last executing test programs: 1m34.3384515s ago: executing program 4 (id=493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x100}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) (async) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@random="e973abc7ac22", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x3, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xfffffffffffffffa}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000800000000000000907800000000000000000000000700109078220600010000e9c6d579b8ad648adef3660c4f5adde27386cec1994c466d52e65eb76e70c1612801ef56b89098832f06293c616842eb2f7037acc1439536f080c54a3eb1ad99b57e058b6db1d769fd20b1b979df89795dd6c18cb39e8e583cb0a565a8f714e9811cc1fa2240d706db2aa0afdb3ed605bcfdd9e1ac304cb97a9c776a593c82bd0123e09d2019c5bdd6011e4b164bf9b389f694b2"], 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a0001"], 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x1, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000180)=""/198, 0x32, 0xc6, 0x1}, 0x20) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4810) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4810) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="00010000010a0101"], 0x100}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="00010000010a0101"], 0x100}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1m32.24918638s ago: executing program 4 (id=504): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000002"], 0x5c}}, 0x0) unshare(0x28060000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x5f2bf000) 1m32.004043372s ago: executing program 2 (id=507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2c, 0x800000003, 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x4}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7800, 0x7810, 0x5, 0x1000, {{0x1c, 0x4, 0x3, 0x32, 0x70, 0x64, 0x0, 0x56, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@rr={0x7, 0x13, 0x14, [@rand_addr=0x64010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, @remote]}, @lsrr={0x83, 0x1b, 0x56, [@loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1]}, @ssrr={0x89, 0x13, 0x54, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @empty]}, @timestamp={0x44, 0x18, 0xea, 0x0, 0x2, [0x6de, 0x7ff, 0x0, 0xff, 0x3a]}]}}}}}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@deltclass={0xfc, 0x29, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0x10}, {0x4, 0x9}, {0xc, 0xc}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x6}}}, @c_atm={{0x8}, {0x5c, 0x2, [@TCA_ATM_HDR={0x26, 0x3, "13dd02e67b0866a5305552f18f8e04c171040045706ff769653dfb0472ad430e2cb1"}, @TCA_ATM_HDR={0xd, 0x3, "40ab75d556b18bad36"}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0x10, 0xb}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0x8}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0x2}}]}}, @c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x2, 0xe4, 0x6, 0x4, 0x4f099065}}, @TCA_CBQ_RATE={0x10, 0x5, {0x3f, 0x0, 0x1, 0x6, 0x3, 0xda6e}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x1}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xe}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) 1m31.830778507s ago: executing program 4 (id=510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x2d9}, {&(0x7f0000001200)="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", 0x24a}, {&(0x7f0000000e40)="5be081cd2e5383c893e2c864f68d85738305437c98b91b9455046f57b5fc090014b5e2bb01000000000000001a7838d859203067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3", 0x4f}, {&(0x7f0000000140)="6011daffb3bc7ec41548698eff49287316578c3df5", 0x15}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-neon\x00'}, 0x58) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @broadcast}}}}, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x3c}}, 0x20004010) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r8, 0x0, 0x6) accept4(r2, &(0x7f0000000080)=@ethernet={0x0, @random}, 0x0, 0x800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0600000044e16235380149764490ca4065d0365425348ef57c53547d41adc60669deea0236bab63e586a62e8a5143effb379ff44e79af4887e5404d6592bac247ea7f5d1", @ANYRES16=r10, @ANYBLOB="010029bd7000fddbdf25210000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000014) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x8001, 0x7f}, &(0x7f0000000040)=0x10) 1m31.732081208s ago: executing program 2 (id=511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400004c6700010000000000000000000300000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001508000140000000090900020073797a3200000000140000001100010000000000000000000200000a"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async, rerun: 64) r7 = socket$inet6(0xa, 0x2, 0x3a) (async) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000001480)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001200)={0x3c, 0xe, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x20004000) sendmmsg$inet6(r7, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x40000000) r8 = socket(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001600)=0x0) connect$nfc_raw(r8, &(0x7f0000001740)={0x27, r9, 0xffffffffffffffff, 0x3}, 0x10) (async) write(r8, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) (async) recvmmsg(r8, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001140)=""/114, 0x72}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e, 0xe88}, 0x8}], 0x1, 0x10122, 0x0) 1m31.487831022s ago: executing program 2 (id=514): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400888}, 0xc, 0x0}, 0x8000) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000900)={0x70, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000e80)={r0, 0xffffffffffffffff, 0x19, 0x0, @val=@uprobe_multi={&(0x7f0000000d80)='\x00', &(0x7f0000000dc0)=[0xfffffffffffffff7, 0x8, 0x50923c71, 0x6edc, 0x0, 0x6, 0x10001, 0x3, 0x1, 0x6], &(0x7f0000000e40)=[0x3, 0x3], 0x8, 0xa}}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f0000000ec0)={r2}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x48, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xd440}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x141}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4040010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f00000003c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "01a604", 0x9c, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x4e23, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "75477d9a6d0a5770e90bdd60ae3ebeab39f676409364a963dd2c1c77fd2f7017", "3a3fc7fad3d5282c51fb56c4202473e7e0a63474eee8b075cd64174e83a1315a729012d7a8db3a2bac9f6cffd8d70927", "4bfae8ea07d427b5264632e4cfc7382bb54bb31f4f4d532f26a9c603", {"629c6ecb7c0ec2efed35034156eb1d08", "626dc18ead41fce3878b510bdcf91b1c"}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d", 0x8) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff61ab1b3927e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb9cb1ace9ead3459bab1c71538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f110000000000000000", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000000}], 0x1, 0x40800) recvmmsg(r6, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/181, 0xb5}, {&(0x7f0000000980)=""/93, 0x5d}, {&(0x7f0000000a00)=""/225, 0xe1}, {&(0x7f0000000b00)=""/188, 0xbc}], 0x5}}, {{0x0, 0x0, &(0x7f0000002080)}, 0x4}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002180)=""/137, 0x89}, {&(0x7f0000002240)=""/21, 0x15}, {&(0x7f0000002280)=""/10, 0xa}, {&(0x7f00000022c0)=""/146, 0x92}, {&(0x7f0000002380)=""/174, 0xae}, {&(0x7f0000002440)=""/31, 0x1f}, {&(0x7f0000002480)=""/193, 0xc1}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/211, 0xd3}], 0x9, &(0x7f0000003740)=""/9, 0x9}, 0x228}], 0x3, 0x40, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="200000006a0001050000000000000000000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="9bbb2563f93de348cd0c8b2e9acc5c8eddf60b9685b89dc60ad054622f5f3bb43a1afc9ef64dce6ca9054d7368983792bc5362fd54018ff5240d027c852f2e705958d216bfa378aca63714f7c3a27a2ae7045654bcd910a76496c44e62f639ab44d197bc1a009317700fcc764130229b8af6902e5a031f697b67dfcdcfd62a0c404997dd190c1874764a0e8ba88c074937f702473342427909bf9e5e51650daae21e01fb0e60772722c1c006502eca1b0b6b2ca4a5b927c88579bf14b880f87dbdd1ce34085df32f90405674f8f8cd678eccdaa29086f985af"], 0x20}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r9, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400d0}, 0x8000) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000f40), r8) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x48, r10, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x11}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 1m31.386478895s ago: executing program 2 (id=517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="7d1068a421f05f384340d34be65ac0bbe72925ab1a8aa3", 0x17) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="ddbe"], 0x54}}, 0x0) 1m31.184588965s ago: executing program 4 (id=520): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000002"], 0x5c}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140f, 0x60ceaae1ef55e4c3, 0x70bd23}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 1m31.02359498s ago: executing program 4 (id=522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="180000006a007f00b1c465d0d8c535f55c0102cf57fa9e7f", 0x18}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x1, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1080004}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0x20}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x24000010) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 1m30.971024795s ago: executing program 2 (id=523): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/173, 0xad}, {&(0x7f0000000140)=""/200, 0xc8}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000300)=""/208, 0xd0}], 0x4}, 0xff}, {{&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/30, 0x1e}], 0x4, &(0x7f0000000700)}, 0x1}, {{&(0x7f0000000740)=@x25, 0x80, &(0x7f0000001980)=[{&(0x7f00000007c0)=""/77, 0x4d}, {&(0x7f0000000840)=""/82, 0x52}, {&(0x7f00000008c0)=""/188, 0xbc}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x4, &(0x7f00000019c0)=""/174, 0xae}, 0xffff8001}], 0x3, 0x40010000, &(0x7f0000001b40)={0x0, 0x989680}) r2 = accept4$netrom(r1, &(0x7f0000001b80)={{0x3, @rose}, [@default, @rose, @null, @netrom, @bcast, @netrom, @null, @bcast]}, &(0x7f0000001c00)=0x48, 0x80000) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000001c40)=0xfffffac1, &(0x7f0000001c80)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001cc0)={'vxcan1\x00', 0x0}) getsockname$ax25(r1, &(0x7f0000001d00)={{0x3, @netrom}, [@bcast, @netrom, @null, @default, @remote, @remote, @bcast, @rose]}, &(0x7f0000001d80)=0x48) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000001dc0)=""/4096, &(0x7f0000002dc0)=0x1000) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r5 = accept$ax25(r4, &(0x7f0000002e00)={{}, [@null, @rose, @null, @netrom, @null, @bcast, @rose, @null]}, &(0x7f0000002e80)=0x48) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000002ec0)=0xfe, 0x4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8041}, 0x80010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003080), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000003480)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003440)={&(0x7f00000030c0)={0x34c, r6, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x2d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x5}, {0x5, 0x5}, {0x3, 0x6}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x8}, {0x0, 0x6}, {0x0, 0x1}, {0x0, 0x8}, {0x6, 0x9}, {0x7, 0x4}, {0x6}, {0x7, 0x1}, {0x2, 0x8}, {0x7, 0x8}, {0x2, 0x7}, {0x6, 0x5}, {0x1}, {0x3, 0x4}, {}, {0x4, 0x5}, {0x2, 0x2}, {0x7, 0x1}, {0x6, 0x6}, {0x1, 0x2}, {0x3, 0x2}, {0x3, 0x1}, {0x0, 0x9}, {0x4, 0x7}, {0x5, 0x8}, {0x0, 0x1e}, {0x1, 0x4}, {0x5, 0x9}, {0x7, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x3, 0x7}, {0x4, 0x3}, {0x1, 0x9}, {0x7, 0xa}, {0x7, 0x5}, {0x3, 0xa}, {0x4, 0x4}, {0x5, 0x7}, {0x5, 0x1}, {0x2, 0x4}, {0x5, 0x7}, {0x5, 0x2}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0xa}, {0x2, 0x4}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x401, 0x8, 0x10, 0x4, 0x800, 0x7, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x566, 0x3, 0x7f, 0x1, 0x100, 0x8, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x51c, 0x8, 0xfff9, 0x2, 0x1, 0x1, 0x3a]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xc516, 0x1, 0x5, 0x1, 0xff, 0x8e]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x4}, {0x4, 0x6}, {0x6, 0x9}, {0x4, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x3, 0x6}, {0x1, 0x5}, {0x5, 0x3}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x8}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x0, 0x7, 0x2, 0x8, 0xe, 0x4]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x4}, {0x6, 0x3}, {0x6}, {0x3, 0x4}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x2}, {0x2}, {0x6, 0x9}, {0x7, 0x3}, {0x5}, {0x6, 0x1}, {0x4, 0x1}, {0x7}, {0x3, 0x5}, {0x2, 0x5}, {}, {0x3, 0x9}, {0x1, 0xa}, {0x6, 0xa}, {0x2, 0x9}, {0x3, 0x10}, {0x2, 0x2}, {0x6, 0x1}, {0x3, 0x2}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x4}, {0x1, 0x3}, {0x2, 0x8}, {0x2, 0x2}, {0x7}, {0x6, 0x9}, {0x0, 0x4}, {0x4, 0x5}, {0x0, 0x3}, {0x7, 0x7}, {0x1}, {0x0, 0x3}, {0x3, 0x3}, {0x6, 0x9}, {0x5, 0x3}, {0x3, 0x3}, {0x0, 0x9}, {0x2, 0x4}, {0x5, 0x8}, {0x1}, {0x3, 0x2}, {0x7, 0x1}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0x9}, {0x2, 0x4}, {0x1, 0x2}, {0x7, 0x7}, {0x7, 0x9}, {0x1, 0x7}, {0x4, 0x6}, {0x3, 0xa}, {0x3, 0x8}, {0x2, 0xa}, {0x7, 0x5}, {0x3, 0xa}, {0x5, 0x6}, {0x1, 0x7}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x2, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x2800, 0x3ff, 0xfabb, 0x7ff, 0x3, 0x6, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1864, 0x3f1, 0x7, 0x899, 0x3, 0x3, 0x7fff, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8f5e, 0x5, 0x9, 0x1, 0x6, 0x3, 0x9, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x5, 0xff, 0x1, 0x8000, 0x5, 0x754, 0xc364]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xa95a, 0x7, 0x8, 0x40, 0xc0, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0xcb, 0x2, 0x7fff, 0x5, 0x8, 0x7]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x1}, {0x7, 0x9}, {0x4, 0x8}, {0x0, 0x4}, {0x6, 0x1}, {0x5, 0x9}, {0x0, 0x5}, {0x3, 0x1}, {0x5, 0x8}, {0x1, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x6, 0xea, 0xf, 0x4, 0x6, 0x7]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x4, 0x2, 0x78, 0x36, 0xc]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x18, 0x4, 0x3, 0x2, 0x26bf39fd19f643f0, 0x18, 0x30, 0xc, 0x36, 0xc, 0x16, 0x4, 0xb, 0x30, 0xb, 0x1b, 0x2d, 0x16, 0x24, 0x3, 0x1, 0x30, 0xc, 0x1b, 0x22, 0x1b, 0x30, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7ff, 0xbc4, 0x8, 0x3, 0x7ff, 0x7a, 0x18c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x81, 0x100, 0xfff, 0x800, 0xfffb, 0x81, 0xffff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x2, 0x5, 0xda46, 0x0, 0x40, 0x1a]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x64, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x4686, 0xfd53, 0x7ab, 0xf800, 0xc79, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffa, 0x0, 0x3, 0x6, 0x6, 0xe5a7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x7, 0x5, 0x274c, 0x6, 0x0, 0x4, 0x746]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000880) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000003500), r1) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000003600)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000035c0)={&(0x7f0000003540)={0x44, r8, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x4800) clock_gettime(0x0, &(0x7f0000003680)={0x0, 0x0}) ppoll(&(0x7f0000003640)=[{r5, 0x6441}, {r7, 0x8052}, {r7, 0x1000}], 0x3, &(0x7f00000036c0)={r9, r10+10000000}, &(0x7f0000003700)={[0x7]}, 0x8) clock_gettime(0x6, &(0x7f0000003740)) r11 = accept$inet(r1, 0x0, &(0x7f0000003780)) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000003800)={0x0, @phonet={0x23, 0xff, 0x54, 0x4}, @ethernet={0x306, @local}, @phonet={0x23, 0xbf, 0xc6, 0x4}, 0xf, 0x0, 0x0, 0x0, 0x6, &(0x7f00000037c0)='veth0_to_bond\x00', 0x0, 0xc5b}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003b00)={0x18, 0x10, &(0x7f00000038c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x42ba, 0x0, 0x0, 0x0, 0x72d2}, [@map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x3, 0x3, 0x1, 0x2, 0xa, 0x50, 0xfffffffffffffffc}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}]}, &(0x7f0000003940)='syzkaller\x00', 0x0, 0xab, &(0x7f0000003980)=""/171, 0x41000, 0x20, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003a40)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003a80)=[0xffffffffffffffff, r7, 0x1], &(0x7f0000003ac0)=[{0x4, 0x5, 0xc, 0x6}, {0x4, 0x2, 0xd, 0x4}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003bc0)={&(0x7f0000003880)='snd_soc_dapm_path\x00', r12, 0x0, 0x3}, 0x18) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003c00), r13) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000003e40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003e00)={&(0x7f0000003c80)={0x170, r14, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x83}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6eb}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "e377bc3d200d7c49ed5f3898de1e82a57a2723eb5284dacc30ee915b753b7c8623d1"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) bind$alg(r1, &(0x7f0000003e80)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000004000)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f40)={0x58, 0x140a, 0x10, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x4000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000004040)={0x0, 'team0\x00', {0x2}, 0x5}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f00000041c0)={0x0, 0x4, 0x20}, 0xc) 1m30.675032346s ago: executing program 4 (id=527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x9, 0xb, 0xfffffffffffffffe, 0x2b1, 0x202000000002e0], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000060000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r2, &(0x7f0000000040)={&(0x7f0000000500)={0x24, @long}, 0x14, &(0x7f0000001880)={0x0}}, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000140)=""/64, &(0x7f00000001c0)=0x40) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000420007012bbd700000000000017c0000400000000c0001e55b58be809438f2c2d8d69e4e64b2fbcb6fce6feecbdf7a4a28f4763651ad2eb9ae044fcc125585c826cec476deab89701f12517e4379a681ea1fd490be9bf47af80a027701b62d42f557c7e69cb71b2dc3893f3b5d6fe2ade96e64f5405b98a4ebaa66e96daf388a"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000) 1m30.427137907s ago: executing program 32 (id=527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x9, 0xb, 0xfffffffffffffffe, 0x2b1, 0x202000000002e0], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000060000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r2, &(0x7f0000000040)={&(0x7f0000000500)={0x24, @long}, 0x14, &(0x7f0000001880)={0x0}}, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000140)=""/64, &(0x7f00000001c0)=0x40) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000420007012bbd700000000000017c0000400000000c0001e55b58be809438f2c2d8d69e4e64b2fbcb6fce6feecbdf7a4a28f4763651ad2eb9ae044fcc125585c826cec476deab89701f12517e4379a681ea1fd490be9bf47af80a027701b62d42f557c7e69cb71b2dc3893f3b5d6fe2ade96e64f5405b98a4ebaa66e96daf388a"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000) 1m30.380877356s ago: executing program 2 (id=531): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @remote}], 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002000000000000000002000004680800000000000001000000000000000000000001"], 0x0, 0x4a}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000300)=""/84, 0x54}], 0x2) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d00104c250002000f00000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m30.00684608s ago: executing program 33 (id=531): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @remote}], 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002000000000000000002000004680800000000000001000000000000000000000001"], 0x0, 0x4a}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000300)=""/84, 0x54}], 0x2) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d00104c250002000f00000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.247540717s ago: executing program 5 (id=1335): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003012000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000014c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001500)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x78, r7, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4be07d00c7d9b1d7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4c084) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001680), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x14, r10, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8082}, 0x804) recvmmsg(r9, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4078, 0xfee}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/226, 0xe2}], 0x4}, 0x5}], 0x1, 0x2, 0x0) 1.916932799s ago: executing program 0 (id=1344): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000956b00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x2, 0x1, 0x0, @loopback, @local}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0xe}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1418, 0x1}, 0x10}}, 0x0) syz_extract_tcp_res(&(0x7f0000000100), 0xffffc982, 0x6) 1.719060185s ago: executing program 6 (id=1346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000018000900b3fbd3fe07e8da7b5c960000fe0000010000000005001a0000000000abdee18e31a1d28c9d2c28c4b6a0559e62c3b94447e226cf2d9618a0abde02669d4cc411389ff249a8ad46d9271cd2c45a9c3839123ad39e4ba06ac496e1d6fa170362dcd2f3d05f3c2f168f6e96d229ca447142d8802d4eb0a0bc875bdbdf415313d531204e148c82d9a5a3b7d7"], 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getchain={0x4c, 0x66, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xffe0, 0xf}, {0xa, 0xffe0}, {0x8}}, [{0x8, 0xb, 0xa440}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8aef}, {0x8, 0xb, 0x8000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rss_stat\x00', r1, 0x0, 0x40}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 1.713468046s ago: executing program 0 (id=1347): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x678, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000140)=0x8001, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x30000011}) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x30) close(r4) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000200)) 1.71275084s ago: executing program 5 (id=1348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021305000200000027bd7000fedbdf258881fdfeed0a2dfe6c1f13ada39a49bcee2c644f870c3dbed3cd053bb8cc5c89ed928910a52feffdaaa80db73485878de898a3da0080089be36e52dc8a9e2fa724d9b9f4c705feecc5a6aa8fcd420edc1d586141c7dc51be04f83e"], 0x10}}, 0x20000080) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000c740a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x40054}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c60100106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 1.610064046s ago: executing program 3 (id=1350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x1b8, 0x2e0, 0x2e0, 0xd0, 0x0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'syzkaller1\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[], 0x8001}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@ipv6={@local, @mcast1, [0xff, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_batadv\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x3c, 0x5, 0x1}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xa]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xba) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000001701000003000000000000000000000018000000000000001701000003000000000000000000000018000000000000001701000004000000080000000000000018000000000000001701000003000000010000000000000018000000000000001701000004000000d42400000000000010010000000000001701000002000000f50000001a27508d1a6abf612fd4c090e4bce9d7dda6f175d67b14ec3a9425b4db7b3b133b6d7b7ef128ac8ae3ec089104d3c26136033d5c9d3bfe47f64c24cf894a86fda02abf423398433c5000e90e483c06971056ba26b534fe0247d7e5bcaf91694600adc112bd3b2ee8dc01480d5a2b25759dea320c79ae8832c80a038bedd2099eea9eefd2c744450d7a70a47dcd8fad4e88f5490e91f95cdab70f8b81188467b170be5a3d9daa23470eb053acf37a9b82045a1422659624d038c91edb541acd85de9faa7810aa02b968cb9de91c079b262c26ca7365c80686a31d77cc2450d0e7b908e18ceb7e7fc4ef3f37db6e976709394b042c0de4170787e57b2b00000000000000180000000000000017010000040000000900004000000000180000000000000017010000040000000e00000000000000"], 0x1b8}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000800)="a866eb80edd22e60f9b62f32986c48567051ef19ff05f631e63a821538f7de300016a3ef735110d3202a0d05f7523d042c43fc5a3f84ec1bfd73306496e8065a4aa0e4b79d8fec86f6ac1758f897438257c0c7d61f108c935f75099de5040277b806e6ab96291a710d7b3dc060126391bc41506029e323240cf40caa78257c89e2410d80d677df5d2c0fd986dddadfb82fbde7c224ad14ce2f1688f29bcae72e11668de13779", 0xa6}, {&(0x7f0000000740)="20a98be17109454ae8e36085e1a75561acd53c389b2e288b09", 0x19}, {&(0x7f00000008c0)="9445ad2889fcf56995c160b6339bf87813c0f612511ead562cd5c3bd14532e9443fc9aff4d34c9542dccaa168263ad57bd9fcbdf3d86697487166e202808783f44da507328f22c9a42076c20edd8e2499d532cef4f07d7053b57ede49a023f8b98bf507c985b5a0ccd", 0x69}, {&(0x7f0000000980)="f8445cdf9cb4d1cbce1edfce5cb8cd619af00b443e4552a3d5afd6938f09397dbf8a2bf82b7f04ca8a56b1d90ac187f7ff1b4fffc149788e7e64f2e91ca93e6297eeb6a3e4e2940e54185361ba1b607f662e2859ca4514501776d24b3c4b4c36d1c0c11942a00795e55df8bab52fe7163a3f0e32b07163aba631198f4a7c68719e85ead857b65e12d09f2e03f4ae86a76cdbeb1413879228c020cfabde", 0x9d}, {&(0x7f0000000a40)="2664a2c9f4a25ff2136bebbfca4dd4f76d34e75566722606b8ef71e8689eb79a664b529869adfca8fd806aac76fbae959e11d15cbbe4040a3f1b81587f82f5e284a9a14812675abff46d488f0f525a78907e6ea99c975a281fcf17c20c7785cec3c59c9e466d8040d8a13659b897071051c657d17f5780d9c32ad2c355fd4c449a0ae62887682c2cc8981d883b36b2a0683f78fe268b78bafabdee1e226131d9e7181a54f6f32fb211949deac84d", 0xae}, {&(0x7f0000000b00)="876108b3b8", 0x5}], 0x6, 0x0, 0x0, 0x40000}], 0x2, 0x40800) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000680001060000000000000000020000000400000004009200d3a3eaa58e2ab0507299ba594ab221d7f69588176df72eb8f02962c1f8adf3d1c965658f5c6eac0fe9fec16587d83ba52ef8203322faf463a68df0174494a99a81122a4475a85a8829a238ebfa1fefe94c36a43bebdfe7cff74eb9799c469c15a05a"], 0x1c}}, 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000ffffffeacf3499220000fffffffffffffffe000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6(0xa, 0x80001, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000900)="0ce9cc5baad0452372752aedb8583d0b54028b0af7d2885679b30f4370cdfb9b082a6d8b34af106374ae3be48defc09c113a26c4dba1017c795abce5f4b36f8ace1e06066ad2c734052d5f902e99855e44f52e817fe05a8fd8c9cf882f8e6693ae62f6b8e6b8f804339507e3c4a124f8c32f571c9e200390eaba40288d1c65a9ca3a147f2d22c0327bb5bda3b5b6cdd7c7c632998bdc80d2ea3841d2c6a6ebc1e96f34d89e0275473a960a2f303efd995df44c2454c568b08596e61c51ef05859c511a2421ca008e153ea3df20af299ff33244bb584887181a", 0xd9}], 0x1}}], 0x1, 0x4000000) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="c8ea00000000000000000000000000008500f5ff180000009500000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 32) 1.608079037s ago: executing program 0 (id=1351): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x2, 'vlan0\x00', {0x10}, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@can_newroute={0x164, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "29f764864ce3536c"}}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "38286370efac9bdd"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x4b, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "19bc3340488836aaa131694a4cb097b6acc6773e"}}]}, 0x164}}, 0x0) 1.47902614s ago: executing program 5 (id=1352): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001940)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1a, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000294200010200000085100000f8ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b20000007b8af8ff00000000bfa2bd000000000007020000f8ffffffb78ee50008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"/104], &(0x7f00000004c0)='syzkaller\x00', 0xd13, 0xc5, &(0x7f0000000540)=""/197, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x1, r1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000680)=[{0x2, 0x5, 0x5, 0x2}, {0x0, 0x8001, 0x7, 0xa}, {0x5, 0x1, 0x7, 0xc}, {0x0, 0x3, 0xa, 0xc}, {0x4, 0x3, 0x9, 0xc}, {0x3, 0x3, 0x9, 0x6}, {0x2, 0x1, 0x0, 0xe}, {0x1, 0x3, 0x8, 0xc}, {0x4, 0x2, 0x6, 0x5}], 0x10, 0x87}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r6}, &(0x7f00000001c0), &(0x7f0000000800)=r7}, 0x20) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r7}, 0x20) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$phonet(0x23, 0x2, 0x1) 1.368335252s ago: executing program 6 (id=1354): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000480)={r1}, &(0x7f00000004c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 1.319212145s ago: executing program 0 (id=1355): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x84, 0x20, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x19, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r5, 0x3, 0x7}, 0xc) 1.317672545s ago: executing program 3 (id=1356): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000f3f823968e6530a3009500006400000000000000000000000000000000287ca02a323a3229d7fc285f368c45d8262f9d3844e2349555a79dbe4cc05b625f425bb38e5ce76c2df06c0226102ec2ce5100f746960100008018ef8797f3a09cdea70098487f3f07770b3ee592b4257676a7104b26a420ead60cc211bc33189114cfb6e8e8994be2dc41fd5276e274579b0b5d0cce82be3e4ce682d631136784d4a1f81a1891cf0d54ce66140f8b474be4658a805dd5a788925248d28c3097c9ab91f57b43cdfce513b1c261ecd5bd9104fd554a1ddb36fcd14c9e1bba9f953eebf0ed6dba414ef1eeea0d0300"/248], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0xce2, 0x0, 0x7, 0x1a}, 0xfffffffffffffeed) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x26}, 0x3, 0x1, 0x1, 0x3, 0x1ff, 0x802}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{}, {}], 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611494000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1.193741262s ago: executing program 5 (id=1358): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/76, 0x4c, 0x1, &(0x7f0000000200)=""/134, 0x86}, &(0x7f0000000140)=0x40) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x3, 'lo\x00', {0x4}, 0x1}) 1.066236988s ago: executing program 6 (id=1359): syz_init_net_socket$x25(0x3, 0x5, 0x3) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0xf2) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r9}}, 0x18}}, 0x4090) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r11, @ANYBLOB], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@getchain={0x44, 0x66, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xa, 0x2}, {0x1, 0x1}, {0x3, 0x8}}, [{0x8, 0xb, 0x53c883a4}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x46254d7d}, {0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911007000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', r6, 0x2f, 0x4, 0x8, 0x10, 0x8, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x700, 0x5, 0x7fff}}) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newchain={0x1d6c, 0x64, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x5, 0x5}, {0xfff4, 0xf}, {0x9, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x20}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @filter_kind_options=@f_flow={{0x9}, {0x4}}, @filter_kind_options=@f_basic={{0xa}, {0xd14, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}]}, @TCA_BASIC_POLICE={0x20, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1d, 0x4}}, @TCA_BASIC_ACT={0xbd0, 0x3, [@m_sample={0x168, 0x11, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xe6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x61, 0x3, 0x10000000, 0xc, 0xfff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x81, 0x1, 0x3, 0x6, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x14}]}, {0xe3, 0x6, "695d7fb1d5924e99cb76672efaae01ba3e815dd3cbca39d91b021d0cf3688b6367f19bf7e2da07eed7a972b0d563ab5787ef02ac019a63d8da4d23b35aec0818af2e3bcc22c7488a2735fbe4674882d5dd3b55bc0df893d97934ed7ed3d000d59ad39ea57986d293b1d6a922d47c4b40cece3a24705ea7fc2dbcdd14eb9f38ad2904e9cb4b82037ff797a51296533e9b4d9d550f20e65fb53c2b2966a2f9078589e1bece2e3c50e66f4c785b522d4b61e36b1e8b5ffbc4aec49e410430dfae46498e276423dd2b7babf08f82dc933dd1bf8a7cfc1a4de312e848e66ab421f4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mpls={0x7c, 0x19, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x80, 0x5, 0x9a}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x2b, 0x6, "b39b25a3f11456aeda12aaf3c76fe6345302693f1571a0c72ffb0ea17affc4f867aa3c34ac0480"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x1c0, 0x1c, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x48000000, 0x4, 0x8, 0x10000}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x3, 0xb, 0x6}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x2, 0xffffffffffffffff, 0x5cc, 0x6}, 0x170b62c4d1c2abe, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1, 0x0, 0x4, 0x6}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7c8a966f, 0xda, 0x8, 0xf08d, 0x9}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xe, 0x6, 0x72, 0x9}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x8, 0x8, 0x6, 0x7}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0x10000000, 0x1, 0x21}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x80000001, 0x4, 0xc4, 0x3}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x3, 0x3, 0x100, 0x80000001}, 0x2, r6}}]}, {0x52, 0x6, "b4c2f9964642b6a86a3a14fc500aaec897b2f606da3e584f8c0db1a84a3de4d3ad7a633fb84fab24c64baa2a164e86db4d99e034c917d069adac609f72b81bd3bce332cc784f0dc52f9edd10edf9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x188, 0x6, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x4, 0x3}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x3, 0x20000000, 0x4, 0x9}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x6, 0x10000000, 0xfffffff8}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x2, 0x2, 0x7, 0xf8fa}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xc, 0xffffffffffffffff, 0x7fff, 0x7}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x7, 0x0, 0x5, 0x3}, 0x4, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8, 0x1, 0x1, 0x10000}, 0x4, r6}}]}, {0x7c, 0x6, "97bbf6a04ac94ec27aeb61eaf48c9100626e07d0b6c6876a057cff1288e759c7e9a3c36476dbb39a02b01fcd9da4676f10c7fb07c09fccd592ec4d988085fd2b83c81f1494d040ba4337cc141805fe9db27987ffe9007d52c25b310e1547ff01158ee90479430e0d12c57b0e80d31b3c5026e9bbb03a7626"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x6c, 0x6, "ef8fadf2e97e5f1006c2ee01b66b6d8f322ce5267f6447156999f1179170aedbd7fd5c070e075c990b85b58104730c2762a9af009fc0594300af6ffb538e83a3e11b49e91b2b6a38c770bb61bdf8ee7777fd361691cb4a0e21d0ce95859b6c24758d1752f6d1ab21"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0x388, 0x5, 0x0, 0x0, {{0xa}, {0x28c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x15c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xbcfc5029494065fd}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x12c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xae2167c13060a3de}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0xd1, 0x6, "16017c4baa1f6c2a5fb4f5bf1b53c13fab8b14043a8322f6a80e4e920a3a58915fe523a3fe480adbf0421c07c21a966074bfd33b53523df55c471a694d77dedf645b2159bb670ee4d709688edc1023883f4630e2c18942afe1fe29d1af41bffebb5984ee21a8ecf6f0188de51f0d9f23b4ed5398d9e717290abd599b45b98948292198c79d5d143ec175ae4a879f8bfb901a0d840c40ef0af5358e3436970c29b8cc2705c9890ebd3ea7e0878908238311b34ab6ee36c43d8183d922c05beef372e4c4f8a48533d8b9d3649502"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x100, 0x3, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "d2f629fa0556846d2f9f312eb922d323"}, @TCA_CT_LABELS={0x14, 0x7, "e46eb6996093d307587271b078c01edf"}, @TCA_CT_LABELS={0x14, 0x7, "45ec4a340da89975876067cce753e1fd"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_LABELS={0x14, 0x7, "f9db97b21f7b149f462620bdc1354ad3"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x64, 0x6, "136b93c113c36b995ba6db298468e2cdcb5d34e52710390ed6872ed093a0f0ebd8cbb855a16dbf3e5b3ff57be43e3fe14646e840e9b6a063e04515c78264f73efaf059036cc39edb96e8da11e36efee020d1f21e1e0c70b04daed7385159aa98"}, {0xc}, {0xc}}}, @m_mirred={0x178, 0x15, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x34, 0x5, 0x4, 0x7, 0x9}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc4, 0x8, 0x5, 0x4, 0xc}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0x5, 0x3, 0xfffffffc}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x8, 0x9, 0x40}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffb, 0x8daf, 0x3, 0x4, 0x2}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x5, 0x1, 0x9, 0x6}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6fc7, 0x1, 0x0, 0x3ff}, 0x1, r6}}]}, {0x6a, 0x6, "28cf7ac2065e78fc58381112826fed142fe8a85310abff682b14a61ee7b2eb3f0a5ec1113aefd8f01f4cdf55a69f58cdf5ae5f651ca881f0817a97e57218fd6cf44dc49736d900155e202f3521191c31f7723b8591cfbc4d9d626e9dca6571e36c306d9508d4"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_POLICE={0x30, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_BASIC_ACT={0xc4, 0x3, [@m_ct={0xc0, 0x17, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x9842, 0x10000000, 0x8, 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0x3ff}]}, {0x1d, 0x6, "e2a814cdf21e032bdcf9a879fe52d3edee42101b58a782e7cb"}, {0xc, 0x7, {0x28c711ffdc5e4ffb}}, {0xc, 0x8, {0x4, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x18, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd5, 0x8, 0xff}, {0xffffffffffffffff, 0x2}}}]}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0xfe0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_POLICE={0x41c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000000, 0x10, 0x3, 0x10000, 0xfffffffb, 0xf197, 0x4a2, 0x7fffffff, 0x8, 0x6, 0x10000, 0x5, 0x80000001, 0xfffff997, 0x7955, 0x7, 0x2, 0x0, 0x9, 0x8, 0x10, 0x8000, 0x5, 0x2, 0x3, 0x0, 0x1, 0x8, 0x4, 0xe, 0x8, 0x0, 0x1000, 0x5252, 0x0, 0x2, 0x5, 0x6802f27e, 0x200000, 0x6, 0x6, 0x1000, 0xf6, 0x1, 0x9, 0x3, 0x8001, 0xa551, 0x6, 0x0, 0x1, 0x8, 0x8, 0x3, 0x7, 0x3, 0xf60, 0x7, 0x9e, 0x6, 0x0, 0x0, 0x9, 0x9, 0x7ff, 0xf0, 0x0, 0x2, 0x8, 0x7ed, 0x3, 0x9, 0x0, 0x9, 0x9, 0x9e24, 0x0, 0x0, 0x9, 0x2, 0x2, 0x0, 0x7fff, 0x6, 0x7fffffff, 0xc, 0x3, 0xcd5d, 0x9, 0x114, 0x1, 0x0, 0x80000001, 0xd94c, 0x6, 0x3, 0x101, 0x1, 0x5, 0xffffff00, 0x6b5, 0x1, 0xc0e, 0xaf, 0x9, 0x0, 0x3, 0xb, 0x7, 0xf8, 0x2, 0x9, 0x2, 0xad, 0x7fffffff, 0x8, 0x2, 0x5, 0x8, 0x200, 0x2, 0x4, 0x0, 0x63, 0x7f, 0x2, 0x7f, 0xffffffff, 0x2, 0x9, 0x84e1, 0xb9, 0x7, 0xb, 0x3, 0x3, 0x9, 0x7, 0x9, 0x1, 0xc4, 0x9, 0xfffffffb, 0x2, 0x0, 0x5, 0x9, 0x0, 0x5, 0x7, 0x1, 0x5, 0x400, 0x2, 0xbc000000, 0x6, 0x7, 0xfffffffe, 0xa9b7, 0x4, 0x8, 0x8, 0x6, 0x6, 0x10000, 0x3, 0x5ebf, 0x8, 0x3, 0x8001, 0x2, 0x8, 0x7, 0x6, 0x5, 0xd, 0x1, 0x101, 0x2c80b570, 0x401, 0x64f, 0x3, 0x4, 0xf, 0xffffff00, 0x672, 0x0, 0x7, 0x1, 0x8000, 0x2, 0x5, 0x3, 0x2, 0xb4a, 0x8, 0x200, 0x6, 0x9, 0x80, 0x3, 0x4, 0x8, 0x9, 0x1, 0x4, 0xf9, 0x3, 0x9, 0x8000, 0x3, 0x27e6, 0x4e, 0x19e, 0x2, 0x5, 0x6, 0xfe9c, 0x0, 0x5, 0x3, 0x6, 0x4, 0x6, 0x7c5b, 0x1, 0x81a1450, 0x5, 0x0, 0xe000, 0x7fff, 0x5, 0x6, 0x6, 0x4, 0x0, 0x7f6, 0x9, 0x9, 0x2, 0x1, 0x29e, 0x86, 0xf59, 0x0, 0x1, 0xd671, 0x2, 0x63a, 0x6, 0x7, 0xff, 0x7, 0x1, 0xffffda45]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_U32_MARK={0x10, 0xa, {0xfffffffd, 0x8}}, @TCA_U32_HASH={0x8, 0x2, 0x9}, @TCA_U32_ACT={0x788, 0x7, [@m_ct={0x170, 0x10, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "59e9dd2f97a059d61fe5e8834434426f"}, @TCA_CT_PARMS={0x18, 0x1, {0x1, 0x3, 0x6, 0x7fff, 0x8}}, @TCA_CT_ZONE={0x6, 0x4, 0x6}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_ACTION={0x6, 0x3, 0x6}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x3}}}}, @m_skbedit={0xb8, 0x15, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7f, 0x60200000, 0x5, 0x8, 0x5}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x80, 0x4, 0x5, 0xd}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf5b, 0x0, 0x20000000, 0x3, 0x8649}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x3a, 0x6, "aad224d2b203c07a384ff6c91e25b8c8dd22584fbed1a35a05a9894e101b524d090f091fd4ba45dc820f4ab0a4b7518850a531ef7f38"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0xdc, 0x11, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x200, 0x7, 0x6, 0x7, 0x7}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1, 0x7fff, 0x4}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7fffffff, 0x3, 0x5, 0x401}, 0x8}}]}, {0x5c, 0x6, "bd69f813122d8bf4a86dd32ab82cc59a2adcd40baa5dc2e072c65de30b4411a43a6879212e13790ddaace8c8cb6a7517be237f3e6de7b0e06f79d4cd8284fdaa4d255666a350147a36bb31882fd72be2f6d8fba6c563c174"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x110, 0x6, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffff7, 0x0, 0x10000006, 0x7, 0xffffffff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xc345}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x72, 0x6, "4737b92c91c3a1c5fd171e02e8196a9c55956da75a741a89cae73f18747da1ceab00de3e54226e12074d57b7ab343b4b7fc269684291a24909955b392cb94f2581b9bd45d94b6f52113c5d74daba85da9809fd6690e29a93bb7fceb6aeec1553899c7ec7e486a1b4cec9cbf16262"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x130, 0x18, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xed, 0xfff, 0x4, 0x8, 0x3ff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9ccb, 0x2, 0x3, 0xfffffff4, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x9, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0xf8e, 0x5, 0x8, 0x8, 0x200}}]}, {0xa2, 0x6, "55336c05cfc1fffb9b5d1bc3e62ed427235039e682e00327435ebb9920544d81e3bda34d0f0acb4b13b4e99347c38998fd1c5407f4dea2aa20f23bb07cd1d2dcfdf2f454e06364f169891fa88cfc7304067995b613da58da9c366a0e633830f556b63f4933f8ca2dfd86de8df7de8badcc57aeb34841d176d7a23c5915dbe5e50e87c6f7f5fa55d28d9c148abd6caf62fa042628087b8477ea66d310adc4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xf0, 0xb, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa8b}]}, {0x99, 0x6, "fcc765ae9db57b3c7cdcd5d7cbaf125e649351b389436e5a0966774681c9245b7cbd8239bfead6782b4aa783245416faf40108c5645744fefa925b164db5b16e4af35cb10c1d5bbf5b5d967206aefafee458d5464c9985c036db905e49aaebd993dee91dbd0a8d5fb3a6da15925de97c54943ce4f4df3669d57597cfe28545a06d2dbc77040a57dd6a7f0fc10d784ee41496c60641"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x150, 0x7, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1b8, 0x6, 0x7, 0x9, 0x5}}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}]}, {0xeb, 0x6, "eeded8315929fe0ea0329cd85fc1043d6d434a72c1808c7d2c9eccc5845b7bd1b5f9a423e953022c5d43126f453480caeab5dacf9eec205980d679e0cca39de24d6ae936b66e4e66cc70686b1ac15d28a84f6250c8c52b1e956da10b16c2cb87aa6d6fe9bea6b9bb93868c09a673b332379fa1c831adc2b0a560a612d2109c58c57cf2fb8b70c954397903778151e9ff8e5301fc4c314be373b376016d8ca192390a48185f8f00f8e2e4b94a86a46bd05a2e1172e44cb09abb7b71d6eb52359d96b7829ddc43c1029d3a84a356dd4383adc09b069bdc75f41e607cd43e6927bf2f4e971879c8a4"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x9, 0xf77, 0x40, 0xfffffbff, 0x0, 0x1ff, 0xfff, 0xf46, 0x562, 0x6, 0x8, 0x10001, 0x3, 0x9, 0x0, 0x6, 0x100, 0xffff, 0x8, 0x200, 0x800, 0x2, 0xc514, 0x8, 0x5, 0xfffffff7, 0x0, 0x1, 0x80000000, 0x1ab, 0x0, 0x1ff, 0x5, 0x7f, 0x8000, 0x9bc, 0x322, 0x6, 0x1ff, 0x1000, 0x79, 0x2, 0x6, 0x3d86b803, 0xf, 0x0, 0x8, 0x2, 0x5, 0x4, 0x2, 0xd, 0x0, 0x14, 0x2, 0x3ff, 0xf, 0x225, 0x77a, 0x2, 0x7, 0x8, 0x80000000, 0x9, 0x0, 0xaaba, 0xe, 0x9, 0x81, 0x6, 0x2, 0xafc, 0xfff, 0x5, 0x6ea, 0x462, 0x0, 0xa7, 0xfff, 0x5, 0x4, 0x7ff, 0x3, 0x209, 0x7e, 0x40, 0x72f, 0x8, 0x3, 0x0, 0x7, 0x1000, 0x3, 0x916, 0xfffff800, 0x6, 0x8d, 0x1, 0x5, 0xdf, 0xf, 0x8001, 0x8, 0x6, 0x8001, 0x2, 0x6, 0x7ff, 0x3ff, 0xffffffff, 0xf8fb, 0x8000, 0x3, 0x58, 0xe, 0x6, 0x5, 0x0, 0x2, 0x4, 0xffffffff, 0x1, 0x0, 0x8, 0x9, 0x7, 0x135, 0xfffffffb, 0xd755, 0x6, 0x7d, 0xffffffc0, 0x0, 0x8001, 0x7, 0x5, 0x9, 0x0, 0x2, 0x4, 0xf91, 0x1, 0x0, 0x3ff, 0x46, 0x8, 0xffffffff, 0x3, 0x7, 0x5, 0x2, 0x2, 0x64a9, 0x1ff, 0x0, 0x7, 0x8, 0x400, 0xd6d4, 0x2, 0x8001, 0xffffffff, 0xfff, 0xff, 0x1ae80, 0xf1f, 0x9, 0xc8b, 0x3, 0xffffffff, 0x3, 0x100000, 0x8, 0xffff, 0x4, 0x5, 0x1000, 0x3, 0x6, 0xe6d, 0x8, 0xffffde37, 0x2, 0x47c, 0x101, 0x8, 0xffff8000, 0xa7, 0x4, 0x6, 0x0, 0xfe, 0x100, 0x6, 0x724d, 0x8, 0xff95, 0x0, 0x9, 0x3, 0x8, 0xb, 0xffff7fff, 0xe7b0, 0x2, 0x2, 0x80, 0x5f17, 0x0, 0x8, 0x7, 0x1, 0xfff, 0x2, 0x723, 0x0, 0x8, 0x8, 0x4, 0x5, 0x9, 0xb, 0x1, 0xa, 0x2af, 0x6, 0x7, 0x8, 0x7, 0xffff, 0x9, 0x7, 0x9, 0x1, 0xe, 0xe, 0x8, 0x7fffffff, 0x33ab, 0x324e, 0x0, 0x7ff, 0x59, 0x8, 0x3ff, 0x2, 0x9, 0x12000000, 0x5, 0x3, 0x1c000, 0x40, 0x1, 0x1, 0x2]}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xc}}]}, 0x1d6c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208000, 0x0) ioctl$TUNDETACHFILTER(r13, 0x401054d6, 0x0) (async) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r15 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="0100000000ed0000000004"], 0x40}, 0x1, 0x40030000000000}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000180)=0x30) 1.064937237s ago: executing program 0 (id=1360): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='highspeed', 0x9) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f00000012c0)={0x10c, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xc94}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6}, {0x8, 0x15, 0xa}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xb1c}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x3}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9f3bfbc1f39cb307b3472ea9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x20800, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffeb}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r6, &(0x7f00000011c0)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f0000000280)=""/23, 0x17}, {&(0x7f00000007c0)=""/96, 0x60}], 0x7, &(0x7f0000000b40)=""/196, 0xc4}, 0x4}, {{&(0x7f00000009c0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000c40)=""/223, 0xdf}, {&(0x7f0000000d40)=""/123, 0x7b}, {&(0x7f0000000dc0)=""/195, 0xc3}], 0x3, &(0x7f0000000ec0)=""/251, 0xfb}, 0x5a6}, {{&(0x7f0000000fc0)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000001040)=""/145, 0x91}, {&(0x7f0000001100)=""/149, 0x95}], 0x2, &(0x7f0000000a40)}, 0x2000000}], 0x3, 0x60, &(0x7f0000000ac0)={0x0, 0x3938700}) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES64=r5, @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r7], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}, {&(0x7f0000000900)=""/186, 0xba}], 0x3}, 0x10301) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.006570871s ago: executing program 1 (id=1361): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @volatile]}}, 0x0, 0x4a}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030069087a300000000060000000060a010400000000000000000500400008000b400000000038000480340001800b00010074756e6e656c0000240002800800034000000000080001400000000908000340000000f5080002400000000c0900010073797a3000"], 0xd4}}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0x3f39, 0x4a3, 0xdb1, 0x7, 0xa6]}, &(0x7f0000000300)=0x54) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00{\t\x00\x00\x00', 0x8) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x300, 0x70bd2d, 0x25dfdbfc, {0xa, 0x20, 0x20, 0x6a, 0x0, 0x0, 0x0, 0x4, 0x1}, ["", ""]}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'caif0\x00', &(0x7f0000000140)=@ethtool_eeprom={0xc, 0x7, 0x3, 0xaa, "cabd256e6a06e4d73a6a795b67d71842d3eb9d81e5e9313737e95012888fa41b3144415bb4d8896dc7902c26350ac95240b51fb660d8802fa657b287ed8b808563a882edb3348788b57a3e360462f96a4063d2c17fbb97399768f022021713c390f05148ab86a4095966d1401224b73e96c37212851de884b9f8ab452056075a1629d60e33c2f537c54a0090327ff8537522bf7896c6b278878eaf8af9d35f2475cfa9088540a4a6ba63"}}) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @volatile]}}, 0x0, 0x4a}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030069087a300000000060000000060a010400000000000000000500400008000b400000000038000480340001800b00010074756e6e656c0000240002800800034000000000080001400000000908000340000000f5080002400000000c0900010073797a3000"], 0xd4}}, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0x3f39, 0x4a3, 0xdb1, 0x7, 0xa6]}, &(0x7f0000000300)=0x54) (async) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) (async) setsockopt(r1, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00{\t\x00\x00\x00', 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x300, 0x70bd2d, 0x25dfdbfc, {0xa, 0x20, 0x20, 0x6a, 0x0, 0x0, 0x0, 0x4, 0x1}, ["", ""]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'caif0\x00', &(0x7f0000000140)=@ethtool_eeprom={0xc, 0x7, 0x3, 0xaa, "cabd256e6a06e4d73a6a795b67d71842d3eb9d81e5e9313737e95012888fa41b3144415bb4d8896dc7902c26350ac95240b51fb660d8802fa657b287ed8b808563a882edb3348788b57a3e360462f96a4063d2c17fbb97399768f022021713c390f05148ab86a4095966d1401224b73e96c37212851de884b9f8ab452056075a1629d60e33c2f537c54a0090327ff8537522bf7896c6b278878eaf8af9d35f2475cfa9088540a4a6ba63"}}) (async) 991.303965ms ago: executing program 3 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}}, 0x40800) 899.146835ms ago: executing program 5 (id=1363): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2d, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r1, &(0x7f0000001380)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8b1c}]}, 0x44}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x1010, r4, 0x0) 840.961226ms ago: executing program 6 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x1a}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x4c}}, 0x0) 794.900577ms ago: executing program 1 (id=1365): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff03"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="dfc0ceb8820abec60c696cab45bfd6886cda165282e95f937198811839cc1c94ff5a827f2d626fe2d6b98c8ec73654ef5ffc03f67675dd5f1328a9e081be0b7f", 0x40}, {&(0x7f0000000280)="2b519768c2857661a98d88e4f676ca4c4f01d1c591ef0f28071a2d0e5fa7b068c75b2d35b2a7d7e62d1eb2478a55990d7fbad1ea43f79d79d748ccef814f94439723501054b2a5636928ea7ea26ccb97e2279ac3a0f8b6b566f42913a5ce800f841c3fc82a", 0xfffffffffffffcd6}, {&(0x7f0000000640)="70d24aea56ac70a107b54c9b3c6c6c6e71451957485002c382b8cfa403dd24bc5809a7e48f39497a0a5f80666335592c432c8b21d97210e230b0d30ab9d7ed422dab98dcba0ef2d13d1dacb169a6017766fe1bd4735874e4c71c041535dc0c97c0da64", 0x63}], 0x3, 0x0, 0x0, 0xc00e}, 0x801) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) recvmsg$qrtr(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)=""/240, 0xf0}], 0x1}, 0x38, 0x122) r4 = socket$can_j1939(0x1d, 0x2, 0x7) close(r4) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffff8, 0x0, r7}, 0x48) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000180)=0x4, 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x90) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmmsg$inet(r5, &(0x7f0000001180)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbee0000000000008001489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cce1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f38babdb6943940ad3a772bf", 0x92}, {&(0x7f0000000500)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbba0000007e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe12158713ef8864796df4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000440)="b732b06fd220a6145520dbf60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef797196270c000000000000002fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac20000a8e1da8150f1a1d8f51c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f00a3d0b32e99927685000000000000", 0x9e}, {&(0x7f0000000a80)="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", 0x1b0}, {&(0x7f0000000dc0)="0b41dae71fdbfbd927fcefd552617a65c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853c708b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680afbffffff9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a86eb407515edbef8eaef93d56681", 0xdb}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="fcbed7e57e1228", 0x7}], 0x1}}], 0x3, 0x2000c044) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000840)="924a4a4efaa8c147dcb1786d9df723186ccebd489ff7b0d86d247eb95a1ce6271bfd0baa34a8beb3f3544dc367d98ca10aa2616b0a86b3b74c1ccc883a01a822c4f3dec83dcca4d2ca0b4b34949eda70a71c837abb5d41d7fe1c9dec9ff63b6bc684ed642f8e1e75742a9065b17f2649e0e9845847f28b3561dd41c4c56f61c3c5e985b8c83f6cebc82a7c2eb8da77c9eb", 0x91}, {&(0x7f0000000c40)="b4207053c783840adc326e2741bc", 0xe}], 0x2) 711.162788ms ago: executing program 3 (id=1366): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r1) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r3, 0xc0189436, 0x1ffffffe) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x11}}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x804) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r5}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 692.702855ms ago: executing program 1 (id=1367): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000100)={@val={0x0, 0x1aa8}, @val={0x2, 0x1, 0x6, 0xffff, 0x7fff, 0x406}, @arp=@generic={0x325, 0x6007, 0x6, 0x6, 0x9, @local, "9224220b5c2a", @empty, "7d852d7c6eaf4acf4b96abc58681"}}, 0x36) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r6, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 613.250564ms ago: executing program 3 (id=1368): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$ax25_int(r3, 0x101, 0x0, &(0x7f0000000000)=0x2, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000bd96955953f1de000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b66b6e000000000000000000000000000000000000000000000000000c0008000000000000000000"], 0x134}}, 0x0) 558.950317ms ago: executing program 6 (id=1369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x2a, 0x800, 0x3) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="58ce9aa3f06bdc53d5e75b8de9338eab9f4cbd7bd0d5f4b6c9a39c235a0d996decf6bf391fcf5ee8099ae00df0d3e6f9dfbc32d4", 0x34}, {&(0x7f0000000080)="5c17be1d787e3b9f2cff096342de", 0xe}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2f0}, 0x4000) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000a00)={r1, 0x800, 0x8000000000000001, 0x4}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @local, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r10, 0x8b2c, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000008000000000000000100000095560001040000000000000000000000519911e3ef5a032f80986775032c2c2f72d045cf0733c5f60f35b8b3a48cc9137b7035eb715f414f4001599016c0bce529414bc6b287d17f8ebf1491c356fec527e161301adde8"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0xee, &(0x7f0000000900)=""/238, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x1, 0x5, 0x7, 0x34b}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000a80)=[{0x0, 0x1, 0x3, 0xa}, {0x5, 0x5, 0xf, 0x9}, {0x5, 0x4, 0xc, 0x3}, {0x3, 0x5, 0xb, 0x5}, {0x2, 0x2, 0x6, 0x8}, {0x2, 0x4, 0x2, 0x9}], 0x10, 0x9}, 0x94) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="c07200008cc67171e51b0de713dc0d6f40e59782a766bd6ae09ecb3610acd10376fcb5b144b646117deb8b4b467a4d97272a0e428cd4b08c5988", @ANYRES16=r11, @ANYBLOB="010000000000000000000d000000060008000000000006000a0000000000"], 0x24}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000280)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 542.377033ms ago: executing program 1 (id=1370): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f00000003c0)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x29, 0x20, 0x0, &(0x7f0000000040)=0x2000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r4, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x1}}}}, 0x30}}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000700)=[{&(0x7f0000000100)="0232e6003953b008fefa8ce2d4c1c866321c084bb58c3dd1666a19af3c73704fb3e6436512727a375df73783de35a42869d1e92883480dcb474e02000000", 0x3e}, {&(0x7f0000000140)="1a36c585f33853c08764d056a899743cbaf5cde47e5f51052d82c1f377d8f72f89af744237090097b332c713a69b99f29ce733eba562f02397e840adb48a98d70c2d385c", 0x44}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) write$bt_hci(r7, 0x0, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) write$bt_hci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="01131e99823bff"], 0x7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000080)=0x6, 0x4) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}]}, 0x58}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="380100001a0013070000000000000000fe8000000000000000000000000000aaffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003300000020010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000a0001000000000000000000480001007368613100"/240], 0x138}}, 0x0) 469.21919ms ago: executing program 3 (id=1371): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x15}, 0x90) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 287.061374ms ago: executing program 5 (id=1372): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x102, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x36, 0x4, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x1f, 0xca, [@loopback, @broadcast, @multicast2, @loopback, @multicast2, @private=0xa010100, @private=0xa010102]}, @timestamp_prespec={0x44, 0x24, 0x29, 0x3, 0x9, [{@remote, 0xfff}, {@private=0xa010101, 0x7}, {@rand_addr=0x64010100}, {@private=0xa010102, 0x7}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x32, 0x3, [{0x0, 0xe, "c36f8fed00d1c01a5ffa85dd"}, {0x2, 0x4, "d1f1"}, {0x5, 0xc, "07bb64f125b0b0bfed16"}, {0x7, 0xe, "88a923d4204afe8d457eb760"}]}, @rr={0x7, 0xb, 0x72, [@empty, @private=0xa010100]}, @cipso={0x86, 0x40, 0x1, [{0x2, 0x9, "ccb18b2fe8ec38"}, {0x5, 0xd, "9ea3b2d81f9d985bd75c51"}, {0x7, 0x4, "0589"}, {0x6, 0xe, "076b99c8865b90f35ef0c023"}, {0x1, 0x9, "326b52f992b011"}, {0x6, 0x9, "389fb52ec93814"}]}]}}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) socket(0x11, 0x800000003, 0x0) (async) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'bond0\x00'}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 256.280271ms ago: executing program 1 (id=1373): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.swap.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r2, 0x34da2000) 161.948ms ago: executing program 6 (id=1374): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) (async) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) (async, rerun: 64) connect$ax25(r1, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) (async, rerun: 64) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'hsr0\x00'}) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001"], 0x80}}, 0x0) 90.943385ms ago: executing program 1 (id=1375): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) unshare(0x6a040000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x14}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2088}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 0 (id=1376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. [ 68.773753][ T5817] cgroup: Unknown subsys name 'net' [ 68.905606][ T5817] cgroup: Unknown subsys name 'cpuset' [ 68.914221][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.345397][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.515278][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.521841][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.794716][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.804342][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.822686][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.829455][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.830585][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.850695][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.859788][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.868102][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.876849][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.882286][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.902329][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.905237][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.911591][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.924394][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.925605][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.935163][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.939544][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.947738][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.954206][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.959446][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.967120][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.974554][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.984214][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.990253][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.996236][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.585043][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 73.698767][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 73.766082][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 73.878568][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 73.919317][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.926574][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.934369][ T5831] bridge_slave_0: entered allmulticast mode [ 73.941410][ T5831] bridge_slave_0: entered promiscuous mode [ 73.969676][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.977032][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.984601][ T5831] bridge_slave_1: entered allmulticast mode [ 73.991520][ T5831] bridge_slave_1: entered promiscuous mode [ 73.998983][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 74.120350][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.157005][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.164208][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.171352][ T5840] bridge_slave_0: entered allmulticast mode [ 74.178667][ T5840] bridge_slave_0: entered promiscuous mode [ 74.188803][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.208097][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.215388][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.222688][ T5828] bridge_slave_0: entered allmulticast mode [ 74.229895][ T5828] bridge_slave_0: entered promiscuous mode [ 74.237400][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.244758][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.252204][ T5840] bridge_slave_1: entered allmulticast mode [ 74.259525][ T5840] bridge_slave_1: entered promiscuous mode [ 74.297462][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.304744][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.312233][ T5828] bridge_slave_1: entered allmulticast mode [ 74.319364][ T5828] bridge_slave_1: entered promiscuous mode [ 74.365564][ T5831] team0: Port device team_slave_0 added [ 74.411662][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.423025][ T5831] team0: Port device team_slave_1 added [ 74.440135][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.447456][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.455377][ T5827] bridge_slave_0: entered allmulticast mode [ 74.462600][ T5827] bridge_slave_0: entered promiscuous mode [ 74.472334][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.487995][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.523035][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.530373][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.537854][ T5827] bridge_slave_1: entered allmulticast mode [ 74.545097][ T5827] bridge_slave_1: entered promiscuous mode [ 74.553566][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.585385][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.592652][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.599863][ T5830] bridge_slave_0: entered allmulticast mode [ 74.607465][ T5830] bridge_slave_0: entered promiscuous mode [ 74.654415][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.661376][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.687742][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.699698][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.706940][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.714220][ T5830] bridge_slave_1: entered allmulticast mode [ 74.721322][ T5830] bridge_slave_1: entered promiscuous mode [ 74.755482][ T5840] team0: Port device team_slave_0 added [ 74.763691][ T5828] team0: Port device team_slave_0 added [ 74.770309][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.777938][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.804284][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.838407][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.849791][ T5840] team0: Port device team_slave_1 added [ 74.858204][ T5828] team0: Port device team_slave_1 added [ 74.900862][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.951718][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.959319][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.985626][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.000100][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.030193][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.038200][ T5844] Bluetooth: hci1: command tx timeout [ 75.038205][ T5838] Bluetooth: hci0: command tx timeout [ 75.038521][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.044409][ T5838] Bluetooth: hci3: command tx timeout [ 75.049866][ T5844] Bluetooth: hci2: command tx timeout [ 75.076855][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.098718][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.105839][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.112112][ T5844] Bluetooth: hci4: command tx timeout [ 75.132160][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.150243][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.174915][ T5827] team0: Port device team_slave_0 added [ 75.191085][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.198352][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.224577][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.262418][ T5827] team0: Port device team_slave_1 added [ 75.274017][ T5831] hsr_slave_0: entered promiscuous mode [ 75.280513][ T5831] hsr_slave_1: entered promiscuous mode [ 75.306619][ T5830] team0: Port device team_slave_0 added [ 75.364178][ T5830] team0: Port device team_slave_1 added [ 75.370753][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.378141][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.404354][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.427680][ T5828] hsr_slave_0: entered promiscuous mode [ 75.434073][ T5828] hsr_slave_1: entered promiscuous mode [ 75.440102][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 75.445975][ T5828] Cannot create hsr debugfs directory [ 75.476336][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.483724][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.509727][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.590960][ T5840] hsr_slave_0: entered promiscuous mode [ 75.597380][ T5840] hsr_slave_1: entered promiscuous mode [ 75.604313][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 75.610050][ T5840] Cannot create hsr debugfs directory [ 75.616345][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.623720][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.650227][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.681869][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.689027][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.715250][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.810099][ T5827] hsr_slave_0: entered promiscuous mode [ 75.816714][ T5827] hsr_slave_1: entered promiscuous mode [ 75.823100][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 75.828825][ T5827] Cannot create hsr debugfs directory [ 75.965236][ T5830] hsr_slave_0: entered promiscuous mode [ 75.971694][ T5830] hsr_slave_1: entered promiscuous mode [ 75.977892][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 75.983666][ T5830] Cannot create hsr debugfs directory [ 76.321341][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.334168][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.356251][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.374357][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.430826][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.443792][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.465752][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.478370][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.552261][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.562517][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.573954][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.585831][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.696588][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.708649][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.742778][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.754018][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.826196][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.854150][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.886358][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.893648][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.929278][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.940333][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.951812][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.968476][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.992888][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.000093][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.016327][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.044133][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.084174][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.091318][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.113812][ T5846] Bluetooth: hci3: command tx timeout [ 77.113841][ T5847] Bluetooth: hci0: command tx timeout [ 77.119290][ T5844] Bluetooth: hci2: command tx timeout [ 77.124669][ T5838] Bluetooth: hci1: command tx timeout [ 77.140938][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.148069][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.169143][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.192368][ T5844] Bluetooth: hci4: command tx timeout [ 77.241764][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.270410][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.281607][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.298523][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.305758][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.354244][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.361395][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.479694][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.568787][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.579647][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.637080][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.644311][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.669977][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.677352][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.707250][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.724573][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.731687][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.775210][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.813429][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.820598][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.870261][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.927644][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.056749][ T5828] veth0_vlan: entered promiscuous mode [ 78.088560][ T5831] veth0_vlan: entered promiscuous mode [ 78.107601][ T5828] veth1_vlan: entered promiscuous mode [ 78.135639][ T5831] veth1_vlan: entered promiscuous mode [ 78.244146][ T5840] veth0_vlan: entered promiscuous mode [ 78.255077][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.267442][ T5828] veth0_macvtap: entered promiscuous mode [ 78.295249][ T5840] veth1_vlan: entered promiscuous mode [ 78.305864][ T5828] veth1_macvtap: entered promiscuous mode [ 78.356846][ T5831] veth0_macvtap: entered promiscuous mode [ 78.384555][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.398297][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.408484][ T5831] veth1_macvtap: entered promiscuous mode [ 78.443061][ T5840] veth0_macvtap: entered promiscuous mode [ 78.465088][ T3502] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.476728][ T3502] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.490327][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.506312][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.513738][ T3502] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.523967][ T3502] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.538109][ T5827] veth0_vlan: entered promiscuous mode [ 78.550063][ T5840] veth1_macvtap: entered promiscuous mode [ 78.561267][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.601076][ T5827] veth1_vlan: entered promiscuous mode [ 78.609340][ T1010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.619369][ T1010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.635383][ T1010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.645153][ T1010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.673193][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.718580][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.784912][ T1010] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.794544][ T1010] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.822640][ T1010] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.831433][ T1010] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.862612][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.876789][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.907521][ T5827] veth0_macvtap: entered promiscuous mode [ 78.967186][ T5827] veth1_macvtap: entered promiscuous mode [ 78.990637][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.000313][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.005088][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.010868][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.098687][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.116941][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.126675][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.127457][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.150922][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.194751][ T5844] Bluetooth: hci0: command tx timeout [ 79.194791][ T5838] Bluetooth: hci2: command tx timeout [ 79.200175][ T5846] Bluetooth: hci3: command tx timeout [ 79.210352][ T5847] Bluetooth: hci1: command tx timeout [ 79.216367][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.228107][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.273226][ T5847] Bluetooth: hci4: command tx timeout [ 79.299403][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.316986][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.323054][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.333709][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.352738][ T5830] veth0_vlan: entered promiscuous mode [ 79.368758][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.393884][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.430374][ T5830] veth1_vlan: entered promiscuous mode [ 79.519780][ T5947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.671708][ T5830] veth0_macvtap: entered promiscuous mode [ 79.712359][ T5954] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.735515][ T5957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.767439][ T5830] veth1_macvtap: entered promiscuous mode [ 79.773593][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.781417][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.889548][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 79.899875][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 79.925821][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.966167][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.136274][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.161245][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.168686][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.202146][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.235573][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.264292][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.317325][ T5978] Zero length message leads to an empty skb [ 80.505348][ T5977] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 80.525138][ T5986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'. [ 80.732382][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.741195][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.852187][ T5998] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16'. [ 80.896962][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.922107][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.923105][ T6005] sctp: [Deprecated]: syz.3.18 (pid 6005) Use of int in maxseg socket option. [ 80.923105][ T6005] Use struct sctp_assoc_value instead [ 80.972957][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.990085][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.016340][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.044170][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.245061][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 81.273355][ T5847] Bluetooth: hci3: command tx timeout [ 81.278854][ T5838] Bluetooth: hci0: command tx timeout [ 81.278875][ T5846] Bluetooth: hci1: command tx timeout [ 81.284580][ T5847] Bluetooth: hci2: command tx timeout [ 81.352629][ T5847] Bluetooth: hci4: command tx timeout [ 81.375417][ T6014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22'. [ 81.510546][ T6029] syz.0.25 uses obsolete (PF_INET,SOCK_PACKET) [ 81.611161][ T6029] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 81.771344][ T6043] delete_channel: no stack [ 82.200049][ T6064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.217999][ T6064] netlink: 284 bytes leftover after parsing attributes in process `syz.3.32'. [ 82.309924][ T6074] netlink: 112 bytes leftover after parsing attributes in process `syz.3.32'. [ 82.945272][ T6101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.37'. [ 83.016637][ T6106] netlink: 44 bytes leftover after parsing attributes in process `syz.4.38'. [ 83.042132][ T6106] netlink: 'syz.4.38': attribute type 3 has an invalid length. [ 83.103001][ T6106] netlink: 'syz.4.38': attribute type 2 has an invalid length. [ 83.279053][ T6116] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 83.305073][ T6116] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 83.322155][ T6123] netlink: 'syz.2.40': attribute type 3 has an invalid length. [ 83.330887][ T6123] netlink: 'syz.2.40': attribute type 2 has an invalid length. [ 83.358572][ T6124] veth1_to_bond: entered allmulticast mode [ 83.391370][ T6124] bond0: (slave bond_slave_1): Releasing backup interface [ 83.445703][ T6124] veth1_to_bond (unregistering): left allmulticast mode [ 83.745183][ T6139] netlink: 'syz.0.45': attribute type 3 has an invalid length. [ 83.773383][ T6143] netlink: 'syz.0.45': attribute type 3 has an invalid length. [ 84.381719][ T6171] netlink: 'syz.3.52': attribute type 21 has an invalid length. [ 84.399545][ T6171] IPv6: NLM_F_CREATE should be specified when creating new route [ 84.610870][ T6183] netlink: 'syz.2.54': attribute type 10 has an invalid length. [ 84.746909][ T6179] warning: `syz.2.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.801208][ T6183] team0: Port device dummy0 added [ 84.815498][ T6186] C: renamed from lo (while UP) [ 84.840313][ T6189] netlink: 'syz.0.56': attribute type 1 has an invalid length. [ 85.105811][ T6208] __nla_validate_parse: 11 callbacks suppressed [ 85.105829][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 85.348628][ T6221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'. [ 85.358718][ T6221] netlink: 68 bytes leftover after parsing attributes in process `syz.1.67'. [ 85.409726][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.417818][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.606961][ T6233] bond1: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 85.768286][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.75'. [ 85.796662][ T1169] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x16 [ 85.812291][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'. [ 86.057657][ T6268] bond1 (unregistering): Released all slaves [ 86.084702][ T6272] netlink: 48 bytes leftover after parsing attributes in process `syz.2.79'. [ 86.435184][ T6250] netlink: 256 bytes leftover after parsing attributes in process `syz.4.74'. [ 86.631708][ T6291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 86.896180][ T43] cfg80211: failed to load regulatory.db [ 86.914261][ T6308] validate_nla: 1 callbacks suppressed [ 86.914278][ T6308] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 86.982596][ T6308] netlink: 15722 bytes leftover after parsing attributes in process `syz.1.86'. [ 87.060226][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.90'. [ 87.281778][ T6330] netlink: 'syz.4.92': attribute type 21 has an invalid length. [ 87.799179][ T6329] hsr_slave_1 (unregistering): left promiscuous mode [ 87.822698][ T6330] netlink: 'syz.4.92': attribute type 5 has an invalid length. [ 87.890543][ T6338] netlink: 'syz.1.96': attribute type 25 has an invalid length. [ 87.922000][ T6343] netlink: 'syz.2.95': attribute type 29 has an invalid length. [ 88.033943][ T6346] bond1 (unregistering): Released all slaves [ 88.240118][ T6360] IPv6: NLM_F_REPLACE set, but no existing node found! [ 88.427696][ T6367] bond1: entered promiscuous mode [ 88.434411][ T6367] bond1: entered allmulticast mode [ 88.440248][ T6367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.577689][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.585057][ T6378] bridge0: port 2(bridge_slave_1) entered listening state [ 88.593089][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.600300][ T6378] bridge0: port 1(bridge_slave_0) entered listening state [ 88.675634][ T6378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.719499][ T6387] tipc: Started in network mode [ 88.724861][ T6387] tipc: Node identity ac1414aa, cluster identity 4711 [ 88.735492][ T6387] tipc: Enabled bearer , priority 10 [ 88.805324][ T6396] trusted_key: syz.0.109 sent an empty control message without MSG_MORE. [ 88.915424][ T6398] netlink: 'syz.2.110': attribute type 9 has an invalid length. [ 89.014516][ T6398] netlink: 'syz.2.110': attribute type 9 has an invalid length. [ 89.585144][ T6440] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 89.605493][ T6440] bond2 (unregistering): Released all slaves [ 89.798592][ T6445] netlink: 'syz.2.120': attribute type 17 has an invalid length. [ 89.853777][ T9] tipc: Node number set to 2886997162 [ 89.936997][ T6468] netlink: 'syz.4.125': attribute type 1 has an invalid length. [ 89.953330][ T6468] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.292495][ T6478] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 90.426697][ T6483] syzkaller0: entered promiscuous mode [ 90.464625][ T6483] syzkaller0: entered allmulticast mode [ 90.697880][ T6493] netlink: 'syz.4.133': attribute type 1 has an invalid length. [ 90.771544][ T6495] __nla_validate_parse: 15 callbacks suppressed [ 90.771562][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 91.990933][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'. [ 92.064856][ T6525] netlink: 76 bytes leftover after parsing attributes in process `syz.3.142'. [ 92.254717][ T6545] Bluetooth: MGMT ver 1.23 [ 92.529697][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.147'. [ 92.573063][ T6556] validate_nla: 2 callbacks suppressed [ 92.573079][ T6556] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 92.590505][ T6556] netlink: 'syz.2.148': attribute type 2 has an invalid length. [ 92.604370][ T6554] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 92.626713][ T6554] netlink: 'syz.2.148': attribute type 2 has an invalid length. [ 92.727229][ T6556] bond1: (slave bond_slave_1): Device is not our slave [ 92.758843][ T6556] bond1: option active_slave: invalid value (bond_slave_1) [ 92.771547][ T6556] bond1 (unregistering): Released all slaves [ 92.830387][ T6570] netlink: 'syz.4.151': attribute type 1 has an invalid length. [ 92.846094][ T6570] netlink: 'syz.4.151': attribute type 1 has an invalid length. [ 92.887408][ T6574] IPv6: Can't replace route, no match found [ 92.907018][ T6576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.038470][ T6580] Cannot find add_set index 1 as target [ 93.047035][ T6579] netlink: 'syz.2.154': attribute type 10 has an invalid length. [ 93.070378][ T6579] veth0_virt_wifi: entered allmulticast mode [ 93.113352][ T6579] team0: Port device veth0_virt_wifi added [ 93.496803][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 93.603191][ T6614] openvswitch: netlink: IP tunnel dst address not specified [ 94.039031][ T6628] netlink: 100 bytes leftover after parsing attributes in process `syz.4.168'. [ 94.125955][ T6630] netlink: 'syz.0.169': attribute type 2 has an invalid length. [ 94.387502][ T6634] team0: Port device dummy0 removed [ 94.416086][ T6634] bridge_slave_0: left allmulticast mode [ 94.422739][ T6634] bridge_slave_0: left promiscuous mode [ 94.428633][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.448201][ T6634] bridge_slave_1: left allmulticast mode [ 94.459049][ T6634] bridge_slave_1: left promiscuous mode [ 94.468152][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.497334][ T6634] bond0: (slave bond_slave_0): Releasing backup interface [ 94.520335][ T6634] bond0: (slave bond_slave_1): Releasing backup interface [ 94.538459][ T6634] team0: Port device team_slave_0 removed [ 94.551416][ T6634] team0: Port device team_slave_1 removed [ 94.569376][ T6634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.579560][ T6634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.590294][ T6634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.602452][ T6634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.617597][ T6634] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.835364][ T6650] sctp: [Deprecated]: syz.3.174 (pid 6650) Use of int in max_burst socket option deprecated. [ 94.835364][ T6650] Use struct sctp_assoc_value instead [ 94.875034][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 94.984932][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 95.049339][ T6663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.176'. [ 95.060700][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 95.108251][ T6663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.176'. [ 95.968844][ T30] audit: type=1800 audit(1761541531.198:2): pid=6728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.194" name="memory.events" dev="tmpfs" ino=235 res=0 errno=0 [ 96.175966][ T6741] __nla_validate_parse: 69 callbacks suppressed [ 96.175984][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 96.357834][ T6741] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 96.412711][ T6741] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 96.432070][ T6741] gretap1: entered promiscuous mode [ 96.448228][ T6741] gretap1: entered allmulticast mode [ 96.469612][ T6756] netlink: 'syz.0.200': attribute type 11 has an invalid length. [ 96.845838][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 96.884140][ T6776] netlink: 'syz.4.206': attribute type 1 has an invalid length. [ 97.255489][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.263459][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.619974][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.643790][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.916591][ T6822] netlink: 36 bytes leftover after parsing attributes in process `syz.4.216'. [ 97.999918][ T6806] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 98.034154][ C1] Illegal XDP return value 16128 on prog (id 107) dev bond_slave_0, expect packet loss! [ 98.069625][ T6811] tipc: Started in network mode [ 98.076387][ T6811] tipc: Node identity da06286f7836, cluster identity 4711 [ 98.084524][ T6811] tipc: Enabled bearer , priority 0 [ 98.093439][ T6812] syzkaller0: entered promiscuous mode [ 98.099104][ T6812] syzkaller0: entered allmulticast mode [ 98.110956][ T1109] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.149107][ T1109] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.179087][ T6822] validate_nla: 1 callbacks suppressed [ 98.179106][ T6822] netlink: 'syz.4.216': attribute type 12 has an invalid length. [ 98.223032][ T6822] netlink: 'syz.4.216': attribute type 29 has an invalid length. [ 98.250864][ T6822] netlink: 148 bytes leftover after parsing attributes in process `syz.4.216'. [ 98.277694][ T6822] netlink: 'syz.4.216': attribute type 1 has an invalid length. [ 98.290998][ T1109] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.316388][ T1109] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.334282][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.221'. [ 98.389796][ T6816] tipc: Resetting bearer [ 98.450194][ T6816] tipc: Disabling bearer [ 98.934656][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.227'. [ 99.221755][ T6885] vlan2: entered promiscuous mode [ 99.228648][ T6885] bridge0: entered promiscuous mode [ 99.416726][ T6899] netlink: 165 bytes leftover after parsing attributes in process `syz.1.234'. [ 99.649707][ T6906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.235'. [ 99.731560][ T6912] 8021q: VLANs not supported on ipvlan1 [ 99.972794][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.980714][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.186984][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 100.194642][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.212614][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.512572][ T6916] vlan2: left promiscuous mode [ 100.517679][ T6916] bridge0: left promiscuous mode [ 100.613597][ T1109] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.661498][ T1109] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.716175][ T6959] netlink: 'syz.4.245': attribute type 1 has an invalid length. [ 100.730399][ T6953] syz_tun: entered allmulticast mode [ 100.744367][ T1109] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.757082][ T1109] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.774300][ T6952] syz_tun: left allmulticast mode [ 100.911024][ T6965] netlink: 124 bytes leftover after parsing attributes in process `syz.3.247'. [ 100.963667][ T6970] tipc: Enabling of bearer rejected, failed to enable media [ 101.144185][ T6975] tipc: Failed to obtain node identity [ 101.149787][ T6975] tipc: Enabling of bearer rejected, failed to enable media [ 101.266016][ T6984] __nla_validate_parse: 3 callbacks suppressed [ 101.266034][ T6984] netlink: 248 bytes leftover after parsing attributes in process `syz.4.256'. [ 101.470189][ T6991] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 101.516452][ T6991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.259'. [ 101.568467][ T6991] batadv0: entered promiscuous mode [ 101.580255][ T6991] batadv0: entered allmulticast mode [ 101.599347][ T6991] bridge0: port 3(batadv0) entered blocking state [ 101.623455][ T6997] netlink: 'syz.2.261': attribute type 10 has an invalid length. [ 101.626759][ T6991] bridge0: port 3(batadv0) entered disabled state [ 101.663465][ T6991] bridge0: port 3(batadv0) entered blocking state [ 101.670094][ T6991] bridge0: port 3(batadv0) entered listening state [ 101.869784][ T7008] netlink: 'syz.2.266': attribute type 1 has an invalid length. [ 101.908253][ T7008] netlink: 'syz.2.266': attribute type 4 has an invalid length. [ 101.920178][ T7011] netlink: 52 bytes leftover after parsing attributes in process `syz.4.268'. [ 101.927397][ T7008] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.266'. [ 101.976864][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 102.094495][ T44] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 102.104515][ T44] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 102.214571][ T5894] IPVS: starting estimator thread 0... [ 102.312687][ T7026] IPVS: using max 32 ests per chain, 76800 per kthread [ 102.419560][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.274'. [ 102.513124][ T7044] xt_recent: Unsupported userspace flags (000000b1) [ 102.889501][ T7065] syzkaller0: entered allmulticast mode [ 102.990401][ T7050] tunl0: entered promiscuous mode [ 102.996918][ T7050] netlink: 'syz.1.278': attribute type 3 has an invalid length. [ 103.005198][ T7050] netlink: 9 bytes leftover after parsing attributes in process `syz.1.278'. [ 103.103825][ T7071] netlink: 'syz.3.282': attribute type 12 has an invalid length. [ 103.111644][ T7071] netlink: 148 bytes leftover after parsing attributes in process `syz.3.282'. [ 103.124017][ T7078] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 103.139618][ T7071] netlink: 59 bytes leftover after parsing attributes in process `syz.3.282'. [ 103.230110][ T7080] netlink: 48 bytes leftover after parsing attributes in process `syz.0.287'. [ 103.288186][ T7082] validate_nla: 1 callbacks suppressed [ 103.288206][ T7082] netlink: 'syz.3.289': attribute type 83 has an invalid length. [ 104.029477][ T7123] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 104.049875][ T7125] netlink: 'syz.2.303': attribute type 12 has an invalid length. [ 104.064608][ T7125] netlink: 'syz.2.303': attribute type 11 has an invalid length. [ 105.011813][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.179987][ T7176] tipc: Can't bind to reserved service type 2 [ 105.713506][ T7205] netlink: 'syz.0.323': attribute type 39 has an invalid length. [ 105.746618][ T7191] syz.3.318 (7191) used greatest stack depth: 17832 bytes left [ 105.825402][ T7208] netlink: 'syz.2.324': attribute type 23 has an invalid length. [ 105.825853][ T7209] netlink: 'syz.3.325': attribute type 32 has an invalid length. [ 105.866256][ T7209] bond1: option coupled_control: invalid value (16) [ 105.874405][ T7209] bond1 (unregistering): Released all slaves [ 106.005675][ T7213] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 106.092898][ T7218] tipc: Started in network mode [ 106.103192][ T7218] tipc: Node identity 3a8391c6c4f9, cluster identity 4711 [ 106.111758][ T7218] tipc: Enabled bearer , priority 0 [ 106.121004][ T7214] tipc: Enabled bearer , priority 0 [ 106.147241][ T7218] syzkaller0: entered promiscuous mode [ 106.164240][ T7218] syzkaller0: entered allmulticast mode [ 106.187286][ T7218] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 106.241593][ T7228] tipc: Disabling bearer [ 106.251464][ T7221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.263882][ T7232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.279346][ T7218] tipc: Resetting bearer [ 106.289523][ T7217] tipc: Resetting bearer [ 106.292773][ T7236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.358672][ T7217] tipc: Disabling bearer [ 106.541269][ T7244] __nla_validate_parse: 11 callbacks suppressed [ 106.541286][ T7244] netlink: 68 bytes leftover after parsing attributes in process `syz.4.333'. [ 106.818576][ T7264] tipc: Started in network mode [ 106.841777][ T7264] tipc: Node identity 6ec2ae97484c, cluster identity 4711 [ 106.879746][ T7264] tipc: Enabled bearer , priority 0 [ 107.218263][ T7264] tipc: Disabling bearer [ 107.481391][ T7274] netlink: 'syz.0.341': attribute type 2 has an invalid length. [ 107.646666][ T7281] syzkaller1: entered promiscuous mode [ 107.663849][ T7281] syzkaller1: entered allmulticast mode [ 108.009643][ T7300] SET target dimension over the limit! [ 108.020389][ T7303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'. [ 108.029995][ T7300] nbd: must specify a device to reconfigure [ 108.095905][ T7307] tipc: Enabled bearer , priority 0 [ 108.152641][ T7307] tipc: Resetting bearer [ 108.257941][ T7306] tipc: Disabling bearer [ 108.649846][ T7340] netlink: 44 bytes leftover after parsing attributes in process `syz.0.360'. [ 108.936191][ T7352] netlink: 'syz.2.365': attribute type 4 has an invalid length. [ 108.962648][ T7352] netlink: 'syz.2.365': attribute type 4 has an invalid length. [ 109.538272][ T7380] netlink: 'syz.4.376': attribute type 1 has an invalid length. [ 109.596606][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 109.646519][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.376'. [ 109.851942][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 109.935875][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.380'. [ 110.818433][ T7385] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 110.822205][ T7380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.858678][ T7390] syzkaller0: entered promiscuous mode [ 110.865170][ T7390] syzkaller0: entered allmulticast mode [ 110.947576][ T7408] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 110.982218][ T7408] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 111.092965][ T7416] netlink: 'syz.2.382': attribute type 1 has an invalid length. [ 111.098328][ T7408] : entered promiscuous mode [ 111.233605][ T7419] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 111.245800][ T7419] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 111.289040][ T7422] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 111.320159][ T7408] bond1: (slave bridge0): Enslaving as an active interface with a down link [ 111.552217][ T7450] netlink: 'syz.2.392': attribute type 10 has an invalid length. [ 111.649230][ T7450] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 111.809273][ T7461] delete_channel: no stack [ 111.977935][ T7467] pim6reg1: entered promiscuous mode [ 112.006183][ T7467] pim6reg1: entered allmulticast mode [ 112.030371][ T7477] sctp: [Deprecated]: syz.4.397 (pid 7477) Use of int in maxseg socket option. [ 112.030371][ T7477] Use struct sctp_assoc_value instead [ 112.578014][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 112.796158][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 112.989050][ T7530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.415'. [ 113.038702][ T7529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.417'. [ 113.091650][ T7536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.419'. [ 113.482686][ T7548] netlink: 228 bytes leftover after parsing attributes in process `syz.1.425'. [ 113.517529][ T7548] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 113.538674][ T9] IPVS: starting estimator thread 0... [ 113.545217][ T7548] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 113.554688][ T7550] tipc: Started in network mode [ 113.559582][ T7550] tipc: Node identity ac1414aa, cluster identity 4711 [ 113.605159][ T7550] tipc: Enabled bearer , priority 10 [ 113.643422][ T7551] IPVS: using max 36 ests per chain, 86400 per kthread [ 114.324073][ T7578] tipc: Enabled bearer , priority 0 [ 114.344583][ T7578] syzkaller0: entered promiscuous mode [ 114.372039][ T7578] syzkaller0: entered allmulticast mode [ 114.400479][ T7578] tipc: Resetting bearer [ 114.600774][ T7585] syzkaller0: entered promiscuous mode [ 114.613659][ T7585] syzkaller0: entered allmulticast mode [ 114.638954][ T7574] tipc: Resetting bearer [ 114.684453][ T7574] tipc: Disabling bearer [ 114.691370][ T7586] netlink: 'syz.3.435': attribute type 9 has an invalid length. [ 114.725811][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 114.935300][ T7600] xt_NFQUEUE: number of total queues is 0 [ 114.976003][ T7603] tipc: Enabled bearer , priority 0 [ 115.133866][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 115.149621][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 115.455388][ T9] tipc: Node number set to 2886997162 [ 116.164974][ T7596] syzkaller0: entered promiscuous mode [ 116.171769][ T7596] syzkaller0: entered allmulticast mode [ 116.300617][ T7595] tipc: Resetting bearer [ 116.339296][ T7623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.447'. [ 116.344171][ T7595] tipc: Disabling bearer [ 116.380699][ T7623] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 116.395534][ T7623] gretap1: entered promiscuous mode [ 116.400900][ T7623] gretap1: entered allmulticast mode [ 117.084372][ T7668] tunl0: entered promiscuous mode [ 117.096563][ T7668] netlink: 'syz.3.458': attribute type 3 has an invalid length. [ 117.167584][ T7675] netlink: 'syz.0.457': attribute type 15 has an invalid length. [ 117.366405][ T7684] veth0: entered promiscuous mode [ 117.635372][ T7681] veth0: left promiscuous mode [ 117.770234][ T6052] IPVS: starting estimator thread 0... [ 117.884224][ T7717] netlink: 'syz.3.469': attribute type 33 has an invalid length. [ 117.895448][ T7717] __nla_validate_parse: 5 callbacks suppressed [ 117.895463][ T7717] netlink: 152 bytes leftover after parsing attributes in process `syz.3.469'. [ 117.911624][ T7714] IPVS: using max 28 ests per chain, 67200 per kthread [ 117.956590][ T7721] netlink: 'syz.0.470': attribute type 5 has an invalid length. [ 118.125408][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 118.176088][ T7739] netlink: 'syz.0.474': attribute type 1 has an invalid length. [ 118.223204][ T7740] x_tables: duplicate underflow at hook 1 [ 118.223327][ T7739] netlink: 'syz.0.474': attribute type 4 has an invalid length. [ 118.257168][ T7739] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.474'. [ 118.348495][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 118.787809][ T7765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.481'. [ 118.873159][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 118.881290][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 118.993923][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 119.241751][ T7790] syzkaller0: entered promiscuous mode [ 119.260651][ T7790] syzkaller0: entered allmulticast mode [ 119.328561][ T7790] netlink: 196 bytes leftover after parsing attributes in process `syz.1.487'. [ 119.365322][ T7790] netlink: 196 bytes leftover after parsing attributes in process `syz.1.487'. [ 119.393941][ T7790] netlink: 19 bytes leftover after parsing attributes in process `syz.1.487'. [ 119.414205][ T7799] netlink: 'syz.1.487': attribute type 83 has an invalid length. [ 119.983910][ T7830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.494'. [ 120.656258][ T7819] syz.4.493: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 120.676271][ T7819] CPU: 1 UID: 0 PID: 7819 Comm: syz.4.493 Not tainted syzkaller #0 PREEMPT(full) [ 120.676301][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.676314][ T7819] Call Trace: [ 120.676319][ T7819] [ 120.676324][ T7819] dump_stack_lvl+0x189/0x250 [ 120.676348][ T7819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.676361][ T7819] ? __pfx__printk+0x10/0x10 [ 120.676372][ T7819] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 120.676385][ T7819] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 120.676399][ T7819] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 120.676412][ T7819] warn_alloc+0x214/0x310 [ 120.676431][ T7819] ? __pfx_warn_alloc+0x10/0x10 [ 120.676450][ T7819] ? __get_vm_area_node+0x28f/0x300 [ 120.676463][ T7819] ? nf_tables_newset+0x1330/0x2540 [ 120.676478][ T7819] __vmalloc_node_range_noprof+0x690/0x12d0 [ 120.676508][ T7819] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 120.676521][ T7819] ? nf_tables_newset+0x1330/0x2540 [ 120.676533][ T7819] ? rcu_is_watching+0x15/0xb0 [ 120.676545][ T7819] ? nf_tables_newset+0x1330/0x2540 [ 120.676556][ T7819] __kvmalloc_node_noprof+0x674/0x910 [ 120.676570][ T7819] ? nf_tables_newset+0x1330/0x2540 [ 120.676583][ T7819] ? nft_set_lookup+0x128/0x150 [ 120.676595][ T7819] ? nft_hash_privsize+0x9f/0xf0 [ 120.676606][ T7819] nf_tables_newset+0x1330/0x2540 [ 120.676624][ T7819] ? __pfx_nf_tables_newset+0x10/0x10 [ 120.676647][ T7819] ? __nla_parse+0x40/0x60 [ 120.676660][ T7819] nfnetlink_rcv+0x11d9/0x2590 [ 120.676693][ T7819] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 120.676714][ T7819] ? ref_tracker_free+0x63a/0x7d0 [ 120.676740][ T7819] ? __netlink_deliver_tap+0x807/0x850 [ 120.676754][ T7819] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.676778][ T7819] netlink_unicast+0x82f/0x9e0 [ 120.676795][ T7819] ? __pfx_netlink_unicast+0x10/0x10 [ 120.676809][ T7819] ? netlink_sendmsg+0x642/0xb30 [ 120.676816][ T7819] ? skb_put+0x11b/0x210 [ 120.676827][ T7819] netlink_sendmsg+0x805/0xb30 [ 120.676841][ T7819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.676857][ T7819] ? aa_sock_msg_perm+0xf1/0x1d0 [ 120.676872][ T7819] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.676882][ T7819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.676896][ T7819] __sock_sendmsg+0x21c/0x270 [ 120.676910][ T7819] ____sys_sendmsg+0x505/0x830 [ 120.676924][ T7819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.676939][ T7819] ? import_iovec+0x74/0xa0 [ 120.676952][ T7819] ___sys_sendmsg+0x21f/0x2a0 [ 120.676964][ T7819] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.676994][ T7819] ? __fget_files+0x2a/0x420 [ 120.677003][ T7819] ? __fget_files+0x3a0/0x420 [ 120.677018][ T7819] __x64_sys_sendmsg+0x19b/0x260 [ 120.677031][ T7819] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.677052][ T7819] ? do_syscall_64+0xbe/0xfa0 [ 120.677073][ T7819] do_syscall_64+0xfa/0xfa0 [ 120.677090][ T7819] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.677111][ T7819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.677127][ T7819] ? clear_bhb_loop+0x60/0xb0 [ 120.677148][ T7819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.677164][ T7819] RIP: 0033:0x7fe6db78efc9 [ 120.677185][ T7819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.677198][ T7819] RSP: 002b:00007fe6dc545038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.677216][ T7819] RAX: ffffffffffffffda RBX: 00007fe6db9e5fa0 RCX: 00007fe6db78efc9 [ 120.677228][ T7819] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 120.677237][ T7819] RBP: 00007fe6db811f91 R08: 0000000000000000 R09: 0000000000000000 [ 120.677243][ T7819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.677249][ T7819] R13: 00007fe6db9e6038 R14: 00007fe6db9e5fa0 R15: 00007ffc6cd838b8 [ 120.677266][ T7819] [ 120.677274][ T7819] Mem-Info: [ 121.064893][ T7819] active_anon:5840 inactive_anon:0 isolated_anon:0 [ 121.064893][ T7819] active_file:2437 inactive_file:39891 isolated_file:0 [ 121.064893][ T7819] unevictable:768 dirty:95 writeback:0 [ 121.064893][ T7819] slab_reclaimable:10592 slab_unreclaimable:98187 [ 121.064893][ T7819] mapped:37358 shmem:1363 pagetables:1203 [ 121.064893][ T7819] sec_pagetables:0 bounce:0 [ 121.064893][ T7819] kernel_misc_reclaimable:0 [ 121.064893][ T7819] free:1323236 free_pcp:14499 free_cma:0 [ 121.111546][ T7819] Node 0 active_anon:23276kB inactive_anon:0kB active_file:9748kB inactive_file:159364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149404kB dirty:376kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12944kB pagetables:4592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.144446][ T7819] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.175160][ T7819] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.206881][ T7819] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 121.213080][ T7819] Node 0 DMA32 free:1386552kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23276kB inactive_anon:0kB active_file:9748kB inactive_file:159364kB unevictable:1536kB writepending:376kB zspages:0kB present:3129332kB managed:2565180kB mlocked:0kB bounce:0kB free_pcp:38636kB local_pcp:18140kB free_cma:0kB [ 121.247585][ T7819] lowmem_reserve[]: 0 0 0 0 0 [ 121.253879][ T7819] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.284480][ T7819] lowmem_reserve[]: 0 0 0 0 0 [ 121.289246][ T7819] Node 1 Normal free:3890940kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19360kB local_pcp:13984kB free_cma:0kB [ 121.322402][ T7819] lowmem_reserve[]: 0 0 0 0 0 [ 121.327327][ T7819] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 121.340690][ T7819] Node 0 DMA32: 508*4kB (UME) 579*8kB (UME) 155*16kB (UM) 126*32kB (UME) 43*64kB (UME) 30*128kB (UME) 17*256kB (UM) 11*512kB (UME) 13*1024kB (UME) 14*2048kB (UM) 321*4096kB (UM) = 1386552kB [ 121.360079][ T7819] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 121.372608][ T7819] Node 1 Normal: 217*4kB (UE) 65*8kB (UME) 53*16kB (UME) 78*32kB (UME) 24*64kB (UME) 9*128kB (UME) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3890940kB [ 121.391298][ T7819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.401848][ T7819] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 121.411716][ T7819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.422397][ T7819] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 121.431711][ T7819] 43686 total pagecache pages [ 121.437246][ T7819] 0 pages in swap cache [ 121.441409][ T7819] Free swap = 124996kB [ 121.446173][ T7819] Total swap = 124996kB [ 121.450327][ T7819] 2097051 pages RAM [ 121.454743][ T7819] 0 pages HighMem/MovableOnly [ 121.459432][ T7819] 424114 pages reserved [ 121.464237][ T7819] 0 pages cma reserved [ 121.512746][ T7845] tipc: Enabling of bearer rejected, failed to enable media [ 122.520552][ T7915] netlink: 'syz.1.513': attribute type 1 has an invalid length. [ 122.739337][ T7915] gretap1: entered promiscuous mode [ 122.791944][ T7915] bond1: (slave gretap1): making interface the new active one [ 122.801207][ T7915] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 122.883812][ T7928] vxcan2: entered allmulticast mode [ 122.941286][ T7932] macvlan2: entered promiscuous mode [ 122.962013][ T7932] macvlan2: entered allmulticast mode [ 122.968463][ T7932] bond1: entered promiscuous mode [ 123.008975][ T7932] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.044271][ T7932] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 123.092747][ T7932] bond1: left promiscuous mode [ 123.325904][ T7950] __nla_validate_parse: 7 callbacks suppressed [ 123.325921][ T7950] netlink: 40 bytes leftover after parsing attributes in process `syz.0.525'. [ 123.359712][ T7948] bond2: entered promiscuous mode [ 123.574350][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.675123][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 123.730513][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.868196][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.978609][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.253249][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.263961][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.274225][ T7981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.534'. [ 124.274772][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.324535][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.333332][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.375873][ T7981] netlink: 'syz.3.534': attribute type 7 has an invalid length. [ 124.414532][ T7981] netlink: 'syz.3.534': attribute type 8 has an invalid length. [ 124.493780][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 124.505661][ T13] bridge_slave_1: left allmulticast mode [ 124.511514][ T13] bridge_slave_1: left promiscuous mode [ 124.557540][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.646904][ T13] bridge_slave_0: left allmulticast mode [ 124.657057][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.669976][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.679950][ T13] bridge_slave_0: left promiscuous mode [ 124.687317][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.695812][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.705879][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.714667][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.214392][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.224947][ T13] bond0 (unregistering): Released all slaves [ 125.238184][ T13] bond1 (unregistering): Released all slaves [ 125.327636][ T13] bond2 (unregistering): Released all slaves [ 125.567832][ T13] tipc: Disabling bearer [ 125.581289][ T13] tipc: Left network mode [ 125.697257][ T8021] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 125.761020][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 125.917824][ T8030] netlink: 'syz.1.545': attribute type 11 has an invalid length. [ 125.934762][ T8033] netlink: 'syz.1.545': attribute type 11 has an invalid length. [ 126.031968][ T8040] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 126.038634][ T8040] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 126.058435][ T8040] netlink: 'syz.0.546': attribute type 11 has an invalid length. [ 126.474708][ T5838] Bluetooth: hci2: command tx timeout [ 126.531507][ T7993] chnl_net:caif_netlink_parms(): no params data found [ 126.792848][ T5838] Bluetooth: hci3: command tx timeout [ 126.947264][ T13] hsr_slave_0: left promiscuous mode [ 126.967354][ T13] hsr_slave_1: left promiscuous mode [ 126.983115][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.990575][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.009827][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.018178][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.045355][ T13] veth1_macvtap: left promiscuous mode [ 127.051136][ T13] veth0_macvtap: left promiscuous mode [ 127.057537][ T13] veth1_vlan: left promiscuous mode [ 127.063466][ T13] veth0_vlan: left promiscuous mode [ 127.505397][ T13] team0 (unregistering): Port device team_slave_1 removed [ 127.559536][ T13] team0 (unregistering): Port device team_slave_0 removed [ 127.809170][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.555'. [ 128.184903][ T7978] chnl_net:caif_netlink_parms(): no params data found [ 128.414488][ T8117] netlink: 'syz.0.559': attribute type 1 has an invalid length. [ 128.553234][ T5838] Bluetooth: hci2: command tx timeout [ 128.641838][ T7993] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.660690][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.684136][ T7993] bridge_slave_0: entered allmulticast mode [ 128.702163][ T7993] bridge_slave_0: entered promiscuous mode [ 128.741126][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.744008][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.563'. [ 128.755016][ T7993] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.781762][ T7993] bridge_slave_1: entered allmulticast mode [ 128.790400][ T7993] bridge_slave_1: entered promiscuous mode [ 128.873447][ T5838] Bluetooth: hci3: command tx timeout [ 129.026604][ T8150] netlink: 44 bytes leftover after parsing attributes in process `syz.0.566'. [ 129.058280][ T7978] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.067883][ T7978] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.076901][ T7978] bridge_slave_0: entered allmulticast mode [ 129.091272][ T7978] bridge_slave_0: entered promiscuous mode [ 129.098547][ T8154] delete_channel: no stack [ 129.103795][ T7993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.140568][ T7978] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.162373][ T7978] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.179031][ T7978] bridge_slave_1: entered allmulticast mode [ 129.215578][ T7978] bridge_slave_1: entered promiscuous mode [ 129.280790][ T7993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.316624][ T13] IPVS: stop unused estimator thread 0... [ 129.340653][ T8160] syzkaller0: entered promiscuous mode [ 129.350950][ T8160] syzkaller0: entered allmulticast mode [ 129.545742][ T8181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.577341][ T7993] team0: Port device team_slave_0 added [ 129.587893][ T7978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.605659][ T8171] veth0: entered promiscuous mode [ 129.636951][ T7993] team0: Port device team_slave_1 added [ 129.654814][ T7978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.771316][ T8173] veth0: left promiscuous mode [ 130.021082][ T8190] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 130.036052][ T7993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.049989][ T7993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.077146][ T7993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.092813][ T7978] team0: Port device team_slave_0 added [ 130.209162][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.221387][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.578'. [ 130.223163][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.285529][ T7993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.299580][ T7993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.335385][ T7993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.349393][ T7978] team0: Port device team_slave_1 added [ 130.394802][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 130.495107][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.507881][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.566080][ T8221] : renamed from bridge_slave_0 [ 130.632047][ T5847] Bluetooth: hci2: command tx timeout [ 130.715278][ T7978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.724439][ T7978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.753664][ T7978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.802406][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.822447][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.896084][ T7993] hsr_slave_0: entered promiscuous mode [ 130.905931][ T7993] hsr_slave_1: entered promiscuous mode [ 130.913489][ T7993] debugfs: 'hsr0' already exists in 'hsr' [ 130.919831][ T7993] Cannot create hsr debugfs directory [ 130.927654][ T8229] IPVS: Error connecting to the multicast addr [ 130.938204][ T7978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.945853][ T7978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.972164][ T5847] Bluetooth: hci3: command tx timeout [ 130.978542][ T7978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.056771][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.072965][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.313702][ T7978] hsr_slave_0: entered promiscuous mode [ 131.320695][ T7978] hsr_slave_1: entered promiscuous mode [ 131.328100][ T7978] debugfs: 'hsr0' already exists in 'hsr' [ 131.336298][ T7978] Cannot create hsr debugfs directory [ 131.375379][ T8248] netlink: 32 bytes leftover after parsing attributes in process `syz.1.589'. [ 131.429784][ T8257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.886071][ T8273] tipc: Enabled bearer , priority 0 [ 131.995200][ T8273] syzkaller0: entered promiscuous mode [ 132.000909][ T8273] syzkaller0: entered allmulticast mode [ 132.015915][ T8281] tipc: Enabled bearer , priority 0 [ 132.073478][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 132.080809][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.105500][ T8286] xt_l2tp: v2 tid > 0xffff: 1114244 [ 132.105509][ T8276] syzkaller0: entered promiscuous mode [ 132.105528][ T8276] syzkaller0: entered allmulticast mode [ 132.124495][ T8276] tipc: Resetting bearer [ 132.155421][ T8273] tipc: Resetting bearer [ 132.191438][ T8274] tipc: Resetting bearer [ 132.315469][ C0] bridge0: port 3(batadv0) entered learning state [ 132.722075][ T5838] Bluetooth: hci2: command tx timeout [ 132.966362][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.979197][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.005404][ T5894] tipc: Node number set to 646885015 [ 133.034512][ T6948] tipc: Node number set to 4269445574 [ 133.045681][ T5847] Bluetooth: hci3: command tx timeout [ 133.469617][ T8274] tipc: Disabling bearer [ 133.478843][ T8272] tipc: Resetting bearer [ 133.493193][ T8272] tipc: Disabling bearer [ 133.844317][ T8310] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 133.953647][ T13] bond1 (unregistering): (slave bridge0): Releasing active interface [ 134.130637][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 134.143143][ T13] bond0 (unregistering): Released all slaves [ 134.161410][ T13] bond1 (unregistering): Released all slaves [ 134.351455][ T13] : left promiscuous mode [ 134.420512][ T13] tipc: Disabling bearer [ 134.434275][ T13] tipc: Left network mode [ 134.526721][ T7993] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 134.548052][ T7993] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 134.562816][ T7993] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 134.617999][ T7993] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 135.167100][ T7978] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 135.199527][ T7978] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 135.285525][ T13] hsr_slave_0: left promiscuous mode [ 135.293504][ T13] hsr_slave_1: left promiscuous mode [ 135.298223][ T8367] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20004 [ 135.318496][ T13] veth1_macvtap: left promiscuous mode [ 135.324648][ T13] veth0_macvtap: left promiscuous mode [ 135.330617][ T13] veth0_vlan: left promiscuous mode [ 135.609122][ T13] team0 (unregistering): Port device veth0_virt_wifi removed [ 136.122338][ T7978] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.135320][ T7978] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.161552][ T8368] : entered promiscuous mode [ 136.317467][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 136.568296][ T7993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.621702][ T8400] netlink: 72 bytes leftover after parsing attributes in process `syz.3.622'. [ 136.646803][ T13] IPVS: stop unused estimator thread 0... [ 136.677314][ T7978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.714768][ T7993] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.756122][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.763370][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.827251][ T7978] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.884722][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.891949][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.931180][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.938426][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.979597][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.986924][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.574379][ T7978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.656261][ T7993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.010987][ T7978] veth0_vlan: entered promiscuous mode [ 138.036741][ T7978] veth1_vlan: entered promiscuous mode [ 138.104564][ T7978] veth0_macvtap: entered promiscuous mode [ 138.128102][ T7978] veth1_macvtap: entered promiscuous mode [ 138.162801][ T7993] veth0_vlan: entered promiscuous mode [ 138.175954][ T7978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.194457][ T7978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.207809][ T7993] veth1_vlan: entered promiscuous mode [ 138.220267][ T3502] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.231367][ T3502] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.276407][ T3502] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.305130][ T3502] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.328280][ T7993] veth0_macvtap: entered promiscuous mode [ 138.366054][ T7993] veth1_macvtap: entered promiscuous mode [ 138.428642][ T7993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.446373][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.459650][ T7993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.469546][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.496058][ T1010] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.517805][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.527526][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.541294][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.557495][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.566025][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.704605][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.725922][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.789099][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.806887][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.953127][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.960449][ C0] bridge0: topology change detected, propagating [ 148.967254][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.974490][ C0] bridge0: topology change detected, propagating [ 162.277366][ T8651] ipvlan3: entered promiscuous mode [ 162.391997][ C0] bridge0: port 3(batadv0) entered forwarding state [ 162.398675][ C0] bridge0: topology change detected, propagating [ 162.403891][ T8664] netlink: 'syz.3.635': attribute type 27 has an invalid length. [ 162.639835][ T8676] netlink: 'syz.5.638': attribute type 29 has an invalid length. [ 162.657324][ T8676] netlink: 'syz.5.638': attribute type 29 has an invalid length. [ 162.671812][ T8676] netlink: 'syz.5.638': attribute type 5 has an invalid length. [ 162.690359][ T8676] netlink: 140 bytes leftover after parsing attributes in process `syz.5.638'. [ 162.829394][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.640'. [ 162.976698][ T8686] Cannot find add_set index 0 as target [ 163.526270][ T8720] netlink: 192 bytes leftover after parsing attributes in process `syz.6.646'. [ 163.791005][ T8734] syzkaller1: entered promiscuous mode [ 163.805520][ T8734] syzkaller1: entered allmulticast mode [ 163.824905][ T8733] syzkaller0: entered promiscuous mode [ 163.840461][ T8733] syzkaller0: entered allmulticast mode [ 163.994075][ T8739] xt_HMARK: spi-set and port-set can't be combined [ 164.061384][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'. [ 164.427226][ T8770] netlink: 32 bytes leftover after parsing attributes in process `syz.3.660'. [ 165.089092][ T8795] syzkaller0: entered promiscuous mode [ 165.111256][ T8795] syzkaller0: entered allmulticast mode [ 165.454054][ T8831] netlink: 64 bytes leftover after parsing attributes in process `syz.3.677'. [ 165.514236][ T8837] netlink: 'syz.5.678': attribute type 13 has an invalid length. [ 165.549973][ T8837] veth0_macvtap: left promiscuous mode [ 165.572517][ T8837] macvtap0: entered allmulticast mode [ 165.606186][ T8837] macvtap0: refused to change device tx_queue_len [ 165.686319][ T8843] netlink: 'syz.5.678': attribute type 29 has an invalid length. [ 165.705560][ T8848] tipc: Enabled bearer , priority 0 [ 165.729278][ T8841] ipvlan1: entered promiscuous mode [ 165.737458][ T8850] netlink: 68 bytes leftover after parsing attributes in process `syz.0.682'. [ 165.747998][ T8841] ipvlan1: entered allmulticast mode [ 165.762408][ T8841] veth0_vlan: entered allmulticast mode [ 165.814157][ T8841] tipc: Resetting bearer [ 165.883186][ T8839] tipc: Disabling bearer [ 166.123607][ T8872] Cannot find add_set index 0 as target [ 166.183082][ T8872] Cannot find add_set index 0 as target [ 166.188821][ T8872] Cannot find add_set index 0 as target [ 166.240540][ T8872] Cannot find add_set index 0 as target [ 166.311747][ T8872] Cannot find add_set index 0 as target [ 166.373717][ T8872] Cannot find add_set index 0 as target [ 166.395831][ T8872] Cannot find add_set index 0 as target [ 166.430519][ T8872] Cannot find add_set index 0 as target [ 166.465326][ T8872] Cannot find add_set index 0 as target [ 166.471052][ T8872] Cannot find add_set index 0 as target [ 166.527056][ T8905] bridge1: entered promiscuous mode [ 166.536891][ T8905] bridge1: entered allmulticast mode [ 166.758876][ T8926] netlink: 'syz.5.696': attribute type 1 has an invalid length. [ 166.895861][ T8926] veth3: entered promiscuous mode [ 166.935597][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 166.965840][ T8929] bridge_slave_0: left allmulticast mode [ 166.988665][ T8929] bridge_slave_0: left promiscuous mode [ 167.012239][ T8929] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.044489][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.700'. [ 167.055262][ T8937] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 167.066629][ T8929] bridge_slave_1: left allmulticast mode [ 167.076813][ T8929] bridge_slave_1: left promiscuous mode [ 167.083953][ T8929] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.091835][ T8937] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 167.105154][ T8937] netlink: 'syz.3.700': attribute type 2 has an invalid length. [ 167.133682][ T8937] netlink: 68 bytes leftover after parsing attributes in process `syz.3.700'. [ 167.144386][ T8929] bond0: (slave bond_slave_0): Releasing backup interface [ 167.160703][ T8929] bond0: (slave bond_slave_1): Releasing backup interface [ 167.268795][ T8929] team0: Port device team_slave_0 removed [ 167.365472][ T8929] team0: Port device team_slave_1 removed [ 167.391334][ T8929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.467914][ T8929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.508352][ T8929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.542522][ T8929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.586919][ T8929] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.725102][ T8971] __nla_validate_parse: 3 callbacks suppressed [ 167.725120][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 167.776253][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 168.035420][ T8988] syzkaller1: entered promiscuous mode [ 168.081491][ T8988] syzkaller1: entered allmulticast mode [ 168.630304][ T9019] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 168.662923][ T9019] netlink: 212 bytes leftover after parsing attributes in process `syz.3.718'. [ 168.698163][ T9019] netlink: 5 bytes leftover after parsing attributes in process `syz.3.718'. [ 168.799407][ T9028] netlink: 14 bytes leftover after parsing attributes in process `syz.6.720'. [ 169.041849][ T9042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.722'. [ 169.307878][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.724'. [ 169.351283][ T9050] xfrm1: entered promiscuous mode [ 169.393291][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.5.724'. [ 169.418781][ T9050] xfrm1: entered allmulticast mode [ 169.586752][ T9066] netlink: 40 bytes leftover after parsing attributes in process `syz.1.728'. [ 169.824324][ T9074] gre0: entered promiscuous mode [ 170.128465][ T9090] netlink: 'syz.0.736': attribute type 9 has an invalid length. [ 170.138354][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 171.131108][ T9137] tipc: Enabled bearer , priority 0 [ 171.151148][ T9137] syzkaller0: entered promiscuous mode [ 171.172025][ T9137] syzkaller0: entered allmulticast mode [ 171.200339][ T9137] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 171.245253][ T9135] tipc: Resetting bearer [ 171.407128][ T9151] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 171.428593][ T9135] tipc: Disabling bearer [ 171.440565][ T9151] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 172.533963][ T9215] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 1280 [ 172.831452][ T9231] __nla_validate_parse: 10 callbacks suppressed [ 172.831469][ T9231] netlink: 32 bytes leftover after parsing attributes in process `syz.6.782'. [ 173.064005][ T9237] tipc: Started in network mode [ 173.077775][ T9237] tipc: Node identity 0ed872f6cb0f, cluster identity 4711 [ 173.085366][ T9237] tipc: Enabled bearer , priority 0 [ 173.101459][ T9238] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 173.116604][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 173.136198][ T9243] netlink: 'syz.3.787': attribute type 1 has an invalid length. [ 173.162510][ T9243] netlink: 224 bytes leftover after parsing attributes in process `syz.3.787'. [ 173.187631][ T9238] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 173.197320][ T9237] syzkaller0: entered promiscuous mode [ 173.232625][ T9237] syzkaller0: entered allmulticast mode [ 173.244693][ T9237] tipc: Resetting bearer [ 173.336469][ T9236] tipc: Resetting bearer [ 173.380681][ T9253] netlink: 32 bytes leftover after parsing attributes in process `syz.0.789'. [ 173.472258][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.791'. [ 174.194262][ T6947] tipc: Node number set to 3319231222 [ 174.917153][ T9236] tipc: Disabling bearer [ 174.930061][ T9253] gretap1: entered promiscuous mode [ 174.935395][ T9253] gretap1: entered allmulticast mode [ 174.955517][ T9264] bridge_slave_1: left allmulticast mode [ 174.961201][ T9264] bridge_slave_1: left promiscuous mode [ 174.967053][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.006605][ T9281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.795'. [ 175.017291][ T9264] bridge_slave_0: left allmulticast mode [ 175.023552][ T9264] bridge_slave_0: left promiscuous mode [ 175.038674][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.125225][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.796'. [ 175.420187][ T9302] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.605195][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.806'. [ 175.624473][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.806'. [ 176.074759][ T9345] xt_hashlimit: size too large, truncated to 1048576 [ 176.305316][ T9362] 8021q: VLANs not supported on ip_vti0 [ 176.730424][ T9382] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 176.974103][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 176.989935][ T9389] tipc: Started in network mode [ 177.018261][ T9389] tipc: Node identity cafba09f0b13, cluster identity 4711 [ 177.050931][ T9389] tipc: Enabled bearer , priority 0 [ 177.084582][ T9387] syzkaller1: entered promiscuous mode [ 177.091357][ T9387] syzkaller1: entered allmulticast mode [ 177.135488][ T9397] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 177.138575][ T9365] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 177.170223][ T9397] bond5 (unregistering): Released all slaves [ 177.225438][ T9389] tipc: Resetting bearer [ 177.240164][ T9388] tipc: Disabling bearer [ 177.479436][ T9415] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 177.675840][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 177.873227][ T9433] netlink: 'syz.6.842': attribute type 10 has an invalid length. [ 177.913458][ T9433] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 178.076889][ T9445] __nla_validate_parse: 2 callbacks suppressed [ 178.076906][ T9445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.845'. [ 178.340477][ T9466] netlink: 36 bytes leftover after parsing attributes in process `syz.5.847'. [ 178.728301][ T9474] netlink: 'syz.6.852': attribute type 29 has an invalid length. [ 178.866582][ T9493] xt_hashlimit: max too large, truncated to 1048576 [ 178.892144][ T9494] netlink: 'syz.0.856': attribute type 21 has an invalid length. [ 178.908381][ T9494] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 178.935019][ T9499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.858'. [ 178.939323][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.858'. [ 178.982356][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.858'. [ 179.580685][ T9537] netlink: 'syz.6.869': attribute type 1 has an invalid length. [ 179.796628][ T9545] bond5: Unable to set down delay as MII monitoring is disabled [ 179.826248][ T9545] bond5 (unregistering): Released all slaves [ 179.923635][ T9554] netlink: 'syz.6.873': attribute type 1 has an invalid length. [ 180.070106][ T9557] netlink: 104 bytes leftover after parsing attributes in process `syz.1.874'. [ 180.245903][ T9560] "syz.6.876" (9560) uses obsolete ecb(arc4) skcipher [ 180.935666][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 180.950367][ T9598] atomic_op ffff8880795fa198 conn xmit_atomic 0000000000000000 [ 181.241714][ T9605] syzkaller0: entered promiscuous mode [ 181.254255][ T9605] syzkaller0: entered allmulticast mode [ 181.485234][ T9625] tipc: Enabled bearer , priority 0 [ 181.638310][ T9625] tipc: Disabling bearer [ 181.660153][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.896'. [ 181.866672][ T9646] tipc: Enabled bearer , priority 0 [ 181.943011][ T9651] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.951452][ T9648] syzkaller0: entered promiscuous mode [ 181.969776][ T9648] syzkaller0: entered allmulticast mode [ 181.998654][ T9646] tipc: Enabling of bearer rejected, already enabled [ 182.055627][ T9657] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 182.112390][ T9657] bond5 (unregistering): Released all slaves [ 182.156467][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.902'. [ 182.197610][ T9670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.905'. [ 182.306205][ T9648] tipc: Resetting bearer [ 182.373142][ T9648] tipc: Disabling bearer [ 182.440355][ T9670] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 182.745653][ T9702] geneve2: entered promiscuous mode [ 183.350124][ T9733] __nla_validate_parse: 8 callbacks suppressed [ 183.350150][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 183.556338][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.926'. [ 183.677367][ T9749] netlink: 'syz.6.926': attribute type 23 has an invalid length. [ 183.976881][ T9767] bridge0: port 4(batadv1) entered blocking state [ 184.007862][ T9771] netlink: 112 bytes leftover after parsing attributes in process `syz.3.934'. [ 184.009752][ T9767] bridge0: port 4(batadv1) entered disabled state [ 184.034070][ T9767] batadv1: entered allmulticast mode [ 184.042653][ T9767] batadv1: entered promiscuous mode [ 184.180405][ T9779] openvswitch: netlink: IP tunnel dst address not specified [ 184.387870][ T9802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.941'. [ 184.410636][ T9802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.941'. [ 184.436535][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'. [ 184.457211][ T9804] netlink: 68 bytes leftover after parsing attributes in process `syz.6.942'. [ 184.466825][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 184.476853][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 184.507976][ T9805] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20004 [ 184.508680][ T9806] netlink: 256 bytes leftover after parsing attributes in process `syz.6.942'. [ 184.644581][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 184.845038][ T9816] bond0: (slave bond_slave_1): Releasing backup interface [ 184.922176][ T9824] netlink: 'syz.0.948': attribute type 1 has an invalid length. [ 185.084522][ T9834] netlink: 220 bytes leftover after parsing attributes in process `syz.5.951'. [ 185.598036][ T9861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.133535][ T9884] netlink: 'syz.1.966': attribute type 10 has an invalid length. [ 186.141500][ T9884] dummy0: entered promiscuous mode [ 186.172986][ T9884] bridge0: port 3(dummy0) entered blocking state [ 186.201704][ T9884] bridge0: port 3(dummy0) entered disabled state [ 186.231377][ T9884] dummy0: entered allmulticast mode [ 186.623855][ T9913] tipc: Enabling of bearer rejected, failed to enable media [ 186.874515][ T9925] dvmrp0: entered allmulticast mode [ 186.895154][ T9929] dvmrp0: left allmulticast mode [ 187.091699][ T9938] geneve1: entered promiscuous mode [ 187.142806][ T9938] geneve1: entered allmulticast mode [ 187.156864][ T6412] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 187.202730][ T6412] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 187.214788][ T9938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.237531][ T6412] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 187.639652][ T9959] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 187.992764][ T9980] netlink: 'syz.5.992': attribute type 11 has an invalid length. [ 188.757773][ T9939] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 188.841715][T10029] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 188.891832][ T9939] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 189.026706][ T9939] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 189.054501][T10046] __nla_validate_parse: 9 callbacks suppressed [ 189.054519][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 189.171079][T10050] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1013'. [ 189.236967][ T1169] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 189.312811][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 189.336774][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 189.388460][ T44] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 189.425441][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1018'. [ 189.877864][T10093] veth1_to_hsr: default FDB implementation only supports local addresses [ 190.061404][T10107] tipc: Enabling of bearer rejected, media not registered [ 190.538637][T10133] tc_dump_action: action bad kind [ 190.789879][T10149] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 190.851376][T10153] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 191.131702][T10166] netlink: 'syz.6.1049': attribute type 1 has an invalid length. [ 191.143481][T10168] netlink: 'syz.1.1050': attribute type 1 has an invalid length. [ 191.261335][T10166] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 191.272767][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1053'. [ 191.290698][T10166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.303978][ T1169] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 191.393621][T10190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1053'. [ 191.430680][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 191.483940][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 191.488366][T10176] team0 (unregistering): Port device team_slave_0 removed [ 191.505989][ T8885] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 191.520443][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1053'. [ 191.531093][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1053'. [ 191.546427][T10176] team0 (unregistering): Port device team_slave_1 removed [ 191.602204][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1053'. [ 192.194506][T10222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.411678][T10228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.028981][T10258] bridge0: port 3(batadv1) entered blocking state [ 193.050002][T10258] bridge0: port 3(batadv1) entered disabled state [ 193.071727][T10258] batadv1: entered allmulticast mode [ 193.081437][T10258] batadv1: entered promiscuous mode [ 193.523820][ T8885] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 193.533615][ T8885] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 193.581860][ T12] syzkaller0: tun_net_xmit 76 [ 193.597568][ T12] syzkaller0: tun_net_xmit 48 [ 193.605090][ T5927] syzkaller0: tun_net_xmit 76 [ 193.641542][T10290] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 193.652671][ T6001] syzkaller0: tun_net_xmit 76 [ 193.672455][T10290] syzkaller0: Linktype set failed because interface is up [ 193.681247][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880571bd400: rx timeout, send abort [ 193.691579][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880571bd400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 193.725636][T10297] netlink: 'syz.5.1090': attribute type 1 has an invalid length. [ 193.737695][T10297] netlink: 'syz.5.1090': attribute type 11 has an invalid length. [ 193.865567][ T6947] syzkaller0: tun_net_xmit 76 [ 194.101746][T10316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.133293][T10321] __nla_validate_parse: 7 callbacks suppressed [ 194.133313][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1097'. [ 194.378320][T10336] netlink: 'syz.3.1100': attribute type 1 has an invalid length. [ 194.401499][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.408149][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.168346][T10343] netlink: 'syz.3.1101': attribute type 2 has an invalid length. [ 195.176880][T10343] netlink: 'syz.3.1101': attribute type 1 has an invalid length. [ 195.556417][T10323] netlink: 'syz.1.1099': attribute type 3 has an invalid length. [ 195.564804][T10323] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1099'. [ 195.574824][T10331] tipc: Enabled bearer , priority 0 [ 195.585262][T10334] syzkaller0: entered promiscuous mode [ 195.590756][T10334] syzkaller0: entered allmulticast mode [ 195.626637][T10339] tipc: Resetting bearer [ 195.706206][T10348] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1102'. [ 195.728610][T10321] tipc: Resetting bearer [ 195.779994][T10321] tipc: Disabling bearer [ 195.836537][T10358] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 196.099703][T10370] tipc: Enabling of bearer rejected, failed to enable media [ 196.244028][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1112'. [ 196.271183][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1112'. [ 196.439354][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1115'. [ 196.476302][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 196.482683][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 196.489008][T10370] syzkaller0: entered promiscuous mode [ 196.499004][T10370] syzkaller0: entered allmulticast mode [ 196.774770][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'. [ 196.812723][T10407] netlink: 'syz.1.1119': attribute type 1 has an invalid length. [ 198.057113][T10418] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1122'. [ 198.298704][T10432] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1125'. [ 198.337360][T10432] 0ªî{X¹¦: renamed from gretap0 [ 198.344810][T10430] netlink: 'syz.6.1127': attribute type 2 has an invalid length. [ 198.356446][T10430] netlink: 'syz.6.1127': attribute type 1 has an invalid length. [ 198.366294][T10432] 0ªî{X¹¦: entered allmulticast mode [ 198.376969][T10435] netlink: 'syz.6.1127': attribute type 2 has an invalid length. [ 198.380820][T10432] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 198.393262][T10435] netlink: 'syz.6.1127': attribute type 1 has an invalid length. [ 198.409830][T10430] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1127'. [ 198.841816][T10464] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 199.215241][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1142'. [ 199.286391][T10484] bridge0: port 3(batadv0) entered disabled state [ 199.313059][T10484] bridge_slave_0: left allmulticast mode [ 199.319478][T10484] bridge_slave_0: left promiscuous mode [ 199.328345][T10484] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.360731][T10484] bridge_slave_1: left allmulticast mode [ 199.372672][T10484] bridge_slave_1: left promiscuous mode [ 199.396133][T10484] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.445334][T10489] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1144'. [ 199.458317][T10484] bond0: (slave bond_slave_0): Releasing backup interface [ 199.474762][T10484] bond0: (slave bond_slave_1): Releasing backup interface [ 199.493305][T10484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.500882][T10484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.519888][T10484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.528181][T10484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.538757][T10484] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 199.709698][T10510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1149'. [ 200.160865][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1154'. [ 200.256574][T10534] veth1_to_batadv: entered promiscuous mode [ 200.346199][T10522] veth1_to_batadv: left promiscuous mode [ 200.412870][T10557] nbd0: detected capacity change from 0 to 127 [ 200.432471][ T5847] block nbd0: Receive control failed (result -104) [ 200.767834][T10581] dvmrp0: entered allmulticast mode [ 201.306656][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1168'. [ 201.384671][T10614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1177'. [ 201.746426][T10632] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 201.801826][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'. [ 201.838502][T10629] netlink: 'syz.0.1181': attribute type 4 has an invalid length. [ 202.070642][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1187'. [ 202.138744][T10640] veth3: entered allmulticast mode [ 202.218190][ T6001] IPVS: starting estimator thread 0... [ 202.233038][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1187'. [ 202.330650][T10670] netlink: 'syz.5.1193': attribute type 18 has an invalid length. [ 202.342024][T10661] IPVS: using max 38 ests per chain, 91200 per kthread [ 202.411327][ T8885] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.443333][ T8885] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.444525][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'. [ 202.482082][ T8885] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.564841][ T8885] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.593266][T10677] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 202.603563][T10683] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 202.916161][T10697] sctp: [Deprecated]: syz.6.1202 (pid 10697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.916161][T10697] Use struct sctp_sack_info instead [ 203.085175][T10708] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 203.218360][T10714] netlink: 'syz.6.1206': attribute type 1 has an invalid length. [ 203.425229][T10728] vcan0: entered allmulticast mode [ 203.446076][T10728] vcan0: left allmulticast mode [ 203.729794][T10747] netlink: 'syz.6.1215': attribute type 1 has an invalid length. [ 203.784861][T10747] bond2: (slave gretap1): making interface the new active one [ 203.793752][T10747] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 204.062175][T10758] netlink: 'syz.1.1218': attribute type 23 has an invalid length. [ 204.110845][T10760] netlink: 'syz.5.1217': attribute type 10 has an invalid length. [ 204.168019][T10760] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 204.525532][T10784] __nla_validate_parse: 2 callbacks suppressed [ 204.525549][T10784] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1227'. [ 204.563739][T10789] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1227'. [ 204.751507][T10799] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1230'. [ 204.760601][T10799] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 204.881636][T10806] netlink: 696 bytes leftover after parsing attributes in process `syz.3.1233'. [ 205.092778][T10813] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 205.134153][T10813] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 205.880413][T10856] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1250'. [ 205.931036][T10859] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1250'. [ 205.979171][T10859] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1250'. [ 206.065261][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 206.209828][T10881] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1259'. [ 206.251609][T10882] sctp: [Deprecated]: syz.6.1257 (pid 10882) Use of int in maxseg socket option. [ 206.251609][T10882] Use struct sctp_assoc_value instead [ 206.278319][T10875] wlan0: mtu less than device minimum [ 206.444801][T10893] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 206.456879][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'. [ 206.481539][T10893] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 206.642986][T10907] netlink: 'syz.3.1267': attribute type 1 has an invalid length. [ 206.848279][T10914] bond3: (slave gretap0): making interface the new active one [ 206.861713][T10914] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 206.884492][T10918] tunl0: left promiscuous mode [ 206.889517][T10918] gre0: left promiscuous mode [ 206.934379][T10918] gretap1: left promiscuous mode [ 207.241469][T10945] sctp: [Deprecated]: syz.1.1278 (pid 10945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.241469][T10945] Use struct sctp_sack_info instead [ 207.335373][T10952] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 207.499951][T10965] netlink: 'syz.3.1283': attribute type 1 has an invalid length. [ 207.516037][T10964] netlink: 'syz.0.1285': attribute type 5 has an invalid length. [ 207.583818][T10964] geneve2: entered promiscuous mode [ 207.610070][T10964] geneve2: entered allmulticast mode [ 207.657363][T10967] bond4: (slave geneve3): making interface the new active one [ 207.674021][T10970] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.678670][T10967] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 207.691423][ T8885] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 207.705666][ T8885] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 207.718400][ T8885] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 207.734618][ T8885] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 207.749931][ T1169] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 207.758426][ T1169] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 207.793172][ T1169] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 207.809924][ T1169] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 207.917072][T10979] bridge1: entered allmulticast mode [ 208.067714][T10985] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 209.224219][T11061] netlink: 'syz.5.1314': attribute type 10 has an invalid length. [ 209.241036][T11061] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 209.263856][T11066] netlink: 'syz.3.1315': attribute type 2 has an invalid length. [ 209.298591][T11067] netlink: 'syz.3.1315': attribute type 2 has an invalid length. [ 209.619959][T11081] sctp: [Deprecated]: syz.0.1321 (pid 11081) Use of int in maxseg socket option. [ 209.619959][T11081] Use struct sctp_assoc_value instead [ 209.641204][T11089] __nla_validate_parse: 11 callbacks suppressed [ 209.641221][T11089] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1323'. [ 209.901738][T11096] syzkaller0: entered promiscuous mode [ 209.917735][T11096] syzkaller0: entered allmulticast mode [ 209.935231][T11098] netlink: 'syz.6.1326': attribute type 7 has an invalid length. [ 210.228193][T11116] gretap1: entered promiscuous mode [ 210.573657][T11129] Bluetooth: MGMT ver 1.23 [ 211.034218][ T12] wlan0: Trigger new scan to find an IBSS to join [ 211.870982][T11138] syzkaller1: entered promiscuous mode [ 211.893242][T11138] syzkaller1: entered allmulticast mode [ 211.916325][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1335'. [ 212.252792][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 212.441462][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 212.482338][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 212.539865][T11192] netlink: 'syz.0.1351': attribute type 1 has an invalid length. [ 212.713061][T11199] netlink: 'syz.0.1355': attribute type 10 has an invalid length. [ 212.720915][T11199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1355'. [ 212.813442][T11199] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 212.927849][T11214] vlan0: entered allmulticast mode [ 212.948364][T11214] veth0_vlan: entered allmulticast mode [ 213.074360][T11224] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1362'. [ 213.162643][T11224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.616302][T11256] netlink: 'syz.3.1371': attribute type 1 has an invalid length. [ 213.703200][T11256] 8021q: adding VLAN 0 to HW filter on device bond6 [ 213.744920][T11261] bond6: (slave veth7): Enslaving as an active interface with a down link [ 213.891366][T11256] veth9: entered promiscuous mode [ 213.933517][T11256] bond6: (slave veth9): Enslaving as an active interface with a down link [ 213.985561][T11261] vlan0: entered allmulticast mode [ 213.992255][ T8886] wlan0: Trigger new scan to find an IBSS to join [ 214.031456][T11261] bond6: entered allmulticast mode [ 214.043802][T11261] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 214.177126][T11278] xt_l2tp: v2 sid > 0xffff: 1114112 [ 214.336369][T11290] netlink: 'syz.5.1379': attribute type 11 has an invalid length. [ 214.380837][T11290] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1379'. [ 214.401114][T11297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1382'. [ 214.413221][T11294] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1381'. [ 216.952190][ T36] wlan0: Trigger new scan to find an IBSS to join [ 217.862396][ T8885] wlan0: Creating new IBSS network, BSSID b6:f9:c4:b2:8e:36 [ 229.592145][ T6949] ================================================================== [ 229.600249][ T6949] BUG: KASAN: slab-use-after-free in br_switchdev_fdb_notify+0x30b/0x3e0 [ 229.608666][ T6949] Read of size 8 at addr ffff888032ecd808 by task kworker/1:16/6949 [ 229.616647][ T6949] [ 229.618969][ T6949] CPU: 1 UID: 0 PID: 6949 Comm: kworker/1:16 Not tainted syzkaller #0 PREEMPT(full) [ 229.618981][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 229.618988][ T6949] Workqueue: events_long br_fdb_cleanup [ 229.619009][ T6949] Call Trace: [ 229.619015][ T6949] [ 229.619021][ T6949] dump_stack_lvl+0x189/0x250 [ 229.619035][ T6949] ? __kasan_check_byte+0x12/0x40 [ 229.619046][ T6949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.619058][ T6949] ? lock_release+0x4b/0x3e0 [ 229.619073][ T6949] ? __virt_addr_valid+0x4a5/0x5c0 [ 229.619086][ T6949] print_report+0xca/0x240 [ 229.619098][ T6949] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 229.619111][ T6949] kasan_report+0x118/0x150 [ 229.619120][ T6949] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 229.619134][ T6949] br_switchdev_fdb_notify+0x30b/0x3e0 [ 229.619148][ T6949] ? __pfx_br_switchdev_fdb_notify+0x10/0x10 [ 229.619162][ T6949] ? rht_lock+0x114/0x220 [ 229.619170][ T6949] ? rht_lock+0xff/0x220 [ 229.619181][ T6949] fdb_notify+0x89/0x160 [ 229.619190][ T6949] fdb_delete+0xdcf/0x1060 [ 229.619200][ T6949] ? fdb_delete+0x359/0x1060 [ 229.619209][ T6949] ? __pfx_fdb_delete+0x10/0x10 [ 229.619218][ T6949] ? br_fdb_cleanup+0x270/0x4d0 [ 229.619227][ T6949] br_fdb_cleanup+0x2aa/0x4d0 [ 229.619235][ T6949] ? br_fdb_cleanup+0xb1/0x4d0 [ 229.619243][ T6949] ? process_scheduled_works+0x9ef/0x17b0 [ 229.619254][ T6949] process_scheduled_works+0xae1/0x17b0 [ 229.619270][ T6949] ? __pfx_process_scheduled_works+0x10/0x10 [ 229.619282][ T6949] worker_thread+0x8a0/0xda0 [ 229.619297][ T6949] kthread+0x711/0x8a0 [ 229.619310][ T6949] ? __pfx_worker_thread+0x10/0x10 [ 229.619319][ T6949] ? __pfx_kthread+0x10/0x10 [ 229.619334][ T6949] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.619346][ T6949] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.619356][ T6949] ? __pfx_kthread+0x10/0x10 [ 229.619368][ T6949] ret_from_fork+0x4bc/0x870 [ 229.619378][ T6949] ? __pfx_ret_from_fork+0x10/0x10 [ 229.619388][ T6949] ? __switch_to_asm+0x39/0x70 [ 229.619396][ T6949] ? __switch_to_asm+0x33/0x70 [ 229.619403][ T6949] ? __pfx_kthread+0x10/0x10 [ 229.619415][ T6949] ret_from_fork_asm+0x1a/0x30 [ 229.619426][ T6949] [ 229.619430][ T6949] [ 229.831768][ T6949] Allocated by task 6412: [ 229.836078][ T6949] kasan_save_track+0x3e/0x80 [ 229.840749][ T6949] __kasan_kmalloc+0x93/0xb0 [ 229.845355][ T6949] __kmalloc_noprof+0x411/0x7f0 [ 229.850195][ T6949] ieee802_11_parse_elems_full+0x152/0x2ab0 [ 229.856079][ T6949] ieee80211_ibss_rx_queued_mgmt+0x47a/0x2af0 [ 229.862170][ T6949] ieee80211_iface_work+0x85f/0x12d0 [ 229.867443][ T6949] cfg80211_wiphy_work+0x2bb/0x470 [ 229.872550][ T6949] process_scheduled_works+0xae1/0x17b0 [ 229.878082][ T6949] worker_thread+0x8a0/0xda0 [ 229.882656][ T6949] kthread+0x711/0x8a0 [ 229.886711][ T6949] ret_from_fork+0x4bc/0x870 [ 229.891284][ T6949] ret_from_fork_asm+0x1a/0x30 [ 229.896031][ T6949] [ 229.898339][ T6949] Freed by task 6412: [ 229.902300][ T6949] kasan_save_track+0x3e/0x80 [ 229.906969][ T6949] __kasan_save_free_info+0x46/0x50 [ 229.912172][ T6949] __kasan_slab_free+0x5c/0x80 [ 229.916923][ T6949] kfree+0x19a/0x6d0 [ 229.920802][ T6949] ieee80211_ibss_rx_queued_mgmt+0x1207/0x2af0 [ 229.926957][ T6949] ieee80211_iface_work+0x85f/0x12d0 [ 229.932332][ T6949] cfg80211_wiphy_work+0x2bb/0x470 [ 229.937493][ T6949] process_scheduled_works+0xae1/0x17b0 [ 229.943024][ T6949] worker_thread+0x8a0/0xda0 [ 229.947597][ T6949] kthread+0x711/0x8a0 [ 229.951651][ T6949] ret_from_fork+0x4bc/0x870 [ 229.956258][ T6949] ret_from_fork_asm+0x1a/0x30 [ 229.961005][ T6949] [ 229.963313][ T6949] The buggy address belongs to the object at ffff888032ecd800 [ 229.963313][ T6949] which belongs to the cache kmalloc-1k of size 1024 [ 229.977348][ T6949] The buggy address is located 8 bytes inside of [ 229.977348][ T6949] freed 1024-byte region [ffff888032ecd800, ffff888032ecdc00) [ 229.991218][ T6949] [ 229.993531][ T6949] The buggy address belongs to the physical page: [ 229.999947][ T6949] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32ec8 [ 230.008698][ T6949] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 230.017179][ T6949] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 230.025067][ T6949] page_type: f5(slab) [ 230.029034][ T6949] raw: 00fff00000000040 ffff88801a026dc0 ffffea00014fac00 dead000000000003 [ 230.037596][ T6949] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 230.046165][ T6949] head: 00fff00000000040 ffff88801a026dc0 ffffea00014fac00 dead000000000003 [ 230.054818][ T6949] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 230.063558][ T6949] head: 00fff00000000003 ffffea0000cbb201 00000000ffffffff 00000000ffffffff [ 230.072218][ T6949] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 230.080866][ T6949] page dumped because: kasan: bad access detected [ 230.087271][ T6949] page_owner tracks the page as allocated [ 230.092966][ T6949] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5828, tgid 5828 (syz-executor), ts 74336496992, free_ts 74334892510 [ 230.112397][ T6949] post_alloc_hook+0x240/0x2a0 [ 230.117157][ T6949] get_page_from_freelist+0x2365/0x2440 [ 230.122683][ T6949] __alloc_frozen_pages_noprof+0x181/0x370 [ 230.128470][ T6949] alloc_pages_mpol+0x232/0x4a0 [ 230.133303][ T6949] allocate_slab+0x96/0x3a0 [ 230.137791][ T6949] ___slab_alloc+0xe94/0x18a0 [ 230.142449][ T6949] __slab_alloc+0x65/0x100 [ 230.146847][ T6949] __kmalloc_cache_noprof+0x411/0x6f0 [ 230.152204][ T6949] batadv_hard_if_event+0xe9a/0x1730 [ 230.157477][ T6949] notifier_call_chain+0x1b6/0x3e0 [ 230.162571][ T6949] register_netdevice+0x1608/0x1ae0 [ 230.167752][ T6949] veth_newlink+0x5d4/0xa60 [ 230.172302][ T6949] rtnl_newlink_create+0x310/0xb00 [ 230.177426][ T6949] rtnl_newlink+0x16e4/0x1c80 [ 230.182181][ T6949] rtnetlink_rcv_msg+0x7cf/0xb70 [ 230.187104][ T6949] netlink_rcv_skb+0x208/0x470 [ 230.191855][ T6949] page last free pid 5828 tgid 5828 stack trace: [ 230.198163][ T6949] __free_frozen_pages+0xbc4/0xd30 [ 230.203296][ T6949] __slab_free+0x2e7/0x390 [ 230.207695][ T6949] qlist_free_all+0x97/0x140 [ 230.212272][ T6949] kasan_quarantine_reduce+0x148/0x160 [ 230.217719][ T6949] __kasan_slab_alloc+0x22/0x80 [ 230.222558][ T6949] __kmalloc_cache_noprof+0x36f/0x6f0 [ 230.227921][ T6949] ref_tracker_alloc+0x133/0x460 [ 230.232840][ T6949] net_rx_queue_update_kobjects+0x1a6/0x740 [ 230.238723][ T6949] netdev_register_kobject+0x21f/0x310 [ 230.244168][ T6949] register_netdevice+0x126c/0x1ae0 [ 230.249351][ T6949] veth_newlink+0x5d4/0xa60 [ 230.253844][ T6949] rtnl_newlink_create+0x310/0xb00 [ 230.259205][ T6949] rtnl_newlink+0x16e4/0x1c80 [ 230.263874][ T6949] rtnetlink_rcv_msg+0x7cf/0xb70 [ 230.268804][ T6949] netlink_rcv_skb+0x208/0x470 [ 230.273556][ T6949] netlink_unicast+0x82f/0x9e0 [ 230.278310][ T6949] [ 230.280625][ T6949] Memory state around the buggy address: [ 230.286271][ T6949] ffff888032ecd700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 230.294342][ T6949] ffff888032ecd780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 230.302397][ T6949] >ffff888032ecd800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.310443][ T6949] ^ [ 230.314765][ T6949] ffff888032ecd880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.322842][ T6949] ffff888032ecd900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.330892][ T6949] ================================================================== [ 230.339105][ T6949] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 230.346315][ T6949] CPU: 1 UID: 0 PID: 6949 Comm: kworker/1:16 Not tainted syzkaller #0 PREEMPT(full) [ 230.355789][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 230.365940][ T6949] Workqueue: events_long br_fdb_cleanup [ 230.371506][ T6949] Call Trace: [ 230.374798][ T6949] [ 230.377733][ T6949] dump_stack_lvl+0x99/0x250 [ 230.382462][ T6949] ? __asan_memcpy+0x40/0x70 [ 230.387061][ T6949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.392266][ T6949] ? __pfx__printk+0x10/0x10 [ 230.396868][ T6949] vpanic+0x237/0x6d0 [ 230.400858][ T6949] ? __pfx_vpanic+0x10/0x10 [ 230.405372][ T6949] panic+0xb9/0xc0 [ 230.409109][ T6949] ? __pfx_panic+0x10/0x10 [ 230.413533][ T6949] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 230.419434][ T6949] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 230.425349][ T6949] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 230.430999][ T6949] check_panic_on_warn+0x89/0xb0 [ 230.435954][ T6949] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 230.441605][ T6949] end_report+0x78/0x160 [ 230.445854][ T6949] kasan_report+0x129/0x150 [ 230.450367][ T6949] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 230.456035][ T6949] br_switchdev_fdb_notify+0x30b/0x3e0 [ 230.461520][ T6949] ? __pfx_br_switchdev_fdb_notify+0x10/0x10 [ 230.467521][ T6949] ? rht_lock+0x114/0x220 [ 230.471857][ T6949] ? rht_lock+0xff/0x220 [ 230.476106][ T6949] fdb_notify+0x89/0x160 [ 230.480449][ T6949] fdb_delete+0xdcf/0x1060 [ 230.485000][ T6949] ? fdb_delete+0x359/0x1060 [ 230.489606][ T6949] ? __pfx_fdb_delete+0x10/0x10 [ 230.494464][ T6949] ? br_fdb_cleanup+0x270/0x4d0 [ 230.499417][ T6949] br_fdb_cleanup+0x2aa/0x4d0 [ 230.504100][ T6949] ? br_fdb_cleanup+0xb1/0x4d0 [ 230.508853][ T6949] ? process_scheduled_works+0x9ef/0x17b0 [ 230.514562][ T6949] process_scheduled_works+0xae1/0x17b0 [ 230.520103][ T6949] ? __pfx_process_scheduled_works+0x10/0x10 [ 230.526075][ T6949] worker_thread+0x8a0/0xda0 [ 230.530670][ T6949] kthread+0x711/0x8a0 [ 230.534735][ T6949] ? __pfx_worker_thread+0x10/0x10 [ 230.539915][ T6949] ? __pfx_kthread+0x10/0x10 [ 230.544520][ T6949] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.549707][ T6949] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.554900][ T6949] ? __pfx_kthread+0x10/0x10 [ 230.559572][ T6949] ret_from_fork+0x4bc/0x870 [ 230.564281][ T6949] ? __pfx_ret_from_fork+0x10/0x10 [ 230.569398][ T6949] ? __switch_to_asm+0x39/0x70 [ 230.574153][ T6949] ? __switch_to_asm+0x33/0x70 [ 230.578899][ T6949] ? __pfx_kthread+0x10/0x10 [ 230.583478][ T6949] ret_from_fork_asm+0x1a/0x30 [ 230.588242][ T6949] [ 230.591683][ T6949] Kernel Offset: disabled [ 230.595989][ T6949] Rebooting in 86400 seconds..