last executing test programs: 4.345506234s ago: executing program 0 (id=726): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x102, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc1}, 0x400d0) syz_emit_ethernet(0x1e, &(0x7f0000000240)={@multicast, @empty, @void, {@can={0xc, {{0x4, 0x0, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "ca29382c4900d85b"}}}}, &(0x7f0000000280)={0x0, 0xff, [0x4dd, 0x578, 0xc69, 0x8d7]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r4, 0x402, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x56}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x16048040}, 0x40000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1cc, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x259d}, {0x6, 0x16, 0x7}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb}, {0x6, 0x16, 0x7}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa}, {0x6, 0x16, 0x7}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xde0}, {0x6, 0x16, 0xffff}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4a}, {0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x101}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000980)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x92, &(0x7f0000000a40)=[{}], 0x8, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c80)={0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xd, &(0x7f0000000780)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000800)='GPL\x00', 0x88, 0xc0, &(0x7f0000000840)=""/192, 0x41000, 0x33, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x7, 0x2}, 0x10, r8, r9, 0x7, &(0x7f0000000cc0)=[r0, r1, r1], &(0x7f0000000d00)=[{0x2, 0x1, 0xa, 0x5}, {0x0, 0x3, 0x4, 0x3}, {0x1, 0x2, 0xb, 0x2}, {0x1, 0x4, 0xb, 0x6}, {0x4, 0x4, 0x9, 0x3}, {0x5, 0x3, 0x8001, 0x3}, {0x4, 0x3, 0x1, 0x6}], 0x10, 0x7}, 0x94) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000e40)=@req3={0x83cd, 0x9, 0xee, 0x49, 0x6183, 0x7fff, 0xa}, 0x1c) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), r3) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, r11, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20004040) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000001000)=0x80, 0x4) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x64, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x4001) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r12, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) r13 = epoll_create(0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000001280)=0xfffe) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x2c}}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001640)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001600)={&(0x7f0000001400)={0x1d0, 0x13, 0x8, 0x70bd2d, 0x25dfdbfb, {0x1c, 0xdd, 0x2, 0xfd, {0x4e23, 0x4e22, [0x5, 0x401, 0x7fffffff, 0x1], [0xfffeffff, 0xc, 0x9, 0x7], r7, [0x2, 0xfffffffc]}, 0x0, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "3ae97338ba17c0b9dc83d7dd752b1f81547927cb206f125948ebaf63cb0fbd660eeb3310c7cc898af7a43436f7b33ec836b42da2653ed1ffb887f80403b559c77424f3143a9504cbec1f9c0f25c5eaf11098aafc0d8e1ddbf8e8815823e8f85f2e2a974f62b28e99feefab22b0fbbbfb36ab24091ff39e8627b5279d3e20d05dcddd1d7b601cf79ea7201c01ab13f05d90a7a0234d18626ce4e54ac204e8b2b958d332f7b777c68ca1786fdce308e0213409da7cd3c6d45b665906b594dbe60237d804e201071ffa67d59f43b6bcc49dd8ae40100aebfff5b90c7c6f485772ea1cd78b"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "9216fd36b54820765462aa1f08f048fee9c3e7e6de3c15a0c445be72aa4f74b09d375c01601a181402e8ab7f2abd136aa6ab14dd283151871680aed15c6be4640e479f1bcdcbbf1b5a2052f075fc52dbc24a8951f20183d2b4012e06f7e1b111190f4611a4e2dea125cf7f6c244e4f6e43ce9741436df767942d1e2eb9ebfec7f5866960e040ce4a0b2e7ac6a7db6916dbf845ecd1c5ad"}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x51}, 0x4000) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001680)=0x0) r15 = accept$unix(r0, &(0x7f00000016c0), &(0x7f0000001740)=0x6e) sendmsg$unix(r15, &(0x7f0000001f00)={&(0x7f0000001780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001800)="8f6c2294cd49e95631586c30cd5c846fc7ddccdbba6c27bd415e4c9ea55f99210334b313fe2905072f5288e3a5efdee7c9fdf44e0985d6bafbeeb36a4a8294bc29c957f2b176b6d5cd365eef5dba84cd8d2ce0a189d4c0ab1216bc9e77770a8517991695ce3b7538a0254b25670a06edacfe9771818b708ea13f8f6d55ebe3c058949f6e94187a871dc8155d8a972ddd2ad3462143c361c5c1708f604e8e401334ea765952781d474fb97d1bf5465031d20d4a12eff92a9afc61d740b2bb2ee83e", 0xc1}, {&(0x7f0000001900)="830c6356e52e6983f85d529a158ff6fdeb0ec8618d239613ab40f7fd1e423fefc289b1e979eb2c46939666eb630c7f3d16f2cc648f95a7760b86f6d7048925a6691c520361ab884c6252ab3c69af892440e13a46e6d9f9907de5bef153ac278ee0a21ee015159044561c2626c27ca390f6070a263b382d04b76cc4394e2203a9e2e46cd9f2d4f3956c51a18e24fe699ba86e3a54ad7b766ef949ba7a8799a950eae147aac7e9a2ae4f7a4b9a1caaaf14cb838495aef587f64570fb4feb96", 0xbe}, {&(0x7f00000019c0)="5fc7852f66844de0ff3a5871f6cbfc70f432929b20b1c1dcb4544147d17e5bfe6cf5b24cd8f03d31aaf92477423116741f43dc62a9d9d00c6b42a20d9557d464e2faae6cb0630547aa9ddffa5878abd027ef42f80afee9", 0x57}, {&(0x7f0000001a40)="a209595d8e3e2f7bbfc92251b541642bf6c413c8a850a3c97f34841aa70d3a71cf023f04c52ae7b8790e2de224d4f40cd744be097caff88d5b7ad0694f9b317b1a965775d202b15ec532fd76ab699f0b18afea4bc7476aecdf760c46741ca88242fadde29aa05e60f4a9a824c05c08499837574dff2b89793a43c3d629490a1331fb479337e591c46cad1aab43cb7eb88157537563bc119e89081488470ee99b4fced0bdae3dd18ab3e836", 0xab}, {&(0x7f0000001b00)="2358c44cdfe4cb042e1ac374e2d1cfcf74bc6322c9e87d7226c9ffc8f90f0e7b6182e16d2873082fbe1707c9097767b43b3011be8dd70052e957e402aecf41da1359efa1a406d95fd4719cedfc1db8f12b6bf67499c60cc34baf0c0a0d6888801dfad675507aa1529ff43d3059829f43827860e03b6d1a206dea1839b2a010ed5d6c44dc4c52f4be5582b4dbe56e95df03dd4a40a97d8c88134e728ae35362aceecc91aa8d5461e0ca13ece9c91022ec619c295beeda0e50f95466cba353d90b8293e54f791bf98c6cc3ef89501e304653df4e225cfdb71b7d8ddbe6cc10397cf4467ce185", 0xe5}, {&(0x7f0000001c00)="1fd8ab45a6aa292989700b2d7ee15505dbf1b39f9959de6434", 0x19}, {&(0x7f0000001c40)="7160b4b548f8c6eb163b9099aa5da6e74f89c7b070070c9868773d207103e1628c6491ebac7a777b3e68085835db097b17785dea7769dff16bb8c7e100d54dbb6da2a384d77f06d989a415b2d662448564225e392759a1037249feb82b83dcec3f953700f6dd4b2cbcce453cd55e42a8f4ab790d475241162197b34a3ca7efa21252e13a644a4dc21382ad7c300079d93420b6d7b903ef643eebb63f7ce2d7a2b8554eb47756477d88cd437f5890d6ea081b93905c8adc0e3b7e52861857613d23962ab1197888ebe54a61", 0xcb}], 0x7, &(0x7f0000001e80)=[@rights={{0x20, 0x1, 0x1, [r13, r10, r3, r12]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x80, 0x20040090}, 0x40) 4.183181291s ago: executing program 0 (id=728): socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003010101000000"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 3.820586411s ago: executing program 0 (id=729): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000200)={0x1, [0x80]}, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r3, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) (async, rerun: 32) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x4, 0x202, 0x17558e07, 0x90e, 0x7c26, 0xffffffff, 0x7, r5}, 0x20) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r5, 0x675}, &(0x7f00000001c0)=0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) 3.559197688s ago: executing program 0 (id=733): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010"], 0x80}}, 0x4814) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="154e0100000000002c0012800b0001006d616373656300001c00028005000c0001"], 0x54}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000380)={0x10003, 0x9372, 0x5, 0x2efc, 0x1}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x6ffffff}, @TCA_FQ_FLOW_REFILL_DELAY={0xffffff12, 0x9, 0x3}]}}]}, 0x55}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c0000340002800800feff", @ANYRES32, @ANYBLOB="14000200ff02000000000000000000000000001114000300ff"], 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0020000000f8278f8566ddf2ad7e526d4e260808004b00005c0000000001069078ac141400ac1e0001890b6b00000000ac1414aa440c0703", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0007727907800000204080000fe06f989782e00220f2f95447b1cd3e351f40cce23cf00"], 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0xf37, 0x2) read$alg(r9, &(0x7f00000003c0)=""/85, 0x55) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400200142603600e1208000b0000000401a80016000c00014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.667213741s ago: executing program 4 (id=741): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001040)=ANY=[@ANYBLOB="9feb0100a62f526f0b180000009fafdff35232545a240000000a000000080000000000000604000000080000000100000ff7ffffff0400000001000000fffffff70030615f5f002e305f"], 0x0, 0x46, 0x0, 0x1}, 0x28) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x1e}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f00000010c0)={{0x6, @bcast, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @bcast, @bcast, @bcast, @default, @bcast]}, 0x48) pipe(&(0x7f0000000480)) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001001f000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001001f000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r2, 0x0, r5, 0x0, 0x10d00, 0xf) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000f80)={0x60, r8, 0x20, 0x70bd28, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}]}, 0x60}}, 0x20004004) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000f80)={0x60, r8, 0x20, 0x70bd28, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}]}, 0x60}}, 0x20004004) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r2) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, r10, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "b2036a"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e6cbe9298aa101363fc92e3f94"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000101}, 0x54) 2.564154394s ago: executing program 0 (id=743): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000240)="b9f6030768045c8c98a89a0b86ddd5", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) unshare(0x6c040200) 2.391054823s ago: executing program 4 (id=744): syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ac0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x688b45631ad78190}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) tee(r2, r5, 0x100000af5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x0, 0x28, 0x0, &(0x7f00000005c0)="0700c06e775346ac987953e586dd8abbff61563ab89ad3215830778f72b6e5c8b4453f337530f385", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x0, 0x3}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x0, 0x3}, 0x28) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) close(r2) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112c9000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112c9000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.389530475s ago: executing program 3 (id=745): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000190001002dbd7000fcdbdf250aec1300934207dec6cb4b4408001e000a0000000c0009"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x44000) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0xedc623580215bdcd, 0x19, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000e5ffffffff170100002020642500000000002020207b1af85a1c54bbef255184cc02615ce7979eff00000000bfa100000000000007010000f8ffffffb702000008000000b70000000000000085"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfd9, &(0x7f0000001e00)=""/4057}, 0x94) 2.214849434s ago: executing program 3 (id=746): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%'], 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) unshare(0x22020600) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xb85cc67c6df08ddc}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000189"], 0xfdef) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x0, 0x4}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x80000001, 0x2, 0x8, 0x100, r0, 0x3c, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.181774935s ago: executing program 1 (id=747): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0xfffffffd, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x4c, r4, 0xa01, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88d3}, 0x4080) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) socket$nl_route(0x10, 0x3, 0x0) unshare(0x8040600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x9a, &(0x7f00000001c0)=""/154, 0x0, 0x63}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @multicast2, 0x0}, &(0x7f0000000040)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@exit, @printk={@i}, @generic={0xdb, 0x9, 0x6, 0x200, 0x21}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x20000e, 0x0, 0x0, 0x0, 0x2}, @generic={0x3, 0x3, 0xd, 0x8001, 0x80}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xa4, &(0x7f00000003c0)=""/164, 0x0, 0x0, '\x00', r5}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) connect$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0xfffffffd, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x1c) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r1) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x4c, r4, 0xa01, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88d3}, 0x4080) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x8040600) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x9a, &(0x7f00000001c0)=""/154, 0x0, 0x63}, 0x94) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @multicast2}, &(0x7f0000000040)=0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@exit, @printk={@i}, @generic={0xdb, 0x9, 0x6, 0x200, 0x21}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x20000e, 0x0, 0x0, 0x0, 0x2}, @generic={0x3, 0x3, 0xd, 0x8001, 0x80}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xa4, &(0x7f00000003c0)=""/164, 0x0, 0x0, '\x00', r5}, 0x94) (async) 2.070422223s ago: executing program 4 (id=748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) r2 = socket(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xcd, 0x0, 0x20, 0xfd, [0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x8, 0x1]}}) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x44}}, 0x4000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000000400000000500000041"], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0x6}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r8, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="a1ab000000000200000032000000080001006000000008000300", @ANYRES32=r15, @ANYBLOB="2d07d8b66d125233462ed1b9b5733d3e8031906e6d3221d85dc6251dc80f04491e8fce8c1be3f959d32c3906acbf14f1b94f6ce61c0e3ff464c75b67e4edc713a73137296b6d1273a0f4"], 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000dc0)={0x494, r12, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_TX_RATES={0x260, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4}, {0x3}, {0x6, 0x4}, {0x5, 0x5}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0x9}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x1, 0x3}, {0x1, 0x8}, {0x5, 0x3}, {0x5, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x2, 0x9}, {0x3, 0x7}, {0x2, 0x8}, {0x1, 0x5}, {0x4, 0x8}, {0x5}, {}, {0x4, 0x4}, {0x1, 0x5}, {0x1, 0x9}, {0x2, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x3, 0x5}, {0x3, 0x7}, {0x2, 0x7}, {0x7, 0x7}, {0x3, 0x1d}, {0x1, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x3, 0x7}, {0x5, 0x7}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x5, 0x6}, {0x1, 0x4}, {0x7, 0x3}, {0x1, 0x9}, {0x6, 0x7}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x9, 0x6, 0x48, 0x18, 0x18, 0x16, 0x48, 0x60, 0xe8, 0x24, 0xb, 0x30, 0x3, 0x12, 0x60, 0x5, 0x6, 0x30, 0x60, 0xc, 0x2d, 0x48, 0x18, 0x3, 0x36, 0x33, 0x6c, 0x1, 0x16, 0x4, 0x30]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x200, 0x9, 0x3ff, 0xb, 0x4, 0x0, 0x8]}}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0xa}, {0x5, 0x7}, {0x5, 0x3}, {0x0, 0x2}, {0x6, 0x2}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf, 0x5, 0x2, 0x5, 0x350, 0x2, 0x3]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x8}, {0x5, 0x3}, {0x0, 0x7}, {0x2, 0xa}, {0x7, 0x1}, {0x6, 0x1}, {0x4, 0x8}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x4}, {0x7, 0x3}, {0x0, 0x6}, {0x5, 0x7}, {0x6, 0x6}, {0x4, 0x3}, {0x0, 0x2}, {0x1, 0x6}, {0x4}, {0x1, 0x3}, {0x3, 0x4}, {0x2, 0x8}, {0x5, 0x2}, {0x4}, {0x6, 0x8}, {0x6, 0x8}, {0x7}, {0x3, 0x7}, {0x1, 0x3}, {0x7}, {0x2, 0x1}, {0x7}, {0x1, 0x1}, {0x6, 0x1}, {0x3, 0x7}, {0x2, 0x1}, {0x0, 0xa}, {0x5, 0x5}, {0x4, 0x8}, {0x3, 0x1}, {0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x7, 0x1}, {0x5, 0x6}, {0x1, 0x7}, {0x0, 0x6}, {0x2, 0xe}, {0x2, 0x7}, {0x4, 0xa}, {0x6, 0xa}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x5}, {0x7, 0x4}, {0x0, 0x2}, {0x6}, {0x5, 0x8}, {0x5, 0x5}, {0x3}, {0x5, 0x4}, {0x0, 0x3}, {0x6, 0xa}, {0x5, 0x3}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x2}, {0x4, 0x7}, {0x5, 0x2}, {0x4, 0x1}, {0x4, 0x3}, {0x5, 0x6}, {0x3, 0x4}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xffff, 0x0, 0x7ff, 0x58ba, 0x1, 0xf3e2, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0xa}, {0x4, 0x4}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x2]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2}, {0x2, 0x6}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x8}, {0x3, 0x3}, {0x2, 0x9}, {0x5, 0x1}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0xa}, {0x7, 0x7}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0x6}, {0x3, 0x1}, {0x0, 0xa}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x5}, {0x1, 0xa}, {0x2, 0x4}, {}, {0x1, 0x9}, {0x1, 0x5}, {0x0, 0x17}, {0x3}, {0x7}, {0x1}, {0x1, 0x3}, {0x6}, {0x2, 0x9}, {0x4}, {0x6, 0x3}, {0x7}, {0x5}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x3}, {0x3, 0x8}, {0x1}, {0x6, 0x9}, {0x4, 0x3}, {0x4, 0x4}, {0x6}, {0x6, 0x8}, {0x0, 0x8}, {0x3, 0x6}, {0x1, 0x9}, {0x6, 0x7}, {0x2, 0x5}, {0x2, 0x6}, {0x2, 0x1e}, {0x1, 0xa}, {0x7, 0x7}, {0x6, 0x1}, {0x1, 0x1}, {0x4, 0x5}, {0x7, 0x3}, {0x3, 0x1}, {0x0, 0x3}, {0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x6, 0x3}, {0x3, 0x6}, {0x1, 0x1}, {0x4, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x6, 0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x7, 0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x2}, {0x1, 0x2}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x3}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0xa}, {0x6, 0x4}, {0x7}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x4}, {0x6, 0x7}, {0x4, 0x4}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0x6}, {0x7}, {0x1, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x5, 0x18, 0x12, 0x60, 0x12, 0xc, 0x3, 0x30, 0x6, 0x36, 0x4, 0xc, 0x5, 0x3, 0xc, 0x30, 0x48, 0x6, 0x3, 0x3, 0x60, 0x36, 0x4, 0x35]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x40, 0x86, 0x0, 0x3, 0x5, 0x5, 0x8]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0xc, 0x1, 0x60, 0x16, 0x18, 0x6, 0x0, 0x48, 0x3, 0x48, 0xd, 0x2, 0x5, 0x24, 0x1, 0x16, 0x6c, 0x36, 0x30, 0x18, 0x60, 0x18, 0x6c, 0x3, 0x6, 0x2782ed0ce0b5486c, 0x48, 0x4]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x5, 0x101, 0x0, 0x2, 0x44, 0xdb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x218, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x36, 0x1b, 0x9]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x2}, {0x6, 0x8}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0x4}, {0x4}, {0x0, 0x1}, {0x7, 0x4}, {0x7, 0x5}, {0x3, 0x6}, {0x3, 0xa}, {0x5, 0x9}, {0x3, 0x7}, {0x0, 0x5}, {0x7, 0x7}, {0x0, 0x9}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x2}, {0x2, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x16, 0x30, 0x1, 0x3e, 0x24, 0x9, 0x3, 0x60, 0x0, 0x16, 0x0, 0x18, 0x16, 0x12, 0x12, 0x0, 0x48, 0x1b, 0x6c, 0x3, 0x12, 0x3, 0x36, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x48, 0x24, 0x0]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x5, 0x6, 0xf0c1, 0xe, 0x5d3, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf800, 0x6, 0x81, 0x2, 0x8, 0x7, 0x87]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x1b, 0x5, 0x3, 0x2, 0x2, 0x16, 0x5, 0x9, 0x24, 0xc, 0x6c, 0x6, 0x16, 0x48, 0x4, 0x2, 0x60]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x5}, {0x6, 0x9}, {0x4, 0x9}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x6}, {0x4, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x7}, {0x5}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x14}, {0x7, 0x3}, {0x6, 0x7}, {0x4, 0x5}, {0x7, 0x8}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0xa}, {0x7, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0xf}, {0x3, 0x3}, {0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x3}, {0x6, 0x1}, {0x7, 0x2}, {0x3, 0x1}, {0x0, 0x9}, {}, {0x0, 0x8}, {0x3, 0x6}, {0x7}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x48, 0xb, 0x9, 0xb, 0x18, 0x5, 0x1b, 0x48, 0x6, 0x3, 0x16, 0x5, 0x16, 0x42, 0xc, 0x48, 0x5, 0x60, 0x24, 0x3, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x5}, {0x2, 0x2}, {0x4}, {0x4, 0x2}, {0x5, 0xa}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x5}, {0x5, 0x4}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x5}, {0x7, 0x2}, {0x7, 0x2}, {0x2, 0x9}, {0x4, 0x9}, {0x0, 0x3}, {0x5, 0x5}, {0x2, 0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x5, 0x9}, {0x7, 0x9}, {0x3, 0x9}, {0x1, 0x2}, {0x2, 0xa}, {0x3, 0x4}, {0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x1, 0x7}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0xa}, {0x6, 0x3}, {0x4, 0x2}, {0x7, 0x5}, {0x7, 0xa}, {0x0, 0x9}, {0x3, 0x9}, {0x5, 0x2}, {0x6, 0x8}, {0x7}, {0x2, 0x8}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0x7}, {0x4, 0xa}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x9}, {0x5, 0x1}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x48, 0x6, 0x0, 0x4, 0x80, 0x581]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x9}, {0x2, 0xd}, {0x2, 0x4}, {0x3, 0x1}, {0x6}, {0x2, 0x1}, {0x1}, {0x2, 0x4}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0xa}, {0x6, 0x3}, {0x2}, {0x5, 0x4}, {0x2, 0x4}, {0x4, 0x9}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0x6}, {0x3, 0x7}, {0x3, 0xa}, {0x2, 0x8}, {0x4, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x6, 0x3}, {0x6, 0x6}, {0x0, 0x2}, {0x4, 0x4}, {0x1, 0x2}, {0x2, 0x5}, {0x3, 0x5}, {0x2, 0x7}, {0x2}, {0x3, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x9}, {0x1, 0x8}, {0x2, 0x7}, {0x4}, {0x2}, {0x1, 0x8}, {0x7, 0x1a}, {0x5, 0x3}, {0x0, 0x3}, {0x1, 0x7}, {0x7, 0x2}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x7, 0xa}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0xa}, {0x3, 0x7}, {0x3, 0x4}, {0x2, 0x9}, {0x7, 0x8}, {0x2, 0x4}, {0x7, 0x1}, {0x4, 0xa}, {0x4, 0x9}, {0x6, 0x3}, {0x3, 0xa}, {0x2, 0x2}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x2, 0x384, 0x9, 0x0, 0xa, 0x6, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc, 0x9, 0x3, 0x6, 0x0, 0x4, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x2, 0x4, 0x2, 0x800, 0x2, 0x4]}}]}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x881}, 0x899) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="20000000140009050000040000000000020100ff", @ANYRES32=r11, @ANYBLOB="08000200e0"], 0x20}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x98, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x8100, r11, {0xd}, {}, {0x11, 0xd}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x1, 0x6, 0x1, 0xe, 0x1, 0x1}}, {0x6, 0x2, [0x10]}}, {{0x1c, 0x1, {0x7, 0xfd, 0x4, 0x4, 0x0, 0x2, 0x2, 0x1}}, {0x6, 0x2, [0xcd06]}}]}]}, 0x98}}, 0x0) 2.016583236s ago: executing program 1 (id=750): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x80000) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x7800, 0x700, 0x1, 0x7, {{0x5, 0x4, 0x3, 0x39, 0x14, 0x67, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @remote}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x20) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) (async) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000000)=0x7) accept4(r4, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000140)=0x80, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) 1.691492146s ago: executing program 2 (id=751): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x3f8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c8, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x4, 0x7, 0x0, 0x10, 0x2, 0x400f09, 0xfffffff8, 0x2542d461, 0xa000000, 0xa, 0x3, 0x9, 0xcc, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0xfffffe6c, 0x1, {0x6, 0x3f, 0x9, 0xa, 0x1, 0xaf, 0x0, 0x4, 0xfffffff8, 0x6, 0x2, 0x1f, 0x6, 0xe, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xf}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x2, 0x3, 0x5, 0x5, 0x34, 0x7fff, 0x5, 0x3fe000, 0x6603, 0x12, 0x18, 0x3, 0x1, 0x2, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x10}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xffc3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xff}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 1.69106537s ago: executing program 1 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000003c0007010000000000000000017c00000400fc800c00018006000600800a00200800028004"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='rpc_call_rpcerror\x00', 0xffffffffffffffff, 0x0, 0x2}, 0xffffffffffffff05) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'macsec0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r7, &(0x7f00000002c0)=ANY=[@ANYRES8=r5], 0x33) sendfile(r7, r6, 0x0, 0x10000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x2b}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x24084045) vmsplice(r0, &(0x7f0000001680), 0x0, 0x4) 1.554319857s ago: executing program 3 (id=753): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) (async) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a40), r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/1, 0x1, 0x0, &(0x7f0000000140)}, &(0x7f00000008c0)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/1, 0x1, 0x0, &(0x7f0000000140)}, &(0x7f00000008c0)=0x40) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) (async) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) readv(r7, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/73, 0x49}, {0x0}, {0x0}], 0x3) (async) readv(r7, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/73, 0x49}, {0x0}, {0x0}], 0x3) sendmsg$nl_route(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r7) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x80, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5e6}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4b18d0c5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20000050) 1.423819368s ago: executing program 4 (id=754): socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) r1 = socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7c, &(0x7f0000000000)=r2, 0x62) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200800001020030504fffffffffffff85d01e17fb3d3de67d498813befe44275b5e17cd36910ed17a39f8087a5e321f1", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200800001020030504fffffffffffff85d01e17fb3d3de67d498813befe44275b5e17cd36910ed17a39f8087a5e321f1", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r9 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) 1.267637708s ago: executing program 2 (id=755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x2, 0x6, 0x6, 0x20310, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x41000, 0xc}, 0x94) socket$isdn(0x22, 0x3, 0x11) 1.239028336s ago: executing program 2 (id=756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000280)=""/33, &(0x7f0000000240)=0x21) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r4, r3, 0x0, r3}, 0x10) socket$kcm(0x2, 0xa, 0x73) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000340), &(0x7f0000000440)=0x4) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x407f}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xa697, 0x4}}]}]}]}, 0x48}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="34859321", @ANYRES16=r11, @ANYBLOB="010700000000fcdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x24000040) sendmsg$DEVLINK_CMD_PORT_SPLIT(r9, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r11, 0x300, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40801) 1.209847412s ago: executing program 1 (id=757): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x2cbd}, {0x6, 0x0, 0x0, 0xdf57}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6000, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0xf6, 0x215, 0xa, 0x3, 0x8, 0x5, 0x40}, 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 1.195713107s ago: executing program 3 (id=758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @broadcast, 0xffffff00, 0x0, 'team0\x00', 'syzkaller1\x00', {}, {}, 0x2, 0x0, 0x42}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x33}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f000000d100)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000004200)=""/4090, 0xffa}], 0x1}, 0x5}], 0x1, 0x8329, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001b14010000000000000000000800"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x1, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x32}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x8}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x3}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x84}}, 0x0) 1.075800176s ago: executing program 4 (id=759): socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000005c0)='sched_switch\x00', r0, 0x0, 0xbcb}, 0x37) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="7fc3ba67a36f2b6e591ed23e48c22df5abd2d4aa9d2d5d203c4f3e63cec3d4f9338c79e192e7a10f03770feb4cdfc048cc3928a03cd358d1b97c1791e7f04a3de7f2edb97944e80eecd5f837758b58ad452f9d6f34b00b8bc46a2f5d302abdf0c93e4ad280e23f020849c56f1767059932e4e6e65800860f19325581e3c2e0b81b0c1f09b3f0771c50cbdf10f50778b628cd6df413c16f1a95f4a15192a664be6af9fd5f83a259922545c07de4e050b1c8f90d63cfbab32bd1938827e093ced5226587f33a532ccb10c0e9f99dfafba527c30ae3d1aa7044a76c"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0xd311, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r7}, &(0x7f0000000a40), &(0x7f0000000a80)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x3, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r1], 0x48) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120) 684.382034ms ago: executing program 2 (id=760): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) splice(r1, 0x0, r2, &(0x7f00000002c0), 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x80}, {0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) 593.845103ms ago: executing program 2 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x9, 0xa, 0x6) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000240007800c0003"], 0x38}}, 0x0) 426.781879ms ago: executing program 1 (id=762): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "d02a4d415f36e0c5", "1ff3b62a111037649985a884c32a21f8", "0d201ec4", "2218ee7f73e39e07"}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x1, 0x4, {{0x10, 0x4, 0x0, 0x2f, 0x40, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@lsrr={0x83, 0x23, 0x7b, [@rand_addr=0x64010101, @broadcast, @broadcast, @loopback, @multicast1, @broadcast, @multicast1, @loopback]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000180)={@dev, @initdev, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x2, 0x9, 0x0, @local, @rand_addr=' \x01\x00', 0x7, 0x80, 0xff, 0x10000}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1f4, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x17c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':@\x8f\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '.)]}\x9a*:%\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xad, 0x4, "81fcc7be26a11a8922f84578b1f1be11934d610dd67ccfb7119b322e769fa5e7645cd470712a17b2fa2234b458c0db462eb7345d345b0518aec7a1697a74cf371fc5bd8cc5c9d19e6a53a4b36a7784b9069b8bcc5104e775c1ab1c5e219f9da3fd1c641133fe94555a000fc255ccfa37c7cd9879c96311d6d810c52b62bb438c158e02ead75eab166a93556b715366836fc6111c25fc34e8f7a66107f08973ac749547d8f706321e54"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r10 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)="827ca32d0e34e52d6b2ce03e4e536e08b660495df2050fbf1ecec5dafaa2007fdb2e674fc5e0f6d49889f8443532c2a040ee31cc474f9def0df5e06d4925b3b91b44755f6540d7d6f070f32e21020a467995293a191ed31dc64ff95b68883f6f2a9483e0f93724c692c9e093d77bfdc3a5c1c14cb3b4b57bce57d1a69d0d41dafe23c1d18def2d0934f6039a9a5312f8bafe9f59b2d4b505afa38285e78f0debf8f0ff47620705420b5d5f5c2a2e4c84054ce26cbc36ef2f4fd0e0e8aae0622ad22f3d8e5e07371fb68be5d3f850acbc9f", 0xd1}, {&(0x7f0000000780)="9a1f6fd987254368abfe6dbc49278e00cd2bc4256f12b059315217b123b5fe12f149f32f39b4bc73d58b60e21831808452338b2c45996e2e95dd140092afec12e09270d8f7a13baf29d42fa88a6fb2ef4e4ee024813212d91d111e", 0x5b}, {&(0x7f0000000800)="9679cf577d699825a3b147fff05efdef5ec2c1948df3c26a06709a808d693b22de147f5fd4d9311597dae0fecd37e1d3f10939739455", 0x36}, {&(0x7f0000000840)="78e4d8122e44000ca47d92efb92d6a08520b155c7d6f6dbcf26a22ab6bd6220ca280a54c38f29dc64d6cba5ea135a4f1638a57aaafdc7c66cc6fbe07b79efd358df59fa8063ca97497c74135724e2ec4b0413bd9ec109da8d547f1d78fcc983992246c31be4a3a43b7ed2f1d6964c4616e1452a058b84676d88de7c777d040bace8f2135b29f3268f6686c380620b909e01160fd", 0x94}], 0x4, &(0x7f0000000940)="6807e9d1f677a89539c42a857f597c2dcd79e5d3880e2dbb602f3b13", 0x1c, 0x34020069}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, r11, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffffffff, 0x48}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20014042}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x78, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x4800) writev(r1, &(0x7f0000001340)=[{&(0x7f0000000d00)}, {&(0x7f0000000d40)="33cd7ff7360ff0f27f98344a9c103d7528", 0x11}, {&(0x7f0000000d80)="a8640700bfa536324381cdb187bc6eec6ac4557f356843c8f340bf7bec9e39cca759788c06bc6ef551cbea526cd528d7bd240fe8b4f98b7350e0bc4106a349d71736410d33e0fe72282f576ee849f5a1593c80ca7686e5b8ffebb5ac4ae59f92f34ef8bbf21a694e756314065035b0fa557b6b5b9e01e072ae1b3cf3720758a2405aed86b80b0e72781f6cfeae3ae5d0d341fed84314db7e2f0a2fbce303e13157f95a419e50c584c50e8bcce8380b66988b0c66288847c80780a97be00ecc15409f59477c4bfcb65195b622813b698b221b5054", 0xd4}, {&(0x7f0000000e80)="f66ab7fb9cda6dd70f95639f85a93f3b021f5e9c1028648478da47c4e018a125d4b98f320218b865aa281a1e392531bc52a02b2b22cd16c000247aea7b6848e75ce182079b6624290f266d055d91efc9f9594907f3da541ba1c9d3e6bd1d55cf96c863317ff1901a2e8f3d0e53c3820123ccedf6f14fda3f096185052d16fc1b2d34c45b966e67f7c78cb5c67d371c6c83f7d68b1bf37ac6ac9ec4f513f4447ad1ad70253b52ab8b089a7e28ad48151b33395178d900a0aaf61c0c585b36fc6f8d88ac2ecae3b1ea4c0aace1f5f163db340f6e2356113bb3783de3ce0b462865b98579be68c49c17ae450c6296755a7c94", 0xf1}, {&(0x7f0000000f80)="ff3550e5309a5a1f5f3434bb3b11ef468d8385f24282128e6fb89d82c261fc148024909703f0f02e683c0049e95db03325f40c2457690ac57e1e9c826895384990f9aaacafc3a84d0da7da16f34a13cd64b1743ab42644a4ee5868f5cd34d7bf7cc719b0f4712105d3596513302185205c9173df761d455e48dce0ba799a7b74654d7087503e80308debf8cd9d3409631f54a3aee76e6986c5d24c2e5faf0175e253dc53628be134fce67ae55fc3b65278ba2d476e051751fbcf6239cb", 0xbd}, {&(0x7f0000001040)="91107a83492caa66dda7d4886c13f5927f7d4a78c12d5d198c3b346e97bde01a1713d95343888b76577bd71bda1fc41b6e3bb1cda6c6359fc125af76da1c9a800f9d75976c2ab167019856cc2bb0b1cd30078df3268a87e1d86a43a7345a7eedf5c76856c58481ebd183931cb1cc90b9f88306c2eefc4a31cdb901850ff8e87d1c5eff73bde37670ed0765658ae93fb32a9ec6c0ed4f1defc959a390678900364fa01a005cd077986bd74a5e608430739aea9e29455711a7ae139467338fbd9548c116", 0xc3}, {&(0x7f0000001140)="e12577ea01b47408cd7e8d1db21ab06b5cb955bfa84a6dc8602c313515a3d36258e4ee0dbaa90fe1b69cdc077deb79cf903ec5ebaf743fa9cbaa2cccd5cf1042ecd46e519ff9022fcf17b4212ba812863bfd2a60a8f855590ae6e259bc53d946328b30885762a35b1877887e0ba0dff84f09ae74e85b12b1abdf0fe8015d6c6bbc489305a081244b42d5d2ba297d31ea535fb016b489067d298bced0b1840f32e2e217d5dad030e08948d1a7b2b460716576dd345ec72b20f0e6cb3337", 0xbd}, {&(0x7f0000001200)="cb5577f61ebb0a88b65141b975aeb9c9450ce64784fada63a73ee87a84f65a476f7c24fe14dfa257d08eb9d4925d836e5ee65009590cbf5d99b0982b81a11936867ae3af5d7ec5e3c3e38a55e66d55c4826043146c694aac515d7838ca62de58b96a612fd69c948196c5dda66fc9c91706463d560387dde6a13264f6b8715d9bd464982bffe096c4c9283ba0ac4cec55a134b04f0b18947ea4346425a97ce692b6c9e9222d452d5ebc293b8508a4c243ccf85d7cb6b711a4d1fbcb65d16d2cc02d4cef2959471ec903239a3c30706383bdb7", 0xd2}, {&(0x7f0000001300)="6c1ebb0ed3e64c3d72aadc513007849f209dfb10a808184973b16d4c6f1e4c44718e11fba05caafaf63dece8bdf2b45039e7f03b5e217d01de4635718c7b27", 0x3f}], 0x9) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x50, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008884}, 0xdfdffcafb1680ef0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, r11, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xf, 0x19}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044}, 0x1000c8c0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001640)={r10, 0x7f987346, 0x400, 0x87d}) sendmsg$IPCTNL_MSG_CT_GET(r14, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)={0xcc, 0x1, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}}}}]}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc28b}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1000000}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) setsockopt$WPAN_WANTACK(r14, 0x0, 0x0, &(0x7f0000001840), 0x4) sendmsg$SOCK_DESTROY(r14, &(0x7f00000019c0)={&(0x7f0000001880), 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0xb4, 0x15, 0x0, 0x70bd2b, 0x25dfdbfc, {0x23, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "4fe08bd10ebe652bb63428695fd3261f1e84dabc7993e34f372e952891e3a2836dc5d736f392550f439c9da31d0c674121067614796f307311ad5efd9569a6826ed78deebcb362d42c19f92370b3fc9e5497d489b8613a9bb533a2807fecc66caa12067617a9c3b8841e2a9599c4b069f089b8ccfc015d02c6c6116da2ba7e95efe6bc72744f27f8751f2ebc39540c590437de24306fa1e571498d"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r15 = openat$cgroup_ro(r14, &(0x7f0000001bc0)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x9, [@func={0x4, 0x0, 0x0, 0xc, 0x4}, @restrict={0xc, 0x0, 0x0, 0xb, 0x5}, @union={0x6, 0x1, 0x0, 0x5, 0x1, 0x7fffffff, [{0xa, 0x4, 0x800}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x2}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x4}, @union={0x2, 0x6, 0x0, 0x5, 0x1, 0x3, [{0x0, 0x1, 0x1}, {0xe, 0x4, 0x5}, {0x8, 0x0, 0x3}, {0x7, 0x0, 0x5}, {0xb, 0x1, 0xf}, {0x6, 0x5, 0x5}]}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x4}, @func={0x7, 0x0, 0x0, 0xc, 0x3}, @func_proto]}, {0x0, [0x58, 0x2e, 0x61, 0x5f, 0x30, 0x61, 0x5f]}}, &(0x7f0000001b00)=""/79, 0xed, 0x4f, 0x1, 0x0, 0x10000, @value=r15}, 0x28) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000001c00), &(0x7f0000001c40)=0x14) 390.328409ms ago: executing program 1 (id=763): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x14, 0x80000) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)={0xc8, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10d}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xc8}}, 0x0) 387.554752ms ago: executing program 3 (id=764): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000002000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 331.240045ms ago: executing program 2 (id=765): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081208", 0x4d}], 0x1}, 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x3fe, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0x46000040, 0x4000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4048051}, 0x4c080) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c", 0xe}, {0x0}], 0x2}}], 0x1, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000084000000000000001fc7"], 0x18, 0x48060}], 0x1, 0x200000d0) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000400)={0x0, 0x845, 0x0, 0xffff315a, 0xfffffffb, 0x2}, 0x14) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000340)={[{0x2d, 'memory'}]}, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 281.510606ms ago: executing program 3 (id=766): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056", 0x21) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x40000009) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711048000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) unshare(0x40020000) 255.190023ms ago: executing program 0 (id=767): unshare(0x6a040000) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x70) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="954add4b80a62de8eca02fb856de26f0fbbe993172211711c3c31908ca9644a9ada2ac3e44364113503e0ab1a8f9c4c4239fdbb3c7bbfc29bb4a27cf916d284c4d879d3dd2b9e3fe5cb4a14803b3018913e5112790f8bcd0f168d1abc13170bfb96e1f43cdb2734840a948afc16f56b84881f5b9adea7df229b44380146b", 0x7e}, {&(0x7f00000001c0)="54ae18a6ca3096576d63e3ecaa334bca69a80be9f968df85beb5e43f70", 0x1d}, {&(0x7f00000004c0)="d63987a2db479005e562c3dbba6a8ab3f0fdef4bbed2d63aa5c435de7f8fa222494b1d1af81143b5f10241eb17ce7c1633706411b97393b241188e2f1bf0c11d7d7fa4e8d380ddead89403f637cf6a77c753f60a618a36826a7a6d80c6fa712eb74cbfbda4a3e01f1322a4404586e0de4debb46703f7de992c2fbfb6ecc719e81d6e6aa73895dc09814927571904cfcfffefb6f848dcb4bdb86f2c122e0f366d2cfafd45c132398810843220bc56e423dff5d1438122515297d953a91a73d920ff5e7630060ce02125e08b471ed5b439a7b36a853fb6dda4136715fc5b4d865fe5857dc11e4d789e5eb39572dd93b7eca9", 0xf1}, {&(0x7f0000000280)="553c67c6c64f793eda031ab9a08687ea61e4fa425bc73da4a138a095e9964e017709bb01a3a255b7db82b21d36ab9811a5b7323089f7", 0x36}, {&(0x7f00000005c0)="3599994120e4f5860ead63453966a2741554105ce1b291456fd4f84604fd1bf6880460c12fe6bc741a1a714757135072a75732ae9dd7c5627b391e5f474f9a5ce9e07672f1f6977b353f38efa877cd2b050eeda74e7717801da19c111bb434f9e72f8ff582edf3c8025dc48ff1cf5e7fecd770c309ab263a77c8ab7c256eb7750628fc222eeb28a5cffd3c6bc78f70c33beb2f012a7678706a0ff1824f3031cf0b6f98ba30d1974818cfa33b2dab218cc78257e5e5f7a0c653071cafc4100fc02070253a994c38be4808c3c62d44039b29e13f8ae762341a53991c670f532c3f641600cac81680a732d5621406896f1560f20fb52c630174c0", 0xf9}, {&(0x7f00000006c0)="5263c40d94cb3412ef58828e98e0e774090ca8a4c952ee475ac6af251d661bc7282511d6bfdfbeb867caacf924f492ad2a436ec9b57ada9a49d2c203041fffd40b32cebbfd5b472f9de9", 0x4a}, {&(0x7f0000000380)="b5dee39426cf2aff0b2ac2900beea9bfeb303b31938e9ba81b415e0c60308a13cfe3b59f4bd024bb05ad0e9a6bc173a5ec355892e7062de9", 0x38}], 0x7, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast2}}}], 0x20}, 0x80) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', r1, 0xe}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) r6 = socket$nl_generic(0x10, 0x3, 0x10) getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, r1, 0x25, 0x4, @val=@tracing={0xffffffffffffffff, 0x7}}, 0x20) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000002d00010026bd7000fcdbdf25040000000400cd80df48e2eb8fcb86ee105f0f07d4f7a31a7faa71725a92dd0f3b2142051cf8e9f38c1725d8092d242151ed6285c400009682469cdd407d7611bf8cdbd63f1ef78d9d1f37ca0d6af7d01848f84d005a7f4d010000000000000030f5bab86ea019851690b077cf07363f9b0a7cea3b5cb6fc7ec2911cec8de32d6b40670014f17980"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000894) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0", 0x2f) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) shutdown(r2, 0x1) 0s ago: executing program 4 (id=768): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000097e79970000008"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4048811) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r7], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x44) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7fff, 0x297, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 84.451015][ T5826] cgroup: Unknown subsys name 'net' [ 84.571294][ T5826] cgroup: Unknown subsys name 'cpuset' [ 84.580531][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.375160][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.177323][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.185962][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.189348][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.198721][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.202335][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.209307][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.215163][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.223266][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.229875][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.237425][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.248363][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.251710][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.258446][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.264257][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.284535][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.310760][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.323797][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.331849][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.344329][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.347785][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.360787][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.380673][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.390582][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.399292][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.407058][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.938286][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.147089][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 90.219259][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 90.335679][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 90.348073][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.355315][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.363637][ T5838] bridge_slave_0: entered allmulticast mode [ 90.371044][ T5838] bridge_slave_0: entered promiscuous mode [ 90.411229][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.418565][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.425786][ T5838] bridge_slave_1: entered allmulticast mode [ 90.433644][ T5838] bridge_slave_1: entered promiscuous mode [ 90.446549][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 90.570768][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.626385][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.635780][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.643107][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.650435][ T5843] bridge_slave_0: entered allmulticast mode [ 90.658647][ T5843] bridge_slave_0: entered promiscuous mode [ 90.671342][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.678542][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.685691][ T5837] bridge_slave_0: entered allmulticast mode [ 90.693080][ T5837] bridge_slave_0: entered promiscuous mode [ 90.728277][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.735500][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.743468][ T5843] bridge_slave_1: entered allmulticast mode [ 90.750847][ T5843] bridge_slave_1: entered promiscuous mode [ 90.777117][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.785426][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.792708][ T5837] bridge_slave_1: entered allmulticast mode [ 90.799947][ T5837] bridge_slave_1: entered promiscuous mode [ 90.834619][ T5838] team0: Port device team_slave_0 added [ 90.889383][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.896589][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.904325][ T5846] bridge_slave_0: entered allmulticast mode [ 90.912427][ T5846] bridge_slave_0: entered promiscuous mode [ 90.921713][ T5838] team0: Port device team_slave_1 added [ 90.933092][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.958379][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.970380][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.979857][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.987106][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.994788][ T5846] bridge_slave_1: entered allmulticast mode [ 91.002169][ T5846] bridge_slave_1: entered promiscuous mode [ 91.024481][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.108619][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.115835][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.123299][ T5850] bridge_slave_0: entered allmulticast mode [ 91.132033][ T5850] bridge_slave_0: entered promiscuous mode [ 91.141755][ T5837] team0: Port device team_slave_0 added [ 91.161024][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.172897][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.198898][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.224295][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.231752][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.239691][ T5850] bridge_slave_1: entered allmulticast mode [ 91.246930][ T5850] bridge_slave_1: entered promiscuous mode [ 91.268694][ T5837] team0: Port device team_slave_1 added [ 91.277570][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.287899][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.295006][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.321393][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.332871][ T51] Bluetooth: hci0: command tx timeout [ 91.332878][ T5157] Bluetooth: hci2: command tx timeout [ 91.338461][ T5157] Bluetooth: hci1: command tx timeout [ 91.359527][ T5843] team0: Port device team_slave_0 added [ 91.393893][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.407373][ T51] Bluetooth: hci3: command tx timeout [ 91.436212][ T5843] team0: Port device team_slave_1 added [ 91.445926][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.469993][ T5846] team0: Port device team_slave_0 added [ 91.476539][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.483787][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.510113][ T51] Bluetooth: hci4: command tx timeout [ 91.510138][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.555911][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.566886][ T5846] team0: Port device team_slave_1 added [ 91.573906][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.580959][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.607570][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.676471][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.683576][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.709593][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.726554][ T5838] hsr_slave_0: entered promiscuous mode [ 91.733441][ T5838] hsr_slave_1: entered promiscuous mode [ 91.761396][ T5850] team0: Port device team_slave_0 added [ 91.782648][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.790107][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.816932][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.830049][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.837032][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.863279][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.885365][ T5850] team0: Port device team_slave_1 added [ 91.893625][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.900793][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.927591][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.054728][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.061950][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.088057][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.105445][ T5837] hsr_slave_0: entered promiscuous mode [ 92.112006][ T5837] hsr_slave_1: entered promiscuous mode [ 92.118501][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 92.124311][ T5837] Cannot create hsr debugfs directory [ 92.163489][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.170633][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.196638][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.229854][ T5843] hsr_slave_0: entered promiscuous mode [ 92.236328][ T5843] hsr_slave_1: entered promiscuous mode [ 92.243174][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 92.248998][ T5843] Cannot create hsr debugfs directory [ 92.301283][ T5846] hsr_slave_0: entered promiscuous mode [ 92.308079][ T5846] hsr_slave_1: entered promiscuous mode [ 92.314309][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 92.320357][ T5846] Cannot create hsr debugfs directory [ 92.431221][ T5850] hsr_slave_0: entered promiscuous mode [ 92.437903][ T5850] hsr_slave_1: entered promiscuous mode [ 92.444063][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 92.450434][ T5850] Cannot create hsr debugfs directory [ 92.930331][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.969723][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.986038][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.003136][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.051018][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.063206][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.073892][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.094505][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.180715][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.202371][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.214624][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.256011][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.338972][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.361466][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.376768][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.390113][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.407655][ T51] Bluetooth: hci1: command tx timeout [ 93.407858][ T5157] Bluetooth: hci0: command tx timeout [ 93.413460][ T51] Bluetooth: hci2: command tx timeout [ 93.492514][ T51] Bluetooth: hci3: command tx timeout [ 93.533277][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.546830][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.563728][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.567503][ T51] Bluetooth: hci4: command tx timeout [ 93.579831][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.591948][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.652827][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.670994][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.690674][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.697904][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.729234][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.736431][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.764723][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.776406][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.811559][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.818795][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.831093][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.838384][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.879953][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.941659][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.948871][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.970227][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.995049][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.002252][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.069674][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.106330][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.113564][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.142382][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.149617][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.222456][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.346013][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.441175][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.448446][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.500876][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.533554][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.540817][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.712768][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.885576][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.927017][ T5837] veth0_vlan: entered promiscuous mode [ 95.014330][ T5837] veth1_vlan: entered promiscuous mode [ 95.123631][ T5843] veth0_vlan: entered promiscuous mode [ 95.136007][ T5837] veth0_macvtap: entered promiscuous mode [ 95.169353][ T5843] veth1_vlan: entered promiscuous mode [ 95.180016][ T5837] veth1_macvtap: entered promiscuous mode [ 95.200973][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.255800][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.285264][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.308039][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.343735][ T1097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.364666][ T5838] veth0_vlan: entered promiscuous mode [ 95.374211][ T1097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.383502][ T1097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.395990][ T5843] veth0_macvtap: entered promiscuous mode [ 95.411096][ T5843] veth1_macvtap: entered promiscuous mode [ 95.418183][ T1097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.436213][ T5846] veth0_vlan: entered promiscuous mode [ 95.481603][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.488558][ T51] Bluetooth: hci2: command tx timeout [ 95.489822][ T5841] Bluetooth: hci1: command tx timeout [ 95.499796][ T5157] Bluetooth: hci0: command tx timeout [ 95.502779][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.513989][ T5838] veth1_vlan: entered promiscuous mode [ 95.523907][ T5846] veth1_vlan: entered promiscuous mode [ 95.556361][ T5850] veth0_vlan: entered promiscuous mode [ 95.568341][ T5157] Bluetooth: hci3: command tx timeout [ 95.586345][ T1141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.602300][ T1141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.611605][ T1141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.633578][ T1141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.652084][ T5157] Bluetooth: hci4: command tx timeout [ 95.675005][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.684330][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.704096][ T5850] veth1_vlan: entered promiscuous mode [ 95.744668][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.757765][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.771678][ T5838] veth0_macvtap: entered promiscuous mode [ 95.793985][ T5846] veth0_macvtap: entered promiscuous mode [ 95.820610][ T5838] veth1_macvtap: entered promiscuous mode [ 95.882876][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.885386][ T5846] veth1_macvtap: entered promiscuous mode [ 95.915324][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.958791][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.981325][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.004897][ T5850] veth0_macvtap: entered promiscuous mode [ 96.019013][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.058348][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.067899][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.082303][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.100497][ T5850] veth1_macvtap: entered promiscuous mode [ 96.109179][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.126775][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.136534][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.158053][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.172058][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.202581][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.214271][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.247908][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.284230][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.349398][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.426650][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.470990][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.479153][ T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.492696][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.497749][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.599466][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.624944][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.715852][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.735480][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.754585][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.764413][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.788422][ T5970] netlink: 'syz.0.8': attribute type 3 has an invalid length. [ 96.833354][ T5970] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8'. [ 96.879633][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.889914][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.020637][ T24] cfg80211: failed to load regulatory.db [ 97.092134][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.094260][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.141756][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.156198][ T5976] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.213232][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.230405][ T5976] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.240347][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.252800][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.263011][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.567959][ T5157] Bluetooth: hci0: command tx timeout [ 97.573449][ T5157] Bluetooth: hci1: command tx timeout [ 97.575056][ T5992] syz_tun: entered allmulticast mode [ 97.581631][ T5157] Bluetooth: hci2: command tx timeout [ 97.594760][ T5990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11'. [ 97.640731][ T5994] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13'. [ 97.650137][ T5841] Bluetooth: hci3: command tx timeout [ 97.660133][ T5992] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.700595][ T5998] ipvlan2: entered promiscuous mode [ 97.731880][ T5841] Bluetooth: hci4: command tx timeout [ 97.861465][ T6014] netlink: 'syz.2.17': attribute type 1 has an invalid length. [ 97.882673][ T5994] team0: Port device team_slave_0 removed [ 97.969893][ T6003] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 97.982454][ T6003] bond1 (unregistering): Released all slaves [ 98.014810][ T6005] pimreg: entered allmulticast mode [ 98.033778][ T6015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.083178][ T6005] pimreg: left allmulticast mode [ 98.157418][ T6021] tipc: Started in network mode [ 98.168961][ T6021] tipc: Node identity 6a1af84b0a1a, cluster identity 4711 [ 98.185870][ T6021] tipc: Enabled bearer , priority 0 [ 98.216760][ T6018] syzkaller0: entered promiscuous mode [ 98.225012][ T6018] syzkaller0: entered allmulticast mode [ 98.268263][ T6006] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.310439][ T6018] tipc: Resetting bearer [ 98.319823][ T6006] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 98.361239][ T5991] syz_tun: left allmulticast mode [ 98.407108][ T6017] tipc: Resetting bearer [ 98.469281][ T6017] tipc: Disabling bearer [ 98.529130][ T6036] netlink: 'syz.3.23': attribute type 3 has an invalid length. [ 98.556631][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22'. [ 98.617403][ T6039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.813305][ T6048] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 98.884311][ T6048] netlink: 48 bytes leftover after parsing attributes in process `syz.3.25'. [ 99.192562][ T6064] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET) [ 100.025807][ T6097] dvmrp8: entered allmulticast mode [ 100.148591][ T6097] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.300332][ T6106] syz.1.41 (6106) used greatest stack depth: 17864 bytes left [ 101.308093][ T6103] syz.1.41 (6103) used greatest stack depth: 16264 bytes left [ 101.594597][ T6140] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 101.754681][ T6145] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 102.203958][ T24] IPVS: starting estimator thread 0... [ 102.235776][ T6168] __nla_validate_parse: 12 callbacks suppressed [ 102.235797][ T6168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.57'. [ 102.307390][ T6167] IPVS: using max 25 ests per chain, 60000 per kthread [ 102.906259][ T6176] syzkaller1: entered promiscuous mode [ 102.927573][ T6176] syzkaller1: entered allmulticast mode [ 103.026997][ T6171] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.060177][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 103.273601][ T6196] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 103.297976][ T6196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.63'. [ 103.352476][ T6199] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 103.814274][ T6215] netlink: 'syz.2.66': attribute type 12 has an invalid length. [ 103.872787][ T6211] netlink: 1 bytes leftover after parsing attributes in process `syz.2.66'. [ 104.287782][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.308281][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 104.422490][ T6233] hsr_slave_0: left promiscuous mode [ 104.472775][ T6233] hsr_slave_1: left promiscuous mode [ 105.301069][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 105.416240][ T6258] ip6gretap1: entered promiscuous mode [ 105.445639][ T6258] ip6gretap1: entered allmulticast mode [ 105.478248][ T6260] tipc: Enabling of bearer rejected, failed to enable media [ 105.516032][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'. [ 105.527570][ T6266] warning: `syz.3.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.609356][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 105.648218][ T6270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.85'. [ 105.687092][ T6274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.85'. [ 106.289850][ T6289] netlink: 'syz.0.89': attribute type 12 has an invalid length. [ 106.302353][ T6289] netlink: 'syz.0.89': attribute type 29 has an invalid length. [ 106.316363][ T6289] Zero length message leads to an empty skb [ 106.322815][ T6287] netlink: 'syz.2.90': attribute type 39 has an invalid length. [ 106.540972][ T6287] veth0_macvtap: left promiscuous mode [ 106.616317][ T6298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.769292][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.778147][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.930282][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.932252][ T6322] Bluetooth: MGMT ver 1.23 [ 106.951949][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.197339][ T1166] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.282615][ T78] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.322048][ T6332] netlink: 'syz.2.102': attribute type 1 has an invalid length. [ 107.346309][ T6330] __nla_validate_parse: 266 callbacks suppressed [ 107.346328][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 107.372100][ T78] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.383458][ T78] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.437817][ T6334] sctp: [Deprecated]: syz.3.100 (pid 6334) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.437817][ T6334] Use struct sctp_sack_info instead [ 107.475504][ T6332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.102'. [ 108.065965][ T6354] netlink: 40 bytes leftover after parsing attributes in process `syz.3.105'. [ 108.471173][ T6371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.109'. [ 108.492899][ T6371] netlink: 'syz.0.109': attribute type 9 has an invalid length. [ 108.500111][ T6364] can: request_module (can-proto-0) failed. [ 108.503105][ T6371] netlink: 'syz.0.109': attribute type 7 has an invalid length. [ 108.524909][ T6371] netlink: 'syz.0.109': attribute type 8 has an invalid length. [ 108.806961][ T6384] syzkaller1: entered promiscuous mode [ 108.842095][ T6384] syzkaller1: entered allmulticast mode [ 109.007877][ T5157] Bluetooth: hci2: command 0x0401 tx timeout [ 109.008772][ T5841] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 109.162793][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 109.504148][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 109.529596][ T6418] netlink: 'syz.3.120': attribute type 21 has an invalid length. [ 109.572654][ T6412] netlink: 404 bytes leftover after parsing attributes in process `syz.1.117'. [ 109.592557][ T6412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.117'. [ 109.614050][ T6412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.117'. [ 109.638828][ T6412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.117'. [ 109.674680][ T6418] netlink: 'syz.3.120': attribute type 1 has an invalid length. [ 110.485214][ T6459] nbd: must specify a size in bytes for the device [ 111.015355][ T6485] netlink: 'syz.3.135': attribute type 13 has an invalid length. [ 111.047415][ T6487] netlink: 'syz.0.138': attribute type 10 has an invalid length. [ 111.144627][ T6487] batman_adv: batadv0: Adding interface: netdevsim0 [ 111.182172][ T6487] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.216121][ T6487] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 111.309404][ T6481] bond1: option arp_validate: invalid value (18446744073491447809) [ 111.320326][ T6481] bond1 (unregistering): Released all slaves [ 137.973646][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.981497][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 172.210280][ T6508] __nla_validate_parse: 8 callbacks suppressed [ 172.210301][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'. [ 172.236091][ T6506] netlink: 'syz.0.140': attribute type 1 has an invalid length. [ 172.374421][ T6521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.145'. [ 172.469432][ T6525] netlink: 'syz.2.142': attribute type 10 has an invalid length. [ 172.474744][ T6523] Bluetooth: MGMT ver 1.23 [ 172.525352][ T6521] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.624116][ T6529] netlink: 'syz.2.142': attribute type 10 has an invalid length. [ 172.629785][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.635119][ T6529] netlink: 40 bytes leftover after parsing attributes in process `syz.2.142'. [ 172.708532][ T6534] netlink: 'syz.1.148': attribute type 12 has an invalid length. [ 172.735889][ T6525] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 172.737284][ T6534] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.148'. [ 172.783048][ T6521] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.819806][ T6529] batadv0: entered promiscuous mode [ 172.829520][ T6529] batadv0: entered allmulticast mode [ 173.064171][ T6529] bond0: (slave batadv0): Releasing backup interface [ 173.099532][ T6529] bridge0: port 3(batadv0) entered blocking state [ 173.107841][ T6529] bridge0: port 3(batadv0) entered disabled state [ 173.173764][ T6521] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.335956][ T6545] netlink: 'syz.3.151': attribute type 2 has an invalid length. [ 173.369804][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.151'. [ 173.379028][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 173.381759][ T6521] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.388664][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 173.424010][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.151'. [ 173.651746][ T1097] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.691739][ T6554] syzkaller1: entered promiscuous mode [ 173.698514][ T6554] syzkaller1: entered allmulticast mode [ 173.721513][ T1097] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.777868][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.865388][ T1097] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.904249][ T6564] Illegal XDP return value 1438646307 on prog (id 51) dev N/A, expect packet loss! [ 174.233147][ T30] audit: type=1800 audit(1759504803.631:2): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.158" name="@" dev="tmpfs" ino=181 res=0 errno=0 [ 175.168546][ T6606] tipc: Enabling of bearer rejected, failed to enable media [ 175.184120][ T6606] syzkaller0: entered promiscuous mode [ 175.207907][ T6606] syzkaller0: entered allmulticast mode [ 175.534602][ T6615] netlink: 40 bytes leftover after parsing attributes in process `syz.2.167'. [ 175.584363][ T6615] netlink: 'syz.2.167': attribute type 11 has an invalid length. [ 175.709126][ T6621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.168'. [ 175.726662][ T6621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.168'. [ 175.765052][ T6622] netlink: 52 bytes leftover after parsing attributes in process `syz.1.168'. [ 175.805244][ T6617] netlink: 'syz.1.168': attribute type 13 has an invalid length. [ 175.830178][ T6617] netlink: 'syz.1.168': attribute type 17 has an invalid length. [ 176.014420][ T6617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.206734][ T6637] trusted_key: syz.1.173 sent an empty control message without MSG_MORE. [ 176.503799][ T6652] netlink: 'syz.1.176': attribute type 3 has an invalid length. [ 176.818752][ T6665] tipc: Enabling of bearer rejected, failed to enable media [ 177.417069][ T6691] pim6reg: entered allmulticast mode [ 177.467877][ T6692] pim6reg: left allmulticast mode [ 177.470336][ T6689] netlink: 240 bytes leftover after parsing attributes in process `syz.4.183'. [ 177.519905][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 177.597571][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'. [ 177.836603][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 177.876792][ T6704] netlink: 84 bytes leftover after parsing attributes in process `syz.3.186'. [ 178.891625][ T6745] netlink: 'syz.1.194': attribute type 15 has an invalid length. [ 179.085195][ T6752] netlink: 72 bytes leftover after parsing attributes in process `syz.0.198'. [ 179.212906][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.199'. [ 180.069947][ T6781] netlink: 'syz.3.205': attribute type 1 has an invalid length. [ 180.204556][ T6792] netlink: 'syz.4.208': attribute type 33 has an invalid length. [ 180.220466][ T6792] netlink: 152 bytes leftover after parsing attributes in process `syz.4.208'. [ 180.255539][ T6792] `: renamed from team0 (while UP) [ 180.295134][ T6794] Bluetooth: MGMT ver 1.23 [ 180.955047][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 181.171471][ T6829] tipc: Started in network mode [ 181.176623][ T6829] tipc: Node identity 1edff36e42f9, cluster identity 4711 [ 181.209032][ T6829] tipc: Enabled bearer , priority 0 [ 181.232806][ T6832] syzkaller0: entered promiscuous mode [ 181.242038][ T6832] syzkaller0: entered allmulticast mode [ 181.255881][ T6839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.216'. [ 181.435524][ T6832] tipc: Resetting bearer [ 181.455832][ T6810] netlink: 'syz.2.216': attribute type 17 has an invalid length. [ 181.471353][ T6810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.530989][ T6828] tipc: Resetting bearer [ 181.553791][ T6845] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 181.563161][ T6828] tipc: Disabling bearer [ 181.745941][ T6846] bond1: (slave gretap2): making interface the new active one [ 181.755117][ T6846] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 182.157901][ T6869] netlink: 'syz.3.230': attribute type 4 has an invalid length. [ 182.439939][ T6883] tipc: Started in network mode [ 182.445202][ T6883] tipc: Node identity 3ee0106be86c, cluster identity 4711 [ 182.454185][ T6883] tipc: Enabled bearer , priority 0 [ 182.463402][ T6883] syzkaller0: entered promiscuous mode [ 182.469936][ T6883] syzkaller0: entered allmulticast mode [ 182.491112][ T6881] __nla_validate_parse: 2 callbacks suppressed [ 182.491130][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 182.499009][ T6883] tipc: Resetting bearer [ 182.557751][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.237'. [ 182.576564][ T6882] tipc: Resetting bearer [ 182.585685][ T5841] Bluetooth: hci4: link tx timeout [ 182.592274][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 182.613597][ T6882] tipc: Disabling bearer [ 182.725288][ T6896] netlink: 'syz.3.240': attribute type 2 has an invalid length. [ 182.734491][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 182.751511][ T6897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.239'. [ 183.446998][ T6930] tipc: Enabled bearer , priority 0 [ 183.463897][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 183.628514][ T6930] syzkaller0: entered promiscuous mode [ 183.639578][ T6930] syzkaller0: entered allmulticast mode [ 183.676164][ T6930] tipc: Resetting bearer [ 183.696698][ T6928] tipc: Resetting bearer [ 183.763572][ T6928] tipc: Disabling bearer [ 183.914843][ T6950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.256'. [ 184.078202][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 184.166124][ T6961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.260'. [ 184.597315][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 184.608164][ T5157] Bluetooth: hci4: command 0x0406 tx timeout [ 184.726539][ T6994] tipc: Started in network mode [ 184.734289][ T6994] tipc: Node identity 669fa5f30568, cluster identity 4711 [ 184.743151][ T6994] tipc: Enabled bearer , priority 0 [ 184.783293][ T6994] syzkaller0: entered promiscuous mode [ 184.792846][ T6994] syzkaller0: entered allmulticast mode [ 184.988474][ T7002] tipc: Resetting bearer [ 184.997031][ T6992] tipc: Resetting bearer [ 185.016380][ T6992] tipc: Disabling bearer [ 185.173970][ T7010] netlink: 'syz.4.270': attribute type 2 has an invalid length. [ 185.196319][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.270'. [ 185.218155][ T7013] netlink: 'syz.4.270': attribute type 2 has an invalid length. [ 185.828968][ T7040] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 186.061271][ T7048] erspan0: entered allmulticast mode [ 186.336845][ T7059] tipc: Started in network mode [ 186.351355][ T7059] tipc: Node identity ea69a623d598, cluster identity 4711 [ 186.359357][ T7059] tipc: Enabled bearer , priority 0 [ 186.367507][ T7059] syzkaller0: entered promiscuous mode [ 186.376235][ T7059] syzkaller0: entered allmulticast mode [ 186.436141][ T7059] tipc: Resetting bearer [ 186.498161][ T7056] tipc: Resetting bearer [ 186.546942][ T7056] tipc: Disabling bearer [ 187.116425][ T7097] tc_dump_action: action bad kind [ 187.836308][ T7128] tipc: Enabled bearer , priority 0 [ 187.854302][ T7128] syzkaller0: entered promiscuous mode [ 187.861916][ T7128] syzkaller0: entered allmulticast mode [ 187.931876][ T7128] tipc: Resetting bearer [ 187.966575][ T7126] tipc: Resetting bearer [ 188.032181][ T7126] tipc: Disabling bearer [ 188.065191][ T7138] tipc: Enabled bearer , priority 0 [ 188.077646][ T7138] syzkaller0: entered promiscuous mode [ 188.091907][ T7138] syzkaller0: entered allmulticast mode [ 188.163009][ T5831] IPVS: starting estimator thread 0... [ 188.194481][ T7138] netlink: 'syz.2.301': attribute type 5 has an invalid length. [ 188.245305][ T7138] tipc: Resetting bearer [ 188.277923][ T7150] IPVS: using max 23 ests per chain, 55200 per kthread [ 188.342847][ T7137] tipc: Resetting bearer [ 188.489191][ T7155] __nla_validate_parse: 6 callbacks suppressed [ 188.489211][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 188.528928][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 188.538841][ T7137] tipc: Disabling bearer [ 188.571509][ T7158] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 188.611010][ T7160] syzkaller1: entered promiscuous mode [ 188.616549][ T7160] syzkaller1: entered allmulticast mode [ 188.622876][ T7158] netlink: 224 bytes leftover after parsing attributes in process `syz.4.306'. [ 188.654012][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 188.794893][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 189.076625][ T7171] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 189.248420][ T7190] raw_sendmsg: syz.3.310 forgot to set AF_INET. Fix it! [ 189.894806][ T7220] netlink: 'syz.0.317': attribute type 13 has an invalid length. [ 189.932811][ T7220] netlink: 14589 bytes leftover after parsing attributes in process `syz.0.317'. [ 190.173948][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 190.232527][ T7232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'. [ 190.625426][ T7254] tipc: Enabled bearer , priority 0 [ 190.648200][ T7254] syzkaller0: entered promiscuous mode [ 190.670604][ T7254] syzkaller0: entered allmulticast mode [ 190.788351][ T7254] tipc: Resetting bearer [ 190.823341][ T7257] tipc: Enabling of bearer rejected, failed to enable media [ 190.850988][ T7252] tipc: Resetting bearer [ 190.864164][ T7263] netlink: 'syz.0.327': attribute type 11 has an invalid length. [ 190.930448][ T7252] tipc: Disabling bearer [ 191.023376][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 191.249130][ T7263] netlink: 132 bytes leftover after parsing attributes in process `syz.0.327'. [ 191.402624][ T7266] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.616172][ T7266] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.912007][ T7266] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.386894][ T7266] batman_adv: batadv0: Removing interface: netdevsim0 [ 192.489937][ T7266] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.280048][ T78] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.526648][ T78] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.582331][ T7319] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.712696][ T1166] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.743998][ T7374] __nla_validate_parse: 2 callbacks suppressed [ 193.744019][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.338'. [ 193.971990][ T7387] netlink: 132 bytes leftover after parsing attributes in process `syz.0.341'. [ 194.588528][ T7422] netlink: 'syz.4.346': attribute type 1 has an invalid length. [ 194.600954][ T7422] netlink: 224 bytes leftover after parsing attributes in process `syz.4.346'. [ 194.629662][ T7406] syzkaller1: entered promiscuous mode [ 194.635432][ T7406] syzkaller1: entered allmulticast mode [ 194.841885][ T7428] vlan0: entered promiscuous mode [ 195.135330][ T7437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.352'. [ 196.203966][ T7463] tipc: Enabled bearer , priority 0 [ 196.233049][ T7461] syzkaller0: entered promiscuous mode [ 196.248005][ T7461] syzkaller0: entered allmulticast mode [ 196.334066][ T7461] tipc: Resetting bearer [ 196.366254][ T7460] tipc: Resetting bearer [ 196.417460][ T7460] tipc: Disabling bearer [ 196.652179][ T7474] netlink: 'syz.3.361': attribute type 11 has an invalid length. [ 196.729451][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 197.459210][ T7483] bridge_slave_1: left allmulticast mode [ 197.464964][ T7483] bridge_slave_1: left promiscuous mode [ 197.514132][ T7483] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.567866][ T7483] bridge_slave_0: left allmulticast mode [ 197.578409][ T7520] netlink: 256 bytes leftover after parsing attributes in process `syz.3.366'. [ 197.596496][ T7483] bridge_slave_0: left promiscuous mode [ 197.603656][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 197.631649][ T7483] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.760051][ T7520] bridge_slave_1: left allmulticast mode [ 197.769910][ T7520] bridge_slave_1: left promiscuous mode [ 197.775735][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.792025][ T7520] bridge_slave_0: left allmulticast mode [ 197.808867][ T7520] bridge_slave_0: left promiscuous mode [ 197.824943][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.951454][ T7537] netlink: 'syz.0.370': attribute type 21 has an invalid length. [ 198.156915][ T7539] netlink: 256 bytes leftover after parsing attributes in process `syz.2.369'. [ 198.178278][ T7539] netlink: 48 bytes leftover after parsing attributes in process `syz.2.369'. [ 198.415044][ T7556] netlink: 'syz.1.371': attribute type 13 has an invalid length. [ 198.693609][ T7563] netlink: 'syz.2.375': attribute type 2 has an invalid length. [ 198.713425][ T7563] netlink: 132 bytes leftover after parsing attributes in process `syz.2.375'. [ 198.899730][ T7572] netlink: 'syz.0.377': attribute type 1 has an invalid length. [ 199.233368][ T7586] netlink: 165 bytes leftover after parsing attributes in process `syz.1.381'. [ 199.415231][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.421895][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.204167][ T7589] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 200.214937][ T7605] netlink: 'syz.4.386': attribute type 10 has an invalid length. [ 200.279334][ T7605] `: Device ipvlan1 failed to register rx_handler [ 200.457000][ T7619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.389'. [ 200.495929][ T7317] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.631580][ T7627] netlink: 32 bytes leftover after parsing attributes in process `syz.2.391'. [ 200.674390][ T7629] netlink: 'syz.1.392': attribute type 1 has an invalid length. [ 200.720473][ T7629] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.776384][ T7629] bond2: (slave veth3): Enslaving as an active interface with a down link [ 200.830186][ T7630] bond2: (slave dummy0): making interface the new active one [ 200.839470][ T7630] dummy0: entered promiscuous mode [ 200.845610][ T7630] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 200.943490][ T7634] bond1: option ad_user_port_key: invalid value (65535) [ 200.951426][ T7634] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 200.963356][ T7634] bond1 (unregistering): Released all slaves [ 201.062661][ T7646] netlink: 4928 bytes leftover after parsing attributes in process `syz.2.393'. [ 201.425011][ T7662] netlink: 'syz.3.399': attribute type 21 has an invalid length. [ 201.737104][ T7672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.401'. [ 202.477018][ T7686] tipc: Enabled bearer , priority 0 [ 202.563682][ T7686] syzkaller0: entered promiscuous mode [ 202.591630][ T7686] syzkaller0: entered allmulticast mode [ 202.625802][ T7696] netlink: 32 bytes leftover after parsing attributes in process `syz.1.409'. [ 202.675246][ T7686] tipc: Resetting bearer [ 202.686524][ T7685] tipc: Resetting bearer [ 202.745769][ T7685] tipc: Disabling bearer [ 202.827898][ T7702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.410'. [ 203.062944][ T7718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.414'. [ 203.266354][ T7725] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 203.937685][ T7730] netlink: 'syz.4.416': attribute type 3 has an invalid length. [ 203.948148][ T7730] netlink: 132 bytes leftover after parsing attributes in process `syz.4.416'. [ 204.105404][ T7755] sctp: [Deprecated]: syz.2.422 (pid 7755) Use of int in max_burst socket option. [ 204.105404][ T7755] Use struct sctp_assoc_value instead [ 204.284982][ T7765] tipc: Enabled bearer , priority 0 [ 204.309101][ T7765] syzkaller0: entered promiscuous mode [ 204.314637][ T7765] syzkaller0: entered allmulticast mode [ 204.324530][ T7766] netlink: 'syz.2.426': attribute type 13 has an invalid length. [ 204.345473][ T7766] netlink: 'syz.2.426': attribute type 17 has an invalid length. [ 204.478328][ T7766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.498317][ T7765] tipc: Resetting bearer [ 204.528238][ T7764] tipc: Resetting bearer [ 204.571263][ T7764] tipc: Disabling bearer [ 204.619177][ T7766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.622341][ T7769] siw: device registration error -23 [ 204.722789][ T7766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.736844][ T7775] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.429'. [ 204.767439][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.045502][ T7782] veth2: entered promiscuous mode [ 205.061159][ T7782] veth2: entered allmulticast mode [ 205.762956][ T7808] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 205.781631][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.439'. [ 205.990923][ T7822] netem: incorrect ge model size [ 206.001738][ T7822] netem: change failed [ 206.769945][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 211.732423][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 211.734724][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.739893][ T5847] Bluetooth: hci2: command 0x0401 tx timeout [ 211.748277][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 212.028127][ T1141] dummy0: left promiscuous mode [ 214.128465][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.687445][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.624065][ T7900] syz_tun: entered allmulticast mode [ 256.625985][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.461'. [ 256.695656][ T7899] syz_tun: left allmulticast mode [ 256.844779][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'. [ 256.883205][ T7913] sctp: [Deprecated]: syz.3.467 (pid 7913) Use of int in maxseg socket option. [ 256.883205][ T7913] Use struct sctp_assoc_value instead [ 256.924290][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 257.021764][ T7924] netlink: 248 bytes leftover after parsing attributes in process `syz.1.469'. [ 257.083551][ T7927] Bluetooth: MGMT ver 1.23 [ 257.132590][ T7927] geneve2: entered promiscuous mode [ 257.169024][ T7317] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.206576][ T7317] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.235621][ T7317] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.292537][ T7317] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.346871][ T7941] netlink: 'syz.0.472': attribute type 4 has an invalid length. [ 257.358683][ T7934] bridge0: port 3(veth0_to_bridge) entered blocking state [ 257.384311][ T7934] bridge0: port 3(veth0_to_bridge) entered disabled state [ 257.435493][ T7934] veth0_to_bridge: entered allmulticast mode [ 257.475087][ T7941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.472'. [ 257.489358][ T7934] veth0_to_bridge: entered promiscuous mode [ 257.516490][ T7934] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.549012][ T7934] bridge0: port 3(veth0_to_bridge) entered blocking state [ 257.556483][ T7934] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 257.576817][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 257.631974][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.472'. [ 257.855271][ T7958] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 257.863365][ T7927] syzkaller0: entered promiscuous mode [ 257.863393][ T7927] syzkaller0: entered allmulticast mode [ 257.899196][ T7958] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 257.916911][ T7958] netlink: 160 bytes leftover after parsing attributes in process `syz.0.472'. [ 257.934945][ T7958] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 257.943862][ T7945] netlink: 96 bytes leftover after parsing attributes in process `syz.1.473'. [ 257.955224][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 257.980274][ T7955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.232357][ T7965] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 259.422949][ T7973] delete_channel: no stack [ 259.603827][ T7990] netlink: 'syz.0.481': attribute type 21 has an invalid length. [ 260.034966][ T8013] netlink: 'syz.1.489': attribute type 21 has an invalid length. [ 260.411289][ T8019] netlink: 'syz.2.491': attribute type 21 has an invalid length. [ 260.421136][ T8027] bond3: option arp_validate: invalid value (18446744073491447809) [ 260.432289][ T8027] bond3 (unregistering): Released all slaves [ 260.534533][ T8033] scsi_nl_rcv_msg: discarding partial skb [ 260.662258][ T8043] erspan0: entered promiscuous mode [ 260.676045][ T8043] erspan0: left promiscuous mode [ 260.863355][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.878120][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.903439][ T8055] netlink: 'syz.1.500': attribute type 10 has an invalid length. [ 261.480246][ T8084] netlink: 'syz.3.506': attribute type 3 has an invalid length. [ 261.521301][ T8085] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 261.655960][ T8092] !: renamed from dummy0 [ 262.399807][ T8118] netlink: zone id is out of range [ 262.415405][ T8118] netlink: zone id is out of range [ 262.435650][ T8118] netlink: zone id is out of range [ 262.467239][ T8118] netlink: zone id is out of range [ 262.497623][ T8118] netlink: zone id is out of range [ 262.514056][ T8118] netlink: zone id is out of range [ 262.540902][ T8118] netlink: zone id is out of range [ 262.546089][ T8118] netlink: zone id is out of range [ 262.597244][ T8118] netlink: zone id is out of range [ 262.782615][ T8114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.803614][ T8114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.974243][ T8114] vlan0: left promiscuous mode [ 263.392016][ T8162] __nla_validate_parse: 8 callbacks suppressed [ 263.392035][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.519'. [ 263.425512][ T8106] dvmrp0: entered allmulticast mode [ 263.433072][ T8097] netlink: 'syz.3.509': attribute type 49 has an invalid length. [ 263.462372][ T8144] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 263.471700][ T7319] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.485609][ T8165] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.527435][ T8162] bridge0: port 3(batadv0) entered disabled state [ 263.563616][ T8162] bridge_slave_1: left allmulticast mode [ 263.573998][ T8162] bridge_slave_1: left promiscuous mode [ 263.584172][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.599680][ T8162] bridge_slave_0: left allmulticast mode [ 263.609988][ T8162] bridge_slave_0: left promiscuous mode [ 263.616542][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.763256][ T7319] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.773085][ T7319] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.654548][ T8201] Can't find ip_set type hash:n [ 264.745738][ T8207] netlink: 36 bytes leftover after parsing attributes in process `syz.2.532'. [ 264.830370][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 264.840354][ T8210] netlink: 'syz.4.531': attribute type 1 has an invalid length. [ 264.932655][ T8210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.120939][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'. [ 265.148626][ T8225] veth0_to_bridge: left allmulticast mode [ 265.164925][ T8225] veth0_to_bridge: left promiscuous mode [ 265.182473][ T8225] bridge0: port 3(veth0_to_bridge) entered disabled state [ 265.204698][ T8225] bridge_slave_1: left allmulticast mode [ 265.213153][ T8225] bridge_slave_1: left promiscuous mode [ 265.222469][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.240185][ T8225] bridge_slave_0: left allmulticast mode [ 265.265523][ T8225] bridge_slave_0: left promiscuous mode [ 265.289299][ T8225] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.436726][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 266.308194][ T8269] tipc: Enabled bearer , priority 0 [ 266.340961][ T8269] syzkaller0: entered promiscuous mode [ 266.346493][ T8269] syzkaller0: entered allmulticast mode [ 266.393334][ T8269] tipc: Resetting bearer [ 266.503408][ T8280] sctp: [Deprecated]: syz.3.548 (pid 8280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.503408][ T8280] Use struct sctp_sack_info instead [ 266.538752][ T8281] netlink: 'syz.0.547': attribute type 1 has an invalid length. [ 266.546896][ T8264] tipc: Resetting bearer [ 266.620476][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 266.631169][ T8264] tipc: Disabling bearer [ 266.710210][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 266.744149][ T8281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.809478][ T8294] netlink: 200 bytes leftover after parsing attributes in process `syz.4.546'. [ 266.833750][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.546'. [ 266.848758][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 266.896420][ T8284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.941748][ T8284] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 266.989255][ T8284] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 267.041503][ T8285] bridge0: entered allmulticast mode [ 267.180929][ T8286] veth3: entered promiscuous mode [ 267.213742][ T8286] bond1: (slave veth3): Enslaving as an active interface with a down link [ 267.262130][ T8288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.276120][ T8288] bond0: (slave rose0): Enslaving as an active interface with an up link [ 268.976232][ T8371] __nla_validate_parse: 4 callbacks suppressed [ 268.976254][ T8371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.572'. [ 268.995557][ T8373] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 269.082580][ T8377] !: renamed from dummy0 (while UP) [ 269.109568][ T8377] netlink: 'syz.1.574': attribute type 1 has an invalid length. [ 269.129533][ T8374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.572'. [ 269.229985][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'. [ 269.286756][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.577'. [ 269.309026][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.577'. [ 269.331765][ T8387] netlink: 'syz.3.577': attribute type 4 has an invalid length. [ 269.978444][ T8416] net_ratelimit: 39 callbacks suppressed [ 269.978466][ T8416] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 271.090791][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 271.145206][ T8456] netlink: 'syz.0.586': attribute type 1 has an invalid length. [ 271.194926][ T8454] netlink: 48 bytes leftover after parsing attributes in process `syz.4.585'. [ 271.224960][ T8456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.586'. [ 271.274355][ T8454] netlink: 'syz.4.585': attribute type 1 has an invalid length. [ 271.293395][ T8454] netlink: 140 bytes leftover after parsing attributes in process `syz.4.585'. [ 271.347532][ T8454] netlink: 96 bytes leftover after parsing attributes in process `syz.4.585'. [ 271.972118][ T8474] !: renamed from dummy0 (while UP) [ 273.643237][ T8545] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 273.674408][ T8545] bond2 (unregistering): Released all slaves [ 274.279983][ T8571] __nla_validate_parse: 4 callbacks suppressed [ 274.280005][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 274.413921][ T8571] netlink: 'syz.1.612': attribute type 1 has an invalid length. [ 274.516721][ T8571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.612'. [ 274.924447][ T8592] sctp: [Deprecated]: syz.2.614 (pid 8592) Use of int in maxseg socket option. [ 274.924447][ T8592] Use struct sctp_assoc_value instead [ 275.124679][ T8598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.186422][ T8598] netlink: 60 bytes leftover after parsing attributes in process `syz.0.619'. [ 275.408531][ T8608] netlink: 48 bytes leftover after parsing attributes in process `syz.2.622'. [ 275.448598][ T8612] sctp: [Deprecated]: syz.4.624 (pid 8612) Use of int in max_burst socket option deprecated. [ 275.448598][ T8612] Use struct sctp_assoc_value instead [ 275.469197][ T8610] vlan2: entered promiscuous mode [ 275.474288][ T8610] bond0: entered promiscuous mode [ 275.480931][ T8610] bond_slave_0: entered promiscuous mode [ 275.493607][ T8610] bond_slave_1: entered promiscuous mode [ 275.522314][ T8612] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 275.530944][ T8612] syzkaller1: linktype set to 6 [ 275.644041][ T8617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.625'. [ 275.692540][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'. [ 275.776227][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 276.050556][ T8643] tipc: Can't bind to reserved service type 1 [ 276.113446][ T8647] netlink: 'syz.0.632': attribute type 39 has an invalid length. [ 276.127378][ T8634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.629'. [ 276.170871][ T8634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.629'. [ 276.213443][ T8634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.629'. [ 276.230356][ T8643] netlink: 'syz.0.632': attribute type 5 has an invalid length. [ 276.514800][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.522615][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.964238][ T8634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.003101][ T8634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.326889][ T8657] syz0: Port: 1 Link DOWN [ 277.326990][ T7319] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.376096][ T7319] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.472487][ T7319] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.488773][ T7324] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.038655][ T8686] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 278.055480][ T8686] bond3 (unregistering): Released all slaves [ 278.102242][ T8694] netlink: 'syz.0.641': attribute type 1 has an invalid length. [ 278.346786][ T8702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 278.354523][ T8702] IPv6: NLM_F_CREATE should be set when creating new route [ 278.361856][ T8702] IPv6: NLM_F_CREATE should be set when creating new route [ 278.467337][ T8702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 278.713913][ T8714] netlink: 'syz.1.648': attribute type 1 has an invalid length. [ 278.779828][ T8714] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20001 [ 279.371435][ T8707] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 279.732919][ T8764] __nla_validate_parse: 173 callbacks suppressed [ 279.732939][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 279.813010][ T8764] team1: entered promiscuous mode [ 279.820237][ T8764] team1: entered allmulticast mode [ 279.825920][ T8764] 8021q: adding VLAN 0 to HW filter on device team1 [ 279.999107][ T8774] sctp: [Deprecated]: syz.2.663 (pid 8774) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.999107][ T8774] Use struct sctp_sack_info instead [ 280.362904][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 280.385140][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 280.507718][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 280.632136][ T8817] netlink: 56 bytes leftover after parsing attributes in process `syz.4.676'. [ 280.719500][ T8822] tipc: Enabled bearer , priority 0 [ 280.727476][ T8822] syzkaller0: entered promiscuous mode [ 280.733042][ T8822] syzkaller0: entered allmulticast mode [ 280.760068][ T8822] tipc: Resetting bearer [ 280.769951][ T8821] tipc: Resetting bearer [ 280.782918][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.678'. [ 280.800870][ T8821] tipc: Disabling bearer [ 281.129082][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 281.188930][ T8842] netlink: 'syz.2.683': attribute type 4 has an invalid length. [ 281.248092][ T8843] netlink: 'syz.2.683': attribute type 4 has an invalid length. [ 281.780834][ T8857] netlink: 44 bytes leftover after parsing attributes in process `syz.4.688'. [ 281.849758][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.688'. [ 282.033369][ T8873] netlink: 'syz.2.691': attribute type 1 has an invalid length. [ 282.287860][ T8888] bond0: entered promiscuous mode [ 282.293337][ T8888] bond_slave_0: entered promiscuous mode [ 282.311519][ T8888] bond_slave_1: entered promiscuous mode [ 282.337804][ T8888] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 282.372674][ T8888] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 282.724940][ T8905] tipc: Failed to remove unknown binding: 66,1,1/0:2070503374/2070503376 [ 282.835815][ T8912] netlink: 'syz.4.700': attribute type 15 has an invalid length. [ 282.872430][ T8912] netlink: 666 bytes leftover after parsing attributes in process `syz.4.700'. [ 282.986890][ T8916] tipc: Enabled bearer , priority 0 [ 282.995852][ T8916] syzkaller0: entered promiscuous mode [ 283.005115][ T8916] syzkaller0: entered allmulticast mode [ 283.030605][ T8916] tipc: Resetting bearer [ 283.066723][ T8915] tipc: Resetting bearer [ 283.096732][ T8915] tipc: Disabling bearer [ 283.213277][ T8920] veth3: entered promiscuous mode [ 283.527386][ T8941] bond0: (slave bond_slave_0): Releasing backup interface [ 283.548761][ T8941] bond0: (slave bond_slave_1): Releasing backup interface [ 283.591947][ T8941] `: Port device team_slave_1 removed [ 283.600855][ T8941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.611090][ T8941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.635665][ T8941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.645218][ T8941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.545731][ T8971] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 285.006145][ T8992] __nla_validate_parse: 5 callbacks suppressed [ 285.006164][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 285.159120][ T8999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.725'. [ 285.309785][ T9002] bond2: (slave 0!): Releasing active interface [ 285.326257][ T9002] bridge_slave_0: left allmulticast mode [ 285.336885][ T9002] bridge_slave_0: left promiscuous mode [ 285.343481][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.362872][ T9002] bridge_slave_1: left allmulticast mode [ 285.368768][ T9002] bridge_slave_1: left promiscuous mode [ 285.374244][ T9007] netlink: 128 bytes leftover after parsing attributes in process `syz.0.728'. [ 285.383137][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.390412][ T9007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.728'. [ 285.555207][ T9002] bond0: (slave bond_slave_0): Releasing backup interface [ 285.565469][ T9002] bond0: (slave bond_slave_1): Releasing backup interface [ 285.573947][ T9014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.727'. [ 285.600938][ T9002] team0: Port device team_slave_0 removed [ 285.609795][ T9002] team0: Port device team_slave_1 removed [ 285.616525][ T9002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.628585][ T9002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.646944][ T9002] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 286.012111][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 286.034138][ T9029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.733'. [ 286.156852][ T9038] batadv_slave_0: entered promiscuous mode [ 286.246350][ T9042] netlink: 'syz.0.733': attribute type 21 has an invalid length. [ 286.335898][ T9042] netlink: 152 bytes leftover after parsing attributes in process `syz.0.733'. [ 286.371749][ T9005] netlink: 'syz.2.727': attribute type 17 has an invalid length. [ 286.416874][ T9005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.633216][ T9118] netlink: 44 bytes leftover after parsing attributes in process `syz.2.749'. [ 287.668573][ T9102] team0 (unregistering): Port device team_slave_0 removed [ 287.699364][ T9102] team0 (unregistering): Port device team_slave_1 removed [ 287.837316][ T9111] netlink: 'syz.4.748': attribute type 13 has an invalid length. [ 287.845288][ T9111] netlink: 100 bytes leftover after parsing attributes in process `syz.4.748'. [ 287.961157][ T9131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.101435][ T9133] bond3: entered promiscuous mode [ 288.127909][ T9133] bond3: entered allmulticast mode [ 288.160585][ T9133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.246115][ T9140] ip6gre1: entered allmulticast mode [ 288.273184][ T9140] netlink: 'syz.4.754': attribute type 1 has an invalid length. [ 288.282134][ T9139] netlink: 'syz.4.754': attribute type 1 has an invalid length. [ 289.558848][ T9181] [ 289.561235][ T9181] ====================================================== [ 289.568260][ T9181] WARNING: possible circular locking dependency detected [ 289.575308][ T9181] syzkaller #0 Not tainted [ 289.579726][ T9181] ------------------------------------------------------ [ 289.586748][ T9181] syz.1.763/9181 is trying to acquire lock: [ 289.592761][ T9181] ffffffff8de20648 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 289.602372][ T9181] [ 289.602372][ T9181] but task is already holding lock: [ 289.609751][ T9181] ffff8881437e58f8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 289.620051][ T9181] [ 289.620051][ T9181] which lock already depends on the new lock. [ 289.620051][ T9181] [ 289.630561][ T9181] [ 289.630561][ T9181] the existing dependency chain (in reverse order) is: [ 289.639586][ T9181] [ 289.639586][ T9181] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 289.648309][ T9181] lock_acquire+0x120/0x360 [ 289.653351][ T9181] blk_alloc_queue+0x538/0x620 [ 289.658661][ T9181] __blk_mq_alloc_disk+0x15c/0x340 [ 289.664320][ T9181] nbd_dev_add+0x46c/0xae0 [ 289.669280][ T9181] nbd_init+0x168/0x1f0 [ 289.673964][ T9181] do_one_initcall+0x233/0x820 [ 289.679358][ T9181] do_initcall_level+0x104/0x190 [ 289.684876][ T9181] do_initcalls+0x59/0xa0 [ 289.689831][ T9181] kernel_init_freeable+0x334/0x4b0 [ 289.695576][ T9181] kernel_init+0x1d/0x1d0 [ 289.700443][ T9181] ret_from_fork+0x436/0x7d0 [ 289.705576][ T9181] ret_from_fork_asm+0x1a/0x30 [ 289.710896][ T9181] [ 289.710896][ T9181] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 289.718119][ T9181] lock_acquire+0x120/0x360 [ 289.723180][ T9181] fs_reclaim_acquire+0x72/0x100 [ 289.728657][ T9181] prepare_alloc_pages+0x153/0x610 [ 289.734303][ T9181] __alloc_frozen_pages_noprof+0x123/0x370 [ 289.740651][ T9181] __alloc_pages_noprof+0xa/0x30 [ 289.746143][ T9181] pcpu_populate_chunk+0x182/0xb30 [ 289.751833][ T9181] pcpu_alloc_noprof+0xcbf/0x1720 [ 289.757413][ T9181] bpf_map_alloc_percpu+0xbc/0x1b0 [ 289.763076][ T9181] prealloc_init+0x225/0x630 [ 289.768204][ T9181] htab_map_alloc+0x6ce/0xc70 [ 289.773408][ T9181] map_create+0xaa6/0x1640 [ 289.778450][ T9181] __sys_bpf+0x5f0/0x860 [ 289.783254][ T9181] __x64_sys_bpf+0x7c/0x90 [ 289.788206][ T9181] do_syscall_64+0xfa/0x3b0 [ 289.793239][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.799675][ T9181] [ 289.799675][ T9181] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 289.807419][ T9181] validate_chain+0xb9b/0x2140 [ 289.812902][ T9181] __lock_acquire+0xab9/0xd20 [ 289.818102][ T9181] lock_acquire+0x120/0x360 [ 289.823138][ T9181] __mutex_lock+0x187/0x1350 [ 289.828253][ T9181] pcpu_alloc_noprof+0x286/0x1720 [ 289.833812][ T9181] sbitmap_init_node+0x1e1/0x630 [ 289.839279][ T9181] sbitmap_queue_init_node+0x3e/0x4d0 [ 289.845175][ T9181] blk_mq_init_tags+0x15c/0x2d0 [ 289.850554][ T9181] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 289.856559][ T9181] blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 289.862894][ T9181] nbd_start_device+0x17f/0xb10 [ 289.868275][ T9181] nbd_genl_connect+0x135b/0x18f0 [ 289.873830][ T9181] genl_family_rcv_msg_doit+0x212/0x300 [ 289.879909][ T9181] genl_rcv_msg+0x60e/0x790 [ 289.885049][ T9181] netlink_rcv_skb+0x208/0x470 [ 289.890335][ T9181] genl_rcv+0x28/0x40 [ 289.894846][ T9181] netlink_unicast+0x82c/0x9e0 [ 289.900144][ T9181] netlink_sendmsg+0x805/0xb30 [ 289.905433][ T9181] __sock_sendmsg+0x21c/0x270 [ 289.910819][ T9181] ____sys_sendmsg+0x505/0x830 [ 289.916199][ T9181] ___sys_sendmsg+0x21f/0x2a0 [ 289.921405][ T9181] __x64_sys_sendmsg+0x19b/0x260 [ 289.926872][ T9181] do_syscall_64+0xfa/0x3b0 [ 289.931989][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.938414][ T9181] [ 289.938414][ T9181] other info that might help us debug this: [ 289.938414][ T9181] [ 289.948649][ T9181] Chain exists of: [ 289.948649][ T9181] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 289.948649][ T9181] [ 289.962491][ T9181] Possible unsafe locking scenario: [ 289.962491][ T9181] [ 289.970216][ T9181] CPU0 CPU1 [ 289.975584][ T9181] ---- ---- [ 289.980950][ T9181] lock(&q->q_usage_counter(io)#50); [ 289.986358][ T9181] lock(fs_reclaim); [ 289.992958][ T9181] lock(&q->q_usage_counter(io)#50); [ 290.000883][ T9181] lock(pcpu_alloc_mutex); [ 290.005406][ T9181] [ 290.005406][ T9181] *** DEADLOCK *** [ 290.005406][ T9181] [ 290.013723][ T9181] 6 locks held by syz.1.763/9181: [ 290.018764][ T9181] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.026996][ T9181] #1: ffffffff8f12a3e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.036006][ T9181] #2: ffff888024e1f9c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 290.047532][ T9181] #3: ffff888024e1f8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 290.058645][ T9181] #4: ffff8881437e58f8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 290.069418][ T9181] #5: ffff8881437e5930 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 290.080412][ T9181] [ 290.080412][ T9181] stack backtrace: [ 290.086329][ T9181] CPU: 1 UID: 0 PID: 9181 Comm: syz.1.763 Not tainted syzkaller #0 PREEMPT(full) [ 290.086352][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 290.086371][ T9181] Call Trace: [ 290.086381][ T9181] [ 290.086389][ T9181] dump_stack_lvl+0x189/0x250 [ 290.086415][ T9181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.086436][ T9181] ? __pfx__printk+0x10/0x10 [ 290.086463][ T9181] ? print_lock_name+0xde/0x100 [ 290.086490][ T9181] print_circular_bug+0x2ee/0x310 [ 290.086513][ T9181] check_noncircular+0x134/0x160 [ 290.086537][ T9181] validate_chain+0xb9b/0x2140 [ 290.086566][ T9181] __lock_acquire+0xab9/0xd20 [ 290.086585][ T9181] ? pcpu_alloc_noprof+0x286/0x1720 [ 290.086607][ T9181] lock_acquire+0x120/0x360 [ 290.086622][ T9181] ? pcpu_alloc_noprof+0x286/0x1720 [ 290.086650][ T9181] __mutex_lock+0x187/0x1350 [ 290.086668][ T9181] ? pcpu_alloc_noprof+0x286/0x1720 [ 290.086689][ T9181] ? stack_depot_save_flags+0x41b/0x860 [ 290.086719][ T9181] ? kasan_save_track+0x4f/0x80 [ 290.086790][ T9181] ? __kasan_kmalloc+0x93/0xb0 [ 290.086810][ T9181] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 290.086831][ T9181] ? blk_mq_init_tags+0x83/0x2d0 [ 290.086851][ T9181] ? pcpu_alloc_noprof+0x286/0x1720 [ 290.086872][ T9181] ? blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 290.086888][ T9181] ? nbd_start_device+0x17f/0xb10 [ 290.086908][ T9181] ? nbd_genl_connect+0x135b/0x18f0 [ 290.086929][ T9181] ? __pfx___mutex_lock+0x10/0x10 [ 290.086944][ T9181] ? netlink_sendmsg+0x805/0xb30 [ 290.086962][ T9181] ? ___sys_sendmsg+0x21f/0x2a0 [ 290.086982][ T9181] ? __x64_sys_sendmsg+0x19b/0x260 [ 290.087011][ T9181] pcpu_alloc_noprof+0x286/0x1720 [ 290.087040][ T9181] sbitmap_init_node+0x1e1/0x630 [ 290.087058][ T9181] ? __kasan_kmalloc+0x93/0xb0 [ 290.087083][ T9181] sbitmap_queue_init_node+0x3e/0x4d0 [ 290.087107][ T9181] blk_mq_init_tags+0x15c/0x2d0 [ 290.087132][ T9181] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 290.087162][ T9181] ? blk_mq_update_nr_hw_queues+0x928/0x1ab0 [ 290.087178][ T9181] ? kfree+0x18e/0x440 [ 290.087197][ T9181] blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 290.087222][ T9181] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 290.087246][ T9181] ? sysfs_add_file_mode_ns+0x259/0x300 [ 290.087276][ T9181] nbd_start_device+0x17f/0xb10 [ 290.087299][ T9181] ? device_create_file+0xf4/0x1c0 [ 290.087324][ T9181] nbd_genl_connect+0x135b/0x18f0 [ 290.087348][ T9181] ? __pfx_nbd_genl_connect+0x10/0x10 [ 290.087376][ T9181] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 290.087404][ T9181] genl_family_rcv_msg_doit+0x212/0x300 [ 290.087432][ T9181] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 290.087461][ T9181] ? stack_trace_save+0x9c/0xe0 [ 290.087486][ T9181] genl_rcv_msg+0x60e/0x790 [ 290.087512][ T9181] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.087533][ T9181] ? __pfx_nbd_genl_connect+0x10/0x10 [ 290.087559][ T9181] netlink_rcv_skb+0x208/0x470 [ 290.087575][ T9181] ? __lock_acquire+0xab9/0xd20 [ 290.087590][ T9181] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.087613][ T9181] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.087636][ T9181] ? down_read+0x1ad/0x2e0 [ 290.087655][ T9181] genl_rcv+0x28/0x40 [ 290.087676][ T9181] netlink_unicast+0x82c/0x9e0 [ 290.087707][ T9181] ? __pfx_netlink_unicast+0x10/0x10 [ 290.087747][ T9181] ? netlink_sendmsg+0x642/0xb30 [ 290.087764][ T9181] ? skb_put+0x11b/0x210 [ 290.087783][ T9181] netlink_sendmsg+0x805/0xb30 [ 290.087805][ T9181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.087824][ T9181] ? aa_sock_msg_perm+0xf1/0x1d0 [ 290.087849][ T9181] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 290.087876][ T9181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.087894][ T9181] __sock_sendmsg+0x21c/0x270 [ 290.087920][ T9181] ____sys_sendmsg+0x505/0x830 [ 290.087943][ T9181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.087966][ T9181] ? import_iovec+0x74/0xa0 [ 290.087988][ T9181] ___sys_sendmsg+0x21f/0x2a0 [ 290.088010][ T9181] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.088045][ T9181] ? __fget_files+0x2a/0x420 [ 290.088068][ T9181] ? __fget_files+0x3a0/0x420 [ 290.088095][ T9181] __x64_sys_sendmsg+0x19b/0x260 [ 290.088116][ T9181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.088141][ T9181] ? rcu_is_watching+0x15/0xb0 [ 290.088164][ T9181] ? do_syscall_64+0xbe/0x3b0 [ 290.088183][ T9181] do_syscall_64+0xfa/0x3b0 [ 290.088199][ T9181] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.088227][ T9181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.088244][ T9181] ? clear_bhb_loop+0x60/0xb0 [ 290.088264][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.088282][ T9181] RIP: 0033:0x7fa15c98eec9 [ 290.088299][ T9181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.088315][ T9181] RSP: 002b:00007fa15d84f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.088334][ T9181] RAX: ffffffffffffffda RBX: 00007fa15cbe5fa0 RCX: 00007fa15c98eec9 [ 290.088347][ T9181] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 290.088358][ T9181] RBP: 00007fa15ca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 290.088368][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.088378][ T9181] R13: 00007fa15cbe6038 R14: 00007fa15cbe5fa0 R15: 00007fff88644ef8 [ 290.088398][ T9181] [ 290.603475][ T5157] block nbd1: Receive control failed (result -32) [ 290.611033][ T5157] block nbd1: Receive control failed (result -32) [ 290.618303][ T5157] block nbd1: Receive control failed (result -32) [ 290.624950][ T5157] block nbd1: Receive control failed (result -32) [ 290.632268][ T5157] block nbd1: Receive control failed (result -32) [ 290.779198][ T9194] ip6gretap1: left promiscuous mode [ 290.784486][ T9194] ip6gretap1: left allmulticast mode [ 290.809139][ T9194] veth3: left promiscuous mode [ 290.814229][ T9194] ip6gre1: left allmulticast mode [ 290.840010][ T9195] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 290.862227][ T9080] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.874637][ T9080] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.904924][ T9080] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.913499][ T9080] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0