last executing test programs: 4.59997141s ago: executing program 3 (id=942): syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="98a20200080211000000ffffffffffff0802dbf99fbd2d4490fdec110000"], 0x1e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3400000014000100fcffffff000000000a3f0000", @ANYBLOB="14000100000000000000000000000000000000010800080002040000523c87672543c27ecea60f2feeecad434ad36cb4689e66dac94871f31237a947355c497601c1b36d1e301a391a8ee08a8e6ffd50671a9120409f4625619142071f1597e76e14a1cdb3cb0e560de2995f46d1aed630bcfc53a7a2db3254794eab967dccbef9d44d502019956f0203ae8ec2a25a42d56fa2df3ecb09cebf92", @ANYRES32=r3, @ANYRES16=r0, @ANYRES32=r2, @ANYRESOCT=r1, @ANYBLOB="a5b4a3080c085d7721890d56ad6969132ea64a5e20cc8500f954b9f28839a55676e80c1df1d6a996e9bd6c27861bf4c1ef50236e67e062fc416d028d0ddacafb68978e08150961622618685f059e18cb13f115297489", @ANYRES8=r1], 0x34}}, 0x4010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7, 0x10, 0x2, 0x8, {{0xb, 0x4, 0x0, 0x6, 0x2c, 0x68, 0x0, 0x4, 0x29, 0x0, @multicast2, @local, {[@cipso={0x86, 0x17, 0xfffffffffffffffe, [{0x1, 0x11, "80dc697fdb012a7bd339be8cd4f6ab"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x7, 0xe, 0x5, 0x38, @empty, @private1, 0x7800, 0x1, 0x7}}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x1, 0x40, 0x4, 0xfffffffc, {{0x13, 0x4, 0x0, 0x2, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast1, @multicast2, {[@rr={0x7, 0x7, 0x9c, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0x91, 0x1, 0xb, [{@empty, 0x1f1f}, {@private=0xa010101, 0x3}, {@rand_addr=0x64010101, 0x9}]}, @lsrr={0x83, 0x7, 0xb3, [@empty]}, @cipso={0x86, 0xc, 0x1, [{0x6, 0x6, "3073ba12"}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000000400)={@empty}, &(0x7f0000000440)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x8, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x5, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x1, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000011dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r9, &(0x7f0000012380)={&(0x7f0000012080)=@generic={0x1e, "3c8d3b4d83b69172b85c60d54a5faa2fdee7af0b69f3ee83d14731ce8d03eccfd7fa67526f73f7445d55147fedac962d6f5d4eacd05ad23808ad770c3078fac37af7ddacd9a7aaee6bc7b134a8f387148861475187fc20355b56d582e97851a29f1d82d195aea4e29f75a7294256a2c0890ceff90596246c07bb3378b1c3"}, 0x80, 0x0}, 0x150) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x10, 0x40, 0x0, 0x7, {{0x22, 0x4, 0x0, 0x4, 0x88, 0x64, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x2, [{@multicast1, 0x63a5}]}, @rr={0x7, 0x7, 0xaa, [@private=0xa010101]}, @cipso={0x86, 0x42, 0x3, [{0x7, 0xd, "2d25420191710d2e65c197"}, {0x2, 0x12, "f6cbe71d85565bbaed73b9718c29e862"}, {0x7, 0xa, "7545a25cc8375fb5"}, {0x2, 0x6, "a8452d48"}, {0x2, 0x6, "a5e800fd"}, {0x0, 0x7, "021d351610"}]}, @lsrr={0x83, 0x1f, 0xf8, [@dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @loopback]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0x6e, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x79, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000900)={@dev, @dev}, &(0x7f0000000940)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00'}) 4.359367067s ago: executing program 1 (id=945): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000ffb000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.207924551s ago: executing program 1 (id=948): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e3b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x16c, r9, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xed3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf2bd}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x98bc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb7a1}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20008081}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd64, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0x0, 0x7, 0x200}, [@RTA_IIF={0x8, 0x3, r8}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @multicast1}]}, 0x34}}, 0xea5bc50b6199d7fe) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x9, 0x5, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8000, 0x700, 0x8, 0x10}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'pimreg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000327bd7000fcdbdf25100000001c000180080003000100000008000100", @ANYRES32=r11, @ANYBLOB="080001004af226d65b102e5b654ac5c480776fcd76665f47f6d2100ebc22d05ad3a28a3fb4fdd4341c41a7cc93bafc5fafd6ccd169c1ff2bc3f18de92975dc866f2f0f2bdbbe0a7cd87df26a24f9e462233d31ed9eb85a7b4528e5849c54418a412554cd4292d112b58c53f379227856cb0eff35ff7fcc2bc7b0cb132cec28deb1ae65f308f8676d9f5cfe93f37402a6f8c8c45b1797fb7d3051eeec96248c522767df52d9dae2ef190646d5dd614ed3bb9cddcd7ac86303aafe26017e4cae05990a5a9ac485037199181c7e1538d3046c1dc0b8ae26de168c8d3f973bc8c64df0624a6c7b8150289ee9fbe88d44840259f06a", @ANYRES32=r12, @ANYBLOB="08000700ff000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 3.972901449s ago: executing program 1 (id=951): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000eaffffff0000000003000000850000002c00000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000eaffffff0000000003000000850000002c00000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.821131245s ago: executing program 1 (id=954): r0 = socket$kcm(0x21, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, '\x00', "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4800000006602"}, 0x28) socket$kcm(0x10, 0x2, 0x4) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r0], 0x10b8}, 0x106) recvfrom(r0, 0x0, 0x0, 0x983706c3b03e3dca, 0x0, 0x0) 3.820389214s ago: executing program 4 (id=955): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x1c}}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008f080000000000000010000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d480000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 3.757591471s ago: executing program 3 (id=956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x6, 0x12, r1, 0xfffff000) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) (async) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x2000) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100000000000000000000000a000000"], 0x28}}, 0x0) 3.5927925s ago: executing program 3 (id=958): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x7ffffffe}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0xb90, 0x0, &(0x7f0000000680)="b9ff030060be250d698cbe512490", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) close(r2) (async) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) (async) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) 3.46432731s ago: executing program 2 (id=959): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0xfffffffffffffd56}}, 0x200480c5) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)) 3.313817555s ago: executing program 2 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x17, 0x6, 0x3, 0x100}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000070000000600", @ANYRES32=r1, @ANYBLOB="0001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000dc53213bde1e49973f235c546185b5e046618c1d571f8fb93d6a4593cc22fc662fa3aa73a612b11a3baa7445fa99a02ccc40e0a5cf9c57be223b6"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r3}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x1, r3}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x1, r3}, 0x38) sendmsg$nl_generic(r0, 0x0, 0xc000) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1100104}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14800000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000ff"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)={0x134, r4, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x4b}}}}, [@NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x36, 0xb, 0x2, 0x32, 0xb, 0xa13a1bef465d471d, 0x28, 0xb, 0x60, 0x16, 0x30, 0x2, 0x48, 0x1b, 0x60, 0x36, 0x60, 0x1b, 0x1b, 0x6, 0x30, 0x3, 0xb, 0x1, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x2, 0x8, 0x221, 0xb, 0x4, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7ff, 0x6, 0x7, 0x7, 0xf7d1, 0x4, 0x8]}}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0xfffa, 0x3ff, 0x8001, 0x7, 0x0, 0x40, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x5}, {0x0, 0x8}, {0x4}, {0x2, 0x7}, {0x4, 0x3}, {0x2, 0x3}, {0x3, 0x6}, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x3}, {0x0, 0x4}, {0x2, 0x7}, {0x7, 0x9}, {0x7, 0x5}, {0x4, 0x5}, {0x6, 0x4}, {0x1, 0x7}, {0x7, 0x3}, {0x6, 0x8}, {0x5, 0x3}, {}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x5, 0x1}, {0x7, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x4, 0x2}, {0x0, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x2, 0x2}, {0x2}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0xa}, {0x3, 0x5}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x1}, {0x4, 0x7}, {0x1, 0xa}, {0x7, 0x8}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x2}, {0x0, 0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0xa}, {0x1, 0x3}, {0x6, 0x6}, {0x5, 0x7}, {0x7, 0x9}, {0x1, 0x9}, {}, {0x6, 0x3}, {0x2, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x4, 0xa}, {0x2}, {0x7, 0x9}, {0x6, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x7, 0x1}, {0x2, 0x5}, {0x6}, {0x7, 0x7}, {0x3, 0x3}, {0x4}, {0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x4, 0x1}, {0x7, 0x9}, {0x7, 0x6}, {0x4, 0x7}, {0x2}, {0x3, 0x3}, {0x5}, {0x1}, {0x4, 0x9}, {0x0, 0x2}, {0x0, 0x1}, {0x5, 0x9}, {0x7, 0x7}]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x10, 0x5, 0x6, 0x8, 0x4, 0x40]}}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4800}, 0xc0d1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x4, 0x9, {{0xc, 0x4, 0x2, 0x2, 0x30, 0x66, 0x0, 0x2, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@generic={0x94, 0x11, "f64711795df66266bdc7bf7b0e4bba"}, @lsrr={0x83, 0x7, 0x75, [@broadcast]}, @noop]}}}}}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0xcc, r7, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x39}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6d}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1c}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000380)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r8, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x46, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r10, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) 2.908144407s ago: executing program 0 (id=961): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r3, 0x80000001, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000640)={{}, {0x6}, 0x11d, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)="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", 0x1d0, 0x0, &(0x7f00000001c0)={0x2, 0xf1, {0x1, 0xc, 0xb8, "1fd023cd7c0dca94b221cd0125ac4bfdca997b873d5a5bee136a12d29ecaf790230f2d052092cabf60d557ac89d6c175051420129aaf92bbbdd99c1807119919698e353411aa2524c5a15933c0cb17c8fdebf10e6fb439644d87d1465b5602b4f23798bb09e8db5871400eca0557182f9e9b15c2dcc45260ec33a9401eeb7ecb1a987b2f04e354b5b4e5da45056aa77686125745095992cf1b3e4baf7771d5b42c0c6cb509e7b5df3adaab6c8e654d74aa6230becc1a7281", 0x2c, "2f1e00892c817d13e08055ae7f05bac200419d74732a480d1e185c0c8f9f4a2a6c334df8c0aca069d6ab7e01"}, 0x75, "692687993b8c203cbb6fe9082d5fe654e1db4f744d73aef4a540f341df24972edd789bc208cd5c3974bf83ea5f5ba727c703871ea3186192d7ac5e895845dfaa1883871674c5276acfadfb52bf855bf9d1852fb638d51a61095d50261317e6807ceb220be786ab903955ca07699bf5af026764a7c6"}, 0x172}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r1, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000) syz_emit_ethernet(0x9e, &(0x7f0000000100)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x2b, 0x0, 0x2}, @srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}}}, 0x0) 2.840737673s ago: executing program 1 (id=962): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x62040200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket(0x2, 0x80805, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.650258125s ago: executing program 0 (id=963): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x77}}}}, [@NL80211_ATTR_TESTDATA={0x2a, 0x45, "f87e77f9065017965beb09639776942e318fe1f217b789dc54d5f93c1c51fe68c5a67cc22c01"}, @NL80211_ATTR_TESTDATA={0x61, 0x45, "3f6b9168e862a7575253e33b08f0108b2fa60ed7f68b3c9da31c85398345182cb0814a4705fe822aa4de8d6da018a7c8120152da2dd08b52b1a2ae82377bb30cb1be3198fc3293ae868ed945a4c4ea03fe4731bab131e32eface523aec"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000005) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000012c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001280)={&(0x7f0000000240)={0x1020, r0, 0x400, 0x70bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x302, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xbd}, @broadcast, @device_a, @random="533f2e1b7b9d", {0x3, 0x7}, @value=@ver_80211n={0x0, 0x5, 0x1, 0x3}}, 0x32c5, 0x10, @random=0x4, @void, @void, [{0xdd, 0xff, "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"}, {0xdd, 0xac, "58f70f76fd706ebc78dc4ffb2d457131bacda02825e08942845cabb3814d48021b03e2da42fdd74f74b4525212e80770fc7203a64cb7600475888de04924dae46b7e33bdd7c3935e4849ee7cd219b076bfa9f5af4ec43e4c06fc0f6906e59c247809628db96f271fad0ae0ac05aff47859cb138981cf9852a4e13b695009e0c1f120bbc332e7e4b924a2f7c6e570422e79d8365a44efb0e9de7efa45f61db98a5a09a7a858e978e4923f9d0f"}, {0xdd, 0x84, "67711c91160de7f60ac177105f38be09a44ddc3dfaaa5bb29725920576719792b754b0d3ec08c1d873432ea9476ecfca3619f6024c42e21033bf72828e171e72597b557b67244599374be70f78bbc6a2824a65a978c1a119fbbe44946a0531540989998e7039a5a8350fb70a6a77cbab82358a1042141f576455cb37590634b778a3a761"}, {0xdd, 0xa5, "180bc913cccbe9384f1f1bd99b4a2f1e7cd2a556436d4d370b08cde9fe2b338cea5717e88b2a8a6b5ce9e8b63ff5467990111b65a86474ecafa09e8da6e3a1dce3c4d2ca7312563641d61317b4229133f13ca47c3a4fb804ce501db96c41b9ed13a86f1e30f749abafa2dc2328786eeb161f8ba76c391907947012baf28b7dc6f4d54207c998f7c98e26e2fe6bcd00d9fdfe0086032f3cfb68f9a460de41b069b10254ffca"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x321, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0xa5}, @device_a, @device_b, @initial, {0x5, 0x81}}, 0x0, 0x2, 0x56, @val={0x10, 0x1, 0xf8}, [{0xdd, 0xf9, "9cea9a0b6e1659872c3b97d6e2bf8f5f02f50e69fb87db07216691c2be76af6300dd60fb9ca248633466e3b96ffc9c17b788df65d5cfbc156dc6192ab1bdefcaa38067e9e0782b5878251c85fa5ea73d4917be01d9f23767c4315c837392e83acf507643054c4b5cf15d9b0211f9226f4cd2d2773dac371d1b9b10721eb62b0d7a7447abfba4e5a2df23b4ce47ec42e7f1f588ec9d982ca1df3cef53381dbd5a19602310289422d6a54bc5af3812c06be9eaa1f19552126032217ffeed1044941ae59c9f6a507577959f73a681de7f41a79511e990dd844f5b15769da79d5c8e481695cd4080880147ace894714ccee9788cf4eac085e14c27"}, {0xdd, 0xc6, "50b778b1815f99337b9600d4b87a828b6ede432f2a1751be50084ea56e3bb3529c8542dac5ab6dcf0a14839a4bb6d197f4128039fd8e4e9aa145d7581a3ed15b841b7fd2a1c7caf4842c3412e0a51f205f6935937204769e97f984f56c44f006be4a7dc217e462ed1f56c4dcbd079fa9ba7e9bb624cd7caad0f0a463447d88256e6ee30a268bc718f0cebe5283c3ff855fce57c99a2057e988df68b86c53350a0588c256ffa6181a1f8fd4d01d198ca857076dda1386a2ddfe3c3d91f4d5430f5be7b49c8e12"}, {0xdd, 0x3c, "ab719d079e5a99058281564f0c7119655f25b77f5e386b7010046140126311c38edb85d65e45b3990f9600ef26574536f182dd011174b826635d8131"}, {0xdd, 0xf9, "13423a08862fc6b3788ac8b6a4c8e170c460eb03395d07d3a33f68472a06c03838dfec53bcd324470adef11a75e9903bc0e6ca2a0c6e908aae8ada3940df8dfc07aa3e256d6bbfbe9d1ca6dc1f926050c19a732b0554f68b0b123ed17d0c10e5b5f080b130031bd3c54daa80b7264e5d75fb5de6434fca5d206ae29b9384c9194c1953d8c92836f8220a859b9305f09de7ade32b199deeb1424e98fb4a010a3862b337e0dd89d93069acc60c6dbda7f20c57f699027a9dff3b40413c2b8acaa72949982eef8fd754097d57006e6089a0bc14c98c391810784f318ffbcb96b86cbd4a0105db332d7f57b2f8f557c8ff00aaef2fbbc1c6b17ed0"}]}}, @NL80211_ATTR_FRAME={0x1e, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, {0x28c}, @device_a, @device_b, @from_mac=@broadcast, {0x1, 0x4}}, 0x1a, @void}}, @NL80211_ATTR_FRAME={0x673, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_b, @broadcast, @random="2ba588e06469", {0x9, 0xb}, @value=@ver_80211n={0x0, 0xf, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x1360, 0x3, @broadcast, {0x0, 0x1c, @random="6b5e24716e179b83ba13a1dd26625ef975ca1bbfc4d139bd4d1a78e1"}, @void, @void, [{0xdd, 0x9f, "987ae66edef0cfabc748d134b4a1a123577ed6f6650aa8349a98ceacddab77b545c2ec887d8c36787a6e7a674c50399d6f46a7fa291c227f404c25036e59103e32081909f79b6fe31e907fbf4dd54d6e09853e317c3603f035bb17ebbcfd6cd51c947e835c5acfe2f37359c3aa0a839e323645126def0d5accabe7f157dfdb187499b684c122404eb3dff24205a6afe70ada7a675c608750edc23f26e9244b"}, {0xdd, 0x97, "35fea577f9cbdd90bcf17d95e37da2993ecc72ef1d298a3cd2c6a989ad5c84a3d2976c6faa070440da5752c2112a60964a229d58bc61b63f3c23a2182c9f94494adae4bfb7dd25159d49dfd9d65920d7b97efcb8c3aebb0f3d47c519c7c4c960584a5e1810a55592b298d8a740a255e5256626043e2c20c2a6b777036cff44c1607189e9d3c181b4eba77606e26fd75047871b827dd360"}, {0xdd, 0x8c, "80e93eeadfbedfa2442b275be1f48306e0f73241a7decf2576b44361ef768618c1c7724da94ac77b5d0601aa1a7f5446da4bd5c0df9aeb7ff2bde36f9f083ce5fdc21bfcee63c541dd04a77a1817acedcc8a0c5b6f2792acdb8a2141f8a20fad03cb572db761442bc86e98072a468a674eb0e5f77710337c6a788ec1b30333281a83c297415eb82168b35769"}, {0xdd, 0xbc, "5369568d360ea724e274a95ffc1dc16f22c18633dc0fc7038353a70f8c1dff284efb971b2f7711bd9da1198a055f0e0c0265a903e5cf36a4e1bbb47ea0957e7f69ed4df92c2e18a2c1332de471935828a185bcfef8fb5d0d94924cfa979e19584f538ce92b6fe565409b6b083e20a52659bf128a9c83792e6eea797cf29d7ce61677baa68b04579feba305cbc88dc99d272cae86cabc8e4cad16465f0aaac1aa3aba62ebc9cb7f402d85053b9c42e82c32f252011b83cc22680b2835"}, {0xdd, 0x65, "70883536608b43955eef5e0084e8c63e1a1b46ddc93e63893089484b6d40d177615d82513961b2f692c162cb5fcdc342324665bb86028bf69390d63a5b82350cc7dd329d21f5cd87712610760e2315d2b66b32446f01d0c42be605b5f813dc100375c8706e"}, {0xdd, 0xb8, "2e5fe4dbf7fc4e5d25117246454494ac0f62159ae467961b008a984827a57f0d0216d1d9dd09dc674428f29aa97dcf01af0f31de35e8b26eb07b6496e75e8e4580abed4fadb1d7da3dfa68802c7e74babf490052482e54bdef0533966caa743cf82a26ae283702dbc4ac2f3f7f70eb5da1fe04b3ab205a406175cf6c51dbb0e1f573b2557380cd5078223d2661308b2bf0ca1759c6bc502e90a338d4c2d96bcb543eeb89fc96842fc0f172742040492338a31a855c66dc4a"}, {0xdd, 0x76, "791e711d33afa63e8bac5db657902325f59ee3ac7a71f0c86375794d18890d923a7c659d7775854dbaa9fa8b71f1c4a04e9a105993c84f2ab8f0273bc1bf82f63f9fdf286271077026f7f1b5ebbe07401f9d269efbb5f7ce7ce32243d8c474c1583ebd54c7297adba35b976bc9431a0d5ae06904372e"}, {0xdd, 0x62, "43c8cdf1baad7e7fd1b725f4e424b891da53aa229071029772f62692c9d452fcdbcbb0ff29389283afa38f315760638a58a83c61c054af377b3ce1181eb4dfa54ebdb58144b1f9296bad888d1fd52ce8253e7982e2e632cd654c39be7588bfaded11"}, {0xdd, 0xd2, "ccaf2751d115f06c8c351f98e66276884fb5c271455299393fb7677c9a136b4538ab19ff2597e90edca9e64de92f797271aa9943daff6ae1c6ed9d96571e60924b8610be6962eca7f7f503ffb861794a7b609355ff31bfdf81ae83178714fbfa27fa01d9dda6b782274faea0b76556dd0560c07e036958ecb952de66c869174941587a81501c31bc17c22d4aa664761f292f475bcab3e85800b4372690a332a776b82f4fadf0755d3fe1d84c589a835dedf1ee80a27c51dae9d9b1a4b663ad9858e270d4298055f1adaf4af92928d5119c7f"}, {0xdd, 0xd2, "509f946cfb47f2efc33dec589dd6ddfb4ae42ef08ebdaf2b24faa9364ba3a73baf389c51b361d1d8ac29fe467d192cf491b96963d76d5ec4ecd820094ddba6c58cd53a6cdf7e4deda4517cbbe5226de5824bc460ede09f7e75d71875772a89eb8339e8128f5406a82a90ef41defb74f4bbf4dd931b601e64a89783d071e8404a9553b7be50bcc050e6f11d8350226cc1cb85fecb0aaa1a9cb7d5ec6c9b1b412301df5b9dacac147d01aa51ef7e7e319c3618ff2a45ff3c1d20f93a6e36f75d2dcb8d21847b38a697bfee83b164abacf84129"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x7f21}}}, @NL80211_ATTR_FRAME={0x283, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_a, @device_a, {0x8}, @device_a, @void, @value=@ver_80211n={0x0, 0x6, 0x2, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1}}, @random="327950f919d1857c1cdfa728b61d5bcc2f935d55e38eb47bfb3d9a00ddf01052865a8dbc5fb2380fc41610b38cfc7f36f7e4359ef737278a4f64a52bf3615e4ffea000a3063c9d5500ba89129ee3d81279a30f15fbb5937f2b0c77220f4447adb3317c9d410971b88a496332f7c3b9563b01dfeddde9a322c66e41d246c267bf5b04c4b53286452d08fd0d97869b41d80d0fbb0483fa9643f7741bfc88c259310617dfecc7db565b7db244c07ff560c01a728517887bf108110a69e345b9abdeb821ab1c29d2e646adfdbcf2499e30e660c4e11436978965def75f6614ac953702f1a7ab2976990b71eb630d52f9d1b2a4e14e0eec753ad1b32216791a508749056379cfa737e7838f5f7d0f28012b30578fb831d1652920007acc991737bfd81d0a7c37068844182893957d70b21a90a778083d0659dc61e5d5b28f8b5440cfd58b5030e5e926ebc73bbc4302d05ca8332d918e61b568c14faaf0d5b5451e874a15f4c377cc8e40a82952f53b3b38d9671d94530a9fce5e90ab52b00d9e89462b766ebf6c2bd74773422a26f5b4a8e90b2065b296d105ba05207285c20f86c412f5224b598aa2c0d4e6b5f9f7fdb61525e3abfa4ce640fff20182b6a8bf40f613d231d5d348cbd8fa2e8eba05b17b7664b7ecb5c7436e9e1b996a580d8ac131c5bb618dc04b158b0f30e6dee54648cc50011becab6693b904ac599a04b0279c40c566c947920cf9bf36d37a24c749c8727309342ed9e9ea1887a8426268aa6cea1b17af04d1ed437a07cefa2be5e0c4c576558b07a8e2e63add6c0dfd06253fc6f43733d07396df4e2fa8a74c21714c48f0fc6187c547dff21e346ec1"}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x8e, 0x33, @ctrl_frame=@ba={{}, {0xc}, @device_b, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x9}, [{0x0, 0xd, {0xa, 0xa}, "8dd4802a611466f6"}, {0x0, 0xb, {0x2, 0x1}, "3210689a21006721"}, {0x0, 0x9, {0x2, 0xaa}, "9eca4855337a7962"}, {0x0, 0x4, {0x0, 0x1}, "7a286c1e3c0c7177"}, {0x0, 0x0, {0x1, 0x7}, "0cff2b2c6fa03e77"}, {0x0, 0x1, {0xf, 0x4}, "45389b1e03291a18"}, {0x0, 0x6, {0x5}, "e0924e0a31cb2f4e"}, {0x0, 0x4, {0xd, 0x3}, "54d29eebbf07ceb9"}, {0x0, 0x9, {0x4, 0x9}, "b0c2bfa3996f48d7"}], {0x0, 0x0, {0x5, 0xf}, "91ebdeb1e92f5997"}}}}]}, 0x1020}}, 0x1) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8809}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000810) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x80, r0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6e3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9b}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x811}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x32}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x20000001) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, r0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x53}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4004045) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), r4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001740)={'ip_vti0\x00', &(0x7f00000016c0)={'syztnl1\x00', 0x0, 0x8000, 0x7, 0x5, 0x7, {{0x12, 0x4, 0x2, 0x2, 0x48, 0x67, 0x0, 0x8, 0x29, 0x0, @private=0xa010102, @remote, {[@generic={0x82, 0xb, "c93346ef85e5b67fa1"}, @end, @generic={0x89, 0x12, "53429ce853356960a1e80e5d8b5ccf97"}, @rr={0x7, 0xf, 0xce, [@dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @noop, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001800)={'syztnl2\x00', &(0x7f0000001780)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x2, 0x4, 0x8, @mcast2, @rand_addr=' \x01\x00', 0x7, 0x7, 0x2, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000018c0)={'syztnl2\x00', &(0x7f0000001840)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x3, 0x54, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x3e}, 0x40, 0x10, 0x1, 0xb}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001980)={0x1, 0x58, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000019c0)={'pim6reg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001a00)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001ac0)={'syztnl1\x00', &(0x7f0000001a40)={'ip6_vti0\x00', 0x0, 0x2f, 0xe5, 0x0, 0x10001, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x700, 0x3, 0x1}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000001c40)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b00)={0xdc, r5, 0x422dca2d56f9270c, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x84, r0, 0x201, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffeffff}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}]}, 0x84}, 0x1, 0x0, 0x0, 0x80010}, 0x1) sendmsg$nl_generic(r1, &(0x7f0000001f80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e40)={0xe4, 0x3f, 0x10, 0x70bd27, 0x25dfdbfc, {0x6}, [@generic="41d8f72b3ebb8987780819f64d8418b68cafc7407d94ba481a57f600b9b109973e6ccfe7fa716540e66fca5bc5e6645e34d914f710cf6246da1d09577d45100e08476b49f5e7073353ae31cec50d33d77ddd7d3a806fe1404cbee17b2b0c4e974beece90f434caf8b46e10c14c77158509826b9831d7aa36263055ca7d3a33b74e4e305c5f3a7121fa88412c00da018d8d35810651b9e9a497f5b41b50bd513c77efacb0be7f2e51bdf8da34f2f00a9704d05d23701b3e081b935585799326823f0fa4a637e2f600ee1932a9ded4"]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000010}, 0xc0) r13 = socket(0x21, 0x5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002040)={{0x1, 0xffffffffffffffff}, &(0x7f0000001fc0), &(0x7f0000002000)=r3}, 0x20) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000002600)={{r4, &(0x7f0000002080)='batadv_slave_0\x00', 0x201, &(0x7f00000020c0)={@align=0x1, {0x52, 0x1, 0x2, 0xfffffffffffffff8}}, 0x3, &(0x7f0000002100), &(0x7f0000002140)=0x4}, 0x5, &(0x7f0000002540)=[{0x2, 0x40, &(0x7f0000002180)='syztnl2\x00', &(0x7f00000021c0)="572ce7eb105e2bfda6b05106e3a6d8fe240bdf87109d0e8ef5956263593a3d967c812bee4c557d91b6bafe59729d8b29100c25d748306f2ac04fca70f208ff49f7ba16cf0296db9471af0e3051e2ef2855b65c086dc592cf0d2533e7668ef545aea71757ed7bddae43d551e03f1179748a4b5077751599dfd891827f42741993dca5a8fd6d8469e89114a4765c997cbf5c8d019f655047333a959860e468f499d46465b16921c9ddf8e019fc5ec6a385d10eadd9869f103eeacad6a853b1be", 0xbf, 0x10}, {0x3, 0x6, &(0x7f0000002280)='\x00', &(0x7f00000022c0)="081780b12dce9b480650746caa1d743ef9af771a37b724d126da692d422e30139073c230d9096e88fbadf944", 0x2c, 0x10}, {0x2, 0x4, &(0x7f0000002300)='ip_vti0\x00', &(0x7f0000002340)="32f1048d42776662db8714225330301dd3b15a66d6a2127ce7be79f0ac29aa6329f9d1", 0x23, 0xa}, {0x1, 0xa7d55ff, &(0x7f0000002380)='pim6reg0\x00', &(0x7f00000023c0)="13e27fa0f8c1fc7d199508dfd0ca0b9b98d9ef7d37b961387507ac0e4f87d100a5b991c6f178341b81b04860974428d22af5229a26833193f7c66ac64ccaa7c59f4332d0b07e153c950b787fa5c67e2e6449fed497dd2e1520cb9a72c4350e95d43214c1a01dfa0dd861d43405119cbd88d4bb24c46f2a2f5def8adbc585a6af5025ed01cc70695d02d3c88d279477c6ae15b4cd5981020ebf242c41be4c7c7cb0282150bdcb2c09536655a943617ad47afaf14a94cd8d4dfe7ffa5677fb79c948917b99d272457f4fb09c901c4ac350fd0588b3ca0b200d249b80b68af3d537659005f6cbd5cf60238126b825f775d501cb191bf99905", 0xf7, 0x2}, {0x2, 0x7, &(0x7f00000024c0)=')/^\x00', &(0x7f0000002500)="a12db719fa7bc55828b9ee2ac160816dc2c3dd511dac951768a0f7435b2444d666a4690509bba2381a55", 0x2a, 0x10}]}) bpf$MAP_CREATE(0x0, &(0x7f0000002680)=@bloom_filter={0x1e, 0x8, 0x2, 0x80000001, 0x14, r14, 0xa85, '\x00', 0x0, r15, 0x3, 0x4, 0x4, 0x1}, 0x50) sendmsg$NL80211_CMD_SET_CHANNEL(r13, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x34, r0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3be}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x325}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x20008000) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000002840), r13) sendmsg$BATADV_CMD_GET_VLAN(r13, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x24, r16, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000002940)={0xffffffffffffffff}) ioctl$TUNSETIFF(r17, 0x400454ca, &(0x7f00000029c0)={'gretap0\x00', 0x4000}) 2.49650352s ago: executing program 2 (id=964): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002640)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {0x0}], 0x2}, 0x3}], 0x1, 0x40000000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000e8"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r4}, 0xc) sendmsg$nl_route(r3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 2.454563704s ago: executing program 4 (id=965): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x13b8, 0x11d8, 0xc8, 0x8, 0x11d8, 0x5803, 0x12e8, 0x2e8, 0x2e8, 0x12e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x5, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0xfe, './cgroup/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0x2, 0x5, 0x9, 0xb, 0xfffffff3, 0xd08, 0x5]}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1418) socket$alg(0x26, 0x5, 0x0) 2.32685125s ago: executing program 4 (id=966): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) unshare(0x2020600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000001680)={@dev}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/244, 0xf4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=0x1, @ANYRES32=r6, @ANYBLOB='/\x00\x00\x00 \x00\x00\x00', @ANYRES32, @ANYBLOB="6fbf"], 0x20) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x60}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, @short={0x2, 0x3}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x40}, 0x2080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x1, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 770.210809ms ago: executing program 3 (id=967): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@delchain={0x4c, 0x65, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x8}, {0xe, 0xfff3}, {0xa, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}]}, 0x4c}}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000a00ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001"], 0x80}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6tnl0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x31, &(0x7f00000001c0)=""/49, 0x41000, 0x20, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x10000, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0xffffffffffffffff], &(0x7f0000000440)=[{0x2, 0x4, 0xe, 0xa}], 0x10, 0x2}, 0x94) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000640)={0x0, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@cgroup=r8, r6, 0x22, 0x22, r7, @void, @void, @void, @value=r9}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 700.670015ms ago: executing program 0 (id=968): r0 = socket(0x840000000002, 0x3, 0xfd) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xffffffff, 0x0, 0x2d8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x91a, 0x0, 0xc}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) 700.323089ms ago: executing program 2 (id=969): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8008) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="200000000104050000000000000000000a0000000a0002007ffff224dd68"], 0x20}, 0x1, 0x0, 0x0, 0x40ebe4ec9ca1cb72}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0xb0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}}, 0x18}}, 0x0) 660.55744ms ago: executing program 4 (id=970): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x200008}, [@generic={0x91, 0x1, 0x1, 0x22}]}, &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ff9}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x8, 0x5, 0x628, 0x0, 0x208, 0xffffffff, 0x2f8, 0x0, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0x80000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x33, 0x4, 0x4, 0x42}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) 615.155825ms ago: executing program 0 (id=971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, @dev={0xfe, 0x80, '\x00', 0x25}, 0x2000000, 0x0, 0x7d, 0x600, 0x2, 0x970310}) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x184, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x88000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc47}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10c02bb9}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "0ab5c36a55706da2529581c641389dde1cb6176ad512831893501e7e9eff146ebe59d459"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff50}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1c41}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8fc6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "702ddfa5a7d05dac06517498a28d6472399acfce980ed09c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4020804}, 0x40) 464.612074ms ago: executing program 3 (id=972): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @exit, @alu={0x7, 0x0, 0x1, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10, 0x0}, 0x0) (async) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r12) (async) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x40, r13, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x94, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x5551}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x5bbf719fcd2951a2}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x400c0}, 0x8004) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x3) 455.363662ms ago: executing program 4 (id=973): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x4, @local}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @broadcast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) unshare(0x22020400) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r4, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3}}, 0x10) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmmsg$inet_sctp(r0, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}], 0x1, 0x8094) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 359.972365ms ago: executing program 0 (id=974): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100037040100"/20, @ANYRES32=r2, @ANYBLOB="83000500012c0000240012800b00010067726574617000001400028008000700ac1414aa08000100f5e3b9bc1582a7fcff3daf16bf2d02cce9d1625f15b3e216e45d24a4f8ea5e708cfd5efc9b09fea6166dd34f7a847998bedfc74ece2dd8a2bfac0aa8c76ba0c0a02c5008a00dce9398855da8483b5b30cc36b12484f7b1f48ada34f7bb2732627f02ba3bef48572d5465a08e14725ee0f86fb3789335b6b81c830268c22013a457dd700778494ef2355c5e41c9d405f38e3d39b9be346996d86f463df8b28508acaff3d1165f382e98b44a", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @local}}}], 0x20}}], 0x5e, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100037040100"/20, @ANYRES32=r2, @ANYBLOB="83000500012c0000240012800b00010067726574617000001400028008000700ac1414aa08000100f5e3b9bc1582a7fcff3daf16bf2d02cce9d1625f15b3e216e45d24a4f8ea5e708cfd5efc9b09fea6166dd34f7a847998bedfc74ece2dd8a2bfac0aa8c76ba0c0a02c5008a00dce9398855da8483b5b30cc36b12484f7b1f48ada34f7bb2732627f02ba3bef48572d5465a08e14725ee0f86fb3789335b6b81c830268c22013a457dd700778494ef2355c5e41c9d405f38e3d39b9be346996d86f463df8b28508acaff3d1165f382e98b44a", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) (async) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @local}}}], 0x20}}], 0x5e, 0x4880) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 269.765678ms ago: executing program 2 (id=975): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="02070009", 0x4}], 0x1}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2939f08001e049f6}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) 180.721225ms ago: executing program 4 (id=976): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x77ff}]}, 0x48}}, 0x20000000) 180.35691ms ago: executing program 3 (id=977): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x26008001) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x28}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420, 0x1004}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0xf, 0x0, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x71}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) listen(r3, 0x3) r4 = epoll_create(0x40) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x10000000}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 128.356767ms ago: executing program 0 (id=978): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000600)={r5, 0x9}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="00022cbd7000fcdbdf253b00000004006c0004008e00"], 0x1c}, 0x1, 0x0, 0x0, 0x20008050}, 0x20000011) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) accept4$nfc_llcp(r3, 0x0, 0x0, 0x800) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can={{}, 0x0, 0x1, 0x0, 0x0, "00000000000300"}, 0x10}}, 0x20000000) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) read(r0, &(0x7f0000002340)=""/232, 0xe8) 99.867115ms ago: executing program 2 (id=979): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @mcast2, 0x37df697b}, 0x1c) listen(0xffffffffffffffff, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r2, 0x1, 0x49, &(0x7f0000000100)=""/246, &(0x7f0000000080)=0xf6) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x800, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x7, @remote, 0x3, 0x2}, 0x20) getsockname$packet(r3, 0x0, &(0x7f0000000340)) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@multicast1, 0x4e26, 0x2, 0xcb, 0x12d5e, 0x12d5c}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 0s ago: executing program 1 (id=980): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x202, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x4, @bearer=@l2={'ib', 0x3a, 'bridge0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040080) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @remote}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0xac, "c27023c6cd61785d0c58b0994c9ed5b52a5c3cdeb6b47e50a023564b0bbdbc65f014e1e4ad3038fa34f2b1e8901e38fe2b4cbea6015cf2d91c1fd58fba455892c6ec894d249966e5a4684b2b70d47feebaf23a6ecaae9018dcb1b6e0c96fcd28def0afeb8f72d870e782732cf73e917f34e617c69cf722f9fef8a5dff30280e0d63024ca0d6aab5767ef30b750e8bf2676157afa9c9a48a8c1cb0a0da0ba946c914388b5dcf055ea5397a7eb"}, &(0x7f0000000280)=0xb4) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={r2, 0x7, 0xc4, 0x6}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, r0, 0x5, 0x3, 0x3}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0x2d}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x75, &(0x7f0000000380)=""/117, 0x41000, 0x28, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r0, r0, r0, r3], &(0x7f0000000500)=[{0x3, 0x2, 0x7, 0x8}], 0x10, 0x400}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4001}, 0x6005) r7 = socket(0x28, 0x5, 0x292) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x10, &(0x7f00000007c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}], &(0x7f0000000840)='syzkaller\x00', 0x9, 0xb8, &(0x7f0000000880)=""/184, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x7, 0x3b3f, 0x7adf}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000009c0)=[r3, r3, r0, r0, 0x1, r3, r0], &(0x7f0000000a00)=[{0x5, 0x3, 0xb, 0xa}], 0x10, 0xfff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b00)={r8, r0, 0x2f, 0x0, @void}, 0x10) unshare(0x40c00) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@newneigh={0x24, 0x1c, 0x2, 0x70bd28, 0x25dfdbff, {0x1c, 0x0, 0x0, r1, 0x52, 0x10, 0x5}, [@NDA_IFINDEX={0x8, 0x8, r1}]}, 0x24}}, 0x20008004) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@o_path={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x4000, r9}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x0, 0xc, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffaaa}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x20}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, @exit, @alu={0x3, 0x1, 0x3, 0x9, 0x1, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x0, 0x0, 0x9, 0x7, 0xa, 0x0, 0x8}]}, &(0x7f0000000d00)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', r1, 0x0, r9, 0x8, &(0x7f0000000d40)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000d80)={0x4, 0x6, 0x480, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r9, r0, r12, r9, r10, r3, r10, r10], 0x0, 0x10, 0x5}, 0x94) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x30, 0x7, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000001040)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl2\x00', r1, 0x2f, 0x4, 0xf, 0xc3, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x20, 0x7, 0x9}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001140)={r8, r13, 0x25, 0x2, @void}, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r9, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x24004000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001280)='./cgroup.cpu/syz1\x00', 0x1ff) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001300), r0) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x110, r14, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40040}, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts. [ 62.893686][ T5806] cgroup: Unknown subsys name 'net' [ 62.959543][ T5806] cgroup: Unknown subsys name 'cpuset' [ 62.968414][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.288161][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.181803][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.197346][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.205949][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.217085][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.221150][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.224741][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.231883][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.241288][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.247780][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.260854][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.267885][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.268225][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.277166][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.283535][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.289483][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.296887][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.304871][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.311416][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.318689][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.325234][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.331865][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.347447][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.355827][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.367002][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.375012][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.903473][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 66.955682][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 66.966883][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 66.982840][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 67.200550][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.208143][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.215329][ T5821] bridge_slave_0: entered allmulticast mode [ 67.222604][ T5821] bridge_slave_0: entered promiscuous mode [ 67.252842][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.260112][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.267350][ T5821] bridge_slave_1: entered allmulticast mode [ 67.274254][ T5821] bridge_slave_1: entered promiscuous mode [ 67.295216][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.302513][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.310152][ T5818] bridge_slave_0: entered allmulticast mode [ 67.317238][ T5818] bridge_slave_0: entered promiscuous mode [ 67.333418][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.340597][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.347800][ T5819] bridge_slave_0: entered allmulticast mode [ 67.354848][ T5819] bridge_slave_0: entered promiscuous mode [ 67.362595][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.369860][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.377099][ T5819] bridge_slave_1: entered allmulticast mode [ 67.384026][ T5819] bridge_slave_1: entered promiscuous mode [ 67.399327][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 67.410079][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.417254][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.424515][ T5818] bridge_slave_1: entered allmulticast mode [ 67.431893][ T5818] bridge_slave_1: entered promiscuous mode [ 67.477837][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.484942][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.492403][ T5820] bridge_slave_0: entered allmulticast mode [ 67.499800][ T5820] bridge_slave_0: entered promiscuous mode [ 67.519352][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.547440][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.555029][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.562468][ T5820] bridge_slave_1: entered allmulticast mode [ 67.569666][ T5820] bridge_slave_1: entered promiscuous mode [ 67.578816][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.589819][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.610432][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.622162][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.641934][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.721235][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.740895][ T5821] team0: Port device team_slave_0 added [ 67.748626][ T5818] team0: Port device team_slave_0 added [ 67.755759][ T5821] team0: Port device team_slave_1 added [ 67.771628][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.782787][ T5819] team0: Port device team_slave_0 added [ 67.799105][ T5818] team0: Port device team_slave_1 added [ 67.823733][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.830818][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.857360][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.883454][ T5819] team0: Port device team_slave_1 added [ 67.897867][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.904978][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.912594][ T5824] bridge_slave_0: entered allmulticast mode [ 67.919742][ T5824] bridge_slave_0: entered promiscuous mode [ 67.927215][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.934168][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.960107][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.997088][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.004248][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.011523][ T5824] bridge_slave_1: entered allmulticast mode [ 68.018826][ T5824] bridge_slave_1: entered promiscuous mode [ 68.032564][ T5820] team0: Port device team_slave_0 added [ 68.040749][ T5820] team0: Port device team_slave_1 added [ 68.055245][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.062288][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.088530][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.101232][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.108234][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.134150][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.171830][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.179247][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.205402][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.250932][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.257986][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.284318][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.298600][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.322315][ T5821] hsr_slave_0: entered promiscuous mode [ 68.328759][ T5821] hsr_slave_1: entered promiscuous mode [ 68.335582][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.342929][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.369245][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.389161][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.417081][ T5825] Bluetooth: hci0: command tx timeout [ 68.417085][ T5833] Bluetooth: hci4: command tx timeout [ 68.417372][ T5833] Bluetooth: hci2: command tx timeout [ 68.422662][ T5825] Bluetooth: hci1: command tx timeout [ 68.437293][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.446053][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.472089][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.486508][ T5825] Bluetooth: hci3: command tx timeout [ 68.501033][ T5818] hsr_slave_0: entered promiscuous mode [ 68.507641][ T5818] hsr_slave_1: entered promiscuous mode [ 68.513683][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 68.519748][ T5818] Cannot create hsr debugfs directory [ 68.583985][ T5824] team0: Port device team_slave_0 added [ 68.595004][ T5819] hsr_slave_0: entered promiscuous mode [ 68.601445][ T5819] hsr_slave_1: entered promiscuous mode [ 68.608006][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 68.613815][ T5819] Cannot create hsr debugfs directory [ 68.649170][ T5820] hsr_slave_0: entered promiscuous mode [ 68.655505][ T5820] hsr_slave_1: entered promiscuous mode [ 68.661787][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 68.667837][ T5820] Cannot create hsr debugfs directory [ 68.674997][ T5824] team0: Port device team_slave_1 added [ 68.773737][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.781019][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.807334][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.839754][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.846964][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.873293][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.973829][ T5824] hsr_slave_0: entered promiscuous mode [ 68.980268][ T5824] hsr_slave_1: entered promiscuous mode [ 68.986486][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 68.992323][ T5824] Cannot create hsr debugfs directory [ 69.267347][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.292458][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.316711][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.331999][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.375185][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.388245][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.404270][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.425146][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.491945][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.502636][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.516585][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.535599][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.618162][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.652155][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.662362][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.675644][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.752668][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.763125][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.774414][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.784689][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.794871][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.849843][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.870778][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.886259][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.896044][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.926732][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.934017][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.948527][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.955705][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.965825][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.972928][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.990449][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.003653][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.010805][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.063334][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.070474][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.081309][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.088450][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.250910][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.313082][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.364899][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.390871][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.419906][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.427081][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.460415][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.467594][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.491167][ T5825] Bluetooth: hci1: command tx timeout [ 70.491201][ T5827] Bluetooth: hci2: command tx timeout [ 70.496749][ T5825] Bluetooth: hci0: command tx timeout [ 70.496791][ T5825] Bluetooth: hci4: command tx timeout [ 70.515510][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.522683][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.566924][ T5825] Bluetooth: hci3: command tx timeout [ 70.592583][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.599753][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.643656][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.721996][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.758498][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.854862][ T5821] veth0_vlan: entered promiscuous mode [ 70.885719][ T5819] veth0_vlan: entered promiscuous mode [ 70.928924][ T5821] veth1_vlan: entered promiscuous mode [ 70.955730][ T5818] veth0_vlan: entered promiscuous mode [ 70.975451][ T5818] veth1_vlan: entered promiscuous mode [ 70.993163][ T5819] veth1_vlan: entered promiscuous mode [ 71.042000][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.072467][ T5819] veth0_macvtap: entered promiscuous mode [ 71.102758][ T5819] veth1_macvtap: entered promiscuous mode [ 71.124354][ T5821] veth0_macvtap: entered promiscuous mode [ 71.144867][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.164742][ T5818] veth0_macvtap: entered promiscuous mode [ 71.200563][ T5821] veth1_macvtap: entered promiscuous mode [ 71.214577][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.232790][ T5818] veth1_macvtap: entered promiscuous mode [ 71.262027][ T5824] veth0_vlan: entered promiscuous mode [ 71.270694][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.302825][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.310185][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.322468][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.331819][ T5824] veth1_vlan: entered promiscuous mode [ 71.348956][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.363530][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.399402][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.419989][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.448494][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.467095][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.492274][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.503001][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.533058][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.543654][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.553492][ T5824] veth0_macvtap: entered promiscuous mode [ 71.580338][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.589558][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.601977][ T5824] veth1_macvtap: entered promiscuous mode [ 71.614304][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.623470][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.659459][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.712645][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.733316][ T5820] veth0_vlan: entered promiscuous mode [ 71.747650][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.766815][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.774748][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.813115][ T5820] veth1_vlan: entered promiscuous mode [ 71.823348][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.834169][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.854219][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.863596][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.866478][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.880272][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.935189][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.946697][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.983513][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.994217][ T5820] veth0_macvtap: entered promiscuous mode [ 72.000802][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.028939][ T5820] veth1_macvtap: entered promiscuous mode [ 72.090316][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.095055][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.106223][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.158321][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.171580][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.179966][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.201479][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.210004][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.230422][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.273780][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.312050][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.323989][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.369450][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.392205][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.416426][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.567009][ T5825] Bluetooth: hci4: command tx timeout [ 72.579361][ T5833] Bluetooth: hci0: command tx timeout [ 72.585235][ T5827] Bluetooth: hci1: command tx timeout [ 72.591357][ T5825] Bluetooth: hci2: command tx timeout [ 72.635228][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.644609][ T5940] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 72.652152][ T5825] Bluetooth: hci3: command tx timeout [ 72.675181][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.780499][ T5948] Zero length message leads to an empty skb [ 72.787047][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.791844][ T5950] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 72.795153][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.817257][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 72.830974][ T5950] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 73.087621][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 73.249437][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 73.282729][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 73.300438][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 73.314503][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 73.356418][ T5976] netlink: 'syz.0.15': attribute type 1 has an invalid length. [ 73.432057][ T5957] bond1: entered promiscuous mode [ 73.459620][ T5957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.496868][ T5979] lo: entered allmulticast mode [ 73.534185][ T5979] tunl0: entered allmulticast mode [ 73.578913][ T5979] gre0: entered allmulticast mode [ 73.581618][ T5965] netlink: 312 bytes leftover after parsing attributes in process `syz.1.11'. [ 73.652396][ T5979] gretap0: entered allmulticast mode [ 73.668475][ T5997] netlink: 144 bytes leftover after parsing attributes in process `syz.4.18'. [ 73.677840][ T5979] erspan0: entered allmulticast mode [ 73.692588][ T5997] netlink: 'syz.4.18': attribute type 1 has an invalid length. [ 73.696111][ T5979] ip_vti0: entered allmulticast mode [ 73.708082][ T5979] ip6_vti0: entered allmulticast mode [ 73.715093][ T5979] sit0: entered allmulticast mode [ 73.723434][ T5979] ip6tnl0: entered allmulticast mode [ 73.730458][ T5979] ip6gre0: entered allmulticast mode [ 73.739472][ T5979] syz_tun: entered allmulticast mode [ 73.750735][ T5979] ip6gretap0: entered allmulticast mode [ 73.770460][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.778383][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.792566][ T5979] bridge0: entered allmulticast mode [ 73.803159][ T5979] vcan0: entered allmulticast mode [ 73.809953][ T6002] Cannot find set identified by id 0 to match [ 73.852973][ T5979] bond0: entered allmulticast mode [ 73.873499][ T5979] bond_slave_0: entered allmulticast mode [ 73.883322][ T5979] bond_slave_1: entered allmulticast mode [ 73.900697][ T5979] team0: entered allmulticast mode [ 73.905938][ T5979] team_slave_0: entered allmulticast mode [ 73.916565][ T5979] team_slave_1: entered allmulticast mode [ 73.925665][ T5979] dummy0: entered allmulticast mode [ 73.943582][ T5979] nlmon0: entered allmulticast mode [ 73.951653][ T5979] caif0: entered allmulticast mode [ 73.960953][ T5979] batadv0: entered allmulticast mode [ 73.970295][ T5979] vxcan0: entered allmulticast mode [ 73.977679][ T5979] vxcan1: entered allmulticast mode [ 73.984243][ T5979] veth0: entered allmulticast mode [ 73.994250][ T5979] veth1: entered allmulticast mode [ 74.005628][ T5979] wg0: entered allmulticast mode [ 74.019471][ T5979] wg1: entered allmulticast mode [ 74.028381][ T5979] wg2: entered allmulticast mode [ 74.035425][ T5979] veth0_to_bridge: entered allmulticast mode [ 74.051515][ T5979] veth1_to_bridge: entered allmulticast mode [ 74.064736][ T5979] veth0_to_bond: entered allmulticast mode [ 74.074989][ T5979] veth1_to_bond: entered allmulticast mode [ 74.084895][ T5979] veth0_to_team: entered allmulticast mode [ 74.101262][ T5979] veth1_to_team: entered allmulticast mode [ 74.113434][ T5979] veth0_to_batadv: entered allmulticast mode [ 74.129403][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.140299][ T5979] batadv_slave_0: entered allmulticast mode [ 74.149672][ T5979] veth1_to_batadv: entered allmulticast mode [ 74.163161][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.171902][ T5979] batadv_slave_1: entered allmulticast mode [ 74.189822][ T5979] xfrm0: entered allmulticast mode [ 74.198307][ T5979] veth0_to_hsr: entered allmulticast mode [ 74.208014][ T5979] hsr_slave_0: entered allmulticast mode [ 74.215897][ T5979] veth1_to_hsr: entered allmulticast mode [ 74.225380][ T5979] hsr_slave_1: entered allmulticast mode [ 74.237403][ T5979] hsr0: entered allmulticast mode [ 74.245111][ T5979] veth1_virt_wifi: entered allmulticast mode [ 74.254545][ T5979] veth0_virt_wifi: entered allmulticast mode [ 74.267570][ T5979] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 74.275406][ T5979] veth1_vlan: entered allmulticast mode [ 74.284918][ T5979] veth0_vlan: entered allmulticast mode [ 74.301074][ T5979] vlan0: entered allmulticast mode [ 74.306584][ T5979] vlan1: entered allmulticast mode [ 74.314617][ T5979] macvlan0: entered allmulticast mode [ 74.323188][ T5979] macvlan1: entered allmulticast mode [ 74.333865][ T5979] ipvlan0: entered allmulticast mode [ 74.340707][ T5979] ipvlan1: entered allmulticast mode [ 74.346282][ T5979] veth1_macvtap: entered allmulticast mode [ 74.354017][ T5979] veth0_macvtap: entered allmulticast mode [ 74.364752][ T5979] macvtap0: entered allmulticast mode [ 74.372319][ T5979] macsec0: entered allmulticast mode [ 74.380144][ T5979] geneve0: entered allmulticast mode [ 74.389614][ T5979] geneve1: entered allmulticast mode [ 74.397805][ T5979] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 74.409728][ T5979] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 74.420664][ T5979] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 74.431016][ T5979] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 74.446073][ T5979] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 74.460531][ T5979] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 74.578027][ T1102] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.601381][ T1102] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.647220][ T5825] Bluetooth: hci2: command tx timeout [ 74.652689][ T5827] Bluetooth: hci1: command tx timeout [ 74.656500][ T5833] Bluetooth: hci0: command tx timeout [ 74.658316][ T5832] Bluetooth: hci4: command tx timeout [ 74.678630][ T1102] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.727236][ T5832] Bluetooth: hci3: command tx timeout [ 74.762617][ T1102] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.942724][ T6017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22'. [ 75.053633][ T6020] bridge_slave_0: left promiscuous mode [ 75.088600][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.104294][ T6020] bridge_slave_1: left promiscuous mode [ 75.110540][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.129264][ T6020] bond0: (slave bond_slave_0): Releasing backup interface [ 75.147287][ T6020] bond0: (slave bond_slave_1): Releasing backup interface [ 75.169060][ T6020] team0: Port device team_slave_0 removed [ 75.177281][ T6020] team0: Port device team_slave_1 removed [ 75.185778][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.198342][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.207001][ T6020] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 75.252384][ T6026] team0: Mode changed to "loadbalance" [ 75.508900][ T6013] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 75.555101][ T6051] xt_hashlimit: size too large, truncated to 1048576 [ 75.587770][ T6057] FAULT_INJECTION: forcing a failure. [ 75.587770][ T6057] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.652708][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.2.29 Not tainted syzkaller #0 PREEMPT(full) [ 75.652734][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 75.652751][ T6057] Call Trace: [ 75.652758][ T6057] [ 75.652765][ T6057] dump_stack_lvl+0xe8/0x150 [ 75.652798][ T6057] should_fail_ex+0x412/0x560 [ 75.652822][ T6057] _copy_from_iter+0x1d3/0x1670 [ 75.652852][ T6057] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 75.652875][ T6057] ? __pfx_policy_nodemask+0x10/0x10 [ 75.652893][ T6057] ? rcu_is_watching+0x15/0xb0 [ 75.652916][ T6057] ? __pfx__copy_from_iter+0x10/0x10 [ 75.652942][ T6057] ? set_page_refcounted+0xa0/0x1e0 [ 75.652962][ T6057] ? page_copy_sane+0x4e/0x270 [ 75.652984][ T6057] copy_page_from_iter+0xdd/0x170 [ 75.653009][ T6057] tun_get_user+0x1d4b/0x3dd0 [ 75.653030][ T6057] ? tun_get_user+0x6ff/0x3dd0 [ 75.653079][ T6057] ? aa_file_perm+0x50e/0x15e0 [ 75.653100][ T6057] ? __pfx_tun_get_user+0x10/0x10 [ 75.653119][ T6057] ? aa_file_perm+0x192/0x15e0 [ 75.653155][ T6057] ? ref_tracker_alloc+0x35c/0x4c0 [ 75.653183][ T6057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 75.653210][ T6057] ? tun_get+0x1c/0x2f0 [ 75.653236][ T6057] ? tun_get+0x1c/0x2f0 [ 75.653257][ T6057] ? tun_get+0x1c/0x2f0 [ 75.653281][ T6057] tun_chr_write_iter+0x113/0x200 [ 75.653305][ T6057] vfs_write+0x61d/0xb90 [ 75.653330][ T6057] ? __pfx_vfs_write+0x10/0x10 [ 75.653356][ T6057] ? __fget_files+0x2a/0x420 [ 75.653387][ T6057] ksys_write+0x150/0x270 [ 75.653406][ T6057] ? __pfx_ksys_write+0x10/0x10 [ 75.653432][ T6057] do_syscall_64+0x14d/0xf80 [ 75.653455][ T6057] ? trace_irq_disable+0x3b/0x150 [ 75.653479][ T6057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.653496][ T6057] ? clear_bhb_loop+0x40/0x90 [ 75.653516][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.653534][ T6057] RIP: 0033:0x7f82cb75cfce [ 75.653560][ T6057] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 75.653574][ T6057] RSP: 002b:00007f82cc669fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.653592][ T6057] RAX: ffffffffffffffda RBX: 00007f82cc66a6c0 RCX: 00007f82cb75cfce [ 75.653604][ T6057] RDX: 000000000000005e RSI: 0000200000003680 RDI: 00000000000000c8 [ 75.653615][ T6057] RBP: 00007f82cc66a090 R08: 0000000000000000 R09: 0000000000000000 [ 75.653626][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.653635][ T6057] R13: 00007f82cba16128 R14: 00007f82cba16090 R15: 00007ffc293141a8 [ 75.653663][ T6057] [ 75.934403][ T6063] sctp: [Deprecated]: syz.0.33 (pid 6063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.934403][ T6063] Use struct sctp_sack_info instead [ 76.045181][ T6067] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 76.197139][ T6075] netlink: 220 bytes leftover after parsing attributes in process `syz.0.34'. [ 76.744127][ T6086] syzkaller0: entered promiscuous mode [ 76.755838][ T6086] syzkaller0: entered allmulticast mode [ 76.772440][ T6116] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 77.214141][ T6131] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 78.349681][ T6138] __nla_validate_parse: 2 callbacks suppressed [ 78.349701][ T6138] netlink: 558 bytes leftover after parsing attributes in process `syz.1.45'. [ 78.495839][ T6151] xt_hashlimit: size too large, truncated to 1048576 [ 78.513662][ T6156] Bluetooth: MGMT ver 1.23 [ 78.593349][ T6162] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x85 [ 78.653469][ T6169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.52'. [ 79.008156][ T6188] netlink: 'syz.2.56': attribute type 12 has an invalid length. [ 79.023333][ T6189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.58'. [ 79.027846][ T6188] netlink: 132 bytes leftover after parsing attributes in process `syz.2.56'. [ 79.113807][ T6187] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.283441][ T6187] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.374738][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.59'. [ 79.428974][ T6187] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.580410][ T6187] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.868801][ T1102] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.897683][ T6226] syzkaller1: entered promiscuous mode [ 79.913447][ T6226] syzkaller1: entered allmulticast mode [ 79.958289][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 80.052572][ T6246] xt_hashlimit: size too large, truncated to 1048576 [ 80.105799][ T35] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.117781][ T6248] FAULT_INJECTION: forcing a failure. [ 80.117781][ T6248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.131438][ T6240] syzkaller1: entered promiscuous mode [ 80.131459][ T6248] CPU: 0 UID: 0 PID: 6248 Comm: syz.0.68 Not tainted syzkaller #0 PREEMPT(full) [ 80.131477][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.131486][ T6248] Call Trace: [ 80.131493][ T6248] [ 80.131500][ T6248] dump_stack_lvl+0xe8/0x150 [ 80.131529][ T6248] should_fail_ex+0x412/0x560 [ 80.131554][ T6248] _copy_to_user+0x31/0xb0 [ 80.131580][ T6248] simple_read_from_buffer+0xe1/0x170 [ 80.131607][ T6248] proc_fail_nth_read+0x1bb/0x230 [ 80.131633][ T6248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.131659][ T6248] ? rw_verify_area+0x2a6/0x4d0 [ 80.131682][ T6248] ? tun_chr_write_iter+0x18a/0x200 [ 80.131702][ T6248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.131726][ T6248] vfs_read+0x20c/0xa70 [ 80.131741][ T6248] ? fdget_pos+0x246/0x320 [ 80.131768][ T6248] ? __pfx___mutex_lock+0x10/0x10 [ 80.131793][ T6248] ? __pfx_vfs_read+0x10/0x10 [ 80.131811][ T6248] ? __fget_files+0x2a/0x420 [ 80.131850][ T6248] ? __fget_files+0x3a0/0x420 [ 80.131871][ T6248] ? __fget_files+0x2a/0x420 [ 80.131902][ T6248] ksys_read+0x150/0x270 [ 80.131921][ T6248] ? __pfx_ksys_read+0x10/0x10 [ 80.131948][ T6248] do_syscall_64+0x14d/0xf80 [ 80.131970][ T6248] ? trace_irq_disable+0x3b/0x150 [ 80.131993][ T6248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.132011][ T6248] ? clear_bhb_loop+0x40/0x90 [ 80.132031][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.132048][ T6248] RIP: 0033:0x7f2d41b5cfce [ 80.132064][ T6248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 80.132077][ T6248] RSP: 002b:00007f2d3fdf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.132095][ T6248] RAX: ffffffffffffffda RBX: 00007f2d3fdf66c0 RCX: 00007f2d41b5cfce [ 80.132107][ T6248] RDX: 000000000000000f RSI: 00007f2d3fdf60a0 RDI: 0000000000000004 [ 80.132118][ T6248] RBP: 00007f2d3fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 80.132128][ T6248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.132138][ T6248] R13: 00007f2d41e16128 R14: 00007f2d41e16090 R15: 00007ffc3fa686b8 [ 80.132165][ T6248] [ 80.358357][ T6240] syzkaller1: entered allmulticast mode [ 80.373554][ T1102] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.491658][ T6250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.516797][ T6250] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 80.598081][ T6250] bond0: (slave sit0): Error -95 calling set_mac_address [ 80.645111][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.73'. [ 80.685221][ T1102] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.769561][ T6270] Illegal XDP return value 4294967274 on prog (id 15) dev N/A, expect packet loss! [ 81.111702][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'. [ 81.182735][ T6284] netlink: 'syz.0.81': attribute type 3 has an invalid length. [ 81.222588][ T6284] netlink: 666 bytes leftover after parsing attributes in process `syz.0.81'. [ 81.236486][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 81.465924][ T6307] openvswitch: netlink: Flow key attr not present in new flow. [ 82.097322][ T6334] netlink: 'syz.4.90': attribute type 1 has an invalid length. [ 82.123403][ T6323] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.934942][ T6382] tap0: tun_chr_ioctl cmd 1074025692 [ 83.555801][ T6408] netlink: 'syz.1.92': attribute type 4 has an invalid length. [ 83.623960][ T6407] netlink: 'syz.3.93': attribute type 2 has an invalid length. [ 83.698837][ T6335] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 83.750405][ T6335] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 84.053149][ T6430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.455094][ T6450] ipt_REJECT: ECHOREPLY no longer supported. [ 84.473036][ T6456] __nla_validate_parse: 2 callbacks suppressed [ 84.473056][ T6456] netlink: 76 bytes leftover after parsing attributes in process `syz.1.103'. [ 84.516526][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 84.738872][ T6461] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.773781][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 85.141187][ T6493] netlink: 'syz.4.112': attribute type 2 has an invalid length. [ 85.166794][ T6493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.112'. [ 85.215888][ T6461] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.389435][ T6461] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.483452][ T6512] xt_hashlimit: size too large, truncated to 1048576 [ 85.655584][ T6461] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.718415][ T6519] x_tables: unsorted entry at hook 3 [ 85.890608][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.898312][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.003907][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.025923][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.154209][ T6519] netlink: 'syz.4.118': attribute type 1 has an invalid length. [ 86.162197][ T6519] netlink: 244 bytes leftover after parsing attributes in process `syz.4.118'. [ 86.201938][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.226786][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.235713][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.280671][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.408336][ T6535] warning: `syz.3.124' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.608540][ T6550] netlink: 240 bytes leftover after parsing attributes in process `syz.4.125'. [ 86.653291][ T24] cfg80211: failed to load regulatory.db [ 86.679763][ T6380] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.740520][ T1053] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.863261][ T6539] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 86.924477][ T6539] bond1 (unregistering): Released all slaves [ 87.055510][ T1053] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.120177][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.253352][ T6557] syzkaller0: entered promiscuous mode [ 87.259060][ T6557] syzkaller0: entered allmulticast mode [ 87.330212][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 87.371471][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 87.381699][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 87.430415][ T6561] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.465679][ T177] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.465711][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 87.499828][ T177] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.559125][ T177] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.582824][ T177] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.690537][ T6577] bond1: option packets_per_slave: invalid value (1048581) [ 87.744269][ T6577] bond1: option packets_per_slave: allowed values 0 - 65535 [ 87.770256][ T6577] bond1 (unregistering): Released all slaves [ 88.122330][ T6607] No such timeout policy "syz0" [ 88.181530][ T6611] sctp: [Deprecated]: syz.2.144 (pid 6611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.181530][ T6611] Use struct sctp_sack_info instead [ 88.314101][ T6616] netlink: 'syz.4.147': attribute type 8 has an invalid length. [ 88.364519][ T6616] bond0: entered promiscuous mode [ 88.393829][ T6616] bond_slave_0: entered promiscuous mode [ 88.415985][ T6616] bond_slave_1: entered promiscuous mode [ 88.426083][ T6616] gretap0: entered promiscuous mode [ 88.436430][ T6616] bond0: left promiscuous mode [ 88.441267][ T6616] bond_slave_0: left promiscuous mode [ 88.490167][ T6616] bond_slave_1: left promiscuous mode [ 88.499110][ T6616] gretap0: left promiscuous mode [ 88.514634][ T6634] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 88.688729][ T6639] tipc: Started in network mode [ 88.700434][ T6639] tipc: Node identity 1, cluster identity 129 [ 88.707298][ T6639] tipc: Node number set to 1 [ 88.712549][ T6639] tipc: Cannot configure node identity twice [ 88.720473][ T6646] net veth1_virt_wifi : renamed from virt_wifi0 [ 88.785464][ T6650] openvswitch: netlink: Message has 6 unknown bytes. [ 88.810973][ T6652] openvswitch: netlink: Message has 6 unknown bytes. [ 89.070423][ T6657] veth0_virt_wifi: renamed from dummy0 (while UP) [ 89.764379][ T6716] __nla_validate_parse: 12 callbacks suppressed [ 89.764397][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 89.792474][ T6716] batadv_slave_1: entered promiscuous mode [ 89.799549][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 89.812268][ T6723] unsupported nlmsg_type 40 [ 89.835198][ T6723] netlink: 'syz.1.175': attribute type 16 has an invalid length. [ 89.864890][ T6723] netlink: 'syz.1.175': attribute type 17 has an invalid length. [ 89.986248][ T6723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.213078][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'. [ 90.474171][ T6751] netlink: 'syz.1.181': attribute type 4 has an invalid length. [ 90.496247][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 90.523008][ T6751] netlink: 'syz.1.181': attribute type 31 has an invalid length. [ 90.533982][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 90.547520][ T6751] netlink: 'syz.1.181': attribute type 31 has an invalid length. [ 90.581175][ T6753] tipc: Enabled bearer , priority 0 [ 90.629890][ T6753] 8021q: VLANs not supported on lo [ 90.657829][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 90.673813][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 90.697382][ T6752] tipc: Disabling bearer [ 90.703271][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.184'. [ 90.761370][ T6757] netlink: 'syz.3.184': attribute type 6 has an invalid length. [ 90.765109][ T6763] netlink: 36 bytes leftover after parsing attributes in process `syz.3.184'. [ 90.826727][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 90.840583][ T6766] netlink: 'syz.2.185': attribute type 13 has an invalid length. [ 90.860876][ T6766] netlink: 'syz.2.185': attribute type 12 has an invalid length. [ 91.362555][ T6804] netlink: 'syz.3.194': attribute type 15 has an invalid length. [ 91.460625][ T6807] ip6tnl1: entered allmulticast mode [ 91.922974][ T6844] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 92.026635][ T48] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.046435][ T6850] netlink: 'syz.4.204': attribute type 1 has an invalid length. [ 92.090586][ T6850] erspan1: entered allmulticast mode [ 92.182026][ T48] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.203405][ T48] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.229417][ T48] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.268438][ T6867] netlink: 'syz.4.209': attribute type 5 has an invalid length. [ 92.859614][ T6895] nlmon0: entered allmulticast mode [ 93.162964][ T6922] bond1: entered promiscuous mode [ 93.775634][ T6958] team0 (unregistering): Port device team_slave_0 removed [ 93.794967][ T6958] team0 (unregistering): Port device team_slave_1 removed [ 93.835839][ T6961] tc_dump_action: action bad kind [ 94.327286][ T6992] netlink: 'syz.0.238': attribute type 10 has an invalid length. [ 94.381441][ T6992] dummy0: left allmulticast mode [ 94.411298][ T6992] dummy0: entered allmulticast mode [ 94.425227][ T6992] team0: Port device dummy0 added [ 94.454079][ T6995] dummy0: left allmulticast mode [ 94.484260][ T6995] team0: Port device dummy0 removed [ 94.507673][ T6995] dummy0: entered allmulticast mode [ 94.524547][ T6995] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 94.916071][ T7018] __nla_validate_parse: 13 callbacks suppressed [ 94.916089][ T7018] netlink: 108 bytes leftover after parsing attributes in process `syz.4.247'. [ 94.992890][ T6991] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.996598][ T6986] syz.2.237 (6986) used greatest stack depth: 17472 bytes left [ 95.016454][ T6991] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 95.041446][ T6991] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.067192][ T6991] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 95.195413][ T6991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.208901][ T6991] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 95.328036][ T7040] xt_bpf: check failed: parse error [ 95.338161][ T6991] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.344097][ T6991] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 95.484068][ T6991] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 95.500510][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 95.514821][ T6991] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 95.585890][ T7051] vlan2: entered promiscuous mode [ 95.592689][ T7051] bridge0: entered promiscuous mode [ 95.648249][ T7051] netlink: 'syz.1.256': attribute type 11 has an invalid length. [ 95.662725][ T7051] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.256'. [ 95.673529][ T7057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.255'. [ 95.797959][ T7057] bond0: entered promiscuous mode [ 95.843632][ T7057] bond_slave_0: entered promiscuous mode [ 95.893809][ T7057] bond_slave_1: entered promiscuous mode [ 95.901285][ T7057] gretap0: entered promiscuous mode [ 95.924437][ T7057] hsr1: entered promiscuous mode [ 96.138629][ T7083] Bluetooth: MGMT ver 1.23 [ 96.271635][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 96.281018][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 96.566183][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 96.631640][ T7114] bridge_slave_1: left allmulticast mode [ 96.666413][ T7114] bridge_slave_1: left promiscuous mode [ 96.700601][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 96.739508][ T7114] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.787916][ T7118] netlink: 348 bytes leftover after parsing attributes in process `syz.4.265'. [ 96.815262][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 97.333596][ T7114] bridge_slave_0: left allmulticast mode [ 97.397945][ T7114] bridge_slave_0: left promiscuous mode [ 97.406898][ T7114] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.817653][ T7180] sctp: [Deprecated]: syz.0.276 (pid 7180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.817653][ T7180] Use struct sctp_sack_info instead [ 97.933342][ T7193] tipc: Started in network mode [ 97.955165][ T7193] tipc: Node identity aaadd15f740b, cluster identity 4711 [ 97.982456][ T7193] tipc: Enabled bearer , priority 0 [ 98.017773][ T7200] syzkaller0: entered promiscuous mode [ 98.047784][ T7200] syzkaller0: entered allmulticast mode [ 98.073421][ T7193] xt_HMARK: proto mask must be zero with L3 mode [ 98.101187][ T7207] netem: change failed [ 98.193704][ T7193] tipc: Resetting bearer [ 98.224693][ T7190] tipc: Resetting bearer [ 98.299905][ T7190] tipc: Disabling bearer [ 98.508784][ T7225] validate_nla: 1 callbacks suppressed [ 98.508802][ T7225] netlink: 'syz.1.289': attribute type 1 has an invalid length. [ 98.537126][ T7228] netlink: 'syz.4.287': attribute type 1 has an invalid length. [ 98.548803][ T7225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.620318][ T7236] xt_hashlimit: size too large, truncated to 1048576 [ 98.674037][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.797863][ T7225] bridge_slave_0 (unregistering): left allmulticast mode [ 98.863890][ T7225] bridge_slave_0 (unregistering): left promiscuous mode [ 98.878161][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.125771][ T24] IPVS: starting estimator thread 0... [ 99.236462][ T7269] IPVS: using max 36 ests per chain, 86400 per kthread [ 99.427403][ T7284] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 99.460931][ T7284] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 99.578873][ T7297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 100.016507][ T7323] __nla_validate_parse: 12 callbacks suppressed [ 100.016526][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 100.198124][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 100.502862][ T7301] lec:lec_atm_close: lec0: Shut down! [ 100.512504][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 100.861512][ T7361] bond1: (slave bond_slave_1): Device is not bonding slave [ 100.897385][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 100.931948][ T7361] bond1: option active_slave: invalid value (bond_slave_1) [ 100.962275][ T7361] bond1 (unregistering): Released all slaves [ 101.032976][ T7383] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.328'. [ 101.093253][ T7368] macvtap1: entered allmulticast mode [ 101.130914][ T7368] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 101.251173][ T7377] syzkaller0: entered promiscuous mode [ 101.267870][ T7377] syzkaller0: entered allmulticast mode [ 101.482777][ T7397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.608961][ T7405] veth2: entered allmulticast mode [ 101.878342][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 101.893100][ T7422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.340'. [ 101.902906][ T7422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.340'. [ 101.961495][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'. [ 102.076218][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 102.194084][ T7422] batadv1: entered promiscuous mode [ 102.209668][ T7422] batadv1: entered allmulticast mode [ 102.228693][ T7422] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 102.304603][ T7444] netlink: 'syz.0.342': attribute type 33 has an invalid length. [ 102.421336][ T7444] `: renamed from team0 [ 102.482683][ T7454] pim6reg: entered allmulticast mode [ 102.719143][ T7468] vlan2: entered allmulticast mode [ 102.724311][ T7468] team0: entered allmulticast mode [ 102.846595][ T7468] team_slave_0: entered allmulticast mode [ 102.875312][ T7468] team_slave_1: entered allmulticast mode [ 103.418962][ T7521] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 103.434739][ T7522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.708063][ T7535] syzkaller1: entered allmulticast mode [ 103.823372][ T7545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.679895][ T7602] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 104.721731][ T7604] batadv_slave_0: entered promiscuous mode [ 104.731421][ T7606] openvswitch: netlink: Unknown key attributes 2 [ 104.869666][ T7601] batadv_slave_0: left promiscuous mode [ 105.009670][ T7615] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.022916][ T7623] netlink: 'syz.2.385': attribute type 6 has an invalid length. [ 105.703174][ T7598] IPVS: length: 132 != 8 [ 105.713867][ T7598] pimreg: entered allmulticast mode [ 105.739985][ T7598] pimreg: left allmulticast mode [ 106.174276][ T7681] IPVS: length: 128 != 8 [ 106.199880][ T7678] __nla_validate_parse: 10 callbacks suppressed [ 106.199898][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 106.229336][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.397'. [ 106.275703][ T7680] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 106.597478][ T7701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.401'. [ 106.632334][ T7701] syzkaller0: entered promiscuous mode [ 106.639122][ T7701] syzkaller0: entered allmulticast mode [ 106.720992][ T7710] netlink: 192 bytes leftover after parsing attributes in process `syz.2.402'. [ 106.750014][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 106.811930][ T7708] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 107.002067][ T7718] xt_ecn: cannot match TCP bits for non-tcp packets [ 107.354049][ T5488] lec:lec_start_xmit: lec0:No lecd attached [ 107.778331][ T7758] bond3: entered allmulticast mode [ 107.862667][ T7761] netlink: 'syz.1.414': attribute type 1 has an invalid length. [ 107.997662][ T7758] bridge2: entered promiscuous mode [ 108.002916][ T7758] bridge2: entered allmulticast mode [ 108.037068][ T7758] bond3: (slave bridge2): making interface the new active one [ 108.053899][ T7758] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 108.110396][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.418'. [ 108.159013][ T7784] sctp: [Deprecated]: syz.4.417 (pid 7784) Use of int in maxseg socket option. [ 108.159013][ T7784] Use struct sctp_assoc_value instead [ 108.191231][ T7785] netlink: 192 bytes leftover after parsing attributes in process `syz.1.419'. [ 108.224779][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 108.552278][ T7799] netlink: 'syz.2.423': attribute type 25 has an invalid length. [ 108.569112][ T7799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.423'. [ 108.584840][ T7796] netlink: 'syz.4.422': attribute type 1 has an invalid length. [ 108.800227][ T7815] netlink: 'syz.1.426': attribute type 2 has an invalid length. [ 108.808529][ T7815] netlink: 1696 bytes leftover after parsing attributes in process `syz.1.426'. [ 108.919418][ T7822] netlink: 'syz.0.421': attribute type 1 has an invalid length. [ 109.636641][ T7844] 8021q: VLANs not supported on lo [ 110.057055][ T7884] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 110.072452][ T7884] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 110.319668][ T7899] netlink: 'syz.1.443': attribute type 5 has an invalid length. [ 112.381724][ T7946] netlink: 'syz.4.455': attribute type 2 has an invalid length. [ 112.456544][ T7954] __nla_validate_parse: 7 callbacks suppressed [ 112.456561][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 112.652454][ T7966] netlink: 204 bytes leftover after parsing attributes in process `syz.1.458'. [ 112.670336][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.458'. [ 112.693290][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 112.736433][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5380 ms [ 112.742052][ T7968] syzkaller0: entered promiscuous mode [ 112.744731][ C1] lec:lec_tx_timeout: lec0 [ 112.750690][ T7968] syzkaller0: entered allmulticast mode [ 112.755335][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 113.601273][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 114.338149][ T8015] netlink: 76 bytes leftover after parsing attributes in process `syz.0.470'. [ 114.459698][ T8024] xt_TCPMSS: Only works on TCP SYN packets [ 115.455068][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.480'. [ 115.698817][ T7124] tipc: Subscription rejected, illegal request [ 115.767955][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.480'. [ 115.815885][ T8061] netlink: 'syz.4.481': attribute type 1 has an invalid length. [ 115.825664][ T8062] netlink: 'syz.4.481': attribute type 1 has an invalid length. [ 116.040870][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'. [ 116.041743][ T8066] bridge_slave_0: left allmulticast mode [ 116.084904][ T8066] bridge_slave_0: left promiscuous mode [ 116.116632][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.130544][ T8066] bridge_slave_1: left allmulticast mode [ 116.159168][ T8066] bridge_slave_1: left promiscuous mode [ 116.164977][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.303205][ T8066] bond0: (slave bond_slave_0): Releasing backup interface [ 116.327735][ T8066] bond0: (slave bond_slave_1): Releasing backup interface [ 116.341537][ T8066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.369625][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 116.398428][ T8066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.427193][ T8066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.823749][ T8105] nftables ruleset with unbound chain [ 116.942567][ T8108] hsr0: entered promiscuous mode [ 116.980499][ T8108] hsr_slave_0: left promiscuous mode [ 117.002792][ T8108] hsr_slave_1: left promiscuous mode [ 117.065855][ T8108] hsr0 (unregistering): left promiscuous mode [ 117.231859][ T8125] trusted_key: syz.0.495 sent an empty control message without MSG_MORE. [ 117.254778][ T8125] nft_compat: unsupported protocol 0 [ 117.274258][ T8125] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 117.317640][ T8125] gretap1: entered allmulticast mode [ 117.325953][ T8125] bond1: (slave gretap1): making interface the new active one [ 117.337033][ T8125] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 117.360874][ T8139] bridge_slave_0: entered promiscuous mode [ 117.439316][ T8141] netlink: 'syz.0.498': attribute type 2 has an invalid length. [ 117.776543][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 117.784620][ C1] lec:lec_tx_timeout: lec0 [ 117.789548][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 118.002059][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.034666][ T8162] bridge0: entered allmulticast mode [ 118.085700][ T8162] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 118.136855][ T8168] sit3: entered promiscuous mode [ 118.265964][ T8182] __nla_validate_parse: 6 callbacks suppressed [ 118.265983][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 118.319810][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032178000: rx timeout, send abort [ 118.461562][ T8182] veth3: entered promiscuous mode [ 118.559228][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 118.588094][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 118.820622][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ad54c00: rx timeout, send abort [ 118.827489][ T8209] netlink: 192 bytes leftover after parsing attributes in process `syz.2.514'. [ 118.829358][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032178000: abort rx timeout. Force session deactivation [ 118.916732][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'. [ 119.018694][ T8219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.519'. [ 119.104558][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 119.328938][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ad54c00: abort rx timeout. Force session deactivation [ 120.038527][ T8235] bond2: option lacp_rate: invalid value (128) [ 120.135998][ T8235] bond2 (unregistering): Released all slaves [ 120.152619][ T8243] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 120.319171][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'. [ 120.397377][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 120.427840][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 120.497114][ T8252] netlink: 'syz.4.526': attribute type 12 has an invalid length. [ 120.573964][ T8263] netlink: 'syz.0.531': attribute type 18 has an invalid length. [ 120.598876][ T8247] bridge2: port 1(veth4) entered blocking state [ 120.605432][ T8247] bridge2: port 1(veth4) entered disabled state [ 120.622829][ T8247] veth4: entered allmulticast mode [ 120.657507][ T8247] veth4: entered promiscuous mode [ 120.664835][ T8247] bridge2: port 1(veth4) entered blocking state [ 120.671339][ T8247] bridge2: port 1(veth4) entered forwarding state [ 120.705317][ T8272] netlink: 'syz.4.533': attribute type 21 has an invalid length. [ 120.741359][ T7126] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.785747][ T6385] bridge2: port 1(veth4) entered disabled state [ 120.804611][ T7126] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.823985][ T7126] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.858590][ T7126] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.197653][ T8302] netlink: 'syz.4.536': attribute type 21 has an invalid length. [ 121.237114][ T8302] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.244957][ T8302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.252453][ T8302] IPv6: NLM_F_CREATE should be set when creating new route [ 121.259821][ T8302] IPv6: NLM_F_CREATE should be set when creating new route [ 121.267079][ T8302] IPv6: NLM_F_CREATE should be set when creating new route [ 121.326904][ T8297] netlink: 'syz.0.537': attribute type 12 has an invalid length. [ 121.583391][ T8321] syzkaller0: entered promiscuous mode [ 121.608504][ T8321] syzkaller0: entered allmulticast mode [ 122.217574][ T8342] erspan0: entered promiscuous mode [ 122.224462][ T8342] gretap0: entered promiscuous mode [ 122.231121][ T8342] debugfs: 'hsr1' already exists in 'hsr' [ 122.242628][ T8342] Cannot create hsr debugfs directory [ 122.255334][ T8342] hsr1: entered promiscuous mode [ 122.796346][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 122.804409][ C1] lec:lec_tx_timeout: lec0 [ 122.809270][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 123.296848][ T8399] __nla_validate_parse: 16 callbacks suppressed [ 123.296894][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'. [ 123.435694][ T8402] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 123.614995][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'. [ 123.632055][ T8413] block nbd0: not configured, cannot reconfigure [ 123.641633][ T8413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.562'. [ 123.673077][ T8413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.562'. [ 123.717753][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 123.875800][ T8417] sch_tbf: burst 2 is lower than device bridge2 mtu (1514) ! [ 123.895591][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 123.992276][ T8420] netlink: 'syz.1.564': attribute type 1 has an invalid length. [ 124.134769][ T8423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.564'. [ 124.719820][ T24] IPVS: starting estimator thread 0... [ 124.726044][ T8474] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 124.806564][ T8479] IPVS: using max 33 ests per chain, 79200 per kthread [ 125.611340][ T8503] netlink: 56 bytes leftover after parsing attributes in process `syz.2.579'. [ 125.628550][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 127.643071][ T8514] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 127.649324][ T8514] pim6reg1: linktype set to 776 [ 127.816345][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 127.824636][ C1] lec:lec_tx_timeout: lec0 [ 127.835123][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 127.978558][ T8550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.587'. [ 128.056931][ T8547] nbd0: detected capacity change from 0 to 127 [ 128.110928][ T5832] block nbd0: Receive control failed (result -104) [ 128.322032][ T8573] netlink: 'syz.0.592': attribute type 2 has an invalid length. [ 128.489012][ T8573] !9: entered promiscuous mode [ 128.681796][ T8598] __nla_validate_parse: 1 callbacks suppressed [ 128.681813][ T8598] netlink: 240 bytes leftover after parsing attributes in process `syz.2.596'. [ 128.700632][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 128.723335][ T8598] netlink: 'syz.2.596': attribute type 9 has an invalid length. [ 128.730541][ T8601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.799960][ T8601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.890939][ T8607] netlink: 'syz.0.597': attribute type 9 has an invalid length. [ 128.898905][ T8607] netlink: 'syz.0.597': attribute type 6 has an invalid length. [ 129.052665][ T8622] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.600'. [ 129.070571][ T8622] openvswitch: netlink: EtherType 0 is less than min 600 [ 129.091163][ T8621] geneve2: entered promiscuous mode [ 129.109810][ T6373] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.119017][ T6373] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.150318][ T8626] netlink: 'syz.2.602': attribute type 2 has an invalid length. [ 129.155853][ T6373] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.217568][ T6373] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.252109][ T8630] netlink: 220 bytes leftover after parsing attributes in process `syz.3.603'. [ 129.491109][ T8647] netlink: 368 bytes leftover after parsing attributes in process `syz.4.608'. [ 129.835030][ T8656] batadv_slave_0: entered promiscuous mode [ 129.884863][ T8655] batadv_slave_0: left promiscuous mode [ 130.106653][ T8678] PKCS7: Unknown OID: [4] (bad) [ 130.136434][ T8678] PKCS7: Only support pkcs7_signedData type [ 130.216068][ T8691] xt_l2tp: missing protocol rule (udp|l2tpip) [ 130.710698][ T8695] netlink: zone id is out of range [ 130.719370][ T8695] netlink: zone id is out of range [ 130.724508][ T8695] netlink: zone id is out of range [ 130.767212][ T8695] netlink: zone id is out of range [ 130.772516][ T8695] netlink: zone id is out of range [ 130.780427][ T8695] netlink: zone id is out of range [ 130.798148][ T8695] netlink: zone id is out of range [ 130.809578][ T8695] netlink: zone id is out of range [ 130.822439][ T8695] netlink: zone id is out of range [ 130.839262][ T8695] netlink: zone id is out of range [ 130.919912][ T8666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.041335][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 131.079390][ T8702] x_tables: duplicate underflow at hook 3 [ 131.162637][ T8674] netlink: 64 bytes leftover after parsing attributes in process `syz.4.613'. [ 131.198291][ T6385] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.235707][ T6385] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.266504][ T6385] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.274888][ T6385] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.338341][ T6385] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.366632][ T6385] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.375026][ T6385] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.396517][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.620'. [ 131.429714][ T6385] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.489841][ T8712] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 131.536649][ T8712] tipc: Started in network mode [ 131.551785][ T8712] tipc: Node identity 72e06fcad679, cluster identity 4711 [ 131.585676][ T8712] tipc: Enabled bearer , priority 0 [ 131.637413][ T8720] syzkaller0: entered promiscuous mode [ 131.656481][ T8720] syzkaller0: entered allmulticast mode [ 131.696551][ T8712] netlink: 44 bytes leftover after parsing attributes in process `syz.2.621'. [ 131.815089][ T8710] tipc: Resetting bearer [ 131.836482][ T8710] tipc: Disabling bearer [ 132.242535][ T8751] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 132.274369][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 132.733224][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.739823][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.846351][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 132.854395][ C1] lec:lec_tx_timeout: lec0 [ 132.859124][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 133.262516][ T8806] ip6gretap0: entered promiscuous mode [ 133.322253][ T8806] ip6gretap0: left promiscuous mode [ 133.985659][ T8854] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 1, id = 0 [ 134.005266][ T8855] __nla_validate_parse: 5 callbacks suppressed [ 134.005284][ T8855] netlink: 260 bytes leftover after parsing attributes in process `syz.2.649'. [ 134.568139][ T8877] bond1: option miimon: invalid value (18446744073709551607) [ 134.575693][ T8877] bond1: option miimon: allowed values 0 - 2147483647 [ 134.585697][ T8877] bond1 (unregistering): Released all slaves [ 134.782435][ T8884] netlink: 64 bytes leftover after parsing attributes in process `syz.0.656'. [ 134.899622][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 134.931439][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'. [ 135.019487][ T8898] bond1: option ad_user_port_key: invalid value (65535) [ 135.040926][ T8907] netlink: 'syz.2.660': attribute type 49 has an invalid length. [ 135.053225][ T8898] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 135.075271][ T8898] bond1 (unregistering): Released all slaves [ 135.196570][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 135.204785][ T7122] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 135.447102][ T8923] netlink: 128 bytes leftover after parsing attributes in process `syz.1.663'. [ 135.688611][ T8937] syzkaller0: entered promiscuous mode [ 135.729363][ T8937] syzkaller0: entered allmulticast mode [ 135.781199][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 135.858479][ T8946] netlink: 124 bytes leftover after parsing attributes in process `syz.2.668'. [ 136.022545][ T8959] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 136.058510][ T8947] netlink: 260 bytes leftover after parsing attributes in process `syz.4.667'. [ 136.168209][ T8965] netlink: 64 bytes leftover after parsing attributes in process `syz.2.672'. [ 136.198238][ T8965] netlink: 64 bytes leftover after parsing attributes in process `syz.2.672'. [ 136.211443][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 136.246948][ T6385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 136.256344][ T6385] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 136.323209][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.353119][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.387685][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.413549][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.440287][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.471138][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.495103][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.521022][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.545079][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.568090][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.570677][ T8977] netlink: 'syz.2.674': attribute type 1 has an invalid length. [ 136.591993][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.618201][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.643854][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.669900][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.697332][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.716718][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.776549][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.803873][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.820612][ T8669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 136.825069][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.854371][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.875867][ T8987] pim6reg1: entered promiscuous mode [ 136.885041][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.886714][ T8986] net_ratelimit: 6 callbacks suppressed [ 136.886728][ T8986] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 136.917032][ T8987] pim6reg1: entered allmulticast mode [ 136.924915][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.105853][ T8998] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 137.385591][ T9007] block nbd1: Unsupported socket: should be TCP or UNIX. [ 137.829455][ T9013] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.836801][ T9013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.866342][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 137.874374][ C1] lec:lec_tx_timeout: lec0 [ 137.878967][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 137.885427][ T9013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.999984][ T9028] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 140.006884][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 140.403236][ T9135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.734333][ T9211] xt_bpf: check failed: parse error [ 141.754978][ T9211] lo speed is unknown, defaulting to 1000 [ 141.766644][ T9211] lo speed is unknown, defaulting to 1000 [ 141.775011][ T9211] lo speed is unknown, defaulting to 1000 [ 141.853432][ T9211] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 141.936651][ T9212] openvswitch: netlink: Message has 4 unknown bytes. [ 141.954401][ T9211] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 142.007733][ T9220] lo speed is unknown, defaulting to 1000 [ 142.111340][ T9211] lo speed is unknown, defaulting to 1000 [ 142.184409][ T9211] lo speed is unknown, defaulting to 1000 [ 142.612287][ T9212] lo speed is unknown, defaulting to 1000 [ 142.815773][ T9211] lo speed is unknown, defaulting to 1000 [ 142.886641][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 142.895061][ C1] lec:lec_tx_timeout: lec0 [ 142.899956][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 143.106640][ T9211] lo speed is unknown, defaulting to 1000 [ 143.145451][ T9211] lo speed is unknown, defaulting to 1000 [ 143.713730][ T9282] tipc: Started in network mode [ 143.737179][ T9282] tipc: Node identity 1abdeaf47013, cluster identity 4711 [ 143.765621][ T9282] tipc: Enabled bearer , priority 0 [ 143.862691][ T9286] syzkaller0: entered promiscuous mode [ 143.868280][ T9286] syzkaller0: entered allmulticast mode [ 143.874685][ T9286] tipc: Resetting bearer [ 143.979545][ T7123] tipc: Resetting bearer [ 144.030071][ T9277] tipc: Resetting bearer [ 144.398469][ T9306] __nla_validate_parse: 3 callbacks suppressed [ 144.398489][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 144.451900][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 144.612658][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 144.643619][ T9314] netlink: 14 bytes leftover after parsing attributes in process `syz.0.738'. [ 144.658663][ T9315] netlink: 14 bytes leftover after parsing attributes in process `syz.0.738'. [ 146.190724][ T9277] tipc: Disabling bearer [ 146.212035][ T9314] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 146.222134][ T9314] dummy0: left allmulticast mode [ 146.228919][ T9314] bond0 (unregistering): Released all slaves [ 146.271767][ T5886] tipc: Node number set to 1789848308 [ 146.624623][ T9350] Cannot find add_set index 0 as target [ 146.689063][ T9354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.748'. [ 146.872932][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 146.893217][ T9357] netlink: 14 bytes leftover after parsing attributes in process `syz.1.749'. [ 146.911988][ T9362] xt_CT: No such helper "netbios-ns" [ 146.934815][ T9357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.960562][ T9357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.991028][ T9357] bond0 (unregistering): Released all slaves [ 147.356902][ T9383] nbd1: detected capacity change from 0 to 127 [ 147.381439][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 147.408095][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 147.412727][ T5832] block nbd1: Receive control failed (result -104) [ 147.446489][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.563636][ T9411] netlink: 'syz.0.764': attribute type 12 has an invalid length. [ 147.585926][ T9414] Cannot find set identified by id 0 to match [ 147.906333][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 147.914420][ C1] lec:lec_tx_timeout: lec0 [ 147.919045][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 148.804440][ T9494] Bluetooth: MGMT ver 1.23 [ 148.858766][ T9496] syzkaller1: entered promiscuous mode [ 148.867585][ T9496] syzkaller1: entered allmulticast mode [ 149.459713][ T6705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.467872][ T6705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.502006][ T9521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.671838][ T9539] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 149.940585][ T9548] netlink: 'syz.3.791': attribute type 1 has an invalid length. [ 149.979018][ T29] audit: type=1800 audit(1772520230.211:2): pid=9506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.784" name="memory.events" dev="tmpfs" ino=901 res=0 errno=0 [ 150.660325][ T9576] __nla_validate_parse: 10 callbacks suppressed [ 150.660345][ T9576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.800'. [ 150.680438][ T9576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.800'. [ 150.700846][ T9576] netlink: 'syz.4.800': attribute type 6 has an invalid length. [ 150.706932][ T9579] netlink: 'syz.2.801': attribute type 1 has an invalid length. [ 150.719208][ T9581] netlink: 'syz.1.802': attribute type 3 has an invalid length. [ 150.728851][ T5204] block nbd1: Connection timed out, retrying (0/1 alive) [ 150.736977][ T5204] block nbd1: Connection timed out, retrying (0/1 alive) [ 150.744103][ T5204] block nbd1: Connection timed out, retrying (0/1 alive) [ 150.751658][ T5204] block nbd1: Connection timed out, retrying (0/1 alive) [ 150.752643][ T9575] lo speed is unknown, defaulting to 1000 [ 150.759300][ T5204] block nbd1: Dead connection, failed to find a fallback [ 150.773874][ T5204] block nbd1: shutting down sockets [ 150.780008][ T9581] netlink: 'syz.1.802': attribute type 1 has an invalid length. [ 150.780201][ T5204] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.800106][ T5204] Buffer I/O error on dev nbd1, logical block 3, async page read [ 150.808904][ T5204] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.818920][ T5204] Buffer I/O error on dev nbd1, logical block 2, async page read [ 150.822051][ T9581] netlink: 228 bytes leftover after parsing attributes in process `syz.1.802'. [ 150.826787][ T5204] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.845403][ T5204] Buffer I/O error on dev nbd1, logical block 1, async page read [ 150.853514][ T5204] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.863575][ T5204] Buffer I/O error on dev nbd1, logical block 0, async page read [ 150.872613][ T5978] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.882441][ T5978] Buffer I/O error on dev nbd1, logical block 0, async page read [ 150.892280][ T5978] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.901871][ T5978] Buffer I/O error on dev nbd1, logical block 1, async page read [ 150.911436][ T5978] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.922274][ T5978] Buffer I/O error on dev nbd1, logical block 2, async page read [ 150.930340][ T5978] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.939930][ T5978] Buffer I/O error on dev nbd1, logical block 3, async page read [ 150.946172][ T9586] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 150.947998][ T5978] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.968886][ T5978] Buffer I/O error on dev nbd1, logical block 0, async page read [ 150.976907][ T9586] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 150.976980][ T5978] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.996149][ T5978] Buffer I/O error on dev nbd1, logical block 1, async page read [ 151.007099][ T5978] ldm_validate_partition_table(): Disk read failed. [ 151.015672][ T9586] bond3: (slave ip6gre1): making interface the new active one [ 151.017813][ T5978] Dev nbd1: unable to read RDB block 0 [ 151.037037][ T5978] nbd1: unable to read partition table [ 151.045488][ T9586] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 151.069244][ T5978] ldm_validate_partition_table(): Disk read failed. [ 151.097071][ T5978] Dev nbd1: unable to read RDB block 0 [ 151.103193][ T5978] nbd1: unable to read partition table [ 151.378582][ T9604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.806'. [ 151.424098][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.806'. [ 151.569726][ T9617] xt_ecn: cannot match TCP bits for non-tcp packets [ 151.594809][ T9617] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.600546][ T9623] netlink: 'syz.0.811': attribute type 1 has an invalid length. [ 151.665850][ T9627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.812'. [ 151.679541][ T9617] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.720643][ T9621] lo speed is unknown, defaulting to 1000 [ 151.791422][ T9617] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.918431][ T9617] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.123398][ T7123] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.162079][ T6390] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.185247][ T6390] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.215211][ T6390] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.490574][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.819'. [ 152.645659][ T9678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.823'. [ 152.670064][ T9682] netlink: get zone limit has 4 unknown bytes [ 152.715304][ T9684] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 152.885776][ T9682] bond0: entered promiscuous mode [ 152.926324][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 152.934402][ C1] lec:lec_tx_timeout: lec0 [ 152.939293][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 152.960106][ T9688] vcan1: entered promiscuous mode [ 152.965192][ T9688] vcan1: entered allmulticast mode [ 153.005447][ T9697] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 153.018149][ T9697] bond1 (unregistering): Released all slaves [ 153.313028][ T9720] lo speed is unknown, defaulting to 1000 [ 154.263070][ T9761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.837'. [ 154.289595][ T9761] bond1: entered promiscuous mode [ 154.294991][ T9761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.305283][ T9761] bond1 (unregistering): Released all slaves [ 154.423567][ T9766] netlink: 124 bytes leftover after parsing attributes in process `syz.4.839'. [ 156.263397][ T9716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.461272][ T9773] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 156.628256][ T9781] lo speed is unknown, defaulting to 1000 [ 156.908137][ T9804] tipc: Enabled bearer , priority 0 [ 156.916073][ T9804] syzkaller0: entered promiscuous mode [ 156.923255][ T9804] syzkaller0: entered allmulticast mode [ 156.995045][ T9804] tipc: Resetting bearer [ 157.029315][ T9816] ipt_ECN: cannot use operation on non-tcp rule [ 157.174845][ T9811] lo speed is unknown, defaulting to 1000 [ 157.355836][ T9816] lo speed is unknown, defaulting to 1000 [ 157.368159][ T9825] netlink: 'syz.0.851': attribute type 1 has an invalid length. [ 157.521061][ T9833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.946329][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 157.954396][ C1] lec:lec_tx_timeout: lec0 [ 157.959220][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 158.014033][ T9861] netlink: 'syz.4.861': attribute type 1 has an invalid length. [ 158.063358][ T9868] netlink: 52 bytes leftover after parsing attributes in process `syz.1.864'. [ 158.136461][ T9874] netlink: 'syz.2.865': attribute type 10 has an invalid length. [ 158.152037][ T9874] dummy0: entered allmulticast mode [ 158.158838][ T9874] team0: Port device dummy0 added [ 158.186928][ T9874] netlink: 'syz.2.865': attribute type 10 has an invalid length. [ 158.227511][ T9874] dummy0: left allmulticast mode [ 158.270857][ T9874] team0: Port device dummy0 removed [ 158.272947][ T9878] netlink: 27 bytes leftover after parsing attributes in process `syz.0.867'. [ 158.290110][ T9874] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 158.327141][ T5204] block nbd0: Possible stuck request ffff8880265d0000: control (read@0,1024B). Runtime 30 seconds [ 158.348080][ T5204] block nbd0: Possible stuck request ffff8880265d0200: control (read@1024,1024B). Runtime 30 seconds [ 158.359082][ T5204] block nbd0: Possible stuck request ffff8880265d0400: control (read@2048,1024B). Runtime 30 seconds [ 158.370164][ T5204] block nbd0: Possible stuck request ffff8880265d0600: control (read@3072,1024B). Runtime 30 seconds [ 158.769798][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.874'. [ 158.823540][ T9908] veth0_macvtap: left promiscuous mode [ 158.859285][ T9914] netlink: 260 bytes leftover after parsing attributes in process `syz.1.872'. [ 158.894238][ T9898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.871'. [ 158.902381][ T9908] macvtap0: entered allmulticast mode [ 158.959146][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 158.970889][ T9906] netlink: 76 bytes leftover after parsing attributes in process `syz.4.873'. [ 159.067048][ T9915] can: request_module (can-proto-4) failed. [ 159.126060][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 159.331129][ T9936] lo speed is unknown, defaulting to 1000 [ 159.376890][ T9942] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.795313][ T9964] netlink: 'syz.1.884': attribute type 29 has an invalid length. [ 159.855861][ T9969] netlink: 'syz.1.884': attribute type 29 has an invalid length. [ 159.952366][ T9964] sch_fq: defrate 4294967293 ignored. [ 159.983910][ T9964] netlink: 500 bytes leftover after parsing attributes in process `syz.1.884'. [ 160.009491][ T9987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.889'. [ 160.103061][ T9991] syzkaller1: entered promiscuous mode [ 160.120806][ T9991] syzkaller1: entered allmulticast mode [ 160.203398][ T9999] vxcan2: entered promiscuous mode [ 160.593677][T10021] lo speed is unknown, defaulting to 1000 [ 161.079550][T10048] bond0: entered promiscuous mode [ 161.651373][T10097] netlink: 'syz.3.911': attribute type 1 has an invalid length. [ 162.166510][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 162.186259][T10116] bond4: entered promiscuous mode [ 162.321287][T10122] lo speed is unknown, defaulting to 1000 [ 162.476457][T10147] syz_tun: entered promiscuous mode [ 162.486613][T10147] syz_tun: left allmulticast mode [ 162.492262][T10147] syz_tun: refused to change device tx_queue_len [ 162.499233][T10147] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 162.711236][T10158] syzkaller1: entered promiscuous mode [ 162.726495][T10166] netlink: 'syz.3.926': attribute type 1 has an invalid length. [ 162.756447][T10158] syzkaller1: entered allmulticast mode [ 162.982837][T10174] veth0_to_team: entered promiscuous mode [ 162.995777][T10174] veth0_to_team: left promiscuous mode [ 163.019953][T10176] veth0_to_team: entered promiscuous mode [ 163.031431][T10176] veth0_to_team: left promiscuous mode [ 163.304093][T10189] syzkaller0: entered promiscuous mode [ 163.326531][T10189] syzkaller0: entered allmulticast mode [ 163.427174][T10194] 8021q: adding VLAN 0 to HW filter on device bond6 [ 163.943602][T10232] lec:lec_atm_close: lec0: Shut down! [ 164.067106][T10241] netlink: 'syz.0.936': attribute type 4 has an invalid length. [ 165.621795][T10242] tipc: Resetting bearer [ 165.706251][ T35] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.725559][ T35] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.740354][T10261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.763019][ T35] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.782659][ T35] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.795457][T10265] __nla_validate_parse: 17 callbacks suppressed [ 165.795476][T10265] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.941'. [ 165.796954][T10261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.942'. [ 165.867552][T10272] netlink: 'syz.1.939': attribute type 32 has an invalid length. [ 165.910172][T10275] netlink: 'syz.2.943': attribute type 1 has an invalid length. [ 166.505323][T10315] lo speed is unknown, defaulting to 1000 [ 166.674135][T10329] netlink: 488 bytes leftover after parsing attributes in process `syz.2.957'. [ 166.733930][T10329] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.957'. [ 166.759352][T10304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.929364][T10337] syzkaller0: entered promiscuous mode [ 166.935214][T10337] syzkaller0: entered allmulticast mode [ 167.533752][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 167.573396][T10354] netlink: 276 bytes leftover after parsing attributes in process `syz.0.961'. [ 168.956318][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 168.964351][ C1] lec:lec_tx_timeout: lec0 [ 168.969110][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 169.504413][T10358] erspan0: entered promiscuous mode [ 169.510204][T10358] macvtap1: entered promiscuous mode [ 169.515578][T10358] macvtap1: entered allmulticast mode [ 169.521149][T10358] erspan0: entered allmulticast mode [ 169.629469][T10381] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 169.706269][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.969'. [ 169.754853][T10387] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 169.831528][T10385] netlink: 16 bytes leftover after parsing attributes in process `syz.2.969'. [ 169.863118][T10391] tipc: Enabled bearer , priority 10 [ 169.949775][T10399] batadv_slave_0: entered promiscuous mode [ 170.050693][T10399] batadv_slave_0: left promiscuous mode [ 170.074445][T10404] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 170.218209][T10421] hsr0: entered promiscuous mode [ 170.233970][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.977'. [ 170.293117][T10414] xt_CT: No such helper "syz1" [ 170.301338][T10421] hsr_slave_0: left promiscuous mode [ 170.352219][T10421] hsr_slave_1: left promiscuous mode [ 170.378731][T10417] [ 170.381093][T10417] ====================================================== [ 170.388114][T10417] WARNING: possible circular locking dependency detected [ 170.395146][T10417] syzkaller #0 Not tainted [ 170.399560][T10417] ------------------------------------------------------ [ 170.406647][T10417] syz.4.976/10417 is trying to acquire lock: [ 170.412607][T10417] ffffffff8e85e9a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 170.422190][T10417] [ 170.422190][T10417] but task is already holding lock: [ 170.429541][T10417] ffff888026563008 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 170.439806][T10417] [ 170.439806][T10417] which lock already depends on the new lock. [ 170.439806][T10417] [ 170.450192][T10417] [ 170.450192][T10417] the existing dependency chain (in reverse order) is: [ 170.459189][T10417] [ 170.459189][T10417] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 170.467778][T10417] blk_alloc_queue+0x546/0x680 [ 170.473056][T10417] __blk_mq_alloc_disk+0x197/0x390 [ 170.478670][T10417] nbd_dev_add+0x499/0xb50 [ 170.483608][T10417] nbd_init+0x168/0x1f0 [ 170.488276][T10417] do_one_initcall+0x250/0x8d0 [ 170.493547][T10417] do_initcall_level+0x104/0x190 [ 170.498990][T10417] do_initcalls+0x59/0xa0 [ 170.503836][T10417] kernel_init_freeable+0x2a6/0x3e0 [ 170.509544][T10417] kernel_init+0x1d/0x1d0 [ 170.514381][T10417] ret_from_fork+0x51e/0xb90 [ 170.519485][T10417] ret_from_fork_asm+0x1a/0x30 [ 170.524845][T10417] [ 170.524845][T10417] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 170.532039][T10417] fs_reclaim_acquire+0x71/0x100 [ 170.537479][T10417] prepare_alloc_pages+0x152/0x650 [ 170.543095][T10417] __alloc_frozen_pages_noprof+0x12f/0x380 [ 170.549407][T10417] __alloc_pages_noprof+0xa/0x30 [ 170.554846][T10417] pcpu_populate_chunk+0x182/0xb30 [ 170.560507][T10417] pcpu_alloc_noprof+0xc6c/0x19c0 [ 170.566030][T10417] xt_percpu_counter_alloc+0x161/0x220 [ 170.572001][T10417] translate_table+0x1332/0x20b0 [ 170.577457][T10417] ip6t_register_table+0x11b/0x800 [ 170.583102][T10417] ip6table_filter_table_init+0x75/0xb0 [ 170.589153][T10417] xt_find_table_lock+0x30c/0x3e0 [ 170.594769][T10417] xt_request_find_table_lock+0x26/0x100 [ 170.600905][T10417] do_ip6t_get_ctl+0x716/0x1230 [ 170.606264][T10417] nf_getsockopt+0x26e/0x290 [ 170.611379][T10417] ipv6_getsockopt+0x1fd/0x2b0 [ 170.616673][T10417] do_sock_getsockopt+0x2d3/0x3f0 [ 170.622217][T10417] __x64_sys_getsockopt+0x1a4/0x240 [ 170.628022][T10417] do_syscall_64+0x14d/0xf80 [ 170.633161][T10417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.640048][T10417] [ 170.640048][T10417] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 170.647774][T10417] __lock_acquire+0x15a5/0x2cf0 [ 170.653163][T10417] lock_acquire+0xf0/0x2e0 [ 170.658106][T10417] __mutex_lock+0x19f/0x1300 [ 170.663214][T10417] pcpu_alloc_noprof+0x218/0x19c0 [ 170.668846][T10417] sbitmap_init_node+0x1e1/0x640 [ 170.674321][T10417] sbitmap_queue_init_node+0x3e/0x4d0 [ 170.680221][T10417] blk_mq_init_tags+0x15c/0x2d0 [ 170.685591][T10417] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 170.691569][T10417] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 170.697989][T10417] nbd_start_device+0x17f/0xb10 [ 170.703361][T10417] nbd_genl_connect+0x165b/0x1cf0 [ 170.708911][T10417] genl_family_rcv_msg_doit+0x22a/0x330 [ 170.714982][T10417] genl_rcv_msg+0x61c/0x7a0 [ 170.720001][T10417] netlink_rcv_skb+0x232/0x4b0 [ 170.725287][T10417] genl_rcv+0x28/0x40 [ 170.729778][T10417] netlink_unicast+0x80f/0x9b0 [ 170.735044][T10417] netlink_sendmsg+0x813/0xb40 [ 170.740315][T10417] ____sys_sendmsg+0xa68/0xad0 [ 170.745587][T10417] ___sys_sendmsg+0x2a5/0x360 [ 170.750769][T10417] __x64_sys_sendmsg+0x1bd/0x2a0 [ 170.756223][T10417] do_syscall_64+0x14d/0xf80 [ 170.761319][T10417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.767725][T10417] [ 170.767725][T10417] other info that might help us debug this: [ 170.767725][T10417] [ 170.778066][T10417] Chain exists of: [ 170.778066][T10417] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 170.778066][T10417] [ 170.791708][T10417] Possible unsafe locking scenario: [ 170.791708][T10417] [ 170.799139][T10417] CPU0 CPU1 [ 170.804483][T10417] ---- ---- [ 170.809918][T10417] lock(&q->q_usage_counter(io)#51); [ 170.815279][T10417] lock(fs_reclaim); [ 170.821763][T10417] lock(&q->q_usage_counter(io)#51); [ 170.829648][T10417] lock(pcpu_alloc_mutex); [ 170.834223][T10417] [ 170.834223][T10417] *** DEADLOCK *** [ 170.834223][T10417] [ 170.842345][T10417] 6 locks held by syz.4.976/10417: [ 170.847435][T10417] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 170.855610][T10417] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 170.864556][T10417] #2: ffff88802655f1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 170.875933][T10417] #3: ffff88802655f0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 170.886873][T10417] #4: ffff888026563008 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 170.897568][T10417] #5: ffff888026563040 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 170.908521][T10417] [ 170.908521][T10417] stack backtrace: [ 170.914409][T10417] CPU: 1 UID: 0 PID: 10417 Comm: syz.4.976 Not tainted syzkaller #0 PREEMPT(full) [ 170.914424][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.914433][T10417] Call Trace: [ 170.914440][T10417] [ 170.914447][T10417] dump_stack_lvl+0xe8/0x150 [ 170.914467][T10417] print_circular_bug+0x2e1/0x300 [ 170.914487][T10417] check_noncircular+0x12e/0x150 [ 170.914512][T10417] __lock_acquire+0x15a5/0x2cf0 [ 170.914535][T10417] lock_acquire+0xf0/0x2e0 [ 170.914549][T10417] ? pcpu_alloc_noprof+0x218/0x19c0 [ 170.914565][T10417] __mutex_lock+0x19f/0x1300 [ 170.914583][T10417] ? pcpu_alloc_noprof+0x218/0x19c0 [ 170.914596][T10417] ? stack_depot_save_flags+0x3f3/0x810 [ 170.914612][T10417] ? kasan_save_track+0x4f/0x80 [ 170.914624][T10417] ? kasan_save_track+0x3e/0x80 [ 170.914635][T10417] ? pcpu_alloc_noprof+0x218/0x19c0 [ 170.914647][T10417] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 170.914660][T10417] ? blk_mq_init_tags+0x83/0x2d0 [ 170.914674][T10417] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 170.914686][T10417] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 170.914700][T10417] ? __pfx___mutex_lock+0x10/0x10 [ 170.914716][T10417] ? genl_rcv+0x28/0x40 [ 170.914733][T10417] ? ____sys_sendmsg+0xa68/0xad0 [ 170.914751][T10417] ? ___sys_sendmsg+0x2a5/0x360 [ 170.914772][T10417] pcpu_alloc_noprof+0x218/0x19c0 [ 170.914790][T10417] sbitmap_init_node+0x1e1/0x640 [ 170.914809][T10417] sbitmap_queue_init_node+0x3e/0x4d0 [ 170.914828][T10417] blk_mq_init_tags+0x15c/0x2d0 [ 170.914844][T10417] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 170.914858][T10417] ? kfree+0x1c1/0x630 [ 170.914875][T10417] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 170.914889][T10417] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 170.914908][T10417] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 170.914924][T10417] ? sysfs_add_file_mode_ns+0x259/0x300 [ 170.914941][T10417] nbd_start_device+0x17f/0xb10 [ 170.914960][T10417] ? device_create_file+0xf4/0x1b0 [ 170.914978][T10417] nbd_genl_connect+0x165b/0x1cf0 [ 170.915000][T10417] ? __pfx_nbd_genl_connect+0x10/0x10 [ 170.915017][T10417] ? rcu_is_watching+0x15/0xb0 [ 170.915038][T10417] ? __nla_parse+0x40/0x60 [ 170.915054][T10417] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 170.915076][T10417] genl_family_rcv_msg_doit+0x22a/0x330 [ 170.915097][T10417] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 170.915119][T10417] ? __lock_acquire+0x6b5/0x2cf0 [ 170.915135][T10417] genl_rcv_msg+0x61c/0x7a0 [ 170.915155][T10417] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.915172][T10417] ? __pfx_nbd_genl_connect+0x10/0x10 [ 170.915188][T10417] ? __lock_acquire+0x6b5/0x2cf0 [ 170.915206][T10417] netlink_rcv_skb+0x232/0x4b0 [ 170.915221][T10417] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.915239][T10417] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.915258][T10417] ? down_read+0x272/0x2e0 [ 170.915268][T10417] ? genl_rcv+0xd/0x40 [ 170.915285][T10417] genl_rcv+0x28/0x40 [ 170.915301][T10417] netlink_unicast+0x80f/0x9b0 [ 170.915317][T10417] ? __pfx_netlink_unicast+0x10/0x10 [ 170.915330][T10417] ? netlink_sendmsg+0x650/0xb40 [ 170.915345][T10417] ? skb_put+0x11b/0x210 [ 170.915362][T10417] netlink_sendmsg+0x813/0xb40 [ 170.915379][T10417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.915395][T10417] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 170.915413][T10417] ? aa_sock_msg_perm+0xf1/0x1b0 [ 170.915428][T10417] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.915442][T10417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.915456][T10417] ____sys_sendmsg+0xa68/0xad0 [ 170.915476][T10417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.915501][T10417] ? import_iovec+0x73/0xa0 [ 170.915519][T10417] ___sys_sendmsg+0x2a5/0x360 [ 170.915538][T10417] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.915557][T10417] ? futex_wake+0x4ac/0x580 [ 170.915582][T10417] ? __fget_files+0x2a/0x420 [ 170.915599][T10417] ? __fget_files+0x3a0/0x420 [ 170.915618][T10417] __x64_sys_sendmsg+0x1bd/0x2a0 [ 170.915636][T10417] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.915656][T10417] ? rcu_is_watching+0x15/0xb0 [ 170.915675][T10417] do_syscall_64+0x14d/0xf80 [ 170.915693][T10417] ? trace_irq_disable+0x3b/0x150 [ 170.915711][T10417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.915723][T10417] ? clear_bhb_loop+0x40/0x90 [ 170.915737][T10417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.915750][T10417] RIP: 0033:0x7f251e79c799 [ 170.915769][T10417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.915780][T10417] RSP: 002b:00007f251f5d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.915794][T10417] RAX: ffffffffffffffda RBX: 00007f251ea15fa0 RCX: 00007f251e79c799 [ 170.915803][T10417] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 170.915812][T10417] RBP: 00007f251e832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 170.915819][T10417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.915827][T10417] R13: 00007f251ea16038 R14: 00007f251ea15fa0 R15: 00007ffd315a5a28 [ 170.915841][T10417] [ 171.441688][ T5832] block nbd2: Receive control failed (result -32) [ 171.444195][ T5825] block nbd2: Receive control failed (result -32) [ 171.469740][T10417] nbd2: detected capacity change from 0 to 59 [ 171.482064][ T5978] block nbd2: Dead connection, failed to find a fallback [ 171.492741][ T5978] block nbd2: shutting down sockets [ 171.498007][ T5978] blk_print_req_error: 138 callbacks suppressed [ 171.498022][ T5978] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.513973][ T5978] buffer_io_error: 138 callbacks suppressed [ 171.513988][ T5978] Buffer I/O error on dev nbd2, logical block 0, async page read [ 171.527700][ T5978] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.537199][ T5978] Buffer I/O error on dev nbd2, logical block 1, async page read [ 171.544995][ T5978] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.554507][ T5978] Buffer I/O error on dev nbd2, logical block 2, async page read [ 171.562295][ T5978] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.571875][ T5978] Buffer I/O error on dev nbd2, logical block 3, async page read [ 171.579709][ T5978] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.589203][ T5978] Buffer I/O error on dev nbd2, logical block 0, async page read [ 171.597156][ T5978] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.606885][ T5978] Buffer I/O error on dev nbd2, logical block 1, async page read [ 171.614663][ T5978] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.624267][ T5978] Buffer I/O error on dev nbd2, logical block 2, async page read [ 171.632074][ T5978] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.641583][ T5978] Buffer I/O error on dev nbd2, logical block 3, async page read [ 171.649404][ T5978] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.658937][ T5978] Buffer I/O error on dev nbd2, logical block 0, async page read [ 171.666726][ T5978] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 171.676202][ T5978] Buffer I/O error on dev nbd2, logical block 1, async page read [ 171.684809][ T5978] ldm_validate_partition_table(): Disk read failed. [ 171.691885][ T5978] Dev nbd2: unable to read RDB block 0 [ 171.697926][ T5978] nbd2: unable to read partition table [ 171.706353][ T5978] ldm_validate_partition_table(): Disk read failed. [ 171.713290][ T5978] Dev nbd2: unable to read RDB block 0 [ 171.722227][ T5978] nbd2: unable to read partition table [ 174.966331][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6000 ms [ 174.974432][ C1] lec:lec_tx_timeout: lec0 [ 174.979350][ C1] lec:lec_start_xmit: lec0:No lecd attached