last executing test programs: 21.244537518s ago: executing program 2 (id=1788): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc72}, {&(0x7f0000003000)="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", 0x1000}], 0x8}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) socket$unix(0x1, 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r3, 0xcb}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x2}, 0x3}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="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", 0xfe}, {&(0x7f0000000380)="03f8cd84876ebf34a9a007135c0c232a39b6b25e75ed09a1d0fc2b417886", 0x1e}, {&(0x7f0000000440)="6e2838cd62f099477d746de01d9aed8dddcb4cec376862b6171ca7019cd422150ac68f275719ab4eb3733e348ae69a73a6ddf75aec2ccdc4f207ad7bbcf793ba0e81243bbe2f3b751bbee6b2d2a6956294990b288d1d8935ed2a13ac7e07650cb2e598de71261f8719b8837e1822a7e96049a6f347f310816884b61364d2370f8969213cc6530350823b5170eb8bb0b49590dbb7cc96a6d2abb4ffe92089c7b63defafc2644703bab4a9ac3f738d84a6fe27dd50a4576a92a5f675f3b7f1f9bb32c27a5973dd8341001d940c631c0b3508252c0504f0b5865454a38479a15462df0c337a968f369645be218c2ce1a1555f5992a8", 0xf4}], 0x3, &(0x7f0000000580)="02ca4de3e0334fb280e1b3", 0xb, 0x8080}, 0x20000000) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44ecff00", @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf250900000030000380080003000100000014000200626f6e645f736c6176655f300000000008000100010000000600040003000000"], 0x44}, 0x1, 0x0, 0x0, 0x42890}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r6, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x73c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2ca5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000084) 21.052944405s ago: executing program 2 (id=1791): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000976b0000"], 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076b6cd68300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x20008044}, 0x20000041) r0 = socket$inet6(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f0000000140)=0xffffffffffffffff, 0x12) write$cgroup_subtree(r1, 0x0, 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 20.876767571s ago: executing program 2 (id=1793): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000240)="05000000010000", 0x7) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="2d7ac6a54e152a499e5e34c7dddcbd6b0d183b0743636fb6ea60665a43de81ce5cb83baa583431afe1f56cd8b57045f37b11e050a59c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xf, 0x0, &(0x7f0000000700)="a498812dcc59a7470a16d3e5158013", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r1, r6, 0x25, 0x8, @void}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r8, 0x10e, 0x9, &(0x7f0000000500)=""/3, &(0x7f0000000640)=0x3) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES32=r9, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000007c0)=@generic={0x0, r10}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x4040040) r11 = socket$alg(0x26, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x4) bind$alg(r11, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) 20.875782211s ago: executing program 1 (id=1794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791038000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f00000002c0), &(0x7f0000000440)=r0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x4, 0xa5e, 0xd, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7, 0x5, 0xa80}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0xa, 0x1, 0x0, r1, 0x4, '\x00', r2, r3, 0x2, 0x5, 0x1, 0x8}, 0x50) 20.764717311s ago: executing program 0 (id=1796): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x403, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x437a2, 0x55007}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20.720706772s ago: executing program 1 (id=1797): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1fffffffffffffa8, &(0x7f0000000080)=[{}, {}]}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000001c0)={0x80d2, 0x1}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000180)={'vcan0\x00', @local}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x9, 0xb}, {0xd, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0xff800000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000071}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000200000001e0a05010000000000000000070000000900010073797a3010000000140000001000010000000000000000000084000a"], 0x68}}, 0x0) 20.61011302s ago: executing program 0 (id=1798): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={0x0, @broadcast, @multicast2}, &(0x7f0000000440)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x36, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x173, 0x0, 0x0, 0x0, 0x2}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5a89}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @generic={0x7, 0x4, 0xa, 0x5, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x1, 0x9, 0x1, 0x100, 0xfffffffffffffffc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x6d, &(0x7f00000002c0)=""/109, 0x40f00, 0xc, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r0, r2, r2, r2], 0x0, 0x10, 0x9}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4f25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="66b84ecae707af39d0d5dbb10589d54e8da5a8851e515101f6548e9035c65f5adcbe4cd0d9f2c1edccb3e81af68688ef2f5fcf9c36a9c6d100399ac0559ee41daf8a0408c40d80ead6ff1ad81f266c6c5a175d1dfb11a216b550e9046b6ef5edc967599c07dcbfbdaa9911ecafec5b6180345479bf2905cc0f74d5b6e6ae2c961552e9f3ae10b24e4250d7593c2cc562f5ed", 0x92}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000f0ff0029000000360000005c000000000000009b35d267fa9064b06846da311e5b120d18db558c349fd62355262a334f64e55e36897665fe91134476519971a6b98dea32c62a"], 0x18}}], 0x1, 0x4001c41) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2, r7, 0xfff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 20.368864626s ago: executing program 0 (id=1800): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2}, 0x94) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) nanosleep(&(0x7f0000000380)={r2, r3+60000000}, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) r4 = socket$isdn(0x22, 0x3, 0x24) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @broadcast}, &(0x7f0000000240)=0xc) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa400c02}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@getae={0x58, 0x1f, 0x800, 0x70bd28, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0xa, 0x2b}, @in=@multicast1, 0xe, 0x3503}, [@offload={0xc, 0x1c, {r6, 0x3}}, @mark={0xc, 0x15, {0x35075c, 0x8}}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x800) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000040)=0x1a99, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128024000100767863616e0000000404028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 20.195058843s ago: executing program 1 (id=1803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x80003, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7f}}}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) setsockopt$sock_int(r1, 0x1, 0xd, &(0x7f0000000080)=0x4, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x2, 0x9}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 20.104991624s ago: executing program 3 (id=1804): r0 = socket(0x8, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES8=0x0], 0x48}, 0x1, 0x0, 0x0, 0x4c800}, 0x8800) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r2, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 20.102937516s ago: executing program 4 (id=1805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x79, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0) 20.083496214s ago: executing program 3 (id=1806): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x8804) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94) write$tun(r2, 0x0, 0xfdef) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) 19.963912032s ago: executing program 4 (id=1807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000380)={'pim6reg1\x00', @broadcast}) 19.963349126s ago: executing program 3 (id=1808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c00048008000140000000000635"], 0x30}}, 0x8014) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4008, r0}, 0x18) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r3, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRESHEX], 0x28}}, 0x0) 19.872968418s ago: executing program 2 (id=1809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c00088008000100506f19360900010073797a30"], 0x110}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'gre0\x00', r2, 0x8, 0xb384998d3081ac05, 0x6, 0x3, {{0xa, 0x4, 0x1, 0x1, 0x28, 0x68, 0x0, 0xe, 0x0, 0x0, @broadcast, @rand_addr=0x64010101, {[@generic={0x44, 0x2}, @generic={0x83, 0x8, "a69f3efba1d7"}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) 19.866486909s ago: executing program 1 (id=1810): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000280)=""/45, &(0x7f0000000340)=0x2d) (async, rerun: 64) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) bind$inet(r1, 0x0, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000200), 0x4) r2 = socket$kcm(0x2, 0x200000000000006, 0x106) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 19.724242681s ago: executing program 4 (id=1811): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', 0x1000}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) 19.608995454s ago: executing program 3 (id=1812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000dd382cc1df000000000a20000000000a05000000000000000000010000008900010073797a30000000002c000000a54333048c117faf00000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000808000b400000000028000480240001800b0001007470726f7879000014000280080003400000000a08000140000000420900010073797a30"], 0xc4}}, 0x4008800) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) 19.551043098s ago: executing program 2 (id=1813): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000001600)='syzkaller\x00'}, 0x90) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="c4a4fa7a6ff08e21a36a974774690492fbc37b33000a4afd7530b4b0a96a6e0e4a90bc28c4f610b27f03bb10ed65b3dbf4c58e61e3d00ad98c43c39ac672e7b7d8294b4f9e3c2d02a33e79a69b2c32923db607a18bda6e646702c78fe4800505871819337440bc8ed8307af87898cf2816c91c9f48cbd63b6cf91bcf0f1fd8df0c85ad00adffb159d38da9764f6aaa50234bac7096fc2ff8c0e5e891aab6f2add0155d2a0575c6bf927a5a6ea57098c62cd448ca895da78d5761743fdc44ebdf54f279000293ed55a1f3", 0xca}, {&(0x7f0000000500)="4bae4d0bcb70747140809f1562eb307c3a263c2b4adc35671a1ee6ca2a7a319c7a", 0x21}, {&(0x7f0000000600)="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", 0xfe}, {&(0x7f0000000700)="ae7b886a0a50101fc256472546b54e61468ed8036763888a47c43ef10c57032d9488a50afc030d9376e12fc386f094d09dd2d02a36e47ccca92ede9590c81b6bbf8072eb4fb16e3c31e3afc6648dc13d5ebd6850ff08a520c85442482b2ab432c6c7dfd2ba3c9d03e07785e3cdbde186fa73f9b178d8e7339f43caa5bff424538944775955a80be84ed755841d2a726583bfd66b77d787042b7e092071e51d9ce2c4351bc8390f4795d6680a06c6c1d1bc4b4ef7b27b066d3fea302d2d682bfb7b41d08f52d7c5", 0xc7}], 0x4, &(0x7f0000000800)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xa2, 0x1, 0xf, [{@remote, 0x9}]}, @timestamp_addr={0x44, 0x14, 0xd6, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0xa1f}]}, @timestamp_prespec={0x44, 0x1c, 0x98, 0x3, 0xc, [{@private=0xa010101, 0x3}, {@rand_addr=0x64010101, 0xc}, {@multicast2, 0x5}]}]}}}], 0x50}, 0x8000000) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='macvlan0\x00', 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x145, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601040000000000000000050000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1e00010c00168008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3edf0400", @ANYRES16=r5, @ANYBLOB="000025bd7000fedbdf252300000005002800c700000005002500000000000500220000000000050021000e0000000800240007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x20004040) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x8000a4ff, 0x4) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8450}, 0x4000000) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) readv(r0, &(0x7f0000000580)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/52, 0x34}], 0x6) 19.512549359s ago: executing program 1 (id=1814): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@polexpire={0xcc, 0x1b, 0x57a500b9b82fd89, 0x0, 0x0, {{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x60}, {0x0, 0x0, 0x0, 0x1}, {}, 0xfffffffc}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r11 = socket(0x400000000010, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r15}, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="03"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendto$packet(r1, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r9, 0x1, 0x62}, 0x14) 19.405226161s ago: executing program 4 (id=1815): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c040007031a000300", 0x33a) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a80)="93bffce623851797a8dc7901f0048678cd35ef837c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e364c8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000000000000000000000000000000000e072049ea280ade357f667efa3f2602752f463d7687717beb1a2de8b084f9afabef15b0597996ced9da8afad5169efd16cdaaa362605c9904de56388bc3a", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b9965f73440df67940c76ddc3df03db0d78c28fc030a88d5060290aa8ec", 0x73}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f42b2dda515bffbb8de861e60d4ee6dad628fdf1055f9a1", 0x2e}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfbca479a17e7420ec938e84ad449c00288b126e26d6d80fb", 0x39}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0xc0) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve1\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3ff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7fff}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) 19.40217696s ago: executing program 0 (id=1816): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89f2, &(0x7f0000000000)={'ip6tnl0\x00', 0x2000}) 19.296912874s ago: executing program 4 (id=1817): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:* mr'], 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000064000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61147c00000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x23) 19.294887625s ago: executing program 0 (id=1818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x80) (async) r1 = socket(0x2a, 0x5, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, 0x0) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) (async, rerun: 32) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) sendmmsg(r4, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}, {&(0x7f0000001400)="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", 0xfc0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690b4", 0x5}], 0x1}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {0x8}, {0xb, 0xffe0}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x24000000) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000023c0)={0x788, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0xe8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x825f, 0xc628, 0x100, 0x5, 0x5, 0x2, 0x7, 0x7]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x2}, {0x1, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x1}, {0x1}, {0x6, 0x2}, {0x4, 0x4}, {0x7, 0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x1, 0x8}, {0x5, 0x1}, {0x5, 0x9}, {0x7, 0x7}, {0x7}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0x5}, {0x0, 0x8}, {0x5, 0x4}, {0x3, 0x6}, {}, {0x5, 0x4}, {0x6, 0x7}, {0x5}, {0x3, 0x9}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x7, 0x3}, {}, {0x3, 0x7}, {0x5, 0x3}, {0x7, 0x9}, {0x1, 0x9}, {0x0, 0x6}, {0x5, 0x5}, {0x2, 0x3}, {0x4, 0x5}, {0x2, 0x2}, {0x7, 0x9}, {0x3, 0x7}, {0x6, 0x2}, {0x7, 0x7}, {0x4, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfc0, 0x9, 0xc09, 0x3, 0x4, 0x9, 0xc]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x2}, {0x1, 0x1}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0x5}, {}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x9}, {0x2, 0x6}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0x9}, {0x7, 0x4}, {0x2, 0x5}, {0x2, 0x2}, {0x7, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0x3, 0x2}, {0x1, 0x2}, {0x5, 0x8}, {0x5, 0x8}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0x1}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x2}, {0x1, 0x6}, {0x5, 0x5}, {0x0, 0x7}, {0x2}, {0x2, 0xa}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x8}, {0x5, 0x5}, {0x5, 0xa}, {0x0, 0x7}, {0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0xaf2e, 0xcd, 0xc, 0x0, 0x0, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x6c, 0x1b, 0xc, 0x24, 0x18, 0x9, 0x5, 0x33, 0x18, 0x9, 0x6, 0x60, 0x2, 0x6c, 0x1b, 0x1, 0x2, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x4, 0x12, 0xe, 0x6, 0x1, 0xc, 0x24, 0x5, 0x66, 0x12, 0x3d, 0xb, 0x9, 0x29, 0x18, 0x0, 0xb, 0x16, 0x1, 0x30, 0x9, 0x1, 0x12, 0x9, 0x7a, 0x16, 0x12, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7ff, 0x0, 0x401, 0x100, 0x400, 0x7ff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc8, 0x4, 0x1, 0xff, 0x1, 0xeddc, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x6, 0x5, 0x1, 0x101, 0x8, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x254, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x1ff, 0x7, 0xffff, 0x8117, 0xfff, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0xc, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeb, 0x1, 0xe7d0, 0x2, 0x1, 0x8, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xc, 0x9c1, 0x8, 0x81, 0x9, 0x3, 0xc]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x36, 0x60, 0xb, 0x12, 0x24, 0x16, 0x9, 0x3f, 0x3, 0x60, 0x30, 0x18]}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x40, 0x6, 0x7, 0x1, 0x1000, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x2}, {0x2, 0x6}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x3, 0x2}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x2}, {0x1, 0x1}, {0x1, 0x4}, {0x4, 0x4}, {0x5, 0x1}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0x3}, {}, {0x1, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x5, 0xa}, {}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x2, 0xa}, {0x0, 0x2}, {0x4, 0x1}, {0x5, 0x8}, {0x1, 0x9}, {0x7}, {0x7}, {0x1, 0x7}, {0x6, 0x1}, {0x0, 0x8}, {0x4, 0x4}, {0x7, 0xa}, {0x3, 0x7}, {0x2, 0x2}, {0x1, 0x6}, {0x1, 0x3}, {0x7, 0x7}, {0x1, 0x6}, {0x4, 0x9}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x3, 0x8}, {}, {0x5, 0x8}, {0x7}, {0x0, 0x2}, {0x1, 0x7}, {0x2, 0x5}, {0x6, 0x7}, {0x0, 0x1}, {0x3, 0x9}, {0x7, 0x6}, {0x5, 0x1}, {0x1, 0x6}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0x2}, {0x4, 0x8}, {0x2, 0x9}, {0x0, 0x3}, {0x6}, {0x1}, {0x0, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0x8}, {0x2, 0xa}, {0x3, 0x5}, {0x6}, {0x2, 0x7}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xff, 0x7, 0x6, 0x7, 0xc, 0x8, 0xa00]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xb, 0x8000, 0x7, 0x8, 0xe, 0x401, 0x1d]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x6}, {0x4, 0xa}, {0x1, 0x8}, {0x7, 0x1}, {0x6, 0x9}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x1}, {0x0, 0x4}, {0x7, 0x6}, {0x5}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x2}, {0x5, 0x8}, {0x3, 0x9}, {0x6, 0xa}, {0x1, 0xa}, {0x7, 0x3}, {0x3, 0x5}, {0x7}, {0x2, 0x1}, {0x2, 0x9}, {0x5, 0xa}, {0x2, 0x6}, {0x0, 0x2}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0xa}, {0x2}, {0x1, 0x8}, {0x2, 0x6}, {0x4, 0x4}, {0x5, 0xa}, {0x1, 0x3}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0xa}, {0x6, 0x4}, {0x1, 0x3}, {0x6, 0xa}, {0x7, 0x1}, {0x2, 0x7}, {0x6}, {0x3, 0x6}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x5}, {0x0, 0x2}, {0x2, 0x6}, {0x3, 0x1}, {0x6, 0x7}, {0x6, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x7, 0x2}, {0x6, 0x3}, {0x4, 0x2}, {0x0, 0x7}, {0x7, 0x9}, {0x4, 0x3}, {0x3, 0x4}, {0x6, 0x3}, {0x3}, {0x5, 0x7}, {0x6}, {0x1, 0x6}, {0x0, 0x8}, {0x2, 0x7}, {0x5, 0xa}, {0x6}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x6, 0x7}, {0x7, 0x7}, {0x2, 0x12}, {0x6, 0x1}, {0x1, 0x8}, {0x4, 0x7}, {0x5, 0x5}, {0x1, 0x5}, {0x4, 0x9}, {0x0, 0x6}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x1}, {0x2, 0x4}, {0x1, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x2, 0x1}, {0x5, 0x6}, {0x5, 0x1}, {0x3, 0x6}, {0x0, 0x6}, {0x5, 0x8}, {0x4, 0x8}, {0x3, 0x3}, {0x4}, {0x2, 0x9}, {0x7, 0x3}, {0x5, 0x9}, {0x6, 0x1}, {0x6, 0x3}, {0x3, 0xa}, {0x2, 0x5}, {0x4, 0xa}, {0x5, 0x8}, {0x6, 0x5}, {0x2, 0x9}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x4, 0x7}, {0x5, 0x3}, {0x5, 0x9}, {0x3, 0x9}, {0x2, 0x5}, {0x4, 0x6}, {0x6, 0xa}, {0x5}, {0x3, 0x2}, {0x5, 0x3}, {0x3, 0x5}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x8}, {0x7, 0x2}, {0x1}, {0x3, 0x9}, {0x4, 0x4}, {0x4, 0x8}, {0x7, 0x1}, {0x4, 0x5}, {0x7, 0x6}, {0x4, 0x2}, {0x2, 0x2}, {0x0, 0x8}, {0x3, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x4, 0xa}, {0x0, 0x2}, {0x5, 0x9}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x9}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x3}, {0x7, 0x9}, {0x2, 0x7}, {0x2, 0x5}, {0x7, 0xa}, {0x3, 0x6}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x5}, {0x1, 0xa}, {0x2}, {0x3, 0x3}, {0x4, 0x6}, {0x6, 0x2}, {0x5, 0x5}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x48, 0x30]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x44d, 0x5, 0x0, 0x1, 0x6, 0x10, 0x1000, 0x3]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x12, 0x2, 0x24, 0x18, 0x5, 0x48, 0x12, 0x60]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x4}, {0x2, 0x9}, {0x5, 0x8}, {0x7, 0x5}, {0x2, 0xa}, {0x7, 0x9}, {0x6, 0x5}, {0x5, 0x1}, {0x7, 0x9}, {0x7, 0x7}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x9}, {0x4}, {0x7, 0x4}, {0x1, 0x3}, {0x3, 0x4}, {0x6, 0x4}, {0x4, 0x6}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x9}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x6}, {}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x5}, {0x5}, {0x3, 0x1}, {0x1, 0x5}, {0x2, 0x3}, {0x6, 0x6}, {0x6}, {0x2, 0x5}, {0x6, 0x9}, {0x0, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x2}, {0x0, 0x7}, {0x1, 0xa}, {0x7, 0x2}, {0x1, 0x4}, {0x2, 0x4}, {0x5, 0x2}, {0x3, 0x3}, {0x5, 0x2}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x5}, {0x0, 0x1}, {0x3, 0x8}, {0x2, 0x3}, {0x7, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x1b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xdc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x60d, 0x9, 0x1, 0x1, 0x10, 0x0, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x3, 0x9, 0xff, 0xc, 0x67ed, 0x9]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x1}, {0x6, 0x7}, {0x2, 0xa}, {0x2, 0x6}, {0x3, 0xa}, {0x3, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x2, 0x9}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x7}, {0x6, 0x1}, {0x6, 0x2}, {0x5, 0x9}, {0x4, 0xa}, {0x5, 0x3}, {0x2, 0x6}, {0x5, 0x9}, {0x4, 0x6}, {0x5, 0x1}, {0x4}, {0x6, 0xa}, {0x0, 0x1}, {0x3, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x3}, {0x1, 0x7}, {0x2, 0x9}, {0x4, 0x2}, {0x5}, {0x1, 0x6}, {}, {0x0, 0x9}, {0x2, 0x6}, {0x3, 0x4}, {0x6, 0x9}, {0x7, 0xa}, {0x2, 0x7}, {0x1, 0xa}, {0x6, 0x3}, {0x2, 0xa}, {0x3, 0x1}, {}, {0x0, 0xa}, {0x3, 0x5}, {0x5, 0x6}, {0x1, 0x2}, {0x0, 0x1}, {0x4}, {0x3, 0x7}, {0x0, 0x9}, {0x6, 0x8}, {0x4, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x18, 0x4b, 0x16, 0x6c, 0xc, 0x9, 0x1b, 0x48, 0x30, 0x60, 0x5, 0x3, 0x30, 0x16, 0x1b, 0x2, 0x30, 0x30, 0x18, 0x5]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x60, 0x36, 0x6c, 0x60, 0x2, 0x36, 0x24, 0x18, 0x24, 0xc, 0x24, 0x4, 0x1, 0x4d, 0x64]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xdc8, 0x3ff, 0x6, 0x2, 0xeee0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc465, 0x6, 0xffff, 0x0, 0x1f, 0x7, 0x5]}}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0xc, 0xc, 0x2, 0x5, 0x1, 0x3f, 0xc, 0x5, 0x24, 0x9, 0x36, 0x6c, 0x0, 0xb, 0x6, 0x16, 0x9, 0x1, 0x30, 0x11, 0x3, 0xfab5634cf372a75]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x5}, {0x7, 0x5}, {0x5, 0x1}, {0x6, 0x5}, {0x6, 0x5}, {0x0, 0xa}, {0x6, 0x2}, {0x6, 0x4}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0xa}, {0x6, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x0, 0x4}, {0x6, 0x8}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x2}, {0x6}, {0x3, 0x7}, {0x0, 0x8}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0x5}, {0x4}, {0x4, 0x5}, {0x4, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x9}, {0x1, 0x7}, {0x2, 0x5}, {0x1, 0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x7}, {0x0, 0x1}, {0x7, 0x3}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x9}, {0x2, 0xa}, {0x7, 0x8}, {0x7, 0x2}, {0x6, 0xa}, {0x2, 0xa}, {0x4}, {0x0, 0x5}, {0x7, 0x9}, {0x7, 0x5}, {0x2, 0x2}, {0x3, 0x7}, {0x7, 0x9}, {0x4, 0x3}, {0x1, 0x9}, {0x5}, {0x5, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x2}, {0x3, 0x5}, {0x4, 0x1}, {0x3, 0x6}, {0x7, 0x1}, {0x7}, {0x4, 0x8}, {0x4, 0x3}, {0x0, 0x3}, {0x4, 0x2}, {0x6, 0x3}, {0x5, 0x2}, {0x3, 0x6}, {0x6, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x4, 0x9}, {0x5, 0x4}, {0x0, 0x9}, {0x5, 0x7}, {0x7, 0x8}, {0x1, 0x8}, {0x3, 0x3}, {0x7, 0x9}, {0x4}, {0x7, 0xa}, {0x7, 0x6}, {0x4}, {0x1, 0x7}, {0x7, 0x2}, {0x1}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x5}, {0x1, 0x6}, {0x6, 0x7}, {0x2, 0xa}, {0x2, 0x7}, {0x6}, {0x0, 0x6}, {0x4, 0x5}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x36, 0x6, 0x5, 0x5, 0x3, 0xb, 0xc, 0x17, 0x36, 0x60, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x0, 0x30, 0x5, 0x16, 0x48, 0x2, 0xc, 0x2, 0x67, 0x16, 0x30, 0x716df36e48d506e0, 0x4, 0x60, 0x5, 0x16, 0x12, 0x5, 0x6c, 0x6c, 0x48, 0x18, 0xb, 0x3, 0xc, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x580e, 0x100, 0x4, 0x9, 0x8, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7c, 0x2, 0xf66, 0x5, 0xffff, 0x8000, 0xc32b, 0x400]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x20, 0xc, 0x12, 0x16, 0x2, 0x1, 0x2, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x4, 0x12, 0x4]}]}]}, @NL80211_ATTR_TX_RATES={0x154, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0xb460, 0x3000, 0x6, 0xe3, 0x6, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x7}, {0x4, 0x4}, {0x5, 0x2}, {0x3, 0x4}, {0x4, 0x2}, {0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x6}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x7}, {0x1}, {0x6, 0x1}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x7}, {0x4, 0xa}, {0x1, 0x2}, {0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x0, 0x4}, {0x3}, {0x0, 0xa}, {0x7}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x4}, {0x4, 0xa}, {0x5, 0x5}, {0x1, 0x6}, {0x6, 0x2}, {0x1}, {0x2}, {0x7, 0x7}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x6}, {0x7, 0x9}, {0x1, 0x8}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0xa}, {0x5, 0x3}, {0x7, 0x3}, {0x2, 0x1}, {0x3, 0x2}, {0x3, 0x6}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x7}, {0x7, 0x5}, {0x5, 0xa}, {0x1, 0xa}, {0x2, 0x7}, {0x4, 0x2}, {0x3, 0xa}, {0x7, 0x7}, {0x2, 0x3}, {0x0, 0x8}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0x2}, {0x0, 0x6}, {0x3, 0x8}, {0x6, 0x2}, {0x2, 0xa}, {0x1, 0x6}, {0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x4, 0x4}, {0x6}, {0x2, 0x2}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x2, 0x4, 0x18, 0x18, 0x30, 0x36, 0xb, 0x12, 0x6, 0x9, 0x60, 0x1b, 0xb, 0x3, 0x2e391ecada2cc9f0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x46f7, 0x0, 0x5, 0x2, 0x2, 0x897, 0xdd, 0x8]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x4}, {0x4}, {0x6, 0x9}, {0x1, 0x4}, {0x3, 0x5}, {}, {0x1, 0x7}, {0x2, 0x2}, {0x5, 0x1}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x718, 0x5, 0x1, 0xb, 0x71, 0x4, 0x81, 0x4949]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x788}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201"], 0x268}, 0x1, 0x0, 0x0, 0x8064}, 0x0) 19.273903066s ago: executing program 2 (id=1819): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}, @IFLA_BOND_DOWNDELAY={0x8, 0x15}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x8000, 0x0, 0x9d55, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x4, 0x0, @multicast2, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', r2, 0x20, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}}) r3 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x80c00) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) splice(r6, 0x0, r7, 0x0, 0x10500, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r5, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r12, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r14, &(0x7f0000000000), 0xffffff98) splice(r13, 0x0, r12, 0x0, 0xfffffffc, 0xf) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r17, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000380)={0x3c, r15, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, r10, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7beb582e8a14e607}, 0x4000) 19.238498378s ago: executing program 4 (id=1820): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f000000000000000000800000000000000000000000000000000000000000000000000000000100000000000000000000000032100000080022"], 0x12c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001200970c25bd70000200000007000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000040034"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8994, &(0x7f0000000200)={'bond0\x00'}) 19.124835436s ago: executing program 3 (id=1821): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x124) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) r2 = accept4(r0, &(0x7f0000000480)=@generic, &(0x7f00000001c0)=0x80, 0x80000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r5, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0xf, 0x10}, &(0x7f00000005c0)=0x90) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)={0x4a, 0x6c, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r6, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(r7) 19.123752734s ago: executing program 0 (id=1822): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000e7070001"], 0x20}, 0x1, 0x200000000000000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000e7070001"], 0x20}, 0x1, 0x200000000000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fbdb11ecdf25110000000c0003800800010000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) listen(r0, 0x80000001) (async) listen(r0, 0x80000001) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000ff0700004100000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000100)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x1b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @loopback, {[@lsrr={0x83, 0x3}, @lsrr={0x83, 0x17, 0x89, [@multicast1, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@local}, {@private, 0x200}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x30}}, {@multicast1}, {@remote}, {@private}]}]}}, "003db8130000b979"}}}}}, 0x0) socket(0x840000000002, 0x3, 0x100) (async) r7 = socket(0x840000000002, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x1a0, 0x0, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc3dd}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xce}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x9c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc07ddc6e1df76639}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc9}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x70, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x91f4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x240000c1}, 0x2000801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = gettid() sendmsg$unix(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r10}}}], 0x20}, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fedbdf2517000000440006803d00040067636d2861657329004efe000000000000000000000000000000000000000000000015000000d59e92ed03aab8b251a448488335da5a96fad7793e00"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fedbdf2517000000440006803d00040067636d2861657329004efe000000000000000000000000000000000000000000000015000000d59e92ed03aab8b251a448488335da5a96fad7793e00"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x50, &(0x7f00000000c0)={0x0, 0x0}, 0x10) socket(0x25, 0x800, 0x8) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 19.042957433s ago: executing program 3 (id=1823): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r1, 0x0, 0x4008040) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x800) 18.963622921s ago: executing program 1 (id=1824): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000003c000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x12, 0x2, 0x0, &(0x7f0000000200)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 32) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003c0007012cbd700000000000017c00fa0300f9800c00018008000300", @ANYRES32=r5, @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000000d65b"], 0x38}}, 0x0) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000001040)=0x130, 0x4) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@acquire={0x130, 0x17, 0x8, 0x70bd25, 0x25dfdbfd, {{@in=@private=0xa010100, 0x4d4, 0x32}, @in=@multicast2, {@in6=@mcast1, @in=@remote, 0x4e22, 0x0, 0x4e28, 0x800, 0x2, 0x20, 0x0, 0x33, r6, r5}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@mcast1, 0x4e21, 0xa, 0x4e24, 0xc234, 0xa, 0x130, 0x20, 0x41, r6, r8}, {0xeb6, 0x8, 0xd6, 0x9, 0x1, 0xfffffffffffffff7, 0x0, 0x10000}, {0xe730, 0x3, 0x9, 0x3}, 0x116c, 0x6e6bc0, 0x1, 0x1, 0x2, 0x3}, 0x25, 0x2, 0x0, 0x70bd25}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x10001}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) connect$inet(r2, &(0x7f00000010c0)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 324.932839ms ago: executing program 32 (id=1822): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000e7070001"], 0x20}, 0x1, 0x200000000000000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000e7070001"], 0x20}, 0x1, 0x200000000000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fbdb11ecdf25110000000c0003800800010000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) listen(r0, 0x80000001) (async) listen(r0, 0x80000001) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000ff0700004100000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000100)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x1b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @loopback, {[@lsrr={0x83, 0x3}, @lsrr={0x83, 0x17, 0x89, [@multicast1, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@local}, {@private, 0x200}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x30}}, {@multicast1}, {@remote}, {@private}]}]}}, "003db8130000b979"}}}}}, 0x0) socket(0x840000000002, 0x3, 0x100) (async) r7 = socket(0x840000000002, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x1a0, 0x0, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc3dd}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xce}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x9c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc07ddc6e1df76639}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc9}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x70, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x91f4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x240000c1}, 0x2000801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = gettid() sendmsg$unix(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r10}}}], 0x20}, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fedbdf2517000000440006803d00040067636d2861657329004efe000000000000000000000000000000000000000000000015000000d59e92ed03aab8b251a448488335da5a96fad7793e00"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fedbdf2517000000440006803d00040067636d2861657329004efe000000000000000000000000000000000000000000000015000000d59e92ed03aab8b251a448488335da5a96fad7793e00"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x50, &(0x7f00000000c0)={0x0, 0x0}, 0x10) socket(0x25, 0x800, 0x8) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 272.162489ms ago: executing program 33 (id=1824): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000003c000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x12, 0x2, 0x0, &(0x7f0000000200)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 32) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003c0007012cbd700000000000017c00fa0300f9800c00018008000300", @ANYRES32=r5, @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000000d65b"], 0x38}}, 0x0) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000001040)=0x130, 0x4) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@acquire={0x130, 0x17, 0x8, 0x70bd25, 0x25dfdbfd, {{@in=@private=0xa010100, 0x4d4, 0x32}, @in=@multicast2, {@in6=@mcast1, @in=@remote, 0x4e22, 0x0, 0x4e28, 0x800, 0x2, 0x20, 0x0, 0x33, r6, r5}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@mcast1, 0x4e21, 0xa, 0x4e24, 0xc234, 0xa, 0x130, 0x20, 0x41, r6, r8}, {0xeb6, 0x8, 0xd6, 0x9, 0x1, 0xfffffffffffffff7, 0x0, 0x10000}, {0xe730, 0x3, 0x9, 0x3}, 0x116c, 0x6e6bc0, 0x1, 0x1, 0x2, 0x3}, 0x25, 0x2, 0x0, 0x70bd25}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x10001}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) connect$inet(r2, &(0x7f00000010c0)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 217.170816ms ago: executing program 34 (id=1819): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}, @IFLA_BOND_DOWNDELAY={0x8, 0x15}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x8000, 0x0, 0x9d55, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x4, 0x0, @multicast2, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', r2, 0x20, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}}) r3 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x80c00) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) splice(r6, 0x0, r7, 0x0, 0x10500, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r5, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r12, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r14, &(0x7f0000000000), 0xffffff98) splice(r13, 0x0, r12, 0x0, 0xfffffffc, 0xf) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r17, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000380)={0x3c, r15, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, r10, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7beb582e8a14e607}, 0x4000) 94.670798ms ago: executing program 35 (id=1823): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r1, 0x0, 0x4008040) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x800) 0s ago: executing program 36 (id=1820): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f000000000000000000800000000000000000000000000000000000000000000000000000000100000000000000000000000032100000080022"], 0x12c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001200970c25bd70000200000007000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000040034"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8994, &(0x7f0000000200)={'bond0\x00'}) kernel console output (not intermixed with test programs): lticast mode [ 77.449123][ T5844] bridge_slave_1: entered promiscuous mode [ 77.571633][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.578853][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.586830][ T5839] bridge_slave_0: entered allmulticast mode [ 77.595095][ T5839] bridge_slave_0: entered promiscuous mode [ 77.605174][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.612937][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.620720][ T5839] bridge_slave_1: entered allmulticast mode [ 77.627982][ T5839] bridge_slave_1: entered promiscuous mode [ 77.651470][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.714746][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.724706][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 77.748077][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.773980][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 77.787044][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.838882][ T5844] team0: Port device team_slave_0 added [ 77.856586][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 77.898149][ T5844] team0: Port device team_slave_1 added [ 77.928469][ T5839] team0: Port device team_slave_0 added [ 77.967223][ T5839] team0: Port device team_slave_1 added [ 78.032247][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.039209][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.065322][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.117963][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.125154][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.151209][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.167843][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.175037][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.182320][ T5847] bridge_slave_0: entered allmulticast mode [ 78.189262][ T5847] bridge_slave_0: entered promiscuous mode [ 78.207797][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.214865][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.241403][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.270509][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.277674][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.285149][ T5847] bridge_slave_1: entered allmulticast mode [ 78.292273][ T5847] bridge_slave_1: entered promiscuous mode [ 78.313520][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.320652][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.346653][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.386184][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.393543][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.400822][ T5850] bridge_slave_0: entered allmulticast mode [ 78.407768][ T5850] bridge_slave_0: entered promiscuous mode [ 78.416638][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.423832][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.431618][ T5850] bridge_slave_1: entered allmulticast mode [ 78.439288][ T5850] bridge_slave_1: entered promiscuous mode [ 78.447845][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.455009][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.462539][ T5854] bridge_slave_0: entered allmulticast mode [ 78.469486][ T5854] bridge_slave_0: entered promiscuous mode [ 78.524203][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.531433][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.538588][ T5854] bridge_slave_1: entered allmulticast mode [ 78.540536][ T5846] Bluetooth: hci0: command tx timeout [ 78.547123][ T5854] bridge_slave_1: entered promiscuous mode [ 78.559495][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.596897][ T5844] hsr_slave_0: entered promiscuous mode [ 78.603511][ T5844] hsr_slave_1: entered promiscuous mode [ 78.619917][ T5846] Bluetooth: hci1: command tx timeout [ 78.629476][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.652037][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.680245][ T5839] hsr_slave_0: entered promiscuous mode [ 78.686608][ T5839] hsr_slave_1: entered promiscuous mode [ 78.693386][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 78.699183][ T5839] Cannot create hsr debugfs directory [ 78.732471][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.769012][ T5850] team0: Port device team_slave_0 added [ 78.778157][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.780205][ T5163] Bluetooth: hci2: command tx timeout [ 78.791569][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.799652][ T5846] Bluetooth: hci3: command tx timeout [ 78.805305][ T5847] team0: Port device team_slave_0 added [ 78.833697][ T5850] team0: Port device team_slave_1 added [ 78.853568][ T5847] team0: Port device team_slave_1 added [ 78.860634][ T5846] Bluetooth: hci4: command tx timeout [ 78.925681][ T5854] team0: Port device team_slave_0 added [ 78.971442][ T5854] team0: Port device team_slave_1 added [ 78.978423][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.985609][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.012048][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.040584][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.047534][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.073629][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.096608][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.104030][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.130363][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.153234][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.160685][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.186723][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.242499][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.249463][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.276186][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.288550][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.295631][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.321595][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.457927][ T5847] hsr_slave_0: entered promiscuous mode [ 79.465169][ T5847] hsr_slave_1: entered promiscuous mode [ 79.471575][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 79.477300][ T5847] Cannot create hsr debugfs directory [ 79.548944][ T5850] hsr_slave_0: entered promiscuous mode [ 79.555998][ T5850] hsr_slave_1: entered promiscuous mode [ 79.562227][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 79.567958][ T5850] Cannot create hsr debugfs directory [ 79.616648][ T5854] hsr_slave_0: entered promiscuous mode [ 79.623053][ T5854] hsr_slave_1: entered promiscuous mode [ 79.629073][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 79.634866][ T5854] Cannot create hsr debugfs directory [ 79.799451][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.813702][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.859519][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.900768][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.034307][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.045914][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.083791][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.116174][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.172656][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.186671][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.207292][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.218977][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.313760][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.327494][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.340372][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.351299][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.502701][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.514473][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.527168][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.559523][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.567266][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.619754][ T5846] Bluetooth: hci0: command tx timeout [ 80.637957][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.649165][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.692823][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.700110][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.707968][ T5846] Bluetooth: hci1: command tx timeout [ 80.744176][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.751901][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.772111][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.788632][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.807887][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.824856][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.832030][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.855897][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.860045][ T5163] Bluetooth: hci2: command tx timeout [ 80.863070][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.868398][ T5846] Bluetooth: hci3: command tx timeout [ 80.893942][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.938413][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.940771][ T5846] Bluetooth: hci4: command tx timeout [ 80.945575][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.967948][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.986750][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.993993][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.007952][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.015165][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.056025][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.063158][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.108347][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.305090][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.347465][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.354758][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.443897][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.451152][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.563144][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.646748][ T5854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.679773][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.822716][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.934245][ T5844] veth0_vlan: entered promiscuous mode [ 81.954922][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.976251][ T5844] veth1_vlan: entered promiscuous mode [ 82.023806][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.122300][ T5839] veth0_vlan: entered promiscuous mode [ 82.159049][ T5847] veth0_vlan: entered promiscuous mode [ 82.183344][ T5844] veth0_macvtap: entered promiscuous mode [ 82.208149][ T5844] veth1_macvtap: entered promiscuous mode [ 82.232495][ T5839] veth1_vlan: entered promiscuous mode [ 82.268650][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.294852][ T5847] veth1_vlan: entered promiscuous mode [ 82.331552][ T5850] veth0_vlan: entered promiscuous mode [ 82.366425][ T5850] veth1_vlan: entered promiscuous mode [ 82.413921][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.455371][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.472284][ T5839] veth0_macvtap: entered promiscuous mode [ 82.483531][ T5839] veth1_macvtap: entered promiscuous mode [ 82.495576][ T5847] veth0_macvtap: entered promiscuous mode [ 82.521870][ T1145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.533407][ T1145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.558425][ T5847] veth1_macvtap: entered promiscuous mode [ 82.568319][ T1145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.585805][ T1145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.645559][ T5850] veth0_macvtap: entered promiscuous mode [ 82.665498][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.683634][ T5850] veth1_macvtap: entered promiscuous mode [ 82.700617][ T5846] Bluetooth: hci0: command tx timeout [ 82.733778][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.746043][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.775189][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.787418][ T5846] Bluetooth: hci1: command tx timeout [ 82.796305][ T3618] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.811333][ T3618] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.839413][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.852086][ T3618] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.862579][ T3618] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.885340][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.903003][ T3618] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.911868][ T3618] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.921940][ T3618] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.941287][ T5846] Bluetooth: hci3: command tx timeout [ 82.941296][ T5163] Bluetooth: hci2: command tx timeout [ 82.962380][ T3618] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.983458][ T3618] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.995145][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.007320][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.020170][ T5846] Bluetooth: hci4: command tx timeout [ 83.025670][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.041310][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.053110][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.116965][ T5854] veth0_vlan: entered promiscuous mode [ 83.133069][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.137217][ T5854] veth1_vlan: entered promiscuous mode [ 83.147168][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.208347][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.230683][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.277253][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.312810][ T5854] veth0_macvtap: entered promiscuous mode [ 83.347425][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.363090][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.408065][ T5854] veth1_macvtap: entered promiscuous mode [ 83.427885][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.438197][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.478502][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.490188][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.492427][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.535188][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.560072][ T3618] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.568932][ T3618] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.628993][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.662053][ T3618] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.671962][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.692495][ T3618] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.735361][ T5962] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 83.754158][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 83.767074][ T3618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.809622][ T3618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.833447][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 83.906042][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 83.924507][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.941832][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.214682][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.255819][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.274361][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 84.304606][ T5977] netlink: 165 bytes leftover after parsing attributes in process `syz.1.10'. [ 84.335242][ T5971] bridge_slave_1: left allmulticast mode [ 84.362767][ T5971] bridge_slave_1: left promiscuous mode [ 84.391310][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.464838][ T5971] bridge_slave_0: left allmulticast mode [ 84.486149][ T5971] bridge_slave_0: left promiscuous mode [ 84.502731][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.708464][ T5987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13'. [ 84.764269][ T6003] netlink: 80 bytes leftover after parsing attributes in process `syz.3.15'. [ 84.784135][ T5846] Bluetooth: hci0: command tx timeout [ 84.862886][ T5846] Bluetooth: hci1: command tx timeout [ 84.877374][ T6009] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 85.020639][ T5846] Bluetooth: hci3: command tx timeout [ 85.029863][ T5846] Bluetooth: hci2: command tx timeout [ 85.093205][ T6017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'. [ 85.104639][ T5846] Bluetooth: hci4: command tx timeout [ 85.110352][ T6017] netlink: 120 bytes leftover after parsing attributes in process `syz.1.17'. [ 85.122287][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 85.216753][ T6018] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 85.240716][ T6021] wg1 speed is unknown, defaulting to 1000 [ 85.246869][ T6021] wg1 speed is unknown, defaulting to 1000 [ 85.326779][ T6021] wg1 speed is unknown, defaulting to 1000 [ 85.343466][ T6026] netlink: 'syz.0.20': attribute type 33 has an invalid length. [ 85.371886][ T6021] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.431489][ T6021] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 85.618165][ T6021] wg1 speed is unknown, defaulting to 1000 [ 85.629466][ T6039] netlink: 'syz.0.24': attribute type 1 has an invalid length. [ 85.656490][ T6021] wg1 speed is unknown, defaulting to 1000 [ 85.668530][ T6021] wg1 speed is unknown, defaulting to 1000 [ 85.676891][ T6021] wg1 speed is unknown, defaulting to 1000 [ 85.759949][ T6021] wg1 speed is unknown, defaulting to 1000 [ 85.848200][ T6039] veth3: entered promiscuous mode [ 86.339288][ T6067] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 86.360351][ T6067] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 86.632080][ T6082] Bluetooth: MGMT ver 1.23 [ 86.783273][ T10] cfg80211: failed to load regulatory.db [ 87.605948][ T6136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.977987][ T6155] syz.2.59 uses obsolete (PF_INET,SOCK_PACKET) [ 88.035779][ T6159] GUP no longer grows the stack in syz.4.61 (6159): 200000006000-200000008000 (200000005000) [ 88.068397][ T6163] veth1_macvtap: left promiscuous mode [ 88.101011][ T6159] CPU: 1 UID: 0 PID: 6159 Comm: syz.4.61 Not tainted syzkaller #0 PREEMPT(full) [ 88.101040][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 88.101058][ T6159] Call Trace: [ 88.101066][ T6159] [ 88.101075][ T6159] dump_stack_lvl+0x189/0x250 [ 88.101115][ T6159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.101141][ T6159] ? __pfx__printk+0x10/0x10 [ 88.101167][ T6159] ? find_vma+0xe7/0x160 [ 88.101206][ T6159] __get_user_pages+0x24d0/0x2ce0 [ 88.101224][ T6159] ? __lock_acquire+0xab9/0xd20 [ 88.101273][ T6159] ? __gup_longterm_locked+0xc63/0x1660 [ 88.101303][ T6159] __gup_longterm_locked+0xde4/0x1660 [ 88.101340][ T6159] ? sanity_check_pinned_pages+0x123a/0x1300 [ 88.101371][ T6159] gup_fast_fallback+0x1e6a/0x2010 [ 88.101435][ T6159] ? __pfx_gup_fast_fallback+0x10/0x10 [ 88.101462][ T6159] ? __lock_acquire+0xab9/0xd20 [ 88.101488][ T6159] ? pin_user_pages_fast+0x4d/0xb0 [ 88.101513][ T6159] iov_iter_extract_pages+0x35a/0x5e0 [ 88.101546][ T6159] extract_iter_to_sg+0xe46/0x24e0 [ 88.101595][ T6159] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 88.101627][ T6159] ? __local_bh_enable_ip+0x12d/0x1c0 [ 88.101647][ T6159] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.101680][ T6159] ? __local_bh_enable_ip+0x12d/0x1c0 [ 88.101700][ T6159] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 88.101727][ T6159] ? __asan_memset+0x22/0x50 [ 88.101750][ T6159] hash_sendmsg+0x4f4/0x11d0 [ 88.101800][ T6159] ? __pfx_hash_sendmsg+0x10/0x10 [ 88.101825][ T6159] __sock_sendmsg+0x219/0x270 [ 88.101858][ T6159] ____sys_sendmsg+0x52d/0x830 [ 88.101888][ T6159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.101922][ T6159] ? import_iovec+0x74/0xa0 [ 88.101948][ T6159] ___sys_sendmsg+0x21f/0x2a0 [ 88.101972][ T6159] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.102037][ T6159] ? __fget_files+0x2a/0x420 [ 88.102062][ T6159] ? __fget_files+0x3a0/0x420 [ 88.102100][ T6159] __sys_sendmmsg+0x227/0x430 [ 88.102130][ T6159] ? __pfx___sys_sendmmsg+0x10/0x10 [ 88.102151][ T6159] ? do_futex+0x395/0x420 [ 88.102186][ T6159] ? fd_install+0x97/0x540 [ 88.102233][ T6159] ? rcu_is_watching+0x15/0xb0 [ 88.102264][ T6159] __x64_sys_sendmmsg+0xa0/0xc0 [ 88.102287][ T6159] do_syscall_64+0xfa/0x3b0 [ 88.102307][ T6159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.102326][ T6159] ? __switch_to_asm+0x39/0x70 [ 88.102350][ T6159] ? clear_bhb_loop+0x60/0xb0 [ 88.102374][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.102393][ T6159] RIP: 0033:0x7f340438eec9 [ 88.102414][ T6159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.102436][ T6159] RSP: 002b:00007f3405224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 88.102460][ T6159] RAX: ffffffffffffffda RBX: 00007f34045e5fa0 RCX: 00007f340438eec9 [ 88.102475][ T6159] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000006 [ 88.102487][ T6159] RBP: 00007f3404411f91 R08: 0000000000000000 R09: 0000000000000000 [ 88.102499][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.102510][ T6159] R13: 00007f34045e6038 R14: 00007f34045e5fa0 R15: 00007ffd193c7d48 [ 88.102544][ T6159] [ 88.498173][ T6165] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 88.634218][ T6188] netlink: 'syz.4.66': attribute type 21 has an invalid length. [ 88.672993][ T6188] netlink: 'syz.4.66': attribute type 4 has an invalid length. [ 88.676265][ T6192] netlink: 'syz.0.69': attribute type 2 has an invalid length. [ 88.760876][ T6192] bond1: option resend_igmp: invalid value (32767) [ 88.767433][ T6192] bond1: option resend_igmp: allowed values 0 - 255 [ 88.777245][ T6192] bond1 (unregistering): Released all slaves [ 88.814469][ T6205] __nla_validate_parse: 15 callbacks suppressed [ 88.814487][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 88.996305][ T6208] netlink: 36 bytes leftover after parsing attributes in process `syz.1.73'. [ 89.084816][ T6213] netlink: 36 bytes leftover after parsing attributes in process `syz.1.75'. [ 89.112207][ T6193] Set syz1 is full, maxelem 6117 reached [ 89.323861][ T6224] Zero length message leads to an empty skb [ 89.399509][ T6229] bridge_slave_0: left allmulticast mode [ 89.411320][ T6229] bridge_slave_0: left promiscuous mode [ 89.423108][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.461072][ T6229] bridge_slave_1: left allmulticast mode [ 89.471657][ T6229] bridge_slave_1: left promiscuous mode [ 89.483327][ T6237] netlink: 'syz.0.83': attribute type 8 has an invalid length. [ 89.493114][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.507571][ T6229] bond0: (slave bond_slave_0): Releasing backup interface [ 89.523317][ T6229] bond0: (slave bond_slave_1): Releasing backup interface [ 89.549206][ T6229] team0: Port device team_slave_0 removed [ 89.566884][ T6229] team0: Port device team_slave_1 removed [ 89.574131][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.584795][ T6229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.595157][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.603043][ T6229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.611786][ T6229] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 89.630133][ T24] wg1 speed is unknown, defaulting to 1000 [ 89.722882][ T6236] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 89.848476][ T6249] netlink: 36 bytes leftover after parsing attributes in process `syz.2.87'. [ 90.056922][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.89'. [ 90.253162][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.96'. [ 90.324171][ T6280] netlink: 232 bytes leftover after parsing attributes in process `syz.4.97'. [ 90.344054][ T6280] netlink: 'syz.4.97': attribute type 11 has an invalid length. [ 90.352761][ T6284] netlink: 'syz.2.99': attribute type 11 has an invalid length. [ 90.362858][ T6284] netlink: 224 bytes leftover after parsing attributes in process `syz.2.99'. [ 90.366280][ T6280] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 90.375507][ T6282] netlink: 'syz.2.99': attribute type 11 has an invalid length. [ 90.395248][ T6282] netlink: 224 bytes leftover after parsing attributes in process `syz.2.99'. [ 90.856004][ T6301] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 90.917629][ T6305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.106'. [ 90.960233][ T6308] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 3, id = 0 [ 91.847250][ T6328] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.120552][ T6352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.181396][ T6355] bond0: entered allmulticast mode [ 92.187787][ T6355] bond_slave_0: entered allmulticast mode [ 92.194476][ T6355] bond_slave_1: entered allmulticast mode [ 92.213957][ T6358] netlink: 'syz.3.123': attribute type 83 has an invalid length. [ 92.760046][ T6381] can: request_module (can-proto-0) failed. [ 92.971187][ T6400] netlink: 'syz.2.133': attribute type 12 has an invalid length. [ 93.151836][ T6411] nbd: device at index 4 is going down [ 93.883633][ T6453] __nla_validate_parse: 12 callbacks suppressed [ 93.883651][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'. [ 93.996622][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 94.190357][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.156'. [ 94.199423][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.156'. [ 94.219980][ T6471] netlink: 'syz.1.155': attribute type 10 has an invalid length. [ 94.238719][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.256162][ T6471] bridge_slave_1: left allmulticast mode [ 94.264117][ T6471] bridge_slave_1: left promiscuous mode [ 94.270098][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.283718][ T6471] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 94.296050][ T6479] openvswitch: netlink: Key 6 has unexpected len 160 expected 2 [ 94.309134][ T6475] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 94.516156][ T6480] syzkaller1: entered promiscuous mode [ 94.525033][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 94.529135][ T6480] syzkaller1: entered allmulticast mode [ 94.861599][ T6518] gre0: entered allmulticast mode [ 94.906454][ T6522] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.137313][ T6533] netlink: 'syz.4.178': attribute type 1 has an invalid length. [ 95.191543][ T6533] bond1: entered promiscuous mode [ 95.197712][ T6533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.776037][ T6579] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 95.887352][ T6591] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.248902][ T6609] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 96.276332][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 96.320272][ T6612] vlan2: entered allmulticast mode [ 96.325463][ T6612] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 96.455998][ T6623] delete_channel: no stack [ 96.494490][ T6622] delete_channel: no stack [ 96.580709][ T6631] netlink: 32 bytes leftover after parsing attributes in process `syz.4.204'. [ 96.631260][ T6633] netlink: 72 bytes leftover after parsing attributes in process `syz.3.205'. [ 96.669970][ T6636] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.702187][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 96.741230][ T6636] bridge_slave_0: left allmulticast mode [ 96.747148][ T6636] bridge_slave_0: left promiscuous mode [ 96.772102][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.772942][ T6642] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 96.815654][ T6642] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 96.843425][ T6642] block nbd0: Unsupported socket: should be TCP or UNIX. [ 96.876292][ T6645] netlink: 44 bytes leftover after parsing attributes in process `syz.4.209'. [ 97.081357][ T6656] netlink: 'syz.4.213': attribute type 15 has an invalid length. [ 97.512914][ T6702] netlink: 'syz.1.219': attribute type 1 has an invalid length. [ 97.862418][ T6715] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.564298][ T6737] netlink: 'syz.0.224': attribute type 21 has an invalid length. [ 99.636998][ T6753] __nla_validate_parse: 4 callbacks suppressed [ 99.637018][ T6753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.230'. [ 99.874585][ T6761] tipc: Started in network mode [ 99.879737][ T6763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 99.880393][ T6763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 99.888048][ T6761] tipc: Node identity , cluster identity 4711 [ 99.902396][ T6761] tipc: Failed to obtain node identity [ 99.902579][ T6763] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 99.908174][ T6761] tipc: Enabling of bearer rejected, failed to enable media [ 99.933548][ T6763] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 100.170216][ T6783] netlink: 256 bytes leftover after parsing attributes in process `syz.2.240'. [ 100.199425][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 100.213366][ T6785] netlink: 256 bytes leftover after parsing attributes in process `syz.2.240'. [ 100.414106][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.246'. [ 100.422803][ T6801] netlink: 'syz.2.244': attribute type 1 has an invalid length. [ 100.568089][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'. [ 100.707000][ T6817] netlink: 'syz.4.252': attribute type 25 has an invalid length. [ 100.953331][ T6831] netlink: 'syz.2.257': attribute type 11 has an invalid length. [ 101.185478][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.262'. [ 101.197647][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.262'. [ 101.286752][ T6849] netlink: 'syz.4.267': attribute type 4 has an invalid length. [ 101.426679][ T6861] netlink: 112 bytes leftover after parsing attributes in process `syz.2.270'. [ 101.644871][ T6872] tls_set_device_offload: netdev not found [ 101.711533][ T6879] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 101.819418][ T6877] syz.0.277 (6877) used greatest stack depth: 15864 bytes left [ 101.857315][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 102.058268][ T6893] tipc: Started in network mode [ 102.063949][ T6893] tipc: Node identity a6736f54c84a, cluster identity 4711 [ 102.072178][ T6893] tipc: Enabled bearer , priority 0 [ 102.080146][ T6893] syzkaller0: entered promiscuous mode [ 102.085841][ T6893] syzkaller0: entered allmulticast mode [ 102.127486][ T6893] tipc: Resetting bearer [ 102.148109][ T6892] tipc: Resetting bearer [ 102.190329][ T6892] tipc: Disabling bearer [ 102.427217][ T6906] netlink: 'syz.1.288': attribute type 10 has an invalid length. [ 102.443863][ T6906] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 102.497476][ T6908] warning: `syz.0.289' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.501488][ T6905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.670962][ T6916] netlink: 'syz.3.291': attribute type 4 has an invalid length. [ 102.739435][ T6922] bridge0: port 1(syz_tun) entered blocking state [ 102.767039][ T6922] bridge0: port 1(syz_tun) entered disabled state [ 102.787414][ T6922] syz_tun: entered allmulticast mode [ 102.806656][ T6916] netlink: 'syz.3.291': attribute type 10 has an invalid length. [ 102.815108][ T6922] syz_tun: entered promiscuous mode [ 103.037247][ T6926] syzkaller0: entered promiscuous mode [ 103.044030][ T6926] syzkaller0: entered allmulticast mode [ 103.141565][ T6942] netlink: 'syz.4.299': attribute type 4 has an invalid length. [ 104.323617][ T6970] erspan0: entered allmulticast mode [ 104.452417][ T1145] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.470529][ T1145] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.522305][ T1145] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.543716][ T1145] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.647960][ T6992] __nla_validate_parse: 12 callbacks suppressed [ 104.647980][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 104.701969][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.734077][ T6998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.315'. [ 104.769736][ T6998] netlink: 'syz.1.315': attribute type 7 has an invalid length. [ 104.795171][ T6992] bridge_slave_1 (unregistering): left allmulticast mode [ 104.801995][ T6998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.315'. [ 104.821598][ T6992] bridge_slave_1 (unregistering): left promiscuous mode [ 104.834575][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.069679][ T7022] netlink: 44 bytes leftover after parsing attributes in process `syz.1.322'. [ 105.415436][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 105.685229][ T7065] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 105.712731][ T7066] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 105.770981][ T7069] nbd: must specify a device to reconfigure [ 105.788943][ T7071] nbd: must specify a device to reconfigure [ 105.819439][ T7073] geneve2: entered promiscuous mode [ 105.825705][ T7073] geneve2: entered allmulticast mode [ 105.851801][ T3522] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 105.879727][ T3522] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 105.908479][ T3522] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 106.001106][ T3522] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 106.087595][ T7091] netlink: 'syz.1.344': attribute type 1 has an invalid length. [ 106.128329][ T7091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.193891][ T7096] tipc: Started in network mode [ 106.199769][ T7096] tipc: Node identity ba80aca15ee5, cluster identity 4711 [ 106.209329][ T7096] tipc: Enabled bearer , priority 0 [ 106.227122][ T7096] netlink: 'syz.3.345': attribute type 1 has an invalid length. [ 106.253714][ T7096] netlink: 220 bytes leftover after parsing attributes in process `syz.3.345'. [ 106.270983][ T7100] bond1: (slave gretap1): making interface the new active one [ 106.282891][ T7100] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 106.293119][ T7095] policy can only be matched on NF_INET_PRE_ROUTING [ 106.293199][ T7095] unable to load match [ 106.320053][ T7096] syzkaller0: entered promiscuous mode [ 106.327180][ T7096] syzkaller0: entered allmulticast mode [ 106.333299][ T7095] netlink: 788 bytes leftover after parsing attributes in process `syz.2.346'. [ 106.417459][ T7096] tipc: Resetting bearer [ 106.487604][ T7092] tipc: Resetting bearer [ 106.581851][ T7092] tipc: Disabling bearer [ 106.742298][ T906] IPVS: starting estimator thread 0... [ 106.750908][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 106.839866][ T7129] IPVS: using max 30 ests per chain, 72000 per kthread [ 106.868137][ T7132] veth3: entered promiscuous mode [ 107.455018][ T7175] netlink: 48 bytes leftover after parsing attributes in process `syz.3.370'. [ 107.575607][ T5919] IPVS: starting estimator thread 0... [ 107.680673][ T7183] IPVS: using max 30 ests per chain, 72000 per kthread [ 108.136363][ T7171] netlink: 'syz.1.369': attribute type 12 has an invalid length. [ 108.367614][ T7199] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 108.506164][ T7203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.376'. [ 108.741982][ T7213] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 108.810278][ T7228] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 108.867121][ T7213] team0: Port device dummy0 added [ 108.924022][ T7230] netlink: 'syz.4.385': attribute type 1 has an invalid length. [ 108.956993][ T7228] team0: Port device dummy0 removed [ 108.968805][ T7228] dummy0: entered allmulticast mode [ 108.980459][ T7228] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 109.288125][ T7245] netlink: 'syz.1.391': attribute type 1 has an invalid length. [ 109.306291][ T7245] netlink: 'syz.1.391': attribute type 3 has an invalid length. [ 109.346534][ T7245] delete_channel: no stack [ 109.412634][ T7247] Driver unsupported XDP return value 0 on prog (id 85) dev N/A, expect packet loss! [ 109.868848][ T7283] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 109.915238][ T7285] netlink: zone id is out of range [ 109.981336][ T7291] __nla_validate_parse: 3 callbacks suppressed [ 109.981354][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 109.989021][ T7285] netlink: set zone limit has 8 unknown bytes [ 110.067315][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.406'. [ 110.134435][ T7297] netlink: 32 bytes leftover after parsing attributes in process `syz.2.406'. [ 110.180149][ T7308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.408'. [ 110.209501][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 110.315979][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 110.334138][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.412'. [ 110.405897][ T7321] netlink: 32 bytes leftover after parsing attributes in process `syz.4.412'. [ 110.505799][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 110.528101][ T7336] netlink: 'syz.0.415': attribute type 1 has an invalid length. [ 110.541305][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.416'. [ 110.589052][ T7336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.881328][ T7341] tipc: Started in network mode [ 110.884210][ T7366] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 110.886235][ T7341] tipc: Node identity ae94f0cebaa4, cluster identity 4711 [ 110.905552][ T7341] tipc: Enabled bearer , priority 0 [ 110.961712][ T7341] syzkaller0: entered promiscuous mode [ 110.971140][ T7341] syzkaller0: entered allmulticast mode [ 110.987532][ T7341] tipc: Resetting bearer [ 110.999077][ T7339] tipc: Resetting bearer [ 111.030240][ T7339] tipc: Disabling bearer [ 111.065415][ T7371] netlink: 'syz.3.427': attribute type 29 has an invalid length. [ 111.088535][ T7371] netlink: 'syz.3.427': attribute type 29 has an invalid length. [ 111.216698][ T145] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.230570][ T3522] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.253283][ T3522] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.277244][ T3522] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.425196][ T30] audit: type=1800 audit(1759723082.942:2): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.435" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=358 res=0 errno=0 [ 112.002519][ T7433] dvmrp1: entered allmulticast mode [ 113.426120][ T7519] validate_nla: 6 callbacks suppressed [ 113.426141][ T7519] netlink: 'syz.0.471': attribute type 9 has an invalid length. [ 113.633628][ T7534] tipc: Enabled bearer , priority 0 [ 113.648193][ T7534] syzkaller0: entered promiscuous mode [ 113.657442][ T7534] syzkaller0: entered allmulticast mode [ 113.725404][ T7534] tipc: Resetting bearer [ 113.759870][ T7533] tipc: Resetting bearer [ 113.786712][ T7533] tipc: Disabling bearer [ 113.814969][ T7547] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 114.986020][ T7589] macsec0: mtu less than device minimum [ 115.230489][ T7599] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 115.262336][ T7597] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 115.363475][ T7602] __nla_validate_parse: 20 callbacks suppressed [ 115.363496][ T7602] netlink: 36 bytes leftover after parsing attributes in process `syz.1.496'. [ 115.424790][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.496'. [ 115.527407][ T7614] netlink: 116 bytes leftover after parsing attributes in process `syz.3.500'. [ 132.863004][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.869368][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.995296][ T7647] tipc: Failed to remove unknown binding: 66,1,1/0:2991456968/2991456970 [ 166.132295][ T7651] sctp: [Deprecated]: syz.4.509 (pid 7651) Use of int in max_burst socket option deprecated. [ 166.132295][ T7651] Use struct sctp_assoc_value instead [ 166.186866][ T7657] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 166.489820][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 166.492328][ T7678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.503502][ T7679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.515'. [ 166.554519][ T7679] netlink: 'syz.1.515': attribute type 64 has an invalid length. [ 166.560048][ T7677] syzkaller0: entered promiscuous mode [ 166.562568][ T7679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.515'. [ 166.567731][ T7677] syzkaller0: entered allmulticast mode [ 166.625394][ T7684] netlink: 96 bytes leftover after parsing attributes in process `syz.3.518'. [ 166.655450][ T7679] netlink: 'syz.1.515': attribute type 64 has an invalid length. [ 166.668537][ T7679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.515'. [ 166.961684][ T7663] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 167.003851][ T7702] netlink: 'syz.1.527': attribute type 2 has an invalid length. [ 167.007586][ T7705] sock: sock_set_timeout: `syz.3.528' (pid 7705) tries to set negative timeout [ 167.048010][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 167.155545][ T7717] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.182359][ T7710] tipc: Enabled bearer , priority 0 [ 167.223278][ T7710] syzkaller0: entered promiscuous mode [ 167.240604][ T7710] syzkaller0: entered allmulticast mode [ 167.249990][ T7723] netlink: 44 bytes leftover after parsing attributes in process `syz.2.532'. [ 167.263919][ T7725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.533'. [ 167.267177][ T13] syzkaller0: tun_net_xmit 70 [ 167.298411][ T7709] tipc: Resetting bearer [ 167.326537][ T7703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.346816][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'. [ 167.351599][ T7709] tipc: Disabling bearer [ 167.724132][ T7754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.542'. [ 167.833848][ T7760] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 168.338651][ T7788] wg1 speed is unknown, defaulting to 1000 [ 168.351118][ T7802] netlink: zone id is out of range [ 168.356344][ T7802] netlink: zone id is out of range [ 168.361775][ T7802] netlink: zone id is out of range [ 168.367508][ T7802] netlink: zone id is out of range [ 168.410879][ T7807] netlink: 'syz.0.553': attribute type 58 has an invalid length. [ 168.444260][ T7802] netlink: zone id is out of range [ 168.459671][ T7802] netlink: zone id is out of range [ 168.474602][ T7802] netlink: zone id is out of range [ 168.482092][ T7802] netlink: zone id is out of range [ 168.644504][ T7810] netlink: 'syz.2.552': attribute type 1 has an invalid length. [ 168.663431][ T7802] netlink: 'syz.2.552': attribute type 12 has an invalid length. [ 168.669655][ T7810] nbd: error processing sock list [ 168.686329][ T7810] block nbd0: shutting down sockets [ 168.742953][ T7802] netlink: 'syz.2.552': attribute type 12 has an invalid length. [ 168.746791][ T145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.810673][ T145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.835697][ T145] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.022554][ T145] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.376482][ T7862] nbd: must specify at least one socket [ 169.647842][ T7873] tipc: Started in network mode [ 169.653067][ T7873] tipc: Node identity 8a93a0af4546, cluster identity 4711 [ 169.665016][ T7873] tipc: Enabled bearer , priority 0 [ 169.687377][ T7873] syzkaller0: entered promiscuous mode [ 169.713758][ T7873] syzkaller0: entered allmulticast mode [ 169.765545][ T7873] tipc: Resetting bearer [ 169.786193][ T7871] tipc: Resetting bearer [ 169.826610][ T7871] tipc: Disabling bearer [ 169.986604][ T7901] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 170.004420][ T7901] syzkaller0: Linktype set failed because interface is up [ 170.014620][ T7906] netlink: 'syz.1.583': attribute type 1 has an invalid length. [ 170.023413][ T7906] netlink: 'syz.1.583': attribute type 1 has an invalid length. [ 170.031753][ T7906] netlink: 'syz.1.583': attribute type 4 has an invalid length. [ 170.039656][ T7906] NCSI netlink: No device for ifindex 830110067 [ 171.454201][ T7921] pimreg: entered allmulticast mode [ 171.549029][ T7942] __nla_validate_parse: 13 callbacks suppressed [ 171.549048][ T7942] netlink: 108 bytes leftover after parsing attributes in process `syz.3.594'. [ 171.581693][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 171.797911][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'. [ 171.887027][ T10] IPVS: starting estimator thread 0... [ 172.013423][ T7968] IPVS: using max 26 ests per chain, 62400 per kthread [ 172.182468][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 172.218934][ T7985] net_ratelimit: 14 callbacks suppressed [ 172.218950][ T7985] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 172.426871][ T7994] netlink: 64 bytes leftover after parsing attributes in process `syz.3.608'. [ 172.462264][ T8000] nftables ruleset with unbound chain [ 172.551358][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 172.824086][ T8022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.617'. [ 172.941585][ T8030] netlink: 72 bytes leftover after parsing attributes in process `syz.0.618'. [ 173.011819][ T8035] netlink: 'syz.4.619': attribute type 10 has an invalid length. [ 173.079761][ T8035] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.267284][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.626'. [ 173.529223][ T8057] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.663426][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.635'. [ 173.673989][ T8073] batman_adv: batadv0: Adding interface: dummy0 [ 173.681750][ T8073] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.710501][ T8073] batman_adv: batadv0: Interface activated: dummy0 [ 173.810330][ T8087] IPv4: Oversized IP packet from 127.202.26.0 [ 173.855183][ T8089] bond3: option miimon: invalid value (18446744073709551585) [ 173.864739][ T8089] bond3: option miimon: allowed values 0 - 2147483647 [ 173.879151][ T8089] bond3 (unregistering): Released all slaves [ 173.925059][ T8087] batadv0: mtu less than device minimum [ 173.935954][ T8087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.948342][ T8087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.960361][ T8087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.972434][ T8087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.984452][ T8087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 173.996427][ T8087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.154490][ T8105] bond0: entered promiscuous mode [ 174.159621][ T8105] bond_slave_0: entered promiscuous mode [ 174.165499][ T8105] bond_slave_1: entered promiscuous mode [ 174.171444][ T8105] dummy0: entered promiscuous mode [ 174.177532][ T8105] bond0: left allmulticast mode [ 174.183959][ T8105] bond_slave_0: left allmulticast mode [ 174.189447][ T8105] bond_slave_1: left allmulticast mode [ 174.195086][ T8105] dummy0: left allmulticast mode [ 174.221736][ T8113] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 174.232268][ T8113] tipc: Enabled bearer , priority 10 [ 175.016745][ T8174] netlink: 'syz.4.660': attribute type 28 has an invalid length. [ 175.032176][ T8174] netlink: 'syz.4.660': attribute type 3 has an invalid length. [ 175.350841][ T9] tipc: Node number set to 1849257812 [ 175.530364][ T8201] sctp: [Deprecated]: syz.2.668 (pid 8201) Use of int in maxseg socket option. [ 175.530364][ T8201] Use struct sctp_assoc_value instead [ 175.619829][ T8208] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 175.767076][ T8215] netlink: 'syz.4.673': attribute type 2 has an invalid length. [ 175.793135][ T8217] netlink: 'syz.0.675': attribute type 1 has an invalid length. [ 175.844436][ T8219] syzkaller1: entered promiscuous mode [ 175.863483][ T8219] syzkaller1: entered allmulticast mode [ 175.948366][ T8220] macvlan2: entered promiscuous mode [ 175.954931][ T8220] team_slave_0: entered promiscuous mode [ 175.960914][ T8220] team_slave_1: entered promiscuous mode [ 175.967754][ T8220] team0: entered promiscuous mode [ 175.978888][ T8220] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.990044][ T8220] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 176.116531][ T8240] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 176.127875][ T8240] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 176.592340][ T8275] __nla_validate_parse: 50 callbacks suppressed [ 176.592361][ T8275] netlink: 148 bytes leftover after parsing attributes in process `syz.4.690'. [ 176.611571][ T8282] netlink: 48 bytes leftover after parsing attributes in process `syz.3.692'. [ 176.799768][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 176.830315][ T8292] netlink: 'syz.2.694': attribute type 1 has an invalid length. [ 176.838100][ T8292] netlink: 'syz.2.694': attribute type 2 has an invalid length. [ 176.854281][ T8293] syzkaller1: entered promiscuous mode [ 176.860849][ T8293] syzkaller1: entered allmulticast mode [ 176.885057][ T8293] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 177.155927][ T8319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.703'. [ 177.171982][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 177.192791][ T8323] veth0_macvtap: left promiscuous mode [ 177.328740][ T8333] syz_tun: left allmulticast mode [ 177.333957][ T8333] syz_tun: left promiscuous mode [ 177.339351][ T8333] bridge0: port 1(syz_tun) entered disabled state [ 177.367217][ T8333] bond0: (slave bond_slave_0): Releasing backup interface [ 177.387884][ T8333] bond0: (slave bond_slave_1): Releasing backup interface [ 177.417117][ T8333] team0: Port device team_slave_0 removed [ 177.437094][ T8333] team0: Port device team_slave_1 removed [ 177.460823][ T8333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.478779][ T8333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.492407][ T8333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.503571][ T8333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.515736][ T8333] net_ratelimit: 13 callbacks suppressed [ 177.515750][ T8333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 177.550516][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.710'. [ 177.568308][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 177.600088][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 177.645226][ T8346] netlink: 'syz.2.711': attribute type 83 has an invalid length. [ 177.842370][ T8357] pim6reg1: entered promiscuous mode [ 177.847722][ T8357] pim6reg1: entered allmulticast mode [ 178.321483][ T8389] netlink: 'syz.1.726': attribute type 2 has an invalid length. [ 178.559270][ T8409] netlink: 48 bytes leftover after parsing attributes in process `syz.4.730'. [ 178.573829][ T8409] netlink: 224 bytes leftover after parsing attributes in process `syz.4.730'. [ 178.760070][ T8424] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 178.838583][ T8433] netlink: 'syz.3.736': attribute type 12 has an invalid length. [ 179.044041][ T8440] batman_adv: batadv0: Adding interface: dummy0 [ 179.066317][ T8440] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.119326][ T8444] netlink: 'syz.3.740': attribute type 10 has an invalid length. [ 179.129223][ T8440] batman_adv: batadv0: Interface activated: dummy0 [ 179.173617][ T8445] batadv0: mtu less than device minimum [ 179.195468][ T8445] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.207920][ T8445] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.220055][ T8445] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.232086][ T8445] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.244177][ T8445] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.256367][ T8445] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.268837][ T8445] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.280836][ T8445] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.330622][ T8444] veth0_virt_wifi: entered allmulticast mode [ 179.344944][ T8444] team0: Port device veth0_virt_wifi added [ 179.743155][ T8491] netlink: 'syz.2.754': attribute type 10 has an invalid length. [ 179.766054][ T8491] bond0: (slave dummy0): Releasing backup interface [ 179.777012][ T8491] dummy0: left promiscuous mode [ 179.791746][ T8491] dummy0: entered promiscuous mode [ 179.799945][ T8491] team0: Port device dummy0 added [ 179.892950][ T8494] raw_sendmsg: syz.0.755 forgot to set AF_INET. Fix it! [ 179.903190][ T8501] netem: change failed [ 180.166184][ T8516] pim6reg: entered allmulticast mode [ 180.194467][ T8518] team0: Cannot enslave team device to itself [ 180.454723][ T8543] netlink: 'syz.3.768': attribute type 4 has an invalid length. [ 181.295952][ T8574] pimreg: left allmulticast mode [ 181.478574][ T8590] netlink: 'syz.2.783': attribute type 2 has an invalid length. [ 181.607221][ T8599] netlink: 'syz.3.785': attribute type 21 has an invalid length. [ 181.615230][ T8599] __nla_validate_parse: 13 callbacks suppressed [ 181.615250][ T8599] netlink: 128 bytes leftover after parsing attributes in process `syz.3.785'. [ 181.642211][ T8599] netlink: 'syz.3.785': attribute type 5 has an invalid length. [ 181.643016][ T8601] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 181.650297][ T8599] netlink: 3 bytes leftover after parsing attributes in process `syz.3.785'. [ 181.709867][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 181.837516][ T8617] netlink: 128 bytes leftover after parsing attributes in process `syz.4.788'. [ 182.701867][ T8628] netlink: 256 bytes leftover after parsing attributes in process `syz.0.791'. [ 182.777095][ T8645] netlink: 120 bytes leftover after parsing attributes in process `syz.1.795'. [ 182.842215][ T8648] hsr0 speed is unknown, defaulting to 1000 [ 182.848323][ T8648] hsr0 speed is unknown, defaulting to 1000 [ 182.878612][ T8656] dummy0: entered promiscuous mode [ 182.900770][ T8648] hsr0 speed is unknown, defaulting to 1000 [ 182.963150][ T8648] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 182.995976][ T8648] hsr0 speed is unknown, defaulting to 1000 [ 183.004207][ T8648] hsr0 speed is unknown, defaulting to 1000 [ 183.013458][ T8648] hsr0 speed is unknown, defaulting to 1000 [ 183.021544][ T8648] hsr0 speed is unknown, defaulting to 1000 [ 183.051553][ T8648] hsr0 speed is unknown, defaulting to 1000 [ 183.067570][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 183.108120][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 183.129086][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 183.172891][ T8672] veth5: entered promiscuous mode [ 183.177940][ T8672] veth5: entered allmulticast mode [ 183.184668][ T145] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.201794][ T3478] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.215144][ T3478] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.224886][ T3478] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.304194][ T8686] ip6gre0: Master is either lo or non-ether device [ 183.831168][ T8696] netlink: 52 bytes leftover after parsing attributes in process `syz.4.810'. [ 183.921463][ T5846] block nbd0: Receive control failed (result -32) [ 184.474488][ T8754] netlink: 'syz.1.826': attribute type 1 has an invalid length. [ 184.578295][ T8764] netlink: 'syz.1.826': attribute type 3 has an invalid length. [ 184.646621][ T8754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.685260][ T8768] gretap0: entered promiscuous mode [ 184.693999][ T8768] gretap0: left promiscuous mode [ 184.847072][ T8785] netlink: 'syz.0.836': attribute type 21 has an invalid length. [ 184.880738][ T8785] netlink: 'syz.0.836': attribute type 4 has an invalid length. [ 184.897108][ T8785] netlink: 'syz.0.836': attribute type 5 has an invalid length. [ 184.899309][ T8787] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 185.025029][ T8799] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 185.145693][ T8802] tipc: Enabled bearer , priority 0 [ 185.164041][ T8805] net_ratelimit: 13 callbacks suppressed [ 185.164062][ T8805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.202764][ T8802] syzkaller0: entered promiscuous mode [ 185.209143][ T8802] syzkaller0: entered allmulticast mode [ 185.250599][ T8810] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 185.328112][ T8818] netlink: 'syz.1.841': attribute type 24 has an invalid length. [ 185.476618][ T8809] team0 (unregistering): Port device team_slave_0 removed [ 185.505554][ T8809] team0 (unregistering): Port device team_slave_1 removed [ 185.729378][ T8820] tipc: Resetting bearer [ 185.775022][ T8801] tipc: Resetting bearer [ 185.870681][ T8801] tipc: Disabling bearer [ 185.903596][ T8837] netlink: 'syz.0.850': attribute type 29 has an invalid length. [ 186.057201][ T8843] syzkaller1: entered promiscuous mode [ 186.064596][ T8843] syzkaller1: entered allmulticast mode [ 186.123599][ T8843] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.199189][ T8843] bridge_slave_1: left allmulticast mode [ 186.209679][ T8843] bridge_slave_1: left promiscuous mode [ 186.217982][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.281830][ T8843] bridge_slave_0: left allmulticast mode [ 186.298376][ T8843] bridge_slave_0: left promiscuous mode [ 186.317683][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.574794][ T8855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 186.930231][ T8902] __nla_validate_parse: 11 callbacks suppressed [ 186.930250][ T8902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.869'. [ 187.067206][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 187.243698][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'. [ 187.322381][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 187.583219][ T8923] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.784850][ T8946] bond4: entered promiscuous mode [ 187.791809][ T8946] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.917706][ T8946] bond4: (slave bridge2): making interface the new active one [ 187.925831][ T8946] bridge2: entered promiscuous mode [ 187.934923][ T8946] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 188.122603][ T8968] netlink: 244 bytes leftover after parsing attributes in process `syz.0.888'. [ 188.134748][ T8970] sctp: [Deprecated]: syz.2.890 (pid 8970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.134748][ T8970] Use struct sctp_sack_info instead [ 188.302955][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 189.281839][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 189.308276][ T9020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.902'. [ 189.461255][ T9033] syzkaller1: entered promiscuous mode [ 189.476790][ T9033] syzkaller1: entered allmulticast mode [ 189.509185][ T9036] netlink: 'syz.4.909': attribute type 11 has an invalid length. [ 189.520054][ T9036] netlink: 224 bytes leftover after parsing attributes in process `syz.4.909'. [ 189.722150][ T9051] validate_nla: 7 callbacks suppressed [ 189.722170][ T9051] netlink: 'syz.0.915': attribute type 1 has an invalid length. [ 189.748858][ T9051] netlink: 224 bytes leftover after parsing attributes in process `syz.0.915'. [ 189.766012][ T9055] netlink: 32 bytes leftover after parsing attributes in process `syz.4.917'. [ 190.156650][ T9085] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 190.209633][ T9089] IPVS: set_ctl: invalid protocol: 0 172.20.20.25:20000 [ 190.269873][ T9085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.355759][ T9085] veth3: entered promiscuous mode [ 190.424338][ T9085] bond3: (slave veth3): Enslaving as an active interface with a down link [ 190.566881][ T9091] vlan2: entered allmulticast mode [ 190.577913][ T9091] bond3: entered allmulticast mode [ 190.586461][ T9110] netlink: 'syz.4.933': attribute type 13 has an invalid length. [ 190.603842][ T9091] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 190.732230][ T9117] netlink: 'syz.4.933': attribute type 39 has an invalid length. [ 190.785821][ T9123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.817698][ T9125] netlink: 'syz.3.938': attribute type 1 has an invalid length. [ 190.991812][ T9137] netlink: 'syz.1.942': attribute type 1 has an invalid length. [ 191.050155][ T9139] syzkaller1: entered promiscuous mode [ 191.056055][ T9139] syzkaller1: entered allmulticast mode [ 191.077168][ T9137] veth7: entered promiscuous mode [ 191.086516][ T9137] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 191.260165][ T9155] netlink: 'syz.1.946': attribute type 15 has an invalid length. [ 191.607432][ T9176] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 191.649103][ T9176] vlan0: entered allmulticast mode [ 191.853802][ T9191] bond3: Removing last arp target with arp_interval on [ 192.296175][ T9229] __nla_validate_parse: 17 callbacks suppressed [ 192.296204][ T9229] netlink: 224 bytes leftover after parsing attributes in process `syz.1.965'. [ 192.323977][ T9230] tipc: Enabled bearer , priority 12 [ 192.443610][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'. [ 192.640992][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 192.650439][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 192.659197][ T9249] erspan0: entered promiscuous mode [ 192.978661][ T9266] bond5 (unregistering): Released all slaves [ 193.272357][ T9294] netlink: 'syz.2.983': attribute type 1 has an invalid length. [ 193.286266][ T9294] netlink: 224 bytes leftover after parsing attributes in process `syz.2.983'. [ 193.304169][ T9294] !: renamed from bond_slave_0 (while UP) [ 193.446367][ T906] tipc: Node number set to 338751694 [ 193.453972][ T9314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.987'. [ 193.653728][ T9326] netlink: 'syz.1.994': attribute type 24 has an invalid length. [ 193.664724][ T9326] netlink: 52 bytes leftover after parsing attributes in process `syz.1.994'. [ 193.765902][ T24] hid-generic 0005:04F3:0009.0001: unknown main item tag 0x0 [ 193.806020][ T24] hid-generic 0005:04F3:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 193.831594][ T9341] netlink: 'syz.3.998': attribute type 1 has an invalid length. [ 193.839328][ T9341] netlink: 220 bytes leftover after parsing attributes in process `syz.3.998'. [ 193.907853][ T9346] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1000'. [ 194.054045][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'. [ 194.148497][ T9361] trusted_key: syz.1.1004 sent an empty control message without MSG_MORE. [ 194.306087][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.958510][ T9400] openvswitch: netlink: IP tunnel dst address not specified [ 195.150353][ T3478] tipc: Subscription rejected, illegal request [ 195.662529][ T9464] validate_nla: 1 callbacks suppressed [ 195.662547][ T9464] netlink: 'syz.1.1042': attribute type 1 has an invalid length. [ 195.754644][ T9470] bridge0: port 1(syz_tun) entered blocking state [ 195.769767][ T9470] bridge0: port 1(syz_tun) entered disabled state [ 195.776378][ T9470] syz_tun: entered allmulticast mode [ 195.783886][ T9470] syz_tun: entered promiscuous mode [ 195.790534][ T9470] bridge0: port 1(syz_tun) entered blocking state [ 195.797632][ T9470] bridge0: port 1(syz_tun) entered forwarding state [ 196.139877][ T5846] Bluetooth: hci4: command tx timeout [ 196.181265][ T9495] macvtap1: entered promiscuous mode [ 196.190240][ T9495] vlan0: entered promiscuous mode [ 196.200313][ T9495] macvtap1: entered allmulticast mode [ 196.205889][ T9495] vlan0: entered allmulticast mode [ 196.220743][ T9495] veth0_vlan: entered allmulticast mode [ 196.305008][ T9503] macvtap2: entered promiscuous mode [ 196.312815][ T9503] macvtap2: entered allmulticast mode [ 196.526611][ T9517] tipc: New replicast peer: 255.255.255.255 [ 196.544025][ T9517] tipc: Enabled bearer , priority 10 [ 196.918034][ T9555] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 197.087048][ T9546] tipc: Enabled bearer , priority 0 [ 197.118790][ T9563] syzkaller0: entered promiscuous mode [ 197.134208][ T9563] syzkaller0: entered allmulticast mode [ 197.187063][ T9546] tipc: Resetting bearer [ 197.210387][ T9545] tipc: Resetting bearer [ 197.235409][ T9545] tipc: Disabling bearer [ 197.486531][ T9579] bond1: left promiscuous mode [ 197.510472][ T9579] veth3: left promiscuous mode [ 197.521424][ T9579] veth5: left promiscuous mode [ 197.659779][ T906] tipc: Node number set to 3831868577 [ 197.670414][ T9597] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 198.065759][ T9618] __nla_validate_parse: 11 callbacks suppressed [ 198.065780][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 198.108704][ T9623] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1081'. [ 198.501553][ T9638] bridge3: entered allmulticast mode [ 198.655303][ T9650] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 198.661362][ T9649] tipc: Enabled bearer , priority 0 [ 198.674794][ T9646] can: request_module (can-proto-0) failed. [ 198.732342][ T9646] ipvlan0: entered promiscuous mode [ 198.744296][ T9662] Bluetooth: MGMT ver 1.23 [ 198.761817][ T9646] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 198.778418][ T9615] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.791371][ T9646] bond6: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 198.805440][ T9646] bond6: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 198.825606][ T9650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1088'. [ 198.921529][ T9656] tipc: Disabling bearer [ 198.925355][ T30] audit: type=1107 audit(1759723170.442:3): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 198.953139][ T9650] 8021q: adding VLAN 0 to HW filter on device bond6 [ 199.138122][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 199.171188][ T9676] tc_dump_action: action bad kind [ 199.501885][ T9705] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 199.507046][ T9698] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.555121][ T9698] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 199.569669][ T9703] Bluetooth: MGMT ver 1.23 [ 199.574346][ T9703] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 199.574729][ T9714] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1109'. [ 199.603662][ T9712] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1109'. [ 199.617059][ T9714] 0{X: renamed from gretap0 (while UP) [ 199.632523][ T9713] netlink: 'syz.0.1109': attribute type 1 has an invalid length. [ 199.647932][ T9714] 0{X: entered allmulticast mode [ 199.661570][ T9714] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 199.707307][ T9712] 0{X: entered promiscuous mode [ 199.716057][ T9712] 0{X: left allmulticast mode [ 199.755258][ T9722] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1111'. [ 199.764793][ T9722] ip6gretap0: entered promiscuous mode [ 200.087948][ T9750] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1118'. [ 200.121107][ T9750] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 200.134266][ T9750] bond6 (unregistering): Released all slaves [ 200.284083][ T9762] netlink: 'syz.0.1123': attribute type 10 has an invalid length. [ 200.286919][ T9759] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 200.304991][ T9759] bond4 (unregistering): Released all slaves [ 200.345365][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'. [ 200.352741][ T9762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.365945][ T9762] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 200.378173][ T9763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.388444][ T9763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.397663][ T9763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.405156][ T9763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.428692][ T9763] bond0: (slave batadv0): Releasing backup interface [ 200.514864][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1126'. [ 200.766946][ T9793] bridge0: port 1(vlan3) entered blocking state [ 200.774373][ T9793] bridge0: port 1(vlan3) entered disabled state [ 200.787995][ T9793] vlan3: entered allmulticast mode [ 200.793735][ T9793] bridge0: entered allmulticast mode [ 200.802270][ T9793] vlan3: left allmulticast mode [ 200.814370][ T9793] bridge0: left allmulticast mode [ 200.845089][ T9800] netlink: 'syz.0.1135': attribute type 1 has an invalid length. [ 201.111851][ T9810] tipc: Started in network mode [ 201.117970][ T9815] netlink: 'syz.3.1136': attribute type 1 has an invalid length. [ 201.130582][ T9810] tipc: Node identity 7202d675226, cluster identity 1 [ 201.137945][ T9810] tipc: Enabled bearer , priority 0 [ 201.154605][ T9810] syzkaller0: entered promiscuous mode [ 201.160976][ T9810] syzkaller0: entered allmulticast mode [ 201.420014][ T9770] Bluetooth: hci3: command 0x0c1a tx timeout [ 201.501635][ T9770] Bluetooth: hci2: command 0x0406 tx timeout [ 201.502268][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 202.259666][ T10] tipc: Node number set to 1348654709 [ 202.459718][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 203.499621][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.133988][ T9822] tipc: Resetting bearer [ 204.186684][ T9822] tipc: Disabling bearer [ 204.421386][ T9849] netlink: 'syz.2.1147': attribute type 21 has an invalid length. [ 204.430240][ T9849] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 204.506697][ T9850] bond7: entered promiscuous mode [ 204.520077][ T9850] bond7: entered allmulticast mode [ 204.526348][ T9850] 8021q: adding VLAN 0 to HW filter on device bond7 [ 204.673296][ T9859] team0: Port device dummy0 removed [ 204.909263][ T9879] netlink: 'syz.3.1156': attribute type 9 has an invalid length. [ 204.950885][ T9879] __nla_validate_parse: 2 callbacks suppressed [ 204.950905][ T9879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1156'. [ 204.990002][ T9881] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1157'. [ 205.240146][ T9900] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1161'. [ 205.281239][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 205.293274][ T9903] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 205.298936][ T9904] veth0: entered promiscuous mode [ 205.309792][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 205.378031][ T9908] syzkaller0: entered promiscuous mode [ 205.392390][ T9908] syzkaller0: entered allmulticast mode [ 205.403614][ T9908] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 205.505436][ T9920] syzkaller0: entered promiscuous mode [ 205.512031][ T9920] syzkaller0: entered allmulticast mode [ 205.805226][ T9939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1172'. [ 205.874291][ T9885] veth0: left promiscuous mode [ 205.913196][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 205.923655][ T9946] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1174'. [ 205.934783][ T9920] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 205.961160][ T9920] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1164'. [ 206.167107][ T9960] openvswitch: netlink: Actions may not be safe on all matching packets [ 206.178971][ T9959] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1177'. [ 206.257090][ T9965] netlink: 'syz.3.1179': attribute type 1 has an invalid length. [ 206.655618][ T9995] syz_tun: entered allmulticast mode [ 206.663072][ T9995] netlink: 'syz.0.1191': attribute type 10 has an invalid length. [ 206.671782][ T9995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.689031][ T9994] syz_tun: left allmulticast mode [ 206.793372][T10002] netlink: 'syz.0.1193': attribute type 10 has an invalid length. [ 206.907388][T10011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.089026][T10025] syzkaller1: entered promiscuous mode [ 207.108781][T10025] syzkaller1: entered allmulticast mode [ 207.284860][T10049] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 208.237563][T10075] netlink: 'syz.2.1215': attribute type 2 has an invalid length. [ 208.530222][T10098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.134847][T10137] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 209.296011][T10143] netlink: 'syz.1.1239': attribute type 1 has an invalid length. [ 209.463040][T10154] netlink: 'syz.1.1243': attribute type 10 has an invalid length. [ 209.487107][T10157] netlink: 'syz.1.1243': attribute type 10 has an invalid length. [ 209.583541][T10164] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 209.686152][T10170] netlink: 'syz.1.1247': attribute type 6 has an invalid length. [ 209.926297][T10182] tipc: Enabling of bearer rejected, failed to enable media [ 210.473607][T10203] __nla_validate_parse: 20 callbacks suppressed [ 210.473629][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 210.496017][T10206] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1262'. [ 210.508963][T10207] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.634054][T10210] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 210.670850][T10213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1265'. [ 210.692763][T10213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1265'. [ 210.803544][T10217] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1263'. [ 210.862356][T10219] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1267'. [ 210.922303][T10221] veth9: entered promiscuous mode [ 210.928948][T10221] veth9: entered allmulticast mode [ 211.074614][T10231] syzkaller0: entered promiscuous mode [ 211.080595][T10231] syzkaller0: entered allmulticast mode [ 211.099116][T10231] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 211.137999][T10231] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1273'. [ 211.164809][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 211.306255][T10249] validate_nla: 4 callbacks suppressed [ 211.306273][T10249] netlink: 'syz.0.1280': attribute type 21 has an invalid length. [ 211.321270][T10249] IPv6: NLM_F_CREATE should be specified when creating new route [ 211.330504][T10249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.338444][T10249] IPv6: NLM_F_CREATE should be set when creating new route [ 211.345854][T10249] IPv6: NLM_F_CREATE should be set when creating new route [ 211.353210][T10249] IPv6: NLM_F_CREATE should be set when creating new route [ 211.401538][T10249] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 211.465132][T10260] netlink: 'syz.2.1282': attribute type 1 has an invalid length. [ 211.673729][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 211.709071][T10274] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1287'. [ 212.008022][T10288] bond2: Unable to set down delay as MII monitoring is disabled [ 212.020828][T10288] bond2 (unregistering): Released all slaves [ 212.266053][T10307] nbd: device at index 2 is going down [ 212.646150][T10331] tipc: Enabled bearer , priority 0 [ 212.658516][T10331] syzkaller0: entered promiscuous mode [ 212.664895][T10331] syzkaller0: entered allmulticast mode [ 212.691091][T10331] tipc: Resetting bearer [ 212.752811][T10330] tipc: Resetting bearer [ 212.772035][T10330] tipc: Disabling bearer [ 213.021616][T10357] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 213.028433][T10357] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 213.677413][T10401] team0: Port device team_slave_1 removed [ 214.270676][T10455] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 214.594128][T10476] netlink: 'syz.2.1344': attribute type 11 has an invalid length. [ 214.672068][T10479] tipc: Enabled bearer , priority 0 [ 214.698450][T10479] syzkaller0: entered promiscuous mode [ 214.719989][T10479] syzkaller0: entered allmulticast mode [ 214.729191][T10479] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 214.750132][T10479] tipc: Resetting bearer [ 214.892820][T10479] team0 (unregistering): Port device team_slave_0 removed [ 214.935350][T10478] tipc: Resetting bearer [ 214.953203][T10478] tipc: Disabling bearer [ 215.076511][T10493] netlink: 'syz.4.1349': attribute type 1 has an invalid length. [ 215.115182][T10493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.138368][T10493] bond2: (slave gretap1): making interface the new active one [ 215.148643][T10493] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 215.330370][T10512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.481670][T10524] __nla_validate_parse: 20 callbacks suppressed [ 215.481689][T10524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1360'. [ 215.498767][T10524] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1360'. [ 215.573206][T10527] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 215.584174][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1362'. [ 215.687850][T10534] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1364'. [ 215.791841][T10548] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 215.808095][T10547] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 215.854622][T10551] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 215.899293][T10551] 8021q: adding VLAN 0 to HW filter on device bond9 [ 216.027853][T10557] netlink: 'syz.0.1372': attribute type 1 has an invalid length. [ 216.121958][T10550] veth13: entered promiscuous mode [ 216.139880][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1372'. [ 216.154196][T10550] bond9: (slave veth13): Enslaving as an active interface with an up link [ 216.164595][T10551] netlink: 'syz.1.1370': attribute type 11 has an invalid length. [ 216.199867][T10573] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1375'. [ 216.259266][T10567] bond6: (slave gretap0): making interface the new active one [ 216.277339][T10567] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 216.303918][T10571] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.317934][T10581] netlink: 'syz.4.1377': attribute type 27 has an invalid length. [ 216.327637][T10576] tipc: Enabled bearer , priority 0 [ 216.407970][T10576] tipc: Disabling bearer [ 216.494623][T10583] erspan0: left promiscuous mode [ 216.519743][T10583] erspan0: left allmulticast mode [ 216.577161][T10583] bond0: left promiscuous mode [ 216.582369][T10583] !: left promiscuous mode [ 216.592695][T10583] bond_slave_1: left promiscuous mode [ 216.651997][T10583] bond0: (slave 1!): Releasing backup interface [ 216.667494][T10583] bond0: (slave bond_slave_1): Releasing backup interface [ 216.685716][T10583] team_slave_0: left promiscuous mode [ 216.694769][T10583] team0: Port device team_slave_0 removed [ 216.720819][T10583] team_slave_1: left promiscuous mode [ 216.729243][T10583] team0: Port device team_slave_1 removed [ 216.745839][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.762159][T10583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.777898][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.794623][T10583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.815377][T10583] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.213192][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1388'. [ 217.232513][T10630] netlink: 'syz.2.1390': attribute type 10 has an invalid length. [ 217.258990][T10630] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1390'. [ 217.277206][T10633] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1388'. [ 217.462264][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'. [ 217.518155][T10641] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 217.549055][T10641] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 217.964319][T10670] geneve3: entered promiscuous mode [ 217.974771][T10670] geneve3: entered allmulticast mode [ 218.186028][T10691] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 218.411383][T10701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.456743][T10703] bridge3: entered promiscuous mode [ 218.465745][T10703] bridge3: entered allmulticast mode [ 218.586943][T10716] netlink: 'syz.2.1414': attribute type 4 has an invalid length. [ 218.685149][T10727] siw: device registration error -23 [ 219.309004][T10770] netlink: 'syz.3.1430': attribute type 11 has an invalid length. [ 219.333010][T10770] netlink: 'syz.3.1430': attribute type 11 has an invalid length. [ 219.346118][T10767] tipc: Enabled bearer , priority 0 [ 219.382149][T10767] syzkaller0: entered promiscuous mode [ 219.388324][T10767] syzkaller0: entered allmulticast mode [ 219.604655][T10786] sctp: [Deprecated]: syz.3.1432 (pid 10786) Use of int in max_burst socket option deprecated. [ 219.604655][T10786] Use struct sctp_assoc_value instead [ 219.624576][T10762] tipc: Resetting bearer [ 219.646844][T10762] tipc: Disabling bearer [ 219.890187][T10804] netlink: zone id is out of range [ 219.898458][T10804] netlink: del zone limit has 8 unknown bytes [ 221.759252][T10822] __nla_validate_parse: 11 callbacks suppressed [ 221.759271][T10822] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1447'. [ 222.103544][T10852] netlink: 'syz.3.1455': attribute type 4 has an invalid length. [ 222.143132][T10843] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1452'. [ 222.224756][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 222.281485][T10861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1458'. [ 222.311268][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 222.319012][T10861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1458'. [ 222.328462][T10870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1460'. [ 222.689810][T10890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1466'. [ 222.712456][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 222.762340][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'. [ 223.510379][ T3618] tipc: Subscription rejected, illegal request [ 223.602749][T10946] tipc: Enabling of bearer rejected, failed to enable media [ 223.801779][T10962] 8021q: adding VLAN 0 to HW filter on device bond10 [ 223.859109][T10962] veth0: entered promiscuous mode [ 223.894061][T10962] bond10: (slave macvlan1): Enslaving as a backup interface with an up link [ 224.102180][T10977] vlan0: entered allmulticast mode [ 224.107536][T10977] bridge0: entered allmulticast mode [ 224.116092][T10977] bridge4: port 1(vlan0) entered blocking state [ 224.125973][T10977] bridge4: port 1(vlan0) entered disabled state [ 224.156507][T10977] vlan0: entered promiscuous mode [ 224.161776][T10977] bridge0: entered promiscuous mode [ 224.894228][T11047] tipc: Enabled bearer , priority 0 [ 224.928271][T11047] syzkaller0: entered promiscuous mode [ 224.949410][T11047] syzkaller0: entered allmulticast mode [ 225.052961][T11059] tipc: Resetting bearer [ 225.088647][T11042] tipc: Resetting bearer [ 225.134540][T11042] tipc: Disabling bearer [ 225.200577][T11065] syzkaller0: entered promiscuous mode [ 225.216579][T11065] syzkaller0: entered allmulticast mode [ 225.249233][T11071] netlink: 'syz.3.1509': attribute type 1 has an invalid length. [ 225.628242][T11100] netlink: 'syz.0.1517': attribute type 2 has an invalid length. [ 225.774201][T11112] mac80211_hwsim hwsim11 : renamed from wlan1 (while UP) [ 225.928410][T11120] tipc: Enabling of bearer rejected, failed to enable media [ 226.367712][T11155] netlink: 'syz.4.1533': attribute type 21 has an invalid length. [ 226.552942][T11169] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 226.867198][T11190] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 226.922125][T11192] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 226.991010][T11190] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.279144][T11220] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 227.288289][T11220] netlink: 'syz.1.1550': attribute type 3 has an invalid length. [ 227.297859][T11220] __nla_validate_parse: 16 callbacks suppressed [ 227.297879][T11220] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1550'. [ 227.518286][T11234] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 227.557612][T11234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.614979][T11240] netlink: 'syz.2.1554': attribute type 2 has an invalid length. [ 227.992352][T11262] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.048496][T11262] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.135130][T11283] syzkaller0: entered promiscuous mode [ 228.140934][T11283] syzkaller0: entered allmulticast mode [ 228.223839][T11262] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.251488][T11262] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.288145][T11293] tipc: Enabling of bearer rejected, failed to enable media [ 228.301962][T11283] mac80211_hwsim hwsim6 : renamed from wlan1 (while UP) [ 228.357627][T11262] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.374937][T11262] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.490298][T11262] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.502583][T11262] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.545349][T11303] tipc: New replicast peer: 255.255.255.255 [ 228.572068][T11303] tipc: Enabled bearer , priority 10 [ 228.718279][T11318] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 228.770985][ T3618] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.784423][ T3618] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.855787][ T3618] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.866281][T11322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1577'. [ 228.876528][T11331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1579'. [ 228.892990][ T3618] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.904448][T11329] netlink: 'syz.4.1578': attribute type 10 has an invalid length. [ 228.956325][ T3618] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.971768][ T3618] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.005526][T11329] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 229.082276][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.102981][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.128196][T11339] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 229.325466][T11353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1585'. [ 229.429730][T11361] syzkaller1: entered promiscuous mode [ 229.435760][T11361] syzkaller1: entered allmulticast mode [ 229.671392][ T43] tipc: Node number set to 3486884015 [ 229.742541][T11381] netlink: 'syz.3.1591': attribute type 23 has an invalid length. [ 229.756033][T11377] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1592'. [ 229.775411][T11377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1592'. [ 229.785771][T11377] tipc: Invalid UDP bearer configuration [ 229.785830][T11377] tipc: Enabling of bearer rejected, failed to enable media [ 229.804381][T11379] netlink: 'syz.2.1593': attribute type 12 has an invalid length. [ 230.072202][T11387] team0 (unregistering): left promiscuous mode [ 230.098726][T11387] bond0: (slave macvlan2): Releasing backup interface [ 230.114197][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1598'. [ 230.160353][T11399] netlink: 'syz.1.1598': attribute type 3 has an invalid length. [ 230.169618][T11399] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1598'. [ 230.326625][T11407] netlink: 'syz.4.1602': attribute type 2 has an invalid length. [ 230.337134][T11409] netlink: 'syz.4.1602': attribute type 21 has an invalid length. [ 230.347499][T11409] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1602'. [ 230.489914][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 230.610334][T11416] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 230.617019][T11416] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 230.705111][T11418] netdevsim netdevsim1: Direct firmware load for . [ 230.705111][T11418] failed with error -2 [ 230.739647][T11418] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 230.739647][T11418] [ 230.829351][T11424] sctp: [Deprecated]: syz.2.1606 (pid 11424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.829351][T11424] Use struct sctp_sack_info instead [ 230.873410][T11423] sctp: [Deprecated]: syz.2.1606 (pid 11423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.873410][T11423] Use struct sctp_sack_info instead [ 231.155499][T11437] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 231.171810][T11437] bond5 (unregistering): Released all slaves [ 231.440192][T11462] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.446719][T11462] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.566157][T11470] veth17: entered promiscuous mode [ 231.739323][T11482] openvswitch: netlink: Missing key (keys=40, expected=100) [ 232.432842][T11546] __nla_validate_parse: 10 callbacks suppressed [ 232.432859][T11546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1641'. [ 232.697234][T11556] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1645'. [ 232.814476][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1646'. [ 232.824288][T11558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1646'. [ 232.903208][T11556] bond0 (unregistering): (slave ): Releasing backup interface [ 232.960511][T11556] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 232.999940][T11556] bond0 (unregistering): Released all slaves [ 233.087178][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'. [ 233.271712][T11589] validate_nla: 4 callbacks suppressed [ 233.271733][T11589] netlink: 'syz.4.1655': attribute type 2 has an invalid length. [ 233.432138][T11597] netlink: 'syz.1.1657': attribute type 1 has an invalid length. [ 233.552150][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 233.585190][T11598] veth17: entered promiscuous mode [ 233.676138][T11609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1660'. [ 233.710264][T11597] veth17: entered promiscuous mode [ 233.716070][T11613] IPVS: Scheduler module ip_vs_sip not found [ 233.896172][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1666'. [ 233.943184][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1666'. [ 234.005957][T11633] tap0: tun_chr_ioctl cmd 1074025677 [ 234.029926][T11633] tap0: linktype set to 65534 [ 234.114275][T11645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1669'. [ 234.151749][T11645] netlink: 'syz.1.1669': attribute type 1 has an invalid length. [ 234.195132][T11645] netlink: 'syz.1.1669': attribute type 2 has an invalid length. [ 234.263234][T11645] netlink: 'syz.1.1669': attribute type 2 has an invalid length. [ 234.373432][T11658] veth0: entered promiscuous mode [ 234.462082][T11657] veth0: left promiscuous mode [ 234.703334][T11687] tipc: Enabled bearer , priority 0 [ 234.806490][T11687] syzkaller0: entered promiscuous mode [ 234.812951][T11687] syzkaller0: entered allmulticast mode [ 234.821726][T11687] tipc: Resetting bearer [ 234.890082][T11681] tipc: Resetting bearer [ 235.016605][T11707] netlink: 'syz.3.1686': attribute type 15 has an invalid length. [ 235.521142][T11733] netlink: 'syz.2.1691': attribute type 4 has an invalid length. [ 235.573080][T11734] netlink: 'syz.2.1691': attribute type 4 has an invalid length. [ 236.376556][T11681] tipc: Disabling bearer [ 236.962070][T11768] macvtap1: entered promiscuous mode [ 236.967383][T11768] vlan0: entered promiscuous mode [ 236.973131][T11768] macvtap1: entered allmulticast mode [ 236.979045][T11768] vlan0: entered allmulticast mode [ 236.984204][T11768] veth0_vlan: entered allmulticast mode [ 302.464348][T11784] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 302.518079][T11798] tipc: Enabling of bearer rejected, failed to enable media [ 302.665271][T11814] IPVS: set_ctl: invalid protocol: 109 10.1.1.1:20001 [ 302.823784][T11823] syz_tun: entered allmulticast mode [ 302.827117][T11824] netlink: 'syz.0.1717': attribute type 1 has an invalid length. [ 302.855219][T11821] __nla_validate_parse: 7 callbacks suppressed [ 302.855239][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1715'. [ 302.886220][T11823] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 302.923318][T11833] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1719'. [ 302.953613][T11823] syz_tun: left allmulticast mode [ 302.962941][T11827] tipc: Enabled bearer , priority 0 [ 302.970986][T11827] syzkaller0: entered promiscuous mode [ 302.976489][T11827] syzkaller0: entered allmulticast mode [ 302.986347][T11827] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 303.018874][T11827] tipc: Resetting bearer [ 303.038316][T11826] tipc: Resetting bearer [ 303.055785][T11826] tipc: Disabling bearer [ 303.104839][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'. [ 303.217708][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 303.256477][T11851] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 303.277452][T11851] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1723'. [ 303.383620][T11858] netlink: 5380 bytes leftover after parsing attributes in process `syz.2.1727'. [ 303.394652][T11858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.490095][T11865] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 303.496581][T11865] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 303.659781][T11878] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1735'. [ 303.780495][T11885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1736'. [ 303.833045][T11887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.862467][T11890] IPVS: stopping master sync thread 6308 ... [ 304.051377][T11908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1743'. [ 304.073789][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1743'. [ 304.297676][T11920] netlink: 'syz.1.1747': attribute type 8 has an invalid length. [ 304.691366][T11940] bridge0: port 1(batadv2) entered blocking state [ 304.698102][T11940] bridge0: port 1(batadv2) entered disabled state [ 304.705784][T11940] batadv2: entered allmulticast mode [ 304.737720][T11940] batadv2: entered promiscuous mode [ 305.190867][ T3478] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 305.200591][ T3478] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 305.395106][T12000] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 305.440552][T12002] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 305.452330][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 305.879021][T12029] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 306.047975][T12045] netlink: 'syz.1.1781': attribute type 2 has an invalid length. [ 306.070597][T12040] netlink: 'syz.1.1781': attribute type 2 has an invalid length. [ 306.490365][T12072] syz.0.1787 uses old SIOCAX25GETINFO [ 306.690488][T12085] netlink: 'syz.0.1792': attribute type 18 has an invalid length. [ 306.994738][T12108] netlink: 'syz.1.1797': attribute type 5 has an invalid length. [ 307.126641][T12122] tipc: Enabled bearer , priority 0 [ 307.148434][T12122] syzkaller0: entered promiscuous mode [ 307.159117][T12122] syzkaller0: entered allmulticast mode [ 307.234032][T12122] tipc: Resetting bearer [ 307.267194][T12106] tipc: Resetting bearer [ 307.306504][T12106] tipc: Disabling bearer [ 307.377316][T12139] netlink: 'syz.0.1800': attribute type 1 has an invalid length. [ 307.388922][T12134] netlink: zone id is out of range [ 307.400361][T12134] netlink: zone id is out of range [ 307.405514][T12134] netlink: zone id is out of range [ 307.420941][T12134] netlink: zone id is out of range [ 307.446796][T12139] 8021q: adding VLAN 0 to HW filter on device bond7 [ 307.747607][T12156] pim6reg1: entered promiscuous mode [ 307.763924][T12156] pim6reg1: entered allmulticast mode [ 308.192272][T12184] netlink: 'syz.4.1815': attribute type 3 has an invalid length. [ 308.218984][T12184] __nla_validate_parse: 21 callbacks suppressed [ 308.219002][T12184] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1815'. [ 308.433011][T12202] netlink: 'syz.2.1819': attribute type 21 has an invalid length. [ 308.516056][T12210] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 308.529810][T12202] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 308.541400][T12211] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 308.551704][T12202] bond5 (unregistering): Released all slaves [ 308.551712][T12212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1820'. [ 308.639174][T12211] bond0: entered promiscuous mode [ 308.645289][T12211] bond_slave_0: entered promiscuous mode [ 308.655260][T12211] bond_slave_1: entered promiscuous mode [ 328.703932][ T5163] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 328.737490][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 328.747460][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 328.758601][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.769093][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.777160][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.781813][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 328.785506][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.801679][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.808904][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.881163][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.891634][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.900093][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.908133][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.917317][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.000537][ T5163] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.010860][ T5163] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.019290][ T5163] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.038880][ T5163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.046758][ T5163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.098493][ T5839] bridge0: port 1(syz_tun) entered disabled state [ 329.161483][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 329.161540][ T5839] syz_tun (unregistering): left allmulticast mode [ 329.176083][ T5839] syz_tun (unregistering): left promiscuous mode [ 329.183564][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 329.183721][ T5839] bridge0: port 1(syz_tun) entered disabled state [ 329.191946][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 329.207191][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 329.225101][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 329.334912][T12237] wg1 speed is unknown, defaulting to 1000 [ 329.356745][T12235] wg1 speed is unknown, defaulting to 1000 [ 329.361117][T12237] hsr0 speed is unknown, defaulting to 1000 [ 329.390552][T12235] hsr0 speed is unknown, defaulting to 1000 [ 329.406740][T12233] wg1 speed is unknown, defaulting to 1000 [ 329.444962][ T3478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.455577][ T3478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.472833][T12231] wg1 speed is unknown, defaulting to 1000 [ 329.473111][T12233] hsr0 speed is unknown, defaulting to 1000 [ 329.522769][ T3478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.533158][ T3478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.548596][T12231] hsr0 speed is unknown, defaulting to 1000 [ 329.549176][T12229] wg1 speed is unknown, defaulting to 1000 [ 329.576222][T12229] hsr0 speed is unknown, defaulting to 1000 [ 329.651763][ T3478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.662980][ T3478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.740361][ T3478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.750996][ T3478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.161726][T12235] chnl_net:caif_netlink_parms(): no params data found [ 330.237458][T12237] chnl_net:caif_netlink_parms(): no params data found [ 330.349244][T12231] chnl_net:caif_netlink_parms(): no params data found [ 330.360611][T12233] chnl_net:caif_netlink_parms(): no params data found [ 330.398177][ T3478] batadv2: left allmulticast mode [ 330.404068][ T3478] batadv2: left promiscuous mode [ 330.410596][ T3478] bridge0: port 1(batadv2) entered disabled state [ 330.860528][ T5163] Bluetooth: hci2: command tx timeout [ 330.939697][ T5163] Bluetooth: hci0: command tx timeout [ 330.939757][ T5846] Bluetooth: hci5: command tx timeout [ 330.999261][ T3478] bond0 (unregistering): Released all slaves [ 331.011979][ T3478] bond1 (unregistering): Released all slaves [ 331.100883][ T3478] bond2 (unregistering): Released all slaves [ 331.109781][ T5846] Bluetooth: hci1: command tx timeout [ 331.192704][ T3478] bond3 (unregistering): (slave veth3): Releasing active interface [ 331.202350][ T3478] bond3 (unregistering): Released all slaves [ 331.216508][ T3478] bond4 (unregistering): Released all slaves [ 331.270837][ T5846] Bluetooth: hci3: command tx timeout [ 331.395149][ T3478] tipc: Left network mode [ 331.414557][ T3478] IPVS: stopping master sync thread 7199 ... [ 331.419865][T12229] chnl_net:caif_netlink_parms(): no params data found [ 331.454063][T12235] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.461764][T12235] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.468940][T12235] bridge_slave_0: entered allmulticast mode [ 331.476514][T12235] bridge_slave_0: entered promiscuous mode [ 331.485136][T12235] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.492887][T12235] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.500251][T12235] bridge_slave_1: entered allmulticast mode [ 331.508628][T12235] bridge_slave_1: entered promiscuous mode [ 331.613998][T12237] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.621711][T12237] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.628905][T12237] bridge_slave_0: entered allmulticast mode [ 331.636526][T12237] bridge_slave_0: entered promiscuous mode [ 331.673993][T12233] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.681288][T12233] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.688577][T12233] bridge_slave_0: entered allmulticast mode [ 331.697488][T12233] bridge_slave_0: entered promiscuous mode [ 331.718644][T12237] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.726207][T12237] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.734110][T12237] bridge_slave_1: entered allmulticast mode [ 331.741686][T12237] bridge_slave_1: entered promiscuous mode [ 331.751551][T12235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.763685][T12235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.773012][T12231] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.780331][T12231] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.787572][T12231] bridge_slave_0: entered allmulticast mode [ 331.795530][T12231] bridge_slave_0: entered promiscuous mode [ 331.806182][T12233] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.813639][T12233] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.821643][T12233] bridge_slave_1: entered allmulticast mode [ 331.828831][T12233] bridge_slave_1: entered promiscuous mode [ 331.872731][T12231] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.879969][T12231] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.887141][T12231] bridge_slave_1: entered allmulticast mode [ 331.894557][T12231] bridge_slave_1: entered promiscuous mode [ 332.009878][T12237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.032849][T12235] team0: Port device team_slave_0 added [ 332.058362][T12233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.070040][T12229] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.078600][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.086408][T12229] bridge_slave_0: entered allmulticast mode [ 332.093537][T12229] bridge_slave_0: entered promiscuous mode [ 332.103683][T12237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.130029][T12235] team0: Port device team_slave_1 added [ 332.141298][T12231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.168860][ T3478] hsr_slave_0: left promiscuous mode [ 332.175913][ T3478] hsr_slave_1: left promiscuous mode [ 332.186117][ T3478] vlan0: left allmulticast mode [ 332.191050][ T3478] veth0_vlan: left allmulticast mode [ 332.196394][ T3478] vlan0: left promiscuous mode [ 332.201893][ T3478] veth1_macvtap: left promiscuous mode [ 332.207975][ T3478] veth0_macvtap: left promiscuous mode [ 332.213626][ T3478] veth1_vlan: left promiscuous mode [ 332.218975][ T3478] veth0_vlan: left promiscuous mode [ 332.312267][ T3478] pim6reg (unregistering): left allmulticast mode [ 332.935793][T12233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.940069][ T5846] Bluetooth: hci2: command tx timeout [ 332.966549][T12229] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.974251][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.981973][T12229] bridge_slave_1: entered allmulticast mode [ 332.989067][T12229] bridge_slave_1: entered promiscuous mode [ 333.019855][ T5846] Bluetooth: hci5: command tx timeout [ 333.023959][ T5163] Bluetooth: hci0: command tx timeout [ 333.035417][T12231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.045568][ T10] hsr0 speed is unknown, defaulting to 1000 [ 333.054658][ T10] infiniband syz1: ib_query_port failed (-19) [ 333.128445][T12237] team0: Port device team_slave_0 added [ 333.158417][T12233] team0: Port device team_slave_0 added [ 333.167430][T12233] team0: Port device team_slave_1 added [ 333.186010][ T5163] Bluetooth: hci1: command tx timeout [ 333.213800][T12237] team0: Port device team_slave_1 added [ 333.245137][T12235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.252836][T12235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.279522][T12235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.327735][T12229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.339804][ T5163] Bluetooth: hci3: command tx timeout [ 333.355926][T12235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.363304][T12235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.389987][T12235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.405310][T12231] team0: Port device team_slave_0 added [ 333.425861][T12229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.451024][T12237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.457981][T12237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.484166][T12237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.508380][T12231] team0: Port device team_slave_1 added [ 333.531253][T12233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.538668][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.565184][T12233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.591772][T12237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.598745][T12237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.626557][T12237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.642509][ T3478] IPVS: stop unused estimator thread 0... [ 333.670688][T12231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.677644][T12231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.704127][T12231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.715846][T12233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.723163][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.750689][T12233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.771519][T12229] team0: Port device team_slave_0 added [ 333.811997][T12235] hsr_slave_0: entered promiscuous mode [ 333.818333][T12235] hsr_slave_1: entered promiscuous mode [ 333.827121][T12231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.834538][T12231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.861664][T12231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.882573][T12229] team0: Port device team_slave_1 added [ 333.918935][T12229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.926036][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.953042][T12229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.966113][ T3478] ------------[ cut here ]------------ [ 333.971516][T12229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.972065][ T3478] WARNING: CPU: 1 PID: 3478 at fs/proc/proc_sysctl.c:1558 retire_sysctl_set+0x48/0x60 [ 333.978517][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.988457][ T3478] Modules linked in: [ 334.018566][ T3478] CPU: 1 UID: 0 PID: 3478 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 334.028371][ T3478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 334.038502][ T3478] Workqueue: netns cleanup_net [ 334.043704][ T3478] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 334.049748][ T3478] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 80 8b c6 ff 48 83 3b 00 75 0c e8 75 e1 61 ff 5b e9 4f ad d8 08 cc e8 69 e1 61 ff 90 <0f> 0b 90 5b e9 3f ad d8 08 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 334.060151][T12229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.070317][ T3478] RSP: 0018:ffffc9000c0978d0 EFLAGS: 00010293 [ 334.070346][ T3478] RAX: ffffffff825c9517 RBX: ffff88802973a6d8 RCX: ffff88802fd50000 [ 334.095140][ T3478] RDX: 0000000000000000 RSI: ffffffff8d6ef4b7 RDI: ffff88802973a678 [ 334.103454][ T3478] RBP: ffffc9000c0979b0 R08: ffffffff8f5b8637 R09: 1ffffffff1eb70c6 [ 334.111687][ T3478] R10: dffffc0000000000 R11: ffffffff8aef8bb0 R12: ffffffff8f3b87e0 [ 334.119797][ T3478] R13: 1ffff92001812f40 R14: ffffffff8f3b87c0 R15: ffff88802973a468 [ 334.127792][ T3478] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 334.137096][ T3478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.143909][ T3478] CR2: 00007f12c9717d60 CR3: 000000005b616000 CR4: 00000000003526f0 [ 334.152286][ T3478] Call Trace: [ 334.155571][ T3478] [ 334.158510][ T3478] ops_undo_list+0x497/0x990 [ 334.163381][ T3478] ? __pfx_ops_undo_list+0x10/0x10 [ 334.168801][ T3478] ? do_raw_spin_unlock+0x122/0x240 [ 334.174113][ T3478] cleanup_net+0x4d8/0x820 [ 334.178562][ T3478] ? __pfx_cleanup_net+0x10/0x10 [ 334.183614][ T3478] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.188835][ T3478] ? process_scheduled_works+0x9ef/0x17b0 [ 334.194952][ T3478] ? process_scheduled_works+0x9ef/0x17b0 [ 334.200779][ T3478] process_scheduled_works+0xade/0x17b0 [ 334.206467][ T3478] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.212546][ T3478] worker_thread+0x8a0/0xda0 [ 334.217183][ T3478] kthread+0x711/0x8a0 [ 334.221643][ T3478] ? __pfx_worker_thread+0x10/0x10 [ 334.226779][ T3478] ? __pfx_kthread+0x10/0x10 [ 334.231486][ T3478] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.236708][ T3478] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.241967][ T3478] ? __pfx_kthread+0x10/0x10 [ 334.246584][ T3478] ret_from_fork+0x436/0x7d0 [ 334.251650][ T3478] ? __pfx_ret_from_fork+0x10/0x10 [ 334.257009][ T3478] ? __switch_to_asm+0x39/0x70 [ 334.262133][ T3478] ? __switch_to_asm+0x33/0x70 [ 334.266922][ T3478] ? __pfx_kthread+0x10/0x10 [ 334.271617][ T3478] ret_from_fork_asm+0x1a/0x30 [ 334.276435][ T3478] [ 334.280243][ T3478] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 334.287534][ T3478] CPU: 1 UID: 0 PID: 3478 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 334.297062][ T3478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 334.307198][ T3478] Workqueue: netns cleanup_net [ 334.312393][ T3478] Call Trace: [ 334.315750][ T3478] [ 334.318756][ T3478] dump_stack_lvl+0x99/0x250 [ 334.323347][ T3478] ? __asan_memcpy+0x40/0x70 [ 334.327935][ T3478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.333117][ T3478] ? __pfx__printk+0x10/0x10 [ 334.337710][ T3478] vpanic+0x281/0x750 [ 334.341678][ T3478] ? __pfx__printk+0x10/0x10 [ 334.346269][ T3478] ? __pfx_vpanic+0x10/0x10 [ 334.350759][ T3478] ? is_bpf_text_address+0x292/0x2b0 [ 334.356050][ T3478] panic+0xb9/0xc0 [ 334.359765][ T3478] ? __pfx_panic+0x10/0x10 [ 334.364203][ T3478] __warn+0x31b/0x4b0 [ 334.368184][ T3478] ? retire_sysctl_set+0x48/0x60 [ 334.373113][ T3478] ? retire_sysctl_set+0x48/0x60 [ 334.378046][ T3478] report_bug+0x2be/0x4f0 [ 334.382387][ T3478] ? retire_sysctl_set+0x48/0x60 [ 334.387329][ T3478] ? retire_sysctl_set+0x48/0x60 [ 334.392271][ T3478] ? retire_sysctl_set+0x4a/0x60 [ 334.397217][ T3478] handle_bug+0x84/0x160 [ 334.401461][ T3478] exc_invalid_op+0x1a/0x50 [ 334.405968][ T3478] asm_exc_invalid_op+0x1a/0x20 [ 334.410901][ T3478] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 334.416468][ T3478] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 80 8b c6 ff 48 83 3b 00 75 0c e8 75 e1 61 ff 5b e9 4f ad d8 08 cc e8 69 e1 61 ff 90 <0f> 0b 90 5b e9 3f ad d8 08 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 334.436074][ T3478] RSP: 0018:ffffc9000c0978d0 EFLAGS: 00010293 [ 334.442145][ T3478] RAX: ffffffff825c9517 RBX: ffff88802973a6d8 RCX: ffff88802fd50000 [ 334.450110][ T3478] RDX: 0000000000000000 RSI: ffffffff8d6ef4b7 RDI: ffff88802973a678 [ 334.458079][ T3478] RBP: ffffc9000c0979b0 R08: ffffffff8f5b8637 R09: 1ffffffff1eb70c6 [ 334.466052][ T3478] R10: dffffc0000000000 R11: ffffffff8aef8bb0 R12: ffffffff8f3b87e0 [ 334.474026][ T3478] R13: 1ffff92001812f40 R14: ffffffff8f3b87c0 R15: ffff88802973a468 [ 334.481998][ T3478] ? __pfx_sysctl_net_exit+0x10/0x10 [ 334.487283][ T3478] ? retire_sysctl_set+0x47/0x60 [ 334.492222][ T3478] ops_undo_list+0x497/0x990 [ 334.496813][ T3478] ? __pfx_ops_undo_list+0x10/0x10 [ 334.501917][ T3478] ? do_raw_spin_unlock+0x122/0x240 [ 334.507115][ T3478] cleanup_net+0x4d8/0x820 [ 334.511524][ T3478] ? __pfx_cleanup_net+0x10/0x10 [ 334.516465][ T3478] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.521660][ T3478] ? process_scheduled_works+0x9ef/0x17b0 [ 334.527454][ T3478] ? process_scheduled_works+0x9ef/0x17b0 [ 334.533170][ T3478] process_scheduled_works+0xade/0x17b0 [ 334.538733][ T3478] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.544722][ T3478] worker_thread+0x8a0/0xda0 [ 334.549334][ T3478] kthread+0x711/0x8a0 [ 334.553405][ T3478] ? __pfx_worker_thread+0x10/0x10 [ 334.558524][ T3478] ? __pfx_kthread+0x10/0x10 [ 334.563124][ T3478] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.568325][ T3478] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.573540][ T3478] ? __pfx_kthread+0x10/0x10 [ 334.578136][ T3478] ret_from_fork+0x436/0x7d0 [ 334.582818][ T3478] ? __pfx_ret_from_fork+0x10/0x10 [ 334.587931][ T3478] ? __switch_to_asm+0x39/0x70 [ 334.592796][ T3478] ? __switch_to_asm+0x33/0x70 [ 334.597585][ T3478] ? __pfx_kthread+0x10/0x10 [ 334.602462][ T3478] ret_from_fork_asm+0x1a/0x30 [ 334.607260][ T3478] [ 334.610536][ T3478] Kernel Offset: disabled [ 334.614881][ T3478] Rebooting in 86400 seconds..