECTION: forcing a failure. [ 207.324722][ T9884] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 207.361691][ T9884] CPU: 1 UID: 0 PID: 9884 Comm: syz.3.929 Not tainted syzkaller #0 PREEMPT(full) [ 207.361723][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.361744][ T9884] Call Trace: [ 207.361753][ T9884] [ 207.361763][ T9884] dump_stack_lvl+0x189/0x250 [ 207.361792][ T9884] ? __pfx____ratelimit+0x10/0x10 [ 207.361818][ T9884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.361841][ T9884] ? __pfx__printk+0x10/0x10 [ 207.361879][ T9884] should_fail_ex+0x414/0x560 [ 207.361911][ T9884] _copy_to_user+0x31/0xb0 [ 207.361935][ T9884] bpf_test_finish+0x1ab/0x700 [ 207.361969][ T9884] ? __pfx_bpf_test_finish+0x10/0x10 [ 207.361999][ T9884] ? bpf_test_init+0x113/0x150 [ 207.362023][ T9884] bpf_prog_test_run_xdp+0x893/0x10e0 [ 207.362064][ T9884] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 207.362094][ T9884] ? __fget_files+0x2a/0x420 [ 207.362120][ T9884] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 207.362144][ T9884] bpf_prog_test_run+0x2c7/0x340 [ 207.362171][ T9884] __sys_bpf+0x562/0x860 [ 207.362194][ T9884] ? __pfx___sys_bpf+0x10/0x10 [ 207.362234][ T9884] ? ksys_write+0x22a/0x250 [ 207.362268][ T9884] ? __pfx_ksys_write+0x10/0x10 [ 207.362304][ T9884] __x64_sys_bpf+0x7c/0x90 [ 207.362337][ T9884] do_syscall_64+0xfa/0xfa0 [ 207.362362][ T9884] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.362388][ T9884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.362409][ T9884] ? clear_bhb_loop+0x60/0xb0 [ 207.362436][ T9884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.362464][ T9884] RIP: 0033:0x7f9e29b8eec9 [ 207.362492][ T9884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.362515][ T9884] RSP: 002b:00007f9e2a9eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.362545][ T9884] RAX: ffffffffffffffda RBX: 00007f9e29de5fa0 RCX: 00007f9e29b8eec9 [ 207.362561][ T9884] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 207.362575][ T9884] RBP: 00007f9e2a9eb090 R08: 0000000000000000 R09: 0000000000000000 [ 207.362588][ T9884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.362601][ T9884] R13: 00007f9e29de6038 R14: 00007f9e29de5fa0 R15: 00007fffd5141b98 [ 207.362637][ T9884] [ 207.981726][ T9895] lo speed is unknown, defaulting to 1000 [ 208.015641][ T9895] wg1 speed is unknown, defaulting to 1000 [ 208.017550][ T9898] tipc: Enabled bearer , priority 0 [ 208.080374][ T9898] syzkaller0: entered promiscuous mode [ 208.093404][ T9898] syzkaller0: entered allmulticast mode [ 208.173476][ T9898] tipc: Resetting bearer [ 208.259232][ T9897] tipc: Resetting bearer [ 208.325927][ T9897] tipc: Disabling bearer [ 208.487724][ T9916] lo speed is unknown, defaulting to 1000 [ 208.499995][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 208.606526][ T9916] wg1 speed is unknown, defaulting to 1000 [ 208.630368][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 208.633077][ T9925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.939'. [ 208.672204][ T9925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.939'. [ 208.813349][ T9931] netlink: 'syz.2.939': attribute type 2 has an invalid length. [ 208.866032][ T9931] netlink: 'syz.2.939': attribute type 1 has an invalid length. [ 208.888598][ T9931] netlink: 224 bytes leftover after parsing attributes in process `syz.2.939'. [ 208.889996][ T9939] FAULT_INJECTION: forcing a failure. [ 208.889996][ T9939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.932347][ T9939] CPU: 1 UID: 0 PID: 9939 Comm: syz.1.944 Not tainted syzkaller #0 PREEMPT(full) [ 208.932376][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.932389][ T9939] Call Trace: [ 208.932398][ T9939] [ 208.932407][ T9939] dump_stack_lvl+0x189/0x250 [ 208.932434][ T9939] ? __pfx____ratelimit+0x10/0x10 [ 208.932460][ T9939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.932483][ T9939] ? __pfx__printk+0x10/0x10 [ 208.932521][ T9939] should_fail_ex+0x414/0x560 [ 208.932553][ T9939] _copy_to_user+0x31/0xb0 [ 208.932577][ T9939] bpf_test_finish+0x24e/0x700 [ 208.932610][ T9939] ? __pfx_bpf_test_finish+0x10/0x10 [ 208.932639][ T9939] ? bpf_test_init+0x113/0x150 [ 208.932664][ T9939] bpf_prog_test_run_xdp+0x893/0x10e0 [ 208.932706][ T9939] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 208.932734][ T9939] ? __fget_files+0x2a/0x420 [ 208.932760][ T9939] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 208.932789][ T9939] bpf_prog_test_run+0x2c7/0x340 [ 208.932816][ T9939] __sys_bpf+0x562/0x860 [ 208.932839][ T9939] ? __pfx___sys_bpf+0x10/0x10 [ 208.932878][ T9939] ? ksys_write+0x22a/0x250 [ 208.932911][ T9939] ? __pfx_ksys_write+0x10/0x10 [ 208.932948][ T9939] __x64_sys_bpf+0x7c/0x90 [ 208.932980][ T9939] do_syscall_64+0xfa/0xfa0 [ 208.933005][ T9939] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.933031][ T9939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.933052][ T9939] ? clear_bhb_loop+0x60/0xb0 [ 208.933088][ T9939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.933109][ T9939] RIP: 0033:0x7ff17718eec9 [ 208.933128][ T9939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.933146][ T9939] RSP: 002b:00007ff177f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.933169][ T9939] RAX: ffffffffffffffda RBX: 00007ff1773e5fa0 RCX: 00007ff17718eec9 [ 208.933184][ T9939] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 208.933198][ T9939] RBP: 00007ff177f7e090 R08: 0000000000000000 R09: 0000000000000000 [ 208.933210][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.933221][ T9939] R13: 00007ff1773e6038 R14: 00007ff1773e5fa0 R15: 00007ffd58808ae8 [ 208.933256][ T9939] [ 209.189864][ T9943] netlink: 'syz.0.942': attribute type 32 has an invalid length. [ 209.342203][ T9934] lo speed is unknown, defaulting to 1000 [ 209.353446][ T9934] wg1 speed is unknown, defaulting to 1000 [ 209.407206][ T9953] x_tables: duplicate underflow at hook 3 [ 209.550200][ T9956] netlink: 36 bytes leftover after parsing attributes in process `syz.1.947'. [ 209.589487][ T9958] vlan0: entered allmulticast mode [ 209.602827][ T9958] bridge_slave_0: entered allmulticast mode [ 209.719357][ T9962] netlink: 44 bytes leftover after parsing attributes in process `syz.0.949'. [ 209.828780][ T9970] netlink: 'syz.2.951': attribute type 32 has an invalid length. [ 209.847787][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 210.000624][ T9970] bond5: option coupled_control: invalid value (12) [ 210.012443][ T9970] bond5 (unregistering): Released all slaves [ 210.197599][ T9987] FAULT_INJECTION: forcing a failure. [ 210.197599][ T9987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.217196][ T9987] CPU: 1 UID: 0 PID: 9987 Comm: syz.0.957 Not tainted syzkaller #0 PREEMPT(full) [ 210.217235][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.217249][ T9987] Call Trace: [ 210.217258][ T9987] [ 210.217268][ T9987] dump_stack_lvl+0x189/0x250 [ 210.217297][ T9987] ? __pfx____ratelimit+0x10/0x10 [ 210.217338][ T9987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.217361][ T9987] ? __pfx__printk+0x10/0x10 [ 210.217398][ T9987] should_fail_ex+0x414/0x560 [ 210.217429][ T9987] _copy_to_user+0x31/0xb0 [ 210.217453][ T9987] bpf_test_finish+0x56f/0x700 [ 210.217485][ T9987] ? __pfx_bpf_test_finish+0x10/0x10 [ 210.217512][ T9987] ? bpf_test_init+0x113/0x150 [ 210.217535][ T9987] bpf_prog_test_run_xdp+0x893/0x10e0 [ 210.217575][ T9987] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 210.217602][ T9987] ? __fget_files+0x2a/0x420 [ 210.217628][ T9987] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 210.217650][ T9987] bpf_prog_test_run+0x2c7/0x340 [ 210.217676][ T9987] __sys_bpf+0x562/0x860 [ 210.217699][ T9987] ? __pfx___sys_bpf+0x10/0x10 [ 210.217735][ T9987] ? ksys_write+0x22a/0x250 [ 210.217764][ T9987] ? __pfx_ksys_write+0x10/0x10 [ 210.217798][ T9987] __x64_sys_bpf+0x7c/0x90 [ 210.217830][ T9987] do_syscall_64+0xfa/0xfa0 [ 210.217856][ T9987] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.217880][ T9987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.217901][ T9987] ? clear_bhb_loop+0x60/0xb0 [ 210.217927][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.217947][ T9987] RIP: 0033:0x7fcccff8eec9 [ 210.217967][ T9987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.217985][ T9987] RSP: 002b:00007fccd0e2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.218008][ T9987] RAX: ffffffffffffffda RBX: 00007fccd01e5fa0 RCX: 00007fcccff8eec9 [ 210.218023][ T9987] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 210.218036][ T9987] RBP: 00007fccd0e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 210.218050][ T9987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.218062][ T9987] R13: 00007fccd01e6038 R14: 00007fccd01e5fa0 R15: 00007ffd8ca7c618 [ 210.218097][ T9987] [ 210.530855][ T9989] netlink: 128 bytes leftover after parsing attributes in process `syz.2.958'. [ 210.546773][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 210.580963][ T9991] netlink: 'syz.0.960': attribute type 6 has an invalid length. [ 210.617306][ T9993] syzkaller0: entered promiscuous mode [ 210.639122][ T9993] syzkaller0: entered allmulticast mode [ 210.868018][ T9999] lo speed is unknown, defaulting to 1000 [ 210.878456][T10005] lo speed is unknown, defaulting to 1000 [ 210.908922][ T9999] wg1 speed is unknown, defaulting to 1000 [ 211.002883][T10005] wg1 speed is unknown, defaulting to 1000 [ 211.113368][T10021] siw: device registration error -23 [ 211.423484][T10037] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.465311][T10039] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.479884][T10042] sctp: [Deprecated]: syz.1.973 (pid 10042) Use of int in max_burst socket option deprecated. [ 211.479884][T10042] Use struct sctp_assoc_value instead [ 211.502339][T10039] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.730464][T10046] bridge2: entered allmulticast mode [ 211.766602][T10044] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 211.804644][T10052] nbd9: detected capacity change from 0 to 127 [ 212.132540][T10058] lo speed is unknown, defaulting to 1000 [ 212.162738][T10058] wg1 speed is unknown, defaulting to 1000 [ 212.464684][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 212.569558][ T52] block nbd9: Receive control failed (result -32) [ 213.071951][T10092] Cannot find del_set index 2 as target [ 213.227188][T10104] xt_NFQUEUE: number of total queues is 0 [ 213.446524][T10111] lo speed is unknown, defaulting to 1000 [ 213.468937][T10111] wg1 speed is unknown, defaulting to 1000 [ 213.734513][T10127] nbd10: detected capacity change from 0 to 127 [ 213.764953][T10137] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 213.803290][T10137] __nla_validate_parse: 7 callbacks suppressed [ 213.803312][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 213.846515][T10133] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 213.916377][T10137] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1002'. [ 213.962684][T10133] bond5: entered promiscuous mode [ 213.993000][T10133] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.011766][T10142] netlink: 'syz.0.1003': attribute type 10 has an invalid length. [ 214.027669][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 214.084705][T10133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1002'. [ 214.099343][T10141] bridge_slave_0: left allmulticast mode [ 214.111387][T10141] bridge_slave_0: left promiscuous mode [ 214.126264][T10141] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.143442][T10141] bridge_slave_1: left allmulticast mode [ 214.154535][T10141] bridge_slave_1: left promiscuous mode [ 214.178876][ T52] block nbd10: Receive control failed (result -32) [ 214.191967][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.215507][T10141] bond0: (slave bond_slave_0): Releasing backup interface [ 214.232510][T10141] bond0: (slave bond_slave_1): Releasing backup interface [ 214.252274][T10141] team0: Port device team_slave_0 removed [ 214.269338][T10141] team0: Port device 52Àÿ removed [ 214.277994][T10141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.290005][T10141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.318464][T10141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.345194][T10141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.376937][T10141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 214.450651][T10142] bond0: (slave wlan1): Opening slave failed [ 214.528748][T10154] netlink: 'syz.3.1005': attribute type 1 has an invalid length. [ 214.567711][T10164] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 214.650552][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 214.659856][T10167] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1006'. [ 214.669263][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 214.803918][T10181] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 214.874226][T10181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1012'. [ 215.135414][T10192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1015'. [ 215.150186][T10192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1015'. [ 215.212714][T10198] bond6: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 215.228262][T10198] bond6 (unregistering): Released all slaves [ 215.675373][T10214] tipc: Enabled bearer , priority 0 [ 215.759173][T10214] syzkaller0: entered promiscuous mode [ 215.764944][T10214] syzkaller0: entered allmulticast mode [ 215.771398][T10214] tipc: Resetting bearer [ 215.806331][T10211] tipc: Resetting bearer [ 215.859218][T10222] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 216.331948][T10237] netlink: 'syz.0.1027': attribute type 13 has an invalid length. [ 216.784772][ T24] tipc: Node number set to 2886997039 [ 217.313561][T10211] tipc: Disabling bearer [ 217.596008][T10236] lo speed is unknown, defaulting to 1000 [ 217.603608][T10236] wg1 speed is unknown, defaulting to 1000 [ 217.769909][T10246] lo speed is unknown, defaulting to 1000 [ 217.829070][T10246] wg1 speed is unknown, defaulting to 1000 [ 218.060415][T10261] tipc: Failed to remove unknown binding: 66,1,1/4227858433:3501493519/3501493521 [ 218.072878][T10261] tipc: Failed to remove unknown binding: 66,1,1/4227858433:3501493519/3501493521 [ 218.521665][T10276] netlink: 'syz.0.1039': attribute type 1 has an invalid length. [ 218.553001][T10276] netlink: 'syz.0.1039': attribute type 1 has an invalid length. [ 218.631533][T10276] bond8: entered promiscuous mode [ 218.655993][T10276] 8021q: adding VLAN 0 to HW filter on device bond8 [ 218.868591][T10286] __nla_validate_parse: 18 callbacks suppressed [ 218.868614][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1043'. [ 219.060907][T10290] Cannot find add_set index 65532 as target [ 219.151132][T10294] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1046'. [ 219.297342][T10303] netlink: 'syz.0.1047': attribute type 13 has an invalid length. [ 219.314484][T10303] netlink: 'syz.0.1047': attribute type 17 has an invalid length. [ 219.420637][T10308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1049'. [ 219.455422][T10303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.669376][T10298] lo speed is unknown, defaulting to 1000 [ 219.710049][T10303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.730938][T10318] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 219.740986][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'. [ 219.757508][T10318] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 219.766715][T10298] wg1 speed is unknown, defaulting to 1000 [ 219.805817][T10303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.818390][T10322] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1053'. [ 219.874966][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 219.897086][T10318] bond6: entered promiscuous mode [ 219.903050][T10318] 8021q: adding VLAN 0 to HW filter on device bond6 [ 220.005610][T10319] lo speed is unknown, defaulting to 1000 [ 220.020949][T10319] wg1 speed is unknown, defaulting to 1000 [ 220.030201][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'. [ 220.143739][T10332] geneve0: entered promiscuous mode [ 220.175898][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'. [ 220.186113][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1055'. [ 220.204664][T10332] macsec1: entered promiscuous mode [ 220.214816][T10332] team0: entered promiscuous mode [ 220.219923][T10332] team_slave_0: entered promiscuous mode [ 220.227381][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'. [ 220.241168][T10332] team_slave_1: entered promiscuous mode [ 220.247821][T10332] macsec1: entered allmulticast mode [ 220.253358][T10332] team0: entered allmulticast mode [ 220.259533][T10332] team_slave_0: entered allmulticast mode [ 220.266483][T10332] team_slave_1: entered allmulticast mode [ 220.272484][T10332] geneve0: entered allmulticast mode [ 220.307320][T10332] team0: Device macsec1 is already an upper device of the team interface [ 220.329495][T10332] team0: left allmulticast mode [ 220.336834][T10332] team_slave_0: left allmulticast mode [ 220.347418][T10332] team_slave_1: left allmulticast mode [ 220.363549][T10332] geneve0: left allmulticast mode [ 220.368878][T10332] team0: left promiscuous mode [ 220.378992][T10332] team_slave_0: left promiscuous mode [ 220.389404][T10332] team_slave_1: left promiscuous mode [ 220.405869][T10332] geneve0: left promiscuous mode [ 221.159363][T10375] netlink: 'syz.4.1067': attribute type 1 has an invalid length. [ 221.177320][T10375] netlink: 'syz.4.1067': attribute type 1 has an invalid length. [ 221.224060][T10375] bond6: entered promiscuous mode [ 221.232771][T10375] 8021q: adding VLAN 0 to HW filter on device bond6 [ 221.855910][ T6370] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.864011][ T6370] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.892370][ T6666] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.960742][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.548593][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.925016][T10456] netlink: 'syz.0.1087': attribute type 3 has an invalid length. [ 223.032536][T10461] lo speed is unknown, defaulting to 1000 [ 223.076973][T10461] wg1 speed is unknown, defaulting to 1000 [ 223.358153][T10467] syzkaller0: entered promiscuous mode [ 223.363698][T10467] syzkaller0: entered allmulticast mode [ 223.497663][T10481] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 223.881207][T10490] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 223.901675][T10490] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 223.964188][T10502] !: renamed from dummy0 (while UP) [ 223.997765][T10502] __nla_validate_parse: 13 callbacks suppressed [ 223.997786][T10502] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1099'. [ 224.071486][T10508] netlink: 'syz.4.1101': attribute type 1 has an invalid length. [ 224.079660][T10503] tipc: Enabled bearer , priority 0 [ 224.080505][T10503] syzkaller0: entered promiscuous mode [ 224.080528][T10503] syzkaller0: entered allmulticast mode [ 224.137513][T10503] tipc: Resetting bearer [ 224.148698][T10514] 8021q: VLANs not supported on nlmon0 [ 224.194644][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 224.227126][T10508] netlink: 'syz.4.1101': attribute type 1 has an invalid length. [ 224.242979][T10513] lo speed is unknown, defaulting to 1000 [ 224.249100][T10500] tipc: Resetting bearer [ 224.277623][T10500] tipc: Disabling bearer [ 224.278898][T10519] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1101'. [ 224.300717][T10513] wg1 speed is unknown, defaulting to 1000 [ 224.359756][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 224.441844][T10524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1101'. [ 224.489547][T10508] bond7: entered promiscuous mode [ 224.522838][T10508] 8021q: adding VLAN 0 to HW filter on device bond7 [ 224.810927][T10538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.865025][T10538] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.912109][T10538] dummy0: left promiscuous mode [ 224.974565][T10538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.059821][T10545] syzkaller1: entered promiscuous mode [ 225.076802][T10545] syzkaller1: entered allmulticast mode [ 225.271449][T10563] netlink: 'syz.3.1109': attribute type 12 has an invalid length. [ 225.425942][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 225.669734][T10587] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1112'. [ 225.964774][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'. [ 226.060814][T10598] xt_connbytes: Forcing CT accounting to be enabled [ 226.067855][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.727175][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 226.757361][T10634] ipvlan0: entered promiscuous mode [ 226.801826][T10634] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 227.158377][T10648] lo speed is unknown, defaulting to 1000 [ 227.200335][T10648] wg1 speed is unknown, defaulting to 1000 [ 227.270134][T10643] hsr0: entered allmulticast mode [ 227.280314][T10643] hsr_slave_0: entered allmulticast mode [ 227.287955][T10643] hsr_slave_1: entered allmulticast mode [ 227.763895][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 227.913501][T10672] trusted_key: syz.4.1138 sent an empty control message without MSG_MORE. [ 228.400409][T10688] netlink: 'syz.1.1144': attribute type 3 has an invalid length. [ 229.180837][T10724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'. [ 229.501500][T10734] netlink: 'syz.0.1161': attribute type 4 has an invalid length. [ 229.554982][T10738] pim6reg1: entered promiscuous mode [ 229.560385][T10738] pim6reg1: entered allmulticast mode [ 229.619052][T10741] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1160'. [ 229.660038][T10736] lo speed is unknown, defaulting to 1000 [ 229.671608][T10736] wg1 speed is unknown, defaulting to 1000 [ 229.708378][T10747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1164'. [ 229.778666][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1164'. [ 229.923298][T10758] lo speed is unknown, defaulting to 1000 [ 229.935114][T10758] wg1 speed is unknown, defaulting to 1000 [ 229.944271][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'. [ 230.119923][T10763] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1168'. [ 230.212926][T10765] tipc: Enabling of bearer rejected, failed to enable media [ 230.831256][T10803] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1178'. [ 231.097210][T10809] lo speed is unknown, defaulting to 1000 [ 231.126642][T10809] wg1 speed is unknown, defaulting to 1000 [ 231.146630][T10818] netlink: 'syz.3.1182': attribute type 1 has an invalid length. [ 231.157446][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'. [ 231.184021][T10818] netlink: 'syz.3.1182': attribute type 1 has an invalid length. [ 231.238213][T10824] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1182'. [ 231.271503][T10818] bond6: entered promiscuous mode [ 231.278814][T10818] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.371497][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'. [ 231.587757][T10830] macvtap1: entered allmulticast mode [ 231.593306][T10830] bridge0: entered allmulticast mode [ 231.627653][T10830] bridge0: port 1(macvtap1) entered blocking state [ 231.647284][T10830] bridge0: port 1(macvtap1) entered disabled state [ 231.660778][T10837] netlink: 'syz.2.1188': attribute type 1 has an invalid length. [ 231.702154][T10837] netlink: 'syz.2.1188': attribute type 1 has an invalid length. [ 231.761853][T10830] bridge0: left allmulticast mode [ 231.905432][T10837] bond7: entered promiscuous mode [ 231.910952][T10837] 8021q: adding VLAN 0 to HW filter on device bond7 [ 232.096965][T10839] lo speed is unknown, defaulting to 1000 [ 232.158125][T10839] wg1 speed is unknown, defaulting to 1000 [ 232.821946][T10886] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 232.940197][T10880] xt_hashlimit: max too large, truncated to 1048576 [ 233.122620][T10900] netlink: 'syz.4.1199': attribute type 1 has an invalid length. [ 233.157594][T10900] netlink: 'syz.4.1199': attribute type 1 has an invalid length. [ 233.221337][T10900] bond9: entered promiscuous mode [ 233.239895][T10900] 8021q: adding VLAN 0 to HW filter on device bond9 [ 233.498003][T10922] netlink: 'syz.2.1205': attribute type 7 has an invalid length. [ 233.863592][T10937] lo speed is unknown, defaulting to 1000 [ 234.039147][T10937] wg1 speed is unknown, defaulting to 1000 [ 234.191957][T10955] __nla_validate_parse: 11 callbacks suppressed [ 234.191977][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1218'. [ 234.309416][T10957] netlink: 8560 bytes leftover after parsing attributes in process `syz.3.1220'. [ 234.346254][T10957] netlink: 'syz.3.1220': attribute type 10 has an invalid length. [ 234.376118][T10957] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 234.440506][T10961] vlan1: entered promiscuous mode [ 234.455520][T10961] bond0: entered promiscuous mode [ 234.458158][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'. [ 234.474050][T10961] bond_slave_0: entered promiscuous mode [ 234.496036][T10961] bond_slave_1: entered promiscuous mode [ 234.503174][T10961] dummy0: entered promiscuous mode [ 234.582182][T10971] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 234.868862][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.965775][T10984] lo speed is unknown, defaulting to 1000 [ 234.973402][T10984] wg1 speed is unknown, defaulting to 1000 [ 235.237193][T11005] netlink: 'syz.3.1231': attribute type 10 has an invalid length. [ 235.271534][T11005] bond0: (slave dummy0): Releasing backup interface [ 235.300558][T11005] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 235.321149][T11005] team0: Failed to send options change via netlink (err -105) [ 235.348876][T11005] team0: Port device dummy0 added [ 235.488137][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 235.657696][T11027] netlink: zone id is out of range [ 235.674476][T11027] netlink: zone id is out of range [ 235.684508][T11027] netlink: zone id is out of range [ 235.689678][T11027] netlink: zone id is out of range [ 235.716131][T11027] netlink: zone id is out of range [ 235.726583][T11027] netlink: zone id is out of range [ 235.762183][T11027] netlink: zone id is out of range [ 235.778257][T11027] netlink: zone id is out of range [ 235.792459][T11027] netlink: zone id is out of range [ 235.802523][T11027] netlink: zone id is out of range [ 235.933991][T11044] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1241'. [ 236.283018][T11058] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.517275][T11065] netlink: 'syz.4.1246': attribute type 3 has an invalid length. [ 236.558787][T11065] IPVS: stopping backup sync thread 7689 ... [ 236.599816][T11068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1248'. [ 236.629328][ T52] Bluetooth: hci0: command tx timeout [ 236.636222][T11075] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1246'. [ 236.730330][T11077] tipc: Enabled bearer , priority 0 [ 236.739610][T11077] syzkaller0: entered promiscuous mode [ 236.748270][T11077] syzkaller0: entered allmulticast mode [ 236.807507][T11076] tipc: Resetting bearer [ 236.854006][T11076] tipc: Disabling bearer [ 236.971129][T11083] sctp: [Deprecated]: syz.2.1252 (pid 11083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.971129][T11083] Use struct sctp_sack_info instead [ 237.134095][T11098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1257'. [ 237.296682][T11107] netlink: 'syz.1.1259': attribute type 6 has an invalid length. [ 237.714726][T11128] netlink: 'syz.0.1264': attribute type 10 has an invalid length. [ 237.722611][T11128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1264'. [ 237.736211][T11128] !: entered promiscuous mode [ 237.741439][T11128] bridge0: port 1(0!) entered blocking state [ 237.749749][T11128] bridge0: port 1(0!) entered disabled state [ 237.783588][T11128] !: entered allmulticast mode [ 237.810372][T11128] bridge0: port 1(0!) entered blocking state [ 237.816755][T11128] bridge0: port 1(0!) entered forwarding state [ 237.860149][T11134] [ 237.862548][T11134] ====================================================== [ 237.869585][T11134] WARNING: possible circular locking dependency detected [ 237.876632][T11134] syzkaller #0 Not tainted [ 237.881062][T11134] ------------------------------------------------------ [ 237.888081][T11134] syz.2.1266/11134 is trying to acquire lock: [ 237.894146][T11134] ffff88806d2bb218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 237.906350][T11134] [ 237.906350][T11134] but task is already holding lock: [ 237.913832][T11134] ffff8880263c3158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 237.923715][T11134] [ 237.923715][T11134] which lock already depends on the new lock. [ 237.923715][T11134] [ 237.934134][T11134] [ 237.934134][T11134] the existing dependency chain (in reverse order) is: [ 237.943203][T11134] [ 237.943203][T11134] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 237.951509][T11134] lock_acquire+0x120/0x360 [ 237.956541][T11134] _raw_spin_lock+0x2e/0x40 [ 237.961569][T11134] sch_direct_xmit+0x153/0x4b0 [ 237.966864][T11134] __dev_queue_xmit+0x1857/0x3b50 [ 237.972425][T11134] ip6_finish_output2+0xfb0/0x1480 [ 237.978166][T11134] ip6_output+0x340/0x550 [ 237.983022][T11134] NF_HOOK+0x9e/0x380 [ 237.987537][T11134] mld_sendpack+0x8d4/0xe60 [ 237.992569][T11134] mld_ifc_work+0x83e/0xd60 [ 237.997603][T11134] process_scheduled_works+0xae1/0x17b0 [ 238.003674][T11134] worker_thread+0x8a0/0xda0 [ 238.008792][T11134] kthread+0x711/0x8a0 [ 238.013413][T11134] ret_from_fork+0x4bc/0x870 [ 238.018539][T11134] ret_from_fork_asm+0x1a/0x30 [ 238.023847][T11134] [ 238.023847][T11134] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}: [ 238.034235][T11134] validate_chain+0xb9b/0x2140 [ 238.039545][T11134] __lock_acquire+0xab9/0xd20 [ 238.044757][T11134] lock_acquire+0x120/0x360 [ 238.049787][T11134] _raw_spin_lock+0x2e/0x40 [ 238.054836][T11134] __dev_queue_xmit+0x22b7/0x3b50 [ 238.060389][T11134] ip6_finish_output2+0xfb0/0x1480 [ 238.066036][T11134] ip6_output+0x340/0x550 [ 238.070892][T11134] ip6_send_skb+0x1d5/0x390 [ 238.075928][T11134] icmp6_send+0x12c6/0x1940 [ 238.080952][T11134] ip6_link_failure+0x3b/0x4c0 [ 238.086237][T11134] ip_tunnel_xmit+0x175b/0x2390 [ 238.091612][T11134] __gre_xmit+0x19a/0x240 [ 238.096474][T11134] erspan_xmit+0xa04/0x1220 [ 238.101601][T11134] dev_hard_start_xmit+0x2d4/0x830 [ 238.107249][T11134] sch_direct_xmit+0x241/0x4b0 [ 238.112541][T11134] __qdisc_run+0xb16/0x15f0 [ 238.117575][T11134] __dev_queue_xmit+0x1056/0x3b50 [ 238.123220][T11134] ip6_finish_output2+0xfb0/0x1480 [ 238.128859][T11134] ip6_output+0x340/0x550 [ 238.133717][T11134] ip6_xmit+0x11b5/0x1970 [ 238.138588][T11134] inet6_csk_xmit+0x4db/0x780 [ 238.143789][T11134] __tcp_transmit_skb+0x2092/0x3aa0 [ 238.149519][T11134] tcp_connect+0x1f6e/0x5060 [ 238.154644][T11134] tcp_v6_connect+0x11f7/0x1870 [ 238.160021][T11134] mptcp_connect+0x56b/0x830 [ 238.165135][T11134] __inet_stream_connect+0x2ae/0xe70 [ 238.171033][T11134] inet_stream_connect+0x66/0xa0 [ 238.176523][T11134] __sys_connect+0x313/0x440 [ 238.181639][T11134] __x64_sys_connect+0x7a/0x90 [ 238.186950][T11134] do_syscall_64+0xfa/0xfa0 [ 238.191984][T11134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.198426][T11134] [ 238.198426][T11134] other info that might help us debug this: [ 238.198426][T11134] [ 238.208663][T11134] Possible unsafe locking scenario: [ 238.208663][T11134] [ 238.216249][T11134] CPU0 CPU1 [ 238.221639][T11134] ---- ---- [ 238.227099][T11134] lock(&qdisc_xmit_lock_key#4); [ 238.232173][T11134] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 238.241820][T11134] lock(&qdisc_xmit_lock_key#4); [ 238.249488][T11134] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 238.256612][T11134] [ 238.256612][T11134] *** DEADLOCK *** [ 238.256612][T11134] [ 238.264753][T11134] 12 locks held by syz.2.1266/11134: [ 238.270038][T11134] #0: ffff888079a972d8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 238.280001][T11134] #1: ffff88807be0c5d8 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_connect+0x4c3/0x830 [ 238.289793][T11134] #2: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0x1d4/0x780 [ 238.299199][T11134] #3: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x291/0x1970 [ 238.308177][T11134] #4: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 238.317244][T11134] #5: ffffffff8e13d380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 238.327178][T11134] #6: ffff8880263c3158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 238.337469][T11134] #7: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940 [ 238.346615][T11134] #8: ffff88802f3c0a18 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xc5c/0x1940 [ 238.356108][T11134] #9: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 238.365350][T11134] #10: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 238.374522][T11134] #11: ffffffff8e13d380 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 238.384588][T11134] [ 238.384588][T11134] stack backtrace: [ 238.390483][T11134] CPU: 1 UID: 0 PID: 11134 Comm: syz.2.1266 Not tainted syzkaller #0 PREEMPT(full) [ 238.390505][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 238.390516][T11134] Call Trace: [ 238.390523][T11134] [ 238.390530][T11134] dump_stack_lvl+0x189/0x250 [ 238.390552][T11134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.390569][T11134] ? __pfx__printk+0x10/0x10 [ 238.390588][T11134] ? print_lock_name+0xde/0x100 [ 238.390605][T11134] print_circular_bug+0x2ee/0x310 [ 238.390628][T11134] check_noncircular+0x134/0x160 [ 238.390652][T11134] validate_chain+0xb9b/0x2140 [ 238.390682][T11134] __lock_acquire+0xab9/0xd20 [ 238.390700][T11134] ? __dev_queue_xmit+0x22b7/0x3b50 [ 238.390726][T11134] lock_acquire+0x120/0x360 [ 238.390742][T11134] ? __dev_queue_xmit+0x22b7/0x3b50 [ 238.390765][T11134] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 238.390787][T11134] ? check_noncircular+0xe0/0x160 [ 238.390808][T11134] _raw_spin_lock+0x2e/0x40 [ 238.390826][T11134] ? __dev_queue_xmit+0x22b7/0x3b50 [ 238.390847][T11134] __dev_queue_xmit+0x22b7/0x3b50 [ 238.390873][T11134] ? __dev_queue_xmit+0x27b/0x3b50 [ 238.390898][T11134] ? neigh_resolve_output+0x438/0x750 [ 238.390926][T11134] ? __pfx___dev_queue_xmit+0x10/0x10 [ 238.390947][T11134] ? read_seqbegin+0x122/0x250 [ 238.390972][T11134] ? neigh_resolve_output+0x438/0x750 [ 238.390997][T11134] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.391019][T11134] ? read_seqbegin+0x1ac/0x250 [ 238.391044][T11134] ? __pfx_read_seqbegin+0x10/0x10 [ 238.391068][T11134] ? __local_bh_enable_ip+0x12d/0x1c0 [ 238.391086][T11134] ? eth_header+0x11b/0x200 [ 238.391105][T11134] ? __asan_memcpy+0x40/0x70 [ 238.391138][T11134] ip6_finish_output2+0xfb0/0x1480 [ 238.391167][T11134] ? __pfx_ip6_finish_output2+0x10/0x10 [ 238.391192][T11134] ? ip6_mtu+0x7d/0x490 [ 238.391212][T11134] ? ip6_mtu+0x38c/0x490 [ 238.391231][T11134] ? ip6_finish_output+0x2ef/0x4e0 [ 238.391252][T11134] ? ip6_output+0x126/0x550 [ 238.391271][T11134] ip6_output+0x340/0x550 [ 238.391291][T11134] ? ip6_send_skb+0x10f/0x390 [ 238.391314][T11134] ip6_send_skb+0x1d5/0x390 [ 238.391338][T11134] icmp6_send+0x12c6/0x1940 [ 238.391353][T11134] ? icmp6_send+0x1e9/0x1940 [ 238.391376][T11134] ? __pfx_icmp6_send+0x10/0x10 [ 238.391391][T11134] ? __lock_acquire+0xab9/0xd20 [ 238.391415][T11134] ? ip6_neigh_lookup+0x14e/0x470 [ 238.391432][T11134] ? ip6_neigh_lookup+0x14e/0x470 [ 238.391447][T11134] ? ip6_neigh_lookup+0x397/0x470 [ 238.391464][T11134] ? ip6_neigh_lookup+0x14e/0x470 [ 238.391480][T11134] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 238.391498][T11134] ip6_link_failure+0x3b/0x4c0 [ 238.391517][T11134] ip_tunnel_xmit+0x175b/0x2390 [ 238.391534][T11134] ? is_bpf_text_address+0x26/0x2b0 [ 238.391552][T11134] ? ip_tunnel_xmit+0xc0/0x2390 [ 238.391568][T11134] ? __kernel_text_address+0xd/0x40 [ 238.391596][T11134] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 238.391621][T11134] ? gre_build_header+0x31c/0xa40 [ 238.391649][T11134] ? __pfx_gre_build_header+0x10/0x10 [ 238.391674][T11134] ? check_path+0x21/0x40 [ 238.391694][T11134] __gre_xmit+0x19a/0x240 [ 238.391724][T11134] ? __pfx___gre_xmit+0x10/0x10 [ 238.391747][T11134] ? __asan_memset+0x22/0x50 [ 238.391768][T11134] ? erspan_build_header+0x19c/0x370 [ 238.391796][T11134] erspan_xmit+0xa04/0x1220 [ 238.391826][T11134] ? __pfx_erspan_xmit+0x10/0x10 [ 238.391850][T11134] ? __lock_acquire+0xab9/0xd20 [ 238.391869][T11134] dev_hard_start_xmit+0x2d4/0x830 [ 238.391897][T11134] sch_direct_xmit+0x241/0x4b0 [ 238.391925][T11134] ? __pfx_sch_direct_xmit+0x10/0x10 [ 238.391950][T11134] ? __lock_acquire+0xab9/0xd20 [ 238.391968][T11134] __qdisc_run+0xb16/0x15f0 [ 238.391993][T11134] ? __dev_queue_xmit+0xcd1/0x3b50 [ 238.392021][T11134] __dev_queue_xmit+0x1056/0x3b50 [ 238.392047][T11134] ? __dev_queue_xmit+0x27b/0x3b50 [ 238.392074][T11134] ? __pfx___dev_queue_xmit+0x10/0x10 [ 238.392096][T11134] ? read_seqbegin+0x122/0x250 [ 238.392120][T11134] ? neigh_resolve_output+0x438/0x750 [ 238.392146][T11134] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.392166][T11134] ? read_seqbegin+0x1ac/0x250 [ 238.392190][T11134] ? __pfx_read_seqbegin+0x10/0x10 [ 238.392215][T11134] ? __local_bh_enable_ip+0x12d/0x1c0 [ 238.392231][T11134] ? eth_header+0x11b/0x200 [ 238.392250][T11134] ? __asan_memcpy+0x40/0x70 [ 238.392281][T11134] ip6_finish_output2+0xfb0/0x1480 [ 238.392310][T11134] ? __pfx_ip6_finish_output2+0x10/0x10 [ 238.392334][T11134] ? ip6_mtu+0x7d/0x490 [ 238.392352][T11134] ? ip6_mtu+0x38c/0x490 [ 238.392372][T11134] ? ip6_finish_output+0x2ef/0x4e0 [ 238.392392][T11134] ? ip6_output+0x126/0x550 [ 238.392412][T11134] ip6_output+0x340/0x550 [ 238.392433][T11134] ip6_xmit+0x11b5/0x1970 [ 238.392456][T11134] ? ip6_xmit+0x291/0x1970 [ 238.392478][T11134] ? __pfx_ip6_xmit+0x10/0x10 [ 238.392499][T11134] ? inet6_csk_xmit+0x1d4/0x780 [ 238.392520][T11134] inet6_csk_xmit+0x4db/0x780 [ 238.392537][T11134] ? inet6_csk_xmit+0x1d4/0x780 [ 238.392552][T11134] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 238.392566][T11134] ? tcp_syn_options+0x625/0xcc0 [ 238.392595][T11134] ? csum_ipv6_magic+0x1ea/0x2f0 [ 238.392616][T11134] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 238.392631][T11134] __tcp_transmit_skb+0x2092/0x3aa0 [ 238.392666][T11134] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 238.392695][T11134] ? __asan_memset+0x22/0x50 [ 238.392720][T11134] ? tcp_rbtree_insert+0x11e/0x170 [ 238.392745][T11134] ? tcp_connect+0x272e/0x5060 [ 238.392769][T11134] tcp_connect+0x1f6e/0x5060 [ 238.392807][T11134] ? __pfx_tcp_connect+0x10/0x10 [ 238.392836][T11134] ? __asan_memset+0x22/0x50 [ 238.392859][T11134] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 238.392883][T11134] ? inet6_hash_connect+0xd8/0x170 [ 238.392905][T11134] tcp_v6_connect+0x11f7/0x1870 [ 238.392929][T11134] ? __pfx_tcp_v6_connect+0x10/0x10 [ 238.392954][T11134] ? __local_bh_enable_ip+0x12d/0x1c0 [ 238.392971][T11134] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 238.392992][T11134] mptcp_connect+0x56b/0x830 [ 238.393015][T11134] __inet_stream_connect+0x2ae/0xe70 [ 238.393035][T11134] ? __local_bh_enable_ip+0x12d/0x1c0 [ 238.393052][T11134] ? __pfx___inet_stream_connect+0x10/0x10 [ 238.393068][T11134] ? __local_bh_enable_ip+0x12d/0x1c0 [ 238.393085][T11134] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 238.393108][T11134] inet_stream_connect+0x66/0xa0 [ 238.393124][T11134] __sys_connect+0x313/0x440 [ 238.393141][T11134] ? __pfx___sys_connect+0x10/0x10 [ 238.393162][T11134] ? rcu_is_watching+0x15/0xb0 [ 238.393184][T11134] __x64_sys_connect+0x7a/0x90 [ 238.393200][T11134] do_syscall_64+0xfa/0xfa0 [ 238.393221][T11134] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.393240][T11134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.393257][T11134] ? clear_bhb_loop+0x60/0xb0 [ 238.393276][T11134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.393292][T11134] RIP: 0033:0x7f6a3e58eec9 [ 238.393309][T11134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.393324][T11134] RSP: 002b:00007f6a3f4aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 238.393342][T11134] RAX: ffffffffffffffda RBX: 00007f6a3e7e5fa0 RCX: 00007f6a3e58eec9 [ 238.393354][T11134] RDX: 000000000000001c RSI: 00002000000002c0 RDI: 0000000000000007 [ 238.393365][T11134] RBP: 00007f6a3e611f91 R08: 0000000000000000 R09: 0000000000000000 [ 238.393376][T11134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.393386][T11134] R13: 00007f6a3e7e6038 R14: 00007f6a3e7e5fa0 R15: 00007ffcb0ffd478 [ 238.393407][T11134]