last executing test programs: 24.588768369s ago: executing program 3 (id=6559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x20, r1, 0xd7b825ccd16be7b5, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'nicvf0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ac1e00010000000000000000"], 0x38}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0xa}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x80000) ioctl$XFS_IOC_COMMIT_RANGE(r6, 0x40585883, &(0x7f00000001c0)={r0, 0x0, 0x92, 0x40, 0xb22, 0x1, [0x5, 0x9, 0x100000001, 0x1, 0x4, 0x6]}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r3], 0x54}}, 0x800) 23.901991865s ago: executing program 1 (id=6564): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0xc3}, 0x0) 23.846634007s ago: executing program 3 (id=6566): r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="feba8d101ea97627f2f52de1e0f3cfd263aa79512da88854cf4da19070aad7731cf16d1cf60c57c1baa61fbe5e96abdb5c13b3d05f1c66ee424a9543549a02ea61834c54d99f8d22a211f2fc95d2edc46988002079b5fec071f517589173d3e4d8b72f89aea998d11aff13b41e5ce08d4628d75900890c3202481224de5c600de7cc10b78dda12a25aa3dcb9f67ae91cbc275a224e7279100b1e332b8d38844c2ac8612860b8edde48112c8bb2925e07e74e32288350707dd5b218af28d650dd8a82940843710945a62ab8a18481b0df289b1f62087cd29193b54f8826ea7545412d579384918e05a3c45b5e6971e5982d", 0xf1) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10, 0x80000) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r2 = accept4$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0xffffffff}, 0x10, 0x800) shutdown(r2, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f00000001c0)={'\x00', 0xfffe}) ioctl$XFS_IOC_AG_GEOMETRY(r3, 0xc080583d, &(0x7f0000000200)={0x200, 0xff, 0xa, 0x800, 0xfffffff8, 0x2, 0x4, 0x375}) listen(r3, 0x4) r4 = accept(r2, &(0x7f0000000280)=@nfc_llcp, &(0x7f0000000300)=0x80) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x7f00, 0x7800, 0x5, 0xffc, {{0x9, 0x4, 0x2, 0x2c, 0x24, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast1, @multicast1, {[@generic={0x33210b7a53be64c3, 0xe, "cc3203c464ea22380004342a"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd0, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x26}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8004}, 0x8c0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @private0, 0x4}}, 0x1, 0x3}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000f40)={{r2, &(0x7f00000007c0)='\'\'\x00', 0x50002, &(0x7f0000000800)={@_ha_fsid={[0x9, 0x8]}, {0x81, 0x7, 0x0, 0x8000000000000000}}, 0x4, &(0x7f0000000840), &(0x7f0000000880)=0x9f}, 0x6, &(0x7f0000000e80)=[{0x2, 0x80000001, &(0x7f00000008c0)='$/\'\\\x97](++\x00', &(0x7f0000000900)="813d629b7ffdcd4394336e54ac755e12cad46ca371c3dc5ae56b1575ffc01c4674efe8882e55065f55a3f6fe3c929717e63858cf434b70395d7c69bd82e5a59ea69f375e1f9e72296334f23f248e7b8532c08c9f9676ea", 0x57, 0x8}, {0x3, 0xfffffff0, &(0x7f0000000980)='erspan0\x00', &(0x7f00000009c0)="230905095eae334b3ca21c120dacd826ec81fa792e654eda58c9fb5c594922f91f4e992183840ae6ab2c155485e1f45134a723e9f7b293a93e6c37be84c47a27e2008b420f75e19823e2c7b191f31f", 0x4f, 0x12}, {0x2, 0x95f4, &(0x7f0000000a40)='\x00', &(0x7f0000000a80)="62615065bf1ed7f3ba7e930bab8bdf6336f7f1a9910840620878e33d36e5c3a09790773024b8a8e1c6101df99b7307f0167df7bb974b6512ef724a53d93b48d776bbb653006bb60a88483cc6de91955f4d5e378903b8fa07726e16d4704be98c368bed13237584afc20ddd58bb0a8fa9d6835c9f9fb52f31198099051b91aff4be186284c105ce85a4c8642ada9ff612542c2870ff35a7eeedc3", 0x9a, 0x28}, {0x0, 0x10, &(0x7f0000000b40)='team0\x00', &(0x7f0000000b80)="0644eea10806e45fd694b340f98428383bcf78e4ee251d8c2c0675cee4ba3e06ae802bfbca0b7175c3491ff833b5862abe9eb562d53376a6ee24d963931d7a755567fb8202ee4838276eb50f8b40cf8f91944d50dc3c9105df1bed5927261a1af2b2603a99656df3698f7c513a3d3c41a8890da81f5fc6122435c95f796d46bc95231b2bd57c843ec5034a707842fa8af8871b4366d1cfaccb193c96ae3b05eb3894d3877729d4bbb3913aa8ebf4a8bccf0dcfaf0859fcdf8d1d18fc61e67cc408bb459460d7202ec0db21ecee78e3554be16f", 0xd3, 0x10}, {0x0, 0x1000, &(0x7f0000000c80)='\'\xb4-\x00', &(0x7f0000000cc0)="4fe7c43f56378e77323833de07a945180a6a78b00127e6fdcf2ef7a3b8389926966281ca216294a57ad6c16eebd965850c281ba4b239f83279907cab2bc2e3c475bb27bb7a1fd4117ad3727c6b35d5d199386a76db4f572ef0d45372b3bb5d19d7cf9f8af4a250886abcac789bbbb855231473889f84845f7afd92af9697935ed99eb62d871c99f0b002df7015751c05eed39ba8a44e2901619043653109ca67ffe324bbce9ab9c005c27b6b10bb286b1421d1d1aeb8a5011c54d1f762f2499d673b9e53f25f6be3524ebe3cc5884e2a9fad789fd7ef6a6275c3cb53febf027e0d3c39e0fd3d419e314cb97694f3df8f604d0778", 0xf4, 0x28}, {0x2, 0x2, &(0x7f0000000dc0)='\xa4}\x00', &(0x7f0000000e00)="9b2686d7a80bac86b3ae47e16fa9f201217f5093ae2513dcddff9acd249e6facdca980bf9dfaddba574b21d438f09e2b26f1210dc1d51f7d9e58c5bd5ba4ac93f2257bffe6b36a2957199a2c311f1cbd4092fa86b05efe70ec7220e3f091f38d5777c4a2108c8172609351d59a0d5acab2f7938d0fb4f921d7a4cafc47", 0x7d}]}) sendmsg$FOU_CMD_DEL(r9, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x58, 0x0, 0xef20106757e2c36e, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_emit_ethernet(0x40, &(0x7f0000001100)={@broadcast, @local, @void, {@mpls_uc={0x8847, {[{0x2}, {0x0, 0x0, 0x1}], @llc={@snap={0xaa, 0x1, "ce", "2a37bb", 0x884c, "368c8208c664a6bfc1a3d318a58e97d87497c8a13ad5e1162420b4dd815e809940fa"}}}}}}, &(0x7f0000001140)={0x0, 0x3, [0xb6a, 0x748, 0x956, 0xe49]}) setsockopt$MRT_PIM(r4, 0x0, 0xcf, &(0x7f0000001180), 0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000011c0)={0x0, 0x6, 0x0, [0xedc, 0x9, 0x3ff, 0xa3, 0x4], [0x0, 0x42fc5759, 0x63e, 0x5, 0x10, 0x8001, 0x6, 0xfffffffffffffff8, 0xffffffffffff07fc, 0x0, 0x3, 0x3, 0x8000000000000000, 0x7, 0x62, 0x9, 0x7, 0x66a2, 0x200, 0x9, 0x3, 0x6, 0x3, 0x800, 0x4, 0x7, 0xe999, 0x6, 0x7b82, 0xcc5, 0x1, 0x4, 0x100, 0x1ff, 0xff, 0x2, 0x6, 0x5, 0xf, 0x8, 0x7, 0x8001, 0x1657, 0xf, 0xcc, 0x2, 0x401, 0x43d3, 0x7afb, 0x0, 0x7ff, 0x9, 0x8, 0x232, 0xa, 0x1, 0x5, 0x227d, 0xb, 0x0, 0xdd6, 0x3ff, 0x0, 0x5, 0x213, 0x1, 0x0, 0x8, 0xfffffffffffffff9, 0x3, 0x8, 0x4000000080000, 0x1, 0x6, 0xc, 0x6, 0x5, 0x6dcf, 0xffffffffffffffff, 0x2, 0x401, 0xf, 0x4, 0x2, 0x7, 0x1, 0xff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x2, 0x9, 0x8, 0xe7bc, 0xffffffffffffff00, 0xbb3f, 0x12, 0x4, 0x3, 0x3, 0x100000000, 0x3, 0x4, 0x80000000, 0x5ac5, 0x8, 0xfffffffffffffff7, 0x10000, 0xffffffffffff66f9, 0x8, 0x7, 0x2, 0x4, 0x1, 0x3adf, 0xf31, 0xb66, 0x7, 0x9]}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000001600)=[@in={0x2, 0x4e21, @multicast1}], 0x10) r10 = socket(0x1e, 0x6, 0xf8b0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001780)={r9, &(0x7f0000001640)="333d72b8b98f1e00552324d754c01620a5c063e6112bfd2f92e5e91f40c762369dd3570a7ea890314c5d8985b352e01821c32be8dc986dc4ecd79be5e307b1ecc4da757f33e5a8c12570db311d787f6d7b59aa26bb5d4040eb7aeea144cd22865f78a997d6b3dae9bb61dc46875b6d1b6b2f07e2f90d2a05a74a60e7fe8db387e223f975ca7a2e388400d9e7d6c0f57787d969de235bf4b454cb3374f4f163d73dfb44d30f7857a2021c0254c7a9c622a89bf45fc37c3a73863a71922c43e9b9409503c71211bb474687a333bb046d1195056197a1869d1592ef0b604589b1db91211342ff681b17fe766a6bfbef98f189938a3c15500eeefc", &(0x7f0000001740)=@tcp=r10, 0x1}, 0x20) socket$netlink(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001800), r9) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x38, r11, 0x200, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x24000041) 23.566008402s ago: executing program 4 (id=6567): r0 = socket(0x2a, 0x800, 0x8) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000003"], 0x20}, 0x0) 23.395388732s ago: executing program 4 (id=6568): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x81, 0x7, 0x61, 0x9, 0x2, 0x6, 0x1, {0x0, @in6={{0xa, 0x4e20, 0x8001, @private0, 0x5}}, 0x4, 0x4736, 0xc, 0x83a8, 0x9}}, &(0x7f0000000480)=0xb0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001002bbd70000200000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="010200007f00000100e900"/24], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) 23.348936197s ago: executing program 1 (id=6569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r5, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000002b00)='1', 0x1}], 0x1}}], 0x1, 0x48c4) sendmmsg$inet_sctp(r5, &(0x7f0000000380)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000300)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x18, 0x4000}], 0x1, 0x20000840) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xf68c919617920ce8}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x44000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 23.119123889s ago: executing program 3 (id=6572): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80611\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/210, 0xd2}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r0, 0x0, 0x0, 0x800) r3 = accept4(r0, &(0x7f0000000100)=@sco={0x1f, @fixed}, &(0x7f0000000180)=0x80, 0x0) sendmmsg$alg(r3, &(0x7f0000000c00), 0x0, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) 23.114992412s ago: executing program 4 (id=6573): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast1}, 0x2}}, 0x26) ioctl$PPPIOCSFLAGS(r7, 0x40047459, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000400)={r2}) 22.921705603s ago: executing program 0 (id=6574): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) shutdown(r1, 0x1) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000880), 0x12) unshare(0xa020480) 22.813565768s ago: executing program 3 (id=6575): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2) (async) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x44}}, 0x0) (async) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 22.766233779s ago: executing program 4 (id=6576): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf251a000000060021006200000008002280"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/274, 0x112}, {&(0x7f0000001d00)=""/4042, 0xfca}, {&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000000940)=""/200, 0xc8}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f00000003c0)=""/170, 0xaa}, {&(0x7f00000000c0)=""/178, 0xb2}], 0x8}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="97b7bd66c800100000eca4d931551e6d15ff4f6d3fa4a6aa87ee05f1166cc18742ef2954d1796392f883658abd3b696b1fd41602b98a119195edec73988cd3c7e5b21c37278f9d6efdbd77f91b91b3dc4a65bcedbb73dee250fdd9c8a57f76bf4fa01829f80c4da27e3c7e58f0e57784c39b0ccaecf8", @ANYRES16=r3, @ANYBLOB="000227bd7000fedbdf25030000002600070073797374656d5f753a6f626a6563745f723a756465765f72756c65735f743a733000000008000400ac1414bb"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000090) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140007"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 22.693746152s ago: executing program 2 (id=6577): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async, rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) (rerun: 64) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa}}, 0x26) (async, rerun: 64) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) (rerun: 64) 22.608491269s ago: executing program 0 (id=6578): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace", 0xb2}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="24020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x224}}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) getsockopt$inet_tcp_buf(r2, 0x6, 0x18, 0x0, &(0x7f0000000340)) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xa}}]}, 0x38}}, 0x4000010) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9559216caf87148e}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x268, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x240, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&/@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':^}\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x602a}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4ba}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*(\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#&%}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',y[%%+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}]}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x37, 0x4, "4a55ed06b71b8c35242513a3adff573538cb279a45e9fc5297db031872bf4c3d615ec475b3d062b2d50cbe9307e0455ea11396"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4011}, 0x24040000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r9 = socket$inet(0xa, 0x801, 0x84) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000005c0)={r11, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={r11, 0x9, 0x7}, 0x8) 22.267237257s ago: executing program 1 (id=6579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r2, 0x29, 0x8, 0x0, &(0x7f0000000340)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r5, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @remote}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) 22.141613616s ago: executing program 3 (id=6580): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0xe4}, 0x0) 22.034825288s ago: executing program 2 (id=6581): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "627f484208acf895", "a2755ca7494d6dd1626935e367f8a5ee", "9bcd3dd8", "a33bd20eca28ee4c"}, 0x28) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) r1 = epoll_create(0x64) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1) (async) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000100)={0x6}, 0x4) (async) close(r1) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) (rerun: 64) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x44}}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x604c020}, 0x4001) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000500)={"3fc0a8ae81fde75549aab70b33720f25", 0x0, 0x0, {0x487, 0x8}, {0xeb01, 0x3}, 0x80000000, [0x7, 0x8, 0x5, 0x5, 0x9, 0x0, 0x3, 0xffffffffffffffff, 0x6, 0x10b, 0x5, 0xc5, 0x1000, 0x9, 0x0, 0x18]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000600)={0x0, 0x47, 0x0, [0x9, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff8, 0xfffffffffffffffb], [0x3ff, 0x80000000, 0xb6, 0xbb, 0x2, 0x7, 0x8, 0xf, 0x9, 0x6, 0x8, 0x40, 0x7, 0x9, 0x56, 0x1000, 0x1ff, 0x7, 0x1, 0xffffffffffffff18, 0x0, 0x9be8171, 0xfffffffffffffffc, 0x4, 0x200, 0x1, 0x8000000000000001, 0x0, 0xafc3, 0xa31, 0x100000001, 0xe1ff, 0x3, 0xffffffff, 0x3, 0x172aaa4c, 0x8, 0x2, 0x80000001, 0x1, 0x4, 0x94, 0xffffffffffffff94, 0x4, 0x7fff, 0x1, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc673, 0xffffffffffff8000, 0x7, 0x2, 0x3, 0x4, 0x2d, 0x0, 0x1d5, 0x9, 0x333aac60, 0x0, 0xe, 0x34de, 0x80000000, 0x10001, 0x6, 0x8, 0x2, 0x5, 0xfffffffffffffff1, 0x100000001, 0xb, 0x7, 0x4, 0x0, 0x5, 0x6, 0x400, 0x9, 0x8, 0xe, 0x1, 0x128d000000, 0x6, 0xa9a, 0x8, 0xfffffffffffffbff, 0x5, 0x6, 0x7195, 0x101, 0x80000000, 0xfffffffffffffff9, 0x1, 0x100000000, 0x1, 0xffffffffffffff80, 0x6, 0x9, 0x10000, 0x8, 0xfffffffffffffe73, 0x8, 0x4, 0x1, 0x3ff, 0x4, 0x401, 0x2, 0x6, 0x1, 0x3, 0xad9beca, 0x4, 0x8b, 0x2, 0x3, 0x6e90]}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000a40)={{r2}, r9, 0x4, @unused=[0x0, 0xb7, 0x3, 0x7], @devid=r10}) (async) ioctl$SIOCAX25NOUID(r4, 0x89e3, &(0x7f0000001a40)=0x1) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xa, 0x9, 0x7, 0x1, 0x71494, 0xffffffffffffffff, 0x40, '\x00', r6, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000001b00), &(0x7f0000001b40)='%ps \x00'}, 0x20) (async, rerun: 32) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c00)=@generic={&(0x7f0000001bc0)='./file0\x00', 0x0, 0x18}, 0x18) (async, rerun: 32) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d80), 0x4) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=@base={0xd, 0x6c, 0x10001, 0x400, 0x4005, 0xffffffffffffffff, 0x5, '\x00', r7, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f00)={0x6, 0x1f, &(0x7f0000001c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r12}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001d40)='syzkaller\x00', 0xac, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r14, 0x8, &(0x7f0000001dc0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001e80)=[r15], &(0x7f0000001ec0)=[{0x5, 0x3, 0x0, 0xa}, {0x2, 0x2, 0x4, 0xdd9baa049e30d10c}, {0x2, 0x4, 0x3, 0x1}], 0x10, 0x8}, 0x94) (async) socket(0x18, 0xa, 0x7) (async, rerun: 32) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000002900)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002000)={0x8a4, r8, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x1f}}}}, [@NL80211_ATTR_TX_RATES={0x15c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x7, 0x1, 0xff, 0x1, 0x3, 0xf9f3]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2c, 0x2, 0x12, 0x3, 0xc, 0x24, 0x16, 0x4, 0x60, 0x6, 0x1, 0x18, 0x1, 0x18]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x10c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x9}, {0x5, 0x6}, {0x7, 0xa}, {0x5, 0x4}, {0x1}, {0x1, 0x9}, {0x6, 0x5}, {0x5, 0x5}, {0x6}, {0x4, 0x8}, {0x7, 0x5}, {0x4}, {0x7, 0x2}, {0x6, 0x3}, {0x1, 0x4}, {0x4, 0xa}, {0x2, 0x1}, {0x4, 0x2}, {0x1, 0x9}, {0x2, 0xa}, {0x7, 0x3}, {0x1, 0x1}, {0x6}, {0x3, 0x6}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x6, 0x60, 0x24, 0x6, 0xc, 0x3, 0x18, 0x60, 0xb, 0x1b, 0x6, 0x9]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x16, 0x3, 0x16, 0x1, 0x60, 0x48, 0x48, 0x5, 0x0, 0x1b, 0xc, 0x12, 0x6, 0x48]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x1a, 0x2, 0x24, 0x6, 0x1, 0x36, 0x16, 0x30, 0x1b, 0x6, 0x2, 0x1, 0x6c, 0xb, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x9}, {0x6, 0x9}, {0x5, 0x4}, {}, {0x0, 0x9}, {0x1, 0x1}, {0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x3, 0x9}, {0x6}, {0x2, 0x1}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x2}, {0x3, 0x2}, {0x1, 0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x1, 0x3}, {0x1, 0x2}, {0x4, 0x5}, {0x7, 0x9}, {0x0, 0x4}, {0x5, 0xa}, {0x4, 0x9}, {0x3, 0x9}, {0x3, 0xa}, {0x4, 0x8}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x6, 0x7}, {0x0, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0x2}, {0x2}, {0x7}, {0x1, 0x4}, {0x1, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x6, 0x3}, {0x6, 0x1}, {0x3}, {0x1, 0x8}, {0x3, 0xa}, {0x4, 0x1}, {0x7, 0xa}, {0x0, 0x2}, {0x4, 0x8}, {0x4, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x2, 0x9}, {0x5, 0x1}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x6}, {0x6, 0x7}, {0x0, 0xa}, {0x7, 0xa}, {0x1, 0x9}, {0x3, 0x8}, {0x2, 0x7}, {0x4, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x4}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x2, 0x6}, {0x3, 0x2}, {0x6, 0x3}, {0x5}, {0x0, 0x4}, {}, {0x7}, {0x5, 0x3}, {0x4, 0x5}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x6}, {0x7}, {0x3, 0x4}, {0x2}, {}, {0x2, 0x2}, {0x3, 0x1}, {0x1, 0x6}, {0x3, 0x5}, {0x5}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x4}, {0x0, 0x9}, {0x5, 0x6}, {0x5}, {0x6, 0x2}, {0x4, 0x9}, {0x5, 0x3}, {0x0, 0x9}, {0x2, 0x4}, {0x2, 0x3}, {0x3, 0x7}, {0x5, 0x7}, {0x5, 0x4}, {0x7, 0x4}, {0x1}, {0x2, 0x9}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0xa}, {0x5, 0x3}, {0x0, 0x4}, {0x2, 0x6}, {0x5, 0xa}, {0x7, 0x7}, {0x4, 0x2}, {0x7, 0x5}, {0x4, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0xf, 0x0, 0xd, 0x3, 0x7e, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x8, 0x5e, 0xc6b, 0x3ff, 0x2, 0x3ff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xe8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x3, 0xa}, {0x7, 0x9}, {0x2, 0x8}, {0x7, 0x5}, {}, {0x4, 0x4}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0xa}, {0x1, 0x7}, {0x7, 0x7}, {0x7, 0x6}, {0x4, 0x2}, {0x5, 0xa}, {0x1, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0x9}, {0x0, 0x8}, {0x3}, {0x6, 0x3}, {0x3, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x2, 0x6}, {0x5, 0xa}, {0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x2, 0x8}, {0x0, 0x9}, {0x6, 0x9}, {0x7, 0x2}, {0x6, 0x7}, {0x4, 0x3}, {0x5, 0x5}, {0x3, 0x6}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x4, 0x400, 0x100, 0x3, 0x5, 0x7]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x0, 0x6}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x1, 0xa}, {}, {0x5, 0x7}, {0x5, 0x6}, {0x6, 0x8}, {0x7, 0x5}, {0x1}, {0x6}, {0x7, 0x8}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x7}, {0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0xa}, {0x1, 0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x5, 0x3}, {0x3, 0x5}, {0x4, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x8, 0x8, 0x7, 0x0, 0x9]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x2, 0xb, 0x60, 0x46, 0x5, 0x2, 0x2, 0x60, 0x30, 0x60, 0x18, 0x36, 0x12, 0x6c, 0x36, 0x6, 0x1b, 0xb, 0xb, 0x34, 0x1, 0x6c, 0x36, 0xc, 0x1, 0x16, 0x5, 0x12, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x5, 0xa00, 0x1, 0x1, 0x2, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x14, 0x6, 0x13, 0x5, 0x6, 0xfff, 0x8e, 0x5]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x679ec0df3b3def77, 0x6, 0x30, 0x1, 0xb, 0x1b, 0x0, 0x1, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x8, 0x1, 0xc, 0x1b, 0x1b, 0x16, 0x12, 0x5, 0x6, 0x4, 0x16, 0x3a, 0x60, 0x1, 0x60, 0x2, 0x6c, 0x42, 0x30, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xd, 0xd, 0x0, 0x2, 0x1ff, 0xd4c7, 0xff]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x4, 0x0, 0x6, 0x6e0e, 0x6, 0x1, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x1}, {0x3, 0x1}, {0x2, 0x6}, {0x1, 0x2}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x4, 0x7}, {0x0, 0x8}, {0x4, 0x2}, {0x3, 0x9}, {0x6, 0x3}, {0x1, 0x4}, {0x0, 0x7}, {0x4}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x7, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x7}, {0x7, 0x1}, {0x0, 0x4}, {0x2, 0x1}, {0x0, 0x5}, {0x4, 0x4}, {0x3, 0x2}, {0x5, 0x9}, {0x3, 0x3}, {0x1, 0x1}, {0x4, 0x9}, {0x1, 0x9}, {0x4, 0x3}, {0x4, 0x2}, {0x0, 0x3}, {0x4, 0xa}, {0x5, 0x8}, {0x7, 0xa}, {0x7, 0x3}, {0x6, 0x5}, {0x4, 0x8}, {0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0xa}, {0x6, 0x7}, {0x1, 0x7}, {0x7, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x827b, 0x8, 0x0, 0xfd, 0x3, 0x2, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x144, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0xc, 0x12, 0x24, 0xd, 0x3, 0x3, 0x2, 0x18, 0x4, 0x6, 0xb, 0x2, 0x1b, 0x6c, 0x24, 0xb, 0x60, 0x1b, 0x2, 0x6, 0xe, 0x1, 0x1b, 0x18, 0x9, 0x6c, 0x1b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x5}, {0x5, 0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x7, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x0, 0x7}, {0x3, 0x1}, {0x1, 0x4}, {0x6}, {0x2, 0x9}, {0x7}, {0x3}, {0x5, 0x4}, {0x6, 0x8}, {0x0, 0x9}, {0x2, 0x6}, {0x5, 0x3}, {0x3, 0x4}, {0x3, 0x7}, {0x3}, {0x1, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {}, {0x3, 0x2}, {0x2, 0xa}, {0x0, 0x7}, {0x4, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x1f2, 0x1a25, 0x36, 0x4, 0x7, 0x9]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x7}, {0x0, 0x3}, {0x4, 0x7}, {0x0, 0x2}, {0x2, 0x9}, {0x5, 0x8}, {0x0, 0x6}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x30, 0x22, 0x3, 0x12, 0x5, 0x48, 0xc, 0x19, 0x12, 0x9, 0x60, 0x5, 0xb]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x30, 0x24]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x855, 0xdf54, 0xb, 0xd543, 0xfff9, 0x0, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x51cd, 0xfffb, 0x9, 0x1, 0x9, 0x4, 0x79f1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0xecd0, 0x8, 0x1, 0x7, 0x6, 0x7, 0x5]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x70336b5f6f3a9f04, 0x30, 0x4, 0x6c, 0x24, 0x9, 0x1, 0x0, 0x16, 0x30, 0x3, 0x16, 0x6, 0x18, 0xb, 0x5, 0x9, 0x4, 0x3, 0x24, 0x16, 0xb, 0x24, 0x6, 0x1e, 0x24, 0x30, 0x6, 0x18, 0x18, 0x30]}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6286, 0xd9, 0x1, 0x8, 0xff, 0x200, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xf9}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x1, 0x101, 0x9, 0x8d, 0x3, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x30c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x6ed0b86f5b989b90}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x6}, {0x2, 0x7}, {0x6, 0x9}, {0x6, 0x8}, {0x0, 0x7}, {0x3, 0x2}, {0x2, 0x3}, {0x0, 0x6}, {0x3, 0x9}, {0x3}, {0x0, 0x6}, {0x6, 0x2}, {0x1, 0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x8}, {0x3}, {0x4, 0x8}, {0x5, 0x6}, {0x2, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x1, 0x7}, {0x4}, {0x0, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x6, 0x5}, {0x2, 0x4}, {0x7}, {0x5, 0x5}, {0x7, 0x6}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x5, 0x4, 0x12, 0x6c, 0x1, 0x48, 0x2, 0x30]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa4, 0xf2c, 0x729, 0x4, 0x9, 0x6, 0x8, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x6, 0xa}, {0x0, 0x7}, {0x5, 0xa}, {0x2}, {0x5, 0x7}, {0x2, 0x3}, {0x1, 0x2}, {0x3, 0x5}, {0x3, 0xa}, {0x1, 0x5}, {0x4, 0x2}, {0x0, 0x3}, {0x5, 0xa}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x2}, {0x3, 0x3}, {0x1, 0x7}, {0x5, 0x2}, {0x6, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x9}, {0x3, 0x3}, {0x2, 0x6}, {0x3, 0xd}, {0x0, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x800, 0x1, 0x7ff, 0x1000, 0x5, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8800, 0x1, 0x3ff, 0x7, 0xc3b5, 0x8, 0x3]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x9, 0xb24, 0x3, 0x4, 0x7, 0x8]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfb, 0x7, 0x81, 0xffff, 0x6, 0x8001, 0x1c]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x104, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x3}, {0x3, 0x8}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0x6}, {0x5, 0x5}, {0x0, 0x8}, {0x6, 0x4}, {0x7, 0x3}, {0x1, 0x9}, {0x5, 0x7}, {0x6, 0x7}, {0x3, 0x2}, {0x1, 0x6}, {0x5, 0x7}, {0x4, 0x3}, {0x7, 0x9}, {0x5, 0x3}, {0x0, 0x7}, {0x4, 0x2}, {0x6}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x7, 0x6}, {0x1, 0x6}, {}, {0x1, 0x2}, {0x2, 0x6}, {0x4, 0x9}, {0x2, 0xa}, {0x1}, {0x3, 0x8}, {0x1, 0x7}, {0x2}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x7}, {0x3}, {0x5, 0x5}, {0x4, 0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x4}, {0x7, 0x9}, {0x5, 0x9}, {0x0, 0x2}, {0x0, 0x4}, {0x5, 0x2}, {0x0, 0x4}, {0x1, 0x3}, {0x1}, {0x2, 0xa}, {0x6, 0x6}, {0x3, 0x6}, {0x7, 0x9}, {0x1}, {0x2}, {}, {0x4, 0x7}, {}, {0x6}, {0x1, 0x5}, {0x2, 0x7}, {0x6, 0x7}, {}, {0x4, 0x8}, {0x3, 0xa}, {0x4, 0x2}, {0x6, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x30, 0x2, 0x3, 0x1d, 0x48, 0x24, 0x16, 0x2c, 0x60, 0xb, 0x5, 0x9, 0x36, 0x1b, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe78, 0xff, 0x3, 0x6, 0x7, 0xc4, 0xd8]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x6}, {0x7, 0x7}, {0x1}, {0x6, 0x5}, {0x0, 0x4}, {0x7, 0x7}, {0x5, 0x7}, {0x5, 0x9}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0xa}, {0x0, 0x6}, {0x2, 0x1}, {0x7, 0x4}, {}, {0x6}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x3}, {0x7, 0x8}, {0x1}, {0x3, 0x1}, {0x6, 0x3}, {0x4, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x7, 0x9}, {0x6, 0x5}, {0x6, 0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x5, 0x7}, {0x3, 0x6}, {0x6, 0x1}, {0x6, 0x4}, {0x1, 0x9}, {0x2, 0xa}, {0x2}, {0x4, 0x6}, {0x2, 0x3}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0xa}, {0x5, 0x9}, {0x4, 0x6}, {0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x4}, {0x2, 0x5}, {0x3, 0x4}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x6}, {0x1, 0x8}, {0x0, 0x6}, {0x4, 0x8}, {0x1, 0x1}, {0x5, 0x8}, {0x2, 0xa}, {0x6}, {0x2, 0xa}, {0x3, 0x9}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0x3}, {0x7, 0x5}, {0x1, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x16, 0x6b, 0x3, 0x6c, 0x5, 0x5, 0x12, 0x12, 0x7f, 0x16, 0x16, 0x29, 0x18, 0x16, 0x12, 0x18, 0x1, 0xb, 0x6c, 0xc, 0x24, 0x4, 0x3, 0x12, 0x0, 0xb, 0x18, 0x9, 0x1, 0x0, 0x36]}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x6c, 0x6c, 0x18, 0x30, 0x1b, 0x48, 0x24]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x3}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0x4}, {0x4, 0x9}, {0x2, 0x9}, {0x2, 0x3}, {0x7}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0xa}, {0x0, 0x6}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0xb, 0x12, 0x60, 0x48, 0x68, 0x1, 0x60, 0x6, 0x5, 0x60, 0x0, 0x30, 0x16, 0x2, 0xa, 0x3, 0x6, 0x0, 0x60, 0x48, 0x30, 0x4a, 0x24, 0x18, 0x5, 0x5, 0x6c, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x4}, {0x3, 0x5}, {0x2, 0x8}, {0x6, 0x7}, {0x6}, {0x6, 0x4}, {0x0, 0x8}, {0x2}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x7}, {0x6, 0x3}, {0x1, 0x1}, {0x7, 0x4}, {0x3, 0x3}, {0x1, 0xa}, {0x1, 0x3}, {0x2, 0x4}, {0x3, 0x5}, {0x1, 0x8}, {0x6, 0xa}, {0x6, 0xa}, {0x5, 0x5}, {0x2, 0x7}, {0x1, 0x5}, {0x4, 0x3}, {0x3, 0x5}, {0x3, 0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0x4}, {0x7, 0x3}, {0x7}, {0x2, 0xa}, {0x1, 0x9}, {}, {0x3, 0x5}, {0x7}, {0x1, 0xa}, {0x6, 0x3}, {0x5, 0x3}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0xff, 0xa, 0x7fff, 0xff, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0x3, 0x16, 0x48, 0x48, 0x36, 0x18, 0xc, 0x48, 0xc, 0x60, 0x60, 0x24, 0x0]}]}]}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x100, 0xfc1, 0x40, 0x3, 0x2, 0x3]}}]}]}]}, 0x8a4}, 0x1, 0x0, 0x0, 0xc080}, 0x40000) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000002940)='vegas', 0x5) 21.920714482s ago: executing program 0 (id=6582): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f00000000c0)) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="4000000010800000280012800e0001006970366772657461700000001400028006000e"], 0x48}}, 0x0) (async) r3 = socket$igmp6(0xa, 0x3, 0x3a) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000340)="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", 0x1000, 0x40071, &(0x7f00000002c0)={0x11, 0x18, r1, 0x1, 0x7, 0x6, @local}, 0x14) (async) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcb, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x884) (async) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x54, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x2, 0x71}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x2, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7ff}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 21.793811766s ago: executing program 1 (id=6583): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x8917, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0), 0x411a}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 21.744886887s ago: executing program 2 (id=6584): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000a80)={0x270, 0x0, 0x410, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7add}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6d}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x77}}, {0x8}}}]}}]}, 0x270}, 0x1, 0x0, 0x0, 0x1}, 0x4004) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @fallback=0x2e, 0xffffffffffffffff, 0x6}, 0x94) 21.710723001s ago: executing program 4 (id=6585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x186}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4", 0xaf}, {&(0x7f0000000140)="985e44efeabe001cabcf3d8673c3a254a9a2d3187950cb347b70a27cb566ec4e49f5084e2c245023cfd8259e2efaf6dee305ca987ec87c1bc4fc49fc3b8646adbde9ec691b0f01f353ed1274a2dd799a0f20af36628ab32fd0936dde49f973d182ff21a67b38a66f82274c9e8c98592b98b90f88330be0cfe168cc00caa212308653ee86182c563d5a041c562c84f886799218fd54e7e9353e1b1cbc9be56fa4337820ad06b22c31773b6b4c59c17d5cfc1a", 0xb2}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="f77d2b5dc0f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022d60f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb664", 0xc2}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000000070103000000000000000000000000080001"], 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="f1bf29177000fcdfdf2517"], 0x6b}, 0x1, 0x0, 0x0, 0x44000}, 0x240080a4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140000002e000100000000000000000804001980"], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read(r2, &(0x7f0000000080)=""/38, 0x26) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x98, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfffffffffffffffc}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x8044) 20.925465856s ago: executing program 0 (id=6586): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x6e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a30000000001400078008007c400000000008001240200000000500050002000000050004000000000010000300686173684669702c6d616367592a34eb2bc0f9d837fd57515e8ae0f024eed253d03df040d18ec1034d16c93bdce6d0f4718fcf671668a968174758ac9c72f293f36cb12bca9d56964f101b8ef48e92b1f1d692f73e5caf7b7d7218d7"], 0x5c}}, 0x0) 20.924966876s ago: executing program 1 (id=6587): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000012c0)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050005000a000000050004000000000005000100070000000c00078008001300000000000900020073797a320000000011000300686173683a6970"], 0x58}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x2, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2b6}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}}, 0x20040010) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x3, 0x1, {0x0, 0x0, 0x0, r3, 0x51b4b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r5, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x4e0, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x218, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc2, 0x3, "b8cfbf3f631f20361e3e2372a22c75852bb5914c808b55727aa0579c744cb892f0265c939ab27c6d8339d5c82f178f525f8a0516e18c1c14c10b2c2f0a47277e58d61f5827007ef8c9adfa2cfa5237e4d43ef133e42681b84379908c39e5ca7ff17f57ce82202ceba2cab4a1fb46c7329178b6f199e37670f56b0edf7bcddc5ca770923e299e3f3892178ca57f52847e1a7d43023bfbc9543f73ccd932975d1aeb2eb9cf60c4582f1f6a9dfca662f10b9327a156428d62b482245985603e"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "43f0ed93d61c3b3718a7a422de605cbc800be2645c0a68d85febbfe9af57e383d0"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xf5, 0x3, "e0538a708ec2b5f0b9256778dce11c7b95af3b51a2292cc0fbc4e126171c37f3045fdd35e520313515d3e3911879d355400e8407303095105edec4cb7487d4ac48f5e3cd7ebc35c3b920e2ac559b0218d23509d3bf34f3ded221f84726bdc7051752586c4122c811b6862c6795ae2a9fdcd164cc6aa1e9da1434379047b120127a4016de939abdf09428dd2d5a92de7208c1784420e3d8d2a9bd0f7e25035fefcf30358a10216f224496150566a17c6b874d24e48b8b9c3f8f604f732a5adbc4e881380e940c0d67f45af6a7b859d52edede32c4ed0f4826df72439e0a4d6f626ef02fb933c069ff6b907c219049018c4e"}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa3, 0x3, "ea83b1624a5d12901e57e6dfb83f4558b8814c43c7f3d68262d0372dbf7e5afb909536ee560938d0f39a3a564ae9009ab5fe92a9d451a19b5a7eb90a58375aac5b17ce755a1900f441e16d5c265e7a6e75799116e822a406605838b016872790566abb5062cc6134f1b84ff0f72217594b9d58e69a8579adfec92bc8e875d3f418b58a46d59831b92752a25c5b3991252ce82dcfde255f4e2473e159f3b4cd"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "a82b90d5d452f2f062c40fd815de418ea93c275fc92934d2ac7c737f0fda0839"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x8d, 0x3, "bdd50ddc045dfd5727de052bf97b96707623f0dc7143304a445efcd8809010aa45174b85cf43d44802506cbf72de6f9d29e3cab0cd9ff2da2c355944f9c64799e3836ca69c2bbeda3aafe7feb18db02b22fab7c391abf616a0021d6549fff8a4df85c26c905d9aa5e6c60a90e3b78be171fb68252d5704dbccc80273c0c1bcc996e0a33038ca581f3f"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x8004}, 0x80400d4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8054}, 0x0) 20.881803753s ago: executing program 3 (id=6588): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x24000811) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800470000300000000000069078ac1414bbac1414aa0703e00701fffffffff90000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="1b0000edffffffffffffff000080000000000000a6780aab53ace560d1866295b23b61a5bd16299f442a694092fcffeb91c6639faf3976be4613703a41837b7b39ddc8d8aed858f4d51308ec0b07ef70807f751ad343b469d535e446e4b19e51d8d147c7dca7587ffdbf6641412837c66d833824837ff8bd96b9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="0007000000000000000000000008000000000000732feaf182a2c19d58e64151dcc0049fc99589898987729bc9984474", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r5, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0x12, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000009000000000000000400000018430000faffffff00000000000000007741c0fff0ffffff04a209000300000018110000c25fd2b2e7f22c9aa8113ae706b8ecc1b1936a8dd8df4be54ce0a0666d8cd0af1affd3a3f03c4575b67e1e122e977b10a0b5088d22dc817c4f137be53f918012680debeb1534e9a5b1b8eb569b9b1115a4376bba9f173ac7230610", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018000000fbffffff00000000010000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0xa}}}}]}, 0x44}}, 0x840b0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r9, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6gre0\x00'}]}}]}, 0x48}}, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001580)=""/140, 0x8f}, {&(0x7f0000000540)=""/4113, 0x1011}, {&(0x7f0000000300)=""/104, 0x18}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000000c0)=""/50, 0x32}], 0x5}, 0x0) 20.863606513s ago: executing program 2 (id=6589): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000000)={0x1, 0x8, 0x63, 0x6, @vifc_lcl_ifindex=r3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff4f21, 0x1, 0x0, 0xfffffffc}, 0x8}}]}, {0x4, 0x6, "449a943a7e49ea28466aa563b651ca57fb7da8d7fa17da72d80a6c6073ee28540da3bd50e32f8ee47be3c2187a3513a9979096064d11e5de0e17a80507b8cb8cfa1fce202705063bd3d92afd352b9bae20deb89f6e2e7d284f4bf0d4eae23418c27b694d05a99700c8d8a20d8ad59a8d8f0ecdb9168d428b70"}, {0xffffffec, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) 20.625772752s ago: executing program 4 (id=6590): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x74, r0, 0x1, 0x0, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @loopback, 0x1002}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6}, 0x50) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x6c, 0x0, 0x408, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x98}]}, 0x6c}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r11 = socket(0x15, 0x5, 0x0) getsockopt(r11, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r14, 0x80, 0x7e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_FLAGS_EXT={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r15 = socket(0x1, 0x803, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r17 = gettid() socket$inet(0x2, 0x4, 0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_NET_NS_PID={0x8, 0x13, r17}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x30}}, 0x0) 20.625367214s ago: executing program 0 (id=6591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800c9"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000300)=""/4096}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@cgroup, r1, 0x7}, 0x14) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000001440)={0xac, r3, 0x600, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x410}, 0x802) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) recvmmsg(r5, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201}, 0x18}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000200)={0x3, 0x4}, 0x4) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xd9c0000}}}, 0x24}}, 0x20000000) 20.415852755s ago: executing program 2 (id=6592): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace", 0xb2}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0f020000d7467f1be497f553106dad3ee2e890430c00ad336be643d10430f64ddb815e11746833249bbb6cf1ced5e74b000982ec02b4a56d2d140881c942f0154129c82b079df6b3ba96532b3d4486f5c8a47ae0c765634b60028c9e1fda1f3d053d65e464f0c5aec726fdff10d1e7a4e116175f57e3d893b01eaad8b1c56e6d92351204aeafefa170c42baad57de5240081c1373e52dcbd64d7c28f55b20d4536a47587d03e62d42076604beb792118d4292683b404f1", @ANYRES16=0x0, @ANYBLOB="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"], 0x224}}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 20.295522692s ago: executing program 1 (id=6593): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) (async) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) (async) connect$pptp(r0, &(0x7f0000001400)={0x18, 0x2, {0x3, @rand_addr=0x64010100}}, 0x1e) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) (async, rerun: 32) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000013c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000000100)={0x8c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x24004040) 20.065668963s ago: executing program 2 (id=6594): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0xfffffffd}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r4, 0x11, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 20.065296007s ago: executing program 0 (id=6595): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x800, 0x1000}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) r5 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080008004803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x20044094}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r8) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRESHEX=r2, @ANYRESOCT], 0x1c}}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x50094) recvfrom$x25(r1, 0x0, 0x0, 0x40, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r10 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r10, 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r11, 0x84, 0x16, &(0x7f00000000c0)=ANY=[], 0xa) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r12, 0x84, 0x7d, &(0x7f0000000080), &(0x7f00000000c0)=0x18) 0s ago: executing program 32 (id=6588): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x24000811) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800470000300000000000069078ac1414bbac1414aa0703e00701fffffffff90000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="1b0000edffffffffffffff000080000000000000a6780aab53ace560d1866295b23b61a5bd16299f442a694092fcffeb91c6639faf3976be4613703a41837b7b39ddc8d8aed858f4d51308ec0b07ef70807f751ad343b469d535e446e4b19e51d8d147c7dca7587ffdbf6641412837c66d833824837ff8bd96b9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="0007000000000000000000000008000000000000732feaf182a2c19d58e64151dcc0049fc99589898987729bc9984474", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r5, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0x12, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000009000000000000000400000018430000faffffff00000000000000007741c0fff0ffffff04a209000300000018110000c25fd2b2e7f22c9aa8113ae706b8ecc1b1936a8dd8df4be54ce0a0666d8cd0af1affd3a3f03c4575b67e1e122e977b10a0b5088d22dc817c4f137be53f918012680debeb1534e9a5b1b8eb569b9b1115a4376bba9f173ac7230610", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018000000fbffffff00000000010000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0xa}}}}]}, 0x44}}, 0x840b0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r9, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6gre0\x00'}]}}]}, 0x48}}, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001580)=""/140, 0x8f}, {&(0x7f0000000540)=""/4113, 0x1011}, {&(0x7f0000000300)=""/104, 0x18}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000000c0)=""/50, 0x32}], 0x5}, 0x0) kernel console output (not intermixed with test programs): 521.031764][T24912] bond6: option arp_missed_max: invalid value (0) [ 521.038945][T24912] bond6: option arp_missed_max: allowed values 1 - 255 [ 521.050083][T24912] bond6 (unregistering): Released all slaves [ 521.236209][T24925] syzkaller0: entered promiscuous mode [ 521.241750][T24925] syzkaller0: entered allmulticast mode [ 521.261643][T24925] 0: reclassify loop, rule prio 0, protocol 800 [ 521.360484][T24932] validate_nla: 3 callbacks suppressed [ 521.360498][T24932] netlink: 'syz.2.5455': attribute type 10 has an invalid length. [ 521.668692][T24952] vxcan1 speed is unknown, defaulting to 1000 [ 521.807474][T24957] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:0 [ 522.196533][T24979] tipc: Enabled bearer , priority 0 [ 522.348529][T24987] bond13: Unable to set up delay as MII monitoring is disabled [ 522.366053][T24987] bond13 (unregistering): Released all slaves [ 522.389861][T24973] vxcan1 speed is unknown, defaulting to 1000 [ 523.319146][ T10] tipc: Node number set to 2089749145 [ 523.394463][T25026] bond0: (slave bond0): Error: Device is in use and cannot be enslaved [ 523.822271][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 529.586135][ T1731] block nbd1: Possible stuck request ffff888026ba0000: control (read@0,1024B). Runtime 30 seconds [ 529.598907][ T1731] block nbd1: Possible stuck request ffff888026ba0200: control (read@1024,1024B). Runtime 30 seconds [ 529.610437][ T1731] block nbd1: Possible stuck request ffff888026ba0400: control (read@2048,1024B). Runtime 30 seconds [ 529.623321][ T1731] block nbd1: Possible stuck request ffff888026ba0600: control (read@3072,1024B). Runtime 30 seconds [ 540.462207][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 545.626877][T25044] __nla_validate_parse: 14 callbacks suppressed [ 545.626898][T25044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5487'. [ 545.704540][T25054] netlink: 'syz.1.5487': attribute type 3 has an invalid length. [ 545.854881][T25065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5497'. [ 545.883335][T25065] netlink: 'syz.3.5497': attribute type 4 has an invalid length. [ 545.891700][T25065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5497'. [ 546.012754][T25070] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5498'. [ 546.027344][T25070] netlink: 'syz.3.5498': attribute type 9 has an invalid length. [ 546.038411][T25072] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5499'. [ 546.050521][T25072] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5499'. [ 546.090560][T25070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.270189][T25084] netlink: 'syz.1.5505': attribute type 16 has an invalid length. [ 546.281538][T25084] netlink: 'syz.1.5505': attribute type 17 has an invalid length. [ 546.290819][T25084] bond0: (slave gre0): refused to change device type [ 546.317022][T25082] netlink: 'syz.4.5504': attribute type 1 has an invalid length. [ 546.352818][T25094] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 546.571229][T25103] netlink: 'syz.0.5510': attribute type 21 has an invalid length. [ 546.595186][T25103] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5510'. [ 546.604760][T25103] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5510'. [ 546.654585][T25110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5511'. [ 546.707404][T25110] vlan0: entered allmulticast mode [ 546.713544][T25110] gretap0: entered allmulticast mode [ 546.719251][T25110] bridge0: port 1(vlan0) entered blocking state [ 546.727320][T25110] bridge0: port 1(vlan0) entered disabled state [ 546.736083][T25110] vlan0: entered promiscuous mode [ 546.741287][T25110] gretap0: entered promiscuous mode [ 546.809931][T25121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5515'. [ 547.139334][T25145] netlink: 'syz.4.5522': attribute type 61 has an invalid length. [ 547.176864][T25148] xt_CT: You must specify a L4 protocol and not use inversions on it [ 547.509141][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.540119][T25174] netlink: 'syz.4.5534': attribute type 1 has an invalid length. [ 547.573321][T25174] netlink: 'syz.4.5534': attribute type 1 has an invalid length. [ 547.602381][T25178] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 547.662746][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.185520][T25211] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20002 [ 548.471776][T25228] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 548.496760][T25226] IPv6: NLM_F_CREATE should be specified when creating new route [ 548.676180][T25240] xt_hashlimit: size too large, truncated to 1048576 [ 548.777267][T25246] tc_dump_action: action bad kind [ 548.975031][T25253] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 549.214589][ T5936] IPVS: starting estimator thread 0... [ 549.312515][T25272] IPVS: using max 27 ests per chain, 64800 per kthread [ 549.447606][T25283] 8021q: adding VLAN 0 to HW filter on device bond8 [ 549.515403][T25292] veth0_to_bond: entered allmulticast mode [ 549.651296][T25301] tipc: New replicast peer: 255.255.255.255 [ 549.659293][T25301] tipc: Enabled bearer , priority 10 [ 549.728832][T25303] syzkaller0: left promiscuous mode [ 549.742786][T25303] syzkaller0: left allmulticast mode [ 549.837020][T25311] syzkaller0: entered promiscuous mode [ 549.847393][T25311] syzkaller0: entered allmulticast mode [ 550.350682][T25346] 0: reclassify loop, rule prio 0, protocol 800 [ 550.418648][T25351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.490011][T25355] syzkaller0: entered promiscuous mode [ 550.497537][T25355] syzkaller0: entered allmulticast mode [ 550.555113][T25355] openvswitch: netlink: Flow key attr not present in new flow. [ 550.573297][T25355] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 550.600355][T25368] openvswitch: netlink: Flow actions attr not present in new flow. [ 550.635593][T25358] __nla_validate_parse: 23 callbacks suppressed [ 550.635611][T25358] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5596'. [ 550.818335][T11296] tipc: Node number set to 251442095 [ 550.822629][T25382] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5604'. [ 550.868724][T25382] IPv6: sit2: Disabled Multicast RS [ 551.127895][T25403] sctp: [Deprecated]: syz.0.5611 (pid 25403) Use of int in max_burst socket option deprecated. [ 551.127895][T25403] Use struct sctp_assoc_value instead [ 551.137575][T25404] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5612'. [ 551.194625][T25411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5609'. [ 551.231931][T25405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5609'. [ 551.445905][T25427] validate_nla: 4 callbacks suppressed [ 551.445924][T25427] netlink: 'syz.4.5616': attribute type 1 has an invalid length. [ 551.535550][T25431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5619'. [ 551.708726][T25443] tipc: Enabled bearer , priority 10 [ 551.964230][T25461] sctp: [Deprecated]: syz.0.5628 (pid 25461) Use of int in max_burst socket option. [ 551.964230][T25461] Use struct sctp_assoc_value instead [ 552.051293][T25468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5632'. [ 552.065754][T25468] netlink: 'syz.2.5632': attribute type 10 has an invalid length. [ 552.295330][T25476] syzkaller0: entered promiscuous mode [ 552.300979][T25476] syzkaller0: entered allmulticast mode [ 552.336918][T25482] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 552.384334][T25482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5638'. [ 552.651849][T25508] netlink: 'syz.4.5645': attribute type 1 has an invalid length. [ 552.700853][T25508] vlan1: entered promiscuous mode [ 552.710561][T25508] geneve1: entered promiscuous mode [ 552.717086][T25508] vlan1: entered allmulticast mode [ 552.722843][T25508] geneve1: entered allmulticast mode [ 552.862932][T25513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5648'. [ 552.977210][T25521] bridge0: port 1(veth5) entered blocking state [ 552.984403][T25521] bridge0: port 1(veth5) entered disabled state [ 552.991042][T25521] veth5: entered allmulticast mode [ 553.000272][T25521] veth5: entered promiscuous mode [ 553.009985][T25519] syzkaller0: entered promiscuous mode [ 553.017164][T25519] syzkaller0: entered allmulticast mode [ 553.057329][T25513] bridge0: port 2(veth0_to_bond) entered blocking state [ 553.081901][T25513] bridge0: port 2(veth0_to_bond) entered disabled state [ 553.104187][T25513] veth0_to_bond: entered allmulticast mode [ 553.134830][T25513] veth0_to_bond: entered promiscuous mode [ 553.282507][T25536] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5654'. [ 553.308131][T25540] netlink: 'syz.3.5655': attribute type 1 has an invalid length. [ 553.326265][T25540] netlink: 'syz.3.5655': attribute type 1 has an invalid length. [ 553.343760][T25540] netlink: 'syz.3.5655': attribute type 8 has an invalid length. [ 553.375178][T25537] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 553.397091][T25545] netlink: Unknown conntrack attr (type=2304, max=9) [ 553.553535][T25553] bond13: option miimon: invalid value (18446744073709551585) [ 553.561053][T25553] bond13: option miimon: allowed values 0 - 2147483647 [ 553.570974][T25553] bond13 (unregistering): Released all slaves [ 553.659353][T25556] netlink: 'syz.1.5662': attribute type 5 has an invalid length. [ 553.980242][T25584] netlink: 'syz.0.5668': attribute type 21 has an invalid length. [ 553.989581][T25584] netlink: 'syz.0.5668': attribute type 21 has an invalid length. [ 554.324374][T25610] netlink: 'syz.0.5675': attribute type 12 has an invalid length. [ 554.528509][T25623] gretap0: entered promiscuous mode [ 554.540286][T25623] gretap0: left promiscuous mode [ 554.675439][T25634] xt_addrtype: ipv6 does not support BROADCAST matching [ 554.922444][T25643] : entered promiscuous mode [ 555.245346][T25668] geneve4: entered promiscuous mode [ 555.268891][T25668] geneve4: entered allmulticast mode [ 555.288069][ T5997] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 555.328863][ T5997] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 555.346817][ T5997] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 555.356233][ T5997] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 556.124948][T25719] ipt_REJECT: TCP_RESET invalid for non-tcp [ 556.156475][T25724] ipt_REJECT: TCP_RESET invalid for non-tcp [ 556.235000][T25731] __nla_validate_parse: 20 callbacks suppressed [ 556.235021][T25731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5710'. [ 556.341241][T25735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5712'. [ 556.708579][T25766] sock: sock_timestamping_bind_phc: sock not bind to device [ 556.832733][T25773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.971514][T25784] syzkaller0: entered promiscuous mode [ 556.983035][T25785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5725'. [ 557.002920][T25784] syzkaller0: entered allmulticast mode [ 557.106447][T25796] validate_nla: 8 callbacks suppressed [ 557.106465][T25796] netlink: 'syz.3.5727': attribute type 2 has an invalid length. [ 557.121231][T25785] netlink: 'syz.0.5725': attribute type 21 has an invalid length. [ 557.152885][T25785] netlink: 'syz.0.5725': attribute type 22 has an invalid length. [ 557.160759][T25785] netlink: 'syz.0.5725': attribute type 23 has an invalid length. [ 557.200335][T25785] netlink: 'syz.0.5725': attribute type 25 has an invalid length. [ 557.254162][T25785] netlink: 'syz.0.5725': attribute type 26 has an invalid length. [ 557.280726][T25785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5725'. [ 557.444741][T25812] netlink: 'syz.3.5732': attribute type 16 has an invalid length. [ 557.462281][T25812] netlink: 'syz.3.5732': attribute type 17 has an invalid length. [ 557.489009][T25812] erspan0: left allmulticast mode [ 557.516410][T25812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 557.534152][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 557.545502][ T10] syz_tun: tun_net_xmit 110 [ 557.815149][T25825] tipc: Disabling bearer [ 557.848406][T25837] netlink: 'syz.2.5739': attribute type 27 has an invalid length. [ 557.869721][T25830] nbd2: detected capacity change from 0 to 63 [ 557.879551][T25839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5741'. [ 557.906852][T25834] syzkaller0: entered promiscuous mode [ 557.923800][ T10] syz_tun: tun_net_xmit 110 [ 557.931675][ T5828] block nbd2: Receive control failed (result -32) [ 557.973885][T24889] block nbd2: Dead connection, failed to find a fallback [ 557.981374][T24889] block nbd2: shutting down sockets [ 557.993340][T25834] syzkaller0: entered allmulticast mode [ 558.022789][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 558.073357][T24889] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.109123][T24889] Buffer I/O error on dev nbd2, logical block 0, async page read [ 558.133812][T24889] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.152630][T24889] Buffer I/O error on dev nbd2, logical block 1, async page read [ 558.212477][T24889] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.223389][T24889] Buffer I/O error on dev nbd2, logical block 2, async page read [ 558.231272][T24889] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.247222][T24889] Buffer I/O error on dev nbd2, logical block 3, async page read [ 558.256328][T24889] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.266305][T24889] Buffer I/O error on dev nbd2, logical block 0, async page read [ 558.274920][T24889] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.285510][T24889] Buffer I/O error on dev nbd2, logical block 1, async page read [ 558.296004][T24889] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.307359][T24889] Buffer I/O error on dev nbd2, logical block 2, async page read [ 558.315439][T24889] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.325332][T24889] Buffer I/O error on dev nbd2, logical block 3, async page read [ 558.368945][T24889] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.393952][T24889] Buffer I/O error on dev nbd2, logical block 0, async page read [ 558.413093][T24889] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 558.446157][T24889] Buffer I/O error on dev nbd2, logical block 1, async page read [ 558.467806][T24889] ldm_validate_partition_table(): Disk read failed. [ 558.494106][T24889] Dev nbd2: unable to read RDB block 0 [ 558.522681][T24889] nbd2: unable to read partition table [ 558.565573][T24889] ldm_validate_partition_table(): Disk read failed. [ 558.593189][T24889] Dev nbd2: unable to read RDB block 0 [ 558.599649][T24889] nbd2: unable to read partition table [ 558.669527][T25866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5749'. [ 558.884505][T25875] tipc: Enabled bearer , priority 0 [ 558.929146][T25885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5755'. [ 558.944661][T25885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5755'. [ 558.974354][T25887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5754'. [ 559.229803][T25905] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5760'. [ 559.269935][T25901] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 559.287184][T25901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.372891][T25912] netlink: Conntrack attr has 3 unknown bytes [ 559.688868][ T1731] block nbd1: Possible stuck request ffff888026ba0000: control (read@0,1024B). Runtime 60 seconds [ 559.703184][ T1731] block nbd1: Possible stuck request ffff888026ba0200: control (read@1024,1024B). Runtime 60 seconds [ 559.715244][ T1731] block nbd1: Possible stuck request ffff888026ba0400: control (read@2048,1024B). Runtime 60 seconds [ 559.727870][ T1731] block nbd1: Possible stuck request ffff888026ba0600: control (read@3072,1024B). Runtime 60 seconds [ 560.033957][ T10] tipc: Node number set to 2048348512 [ 560.403403][T25979] netlink: 'syz.2.5780': attribute type 18 has an invalid length. [ 560.434395][T25983] syzkaller0: entered promiscuous mode [ 560.440008][T25983] syzkaller0: entered allmulticast mode [ 560.711329][T26005] bridge0: port 3(batadv1) entered blocking state [ 560.729725][T26005] bridge0: port 3(batadv1) entered disabled state [ 560.737503][T26005] batadv1: entered allmulticast mode [ 560.747669][T26005] batadv1: entered promiscuous mode [ 560.947812][T26026] xt_socket: unknown flags 0x50 [ 560.958306][T26026] openvswitch: netlink: Message has 8 unknown bytes. [ 560.965913][T26026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.202662][T14614] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 561.212206][T14614] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 561.247511][T26041] IPVS: set_ctl: invalid protocol: 215 172.20.20.43:20000 [ 561.399477][T26048] bond13: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 561.416653][T26048] bond13 (unregistering): Released all slaves [ 561.479456][T26049] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 561.705449][T26076] __nla_validate_parse: 12 callbacks suppressed [ 561.705468][T26076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5807'. [ 561.730622][T26082] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5809'. [ 561.773069][T26080] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5809'. [ 561.884996][T26088] syz_tun: entered allmulticast mode [ 561.924706][T26088] dvmrp8: entered allmulticast mode [ 561.936159][T26088] dvmrp8: left allmulticast mode [ 562.080235][T26099] IPv6: addrconf: prefix option has invalid lifetime [ 562.087036][T26099] IPv6: addrconf: prefix option has invalid lifetime [ 562.139101][T26088] tipc: Enabled bearer , priority 11 [ 562.165388][T26086] syz_tun: left allmulticast mode [ 562.328956][T26116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5822'. [ 562.697271][T26144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5827'. [ 562.899867][T26160] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5832'. [ 562.960512][T26160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5832'. [ 562.981866][T26160] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5832'. [ 563.119190][T26167] validate_nla: 2 callbacks suppressed [ 563.119208][T26167] netlink: 'syz.3.5835': attribute type 1 has an invalid length. [ 563.149332][T26167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5835'. [ 563.173930][T26171] x_tables: duplicate underflow at hook 1 [ 563.191108][T26171] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20000 [ 563.244818][T26173] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5838'. [ 563.549126][T26194] netlink: 'syz.0.5844': attribute type 1 has an invalid length. [ 563.629736][T26194] 8021q: adding VLAN 0 to HW filter on device bond4 [ 563.768725][T26204] netlink: 'syz.2.5847': attribute type 9 has an invalid length. [ 563.801453][T26204] netlink: 'syz.2.5847': attribute type 11 has an invalid length. [ 563.837681][T26204] netlink: 'syz.2.5847': attribute type 12 has an invalid length. [ 563.873797][T26210] xt_CT: You must specify a L4 protocol and not use inversions on it [ 564.014340][T26223] xt_cgroup: invalid path, errno=-2 [ 564.042423][ T5989] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.052668][ T69] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.061892][ T69] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.106541][ T69] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.844150][T26268] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 565.152737][T26286] netlink: 'syz.2.5876': attribute type 24 has an invalid length. [ 565.426481][T26301] syzkaller1: entered promiscuous mode [ 565.453020][T26301] syzkaller1: entered allmulticast mode [ 565.542193][T26311] FAULT_INJECTION: forcing a failure. [ 565.542193][T26311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.574265][T26311] CPU: 1 UID: 0 PID: 26311 Comm: syz.0.5886 Not tainted syzkaller #0 PREEMPT(full) [ 565.574297][T26311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 565.574310][T26311] Call Trace: [ 565.574319][T26311] [ 565.574328][T26311] dump_stack_lvl+0xe8/0x150 [ 565.574363][T26311] should_fail_ex+0x412/0x560 [ 565.574398][T26311] _copy_from_user+0x2d/0xb0 [ 565.574422][T26311] alg_setkey+0xb8/0x190 [ 565.574456][T26311] alg_setsockopt+0x3da/0x4a0 [ 565.574486][T26311] ? __pfx_alg_setsockopt+0x10/0x10 [ 565.574518][T26311] do_sock_setsockopt+0x17c/0x1b0 [ 565.574559][T26311] __x64_sys_setsockopt+0x13d/0x1b0 [ 565.574590][T26311] do_syscall_64+0x14d/0xf80 [ 565.574618][T26311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.574637][T26311] ? trace_irq_disable+0x37/0x100 [ 565.574662][T26311] ? clear_bhb_loop+0x40/0x90 [ 565.574687][T26311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.574707][T26311] RIP: 0033:0x7f889119c629 [ 565.574725][T26311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.574743][T26311] RSP: 002b:00007f8892008028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 565.574765][T26311] RAX: ffffffffffffffda RBX: 00007f8891415fa0 RCX: 00007f889119c629 [ 565.574781][T26311] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 565.574793][T26311] RBP: 00007f8892008090 R08: 0000000000000021 R09: 0000000000000000 [ 565.574806][T26311] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.574819][T26311] R13: 00007f8891416038 R14: 00007f8891415fa0 R15: 00007ffcb11029b8 [ 565.574854][T26311] [ 565.825018][T26308] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.076485][T26319] team0: Port device team_slave_0 removed [ 566.098747][T26326] netlink: 'syz.3.5888': attribute type 14 has an invalid length. [ 566.156949][T26308] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.324307][T26326] netlink: 'syz.3.5888': attribute type 14 has an invalid length. [ 566.329597][T26350] netlink: 'syz.2.5891': attribute type 1 has an invalid length. [ 566.357501][T26331] syzkaller1: entered promiscuous mode [ 566.402136][T26331] syzkaller1: entered allmulticast mode [ 566.451780][T26308] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.615556][T26308] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.704071][T26374] bpq0: entered promiscuous mode [ 566.873348][ T69] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.980640][ T69] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.991038][ T69] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.044453][T20857] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.178168][T26389] netlink: 'syz.0.5899': attribute type 9 has an invalid length. [ 567.266426][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 567.277180][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 567.286621][T26391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 567.295545][T26391] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 567.304173][T26391] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 567.333230][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 567.354881][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 567.366007][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 567.384941][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 567.396288][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 567.439922][T26401] __nla_validate_parse: 17 callbacks suppressed [ 567.439960][T26401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5901'. [ 567.577085][T26390] vxcan1 speed is unknown, defaulting to 1000 [ 567.989607][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.000148][ T1299] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 568.011211][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 568.124865][T26431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5906'. [ 568.165722][T26431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5906'. [ 568.181881][T26433] xt_hashlimit: size too large, truncated to 1048576 [ 568.468939][T26444] IPVS: Unknown mcast interface: vcan0 [ 568.473157][T26433] xt_hashlimit: size too large, truncated to 1048576 [ 568.669531][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5913'. [ 568.934988][T26433] xt_hashlimit: size too large, truncated to 1048576 [ 569.159655][T26479] netlink: 'syz.0.5920': attribute type 1 has an invalid length. [ 569.296525][T26482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5921'. [ 569.422137][T26391] Bluetooth: hci3: command tx timeout [ 569.544386][T26390] chnl_net:caif_netlink_parms(): no params data found [ 569.574613][T26500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5926'. [ 569.790340][T26390] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.806427][T26390] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.815396][T26390] bridge_slave_0: entered allmulticast mode [ 569.823612][T26390] bridge_slave_0: entered promiscuous mode [ 569.831464][T26515] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5931'. [ 569.843853][T26515] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5931'. [ 569.885694][T26515] netlink: 22 bytes leftover after parsing attributes in process `syz.2.5931'. [ 569.914358][T26390] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.942562][T26390] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.949885][T26390] bridge_slave_1: entered allmulticast mode [ 569.980402][T26390] bridge_slave_1: entered promiscuous mode [ 570.034834][T26521] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5934'. [ 570.091568][T26390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.128045][T26390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.220469][T26390] team0: Port device team_slave_0 added [ 570.235437][T26390] team0: Port device team_slave_1 added [ 570.291371][T26390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.334239][T26390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.408676][T26390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.456618][T26536] syzkaller1: entered promiscuous mode [ 570.470895][T26536] syzkaller1: entered allmulticast mode [ 570.488263][T26551] smc: net device team0 applied user defined pnetid SYZ2 [ 570.497412][T26390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.508549][T26390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.549787][T26390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.721952][T26559] nbd: socks must be embedded in a SOCK_ITEM attr [ 570.758027][T26390] hsr_slave_0: entered promiscuous mode [ 570.764166][ T5189] udevd[5189]: worker [23672] /devices/virtual/block/nbd1 is taking a long time [ 570.779087][T26390] hsr_slave_1: entered promiscuous mode [ 571.062723][T26569] sit2: entered promiscuous mode [ 571.073997][T26569] sit2: entered allmulticast mode [ 571.251448][T26390] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.276542][T26572] vxcan1 speed is unknown, defaulting to 1000 [ 571.359388][T26390] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.475751][T26390] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.510419][T26391] Bluetooth: hci3: command tx timeout [ 571.580644][T26390] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.685637][T26595] netlink: 'syz.1.5955': attribute type 25 has an invalid length. [ 572.024940][T26390] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 572.048334][T26574] vxcan1 speed is unknown, defaulting to 1000 [ 572.058258][T26390] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 572.098712][T26390] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 572.114509][T26390] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 572.335927][T26628] netlink: 'syz.1.5962': attribute type 10 has an invalid length. [ 572.346514][T26627] netlink: 'syz.1.5962': attribute type 10 has an invalid length. [ 572.357296][T26627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.396560][T26628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.490325][T26390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.589508][T26390] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.654685][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.661899][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.721582][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.728824][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.930141][T26650] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 572.965730][T26650] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 573.029103][T26390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 573.104408][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 573.217522][T26666] __nla_validate_parse: 12 callbacks suppressed [ 573.217542][T26666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5972'. [ 573.584835][T26391] Bluetooth: hci3: command tx timeout [ 573.663760][T26693] veth0: entered promiscuous mode [ 573.670624][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5976'. [ 573.822140][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 573.830230][ C1] lec:lec_tx_timeout: lec0 [ 573.936557][T26390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.044202][T26705] geneve4: entered promiscuous mode [ 574.078976][ T6001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 38157 - 0 [ 574.181646][ T6001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 38157 - 0 [ 574.318558][T26715] netlink: 'syz.0.5982': attribute type 1 has an invalid length. [ 574.409322][T26705] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.498178][ T6001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 38157 - 0 [ 574.788801][ T9574] lec:lec_start_xmit: lec0:No lecd attached [ 574.813061][T26390] veth0_vlan: entered promiscuous mode [ 574.843393][T26390] veth1_vlan: entered promiscuous mode [ 574.949650][T26390] veth0_macvtap: entered promiscuous mode [ 574.986169][T26390] veth1_macvtap: entered promiscuous mode [ 575.030099][T26390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.085345][T26390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.133554][T26740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.180281][T14614] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.222899][T14614] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.248047][T14614] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.287109][T14614] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.543420][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.560701][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.668125][T26391] Bluetooth: hci3: command tx timeout [ 575.699158][T26756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5992'. [ 575.720247][T26757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5992'. [ 575.754656][T20857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.782132][T20857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.915147][T26764] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5993'. [ 575.977986][T26771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5994'. [ 576.029386][T26775] netlink: 'syz.4.5994': attribute type 4 has an invalid length. [ 576.051910][T26775] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5994'. [ 576.106779][T26775] `: renamed from bond0 (while UP) [ 576.119371][T26780] netlink: 'syz.2.5997': attribute type 10 has an invalid length. [ 576.187084][T26705] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.234125][T26705] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 38157 - 0 [ 576.291013][T26780] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 576.408593][T26705] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.429415][T26705] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 38157 - 0 [ 576.465589][T26801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.621937][T26705] batman_adv: batadv0: Removing interface: netdevsim0 [ 576.645690][T26705] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.691043][T26705] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 38157 - 0 [ 576.743048][T26810] netlink: 'syz.0.6004': attribute type 1 has an invalid length. [ 576.753131][T26810] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6004'. [ 576.955167][ T5989] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.977101][ T5989] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 38157 - 0 [ 576.993640][T26815] IPVS: Scheduler module ip_vs_sip not found [ 577.009938][ T5989] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.026265][ T5989] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 38157 - 0 [ 577.084304][T26826] vlan0 (unregistering): left promiscuous mode [ 577.090633][T26826] gretap0: left promiscuous mode [ 577.118747][T26826] bridge0: port 1(vlan0) entered disabled state [ 577.192179][ T5989] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.201769][ T5989] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 38157 - 0 [ 577.331788][T26829] vlan3: entered allmulticast mode [ 577.347287][T26829] geneve1: entered allmulticast mode [ 577.370380][T26839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.398782][ T69] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.407913][ T69] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 38157 - 0 [ 577.425679][T26839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6012'. [ 577.435586][T26839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.531083][T26839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.622837][T26850] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 577.959272][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 577.969397][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 577.978153][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 577.988594][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 578.000519][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 578.122506][T26867] vxcan1 speed is unknown, defaulting to 1000 [ 578.453103][T26884] x_tables: duplicate underflow at hook 2 [ 578.791097][T26900] sock: sock_timestamping_bind_phc: sock not bind to device [ 578.962390][T26912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6034'. [ 578.988115][T26914] gre1: entered promiscuous mode [ 579.024396][T26914] gre1: entered allmulticast mode [ 579.308751][T26926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6037'. [ 579.684671][T26945] syzkaller0: entered promiscuous mode [ 579.690348][T26945] syzkaller0: entered allmulticast mode [ 579.822009][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 579.830165][ C1] lec:lec_tx_timeout: lec0 [ 579.844359][T26867] chnl_net:caif_netlink_parms(): no params data found [ 580.065292][ T5827] Bluetooth: hci1: command tx timeout [ 580.178144][T26867] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.186968][T26867] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.194705][T26867] bridge_slave_0: entered allmulticast mode [ 580.202885][T26867] bridge_slave_0: entered promiscuous mode [ 580.248917][T26867] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.322443][T26867] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.352826][T26867] bridge_slave_1: entered allmulticast mode [ 580.403374][T26867] bridge_slave_1: entered promiscuous mode [ 580.420585][T26992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6050'. [ 580.519234][T27003] netlink: 208 bytes leftover after parsing attributes in process `syz.3.6054'. [ 580.534806][T26867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.563198][T26867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.617185][T27003] bridge0: entered allmulticast mode [ 580.682102][T26867] team0: Port device team_slave_0 added [ 580.688841][T27015] syzkaller0: entered promiscuous mode [ 580.694625][T27015] syzkaller0: entered allmulticast mode [ 580.720470][T26867] team0: Port device team_slave_1 added [ 580.811797][T26867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.820053][T26867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.846681][T26867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.904252][T26867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.911273][T26867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.975098][T26867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.060065][T27023] netlink: 'syz.3.6058': attribute type 11 has an invalid length. [ 581.136318][T26867] hsr_slave_0: entered promiscuous mode [ 581.167444][T26867] hsr_slave_1: entered promiscuous mode [ 581.203120][T26867] debugfs: 'hsr0' already exists in 'hsr' [ 581.252130][T26867] Cannot create hsr debugfs directory [ 581.544915][T27048] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.557998][T27048] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.574418][T27048] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 581.612489][T27048] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 581.649216][T27060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6065'. [ 581.675993][T27060] openvswitch: netlink: IP tunnel dst address not specified [ 581.703750][T27060] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6065'. [ 581.779456][T27071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6065'. [ 581.868505][T27048] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.919956][T27048] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.933595][T27048] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 581.950717][T27080] netlink: 'syz.4.6068': attribute type 2 has an invalid length. [ 581.963484][T27048] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 582.145666][ T5827] Bluetooth: hci1: command tx timeout [ 582.217547][T27090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6069'. [ 582.314978][T27095] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6072'. [ 582.405101][T27048] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.416050][T27048] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.428730][T27048] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 582.436947][T27099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6073'. [ 582.441649][T27048] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 582.485184][T27099] gtp0: entered promiscuous mode [ 582.501035][T27099] gtp0: entered allmulticast mode [ 582.539808][T27048] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.573890][T27048] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.584967][T27048] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 582.597753][T27048] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 582.708658][T26867] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.728953][T26867] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 38157 - 0 [ 582.877220][T26867] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.897534][T26867] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 38157 - 0 [ 582.909392][T27119] netlink: 'syz.3.6079': attribute type 83 has an invalid length. [ 582.925076][ T5993] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.934830][ T5993] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 582.945062][ T5993] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 582.972555][ T5993] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 582.993103][T26867] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.010296][T26867] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 38157 - 0 [ 583.050151][T14614] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.061721][T14614] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 583.083655][T14614] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 583.103092][T14614] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 583.124497][T26867] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.143832][T26867] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 38157 - 0 [ 583.177728][ T5997] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.222182][ T5997] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 583.230731][ T5997] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 583.246974][ T5997] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 583.324821][ T5997] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.336311][ T5997] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 583.370900][ T5997] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 583.379879][ T5997] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 583.540877][T27142] netlink: 'syz.2.6084': attribute type 1 has an invalid length. [ 583.556588][T26867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 583.597349][T26867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 583.609660][T26867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 583.650988][T26867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 583.704812][T27150] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 583.740833][T27150] bond6: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 583.766623][T27150] bond6: (slave vcan0): making interface the new active one [ 583.779134][T27150] bond6: (slave vcan0): Enslaving as an active interface with an up link [ 583.947447][T26867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.986166][T26867] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.007683][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.014908][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.069548][T27172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.100590][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.107826][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.145980][T27172] __nla_validate_parse: 2 callbacks suppressed [ 584.145999][T27172] netlink: 404 bytes leftover after parsing attributes in process `syz.3.6095'. [ 584.165061][T27172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6095'. [ 584.174677][T27172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6095'. [ 584.187628][T27172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6095'. [ 584.223767][ T5827] Bluetooth: hci1: command tx timeout [ 584.286327][T27186] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 584.294172][T27186] team0: Device macvlan2 is already an upper device of the team interface [ 584.514075][T27201] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6101'. [ 584.526350][T27201] netlink: 'syz.4.6101': attribute type 1 has an invalid length. [ 584.544409][T27201] erspan2: entered allmulticast mode [ 584.659541][T26867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.736860][T26867] veth0_vlan: entered promiscuous mode [ 584.750085][T26867] veth1_vlan: entered promiscuous mode [ 584.781944][T26867] veth0_macvtap: entered promiscuous mode [ 584.796043][T26867] veth1_macvtap: entered promiscuous mode [ 584.818122][T26867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.835960][T26867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.850390][T14614] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.864366][T14614] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.875908][T14614] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.887135][T14614] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.304088][ T5827] Bluetooth: hci1: command tx timeout [ 587.129257][T27178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.318503][ T5993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.354898][ T5993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.395943][T27231] netlink: 516 bytes leftover after parsing attributes in process `syz.4.6105'. [ 587.415758][ T6001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.425326][ T6001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.436266][T27231] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6105'. [ 587.618439][T27238] syzkaller0: entered promiscuous mode [ 587.644006][T27238] syzkaller0: entered allmulticast mode [ 587.653970][T27246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6108'. [ 588.006879][T27256] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.6113'. [ 588.208373][T26391] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 588.228218][T26391] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 588.238330][T26391] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 588.246584][T26391] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 588.257253][T26391] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 588.395008][T27265] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6115'. [ 588.411721][T27260] vxcan1 speed is unknown, defaulting to 1000 [ 588.688508][T27284] tipc: Enabled bearer , priority 0 [ 588.946018][T27279] tipc: Disabling bearer [ 589.004311][T27304] Bluetooth: MGMT ver 1.23 [ 589.218528][T27315] netlink: 'syz.2.6128': attribute type 1 has an invalid length. [ 589.430787][T27325] __nla_validate_parse: 2 callbacks suppressed [ 589.430806][T27325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6132'. [ 589.455772][T27325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6132'. [ 589.476109][T27327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6132'. [ 589.482056][T27325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6132'. [ 589.516297][T27325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6132'. [ 589.545137][T27325] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6132'. [ 589.579983][T27328] netem: change failed [ 589.745722][ T1731] block nbd1: Possible stuck request ffff888026ba0000: control (read@0,1024B). Runtime 90 seconds [ 589.757231][ T1731] block nbd1: Possible stuck request ffff888026ba0200: control (read@1024,1024B). Runtime 90 seconds [ 589.770337][ T1731] block nbd1: Possible stuck request ffff888026ba0400: control (read@2048,1024B). Runtime 90 seconds [ 589.785057][ T1731] block nbd1: Possible stuck request ffff888026ba0600: control (read@3072,1024B). Runtime 90 seconds [ 589.914661][T27344] x_tables: duplicate underflow at hook 2 [ 589.974052][T27260] chnl_net:caif_netlink_parms(): no params data found [ 590.115367][T27260] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.123692][T27260] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.130947][T27260] bridge_slave_0: entered allmulticast mode [ 590.141779][T27260] bridge_slave_0: entered promiscuous mode [ 590.152737][T27260] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.160013][T27260] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.169453][T27260] bridge_slave_1: entered allmulticast mode [ 590.178303][T27260] bridge_slave_1: entered promiscuous mode [ 590.220519][T27260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.241173][T27260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.288685][T27260] team0: Port device team_slave_0 added [ 590.299161][T27260] team0: Port device team_slave_1 added [ 590.304971][T26391] Bluetooth: hci4: command tx timeout [ 590.378300][T27260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.398029][T27260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.438097][T27260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.466325][T27370] netlink: 'syz.4.6143': attribute type 1 has an invalid length. [ 590.475413][T27370] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6143'. [ 590.487823][T27260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.499672][T27260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.527922][T27260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.686939][T27374] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6145'. [ 590.729486][T27260] hsr_slave_0: entered promiscuous mode [ 590.736873][T27260] hsr_slave_1: entered promiscuous mode [ 590.790313][T27260] debugfs: 'hsr0' already exists in 'hsr' [ 590.813524][T27260] Cannot create hsr debugfs directory [ 590.861692][T27379] netlink: 'syz.1.6147': attribute type 1 has an invalid length. [ 590.938321][T27385] netlink: 'syz.2.6150': attribute type 1 has an invalid length. [ 591.010323][T27385] bond7: entered promiscuous mode [ 591.016570][T27385] 8021q: adding VLAN 0 to HW filter on device bond7 [ 591.085758][T27385] bond7: (slave bridge0): making interface the new active one [ 591.096673][T27385] bridge0: entered promiscuous mode [ 591.103258][T27385] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 591.230808][T27260] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.263300][T27260] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 591.285292][T27260] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 591.299337][T27260] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 591.326862][T27401] netlink: 276 bytes leftover after parsing attributes in process `syz.2.6154'. [ 591.347065][T27403] netlink: 276 bytes leftover after parsing attributes in process `syz.2.6154'. [ 591.381128][T27260] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.406797][T27260] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 591.435567][T27260] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 591.461212][T27260] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 591.477437][T27406] xt_CT: No such helper "pptp" [ 591.520523][T27408] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 591.535655][T27408] bond1: entered promiscuous mode [ 591.540742][T27408] bond1: entered allmulticast mode [ 591.548741][T27408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 591.565486][T27260] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.584534][T27260] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 591.595103][T27260] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 591.605885][T27260] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 591.625819][T27410] syzkaller0: entered promiscuous mode [ 591.631358][T27410] syzkaller0: entered allmulticast mode [ 591.701679][T27260] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.716218][T27260] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 591.727586][T27260] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 591.738423][T27260] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 592.038640][T27436] netlink: 'syz.4.6163': attribute type 1 has an invalid length. [ 592.075564][T27436] xt_hashlimit: size too large, truncated to 1048576 [ 592.107547][T27260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 592.121834][T27260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 592.211077][T27260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 592.313877][T27447] netlink: 'syz.2.6168': attribute type 7 has an invalid length. [ 592.387047][T26391] Bluetooth: hci4: command tx timeout [ 592.486008][T27260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 592.624464][T27453] vxcan1 speed is unknown, defaulting to 1000 [ 592.863456][T27260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.911250][T27260] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.938441][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.945683][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.995622][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.002834][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.483883][T27491] bond0: entered promiscuous mode [ 593.491746][T27491] bond0: entered allmulticast mode [ 593.498097][T27491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.574968][T27260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.828354][T27260] veth0_vlan: entered promiscuous mode [ 593.934842][T27260] veth1_vlan: entered promiscuous mode [ 594.036909][T27260] veth0_macvtap: entered promiscuous mode [ 594.078965][T27260] veth1_macvtap: entered promiscuous mode [ 594.211687][T27260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.237591][T27260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.290185][ T5993] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.321163][ T5993] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.361681][ T5993] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.428738][ T5993] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.466268][T26391] Bluetooth: hci4: command tx timeout [ 594.594296][T27545] __nla_validate_parse: 1 callbacks suppressed [ 594.594315][T27545] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6189'. [ 594.636262][T27545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6189'. [ 594.758891][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.770799][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.913135][ T5989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.929783][ T5989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.157107][T27561] netlink: 'syz.3.6193': attribute type 21 has an invalid length. [ 595.166475][T27561] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6193'. [ 595.295002][T27569] ip6t_srh: unknown srh match flags 4000 [ 595.563880][T27579] syzkaller0: entered promiscuous mode [ 595.584912][T27579] syzkaller0: entered allmulticast mode [ 595.599938][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 595.614079][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 595.623652][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 595.633792][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 595.660546][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 595.816275][T27588] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6204'. [ 595.851822][T27588] 0·: renamed from hsr_slave_1 (while UP) [ 595.865526][T27588] 0·: entered allmulticast mode [ 595.884464][T27588] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 595.916048][T27593] xt_CT: You must specify a L4 protocol and not use inversions on it [ 595.945318][T27581] vxcan1 speed is unknown, defaulting to 1000 [ 595.973642][T27590] tipc: Started in network mode [ 595.985586][T27590] tipc: Node identity 3604359a6218, cluster identity 4711 [ 596.012959][T27590] tipc: Enabled bearer , priority 0 [ 596.116515][T27602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6208'. [ 596.135833][T27590] syzkaller0: entered promiscuous mode [ 596.141431][T27590] syzkaller0: entered allmulticast mode [ 596.151215][T27590] tipc: Resetting bearer [ 596.222441][T27595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6203'. [ 596.239804][T27595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6203'. [ 596.263746][T27595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6203'. [ 596.300341][T27589] tipc: Resetting bearer [ 596.546610][T26391] Bluetooth: hci4: command tx timeout [ 597.747085][T26391] Bluetooth: hci2: command tx timeout [ 597.959784][T27589] tipc: Disabling bearer [ 597.988828][T11296] tipc: Node number set to 1411134874 [ 598.438569][T27650] openvswitch: netlink: IPv4 tun info is not correct [ 598.448432][T27648] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6221'. [ 598.520248][T27652] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6222'. [ 598.814857][T20857] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.956923][T20857] bridge_slave_0: left allmulticast mode [ 598.963009][T20857] bridge_slave_0: left promiscuous mode [ 598.968843][T20857] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.596745][T20857] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 599.824996][T26391] Bluetooth: hci2: command tx timeout [ 600.009684][T20857] bond2 (unregistering): (slave bridge5): Releasing backup interface [ 600.024258][T20857] bridge5 (unregistering): left promiscuous mode [ 600.330126][T20857] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.340703][T20857] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.352549][T20857] ` (unregistering): Released all slaves [ 600.367751][T20857] bond1 (unregistering): Released all slaves [ 600.387723][T20857] bond2 (unregistering): Released all slaves [ 600.409671][T20857] bond3 (unregistering): Released all slaves [ 600.432968][T20857] bond0 (unregistering): Released all slaves [ 600.457217][T20857] bond4 (unregistering): Released all slaves [ 600.487135][T20857] bond5 (unregistering): (slave veth11): Releasing active interface [ 600.498540][T20857] bond5 (unregistering): Released all slaves [ 600.515484][T20857] bond6 (unregistering): Released all slaves [ 600.559277][T27698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.712061][T20857] tipc: Disabling bearer [ 600.727220][T20857] tipc: Left network mode [ 600.917040][T27581] chnl_net:caif_netlink_parms(): no params data found [ 601.066930][T27581] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.083312][T27581] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.101504][T27581] bridge_slave_0: entered allmulticast mode [ 601.123910][T27581] bridge_slave_0: entered promiscuous mode [ 601.134482][T27581] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.141993][T27581] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.149374][T27581] bridge_slave_1: entered allmulticast mode [ 601.158868][T27581] bridge_slave_1: entered promiscuous mode [ 601.344728][T27581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.458920][T27581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.548713][T27581] team0: Port device team_slave_0 added [ 601.591773][T27581] team0: Port device team_slave_1 added [ 601.656180][T27754] __nla_validate_parse: 1 callbacks suppressed [ 601.656199][T27754] netlink: 175008 bytes leftover after parsing attributes in process `syz.4.6244'. [ 601.672627][T27749] sctp: [Deprecated]: syz.3.6240 (pid 27749) Use of int in max_burst socket option. [ 601.672627][T27749] Use struct sctp_assoc_value instead [ 601.674661][T27752] netlink: 175008 bytes leftover after parsing attributes in process `syz.4.6244'. [ 601.909970][T26391] Bluetooth: hci2: command tx timeout [ 601.947464][T27581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.962153][T27581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.022416][T27581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.059262][T27581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.088542][T27581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.194638][T27581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.248479][T27771] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 602.428607][T27777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6250'. [ 602.476408][T27581] hsr_slave_0: entered promiscuous mode [ 602.494710][T27581] hsr_slave_1: entered promiscuous mode [ 602.501531][T27581] debugfs: 'hsr0' already exists in 'hsr' [ 602.524579][T27581] Cannot create hsr debugfs directory [ 602.547915][T27789] netlink: 'syz.4.6253': attribute type 33 has an invalid length. [ 602.557571][T20857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.577274][T27789] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6253'. [ 602.645632][T27791] netlink: 54 bytes leftover after parsing attributes in process `syz.1.6254'. [ 602.658623][T27791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6254'. [ 603.120912][T27798] netlink: 'syz.1.6257': attribute type 72 has an invalid length. [ 603.134940][T27799] netlink: 'syz.4.6256': attribute type 7 has an invalid length. [ 603.145962][T27799] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6256'. [ 603.440096][T20857] IPVS: stop unused estimator thread 0... [ 603.455870][T27581] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.570151][T27581] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.657672][T27581] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.729428][T27581] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.749624][T27826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6264'. [ 603.783089][T27826] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 603.793935][T27826] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 603.810110][T27826] team0: Failed to send options change via netlink (err -105) [ 603.820115][T27826] team0: Port device batadv1 added [ 603.982217][T26391] Bluetooth: hci2: command tx timeout [ 604.025604][T27581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 604.047025][T27581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 604.081624][T27581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 604.147780][T27581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 604.198669][T27837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 604.242806][T27840] netlink: 'syz.4.6269': attribute type 72 has an invalid length. [ 604.367086][T27855] netlink: 'syz.4.6272': attribute type 27 has an invalid length. [ 604.449032][T27859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6272'. [ 604.499858][T27581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.539613][T27859] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 604.601715][T27864] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 604.680218][T27859] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 604.717289][T27859] gretap3: entered promiscuous mode [ 604.727409][T27859] gretap3: entered allmulticast mode [ 604.773286][T27868] bpq0: left promiscuous mode [ 604.790445][T27581] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.815501][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.822725][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.868030][T20871] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.875235][T20871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.024656][T27882] netlink: 'syz.4.6281': attribute type 72 has an invalid length. [ 605.214172][T27879] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.282796][T27899] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 605.296467][T27901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6283'. [ 605.411191][T27879] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.581451][T27879] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.602990][T27908] syzkaller0: entered promiscuous mode [ 605.608519][T27908] syzkaller0: entered allmulticast mode [ 605.700727][T27916] netlink: 'syz.1.6288': attribute type 1 has an invalid length. [ 605.715440][T27879] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.808538][T27581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.914728][T27581] veth0_vlan: entered promiscuous mode [ 605.963054][T20871] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.987722][T27581] veth1_vlan: entered promiscuous mode [ 606.019158][ T5993] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.063294][T20871] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.097227][T20871] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.148288][T27581] veth0_macvtap: entered promiscuous mode [ 606.173389][T27581] veth1_macvtap: entered promiscuous mode [ 606.221319][T27581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.253938][T27939] netlink: 'syz.0.6296': attribute type 1 has an invalid length. [ 606.261816][T27939] netlink: 'syz.0.6296': attribute type 2 has an invalid length. [ 606.270168][T27939] netlink: 'syz.0.6296': attribute type 2 has an invalid length. [ 606.311415][T27581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.331438][T27939] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.387975][ T5993] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.408065][T27939] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.449866][ T5993] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.469299][ T5993] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.496355][ T5993] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.520353][T27939] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.571071][T27949] veth19: entered allmulticast mode [ 606.597976][T27939] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.777720][T27963] __nla_validate_parse: 7 callbacks suppressed [ 606.777737][T27963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6305'. [ 606.818392][T20871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.836835][T20871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.917076][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.938504][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.091794][ T30] audit: type=1800 audit(1771430172.818:7): pid=27970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6308" name="memory.events" dev="tmpfs" ino=403 res=0 errno=0 [ 607.407018][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 607.419539][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 607.433354][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 607.469375][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 607.482742][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 607.608349][T27994] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 607.653502][T27985] vxcan1 speed is unknown, defaulting to 1000 [ 607.808444][T28004] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.6321'. [ 608.400039][T28029] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 608.798084][T28051] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6336'. [ 608.809836][T28051] nbd: socks must be embedded in a SOCK_ITEM attr [ 608.881024][T28054] geneve2: entered promiscuous mode [ 608.886697][T28054] geneve2: entered allmulticast mode [ 608.899637][ T5993] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 608.912536][ T5993] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 608.921495][ T5993] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 608.932122][ T5993] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 609.168555][T27985] chnl_net:caif_netlink_parms(): no params data found [ 609.246674][T28071] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6342'. [ 609.307178][T27985] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.314645][T27985] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.322236][T27985] bridge_slave_0: entered allmulticast mode [ 609.330104][T27985] bridge_slave_0: entered promiscuous mode [ 609.347408][T28071] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6342'. [ 609.356657][T28071] netem: invalid attributes len -24 [ 609.362338][T28071] netem: change failed [ 609.375112][T27985] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.383741][T27985] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.394011][T27985] bridge_slave_1: entered allmulticast mode [ 609.402553][T27985] bridge_slave_1: entered promiscuous mode [ 609.451868][T27985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.466101][T27985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.547969][T27985] team0: Port device team_slave_0 added [ 609.564986][T27985] team0: Port device team_slave_1 added [ 609.590142][ T5827] Bluetooth: hci5: command tx timeout [ 609.646547][ T5997] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.719122][ T5989] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.738935][T27985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.752971][T27985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.779786][T27985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.837324][T27985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.851091][T28095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6350'. [ 609.863370][T27985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.925045][T27985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.937119][ T5993] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.026885][ T5993] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.140903][T27985] hsr_slave_0: entered promiscuous mode [ 610.158446][T27985] hsr_slave_1: entered promiscuous mode [ 610.166005][T27985] debugfs: 'hsr0' already exists in 'hsr' [ 610.171853][T27985] Cannot create hsr debugfs directory [ 610.335434][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6354'. [ 610.505285][T27985] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.617321][T27985] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.668848][T28133] validate_nla: 1 callbacks suppressed [ 610.668870][T28133] netlink: 'syz.1.6361': attribute type 3 has an invalid length. [ 610.714770][T27985] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.806647][T27985] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.889241][T28141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6365'. [ 610.899323][T28141] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6365'. [ 610.908740][T28141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6365'. [ 611.036440][T28144] sctp: [Deprecated]: syz.3.6363 (pid 28144) Use of int in max_burst socket option. [ 611.036440][T28144] Use struct sctp_assoc_value instead [ 611.056014][T27985] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 611.080541][T27985] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 611.105433][T27985] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 611.127769][T27985] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 611.217415][T28157] xt_l2tp: invalid flags combination: 0 [ 611.385033][T27985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.415374][T28163] tipc: Enabling of bearer rejected, failed to enable media [ 611.444406][T27985] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.474742][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.482016][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.501431][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.508672][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.663834][ T5827] Bluetooth: hci5: command tx timeout [ 611.754803][ T5925] IPVS: starting estimator thread 0... [ 611.776926][T28178] netlink: 'syz.3.6376': attribute type 11 has an invalid length. [ 611.796536][T28178] __nla_validate_parse: 3 callbacks suppressed [ 611.796553][T28178] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6376'. [ 611.841518][T28182] netlink: 'syz.2.6377': attribute type 2 has an invalid length. [ 611.852187][T28179] IPVS: using max 29 ests per chain, 69600 per kthread [ 611.892778][T28182] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6377'. [ 611.953165][T28184] bond1 (unregistering): Released all slaves [ 611.984367][T28189] bridge0: port 3(veth0_to_bridge) entered blocking state [ 611.996512][T28189] bridge0: port 3(veth0_to_bridge) entered disabled state [ 612.009226][T28189] veth0_to_bridge: entered allmulticast mode [ 612.030385][T28189] veth0_to_bridge: entered promiscuous mode [ 612.036866][T28189] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.054650][T28189] bridge0: port 3(veth0_to_bridge) entered blocking state [ 612.062304][T28189] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 612.104624][T27985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.277262][T28198] netlink: 'syz.3.6382': attribute type 1 has an invalid length. [ 612.285740][T28198] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6382'. [ 612.298001][T28198] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6382'. [ 612.310404][T28198] netlink: 'syz.3.6382': attribute type 1 has an invalid length. [ 612.342849][T28198] netlink: 'syz.3.6382': attribute type 8 has an invalid length. [ 612.351829][T28198] netlink: 582 bytes leftover after parsing attributes in process `syz.3.6382'. [ 612.404267][T28203] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 612.514786][T28212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6386'. [ 612.534939][T28213] sctp: [Deprecated]: syz.2.6385 (pid 28213) Use of int in max_burst socket option. [ 612.534939][T28213] Use struct sctp_assoc_value instead [ 612.554275][T28212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6386'. [ 612.726113][T27985] veth0_vlan: entered promiscuous mode [ 612.741362][T27985] veth1_vlan: entered promiscuous mode [ 612.791163][T27985] veth0_macvtap: entered promiscuous mode [ 612.821495][T27985] veth1_macvtap: entered promiscuous mode [ 612.911183][T27985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.960870][T27985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.006150][ T5993] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.065996][ T5993] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.079393][ T5993] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.125942][ T5993] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.369470][T28255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6399'. [ 613.397673][T28255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6399'. [ 613.479448][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.491411][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.608214][T14614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.616390][T14614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.649138][T28272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6402'. [ 613.743408][ T5827] Bluetooth: hci5: command tx timeout [ 613.942776][T28282] syzkaller0: entered promiscuous mode [ 613.948405][T28282] syzkaller0: entered allmulticast mode [ 613.999631][T28294] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 614.054423][T28296] sctp: [Deprecated]: syz.0.6407 (pid 28296) Use of int in max_burst socket option. [ 614.054423][T28296] Use struct sctp_assoc_value instead [ 614.230031][T28304] xfrm1: entered promiscuous mode [ 614.252130][T28304] xfrm1: entered allmulticast mode [ 614.349638][T28313] x_tables: duplicate underflow at hook 1 [ 614.369209][T28311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 614.376507][T28311] IPv6: NLM_F_CREATE should be set when creating new route [ 614.665745][T28336] netlink: 'syz.4.6424': attribute type 2 has an invalid length. [ 614.719214][T28336] : entered promiscuous mode [ 614.890117][T28348] netlink: 'syz.0.6427': attribute type 1 has an invalid length. [ 614.970058][T28348] bond1: entered promiscuous mode [ 614.982610][T28348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 615.067881][T28361] netlink: 'syz.1.6430': attribute type 15 has an invalid length. [ 615.076638][T28348] bond1: (slave bridge1): making interface the new active one [ 615.097030][T28348] bridge1: entered promiscuous mode [ 615.120571][T28348] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 615.500584][T28385] syzkaller0: entered promiscuous mode [ 615.507086][T28385] syzkaller0: entered allmulticast mode [ 615.604938][T28388] sctp: [Deprecated]: syz.0.6437 (pid 28388) Use of int in max_burst socket option. [ 615.604938][T28388] Use struct sctp_assoc_value instead [ 615.725644][T28393] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 615.823101][ T5827] Bluetooth: hci5: command tx timeout [ 616.515464][T28431] xt_CT: No such helper "syz1" [ 616.617533][T28450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.908883][T28470] __nla_validate_parse: 9 callbacks suppressed [ 616.908904][T28470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6468'. [ 616.926170][T28473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6471'. [ 616.938941][T28473] netlink: 'syz.3.6471': attribute type 1 has an invalid length. [ 616.948546][T28473] netlink: 'syz.3.6471': attribute type 2 has an invalid length. [ 616.975934][T28474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6469'. [ 616.985164][T28474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6469'. [ 616.994757][T28476] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6470'. [ 617.015155][ T5989] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.015506][T28474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6469'. [ 617.030460][ T5989] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.043095][T28476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6470'. [ 617.053488][T28474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6469'. [ 617.066768][ T5989] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.079950][ T5989] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.132305][T28482] netlink: 'syz.3.6472': attribute type 11 has an invalid length. [ 617.140304][T28482] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6472'. [ 617.232500][T28486] Cannot find map_set index 65533 as target [ 617.296983][T28492] netlink: 'syz.3.6476': attribute type 18 has an invalid length. [ 617.384269][T28496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6477'. [ 617.604748][T28516] netlink: 'syz.1.6482': attribute type 24 has an invalid length. [ 617.674782][T28516] netlink: 'syz.1.6482': attribute type 7 has an invalid length. [ 617.684283][T28516] netlink: 'syz.1.6482': attribute type 8 has an invalid length. [ 617.807791][ T5989] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.831394][ T5989] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.868450][ T5989] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.900754][ T5989] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.083632][T28551] netlink: 'syz.0.6496': attribute type 1 has an invalid length. [ 618.622893][T28589] netlink: 'syz.3.6508': attribute type 10 has an invalid length. [ 618.996721][T28590] syzkaller1: entered promiscuous mode [ 619.002797][T28590] syzkaller1: entered allmulticast mode [ 619.574190][T28639] netlink: 'syz.4.6521': attribute type 1 has an invalid length. [ 619.827367][ T1731] block nbd1: Possible stuck request ffff888026ba0000: control (read@0,1024B). Runtime 120 seconds [ 619.840547][ T1731] block nbd1: Possible stuck request ffff888026ba0200: control (read@1024,1024B). Runtime 120 seconds [ 619.855660][ T1731] block nbd1: Possible stuck request ffff888026ba0400: control (read@2048,1024B). Runtime 120 seconds [ 619.867272][ T1731] block nbd1: Possible stuck request ffff888026ba0600: control (read@3072,1024B). Runtime 120 seconds [ 619.966278][T28663] netem: invalid attributes len -24 [ 619.990938][T28663] netem: change failed [ 620.258523][T28672] syzkaller0: entered promiscuous mode [ 620.265959][T28672] syzkaller0: entered allmulticast mode [ 620.990802][T28708] macsec1: entered promiscuous mode [ 621.219857][T28718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 621.245668][T28726] vlan2: entered promiscuous mode [ 621.250905][T28726] bond1: entered promiscuous mode [ 621.258172][T28726] vlan2: entered allmulticast mode [ 621.265487][T28726] bond1: entered allmulticast mode [ 621.291043][T28729] bond1: (slave bridge1): making interface the new active one [ 621.299637][T28729] bridge1: entered promiscuous mode [ 621.305760][T28729] bridge1: entered allmulticast mode [ 621.314235][T28729] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 621.531726][T28747] rdma_rxe: rxe_newlink: failed to add lo [ 621.657513][T28756] FAULT_INJECTION: forcing a failure. [ 621.657513][T28756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.702934][T28756] CPU: 1 UID: 0 PID: 28756 Comm: syz.2.6558 Not tainted syzkaller #0 PREEMPT(full) [ 621.702979][T28756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 621.702991][T28756] Call Trace: [ 621.702999][T28756] [ 621.703007][T28756] dump_stack_lvl+0xe8/0x150 [ 621.703041][T28756] should_fail_ex+0x412/0x560 [ 621.703073][T28756] _copy_from_user+0x2d/0xb0 [ 621.703096][T28756] ___sys_sendmsg+0x1c6/0x360 [ 621.703121][T28756] ? __lock_acquire+0x6b5/0x2cf0 [ 621.703147][T28756] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.703209][T28756] ? __fget_files+0x2a/0x420 [ 621.703229][T28756] ? __fget_files+0x3a0/0x420 [ 621.703259][T28756] __x64_sys_sendmsg+0x1bd/0x2a0 [ 621.703287][T28756] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 621.703323][T28756] ? __pfx_ksys_write+0x10/0x10 [ 621.703359][T28756] do_syscall_64+0x14d/0xf80 [ 621.703386][T28756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.703405][T28756] ? trace_irq_disable+0x37/0x100 [ 621.703427][T28756] ? clear_bhb_loop+0x40/0x90 [ 621.703451][T28756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.703471][T28756] RIP: 0033:0x7fcbd7b9c629 [ 621.703489][T28756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.703506][T28756] RSP: 002b:00007fcbd8a99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.703527][T28756] RAX: ffffffffffffffda RBX: 00007fcbd7e15fa0 RCX: 00007fcbd7b9c629 [ 621.703542][T28756] RDX: 0000000020000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 621.703555][T28756] RBP: 00007fcbd8a99090 R08: 0000000000000000 R09: 0000000000000000 [ 621.703567][T28756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.703579][T28756] R13: 00007fcbd7e16038 R14: 00007fcbd7e15fa0 R15: 00007ffd6c031508 [ 621.703610][T28756] [ 621.781282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.905641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.918165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.930655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.943148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.955592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.967994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.980432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.992866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.005317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.509648][T28774] __nla_validate_parse: 20 callbacks suppressed [ 622.509677][T28774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6564'. [ 622.613804][T28774] team_slave_1: entered promiscuous mode [ 622.641804][T28774] team_slave_1: left promiscuous mode [ 623.093371][T28796] tipc: Enabled bearer , priority 0 [ 623.108483][T28793] tipc: Started in network mode [ 623.125411][T28793] tipc: Node identity da0afb87d26b, cluster identity 4711 [ 623.155490][T28793] tipc: Enabled bearer , priority 0 [ 623.196746][T28797] syzkaller0: entered promiscuous mode [ 623.238066][T28797] syzkaller0: entered allmulticast mode [ 623.309874][T28793] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 623.328206][T28801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6573'. [ 623.353579][T28803] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6570'. [ 623.497827][T28804] tipc: Resetting bearer [ 623.566689][T28790] tipc: Resetting bearer [ 623.746829][T28790] tipc: Disabling bearer [ 623.837457][T28815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6576'. [ 624.200366][T28830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6580'. [ 624.301751][T28830] team_slave_1: entered promiscuous mode [ 624.372310][T28830] team_slave_1: left promiscuous mode [ 624.438888][T28838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6582'. [ 625.515770][T28858] ip6gre1: entered promiscuous mode [ 625.541720][T28858] ip6gre1: entered allmulticast mode [ 625.634463][T28858] validate_nla: 2 callbacks suppressed [ 625.634483][T28858] netlink: 'syz.1.6587': attribute type 2 has an invalid length. [ 625.932813][T28874] netlink: 'syz.0.6591': attribute type 5 has an invalid length. [ 625.995921][T28874] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6591'. [ 626.782207][ C0] net_ratelimit: 10898 callbacks suppressed [ 626.782229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.800628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.813029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.825415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 626.837741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.850072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.862509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.874924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 626.887268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.899611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.220715][ C0] sched: DL replenish lagged too much [ 631.792196][ C0] net_ratelimit: 11517 callbacks suppressed [ 631.792218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 631.810511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.822853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.835228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.847611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 631.859975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.872292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.884649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.897031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 631.909466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.898208][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 636.802086][ C0] net_ratelimit: 12457 callbacks suppressed [ 636.802116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.820457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.832866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 636.845178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.857513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.869861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.882289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 636.894610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.906875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.919219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.666101][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 639.920751][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 639.928836][ C1] lec:lec_tx_timeout: lec0 [ 641.812200][ C0] net_ratelimit: 12435 callbacks suppressed [ 641.812222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.830550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 641.842885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.855167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.867528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.879941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 641.892279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.904588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.916953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.929327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 646.822012][ C0] net_ratelimit: 11803 callbacks suppressed [ 646.822035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 646.840406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.852753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.865123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.877565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 646.889920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.902300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.914728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.927179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 646.939569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.832322][ C0] net_ratelimit: 11474 callbacks suppressed [ 651.832345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 651.850624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.862933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.875332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.887727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 651.900050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.912414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.924812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.937286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 651.949639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.841993][ C0] net_ratelimit: 11836 callbacks suppressed [ 656.842015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 656.860452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.872786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.885120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.897523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.909915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 656.922248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.934554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.946879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.959354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.852044][ C0] net_ratelimit: 11884 callbacks suppressed [ 661.852066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.870484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 661.882887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.897865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.910330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 661.922682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.935175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.947510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.959944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.972428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 666.862139][ C0] net_ratelimit: 11966 callbacks suppressed [ 666.862162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.880521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 666.892856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.905262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.917664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 666.930004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.942320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.954637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.967067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.979483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 671.873725][ C0] net_ratelimit: 11576 callbacks suppressed [ 671.873748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.892100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.904510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 671.916816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.929084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.941401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.953746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.966152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 671.978501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.990846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.882097][ C0] net_ratelimit: 11884 callbacks suppressed [ 676.882121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.900497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 676.912882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.925304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.937728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 676.950105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.962471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.974849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.987247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.999694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 678.750568][ T1731] block nbd1: Possible stuck request ffff888026ba0000: control (read@0,1024B). Runtime 150 seconds [ 678.777794][ T1731] block nbd1: Possible stuck request ffff888026ba0200: control (read@1024,1024B). Runtime 150 seconds [ 678.804288][ T1731] block nbd1: Possible stuck request ffff888026ba0400: control (read@2048,1024B). Runtime 150 seconds [ 679.620020][ T1731] block nbd1: Possible stuck request ffff888026ba0600: control (read@3072,1024B). Runtime 150 seconds [ 681.892268][ C0] net_ratelimit: 11481 callbacks suppressed [ 681.892291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.912502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 681.924847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.937285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.949620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.962098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.974528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 681.986845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.999217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.011819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 686.902315][ C0] net_ratelimit: 11462 callbacks suppressed [ 686.902338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.920678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 686.933113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.945418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.957758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.970150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.982554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 686.994868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.007265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.019671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 691.912254][ C0] net_ratelimit: 11585 callbacks suppressed [ 691.912277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.930578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 691.942997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.955440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 691.967839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.980249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.992698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 692.005092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.017435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.029761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.907767][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 696.922137][ C0] net_ratelimit: 11886 callbacks suppressed [ 696.922159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 696.940411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.952748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 696.965140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.977577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 696.989949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.002409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.014844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 697.027231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.039578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.934986][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 699.943065][ C1] lec:lec_tx_timeout: lec0 [ 701.931968][ C0] net_ratelimit: 11517 callbacks suppressed [ 701.931992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 701.950658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 701.962986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.975291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 701.987817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.000246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 702.012725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.025123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.037572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 702.049937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 706.942125][ C0] net_ratelimit: 11770 callbacks suppressed [ 706.942153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.960502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 706.972846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.985202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.997615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 707.009932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.022272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.034614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.046966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.059396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 707.580750][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 711.952011][ C0] net_ratelimit: 11701 callbacks suppressed [ 711.952032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 711.970408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.982821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 711.995164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.007665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.020088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 712.032434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.044777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.057115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.069499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.962239][ C0] net_ratelimit: 11442 callbacks suppressed [ 716.962261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.982978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 716.995378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.007747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.020153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.032579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.045023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 717.057401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.069808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.082305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 721.972121][ C0] net_ratelimit: 11750 callbacks suppressed [ 721.972144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.990551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 722.002884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.015219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.027550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.039849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.052319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.064812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 722.077150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.089549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.982010][ C0] net_ratelimit: 11507 callbacks suppressed [ 726.982033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 727.000342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.012794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.025253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 727.037648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.049999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.062380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.074734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.087085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.099495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.992148][ C0] net_ratelimit: 11307 callbacks suppressed [ 731.992170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 732.010464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.022842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.035237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 732.047580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.059914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.072292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.084668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.097063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.109475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.611909][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 735.618916][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28884/1:b..l [ 735.627492][ C0] rcu: (detected by 0, t=10503 jiffies, g=113285, q=2682 ncpus=2) [ 735.635424][ C0] task:syz.0.6595 state:R running task stack:27512 pid:28884 tgid:28883 ppid:27260 task_flags:0x400040 flags:0x00080002 [ 735.650054][ C0] Call Trace: [ 735.653368][ C0] [ 735.656325][ C0] __schedule+0x1568/0x5290 [ 735.660882][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 735.666053][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 735.671029][ C0] ? __pfx___schedule+0x10/0x10 [ 735.675920][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 735.680906][ C0] preempt_schedule_irq+0x4d/0xa0 [ 735.685992][ C0] irqentry_exit+0x599/0x620 [ 735.690640][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 735.696652][ C0] RIP: 0010:lock_release+0x2d7/0x3a0 [ 735.701966][ C0] Code: d7 76 11 00 00 00 00 eb b5 e8 25 c4 fd 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 a5 91 76 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 8a a8 00 0a cc 48 8d 3d c2 52 73 [ 735.721605][ C0] RSP: 0018:ffffc9000d9ff2e0 EFLAGS: 00000282 [ 735.727710][ C0] RAX: f583d50cc24eff00 RBX: 0000000000000202 RCX: 0000000000000046 [ 735.735714][ C0] RDX: 0000000000000000 RSI: ffffffff8e151aa7 RDI: ffffffff8c276500 [ 735.743714][ C0] RBP: ffff888031292948 R08: ffffc9000d9ffbb0 R09: 0000000000000000 [ 735.751716][ C0] R10: ffffc9000d9ff438 R11: fffff52001b3fe89 R12: 0000000000000000 [ 735.759717][ C0] R13: 0000000000000000 R14: ffffffff8e75e0a0 R15: ffff888031291e40 [ 735.767760][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 735.772920][ C0] unwind_next_frame+0x1aaa/0x23c0 [ 735.778086][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 735.783242][ C0] ? path_openat+0x311d/0x3860 [ 735.788056][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 735.794264][ C0] arch_stack_walk+0x11b/0x150 [ 735.799076][ C0] ? do_file_open+0x23e/0x4a0 [ 735.803799][ C0] stack_trace_save+0xa9/0x100 [ 735.808608][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 735.814029][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 735.819008][ C0] kasan_save_track+0x3e/0x80 [ 735.823723][ C0] ? kasan_save_track+0x3e/0x80 [ 735.828612][ C0] ? kasan_save_free_info+0x46/0x50 [ 735.833833][ C0] ? __kasan_slab_free+0x5c/0x80 [ 735.838854][ C0] ? kmem_cache_free+0x180/0x610 [ 735.843830][ C0] ? file_free+0x24/0x1e0 [ 735.848192][ C0] ? __fput_deferred+0x2a3/0x380 [ 735.853157][ C0] ? fput_close+0x11f/0x240 [ 735.857692][ C0] ? path_openat+0x311d/0x3860 [ 735.862544][ C0] ? file_free+0x24/0x1e0 [ 735.866925][ C0] kasan_save_free_info+0x46/0x50 [ 735.872004][ C0] __kasan_slab_free+0x5c/0x80 [ 735.876816][ C0] kmem_cache_free+0x180/0x610 [ 735.881617][ C0] ? apparmor_file_free_security+0xc4/0xf0 [ 735.887468][ C0] file_free+0x24/0x1e0 [ 735.891668][ C0] __fput_deferred+0x2a3/0x380 [ 735.896465][ C0] ? __pfx___fput_deferred+0x10/0x10 [ 735.901781][ C0] ? __fget_files+0x2a/0x420 [ 735.906415][ C0] fput_close+0x11f/0x240 [ 735.910781][ C0] ? __pfx_fput_close+0x10/0x10 [ 735.915666][ C0] ? __asan_memset+0x22/0x50 [ 735.920290][ C0] ? terminate_walk+0x3d7/0x510 [ 735.925178][ C0] path_openat+0x311d/0x3860 [ 735.929814][ C0] ? arch_stack_walk+0xfb/0x150 [ 735.934723][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 735.940147][ C0] ? stack_depot_save_flags+0x33/0x810 [ 735.945676][ C0] ? __pfx_path_openat+0x10/0x10 [ 735.950647][ C0] ? __x64_sys_openat+0x138/0x170 [ 735.955723][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 735.960716][ C0] do_file_open+0x23e/0x4a0 [ 735.965259][ C0] ? __pfx_do_file_open+0x10/0x10 [ 735.970342][ C0] ? _raw_spin_unlock+0x28/0x50 [ 735.975226][ C0] ? alloc_fd+0x64b/0x6c0 [ 735.979607][ C0] do_sys_openat2+0x113/0x200 [ 735.984320][ C0] ? __se_sys_futex+0x3a8/0x450 [ 735.989205][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 735.994439][ C0] ? rcu_is_watching+0x15/0xb0 [ 735.999240][ C0] __x64_sys_openat+0x138/0x170 [ 736.004135][ C0] do_syscall_64+0x14d/0xf80 [ 736.008781][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.014884][ C0] ? trace_irq_disable+0x37/0x100 [ 736.019953][ C0] ? clear_bhb_loop+0x40/0x90 [ 736.024675][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.030650][ C0] RIP: 0033:0x7fa15219c629 [ 736.035104][ C0] RSP: 002b:00007fa152fa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 736.043560][ C0] RAX: ffffffffffffffda RBX: 00007fa152415fa0 RCX: 00007fa15219c629 [ 736.051569][ C0] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 736.059579][ C0] RBP: 00007fa152232b39 R08: 0000000000000000 R09: 0000000000000000 [ 736.067589][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.075595][ C0] R13: 00007fa152416038 R14: 00007fa152415fa0 R15: 00007ffdb91a2cc8 [ 736.083682][ C0] [ 736.086732][ C0] rcu: rcu_preempt kthread starved for 2555 jiffies! g113285 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 736.097966][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 736.107966][ C0] rcu: RCU grace-period kthread stack dump: [ 736.113881][ C0] task:rcu_preempt state:R running task stack:27624 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 736.127425][ C0] Call Trace: [ 736.130739][ C0] [ 736.133715][ C0] __schedule+0x1568/0x5290 [ 736.138265][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 736.143262][ C0] ? __pfx___schedule+0x10/0x10 [ 736.148179][ C0] ? schedule+0x90/0x360 [ 736.152473][ C0] schedule+0x164/0x360 [ 736.156677][ C0] schedule_timeout+0x158/0x2c0 [ 736.161566][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 736.166980][ C0] ? __pfx_process_timeout+0x10/0x10 [ 736.172311][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 736.178175][ C0] ? prepare_to_swait_event+0x340/0x370 [ 736.183797][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 736.188696][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 736.194901][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 736.200230][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 736.205468][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 736.211340][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 736.215974][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 736.221248][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 736.227150][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 736.232136][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 736.237207][ C0] kthread+0x388/0x470 [ 736.241324][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 736.246561][ C0] ? __pfx_kthread+0x10/0x10 [ 736.251190][ C0] ret_from_fork+0x51e/0xb90 [ 736.255840][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 736.260981][ C0] ? __switch_to+0xc7d/0x1400 [ 736.265708][ C0] ? __pfx_kthread+0x10/0x10 [ 736.270341][ C0] ret_from_fork_asm+0x1a/0x30 [ 736.275173][ C0] [ 736.278227][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 736.284577][ C0] CPU: 0 UID: 0 PID: 20859 Comm: kworker/u8:38 Not tainted syzkaller #0 PREEMPT(full) [ 736.294261][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 736.304351][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 736.311326][ C0] RIP: 0010:pie_calculate_probability+0x123/0x7e0 [ 736.317792][ C0] Code: 8b 5c 24 28 49 8b 04 24 48 89 44 24 28 eb 07 e8 a3 67 1c f8 31 db 4c 89 64 24 38 31 ff 48 89 de e8 72 6c 1c f8 48 89 5c 24 18 <48> 85 db 0f 95 44 24 06 31 ff 89 ee e8 bc 6b 1c f8 89 6c 24 44 85 [ 736.337440][ C0] RSP: 0018:ffffc90000007ba8 EFLAGS: 00000246 [ 736.343554][ C0] RAX: ffffffff89a7d33e RBX: 0000000000000000 RCX: ffff88807ef43c80 [ 736.351555][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 736.359573][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 736.367661][ C0] R10: dffffc0000000000 R11: fffff52000000f78 R12: ffffc90015252a18 [ 736.375667][ C0] R13: ffffc90015252a10 R14: dffffc0000000000 R15: ffff88806e13fada [ 736.383711][ C0] FS: 0000000000000000(0000) GS:ffff8881254ae000(0000) knlGS:0000000000000000 [ 736.392681][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.399435][ C0] CR2: 00007fa315731478 CR3: 000000000e54a000 CR4: 00000000003526f0 [ 736.407437][ C0] Call Trace: [ 736.410747][ C0] [ 736.413640][ C0] fq_pie_timer+0x288/0x5b0 [ 736.418195][ C0] ? fq_pie_timer+0x4d/0x5b0 [ 736.422831][ C0] call_timer_fn+0x192/0x5a0 [ 736.427455][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 736.432528][ C0] ? call_timer_fn+0xd4/0x5a0 [ 736.437233][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 736.442387][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 736.447628][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 736.452695][ C0] __run_timer_base+0x652/0x8b0 [ 736.457607][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 736.463017][ C0] ? try_to_wake_up+0x7fc/0x1390 [ 736.468003][ C0] run_timer_softirq+0xb7/0x170 [ 736.472885][ C0] handle_softirqs+0x22a/0x7c0 [ 736.477690][ C0] ? do_softirq+0x76/0xd0 [ 736.482061][ C0] ? kernel_fpu_end+0x62/0x80 [ 736.486844][ C0] do_softirq+0x76/0xd0 [ 736.491056][ C0] [ 736.494015][ C0] [ 736.496968][ C0] __local_bh_enable_ip+0xf8/0x130 [ 736.502129][ C0] blake2s_compress+0xf9/0x1eb0 [ 736.507012][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 736.512362][ C0] ? blake2s_compress+0x1e17/0x1eb0 [ 736.517606][ C0] ? __crypto_xor+0x17fa/0x1850 [ 736.522691][ C0] ? chacha_crypt+0xf24/0xf90 [ 736.527419][ C0] ? __pfx_chacha_crypt+0x10/0x10 [ 736.532479][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 736.537895][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 736.543301][ C0] ? __asan_memset+0x22/0x50 [ 736.547927][ C0] ? __asan_memset+0x22/0x50 [ 736.552547][ C0] ? __chacha20poly1305_encrypt+0x334/0x360 [ 736.558482][ C0] ? blake2s_update+0x134/0x450 [ 736.563395][ C0] blake2s_update+0x14b/0x450 [ 736.568115][ C0] hmac+0x1fc/0x3b0 [ 736.571956][ C0] ? __pfx_hmac+0x10/0x10 [ 736.576326][ C0] ? blake2s_compress+0x1e17/0x1eb0 [ 736.581582][ C0] ? kdf+0x136/0x2b0 [ 736.585519][ C0] kdf+0x1a3/0x2b0 [ 736.589278][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 736.594683][ C0] ? __pfx_kdf+0x10/0x10 [ 736.598982][ C0] ? blake2s_update+0x255/0x450 [ 736.603867][ C0] ? __asan_memset+0x22/0x50 [ 736.608502][ C0] wg_noise_handshake_create_initiation+0x473/0x830 [ 736.615141][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 736.622302][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 736.627277][ C0] ? rcu_is_watching+0x15/0xb0 [ 736.632071][ C0] ? trace_pelt_se_tp+0x39/0x120 [ 736.637085][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 736.642320][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 736.648361][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 736.654477][ C0] wg_packet_handshake_send_worker+0x18d/0x350 [ 736.660671][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 736.667402][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 736.673151][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 736.678902][ C0] process_scheduled_works+0xaec/0x17a0 [ 736.684515][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 736.690532][ C0] ? assign_work+0x3d5/0x5e0 [ 736.695157][ C0] worker_thread+0xa50/0xfc0 [ 736.699807][ C0] kthread+0x388/0x470 [ 736.703943][ C0] ? __pfx_worker_thread+0x10/0x10 [ 736.709084][ C0] ? __pfx_kthread+0x10/0x10 [ 736.713712][ C0] ret_from_fork+0x51e/0xb90 [ 736.718330][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 736.723471][ C0] ? __switch_to+0xc7d/0x1400 [ 736.728193][ C0] ? __pfx_kthread+0x10/0x10 [ 736.732827][ C0] ret_from_fork_asm+0x1a/0x30 [ 736.737645][ C0] [ 737.002120][ C0] net_ratelimit: 8746 callbacks suppressed [ 737.002143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.020407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.032866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.045311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 737.057779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 737.070150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.082638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.095078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 737.107544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.119912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.012142][ C0] net_ratelimit: 11335 callbacks suppressed [ 742.012164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.030541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.042972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b2:ab:78:6f:0a:5b, vlan:0) [ 742.055292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.067664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.080035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.092427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.104805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.117216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.129662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)