last executing test programs: 6m55.083428825s ago: executing program 4 (id=6588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001c40), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001c80)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000092) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x25d4}}, 0x4000840) 6m54.846538385s ago: executing program 4 (id=6591): pselect6(0x40, &(0x7f0000000000)={0x5e8, 0x100, 0x0, 0x9aa2, 0x5, 0xfffffffffffffff7, 0x6, 0x100}, &(0x7f0000000080)={0x9, 0x1, 0x5, 0x7, 0xfffffffffffeffff, 0x22, 0x8000, 0x1400000000}, &(0x7f00000000c0)={0xa, 0x3ff, 0x832, 0x7fff, 0x15b2ca9e, 0x9, 0x1, 0x10001}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x3]}, 0x8}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) (async) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) (async, rerun: 32) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) (rerun: 32) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0xfffffffe}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_newvlan={0x18, 0x70, 0x1, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x107}, 0x1c) (async, rerun: 32) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) (rerun: 32) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) (async) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async, rerun: 32) r6 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="080032427e15a330", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) (async) bind$inet(r4, &(0x7f0000000000)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) (async) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "320e019f0232037d", "192c4caaf37af3d00fa4a95922e05c94", "0222dc88", "c01217caf77d0e49"}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000ede9d97d7309638200000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) (async, rerun: 32) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) close(r7) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r8, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r9, 0x389366ac6fb80697, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x880) 6m54.169452936s ago: executing program 4 (id=6595): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x40}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6359c6d41) shutdown(r3, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r6, @in6={{0xa, 0x4e20, 0x1, @remote, 0x100}}, 0xe3, 0x8, 0x4, 0x7fffffff, 0x39, 0xbdaf, 0x4f}, &(0x7f0000000380)=0x9c) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=r7, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001a00010000000080fbdbdf250a8000fd000005"], 0x24}}, 0x20000050) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r6, @in={{0x2, 0x4e23, @multicast1}}, 0x2, 0x6, 0x9, 0xe, 0x2}, &(0x7f0000000200)=0x98) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0001500808178a8001500030001400200000901ac040000d69b6f940071009807a290457f0189b316277ce06bbade8017cbec4c0000001fb791643a5ee4b11602b2a10e11ce1b25d6d9300000730d7a5025ccca262f2240fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a9230000e9703000000000000000000000000129ae100000000000000000000080000400000000000000000000080b6fcdb2ab01ec2bb13", 0xd8}], 0x1}, 0x8000194) 6m49.547153782s ago: executing program 4 (id=6598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r0}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000000800004000000", @ANYRES32, @ANYBLOB="aec3d33c8a8ae8755b96644c4cb95fe18733dc0fe0c177d67d82221e9133b38adc69c37a834c6e2fdabed91d89347697542453a0d80af03c62dc3c76367186a854fda7", @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="840100", @ANYRES16=r2, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090003"], 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000080)='K', 0x1, 0x1, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000540)={'tunl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0xc4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020643a00000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b7030000010000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6m47.62191211s ago: executing program 4 (id=6607): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610420000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, r0, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) 6m47.211757301s ago: executing program 4 (id=6608): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x4f}, @map_val={0x18, 0x1, 0x2, 0x0, r2}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0xffffff92, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x4}, 0x20) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8, 0x3, 0x3}}]}, 0x20}}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5f0000001000ffff23bd7000f8dbdf25000000005fd4eaea7ce681c2e4b9943075b1345b9d66692a7f63ac88db24bac7f0d418f7c4ebe55e7abe465a5fa0cc6912f89fca28a8da1efe23bb8f86313fa7015743d76eeda795d9026534f4345a056f4792c8cdfaac4031cc3f90b7937fb7eecea54121aeae345b9602db05000000000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="385a03002f5204001c00128009000100626f6e64000000000c00028008000b00", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000ac0)={0x27, 0x0, 0x0, 0x5, 0x4, 0x9, "046b0f4a8f35f65c5a53ee38c912462f0b64d6804b60710afff28f12920ea68cbb9672c075dea6954b7008c59cd50d6d6e96f4ac2fcfecbe296f4a8fdcf028", 0x1}, 0x60) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x36}}], 0x18}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00'}) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r10 = accept4(r8, &(0x7f0000000140)=@caif=@dbg, &(0x7f00000001c0)=0x80, 0x800) sendmsg$qrtr(r10, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000004c0)="cd6a226fc44c7dd48edcc8c01ae08a6d63cd1324397d9bfea03a064297073dbc26d8cc80c51a4cce71e2edaf6d289eb558acc8170218b363351b529878aa301bf6a5ef0f671773d6ae3b3b570dbb6ec7c6d5f5d73b92b91f118e4810a7f5e14bda6430a60ba09800e91c37d4f68ad8de6db37885ce0ed2123e516b1f5bf74a4d62035eba756dd176977fbb1de67791a1385e1d98cc110a9a53641bc827ab0927acd4eb6931e6717112833895b98119ff751e4261cbf7a23fa0a1521e07ebfc554c78d6e28187259889", 0xc9}, {&(0x7f00000005c0)="1c051b0bc34706e8eb8c201c2d262b6e8dbc5db3158a74aa55efce21a4847505c415ea9b3c601dc0855b9d0658b71b6aba9a0e1d7f210c0d2332cd24261d9fae1cfa04cfdf31b8e97d51db2d58e46d5dd561e6b392212922c0f5d940de8558ad3237678e112d9a09509dcc16ef4d48e7f3b73d85227cdcb4892d6d51463ff28fd3a1d89f098cce4422eed3dd040271fce8cc0a4f0532f7bba489ecc144e862ffa0479bc428fcc2c68e9fc701d9819e243e929a99e659f651c43fe85a9d5c556755d177468c10efd0166ff3cab09449d2a4639292abe065", 0xd7}, {&(0x7f00000006c0)="93dbf20085be0016880e262df0ee997be1763e6d2740c1234fdbf581def2bbb3138ba1e17cab3ba0bc4b5361b0cb578630ff3d1ec2a82140d22ebab31f8a18f11fc0b2239775038ac5fbd871818a0995e9da9a0f93bf5dd07a23062abe43af3d52358de7159f14f64e1639199a712b8196648b651850677747efa3c15e09cf92110916416433ac14c6c3f50ff61f13cb5b63787251b357651b7d76e2901ae2d0a8b5dc7a", 0xa4}, {&(0x7f0000000780)="c80449a44034541f6b2626fc8d066aa5092bfc92919fc262baccc38cdc723a6d1c185730393f878cfb4b2bf907de03c19df47c88e1db6e39e3c7300c4cdc48f346af71f86978a21e75f0f5ce1185ed6eeb7c1f57e78a45a205ebeb568d122a5968a1b8a0158e526db6eca383e8e1d1", 0x6f}, {&(0x7f0000000800)}, {&(0x7f0000000840)="c6f0d7b5b2b56cc84506ad749bd5a90354f0310d1f33e6982bc90d3ffe76c1c0322762d7414de6b4af64e17f5e6bfacbbeb9dd7c0ce8e85d2cbe22d8752e2dbee3f39d8dce7f941b2992357b12dbeefecdfde4508f703c79e36aeb8ccc3198c03f33fb6734708091802413ae7d30da2fe27b36f5be7f96d29e184937897118e4dd18c4984061288d5decefb782db02d17f967399ec13707788846c91d5116dd70d597a3c0ad443f792d54ad7c21579e36ccd1b46272a99eec226cc8f453a17261380661254f8", 0xc6}], 0x6, &(0x7f0000002e00)=[{0x1010, 0x118, 0x1150, "c38a616a6f2263fa26d7c9e95d687fc870e925f7fab9c14145ba684aa577e7d32297622f8b605c5c2a024f965618ec44ca83a5f995270ebeb98ec7ca5854d6f3ff63dfec076bed99e8ebae8e8e638688b81071561e2ece8d30b4fcd7f62013f14947420fc1e4e13f2d28e55d7158fee86d1c2dd4aae69c5b1dac7c6e7e030decbc5ceab68457085dcdf088b1f8db3151b9241f0aa7d81f92498c97b92b67718f423aa165e6dd38e3fab9fa6c56b671a32d48a2a30e3261e3996ee7aead72db71bb4cbbbc69db8906c1152ed4c5cf79fa85169c7abba80e2b074839db11a0963a5c48f94c92c665d7d8ec3c602d4f3e6bfd216e3b93523a490d45264cc275cc6baee4c6d2306caee05d3f90c2063c09288bb1fa2a6fb8c6a32f7bf6340f84650dcfda8f2e23f64b52e1081d22166803c4465c057e48e290969cb28e4be18211f322ce4543ee11b0ef9927c7aa91896123d04856259b786357118b09247e8332980ea67e5cd33d85b617765702c3e276a10474a0abb17985f7cd7f969b4915dbe7c93eb5921cda0062210d8432203470d631c2095f525a000bb1be2296d02bc2c97d82315f091e99e0c570ef6efa784d263fa71b20c351d804a1b39777783e9ecfcfec6b7a183c5f20c68c0b747d2d06f79a4d8237cf45c987d3bffa7f64350bf2def0022847ec40cf6a3a43a010812127ba805ba8cac2a194b95323321fade6100a166ba5c4056b1e27260abe8c249d5ac99bd47e550c6f805ff4b32aae19ac80b00f1d8b0081259db189f5333fe4c75d9fa42566f138702ebfaf23634a4101f1866c2995c483fab7a91d19a19fdadf43628fe2357becded59e8a854ed73fac24ae31b2c647ff728a2edb74678cfe4ca282339d7815947fcb717fc0fc79aab6993966a42b0b0dd6b0f91c15ecb43659a66b6f384ab92a98b9f1e9d7dd87f727703911ae10ca3ff4e9f7604cb0f957b37bdaefd94f8dd7abca94c247e68f0e6a976d81b7dd05a490052c871008d077270cebfcc11560b4987dcd43fa8a788a19c2538504078ed8a397785c70f25b9587c416fefbaa01677f8a5c02f46e08821064625ce5418502a59b4db4c079e990501459acb979d825e9048d0ed4b731689559a784583e59de1330968ec878f9271432974d8ad9340fac2de5ea6406d4d51e23a599f1b72d560f491bfc1051b388adff13f4a7bde8fecd07fccf69dc176b468e28296213a129cc3c152e4d8b8ae06738d6a85b227f0ea2a205250f84ebf20c1b7d1262c06f61e761d38ea2d7657d6efdf53fe5ec0e9ca473628868f76fc6297c74b0b3265b6a1a31e1b9936866e81bf7b890364a882e9706750184cb342befc121584bac8d138ec341ebc40ac806af6e0b0d2d68578a9c5e84c2235a1dac5ef04ba08eddf06017ba8a51751bbee8604a855de557618fe354559af2411e1d5f0547485d04c99b4744fa4b70eee756a84f0b7d7da9935d06474ee52b38b8885f1f01c426d1b63845b091998351e4385f30a729bc27832366e6ef900d2dae041af2229a76d2c675de1768298b7588f5fdd9a40141bc79cfeac89c3e2e2ffe9a99b8167e9a6cc2531df42e068ef600b5c51029fca7b71f11aa2c30c858fba537611847f4335ca3a5ac532bfb584e68b24facc0a27953f8df8fa611f7f2ed19676ef5691ed4a97008534d917c2a07d24e098c0c57e52e123a3fb8bc66076ba8130dc9296a577e49fbb9c6e1ea6811c980ce72f5bed161400ddeff4202e83eb57f9fe8d5af3939762e3b957b9aafd7907752ca6084eb4807881a09a3622efc13e658995b346daf975579dbb4a14bec98d19939f42098ebdc7465dc07413100fc51ed16d1c25b834e236333ce5fedfbb0df954b1cc2da87864fb512f38c23fcdbfefbb3b6ab304aff26bade43608368c236c930f11e45773945ff3b195c9794f7985a5f358943c6bf1e6a387d5cb818c04eaef364cff87292ac58ab0302bebf5e960e6c94813a0096324140baf9415223b969f865d2cd676b4fd2923e90022d2487d6f445b159a6a90828aba22148a576c76781e911dcbda83d10501cfa58417318dc31b56e6a8757df7655e609f2924b0f4be372858dd68dec9dbeebf16e5303d69c4b84577f41c2276fb28de5da4dbb247c9527ba9c48d51aa19d1ee3921e9dbaf4c77a13aa47b221b9fbc237ca94e52fdd102a927ff6de2e5ceedc396c7f188893ba9240cc25fe6a37a7c8cc4cfa06acc0f823ff2ab20dea81e7f5f2b90ba70fd0e0ecab9fcae79e093f6469a8e1e43c4980109b0292d9e37b0f7935a1a186223b11794f220e12818af9868a4b7feaa0e865ddb333d624c566b91da89570a0206eafb78ba1aeaad75cea448754a3f8bec6b59650a9be23fc1931d0c826ef563dac8c93dba493dd49673bbbc9058b2221607af5866dd27594d1c5ead150463f107f7d00847e9f10c5313e57abf158f63928062e5c268a98010ba71e3f0497c9ac2893d7a5e1307b393fc8ba4440d70652825ceefdab782052ce80aa80d2f4b52a19e6b4fc640c512967321948ea646da747001e6041bd81f2da7662caa272a8f2f9077b8111c8f197f43dd8444a3600e6fa897964a20d33dd6a7aaab00a017aa69495a75d38a0e04880fd82a5c94a82fad93064d7f4a75201a7aca29266bcc73dd6a5b47e4b99e852be30b1c4223973205b3032113aff82785d923bb78a48d0d7b6ba28383681f987f934190ba44650356b8b72911328fd60ea5076678330a1f3717d61c69ba9e5dddb5c915331e925206e9daad852ded9dc848097535dfd247c819604384d2cf1e0cd4e22a2e91195ee03e44df8f6104b69703541166b50ee04a6bd87685dbcbdd941c5a16091275033a58d65a40d4c804ecb7e59bd71645fdc47c70e47a4558049fe71a1f22549bb1cac03f890b90c49627a842d728a5e7d49d9fc6e89e7999cf848c07f545dee82f3d56b8c08589eb58f56df2e47984d0d9c327ee1f8a56534a290f85f85fec625f63bbc5044a50ebb82e69ee014c3670476c154440f1ea7c90cfd69e36d274beba54e0037337529c844419b691e433ac107daee70ff36396aba1f255e87b291f491cfd9b952ea446b7b6fee27d3164c5520165836125cfac607a04eb91f49686cea7382186358748d60ed559232f4b70c6132e7eccde6655f64d50b0be3d2479d0ce25e49370e72f2589aebf6b8138a31039eba70efa7a1e8a853b5bc96b9630eb5ba3c0e302680b9d60b128dc84fe865fdbf39690a38ea96e78987485e489486bf563d4e7b1a1aea510fe842f23965593b9aac87772fcad17ba0d1301ecb8097a64f07599413809aa89f670084eb279aab86ac116d39d4d8f55710246e1f9ea08ff9207c8c70c6b803233a783279b3f03eddefb9b451f63822b400e7ca79300f4b77e0b485cda099a3825f3486e0d03de4adc98249fc66c0bc811adfb4554321bb905352130c6a17d434cad669882c3789277737f1f3cb8deb78f294f01d99462f507a2f2bbaaefc6eb342e11fdb11a5428f280163fd40c74b919e19b56b67d8689164f827cc69ddbcf610c3962ba31f53c60a9680b808faeb8db3f79bfe63bf9d8e114c8317a502d2f8ca1c40c65b5680321b03a9da0c5e95339c66beb17509d39a6911bce812c61b6821daa55c6c1107555b769ca80cfab89f318b2c04cf545c1fe7a57e877a3342b1e2e79b6eb9853d64d76fb751d05adc6e40c792ac3c5a4038ec511ebab922a473b1ce96d37e7ae856076820e1f10fb674c52d9d7b35d09d42d67f72c09a58b2a7e2727129f67ae848e6699c1f6a98e26402b4917462c3134f39d2dae8b1f5179cb062770262e0543a714cf778410ca7cc944fd42fae23734677bbdc00ae4d748a5806575822100883948a4ed283bbfad897af096ac6b7f342c75b768dc58409e6fbbd5def2d6fb25602642f603624fde2549775272034ee2d7f5d81c424846adab4860ee85383d6f5c523a87edeaca221b2e966a83246ca024b7f5b1e676d4ceac5ce5b76bed73cba8736f82147769c267305adedf978f3669f92850e9b6495a396e99fb735d2f3168fd64c1f6f2386f76e78a1fe7d6f3f7a720896380aa765effb08177b11391979a2f68a0950a0ac2cbb0f162a593ed125a583833acc421e9fb6b76703d4706a4ac94daf3c9216f984d7013df1c09dcaf0a27b7c1cba1237496586a0b80e0d4abf60a70baec0a64d28c01f8116a2f1d974b6fdbdbe30442fe244c7c98820ed0162ff2c0cd338d1027471238088686d88e8381a57ee6c263e5a0c1d8fd9a8ab64bdc51158dc4e820623c6af12a111e9ff06a9157199770b59c7b8bd20a15faa5b666471504c5210fd5c6fa5a4a82f82d45124f1dd577a4c5fe403d2c4784d74d6f204ae7d9ce6b3feeb047a3ac34e2668a1b2ae0362ff036cade90930500c4d3ffefc1f4b8e0987f1499b32e70277d261046312edf122421b5114ae3ffd54fda25b7d1ce2a296a0da0155baba8d84e4d4838b5fde9cd06b08ce07616c823b61942c9b412b8f3584e2502ae3bc3657308f52ef47d52a6fd5c8dc6b7270f777fe01a15f59cc4d7796807811f732dc134f4636117f61c5d16519fef656f200908b48e0ddd7dfaecde7b9f40fe243fe58bd2fd7e271eda72cea79e4e7e34c770351b66e51d439c1864e8b400e9e91f29dbbfa9e909ff90ad2651eb7853eb1748165247052a08db2a51fd8ed178cedcfc4d3f0d3224172ff9ac69a5663c7fec6b8370669db73c361137524f6930d3d8a2f41b79e4e7a3b4321ef9af9a8626a6732017c6a05e10f3a86fce6c1455e315185fb7abf5b7ee46f127362a5d0a91a3b864dc727280c90cc9dc464ce3a7b5671441e00eddad93b4a0fe38aa0d0b0317864c19e5cba848025136c927cd3b44e65fb2fc734bf2150c7f4cb287939c99af1084b471f283b67454df6cd36550d71ed67b77873aaf691d7f4dc867c81287243162dc9e92c9c89b1657e91d50e0d814c3f62b1ed636011abf1ec8670ac77e6176ec307f82591ae80be266f51e525d40d14cd4158e9cef1f3d4be98f0c6ae57a000e77b5b459c4ebab0208ddfd6075554655bdada6e0f5fbef7d5011db5e0140dbcc636efff2f14aad19c3a0c7ae34f663441203e833361308851cf301423e7e53594fe7dafa65789c5281361a8ba037c5131072580767a8645dfc49e7f650091fbe061de31accb367f10d0d14b745149be5a9eec1806630b18fda968a0fef3a4e61b11049c577521fd0ecf8f1b0a73809ecd62500abde77f29801a7b8604055bb23b2dc4540aaf594ee514c3ab21cc11c46a4fab32162c89876947e1e4940bc5eb0912f6908c992877cededb363cb5f727eab055480b38591d6e4c98367a8fbdadd38f4c2e8fef4630d43cb15368ad3e48fe15f740fabb1e558603dac4551c4c0b156fa1b2b51b688a5437a9e7f88b6aef461e8ddba6611f1fca1f8436c908e6dfad3bb7b24ebe2ca5b1ca1100f8df6dcbeb9d1861ecd741954b8022efc75b52b7eaaf7113bdf5e87e1391ddcea51584a030328f1ca8b029efe4df989f5a2f85e175a259c60d2920a61dcddb2b6c34c564ecb3831fa3ac65fc1a663398493b0a80c4c4795fdc6777803cf43d75dd8923e59eb95f7fd79a9711970777f18672a5811b3867321af86d7c0f415fdab8558a562dfa8842387ac1ccb18be56cc55d525e8b9277b7c3e2ca4dec37825c3b054fe4ecf7eccfcbd6a90c026eae8c68b51ab8c6466adac9304bc6afeb1f4d85e08bec74074f6e7e57e412584d757aee5ab689901d3e32"}, {0x58, 0x10f, 0x6, "840384891997448d104510d1b8d15a3ca197b9304b296458c79db19f2d91b7154748909b9f17c3faaf192b217788e60f4e30d3e4c3aa0f6c9568049c6647c4d46f20f8"}, {0x68, 0x102, 0x4, "8b2545156c1c8c772b6b63614a7dc3b5a0f4ae95e0bb50116925cc21f5a73b82bc407af18b9adcb3b2344d7d013726e017e8af6f4ba00348adc00cf0c8506d08605dc2beb7e41b6806d6615fbf24f8b032f502c3d78941"}, {0x60, 0x112, 0xf9, "516ab80b2c350e6ef9d29d82d659be0e1badfd78ab7e1bcefac7f654d78050dfec6af5f0934445edd4b7db918ab900e853e71a165128c1495acce02b712452e092c619385b5a1dd8a5c9"}], 0x1130}, 0x38) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xc3ff}, 0x0) 6m32.146217079s ago: executing program 32 (id=6608): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x4f}, @map_val={0x18, 0x1, 0x2, 0x0, r2}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0xffffff92, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x4}, 0x20) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8, 0x3, 0x3}}]}, 0x20}}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5f0000001000ffff23bd7000f8dbdf25000000005fd4eaea7ce681c2e4b9943075b1345b9d66692a7f63ac88db24bac7f0d418f7c4ebe55e7abe465a5fa0cc6912f89fca28a8da1efe23bb8f86313fa7015743d76eeda795d9026534f4345a056f4792c8cdfaac4031cc3f90b7937fb7eecea54121aeae345b9602db05000000000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="385a03002f5204001c00128009000100626f6e64000000000c00028008000b00", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000ac0)={0x27, 0x0, 0x0, 0x5, 0x4, 0x9, "046b0f4a8f35f65c5a53ee38c912462f0b64d6804b60710afff28f12920ea68cbb9672c075dea6954b7008c59cd50d6d6e96f4ac2fcfecbe296f4a8fdcf028", 0x1}, 0x60) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x36}}], 0x18}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00'}) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r10 = accept4(r8, &(0x7f0000000140)=@caif=@dbg, &(0x7f00000001c0)=0x80, 0x800) sendmsg$qrtr(r10, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000004c0)="cd6a226fc44c7dd48edcc8c01ae08a6d63cd1324397d9bfea03a064297073dbc26d8cc80c51a4cce71e2edaf6d289eb558acc8170218b363351b529878aa301bf6a5ef0f671773d6ae3b3b570dbb6ec7c6d5f5d73b92b91f118e4810a7f5e14bda6430a60ba09800e91c37d4f68ad8de6db37885ce0ed2123e516b1f5bf74a4d62035eba756dd176977fbb1de67791a1385e1d98cc110a9a53641bc827ab0927acd4eb6931e6717112833895b98119ff751e4261cbf7a23fa0a1521e07ebfc554c78d6e28187259889", 0xc9}, {&(0x7f00000005c0)="1c051b0bc34706e8eb8c201c2d262b6e8dbc5db3158a74aa55efce21a4847505c415ea9b3c601dc0855b9d0658b71b6aba9a0e1d7f210c0d2332cd24261d9fae1cfa04cfdf31b8e97d51db2d58e46d5dd561e6b392212922c0f5d940de8558ad3237678e112d9a09509dcc16ef4d48e7f3b73d85227cdcb4892d6d51463ff28fd3a1d89f098cce4422eed3dd040271fce8cc0a4f0532f7bba489ecc144e862ffa0479bc428fcc2c68e9fc701d9819e243e929a99e659f651c43fe85a9d5c556755d177468c10efd0166ff3cab09449d2a4639292abe065", 0xd7}, {&(0x7f00000006c0)="93dbf20085be0016880e262df0ee997be1763e6d2740c1234fdbf581def2bbb3138ba1e17cab3ba0bc4b5361b0cb578630ff3d1ec2a82140d22ebab31f8a18f11fc0b2239775038ac5fbd871818a0995e9da9a0f93bf5dd07a23062abe43af3d52358de7159f14f64e1639199a712b8196648b651850677747efa3c15e09cf92110916416433ac14c6c3f50ff61f13cb5b63787251b357651b7d76e2901ae2d0a8b5dc7a", 0xa4}, {&(0x7f0000000780)="c80449a44034541f6b2626fc8d066aa5092bfc92919fc262baccc38cdc723a6d1c185730393f878cfb4b2bf907de03c19df47c88e1db6e39e3c7300c4cdc48f346af71f86978a21e75f0f5ce1185ed6eeb7c1f57e78a45a205ebeb568d122a5968a1b8a0158e526db6eca383e8e1d1", 0x6f}, {&(0x7f0000000800)}, {&(0x7f0000000840)="c6f0d7b5b2b56cc84506ad749bd5a90354f0310d1f33e6982bc90d3ffe76c1c0322762d7414de6b4af64e17f5e6bfacbbeb9dd7c0ce8e85d2cbe22d8752e2dbee3f39d8dce7f941b2992357b12dbeefecdfde4508f703c79e36aeb8ccc3198c03f33fb6734708091802413ae7d30da2fe27b36f5be7f96d29e184937897118e4dd18c4984061288d5decefb782db02d17f967399ec13707788846c91d5116dd70d597a3c0ad443f792d54ad7c21579e36ccd1b46272a99eec226cc8f453a17261380661254f8", 0xc6}], 0x6, &(0x7f0000002e00)=[{0x1010, 0x118, 0x1150, "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"}, {0x58, 0x10f, 0x6, "840384891997448d104510d1b8d15a3ca197b9304b296458c79db19f2d91b7154748909b9f17c3faaf192b217788e60f4e30d3e4c3aa0f6c9568049c6647c4d46f20f8"}, {0x68, 0x102, 0x4, "8b2545156c1c8c772b6b63614a7dc3b5a0f4ae95e0bb50116925cc21f5a73b82bc407af18b9adcb3b2344d7d013726e017e8af6f4ba00348adc00cf0c8506d08605dc2beb7e41b6806d6615fbf24f8b032f502c3d78941"}, {0x60, 0x112, 0xf9, "516ab80b2c350e6ef9d29d82d659be0e1badfd78ab7e1bcefac7f654d78050dfec6af5f0934445edd4b7db918ab900e853e71a165128c1495acce02b712452e092c619385b5a1dd8a5c9"}], 0x1130}, 0x38) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xc3ff}, 0x0) 16.339269215s ago: executing program 0 (id=9133): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='$\x00', 0x400080, &(0x7f0000000040)={@_ha_fsid={[0x81, 0x4]}, {0x0, 0x2, 0x5, 0x4cb6}}, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x5}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "d4090fe0349f6bf3bda84592ba"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$XFS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) ioctl$FIONCLEX(r0, 0x5450) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000003c0)=0x7ff, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r1, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x65}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008084}, 0x90) (async) r3 = socket(0x23, 0x4, 0x800) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000540)) ioctl(r0, 0x200, &(0x7f0000000580)="6dc73cf5e9c6a57833643d1314d9a4b4eac35302653bf6cd008081f171febc3b539315d51513b48563260716e235d4") ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f00000005c0)) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r3) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000880)={&(0x7f0000000600), 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x1a0, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe5}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x49}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xe, @dev={0xfe, 0x80, '\x00', 0x29}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg0\x00'}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xa}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000008c0)={0x0, 0x5}, &(0x7f0000000900)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000940)={r5, 0x9f, 0x4, [0x6, 0x1, 0x5, 0x8]}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f0000000980)={0xfffffffffffffff7, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a40)={'tunl0\x00', &(0x7f00000009c0)={'sit0\x00', 0x0, 0x0, 0x8, 0x1, 0x2452, {{0xd, 0x4, 0x1, 0x1a, 0x34, 0x66, 0x0, 0x2, 0x4, 0x0, @loopback, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x44, 0x0, 0x1, [0x81]}, @timestamp={0x44, 0x14, 0xb4, 0x0, 0x9, [0x80000000, 0x8, 0x3ff, 0x4407]}]}}}}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000a80)={@local, r7}, 0x14) (async) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000ac0)={0x35, 0x0, 0xb, 0x9, 0x1, 0x81}) bind$bt_hci(r3, &(0x7f0000000b00)={0x1f, 0x1, 0x4}, 0x6) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000b40)={r5, 0x4}, 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x74, r1, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x179e0b4a59cfc982}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) (async) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x508010}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "bed242758055b79c9f6ae968ad3c33f6"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bind$inet(r2, &(0x7f0000000e00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) 13.632073778s ago: executing program 0 (id=9138): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@local, @local, 0x0, "23c864a4521fe104e8677e2873d9eda600421d0c5907cdd3314b1177f2571d34", 0x10001, 0x3, 0x5, 0x2}, 0x3c) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000100)={0xa14, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x60}}}}, [@NL80211_ATTR_TX_RATES={0x148, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x8, 0x3, 0x4, 0x5, 0x81, 0x981, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x6, 0x60, 0x37, 0x5, 0x4, 0xc, 0x60, 0x30, 0x12, 0x74, 0x2, 0x2, 0x3, 0x36, 0x60, 0x6, 0x1d, 0x4, 0x24, 0x2, 0x1, 0x1b, 0x0, 0x6, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x8000, 0x6, 0xff21, 0x6, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x2, 0x20, 0x0, 0xe2d, 0xfff, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0x6}, {0x6}, {0x7, 0x12}, {0x6, 0x1}, {0x0, 0x7}, {0x7, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x8}, {0x2}, {0x7, 0x9}, {0x6, 0x3}, {0x1, 0x9}, {0x2, 0x8}, {0x3}, {0x0, 0x6}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x6}, {0x5}, {0x6, 0x3}, {0x6, 0x6}, {0x6, 0xa}, {0x5, 0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x1}, {0x6, 0x3}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x441c, 0x7, 0x4, 0x5, 0x4, 0x7f, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x1, 0x2, 0xffff, 0x6, 0xfc01]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x5a8, 0x1, 0x3, 0x1, 0x7, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x4, 0x3, 0x24, 0x12, 0x4, 0x1]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x4, 0x6, 0x48, 0x6, 0x6, 0x60, 0x36, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xdc, 0x16, 0x36, 0x60, 0xb2ca6b72aacb436c, 0x4, 0x48, 0x18, 0x30, 0x24, 0x18, 0x48, 0x4, 0xc, 0x16, 0x24, 0x16, 0x12, 0x9, 0x1, 0x1b, 0x1, 0x1, 0xc]}]}]}, @NL80211_ATTR_TX_RATES={0x148, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x95, 0x9, 0xc, 0x18, 0x18, 0x6c, 0x18, 0x1, 0xc, 0x1, 0x30, 0x21, 0x5, 0x0, 0x1b, 0x0, 0x16, 0x6c, 0x7, 0x5, 0x16, 0x5, 0x36, 0x6c, 0x48, 0x1b, 0xc, 0x86d4b8eeecb595dc, 0x1, 0x1, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1ea, 0x9, 0x80, 0x10, 0x6, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1b, 0x2d, 0x1b, 0x1b, 0x48, 0x2, 0x18, 0x0, 0x4, 0x4, 0x24, 0x16, 0x18, 0x1b, 0x1, 0x1b, 0x30, 0xb, 0x24, 0x6, 0x18, 0xb, 0x18]}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0xa}, {0x6, 0x1}, {0x2}, {0x5, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x3}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x3}, {0x1}, {0x7, 0x6}, {0x0, 0x8}, {0x2, 0x4}, {0x4, 0x8}, {0x4, 0x9}, {0x6, 0xa}, {0x2, 0x7}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0xa}, {0x7, 0x2}, {0x6, 0x7}, {0x4, 0x8}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x6}, {0x0, 0x4}, {0x6, 0x9}, {0x6, 0x3}, {0x5, 0xa}, {0x7, 0x7}, {0x6, 0x6}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xbb3b, 0xaa, 0x6, 0x9, 0x80, 0x5dee]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x277, 0x800, 0x2, 0x1000, 0x1, 0x9, 0x23, 0x293]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xbf5c, 0x0, 0x1000, 0xff, 0x9c42, 0x63, 0x3ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x6, 0xaa, 0x0, 0x7, 0x3, 0x28]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x4, 0x48, 0x24, 0x4, 0x5, 0x16, 0x0, 0x12, 0x0, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x7, 0x800, 0x0, 0xfff9, 0x8, 0x32d]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x6c, 0x5, 0x12, 0x18, 0x3, 0x9, 0x16, 0x3a, 0x14, 0x9, 0x36, 0x3, 0xc, 0x30, 0x48, 0x3d, 0x1b, 0x9, 0x12, 0x16, 0x4, 0x6c, 0x60, 0x5, 0x18, 0x12, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x5}, {0x2, 0x1}, {0x5, 0x8}, {0x6, 0x8}, {0x7, 0x1}, {0x1, 0x8}, {0x7, 0x3}, {0x0, 0x5}, {0x2, 0x5}, {0x3, 0xa}, {0x4, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x7}, {0x5, 0x7}, {0x6, 0x7}, {0x5, 0x7}, {0x1, 0xa}, {0x4, 0x7}, {0x4}, {0x7, 0x2}, {0x5, 0x1}, {0x6, 0x6}, {0x1, 0x1}, {0x4, 0xa}, {0x0, 0x9}, {0x3, 0x8}, {0x2, 0x7}, {0x4, 0x4}, {0x6, 0x1}, {0x6}, {0x1, 0x3}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x9}, {0x7, 0x1}, {0x3, 0x9}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7, 0x9, 0x4, 0x995, 0x5, 0x3]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x6c]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x9, 0x16, 0x1, 0x1, 0x1b, 0x1, 0xb, 0x5, 0x6c, 0x6, 0x4, 0x2, 0x24, 0x16, 0xc, 0x24, 0x6, 0x48, 0x3, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x2, 0x1, 0xf, 0x3, 0xfc65, 0x72f]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x9, 0x3, 0x12, 0x1, 0x30, 0x1, 0x16, 0x4d, 0x60, 0x12, 0x60, 0x5, 0xc, 0x6, 0x16, 0x48, 0x4, 0x18, 0x1, 0x3]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x16, 0x24, 0x1b, 0x48, 0x6, 0x1, 0x24, 0x24, 0x2, 0x12, 0x16, 0x48, 0x1, 0x47]}]}]}, @NL80211_ATTR_TX_RATES={0x3e0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9600, 0xfff, 0x2000, 0x2, 0xcf8, 0x6, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0xffbd, 0xa0, 0x0, 0x3, 0x3, 0x8, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x108, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x6}, {0x0, 0x8}, {0x1, 0x5}, {0x4, 0x2}, {}, {0x0, 0xa}, {0x4, 0x4}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0x6}, {0x7, 0xa}, {0x4, 0x1}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x2}, {0x5, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0x1}, {}, {0x7}, {0x7, 0x3}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0x3}, {0x0, 0x2}, {0x6, 0x4}, {0x6, 0x6}, {0x5}, {0x2, 0xa}, {0x6, 0x7}, {0x5, 0x3}, {0x2, 0x6}, {0x0, 0xa}, {0x5, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x3, 0x2}, {0x2, 0x2}, {0x6, 0x5}, {0x2, 0x3}, {0x1, 0x9}, {0x3, 0x3}, {0x1}, {0x5, 0x6}, {0x6, 0x3}, {0x3, 0x6}, {0x0, 0x6}, {0x4, 0x4}, {}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x5, 0x9, 0x36, 0x9]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0xa}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x5}, {0x5, 0x3}, {0x2, 0x3}, {0x0, 0x6}, {0x7, 0x4}, {0x5, 0x3}, {}, {0x5, 0x3}, {0x1, 0x1}, {0x6, 0x1}, {0x3, 0x6}, {0x3, 0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x2}, {0x7}, {0x6, 0x9}, {0x5, 0xa}, {0x1}, {0x3, 0x4}, {0x2, 0x2}, {0x3, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x4, 0x5}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x5, 0xa}, {0x6, 0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x3, 0x1}, {0x1}, {0x3, 0x3}, {0x5, 0xa}, {0x2, 0x3}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x1, 0x8}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x1}, {}, {0x5, 0x7}, {0x0, 0x6}, {0x6, 0x1}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9a5c2a5eec51cad3, 0x36, 0x24]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x7}, {0x6, 0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x5, 0x4}, {0x6, 0x7}, {0x1, 0x7}, {0x6, 0x6}, {0x2, 0xa}, {0x3}, {0x0, 0x9}, {0x7}, {0x3, 0x7}, {0x2, 0x5}, {0x3, 0x5}, {}, {0x7, 0x4}, {0x1, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x4}, {0x4, 0x2}, {0x3, 0x6}, {0x1, 0x7}, {0x3, 0x6}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x5}, {0x6, 0x3}, {0x6, 0x2}, {0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x2, 0x3}, {0x4}, {0x7}, {0x1, 0x1}, {0x3, 0x4}, {0x7, 0x5}, {0x5, 0x9}, {0x0, 0x6}, {0x0, 0x4}, {0x4}, {0x5, 0x4}, {0x3, 0x4}, {0x6, 0x1}, {0x0, 0x3}, {0x6, 0x8}, {0x5, 0x8}, {0x7, 0x9}, {0x5, 0x6}, {0x3, 0x1}, {0x6, 0x19}, {0x0, 0x9}, {0x2, 0x7}, {0x5, 0x9}, {0x5, 0x6}, {0x1}, {0x1, 0x8}, {0x1, 0x5}, {0x7, 0x3}, {0x3, 0xa}, {0x1, 0x2}, {0x1, 0x5}, {0x4, 0x8}, {0x4, 0x1}, {0x0, 0x8}, {0x5, 0x5}, {0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc31, 0x8000, 0x0, 0x1, 0x3, 0x8001, 0x2, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0xe, 0x10, 0x3, 0x1, 0x5, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x4}, {0x2, 0x6}, {0x1, 0x9}, {0x0, 0x6}, {0x6, 0x9}, {0x2, 0x3}, {0x7, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {}, {0x3, 0x6}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0xa}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x6}, {}, {0x1, 0xa}, {0x2, 0x5}, {0x7, 0x6}, {0x3, 0x3}, {0x5, 0x7}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x1}, {0x5}, {0x2, 0x8}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x800, 0xab6, 0x7f, 0x8, 0xe5a, 0x8, 0xd5df]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x1}, {0x1, 0xa}, {0x0, 0x2}, {0x7, 0x6}, {0x3, 0x1}, {0x6, 0x5}, {0x0, 0x8}, {0x7, 0x9}, {0x7, 0x7}, {0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x7, 0x1}, {0x1, 0x8}, {0x4, 0x1}, {0x4, 0xa}, {0x2, 0x4}, {0x7, 0x3}, {0x5, 0x4}, {0x6, 0x4}, {0x0, 0x2}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x5, 0x4}, {0x4, 0x6}, {0x1, 0x7}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x3}, {0x1, 0x5}, {0x0, 0x3}, {0x3, 0x5}, {0x2, 0x3}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x5}, {0x2, 0x4}, {0x0, 0x8}, {0x2, 0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x6, 0x8}, {0x5, 0x1}, {0x5, 0x1}, {0x7, 0x2}, {0x0, 0x2}, {0x0, 0xa}, {0x6, 0x3}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x1}, {0x2}, {0x4, 0x8}, {0x0, 0x8}, {0x4, 0x6}, {0x4, 0xa}, {0x5, 0x6}, {0x1, 0x5}, {0x6, 0x1}, {0x1, 0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x53, 0x8001, 0xc62a, 0xfe01, 0x23e, 0x72, 0x5, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x40, 0x1, 0x7, 0x4, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x5, 0x7e97, 0xfffb, 0xa849, 0x7, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x9}, {0x6, 0x4}, {0x2, 0x2}, {0x6, 0x7}, {0x7, 0xa}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x0, 0x3}, {0x5, 0x3}, {0x2, 0x3}, {0x6, 0x9}, {0x4}, {0x2, 0x1f}, {0x7, 0x6}, {0x7, 0xa}, {0x2}, {0x5, 0x3}, {0x5, 0x3}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x4}, {0x4, 0x9}, {0x4, 0x7}, {0x1, 0x9}, {0x6, 0x3}, {0x2, 0x6}, {0x7, 0x3}, {0x5, 0x9}, {0x7, 0x1}, {0x6, 0x12}, {0x3, 0xd}, {0x0, 0x8}, {0x4, 0x2}, {0x6, 0x3}, {0x4, 0x5}, {0x0, 0x9}, {0x6, 0x9}, {0x5, 0x5}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x5}, {0x6, 0x3}, {0x6, 0x6}, {0x1, 0xa}, {0x0, 0x7}, {0x4, 0x9}, {}, {0x4, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x4, 0x5}, {0x4, 0x5}, {0x5, 0x3}, {0x3, 0x5}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x8}, {0x2}, {0x6, 0x3}, {0x6, 0x1}, {0x2, 0x4}, {0x2, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x8}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x6}, {0x7, 0x2}, {0x3, 0x4}, {}, {0x7, 0x9}, {0x2, 0x9}, {0x1, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x5}, {0x5, 0x6}, {0x2, 0x4}, {0x4, 0x6}, {0x7, 0xa}, {0x4, 0x4}, {0x2, 0x1}, {0x5, 0x9}, {0x1, 0x4}, {0x5, 0x1}, {0x2, 0x2}, {0x0, 0x6}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x1}, {0x2, 0x8}, {0x3, 0x4}, {0x5, 0x1}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x1}, {0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x619, 0xf, 0x6, 0x101, 0x2, 0x40, 0xaf, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x200, 0x2, 0x63, 0xfffd, 0x3, 0xfff7, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x6, 0x48, 0x1b, 0x2, 0x16, 0xb, 0x12, 0x4, 0x5, 0x2, 0x60, 0x3, 0x30, 0x1, 0x30, 0x9, 0x1, 0x9, 0x24, 0x16, 0x4, 0x60, 0xb, 0x1b, 0x4, 0x12, 0x24, 0x0, 0xb, 0x30, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x2c22, 0xea8, 0x1d, 0xf, 0xf, 0xfff, 0xfc01]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0xffff, 0xc, 0x8, 0x0, 0x8, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0xb274, 0xe, 0x100, 0x8, 0x8, 0x57]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe42, 0x9, 0x800, 0xed, 0x7f, 0x6, 0x7, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x30, 0x4, 0xc, 0x6c, 0x6c, 0x6c, 0xc, 0x1b, 0x3, 0xc, 0x2, 0x12, 0x4, 0x16, 0x9, 0x3, 0x4, 0x1b]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x13, 0x60, 0x48, 0x6c]}]}]}, @NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x92, 0x9, 0x8, 0x0, 0x8000, 0x4, 0xfffb, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9b, 0xfffd, 0xebd, 0xf5, 0x79, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0xf, 0x3, 0x6, 0xced3, 0x8001, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x2, 0x7, 0x3, 0xfffd, 0x0, 0xffff]}}]}]}, @NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x2, 0x8000, 0x7, 0x6, 0x101, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xb642, 0x9, 0x8, 0x7, 0x9ea, 0x5, 0x20]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0xfff7, 0xfffd, 0x0, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x6}, {0x1, 0x2}, {0x5, 0x6}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0xa}, {0x6, 0x8}, {0x1}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0xa}, {0x5, 0x4}, {0x3, 0x2}, {0x1, 0x8}, {0x4, 0x2}, {0x5, 0x4}, {0x2, 0x6}, {0x0, 0x9}, {0x6, 0x6}, {0x2}, {0x3, 0x9}, {0x1, 0xa}, {0x0, 0x6}, {0x2, 0x3}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x3}, {0x3, 0xa}, {0x4, 0x7}, {0x1, 0xa}, {0x7, 0x3}, {0x1, 0x9}, {0x1, 0xf}, {0x2, 0x2}, {0x7, 0x7}, {0x4, 0x2}]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x7, 0xb, 0x8, 0x9, 0xa3a, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x40, 0x2, 0xfff9, 0x2, 0x7, 0x9, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0x60, 0x60, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x36, 0x6, 0x5, 0x24, 0x1, 0x9, 0x30, 0x48, 0x6, 0x1, 0x2, 0x9, 0x16, 0xc, 0x9, 0x6c, 0x6c, 0x4, 0x24, 0x30, 0x30, 0x2, 0x6c, 0xb, 0x1, 0x30, 0x4d8ea9ed7e6982d2, 0x6c]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x10, 0x6, 0x301e, 0x79cd, 0x8, 0x4, 0x7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xd, 0x1, 0x2, 0xed, 0x9, 0x0, 0xfff]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x0, 0xfff, 0x7, 0x1, 0x400, 0x1000, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x5, 0xf, 0x6, 0x3, 0xf5cb, 0xffff, 0xc]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x0, 0x67e5, 0x7ff, 0xfe6, 0x3, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x0, 0x200, 0xc31, 0x100, 0x7, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x30, 0x30, 0x16, 0x9, 0xe7681b76dbb1cc35, 0x36, 0x9, 0x5, 0xb, 0x9, 0x30, 0xc, 0x30, 0x18]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0xa14}, 0x1, 0x0, 0x0, 0x8000}, 0x4c801) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200000, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000c40)={0x3, &(0x7f0000000c00)=[{0x29, 0x1, 0x2, 0x400}, {0x4, 0x7f, 0x8, 0x3}, {0x10, 0x0, 0x7, 0x7}]}) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xc4, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x79, 0xa8, @random="b51250080b66c43c32b25052c340d1cc1f1fe6deeea5fcd449dc265e96ad4e7427aecfc5bbf482be067ad3412a7105199f1b6707bc75599449c25ffd00877d3ac9b4ff19f2faa04db9607f68282071db0fa3c177a859b2906ac38d95118220c61b4c30f2edf866682a50f48a35bf92b86353573ac6"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e80), r2) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000ec0)={0x104, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe23e}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x50}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x18}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x104}}, 0x4010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000011c0)={r2, &(0x7f0000001080)="56d39b29b4473aca79d24a597d015ae22c38886b4dcac025f4e982eff23d413c8dc9dcdb02433ea375d59505967eb6f5e05598d9bbf9ff8a829d94b748e11e679f7792e4e36c588a296e62336472faac6a6e7af7165aee50cab7ed6e082e2cce39f18dcafca70ff9d53444f5766771613ce4fb945a994adb8b1db3db899e616afd86013070ee83a8d6c9fa7cee35b3892bcc3d5a5b075cae2abdeddaf6977f71d35b38e4ff64ba705413df572ec3e3a0f8ff967c9cd1f0d8c2d00fddb08caae016dea0d27f87b7bbef3e032fe2343ed048", &(0x7f0000001180)=""/51}, 0x20) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(r1, &(0x7f0000001ec0)={&(0x7f0000001200)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001240)=""/242, 0xf2}, {&(0x7f0000001340)=""/111, 0x6f}, {&(0x7f00000013c0)=""/76, 0x4c}, {&(0x7f0000001440)=""/71, 0x47}, {&(0x7f00000014c0)=""/125, 0x7d}], 0x5, &(0x7f0000001d40)=[@mask_cswp={0x58, 0x114, 0x9, {{0xfffffffe}, &(0x7f00000015c0)=0xfffffffffffffff9, &(0x7f0000001600)=0x4878, 0x9, 0x1, 0x83, 0x5, 0x8, 0x7}}, @fadd={0x58, 0x114, 0x6, {{0x3, 0x7fffffff}, &(0x7f0000001640)=0x1, &(0x7f0000001680)=0x7, 0x8000000000000000, 0x2, 0x400, 0xe14, 0xb, 0x1c34}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0xa}, {&(0x7f00000016c0)=""/99, 0x63}, &(0x7f0000001b40)=[{&(0x7f0000001740)=""/212, 0xd4}, {&(0x7f0000001840)}, {&(0x7f0000001880)=""/208, 0xd0}, {&(0x7f0000001980)=""/151, 0x97}, {&(0x7f0000001a40)=""/204, 0xcc}], 0x5, 0xc, 0xfa}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001bc0)=""/148, 0x94}, &(0x7f0000001c80), 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x719}, &(0x7f0000001cc0)=0x7fffffff, &(0x7f0000001d00)=0x3, 0x7, 0xb7f, 0x8f, 0x8, 0x1, 0x8}}], 0x180, 0x80}, 0x4095) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001fc0)={'nat\x00', 0x0, 0x4, 0x67, [0x3, 0x9, 0x4, 0x7, 0x6, 0x5], 0x4, &(0x7f0000001f00)=[{}, {}, {}, {}], &(0x7f0000001f40)=""/103}, &(0x7f0000002040)=0x78) getpeername$packet(0xffffffffffffffff, &(0x7f0000002080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000020c0)=0x14) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000002100)=r7) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000002140)) r8 = accept4$inet(r0, &(0x7f00000021c0)={0x2, 0x0, @dev}, &(0x7f0000002200)=0x10, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002240)={'wlan1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002300)={{0x1, 0xffffffffffffffff}, &(0x7f0000002280), &(0x7f00000022c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000023c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002340), &(0x7f0000002380)}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002440)=@o_path={&(0x7f0000002400)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000002480), 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002740)={'syztnl0\x00', &(0x7f00000026c0)={'ip6tnl0\x00', r7, 0x29, 0x9, 0x2, 0xa8, 0x2b, @mcast2, @remote, 0x40, 0x7, 0x3, 0x1}}) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002800)={&(0x7f0000002780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xfffffe01}}]}, {0x0, [0x2e]}}, &(0x7f00000027c0)=""/33, 0x33, 0x21, 0x0, 0x6, 0x10000}, 0x28) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000002ac0)={{r2, &(0x7f00000028c0)='nat\x00', 0x100, &(0x7f0000002900)={@align=0xfffffffffffffffd, {0x1, 0x8, 0x6, 0x8000}}, 0xc, &(0x7f0000002940), &(0x7f0000002980)=0x1f}, {[0x7, 0x7, 0x40, 0x3]}, 0x7, 0xf8, &(0x7f00000029c0)=""/248}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f80)={0x18, 0x1b, &(0x7f00000024c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x0, 0xa, 0x9, 0x4, 0xffffffffffffffc0}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_fd={0x18, 0xb, 0x1, 0x0, r12}]}, &(0x7f00000025c0)='GPL\x00', 0x3, 0x85, &(0x7f0000002600)=""/133, 0x40f00, 0x1, '\x00', r13, 0x0, r14, 0x8, &(0x7f0000002840)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002880)={0x1, 0x6, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002f00)=[r15, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000002f40)=[{0x1, 0x1, 0x6, 0x6}, {0x4, 0x3, 0x2, 0x4}, {0x1, 0x4, 0x9, 0xc}, {0x2, 0x1, 0x10, 0x2}], 0x10, 0xcfc}, 0x94) 13.328251416s ago: executing program 0 (id=9141): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000efffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000304000000000000000b00000400", @ANYRES32=0x0, @ANYBLOB="00a3000004000000240012800b0001006d616373656300001400028005000c00010000000800050010000000"], 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000080) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r7, 0x1, 0x28, 0x0, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r7, 0x6011}, {r3, 0x9}, {0xffffffffffffffff, 0xc071}], 0x3, &(0x7f0000000340)={r8, r9+60000000}, &(0x7f0000000380)={[0xfffffffffffffff9]}, 0x8) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYBLOB="f4000000100001002dbd7000ff9bdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200541f0300140003006e657464657673696d30000000000000c0001680bc0001800c000500fbffffff0000000014000a0001000000ede11dfda4b7216effffffff10000200010000000f0e000004000000100006000000009f0300000003000000280001"], 0xf4}, 0x1, 0x0, 0x0, 0x8851}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 12.696839265s ago: executing program 0 (id=9145): bpf$LINK_DETACH(0x22, &(0x7f0000000080), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010021"], 0x0, 0x26}, 0x28) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'batadv_slave_0\x00', 0x2}) 12.407681035s ago: executing program 0 (id=9150): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a00000200"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x4000) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000001d0000000800e95a", @ANYRES32=0x0, @ANYBLOB="38002f800c0002000000000000000000280003801c0003800600010000000000080002000200000006000300a3aa0000080001"], 0x54}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000001840)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000140)="340ae0d0a649eb7b84081dbf1f17df06d4661a49e9a0bf694c22ce54a807eb1319b985f1ddd397e8efca36fbce1c824e4d62edcae1cca146e48ad9bfea05bad571a5941fc408b2f65ccf34da99fb552fec67349ef48ae4e4a0f6ca5a51659bf5c7f3b7064565d757ed8baa23fc79a74c986e9e29d8bdddd4791af5fe5d609c32049d923202510f249f92c60e428d472f68f9273445028b18eec549c25155e5f9a7d2", 0xa2}, {&(0x7f0000000200)="8be6e011e9acaef343d171385fec5e5173475f9d5dffd9dbdfac8c9bc81dbc9bd1aa9e77fda46c8b2c123d69e39fa9ad4de2bee8d8d27da94b709360f52d242a27df85f71371d2cbda80843fbcd48143192a7ff840acfa07cfdf67cb6570cb6f0e0a0723e21225d165f6cf5e848695397071126b0010c2a70517f51c0d456f96a01720500d53c7f991032233ebf4e314305ed7932bf5316dadbab337e2bf8560f0c9119f080d27de100531b1bbf6ca514e43836403855653de6b7131", 0xbc}, {&(0x7f0000000340)="6d735a995815845c56433c3206051683c084fb0a549ddf3adbc6186d90a4a4ff18ed303243f4263f3135b70caadddfcfdbe848e80e1f1115f44dfa6bef26c8e9ae671b442b8c246b94f3eca4d4cd4918ec975a29844309", 0x57}, {&(0x7f00000005c0)="aa340b47cbe0fbc2d2b22aab86cb44642ad4b4676931b2d78f2de2e3648e561b51c03466fa7dbc40134463bdcf2f9ebc782c9a7888600271f6200f4f44cce54d549e2b1a7de08f8f0bdd8c3c53c54ad327c74ad1eea5fb6529c80fdf855560a0f870c36bf939c2ccb151b54eb6f90ec8d532d9cbd6227c63a8acac3b35dc7c453570d7ed7403685078fea58cda6e82f46e58709c163c533767628e4801ad2921b2393c928b9d143dc9c88c82c3a56d32e440d84bd016f72cdca6bc266a2d63425656ec8bf6f456576debd48b99ae565e1565d07e6e85cbba3315bc1db31045ec0a29b23efca3d78ddea4b842faaa114a7ce6d324c5bc73924bbc3af6e776d12fe8b4978cd38f7ec4ef47b52f66057d24d742a3aa71a39dd9964bcc1faae32be1972e72479a6c83c2fc2fc0a9f1a71b9d4bbab95c9a3f7f48590109ad7f218483b620fff78c45ece8510809bcfd3810b7bf8cfd1779cf53d7eea93b8b162fa5f65fc38f688e8a76a603a1c5b44c118172de61546315a787a48b9a2987cc60457f5c352706f0004a5ce89fc01d0d01b6fcc9752dab6eb71d92cf703e5286e13d625c39bde167864a5e3e8a44a06ed3121ff111bec328c40d855035c99c446aaa8428014e1dba66b70e4d2db30fed63bf67658a42e16e0b24b52f0016c9bc065c11114c478f03ce7695cbd21dca4492204b1dbce4a8084ef21b1042a83d984d887dbbad6d007b3230cd2ca4d1bf523eb90e62efbaae0f94147ace43e5956a42cb959168e747a98a90ce0bd93ff35fdb19e3ed410c51177554ccab0a4ed1bfe6f416093be1814549a79b8d848e2e19141471278aed491079dd4612d64b12c07ac3baeccad4c8f7749226891855c1565a93d0cb142af999406106d4e6852a42a22dd33313c84ee0d1e89ae9ee57f9b66a1cbdacf6aeb067f372417cf8ee05eaf24e0b9bf48faa8cfe4629705cad9118d0b56529a60bab8663eb74264e6ac9f5cf740b90b47db8fceb91bfd605837f96533380b701cd244037c960bbfa68e9ec6aa8f5d73c78b6e4d75c9cb3d58cf0383ffbca6982e85ecc5706ddf7591a1f776eb3d384594f70451d8bbce49cc46ce205806dbd93f93e17725f0d73e8ca3bedb68010644e7bb1a266ec8165a2cf7e44c0a1e0fb62e655cd7544c3e3c8f7f304a5c7240ca08009f5ef023371634c487bd03071fddc5fa63eb9dcf258c77a75a4ea43fd26bf17c1d98e3dcc8dc806b2183e9e9bfc8f74466c954d28715638ffa5823b2bff3d5bc4651d035e35948f76d15e40788dec6f638e601a419bf29cd71a3bedd3deacee3bf553dcc34985b4ec3dfaa90d98990c097ae0d535d2abe8c3c1bdc71428b90e9935fc0aef16ec03b6db7742536ce418925f838f1c5a008c4fdfdbd28fb6de08be258a93b2ff7b1775eaa367726a04e8e76e026a2c0df22813d276a15703266350e417b545683bf989f3898ea4e5431c783553a2dbf1ad3909d68d8aa96f0cb1b3a4cf81ad3a27f8b89fac1de69aa62feabcc71b1c817c6c8b84a0d1b22d42f1e924430b0f9501923c8525f0e5e0f1488957e70a13751aa1e596044eec1f6bdcdad96f8608962a87cdb45ef9a6ece06d2655ed090c10725d70f4e4d33003e3d61ed0fd635802b14998dbbe66296c0b8f7339b9e9ae6984654f5cc67449b36e6eb5ac35fba7c62a21b5ec2eac145eccf5ffb4d299ee9a9598756701b496d86d62047d0c065f4d286d3e1e558d922952b2a8da9703ded59b174559084a75663533f864471e780bb2f942bafc997f86648e6fb197cb0faaee80026839af0367faaf75e5b52bda88bb8340e487dbcafd0fd2e9b4d08bdc93d305ef5867951f5963fc1963c61379e1742cd05c0a0e41aa3c30f1ea6e2f3ca7a210e42348a1f422125d14c11963cff10e6ca5ca806a3b3416a1bd402b210268b0200aaa39f8753f30618ea6e3a3eeb03a8684eb17720b7f18a9f44c397cfaf161667483356e5ef56891108c426e6eafdff0a13195c5ce92ea39a39414c04621f9a44d3da2e273c9ec1485623ced5a12b6cde1208d3771251215ac6e8828546f41a0c6a02f2bd2d4758dce8df19f26b6a047b0b3059cb1254db3ce99ca3578b6862812c15a808cd0851717c5ddf539726512e9a39980d861d698c1587e89ba6ba789137da7cf772b759f84c28d5b15945fdbbdfc1247479c74032a56bbeafe86707e45fdab9c04840ba807e6bebfa2c8968ae0679abb020372f55b9df3e26d7a6dc40cab2f9ac420b3fa557c7d202fb7bf18fb888abb0cf90bfacb162c4571c119213f1b6cd76e61986686d4f5708a3e6239149439dddeb85ba896e249bf959bea445d1275c0e11731cb4ec3cde6b621e91a0521a01b090525534ed7a85ef0ea1b6b75420348f21183d35ee79f235648b43529722d88c36412756c6c6c4f6374b39b63e66e7956dc02edee1bf591bf7ef60e542599d618b3429be3bc97feaf9914113b948636a095fc6c83cbfd233729001e03d02784ec9860f850d1af8c5fbdd7b46faf17e33446d08c44f754264fe48d5d75422abc2d43217454575b7cf5aa2dd442bfb1a820b5ff7880365c1b3826f3af9c9a8a3ec55736b3839eea9c953ee0dce3e9b2102137376a5aa3bc6bed1f73af7e0845ae2029af22aced488dcb1e38c18035378e2306a881df804206ce2c455905c6f637d57e33821a5660d2035d4451927b29583741b4750c5cf6c3a00ac8baa06720b76b1d4822b6bcf30a8d5932ce3d4dc2953e1c623915673b7750fe57c136f6ad3e7d08b241148908a28c0768bee0626ba2c7f3c5a11c4f105b009dfb37867b587af96e85f7392898ef8220e46b928994f7cb81445228252a05ad8f8ab643d15a55c88acfa000978c444530cd4e5ba6b39b4dd9ace55a8dbe099e158ab9d4fce78909465b7cfacd1fa895908553fda56efd90a3d1f00246f6823396f1dd87475b63ce6d68cd124b6bd5d1be4e0671f71a170f4b6e4e796194230efb50c9807d698a72f7cff9c3d92c76d795a9872d26d8bdda95c933e53a485d222af9f6be937d7f2a970ad2d79b6b408d3fab8a57b163fabbe0263b69d916029a9ae725b82d362b5ca9371013ff3f633d0dced566cf01e4d71e189e9f34dd23c24d712e57c808cf8f4a162d5041adac38692097dca2cd1ba0156f39160af992e0ee417c521a404a5b239c5b84650fa5f7eae2584afc3b39922a3ad3bb070f4e116c3aea8c33a59dfcf0d49329d0841bf0c9fa00f8461a4c674c5e2d87a0bbe38cf966f7c1892e76ff604f1952c7dd217e51b1ee9f43763d650c334a98f05fde268c9fd979967c86b0d23eb4ac9944a61b48a72d720e7efcf8cad9eb990f6ea3fed2dc51d7997b07af6f43be1f28edf4e0e6afbf7898619dd0428314f018ff7c5b64f21fca58e20601fb0a1d8b40b73d084fff3bb56f3c9d3429108b0934b6a36781ee4824e2f02951f194aada5375ac417b77cb0e6a3d5862931491b4cf6b2d83b1bd4ddeab7e220d8741c48be7c1a841fa0ef2638e562bd637cbf6ae92477bd97ec3265dd2daa399d4988a9076dcfdf0243fd3f87c72788c1098a8b87a28afafc0a582bf6ab4a757da4df090ae129ca8443b78374fc9e3ba5f2ae9fa6547d419488a30f6a58597551a8e73b7904247eaf4b8465a2d2bf569c5026c696322ddbf7a893769f8bd70aceb036d7330e0e1ff0bf731630d8e4708f52566dad79ef135a5feebffcc644687c86ada832653b4d3cc2038f88a34c8e15c549d4bde328b0a6b9f84bc5f216ae42cbe7ee110c0940de0b8f0c5385573a9d2ec0c6381c3ead3fa2c878311d20a0a9cf722d675098861b587603f3ff9ff74c03f0e0b6f7684a79144f74878f5b050328dd76be04642c22d39ea73b66858b7d7ba26fed345e3d33af0cc86e00e81c3e00aa39119d3d5bb84081bd7c1cd9583c00f0163a7797798d749f8012fa7cf21c420aca8f7de65bd7e950b51c04f8cc56f79ec256dd2d4e91a729240401e582dd08c7a2aa811803e3adf66d3c4c125adc453a47db02222352b710b619b778718062086d1780819c8a1d2d334a5314f9ae6bfbe75827ff24e39f5836508aa8b37dc884e375ef28fba30a5f7321919cb93e6f5f27a3f09dfad3ac3e1c1260033293175a7652900b1ddbb5a3fc8339d87761877576f40efe721acba318741bf0645e88798a5a728de337b289f95010dcbd4e48891314518085a3e075ef9ba46a96fb77f5f36f963576a5751bd8fa915c5f2d4467df06a5da1a7b54d034356bd6a54c2f44567b6114e32d376a63cc27d42abd36c14d848bc3a56a9cc2dfdc8ea1f86186be954d853baf20fa258633f880a633656d57b132462177acc73b7cfe35d13073404d3e61613cff80dd620976cf590f9c73b0d7224eaff02603d39ad675bfa454ee31a59ae124775ff6a87d4130497b1aed901f928b8d96d24913ee84c892ae7d74f6d871f273689b12dd32eec65ea61c583b37f330cd744619b9db7b16ee52159ac82bc86f4d466811e0eed1c6af82b9ddf0a8706bf2b67f3c43785a349737a85ea874f22eef218de1d3f1589c7fb6a4e617044985d843166276cfa4895933fbe0cb884f9ecd47b76ffe82d832705c355ca3e69846dc30adc0e1db114faf2b152288db0ff6a8160a5133c98c9663c40ce57c72aa0e5485f5afab70fcc88dfa3f54389e2d11ef0de0a0c6cf7c75edfc6267659cb5dfb4c3706ebd058efd83cf00ec1b5c255e79050653f2a20289a34ce2e33d819caea4ec0c493b62e182fd59b9c5854e047df6f071d38fe0643eb1c0947b18b94d046ea916d009a2ea334c9b85d56d0df5fe5376f7875528d7412f8a3d4fcbd3f5b0942a91bf26df286193577dcf02bc5007146b7aa35605edd5f3338c6d65da5dfbc204671e2b98674347019b26e5713a1ce61fd3a276a69d53e303238fb6d07417128e89c4326eaa0c1a483b986c062d3538e2a29984185c5dc7b8932394bc264a726975c3726e961ad587b6bbaf33e1a62281d49a441ba388b126a08c1687c9820163c912c55fc9e0e4ec3d973feef09d46170fff0fcc5daa16d68342788a2ea2c5cf83d03c6b2a036165e265d6fbc22c7529df49694e61ee2ac836efe2b1363fd9cdd54a895e78a7c5d281495e9ea67fcbdc56601563471c40242af74a1111b9e893c351a00e826ca0387f39c8ade4ec3558cead0402238076b1f8dd96af442766003e2304535ea871a2da8a8e2d4532b014f7f3c89d9e71712fcb2ea624fb0ff74a6f4e3e2c7bad7a5811ce1300bb827321fb0f8b6cc8b0ce61ff2b3687fcc7b3b858f790fb7f2ff250782a6828c2f77fada156f72124f8b226a076d05f36eab97efc6c650f3f3abfed536b4f5d2b6380da7b56b2542535ad8f55a7542fafe46c91ce2812ae404ab05985590118b6b8b38f55ad142dec49a799d2549b8974d8d06c8976bea445b6ee12c74ecac828ebea7d2f826314adaa6fa6c2964c6f42ae6d22fab1147a9e11093ffabfcae2b7de55d42f190415f4ec6bd2b80dcc08acfaf5c17bf1e1022bc5067f8853957722f0c7c9348a112c84706902afe4c67e7da9afa5c77ba292ffb75f879e0439bc0dbd2c6c6430c506ed01e56486080c1adbea1ebc6e2356ba208bdb2af5506cba92e200691def3ea25b2d6e1ec33a7750052a2b99f204b265a0154c54476c393c86503eab4fbe20684c9eba2f90440e6de95712016cc8262f92c8402ff5a32330565b463422426252e5227e3c4ab9359d58ed77e7e896ef19a77c4748b64b288e3c95f4404434ceaff2335de", 0x1000}, {&(0x7f00000015c0)="9752fc9373d53880bbe39f681e3323e5ac8ceadcb82f61d9f0b021d6f71365c0af1029b556030a1e0f93f7332266261da2e15653031cd4eccc7f34f47b9cc11379464b9321ef6e468de06e9c8a969f7ecbca5e30205b08bbe3ebc42ab89c200edb419e8b04ba970f54b2ff5e65b7886e098aaf2c38eef20ca14711a7f866770c57ffbd78b01b6fd9f4dbea2d476add496a29aa7c6751c73869dc660bff6224f718e648b85c3bacdfdc11efb65ed588be86c4c3a72fa370616d5f616c73531ee0b7d6", 0xc2}, {&(0x7f00000016c0)="cce54118f00ce3", 0x7}, {&(0x7f0000001700)="e714390997c09f52565c49103f81b4e9bc82e304da5b572607eddf05f8a800a5dc9f12fcc0f62f76403b7ca65ee3673fcd32555e05e5d37d5303ddff483d61e5164ec6caf76d8844ab930a6ec2d325a029d91b3782cb7ef5b1cce45b1fac2dc85a926549375c0c6f2f6063eed0297ddb6918a0271f6fe59dfed1d12b3a8dd02cd29fe4d184897bc0b025517ae73aafe05716195864f9b8c6f2003e59a6562d89cc", 0xa1}], 0x7, 0x0, 0x0, 0x20000010}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602000000b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r3], 0x5c}}, 0x800) 12.120228565s ago: executing program 0 (id=9153): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000500)={r0, &(0x7f0000000140)='\x00', 0x4000, &(0x7f0000000440)={@align, {0xfff8, 0x2, 0x3, 0x3}}, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x400}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x2, 0x7, 0x8, 0x3, 0x6}, &(0x7f0000000600)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000640)={r2, 0x4}, &(0x7f0000000680)=0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000d000068f9a4fc74648140000000000a00000000000000800500000000300071000000000000000000"], &(0x7f0000000240)=""/118, 0x41, 0x76, 0x1, 0x7fff, 0x10000, @value=r0}, 0x28) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8, '\x00', 0x0, r1, 0x1, 0x4, 0x4}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000740)={0x50001014}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000020000000000000000000000850000f2cd987e419f62d000080000009500007ae69b08b81757de48eb38505555feab6d237519fa43bc5aae9d6f48e5365a4c2a7e525b0142c7a80bc1f4ed43664c64312be123875815d0352d04e8b98723fa1317bb92a634fac27e2b1ee435db9df088be4cc02985a5188b907907e94bb71fad42603e062f29a0712a8a49e83dbdd8fe5c6f344bfe277fb9a25b9779896bef646b85303755b8c8648d7cc680bc37f4d2a13c4a4b72efc7111df85a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf7f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0b1547ed385cbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.221432125s ago: executing program 1 (id=9188): r0 = socket(0x11, 0x1, 0xaf1) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x1401, 0x4, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000041}, 0x810) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800000001010101ff00000000000000020000001800018014000180070000000000000008000200000000000c001980080001000d"], 0x38}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1002, &(0x7f00000004c0)=""/4098, 0x41100}, 0x94) 4.043588255s ago: executing program 1 (id=9190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000110000000800000002"], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x0, @generic={0x25, "e3f9abdbfcb3edfb2897ffe01c7c"}, @llc={0x1a, 0x3, 0x6, 0x5, 0x2, 0x2, @random="5d6a035c3383"}, @llc={0x1a, 0x13, 0x0, 0x0, 0x6, 0x7, @remote}, 0x7f, 0x0, 0x0, 0x0, 0xea, 0x0, 0x11f, 0xa, 0x3}) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4}}}}}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000080)="8a80", &(0x7f0000000280)=@udp=r5, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x298, 0x278, 0x278, 0x298, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0xff000000], 'vlan0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x84, 0x0, 0x0, 0x15}, 0x0, 0x120, 0x188, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xfc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xffff, 0x0, 0x4, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfe, 0x3, 0x0, 0x1]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x5, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0x0, 0xff, 0xff000000], [0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'veth0_to_team\x00', {}, {}, 0x3b}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x16, 0xfff, 0xb70, 0xb, 'syz1\x00', 'syz0\x00', {0xbd4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xfff5, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x7, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r11], 0x68}}, 0x0) 3.638905241s ago: executing program 1 (id=9195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="10000000042004001c002b8008000800", @ANYRES32=r0, @ANYBLOB="0800040000000000b06d9825", @ANYRES32, @ANYBLOB="08001b"], 0x44}, 0x1, 0x0, 0x0, 0x20}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a280000000000000000000950000008000000068abbeccd65c89a64181a2ee07fc9615a47bc0cc3ef86eeb1f250635a6b4b5b80f22f249b24220043f7bebbfb2013aba"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000006c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e21, 0x7f, 0x4e24, 0x3, 0xa, 0x20, 0x0, 0x3a, 0x0, r2}, {0xb2d, 0x1ae6000000000, 0x0, 0xc84, 0x3, 0x8, 0x6, 0x2}, {0x6, 0xf786, 0x3, 0x4}, 0x7, 0x6e6bb0, 0x2, 0x1}, {{@in=@remote, 0x4d3, 0x6c}, 0x1, @in6=@remote, 0x34ff, 0x1, 0x0, 0xfa, 0x96a8, 0x6, 0x5}}, 0xe8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) 3.418662744s ago: executing program 1 (id=9197): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0xc010) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r6, @ANYBLOB="05003300eb00000008003400", @ANYRESDEC=r6], 0x2c}}, 0x80) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket(0xa, 0x801, 0x0) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) pselect6(0x28, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={[0x8000]}, 0x1}) 3.336420275s ago: executing program 2 (id=9198): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x80d, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$kcm(0x10, 0x7, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) close(0x3) 2.996722167s ago: executing program 1 (id=9201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x4, 0x25dfdbfe, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x14) 2.961031127s ago: executing program 2 (id=9202): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x28}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r5, &(0x7f0000000380)}, 0x20) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x100}], 0x18, 0x8005}, 0x40040) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@deltfilter={0x43c, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x3, 0xffe0}, {0x9}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0xffffff01, 0x9, 0x8000, 0x10001, 0x3, 0x80000000, 0xb4cb, 0x5, 0x2, 0xfffffeff, 0x3ff, 0x5, 0x2, 0x1b92, 0x8, 0x5, 0x6d58, 0x81, 0x6, 0x0, 0x6f, 0x7f, 0x3, 0x80, 0x7, 0x7, 0x12fd96d2, 0xfffff000, 0x40, 0x7, 0xa, 0x2, 0x3, 0x5, 0x6, 0x401, 0x1000, 0x0, 0xd, 0x6, 0xa, 0x800, 0x8, 0x7, 0x8, 0xfffffffa, 0x20000, 0x8, 0x6, 0x80, 0x1, 0x8, 0x73, 0x800, 0x351, 0x70b0, 0x1, 0x3, 0xb, 0x51d22a98, 0x0, 0x3, 0x8000, 0xf, 0xfffff81f, 0x3, 0x7, 0x8, 0x3, 0x400, 0x8001, 0xfffffffa, 0x1000, 0x293, 0x7, 0x4, 0xb, 0x9, 0x3, 0x2, 0x1, 0x200, 0x7, 0x80000001, 0x4, 0x10, 0x7, 0x7, 0x3a, 0xfffffffd, 0x4, 0x3, 0xd, 0xebf, 0x100, 0x8, 0x2, 0xe, 0x401, 0x1, 0xfffff801, 0x4, 0x7fffffff, 0x8, 0x80000001, 0x10, 0xffffffff, 0x800, 0x9, 0x3, 0x80, 0x8, 0x3, 0x396e, 0x200, 0xffffffff, 0x10, 0x81, 0x0, 0x80000001, 0x4, 0xb, 0x31, 0x6, 0x5, 0x316, 0x4, 0xc880eca, 0x80000000, 0x9, 0x401, 0xf, 0x3, 0xc, 0x0, 0x924, 0x5, 0x8001, 0x400000, 0x1ff, 0x2, 0x3, 0x7fffffff, 0x6, 0x2, 0x3, 0x25a, 0x6a, 0x6, 0x9, 0x9, 0xb4, 0x217, 0x8f, 0x9, 0x2c, 0x2, 0x9, 0x7, 0x9, 0x100, 0x4, 0x6, 0x7, 0x7, 0x3, 0x6, 0x0, 0x7fffffff, 0x0, 0x9, 0x2, 0xb6c, 0x4, 0x8, 0x3, 0x401, 0x3, 0x0, 0xa1, 0x7f, 0x80000001, 0x7, 0x9, 0x800, 0x7, 0x1000, 0xe9, 0x3, 0x6, 0xffffffff, 0x3, 0xae9, 0xba3, 0x6, 0x3, 0xac, 0x8001, 0x2c562366, 0x9, 0xfffffff7, 0x1, 0x3, 0x657, 0x4196, 0x0, 0x8, 0x0, 0xb, 0x3ff, 0x7, 0x5, 0x2, 0x3, 0x41, 0xfffffffe, 0x8, 0x0, 0x8, 0x269, 0xfffffffc, 0xffff70e1, 0x40000000, 0x8, 0x7, 0x1000, 0x4, 0x1, 0x80, 0x8000000, 0x0, 0x7f, 0x67, 0x6, 0xf, 0xbfca, 0x2, 0x8, 0x1, 0x4, 0x66a7633e, 0x9e4, 0x10000, 0x9, 0x3, 0x4, 0x1, 0x3, 0xad2, 0x7, 0x80, 0x2, 0x9, 0x39, 0x10000]}]}]}}]}, 0x43c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 2.921709603s ago: executing program 5 (id=9203): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001000070000fff10000000000fe880000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000000000004d22b000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000000000000000000000000000000fcffffff0a000200700000000000000014000e00e000000200"/188], 0x104}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0xb, 0x70bd2d, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x0, 0x8, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) unshare(0x2a060400) socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r6, 0x0) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000099c0), 0x0, 0x10002, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x2400c800) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 2.730539911s ago: executing program 2 (id=9204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000708000240000000000800044000000003080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f00001c0000/0x3000)=nil, 0x3000, 0x1000001, 0x30, r0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x44, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000032c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x360, 0x11, 0x148, 0x360, 0x0, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x6, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x19, 0x0, [{0xb, 0xfc, 0x7, 0x6}, {0x2, 0x75, 0x6, 0x9}, {0x7, 0x3, 0x8, 0x7}, {0x2, 0x4, 0x5, 0x4}, {0x7ff, 0x16, 0x1, 0x10000000}, {0x0, 0x2, 0xf9, 0xfff}, {0x7ff, 0x3, 0x6, 0x37}, {0x8, 0x2, 0xcd, 0x4}, {0x2, 0xf7, 0x1, 0x4eaa}, {0x31, 0x81, 0x4, 0x7}, {0x7, 0x0, 0x6, 0x9}, {0x4, 0x40, 0xb0, 0x8}, {0x7, 0x6, 0x2, 0x9}, {0x9, 0x2, 0x7, 0x28000}, {0xe5, 0x6, 0xfc, 0x24002}, {0x1, 0x9, 0xbb, 0xe00}, {0x1, 0x6, 0xc, 0x400}, {0x8, 0x98, 0x3, 0x3}, {0x0, 0xb1, 0x1, 0x4}, {0x800, 0x5, 0x1, 0x7}, {0x58, 0xa0, 0x8}, {0x3, 0x0, 0x3, 0x6}, {0x7, 0xb4, 0x3, 0x94cb}, {0x7, 0xb3, 0xb}, {0x2, 0x8, 0x2}, {0x7, 0x3, 0x2, 0xffff0000}, {0x9, 0x7a, 0x3, 0x6}, {0xfff7, 0x68, 0x9, 0x1000}, {0x0, 0x40, 0x9, 0x8d6d}, {0x6, 0x6, 0xf9, 0x6}, {0x3ff, 0xb, 0x0, 0xfff}, {0x6, 0xd, 0xff, 0xa}, {0x1, 0x8, 0x1, 0x7}, {0x3, 0x9, 0x1, 0x9}, {0x2, 0x0, 0x8, 0x4}, {0x4, 0x4, 0x9, 0x218}, {0x3, 0x6, 0x8, 0x8}, {0x2, 0x7, 0x2, 0x4}, {0x9, 0xb, 0xfb}, {0xe, 0x6, 0x5, 0xa0}, {0x0, 0x2, 0x0, 0x8}, {0xee38, 0xe5, 0x3, 0x5}, {0x7, 0xff, 0xc8, 0x1}, {0xd4f, 0x5, 0x6, 0x3}, {0x8000, 0x6, 0x5}, {0x91, 0x2, 0x1, 0x7}, {0x9, 0x9, 0x8, 0x7}, {0x8, 0x0, 0x3, 0x7ff}, {0x5, 0x1, 0x24, 0x6}, {0x7f, 0x3, 0xa, 0x6}, {0x3, 0x6a, 0xbf}, {0x4, 0x4, 0x5, 0x8001}, {0x9, 0x2, 0x0, 0x7}, {0xfffa, 0x1, 0xb7, 0xffffffff}, {0x1ff, 0x9, 0x8, 0x6}, {0x7, 0x9, 0x7f, 0xffffffc0}, {0x7, 0x9, 0x3, 0x6}, {0xfffd, 0x4, 0x8, 0x8}, {0x7, 0x2, 0x4, 0x7}, {0xf142, 0x4, 0x4, 0x3}, {0x0, 0xd, 0x61, 0x5}, {0x1, 0x1, 0x1, 0x4}, {0x6c, 0x5, 0x3, 0x7}, {0x6, 0x4, 0x89, 0x4}], {0x7}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x0, 0x3b03c862, 0x5, 'netbios-ns\x00', 'syz1\x00', {0x8000000000000000}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x0, 0x2}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x100, @empty}, 0x1c) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000180)=@file={0x1}, 0x6e) recvmmsg(r8, &(0x7f00000003c0)=[{{0x0, 0xffffffb2, 0x0, 0x0, &(0x7f0000002c00)=""/4096, 0x1000}, 0x8001}], 0x1, 0x40, 0x0) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f00000001c0)=0x80000008, 0x4) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r6, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7ff, 0x7f}}}}, 0xfdef) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="ee94f1711cf60e4416475ab9e5c5899416383372a69786e56ac2f0b482d8e1e740d4fbff9fe88b53f82f48d6482ebd151a42b80833cd7884f0b800"/73, 0x49) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fbdbdf250f00000048000300", @ANYRESHEX=r7, @ANYBLOB="c2a531b300"/16], 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000ba070000000900010073797a3000000000b4020000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f040012805c020980080001400000000a54010280800e"], 0x2fc}}, 0x20050800) 2.12042445s ago: executing program 2 (id=9206): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000100)={'team_slave_0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c00000074fa46d5fc867486086e8ef7e33120b3a9a3c7bd999497b2545f62201036dcdb890ae3f1e8d00000000000000000", @ANYRES16=r3, @ANYBLOB="05001000000000000000060000000800050002000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000080)=0xb1, 0x4) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000024164df8f36725a0eac100006400159202121c4bb3b90202"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)={0x0, 0x0}) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000580)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_a, @from_mac=@broadcast, {0xd, 0x5}, "", @void, @value=@ver_80211n={0x0, 0x2, 0x0, 0x3, 0x0, 0x2, 0x1}}, @random="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"}, 0x337) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='!\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/308], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYRESHEX=r5, @ANYRES32=r8, @ANYRESDEC=r5], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) recvmsg$kcm(r6, &(0x7f0000002d80)={&(0x7f0000000b00)=@can, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/13, 0xd}, {&(0x7f0000002ac0)=""/45, 0x2d}, {&(0x7f0000002b00)=""/104, 0x68}, {&(0x7f0000002b80)=""/162, 0xa2}, {&(0x7f0000002c40)=""/113, 0x71}], 0x6, &(0x7f0000002d40)}, 0x40000002) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0xe, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, '\x00'/12}, {0x2, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) 1.644249072s ago: executing program 3 (id=9208): unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x20000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001400)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0xa8, 0x150, 0xffffffff, 0xa8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast, @port, @port=0x2}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x17, @local, @remote, @icmp_id, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) mmap(&(0x7f00006bf000/0x3000)=nil, 0x3000, 0x4, 0x1011, r1, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.477194s ago: executing program 3 (id=9209): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r2 = epoll_create1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x1a0000010}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x2010}) 1.446394522s ago: executing program 5 (id=9210): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1.147910911s ago: executing program 5 (id=9211): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x80d, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$kcm(0x10, 0x7, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) close(0x3) 1.147219034s ago: executing program 3 (id=9212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x17, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x4, 0x1, 0x5, 0x4, 0x7, 0xffffffffffffffc0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x3b}, @alu={0x4, 0x1, 0x2, 0x4, 0x9, 0xc, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @jmp={0x5, 0x1, 0x4, 0x7, 0x8, 0xfffffffffffffffe}]}, &(0x7f00000007c0)='syzkaller\x00', 0x9e, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x2, 0xfffff801, 0xc1a0}, 0x10, 0x1ae47, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1510}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40086602, 0x110e22fff2) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r6 = socket$inet(0x2, 0x2, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x75, &(0x7f0000000000), 0x8) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r6, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xe9f8, 0x1, 0x9, 0x8200, r2, 0x10, '\x00', 0x0, r3, 0x2, 0x2, 0x3, 0x9, @value=r4}, 0x50) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r9 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x9, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=@newlink={0x1d0, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x6, 0xc8}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x101}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_VF_PORTS={0x154, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5df205907a04db4d21b707d3d663b7ad"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "14332da300bfb7250660b5827f8e8268"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "caa8b16bca75f8ce586c6b38988cdeb3"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1c7a1cf8e1b9662b3d76744143e5f5ee"}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "515f025c35b659d89a9f18ab05345031"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c9ad951abd5a288e978a82fa5a6e207a"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "72a604aa9aabbef1428186cfabe38211"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bf84d557c037469035d31b2ba9d4747a"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1d1dd9151e666a867fe2c1729c654ddc"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "06d2f9ac831bf8d35b096a684fc57060"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "853444879b5a728944a74872a1fbd976"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf5}]}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_TARGET_NETNSID={0x8}]}, 0x1d0}}, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x100, 0x453, 0x4, 0x70bd2b, 0x25dfdbfb, "10d2ea6a43a7b40441498a0d46ae79c8bf02b51ff12e6b2ca4d308edd4add630c9fde55a127dc7fd1eb1846aaa099a19ca506bf92bab8c7f10b11940a531951355ee45604c1faafff850ab09f51756bd7d5a4268b07bab880f07f857324b5749f06202089705918327d02305a4b40b6d3bec88420644dc6f42fbfd67ff17b0614a0650a0f7a7b4a8551d0c7884e7b42a88a60cea1ba581d70fcee302ed9d87a3c2cc642445fd2d6eada4865d77c57f2744eabe0184e45614cf431c34bfacdf4d97787be12ae7b9879478448af55337b2e8e1181a88330d6ed30b975ed5f86c9feb8fdb9c76f8ecf1c97a98b5daf9e84f", ["", "", "", "", ""]}, 0x100}, 0x1, 0x0, 0x0, 0x20000804}, 0x1) 1.011604647s ago: executing program 3 (id=9213): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x28}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r5, &(0x7f0000000380)}, 0x20) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x100}], 0x18, 0x8005}, 0x40040) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@deltfilter={0x43c, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x3, 0xffe0}, {0x9}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0xffffff01, 0x9, 0x8000, 0x10001, 0x3, 0x80000000, 0xb4cb, 0x5, 0x2, 0xfffffeff, 0x3ff, 0x5, 0x2, 0x1b92, 0x8, 0x5, 0x6d58, 0x81, 0x6, 0x0, 0x6f, 0x7f, 0x3, 0x80, 0x7, 0x7, 0x12fd96d2, 0xfffff000, 0x40, 0x7, 0xa, 0x2, 0x3, 0x5, 0x6, 0x401, 0x1000, 0x0, 0xd, 0x6, 0xa, 0x800, 0x8, 0x7, 0x8, 0xfffffffa, 0x20000, 0x8, 0x6, 0x80, 0x1, 0x8, 0x73, 0x800, 0x351, 0x70b0, 0x1, 0x3, 0xb, 0x51d22a98, 0x0, 0x3, 0x8000, 0xf, 0xfffff81f, 0x3, 0x7, 0x8, 0x3, 0x400, 0x8001, 0xfffffffa, 0x1000, 0x293, 0x7, 0x4, 0xb, 0x9, 0x3, 0x2, 0x1, 0x200, 0x7, 0x80000001, 0x4, 0x10, 0x7, 0x7, 0x3a, 0xfffffffd, 0x4, 0x3, 0xd, 0xebf, 0x100, 0x8, 0x2, 0xe, 0x401, 0x1, 0xfffff801, 0x4, 0x7fffffff, 0x8, 0x80000001, 0x10, 0xffffffff, 0x800, 0x9, 0x3, 0x80, 0x8, 0x3, 0x396e, 0x200, 0xffffffff, 0x10, 0x81, 0x0, 0x80000001, 0x4, 0xb, 0x31, 0x6, 0x5, 0x316, 0x4, 0xc880eca, 0x80000000, 0x9, 0x401, 0xf, 0x3, 0xc, 0x0, 0x924, 0x5, 0x8001, 0x400000, 0x1ff, 0x2, 0x3, 0x7fffffff, 0x6, 0x2, 0x3, 0x25a, 0x6a, 0x6, 0x9, 0x9, 0xb4, 0x217, 0x8f, 0x9, 0x2c, 0x2, 0x9, 0x7, 0x9, 0x100, 0x4, 0x6, 0x7, 0x7, 0x3, 0x6, 0x0, 0x7fffffff, 0x0, 0x9, 0x2, 0xb6c, 0x4, 0x8, 0x3, 0x401, 0x3, 0x0, 0xa1, 0x7f, 0x80000001, 0x7, 0x9, 0x800, 0x7, 0x1000, 0xe9, 0x3, 0x6, 0xffffffff, 0x3, 0xae9, 0xba3, 0x6, 0x3, 0xac, 0x8001, 0x2c562366, 0x9, 0xfffffff7, 0x1, 0x3, 0x657, 0x4196, 0x0, 0x8, 0x0, 0xb, 0x3ff, 0x7, 0x5, 0x2, 0x3, 0x41, 0xfffffffe, 0x8, 0x0, 0x8, 0x269, 0xfffffffc, 0xffff70e1, 0x40000000, 0x8, 0x7, 0x1000, 0x4, 0x1, 0x80, 0x8000000, 0x0, 0x7f, 0x67, 0x6, 0xf, 0xbfca, 0x2, 0x8, 0x1, 0x4, 0x66a7633e, 0x9e4, 0x10000, 0x9, 0x3, 0x4, 0x1, 0x3, 0xad2, 0x7, 0x80, 0x2, 0x9, 0x39, 0x10000]}]}]}}]}, 0x43c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 902.797058ms ago: executing program 5 (id=9214): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000fbcbdf254400000008000300", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x128, 0x168, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x6, 0x2}, {0x1e, 0x40}, {0x3, 0x1}, 0x8000006}}, @common=@srh={{0x30}, {0x1d, 0xa2, 0x4, 0x2, 0x4, 0x243, 0x800}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x100, 0x7, 0x3, 0x80000001, 0x1000, 0x4, 0x1, 0x7bf4]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 720.291126ms ago: executing program 1 (id=9215): r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(0x0, r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000000000220000000a0001007770616e31000000"], 0x20}}, 0x4000000) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="225266601c1626d974f14b3624ff6a8870c88808daf12b4b1851d4dace20aeff3a2bd4a4484d28d52ec3aaaccfd5363435a799e2bfe98f0044238f9b8a812754c5475d6c511d7038d213b7a596e95e460680ab015eb3e6124edd942d8f3dcee4a2bb05508d5cd4bb037e", @ANYRES16=r4, @ANYBLOB="010029bd7000fddbdf252100000005002000010000000c0005000201aaaaaaaaaaaa09001f00706879320000000009001f007068793300000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000141}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r12, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r12, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 719.063656ms ago: executing program 3 (id=9216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0xffffffffffffff95, 0x14, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 548.395283ms ago: executing program 3 (id=9217): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xdd7}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read(r6, &(0x7f0000000080)=""/38, 0x26) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r8, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r8, 0x0, 0x0, 0xffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0x7, 0x403}]}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x800) 513.134976ms ago: executing program 2 (id=9218): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="400002803c00010024000140757365725f6c696e6b751842000000000000000000000000000000000000000005000300260000000400040008000600"], 0x5c}, 0x1, 0xf000, 0x0, 0x20803}, 0xc004) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) unshare(0x2c020400) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r8, @ANYRES32=0x0, @ANYRESHEX=r7, @ANYRES32=r7, @ANYRESHEX=r0, @ANYRESDEC=r7], 0x11) 444.068267ms ago: executing program 5 (id=9219): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x6, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="02030003120000002cbd7000f3dbdf250300090087"], 0x90}, 0x1, 0x7}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad6db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}]}, 0x40}}, 0x0) 152.512756ms ago: executing program 5 (id=9220): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="660a00000900000061114c000000000085000000250000009500000000000000cb61054d17145a1c5e30fc6619da844e089e42cedb4f638425ce8ed370b364fee2bc5213999bf56e94474c2eaabc9982e36bcb35e880a68446e776f9453bcada26085e3375292fa887a11675cbaa2a94f304d0"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 0s ago: executing program 2 (id=9221): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000080)="755ee3ccb1") kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.2.7785'. [ 1301.399338][T16111] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1301.413335][ T6523] netlink: 'syz.0.7787': attribute type 1 has an invalid length. [ 1301.428235][ T6526] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7789'. [ 1301.468867][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7785'. [ 1301.561564][ T6529] ip6tnl0: Caught tx_queue_len zero misconfig [ 1301.764323][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7793'. [ 1301.873772][ T6542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7796'. [ 1301.950362][T31454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1302.401260][ T6556] netlink: 'syz.3.7800': attribute type 49 has an invalid length. [ 1302.406716][ T6558] xt_NFQUEUE: number of total queues is 0 [ 1302.509850][T16107] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1302.732938][ T6556] ip6gretap0: left promiscuous mode [ 1302.792686][ T6556] ip6gretap0: entered promiscuous mode [ 1302.807577][ T6556] ip6gretap0: entered allmulticast mode [ 1302.973510][ T6568] syzkaller0: entered promiscuous mode [ 1303.010673][ T6568] syzkaller0: entered allmulticast mode [ 1303.030791][T16107] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1303.355819][ T6585] 8021q: VLANs not supported on wg0 [ 1303.405639][ T6589] netlink: 'syz.3.7812': attribute type 1 has an invalid length. [ 1303.443834][ T6591] netlink: 'syz.1.7813': attribute type 21 has an invalid length. [ 1303.580579][T31454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1303.616505][ T6589] bond4: entered promiscuous mode [ 1303.632325][ T6589] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1303.641307][ T6591] netlink: 'syz.1.7813': attribute type 1 has an invalid length. [ 1303.677021][ T6595] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1303.695578][ T6595] bond4: (slave ipip0): The slave device specified does not support setting the MAC address [ 1303.723261][ T6595] bond4: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 1303.785101][ T6595] bond4: (slave ipip0): making interface the new active one [ 1303.811423][ T6595] ipip0: entered promiscuous mode [ 1303.837120][ T6595] bond4: (slave ipip0): Enslaving as an active interface with an up link [ 1304.103528][ T6620] netlink: 'syz.2.7817': attribute type 39 has an invalid length. [ 1304.151643][T16111] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1304.523480][ T6640] netlink: 'syz.3.7820': attribute type 4 has an invalid length. [ 1304.671032][ T7582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1305.178419][ T6664] __nla_validate_parse: 9 callbacks suppressed [ 1305.178440][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7826'. [ 1305.232708][T31454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1305.414122][ T6664] bond8: entered promiscuous mode [ 1305.450705][ T6664] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1305.567723][ T6671] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1305.589673][ T6671] bond8: (slave sit3): The slave device specified does not support setting the MAC address [ 1305.614646][ T6671] bond8: (slave sit3): Error -95 calling set_mac_address [ 1305.701078][T32594] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1305.800057][ T7582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1305.906361][ T6687] sctp: [Deprecated]: syz.3.7833 (pid 6687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1305.906361][ T6687] Use struct sctp_sack_info instead [ 1305.956871][ T6688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7831'. [ 1305.996803][ T6688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7831'. [ 1306.331112][ T6706] bond9: option lp_interval: invalid value (0) [ 1306.353672][ T6706] bond9: option lp_interval: allowed values 1 - 2147483647 [ 1306.373254][T31454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1306.407570][ T6706] bond9 (unregistering): Released all slaves [ 1306.426821][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7839'. [ 1306.459548][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7839'. [ 1306.484214][ T6720] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7839'. [ 1306.502143][ T6708] veth0_to_bond: Caught tx_queue_len zero misconfig [ 1306.558290][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7835'. [ 1306.590305][ T6715] syzkaller1: entered promiscuous mode [ 1306.606357][ T6715] syzkaller1: entered allmulticast mode [ 1306.699880][T32592] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1306.810162][ T6727] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7840'. [ 1306.911944][ T7582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1307.375543][ T6774] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1307.480279][ T7582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1307.694725][ T6788] netlink: 'syz.3.7855': attribute type 1 has an invalid length. [ 1307.817933][ T6796] sctp: [Deprecated]: syz.5.7856 (pid 6796) Use of int in maxseg socket option. [ 1307.817933][ T6796] Use struct sctp_assoc_value instead [ 1307.914478][ T6788] bond5: entered promiscuous mode [ 1307.947865][ T6788] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1308.039590][T31454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1308.252081][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7858'. [ 1308.280652][ T6803] netlink: 'syz.5.7857': attribute type 1 has an invalid length. [ 1308.478524][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7860'. [ 1308.607273][ T7582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1309.184752][T31446] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1309.277887][ T6846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1309.635703][ T6858] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1309.643857][ T6858] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1309.731625][T31454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1309.788849][ T6858] lo speed is unknown, defaulting to 1000 [ 1310.309361][T31446] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1310.736636][ T6920] __nla_validate_parse: 12 callbacks suppressed [ 1310.736658][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7885'. [ 1310.869626][T31454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1311.202234][T31454] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.212522][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7891'. [ 1311.222409][T31454] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.234158][T31454] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.270968][T31454] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.404791][T31454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1311.465507][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7893'. [ 1311.495285][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7893'. [ 1311.559809][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7893'. [ 1311.627753][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7893'. [ 1311.689837][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7893'. [ 1311.740666][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7893'. [ 1311.773888][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7897'. [ 1311.856115][ T6958] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1311.877106][ T6958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7898'. [ 1311.950099][T31446] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1313.654246][ T7042] netlink: 'syz.2.7919': attribute type 12 has an invalid length. [ 1313.694569][ T7042] netlink: 'syz.2.7919': attribute type 29 has an invalid length. [ 1314.020045][T16107] net_ratelimit: 3 callbacks suppressed [ 1314.020068][T16107] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1314.571868][T16106] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1315.179376][T31454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1315.666573][ T7124] xt_TCPMSS: Only works on TCP SYN packets [ 1315.752607][T16120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1315.896593][ T7124] bridge_slave_1: left allmulticast mode [ 1315.974033][ T7138] __nla_validate_parse: 9 callbacks suppressed [ 1315.974056][ T7138] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7939'. [ 1315.985217][ T7124] bridge_slave_1: left promiscuous mode [ 1316.031331][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.042625][ T7140] netlink: 100 bytes leftover after parsing attributes in process `syz.5.7939'. [ 1316.107828][ T7124] bridge_slave_0: left allmulticast mode [ 1316.118288][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7940'. [ 1316.122449][ T7124] bridge_slave_0: left promiscuous mode [ 1316.146965][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.359763][T16111] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1316.543690][ T7149] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1316.675031][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7942'. [ 1316.881230][ T7151] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1316.913841][T16111] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1317.238368][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7945'. [ 1317.479976][T16111] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1317.734557][ T7194] netlink: 136 bytes leftover after parsing attributes in process `syz.2.7953'. [ 1317.762767][ T7194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7953'. [ 1317.793410][ T7194] netlink: 'syz.2.7953': attribute type 3 has an invalid length. [ 1317.819348][ T7194] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7953'. [ 1317.907448][ T6891] Set syz1 is full, maxelem 65536 reached [ 1317.990622][ T7198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7954'. [ 1318.010994][T16111] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1318.058923][ T7201] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7955'. [ 1318.290671][ T7214] xt_recent: hitcount (4294967294) is larger than allowed maximum (65535) [ 1318.553757][T31454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1319.090465][T31454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1319.262989][ T7210] veth1_to_hsr: left promiscuous mode [ 1319.285658][ T7210] team1: left promiscuous mode [ 1319.300002][ T7210] team1: left allmulticast mode [ 1319.315761][ T7210] bond4: left promiscuous mode [ 1319.330077][ T7210] ip6gre1: left promiscuous mode [ 1319.338080][ T7210] ip6gre1: left allmulticast mode [ 1319.365955][ T7210] vti0: left promiscuous mode [ 1319.401455][ T7218] erspan0: entered promiscuous mode [ 1319.619814][T16106] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1319.661896][ T7250] lo speed is unknown, defaulting to 1000 [ 1319.816360][ T7269] netlink: 'syz.1.7969': attribute type 1 has an invalid length. [ 1319.893302][ T7269] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1319.906363][ T7272] sctp: [Deprecated]: syz.3.7970 (pid 7272) Use of int in max_burst socket option. [ 1319.906363][ T7272] Use struct sctp_assoc_value instead [ 1319.931249][ T7273] bond4: option lp_interval: invalid value (18446744073709551607) [ 1319.947186][ T7273] bond4: option lp_interval: allowed values 1 - 2147483647 [ 1320.192089][T16111] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1320.730192][ T7582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1321.088222][ T7311] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1321.174130][ T7315] __nla_validate_parse: 14 callbacks suppressed [ 1321.174153][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7980'. [ 1321.215628][ T7310] lo speed is unknown, defaulting to 1000 [ 1321.225240][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7980'. [ 1321.280066][T16111] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1321.378294][ T7319] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7981'. [ 1321.441047][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7981'. [ 1321.463482][ T7326] xt_hashlimit: size too large, truncated to 1048576 [ 1321.653223][ T7330] netlink: 'syz.0.7983': attribute type 4 has an invalid length. [ 1321.768020][ T7338] netlink: 'syz.0.7983': attribute type 30 has an invalid length. [ 1321.842107][T16106] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1322.241227][ T7352] syzkaller0: entered promiscuous mode [ 1322.258630][ T7352] syzkaller0: entered allmulticast mode [ 1322.371743][ T7582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1322.523708][ T7365] rose0: renamed from vlan0 [ 1322.555064][ T7361] lo speed is unknown, defaulting to 1000 [ 1322.785400][ T7367] tipc: Enabled bearer , priority 0 [ 1322.920727][T16120] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1322.928605][ T7376] syzkaller0: entered promiscuous mode [ 1322.941530][ T7376] syzkaller0: entered allmulticast mode [ 1322.948738][ T7376] tipc: Resetting bearer [ 1322.961234][ T7384] netlink: 'syz.3.7998': attribute type 12 has an invalid length. [ 1323.444384][T16111] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1323.562392][T16106] tipc: Resetting bearer [ 1323.592776][ T7396] bridge3: entered promiscuous mode [ 1323.598293][ T7396] bridge3: entered allmulticast mode [ 1323.607783][ T7363] tipc: Resetting bearer [ 1323.975613][ T7582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1324.509494][T16111] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1325.029500][T16125] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1325.555933][T16111] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1326.079341][T31448] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1326.543177][T16111] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1326.602288][T16106] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1327.129956][T16106] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1327.540717][ T7363] tipc: Disabling bearer [ 1327.552039][T22605] tipc: Node number set to 903504369 [ 1327.668313][T31454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1327.784121][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1327.818004][ T7432] vlan0: entered promiscuous mode [ 1327.823350][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1327.987667][ T7444] netlink: 'syz.0.8013': attribute type 10 has an invalid length. [ 1328.144095][ T7451] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1328.183110][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8018'. [ 1328.210071][T31448] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1328.241026][ T7464] netlink: 'syz.3.8015': attribute type 2 has an invalid length. [ 1328.250595][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8018'. [ 1328.263255][ T7464] netlink: 'syz.3.8015': attribute type 11 has an invalid length. [ 1328.312077][ T7464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8015'. [ 1328.547705][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8021'. [ 1328.650916][ T7482] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1328.669467][ T7482] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1328.733365][ T7478] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8022'. [ 1328.771973][ T7582] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1329.829758][T16111] net_ratelimit: 1 callbacks suppressed [ 1329.829780][T16111] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1329.859158][ T7510] macsec1: entered promiscuous mode [ 1330.373224][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8033'. [ 1330.397677][T31454] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1330.949786][T16111] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1331.066635][ T7540] netlink: 'syz.3.8037': attribute type 10 has an invalid length. [ 1331.105656][ T7540] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8037'. [ 1331.133164][ T7540] dummy0: entered promiscuous mode [ 1331.149844][ T7540] dummy0: entered allmulticast mode [ 1331.155761][ T7540] batman_adv: batadv0: Interface deactivated: dummy0 [ 1331.173409][ T7540] batman_adv: batadv0: Removing interface: dummy0 [ 1331.197068][ T7540] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1332.784618][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8046'. [ 1332.796870][ T7581] xt_hashlimit: size too large, truncated to 1048576 [ 1332.822096][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8046'. [ 1333.223698][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8051'. [ 1333.251349][ T7602] netlink: 'syz.0.8051': attribute type 4 has an invalid length. [ 1333.838008][ T7635] netlink: 'syz.0.8059': attribute type 1 has an invalid length. [ 1333.872101][ T7636] ip6t_REJECT: ECHOREPLY is not supported [ 1334.018189][ T7638] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1334.030827][ T7642] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 1334.058441][ T7640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8059'. [ 1334.103902][ T7638] bond9: (slave bond10): making interface the new active one [ 1334.113077][ T7638] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1334.147224][ T7640] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1336.739388][ T7626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1338.763511][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8064'. [ 1338.808875][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8067'. [ 1338.891130][ T7657] bond9: option lp_interval: invalid value (18446744073709551607) [ 1338.962072][ T7657] bond9: option lp_interval: allowed values 1 - 2147483647 [ 1339.021694][ T7657] bond9 (unregistering): Released all slaves [ 1339.076401][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8071'. [ 1339.116976][ T7673] xt_TCPMSS: Only works on TCP SYN packets [ 1339.144915][ T7681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8069'. [ 1339.250805][ T7672] netlink: 'syz.1.8069': attribute type 1 has an invalid length. [ 1339.268951][ T7679] veth1_to_batadv: left allmulticast mode [ 1339.377073][ T7679] macsec0: left promiscuous mode [ 1339.394839][ T7679] macsec0: left allmulticast mode [ 1339.410058][ T7679] veth1_macvtap: left allmulticast mode [ 1339.534383][ T7679] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1339.585113][ T7679] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1339.595773][ T7679] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1339.610786][ T7679] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1339.624972][ T7679] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1339.639915][ T7679] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1339.654231][ T7679] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1339.775691][ T7672] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1339.884091][ T7688] bond5: (slave geneve5): making interface the new active one [ 1339.893721][ T7688] bond5: (slave geneve5): Enslaving as an active interface with an up link [ 1339.903180][T16106] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 1339.968777][T16106] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 1340.005157][ T5822] Dropped outbound packet type=806 [ 1340.024857][T16106] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 1340.046856][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8081'. [ 1340.054301][T16106] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 1340.091666][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8079'. [ 1340.093056][T16106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.132813][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8081'. [ 1340.147090][ T7720] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8080'. [ 1340.257852][ T7719] team0: Port device team_slave_0 removed [ 1340.306764][ T7718] ip_vti0: entered allmulticast mode [ 1340.311704][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8080'. [ 1340.315563][T16106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.411152][T16106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.446160][T16106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.697733][ T7739] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1340.723324][ T7739] pim6reg0: linktype set to 805 [ 1341.019388][ C1] Dropped outbound packet type=806 [ 1341.097182][ T7760] SET target dimension over the limit! [ 1341.177448][ T7760] netlink: 'syz.5.8091': attribute type 1 has an invalid length. [ 1341.231169][ T7764] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8091'. [ 1341.335732][ T7760] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1341.627108][ T7773] syzkaller1: entered promiscuous mode [ 1341.636255][ T7773] syzkaller1: entered allmulticast mode [ 1341.981453][T31454] wlan1: Trigger new scan to find an IBSS to join [ 1342.059325][ C1] Dropped outbound packet type=806 [ 1342.428557][ T7798] netlink: 'syz.2.8101': attribute type 1 has an invalid length. [ 1342.450753][ T7798] netlink: 'syz.2.8101': attribute type 2 has an invalid length. [ 1342.865974][ T7815] netlink: 'syz.0.8105': attribute type 1 has an invalid length. [ 1343.058781][ T7815] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1343.953836][T31454] Dropped outbound packet type=806 [ 1343.965907][ T7839] __nla_validate_parse: 5 callbacks suppressed [ 1343.965928][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8113'. [ 1344.023152][ T7840] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1344.051525][ T7840] gretap3: entered allmulticast mode [ 1344.541336][ T7582] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 1344.634217][ T7859] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1344.650038][ T7859] netlink: 'syz.1.8118': attribute type 31 has an invalid length. [ 1344.939715][T31454] wlan1: Trigger new scan to find an IBSS to join [ 1345.019734][ C0] Dropped outbound packet type=806 [ 1345.211752][ T7847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1345.430058][ T7887] netlink: 'syz.5.8124': attribute type 2 has an invalid length. [ 1345.513528][ T7887] : entered promiscuous mode [ 1345.658215][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8127'. [ 1345.691550][ T7898] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8127'. [ 1345.747697][ T7904] sctp: [Deprecated]: syz.5.8128 (pid 7904) Use of int in max_burst socket option. [ 1345.747697][ T7904] Use struct sctp_assoc_value instead [ 1345.901889][ T7891] syzkaller0: entered promiscuous mode [ 1345.923259][ T7891] syzkaller0: entered allmulticast mode [ 1346.070704][ C0] Dropped outbound packet type=806 [ 1346.276133][ T7920] xt_bpf: check failed: parse error [ 1346.744257][ T7945] netlink: 332 bytes leftover after parsing attributes in process `syz.3.8136'. [ 1346.771356][ T7945] netlink: 'syz.3.8136': attribute type 9 has an invalid length. [ 1346.780604][ T7945] netlink: 'syz.3.8136': attribute type 1 has an invalid length. [ 1347.076624][ T7954] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8136'. [ 1347.349937][T16120] Dropped outbound packet type=806 [ 1347.983942][T31448] wlan1: Trigger new scan to find an IBSS to join [ 1348.396811][ C0] Dropped outbound packet type=806 [ 1348.992764][T31448] wlan1: Creating new IBSS network, BSSID f2:3f:76:4e:be:36 [ 1349.437629][ C0] Dropped outbound packet type=806 [ 1350.478563][ T7933] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8131'. [ 1350.658801][ T7957] netlink: 'syz.0.8137': attribute type 10 has an invalid length. [ 1350.685086][ T7937] lo speed is unknown, defaulting to 1000 [ 1350.731138][ T7957] netlink: 'syz.0.8137': attribute type 10 has an invalid length. [ 1350.762820][T16125] Dropped outbound packet type=806 [ 1350.820296][ T7957] bond0: (slave ): Enslaving as an active interface with an up link [ 1351.117435][ T7985] netlink: 'syz.2.8141': attribute type 2 has an invalid length. [ 1351.140313][ T7986] IPv6: addrconf: prefix option has invalid lifetime [ 1351.147223][ T7986] IPv6: addrconf: prefix option has invalid lifetime [ 1351.166811][ T7985] netlink: 'syz.2.8141': attribute type 11 has an invalid length. [ 1351.192492][ T7985] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8141'. [ 1351.340785][ T7988] syzkaller0: entered promiscuous mode [ 1351.346557][ T7988] syzkaller0: entered allmulticast mode [ 1351.506374][ T8002] bridge12: entered promiscuous mode [ 1351.530672][ T8002] bridge12: entered allmulticast mode [ 1351.554893][ T8002] team0: Port device bridge12 added [ 1351.625860][ T8007] tipc: Failed to remove unknown binding: 66,1,1/0:4243628631/4243628633 [ 1351.819379][ C1] Dropped outbound packet type=806 [ 1351.850477][ T8007] lo speed is unknown, defaulting to 1000 [ 1351.986126][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8153'. [ 1352.734776][ T8059] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8162'. [ 1352.859345][ C1] Dropped outbound packet type=806 [ 1352.938438][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8161'. [ 1353.154148][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8161'. [ 1353.368051][ T8089] bond8: entered allmulticast mode [ 1353.380778][ T8091] netlink: 356 bytes leftover after parsing attributes in process `syz.2.8168'. [ 1353.395614][ T8088] bond8: left allmulticast mode [ 1353.416020][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8169'. [ 1353.533365][ T8096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1353.804327][ T8105] syzkaller0: entered promiscuous mode [ 1353.828988][ T8105] syzkaller0: entered allmulticast mode [ 1353.990499][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8176'. [ 1354.032379][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8176'. [ 1354.061519][ C1] Dropped outbound packet type=806 [ 1354.284134][ T8133] netlink: 'syz.0.8180': attribute type 29 has an invalid length. [ 1355.099252][ C1] Dropped outbound packet type=806 [ 1355.148736][ T8185] openvswitch: netlink: Message has 512 unknown bytes. [ 1355.167791][ T8186] openvswitch: netlink: Message has 512 unknown bytes. [ 1355.175780][ T8180] IPVS: Error joining to the multicast group [ 1355.185706][ T8182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1355.193024][ T8182] IPv6: NLM_F_CREATE should be set when creating new route [ 1355.200539][ T8182] IPv6: NLM_F_CREATE should be set when creating new route [ 1355.378136][ T8192] syzkaller1: entered promiscuous mode [ 1355.401577][ T8192] syzkaller1: entered allmulticast mode [ 1355.562642][ T8200] __nla_validate_parse: 4 callbacks suppressed [ 1355.562664][ T8200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8200'. [ 1356.139250][ C1] Dropped outbound packet type=806 [ 1356.437303][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8208'. [ 1356.495809][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8210'. [ 1356.513397][ T8226] syzkaller0: entered promiscuous mode [ 1356.535068][ T8226] syzkaller0: entered allmulticast mode [ 1356.552864][ T8231] macvlan2: entered allmulticast mode [ 1356.558900][ T8231] veth1_to_team: entered allmulticast mode [ 1356.574965][ T8226] tc action pedit offset must be on 32 bit boundaries [ 1356.729945][ T8236] ipip1: entered promiscuous mode [ 1356.853258][ T8245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8212'. [ 1357.046341][ T8263] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8215'. [ 1357.445521][ T8272] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8218'. [ 1357.461013][T16125] Dropped outbound packet type=806 [ 1357.866328][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8225'. [ 1358.146544][ T8308] lo speed is unknown, defaulting to 1000 [ 1358.158393][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8229'. [ 1358.204529][ T8276] syzkaller1: entered promiscuous mode [ 1358.212602][ T8276] syzkaller1: entered allmulticast mode [ 1358.539888][ C1] Dropped outbound packet type=806 [ 1358.648855][ T8325] ip6erspan1: entered allmulticast mode [ 1358.714455][ T8325] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8234'. [ 1358.869658][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8236'. [ 1358.881215][ T8336] xt_hashlimit: size too large, truncated to 1048576 [ 1358.897065][ T8335] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1359.472939][ T8360] IPv6: NLM_F_CREATE should be specified when creating new route [ 1359.579330][ C1] Dropped outbound packet type=806 [ 1359.632202][ T8364] netlink: 'syz.2.8246': attribute type 10 has an invalid length. [ 1359.643478][ T8364] team0: Device vxcan1 is of different type [ 1359.814460][ T8373] netlink: 'syz.1.8250': attribute type 1 has an invalid length. [ 1359.830896][ T8368] gretap0: entered promiscuous mode [ 1360.743324][ T8425] netlink: 'syz.0.8262': attribute type 5 has an invalid length. [ 1360.829829][T16107] Dropped outbound packet type=806 [ 1361.252980][ T8448] netlink: 'syz.3.8268': attribute type 1 has an invalid length. [ 1361.316360][ T8448] bond7: entered promiscuous mode [ 1361.323585][ T8448] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1361.691876][ T8465] __nla_validate_parse: 7 callbacks suppressed [ 1361.691897][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8272'. [ 1361.899554][ C1] Dropped outbound packet type=806 [ 1362.155330][ T8492] netlink: 'syz.1.8280': attribute type 1 has an invalid length. [ 1362.167114][ T8493] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8279'. [ 1362.184957][ T8492] netlink: 'syz.1.8280': attribute type 2 has an invalid length. [ 1362.939276][ C1] Dropped outbound packet type=806 [ 1363.095019][ T8517] can: request_module (can-proto-0) failed. [ 1363.211217][ T30] audit: type=1800 audit(1782551869.640:22): pid=8533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8290" name="memory.events" dev="tmpfs" ino=2203 res=0 errno=0 [ 1363.666593][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8294'. [ 1363.846227][ T8553] syzkaller0: entered promiscuous mode [ 1363.864976][ T8553] syzkaller0: entered allmulticast mode [ 1364.164728][ T8564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8301'. [ 1364.195446][ T8564] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 1364.271099][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8301'. [ 1364.377636][ T8581] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1364.385382][ T8564] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1364.450972][ T8564] bond6 (unregistering): Released all slaves [ 1364.483293][ T7582] Dropped outbound packet type=806 [ 1364.594932][ T8573] veth1_to_team: left allmulticast mode [ 1364.717406][ T8592] pim6reg0: tun_chr_ioctl cmd 35111 [ 1364.772195][ T8592] pim6reg0: tun_chr_ioctl cmd 35111 [ 1364.834433][ T8604] netlink: 'syz.2.8306': attribute type 25 has an invalid length. [ 1364.854274][ T8604] netlink: 'syz.2.8306': attribute type 3 has an invalid length. [ 1364.926326][ T8604] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8306'. [ 1365.128194][ T8613] netlink: 200 bytes leftover after parsing attributes in process `syz.3.8308'. [ 1365.140769][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8308'. [ 1365.169598][ T8618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8309'. [ 1365.341719][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8309'. [ 1365.499246][ C1] Dropped outbound packet type=806 [ 1365.743549][ T8636] geneve1: entered promiscuous mode [ 1365.761440][ T8636] macsec1: entered promiscuous mode [ 1365.781856][ T8636] geneve1: left promiscuous mode [ 1365.882393][ T8652] syzkaller0: entered promiscuous mode [ 1365.899694][ T8652] syzkaller0: entered allmulticast mode [ 1366.539248][ C1] Dropped outbound packet type=806 [ 1367.470173][ T8736] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1367.708280][ T8750] netlink: 'syz.1.8341': attribute type 1 has an invalid length. [ 1367.737039][ T8748] __nla_validate_parse: 3 callbacks suppressed [ 1367.737061][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8340'. [ 1367.782162][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8341'. [ 1367.789693][T16106] Dropped outbound packet type=806 [ 1367.897178][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8341'. [ 1367.920912][ T8750] bond8: entered promiscuous mode [ 1367.938478][ T8750] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1368.022404][ T8754] bond8: (slave bridge10): making interface the new active one [ 1368.053656][ T8754] bridge10: entered promiscuous mode [ 1368.072660][ T8754] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 1368.284990][ T8771] netlink: 'syz.3.8344': attribute type 1 has an invalid length. [ 1368.325247][ T8771] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8344'. [ 1368.442669][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8346'. [ 1368.668323][ T8779] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1368.756160][ T8781] bond12: (slave veth11): Enslaving as an active interface with an up link [ 1368.847090][ T8790] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1368.859566][ C1] Dropped outbound packet type=806 [ 1368.877590][ T8790] bond12: (slave batadv1): Enslaving as an active interface with an up link [ 1369.394357][ T8806] netlink: 7 bytes leftover after parsing attributes in process `syz.0.8352'. [ 1369.899292][ C1] Dropped outbound packet type=806 [ 1370.003488][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8358'. [ 1370.064454][ T8841] netlink: 320 bytes leftover after parsing attributes in process `syz.1.8359'. [ 1370.362078][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8364'. [ 1370.669148][ T8867] netlink: 'syz.5.8367': attribute type 2 has an invalid length. [ 1371.082804][ T8878] xt_HMARK: proto mask must be zero with L3 mode [ 1371.102022][T16106] Dropped outbound packet type=806 [ 1372.139273][ C0] Dropped outbound packet type=806 [ 1372.623776][ T8896] --map-set only usable from mangle table [ 1372.651096][ T8814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1372.694448][ T8896] netlink: 504 bytes leftover after parsing attributes in process `syz.1.8376'. [ 1372.967963][ T8911] pim6reg1: entered promiscuous mode [ 1372.975415][ T8911] pim6reg1: entered allmulticast mode [ 1373.179681][ C0] Dropped outbound packet type=806 [ 1373.191471][ T8914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1373.351780][ T8920] netlink: 'syz.0.8383': attribute type 8 has an invalid length. [ 1373.419597][ T8921] __nla_validate_parse: 1 callbacks suppressed [ 1373.419619][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8382'. [ 1373.522611][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8386'. [ 1373.544870][ T8928] syzkaller0: entered promiscuous mode [ 1373.560997][ T8928] syzkaller0: entered allmulticast mode [ 1373.674824][ T8928] tipc: Enabled bearer , priority 0 [ 1373.731709][ T8926] tipc: Resetting bearer [ 1373.778607][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1373.830252][ T8926] tipc: Disabling bearer [ 1373.944398][ T8948] bond9: Unable to set up delay as MII monitoring is disabled [ 1374.003672][ T8948] bond9 (unregistering): Released all slaves [ 1374.124752][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8394'. [ 1374.217539][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8396'. [ 1374.248828][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8396'. [ 1374.430295][T31454] Dropped outbound packet type=806 [ 1375.499347][ C0] Dropped outbound packet type=806 [ 1376.539435][ C0] Dropped outbound packet type=806 [ 1377.277071][ T8977] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1377.405146][ T8982] netlink: 'syz.1.8400': attribute type 2 has an invalid length. [ 1377.441582][ T8982] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8400'. [ 1377.744571][T16106] Dropped outbound packet type=806 [ 1377.794837][ T9001] bridge11: entered promiscuous mode [ 1377.800443][ T9001] bridge11: entered allmulticast mode [ 1377.813797][ T9001] team0: Port device bridge11 added [ 1377.896068][ T9011] veth0_to_bond: entered promiscuous mode [ 1377.937269][ T9011] veth0_to_bond: entered allmulticast mode [ 1377.984957][ T9017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1377.997425][ T9014] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8409'. [ 1378.576927][ T9047] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1378.695486][ T9054] tipc: Enabled bearer , priority 10 [ 1378.733352][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1378.755186][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1378.778020][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1378.785867][ C0] Dropped outbound packet type=806 [ 1378.808573][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1378.822480][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1378.831653][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1378.842465][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1378.853454][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1378.867563][ T9066] netlink: 'syz.0.8419': attribute type 1 has an invalid length. [ 1378.874764][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1378.876705][ T9066] netlink: 'syz.0.8419': attribute type 2 has an invalid length. [ 1378.892110][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1378.910193][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1378.931453][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1378.950935][ T9068] syzkaller1: entered promiscuous mode [ 1378.967289][ T9068] syzkaller1: entered allmulticast mode [ 1378.979861][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1378.992235][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.045444][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.060233][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.079011][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.102492][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.128991][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.144857][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.155965][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.165302][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.177369][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.197117][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.206565][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.217746][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.228999][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.238584][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.268603][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.289017][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.311331][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.325064][ T9054] tipc: Enabling of bearer rejected, already enabled [ 1379.811642][ T9096] netlink: 'syz.1.8429': attribute type 1 has an invalid length. [ 1379.819763][ C0] Dropped outbound packet type=806 [ 1379.825795][T22605] tipc: Node number set to 1612133185 [ 1379.994079][ T9101] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8430'. [ 1380.333619][ T9117] netlink: 'syz.2.8433': attribute type 13 has an invalid length. [ 1380.344790][ T9116] netlink: zone id is out of range [ 1380.359049][ T9117] netlink: 'syz.2.8433': attribute type 17 has an invalid length. [ 1380.363165][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8434'. [ 1380.390088][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8433'. [ 1380.638430][ T9117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.662824][ T9117] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.703132][ T9117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1380.814715][ T9135] netlink: 232 bytes leftover after parsing attributes in process `syz.5.8438'. [ 1380.850309][ T9117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1380.918106][ T9117] veth1_vlan: left promiscuous mode [ 1380.926156][ T9117] veth0_vlan: left promiscuous mode [ 1380.935494][ T9117] veth0_vlan: entered promiscuous mode [ 1380.951536][ T9117] veth1_vlan: entered promiscuous mode [ 1380.963065][ T9117] veth1_macvtap: left promiscuous mode [ 1380.971158][ T9117] veth0_macvtap: left promiscuous mode [ 1380.978610][ T9117] veth0_macvtap: entered promiscuous mode [ 1380.991117][ T9117] veth1_macvtap: entered promiscuous mode [ 1381.003996][ T9117] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1381.011675][ T9117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1381.025872][ T9117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1381.038793][ T9117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1381.051181][ T9117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1381.106734][ T9117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1381.125198][ T9117] 8021q: adding VLAN 0 to HW filter on device team1 [ 1381.134895][ T9117] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1381.141008][ T7582] Dropped outbound packet type=806 [ 1381.151090][ T9117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1381.159670][ T9117] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1381.170144][ T9117] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1381.195039][ T9117] veth1_to_team: entered promiscuous mode [ 1381.201052][ T9117] veth1_to_team: entered allmulticast mode [ 1381.206938][ T9117] macvlan2: left allmulticast mode [ 1381.213326][ T9117] veth1_to_team: left allmulticast mode [ 1381.244982][ T9125] netlink: 'syz.0.8437': attribute type 2 has an invalid length. [ 1381.267487][T31453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.274760][T31453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1381.312125][T31453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.319391][T31453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1381.338547][ T9142] netlink: 'syz.1.8441': attribute type 11 has an invalid length. [ 1381.393532][T16106] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1381.417900][T16106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.434484][T16106] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 1381.582733][T31453] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1381.598802][ T9146] bridge5: entered allmulticast mode [ 1381.612348][T16106] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1381.637863][T16106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.685261][T16106] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 1381.721282][T16106] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1381.744298][T16106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.758028][T16106] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 1381.820920][ T9157] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8446'. [ 1381.872122][ T9163] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8447'. [ 1381.883666][T16106] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1381.904849][T16106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.925603][T16106] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 1381.950425][T16120] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1381.983218][T16120] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1382.119055][ T9169] sctp: [Deprecated]: syz.3.8450 (pid 9169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1382.119055][ T9169] Use struct sctp_sack_info instead [ 1382.139267][ C0] Dropped outbound packet type=806 [ 1382.231954][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8451'. [ 1382.278035][ T9181] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8452'. [ 1382.343650][ T9181] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8452'. [ 1382.482267][ T9190] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 1382.523154][ T9190] lo speed is unknown, defaulting to 1000 [ 1382.711775][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8455'. [ 1383.008158][ T9203] netlink: 'syz.1.8460': attribute type 1 has an invalid length. [ 1383.087319][ T9207] lo speed is unknown, defaulting to 1000 [ 1383.179319][ C0] Dropped outbound packet type=806 [ 1383.295749][ T9223] syzkaller0: entered promiscuous mode [ 1383.316577][ T9223] syzkaller0: entered allmulticast mode [ 1383.897398][ T9253] netlink: 'syz.5.8467': attribute type 11 has an invalid length. [ 1383.978745][ T9256] syzkaller1: entered promiscuous mode [ 1383.996675][ T9256] syzkaller1: entered allmulticast mode [ 1384.006841][ T9253] netlink: 'syz.5.8467': attribute type 11 has an invalid length. [ 1384.172212][ T9267] xt_hashlimit: size too large, truncated to 1048576 [ 1384.248487][ T9271] xt_hashlimit: size too large, truncated to 1048576 [ 1384.282761][ T9271] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1384.522973][T16125] Dropped outbound packet type=806 [ 1384.914245][ T9293] syzkaller0: entered promiscuous mode [ 1384.922906][ T9293] syzkaller0: entered allmulticast mode [ 1384.973355][ T9297] IPVS: length: 220 != 24 [ 1384.982277][ T9297] IPVS: stopping backup sync thread 6134 ... [ 1385.205128][ T9301] bridge0: Device is already in use. [ 1385.214437][ T9306] __nla_validate_parse: 4 callbacks suppressed [ 1385.214458][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8485'. [ 1385.271498][ T9308] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1385.280346][ T9308] bridge0: port 1(bond10) entered blocking state [ 1385.287343][ T9308] bridge0: port 1(bond10) entered disabled state [ 1385.294574][ T9308] bond10: entered allmulticast mode [ 1385.305489][ T9308] bond10: entered promiscuous mode [ 1385.317292][ T9300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8483'. [ 1385.358248][ T9313] syzkaller0: entered promiscuous mode [ 1385.363962][ T9313] syzkaller0: entered allmulticast mode [ 1385.423374][ T9315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8487'. [ 1385.496094][ T9318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8488'. [ 1385.579653][ C1] Dropped outbound packet type=806 [ 1385.603280][ T9315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8487'. [ 1385.632910][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8488'. [ 1385.670034][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1385.819954][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1385.852777][ T9325] syzkaller0: entered promiscuous mode [ 1385.865281][ T9325] syzkaller0: entered allmulticast mode [ 1385.996102][ T9334] netlink: 'syz.3.8493': attribute type 1 has an invalid length. [ 1386.124996][ T9341] netlink: 'syz.5.8495': attribute type 11 has an invalid length. [ 1386.182072][ T9341] netlink: 244 bytes leftover after parsing attributes in process `syz.5.8495'. [ 1386.219947][ T9334] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1386.222885][ T9347] IPv6: NLM_F_CREATE should be specified when creating new route [ 1386.256030][ T9336] bond8: (slave veth9): Enslaving as an active interface with a down link [ 1386.263489][ T9340] netlink: 'syz.5.8495': attribute type 11 has an invalid length. [ 1386.265917][ T9331] dummy0: left promiscuous mode [ 1386.278936][ T9331] dummy0: left allmulticast mode [ 1386.282336][ T9347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1386.285024][ T9335] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8494'. [ 1386.291400][ T9347] IPv6: NLM_F_CREATE should be set when creating new route [ 1386.291460][ T9347] IPv6: NLM_F_CREATE should be set when creating new route [ 1386.300936][ T9340] netlink: 244 bytes leftover after parsing attributes in process `syz.5.8495'. [ 1386.308064][ T9347] IPv6: NLM_F_CREATE should be set when creating new route [ 1386.351467][ T9331] bond8: (slave dummy0): making interface the new active one [ 1386.388461][ T9331] dummy0: entered promiscuous mode [ 1386.408734][ T9331] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1386.619274][ C1] Dropped outbound packet type=806 [ 1386.847242][ T9370] netlink: 'syz.0.8501': attribute type 11 has an invalid length. [ 1387.322334][ T9385] team0: Device xfrm0 is of different type [ 1387.373954][ T9386] netlink: 'syz.5.8504': attribute type 29 has an invalid length. [ 1387.384410][ T9385] tipc: Enabling of bearer rejected, failed to enable media [ 1387.407644][ T9386] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8504'. [ 1387.436475][ T9394] netlink: 'syz.2.8505': attribute type 21 has an invalid length. [ 1387.467212][ T9394] netlink: 'syz.2.8505': attribute type 21 has an invalid length. [ 1387.921848][T16125] Dropped outbound packet type=806 [ 1388.006076][ T9424] netlink: 'syz.5.8510': attribute type 83 has an invalid length. [ 1388.167559][ T9422] sctp: [Deprecated]: syz.1.8509 (pid 9422) Use of int in max_burst socket option. [ 1388.167559][ T9422] Use struct sctp_assoc_value instead [ 1388.222481][ T9423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.928390][ T9463] sctp: [Deprecated]: syz.1.8518 (pid 9463) Use of int in max_burst socket option. [ 1388.928390][ T9463] Use struct sctp_assoc_value instead [ 1388.949785][ C0] Dropped outbound packet type=806 [ 1388.951155][ T9463] sctp: [Deprecated]: syz.1.8518 (pid 9463) Use of int in max_burst socket option deprecated. [ 1388.951155][ T9463] Use struct sctp_assoc_value instead [ 1389.002089][ T9463] lo speed is unknown, defaulting to 1000 [ 1389.285851][ T9467] netlink: 'syz.3.8519': attribute type 5 has an invalid length. [ 1389.979355][ C0] Dropped outbound packet type=806 [ 1390.707524][ T9538] netlink: 'syz.0.8537': attribute type 8 has an invalid length. [ 1390.766568][ T9538] __nla_validate_parse: 14 callbacks suppressed [ 1390.766588][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8537'. [ 1391.251289][T31446] Dropped outbound packet type=806 [ 1392.226422][ T9614] lo speed is unknown, defaulting to 1000 [ 1392.257404][ T9614] lo speed is unknown, defaulting to 1000 [ 1392.294125][ T9614] lo speed is unknown, defaulting to 1000 [ 1392.299233][ C1] Dropped outbound packet type=806 [ 1392.534054][ T9629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1392.610392][ T9628] netlink: 136 bytes leftover after parsing attributes in process `syz.5.8554'. [ 1393.099792][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1393.339314][ C1] Dropped outbound packet type=806 [ 1393.371624][T22617] lo speed is unknown, defaulting to 1000 [ 1393.377901][ T9614] infiniband syz1: set active [ 1393.384678][ T9614] infiniband syz1: added lo [ 1393.411776][ T9614] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1393.437266][ T9614] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1393.518568][ T9614] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1393.529846][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8561'. [ 1393.530150][ T9655] netlink: 'syz.5.8561': attribute type 1 has an invalid length. [ 1393.530171][ T9655] netlink: 'syz.5.8561': attribute type 2 has an invalid length. [ 1393.601190][ T9614] RDS/IB: syz1: added [ 1393.606445][ T9614] smc: adding ib device syz1 with port count 1 [ 1393.618555][ T9614] smc: ib device syz1 port 1 has no pnetid [ 1393.626527][T32592] lo speed is unknown, defaulting to 1000 [ 1393.634510][ T9614] lo speed is unknown, defaulting to 1000 [ 1393.733971][ T9662] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 1393.750515][ T9662] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 1393.752517][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1393.768204][ T9662] veth0_virt_wifi: entered allmulticast mode [ 1393.783887][ T9662] veth0_virt_wifi: entered promiscuous mode [ 1394.024227][ T9668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1394.045889][ T9670] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8565'. [ 1394.101610][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8566'. [ 1394.120112][ T9668] nbd: must specify a size in bytes for the device [ 1394.277963][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8567'. [ 1394.296406][ T9614] lo speed is unknown, defaulting to 1000 [ 1394.493068][ T9689] netlink: 'syz.5.8569': attribute type 1 has an invalid length. [ 1394.522940][ T9689] netlink: 'syz.5.8569': attribute type 2 has an invalid length. [ 1394.620764][T16107] Dropped outbound packet type=806 [ 1394.621075][ T9687] bridge4: entered allmulticast mode [ 1394.661951][ T9614] lo speed is unknown, defaulting to 1000 [ 1394.826450][ T9614] lo speed is unknown, defaulting to 1000 [ 1395.013105][ T9614] lo speed is unknown, defaulting to 1000 [ 1395.183396][ T9694] team_slave_1: left promiscuous mode [ 1395.241869][ T9694] tipc: Resetting bearer [ 1395.361844][ T9694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.413502][ T9694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1395.558686][ T9711] Dropped outbound packet type=806 [ 1395.603944][ T9692] syzkaller0: entered promiscuous mode [ 1395.611935][ T9713] Dropped outbound packet type=806 [ 1395.620101][ T9692] syzkaller0: entered allmulticast mode [ 1395.648736][ T9713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8573'. [ 1395.659415][ C1] Dropped outbound packet type=806 [ 1395.667351][ T9704] lo: Caught tx_queue_len zero misconfig [ 1395.680673][ T9614] lo speed is unknown, defaulting to 1000 [ 1395.681127][T31446] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1395.698800][T31446] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1395.797006][T31446] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1395.816188][T31446] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1396.136110][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8576'. [ 1396.619292][ C0] Dropped outbound packet type=806 [ 1396.624712][ C0] Dropped outbound packet type=806 [ 1396.630674][ T9738] netlink: 'syz.0.8578': attribute type 1 has an invalid length. [ 1396.699269][ C1] Dropped outbound packet type=806 [ 1396.763292][ T9748] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8581'. [ 1396.773110][ T9748] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1397.437445][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8585'. [ 1397.676572][ C0] Dropped outbound packet type=806 [ 1397.681975][ C0] Dropped outbound packet type=806 [ 1398.061342][T16107] Dropped outbound packet type=806 [ 1399.106437][ C0] Dropped outbound packet type=806 [ 1401.334702][ T9614] lo speed is unknown, defaulting to 1000 [ 1401.462458][T16125] ipvlan_process_outbound: 1 callbacks suppressed [ 1401.462480][T16125] Dropped outbound packet type=806 [ 1401.602527][ T9783] syzkaller1: entered promiscuous mode [ 1401.657623][ T9783] syzkaller1: entered allmulticast mode [ 1401.706340][ T9788] netlink: 'syz.1.8588': attribute type 30 has an invalid length. [ 1401.874039][ T9788] bond11: option arp_missed_max: invalid value (0) [ 1401.928327][ T9788] bond11: option arp_missed_max: allowed values 1 - 255 [ 1401.976357][ T9788] bond11 (unregistering): Released all slaves [ 1402.300590][ T9801] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8593'. [ 1402.539314][ C1] Dropped outbound packet type=806 [ 1402.658803][ T9820] lo speed is unknown, defaulting to 1000 [ 1402.668097][ T9820] lo speed is unknown, defaulting to 1000 [ 1402.980192][ T9838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8601'. [ 1403.015517][ T9838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8601'. [ 1403.495512][ T9857] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1403.508944][ T9857] xfrm1: left allmulticast mode [ 1403.517797][ T9857] bond4: left promiscuous mode [ 1403.526937][ T9857] ipip0: left promiscuous mode [ 1403.533236][ T9857] bond5: left promiscuous mode [ 1403.542060][ T9857] bridge12: left allmulticast mode [ 1403.547924][ T9859] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8606'. [ 1403.560560][ T9857] ip6erspan1: left allmulticast mode [ 1403.566885][ T9857] bond7: left promiscuous mode [ 1403.579521][ C1] Dropped outbound packet type=806 [ 1403.592544][ T9857] tipc: Enabling of bearer rejected, failed to enable media [ 1403.936214][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8610'. [ 1403.951486][ T9870] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1404.217691][ T9892] netlink: 208 bytes leftover after parsing attributes in process `syz.1.8615'. [ 1404.242228][ T9892] netlink: 208 bytes leftover after parsing attributes in process `syz.1.8615'. [ 1404.645360][ T9916] Cannot find add_set index 0 as target [ 1404.869196][ T9922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8623'. [ 1404.880513][ T9922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8623'. [ 1404.900777][T16125] Dropped outbound packet type=806 [ 1404.934480][ T9923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8623'. [ 1405.468194][ T9939] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1405.486007][ T9944] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 1405.504129][ T9945] veth0_to_bond: left promiscuous mode [ 1405.518900][ T9939] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1405.541808][ T9945] veth0_to_bond: left allmulticast mode [ 1405.553113][ T9939] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1405.979234][ C1] Dropped outbound packet type=806 [ 1406.621679][T10009] bond0: Unable to set down delay as MII monitoring is disabled [ 1407.019234][ C1] Dropped outbound packet type=806 [ 1407.179838][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1407.415361][T10039] syzkaller1: entered promiscuous mode [ 1407.434123][T10039] syzkaller1: entered allmulticast mode [ 1407.540360][T10034] syzkaller1: entered promiscuous mode [ 1407.545974][T10034] syzkaller1: entered allmulticast mode [ 1407.820752][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1407.823344][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:1d to non-existent VLAN 4 [ 1408.139716][T20930] Bluetooth: hci3: command 0x0406 tx timeout [ 1408.235483][T20930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1408.258437][T20930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1408.270289][T16125] Dropped outbound packet type=806 [ 1408.279840][T20930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1408.296406][T20930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1408.304833][T20930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1408.935736][T10064] lo speed is unknown, defaulting to 1000 [ 1408.944451][T10064] lo speed is unknown, defaulting to 1000 [ 1409.013930][ T9992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1409.161721][T10089] __nla_validate_parse: 7 callbacks suppressed [ 1409.161742][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8657'. [ 1409.339423][ C1] Dropped outbound packet type=806 [ 1409.616730][T10103] netlink: 7 bytes leftover after parsing attributes in process `syz.5.8662'. [ 1409.739910][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1410.181479][T10064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.215529][T10064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.225887][T10064] bridge_slave_0: entered allmulticast mode [ 1410.237033][T10064] bridge_slave_0: entered promiscuous mode [ 1410.246647][T10132] tunl0: Caught tx_queue_len zero misconfig [ 1410.253851][T10133] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8666'. [ 1410.265673][T10064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.274577][T10064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.281438][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8667'. [ 1410.300554][T10064] bridge_slave_1: entered allmulticast mode [ 1410.315205][T10064] bridge_slave_1: entered promiscuous mode [ 1410.376985][T10064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.380992][ C1] Dropped outbound packet type=806 [ 1410.391953][T30832] Bluetooth: hci0: command tx timeout [ 1410.411462][T10064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.473648][T10064] team0: Port device team_slave_0 added [ 1410.482866][T10064] team0: Port device team_slave_1 added [ 1410.526429][T10064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.534365][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.562424][T10064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.576163][T10064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.583571][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.619865][T10064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.807029][T10064] hsr_slave_0: entered promiscuous mode [ 1410.815363][T10064] hsr_slave_1: entered promiscuous mode [ 1410.823788][T10064] debugfs: 'hsr0' already exists in 'hsr' [ 1410.831354][T10064] Cannot create hsr debugfs directory [ 1411.016163][T10150] bond11: Removing last ns target with arp_interval on [ 1411.634663][T16107] Dropped outbound packet type=806 [ 1412.188854][T10208] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1412.320804][T10205] syzkaller0: entered promiscuous mode [ 1412.334172][T10205] syzkaller0: entered allmulticast mode [ 1412.375175][T10205] syzkaller0: left allmulticast mode [ 1412.463801][T20930] Bluetooth: hci0: command tx timeout [ 1412.699298][ C1] Dropped outbound packet type=806 [ 1413.011327][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8697'. [ 1413.057315][T10246] hsr_slave_0: left promiscuous mode [ 1413.070093][T10251] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8698'. [ 1413.090772][T10246] hsr_slave_1: left promiscuous mode [ 1413.128475][T10254] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8698'. [ 1413.144158][T10251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.151654][T10251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.168579][T10254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.176040][T10254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.183734][T10254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.190987][T10254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.239526][T10254] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8698'. [ 1413.283655][T10248] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8696'. [ 1413.391405][T10244] syzkaller0: entered promiscuous mode [ 1413.397074][T10244] syzkaller0: entered allmulticast mode [ 1413.407479][T10254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.415094][T10254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.580485][T31446] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1413.681020][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8704'. [ 1413.739220][ C1] Dropped outbound packet type=806 [ 1413.761488][T10276] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 1414.551609][T20930] Bluetooth: hci0: command tx timeout [ 1415.050465][T31446] Dropped outbound packet type=806 [ 1416.059234][ C1] Dropped outbound packet type=806 [ 1416.621055][T20930] Bluetooth: hci0: command tx timeout [ 1417.102516][ C1] Dropped outbound packet type=806 [ 1417.714068][T10268] syzkaller1: entered promiscuous mode [ 1417.720224][T10268] syzkaller1: entered allmulticast mode [ 1417.728778][T10277] 8021q: VLANs not supported on ip6_vti0 [ 1417.737205][T10284] batman_adv: batadv0: Adding interface: dummy0 [ 1417.754538][T10284] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.787864][T10284] batman_adv: batadv0: Interface activated: dummy0 [ 1417.835626][T10288] batadv0: mtu less than device minimum [ 1417.866191][T10288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1417.878328][T10288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1417.890354][T10288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1417.902442][T10288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1417.914471][T10288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1417.926377][T10288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1417.938585][T10288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1417.950646][T10288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1417.962630][T10288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1418.056853][T10064] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1418.076787][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1418.123394][T10064] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1418.160338][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1418.173521][T10303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8711'. [ 1418.191197][T10064] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1418.225458][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1418.241179][T10064] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1418.282445][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1418.342154][T10323] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1418.416708][T16107] Dropped outbound packet type=806 [ 1418.817620][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8719'. [ 1418.836760][T10064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.851188][T10301] udevd[10301]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1419.072009][T10064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.084846][T10353] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8720'. [ 1419.157913][T31446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.165274][T31446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.236858][T31448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.244150][T31448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.328880][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8725'. [ 1419.352915][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8725'. [ 1419.371684][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8725'. [ 1419.419297][ C1] Dropped outbound packet type=806 [ 1419.423451][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8725'. [ 1419.466503][T10365] Bluetooth: MGMT ver 1.23 [ 1419.736347][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8729'. [ 1419.858400][T10383] xfrm0: entered allmulticast mode [ 1420.254821][T10401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1420.284377][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8735'. [ 1420.459538][ C1] Dropped outbound packet type=806 [ 1420.500001][T10409] netlink: 'syz.1.8737': attribute type 1 has an invalid length. [ 1420.568049][T10064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1420.838354][T10064] veth0_vlan: entered promiscuous mode [ 1420.885417][T10064] veth1_vlan: entered promiscuous mode [ 1421.006185][T10064] veth0_macvtap: entered promiscuous mode [ 1421.050659][T10064] veth1_macvtap: entered promiscuous mode [ 1421.052664][T10429] netlink: 'syz.0.8742': attribute type 1 has an invalid length. [ 1421.091519][T10430] netlink: 'syz.0.8742': attribute type 1 has an invalid length. [ 1421.117041][T10064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1421.267597][T10064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.335857][T31449] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.372324][T31449] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.398105][T31449] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.451338][T31449] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.773342][T10458] syzkaller0: entered promiscuous mode [ 1421.784888][T10458] syzkaller0: entered allmulticast mode [ 1421.841333][T16107] Dropped outbound packet type=806 [ 1421.912220][T10466] x_tables: duplicate underflow at hook 2 [ 1421.922072][T31446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.940962][T31446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.005151][T10470] tc_dump_action: action bad kind [ 1422.027739][T31454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.036401][T31454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.431831][T10484] netlink: 'syz.0.8758': attribute type 1 has an invalid length. [ 1422.859226][ C0] Dropped outbound packet type=806 [ 1422.896568][T10490] netlink: 'syz.3.8652': attribute type 4 has an invalid length. [ 1423.190204][ C0] Dropped outbound packet type=806 [ 1423.212667][T10515] __nla_validate_parse: 9 callbacks suppressed [ 1423.212687][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8765'. [ 1423.376554][T10515] bond0: Unable to set up delay as MII monitoring is disabled [ 1423.714221][T10533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8767'. [ 1423.754906][T10533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8767'. [ 1423.899253][ C0] Dropped outbound packet type=806 [ 1423.982739][T10545] net_ratelimit: 11 callbacks suppressed [ 1423.982759][T10545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1424.080786][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8774'. [ 1424.219722][ C0] Dropped outbound packet type=806 [ 1424.543796][T10575] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8778'. [ 1424.587882][T10580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1424.885948][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8784'. [ 1424.929249][T10591] smc: net device wg2 applied user defined pnetid SYZ0 [ 1424.998219][T10604] ip6t_srh: unknown srh match flags 4000 [ 1425.014122][T10606] syzkaller1: entered promiscuous mode [ 1425.032714][T10606] syzkaller1: entered allmulticast mode [ 1425.085233][T10604] veth19: entered promiscuous mode [ 1425.113351][T10604] veth19: entered allmulticast mode [ 1425.137928][T10604] team0: Port device veth19 added [ 1425.181102][T31454] Dropped outbound packet type=806 [ 1425.269860][ C0] Dropped outbound packet type=806 [ 1425.354433][T10625] netlink: 'syz.2.8791': attribute type 1 has an invalid length. [ 1425.363302][T10625] netlink: 'syz.2.8791': attribute type 2 has an invalid length. [ 1426.056552][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8800'. [ 1426.216785][T10674] netlink: 'syz.5.8800': attribute type 5 has an invalid length. [ 1426.224818][ C0] Dropped outbound packet type=806 [ 1426.271179][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8800'. [ 1426.498530][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.506149][T10689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.513982][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.521239][T10689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.061665][T32592] lo speed is unknown, defaulting to 1000 [ 1427.259197][ C0] Dropped outbound packet type=806 [ 1427.593521][T10728] netlink: 'syz.5.8810': attribute type 21 has an invalid length. [ 1427.618201][T10728] netlink: 'syz.5.8810': attribute type 1 has an invalid length. [ 1427.628529][T10730] sctp: [Deprecated]: syz.3.8811 (pid 10730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1427.628529][T10730] Use struct sctp_sack_info instead [ 1427.656397][T10728] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8810'. [ 1427.675234][T22617] IPVS: starting estimator thread 0... [ 1427.758383][T10731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.769737][T10732] IPVS: using max 28 ests per chain, 67200 per kthread [ 1427.833705][T10735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.925948][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8812'. [ 1428.530530][T31453] Dropped outbound packet type=806 [ 1429.580622][ C1] Dropped outbound packet type=806 [ 1430.630110][ C1] Dropped outbound packet type=806 [ 1432.058123][T31446] Dropped outbound packet type=806 [ 1433.109227][ C0] Dropped outbound packet type=806 [ 1433.573532][T10767] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1433.611018][T10771] mac80211_hwsim hwsim55 syzkaller0: entered promiscuous mode [ 1433.630368][T10771] mac80211_hwsim hwsim55 syzkaller0: entered allmulticast mode [ 1433.757482][T10779] netlink: 'syz.0.8817': attribute type 58 has an invalid length. [ 1433.788925][T10781] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1433.916887][T10784] netlink: 'syz.3.8819': attribute type 13 has an invalid length. [ 1433.992870][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8817'. [ 1434.011894][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8818'. [ 1434.022005][T10784] gretap0: refused to change device tx_queue_len [ 1434.029044][T10784] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1434.037704][T10789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8817'. [ 1434.139193][ C0] Dropped outbound packet type=806 [ 1434.783372][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8826'. [ 1434.816916][T10805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.833632][T10820] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1434.882326][T10824] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8827'. [ 1435.013505][T10830] syzkaller0: entered promiscuous mode [ 1435.037225][T10830] syzkaller0: entered allmulticast mode [ 1435.474209][T31453] Dropped outbound packet type=806 [ 1435.617748][T10847] tipc: Invalid UDP bearer configuration [ 1435.617812][T10847] tipc: Enabling of bearer rejected, failed to enable media [ 1435.812357][T10847] bond1: Removing last arp target with arp_interval on [ 1436.051897][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8838'. [ 1436.061839][T10864] tipc: Enabling of bearer rejected, failed to enable media [ 1436.281253][T31449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.295699][T10877] netlink: 'syz.1.8840': attribute type 3 has an invalid length. [ 1436.307901][T31449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.311653][T10878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.337873][T10877] netlink: 276 bytes leftover after parsing attributes in process `syz.1.8840'. [ 1436.541038][ C1] Dropped outbound packet type=806 [ 1436.579818][ T30] audit: type=1107 audit(1782551942.980:23): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1436.619380][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1436.783699][T10895] sock: sock_timestamping_bind_phc: sock not bind to device [ 1436.810798][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8845'. [ 1436.854388][T10896] netlink: 'syz.5.8846': attribute type 1 has an invalid length. [ 1436.934026][T10896] bond12: entered promiscuous mode [ 1436.942887][T10896] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1436.943660][T10903] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8846'. [ 1437.026544][T10903] bond12: entered allmulticast mode [ 1437.203819][T10896] bond12: (slave bridge7): making interface the new active one [ 1437.241119][T10896] bridge7: entered promiscuous mode [ 1437.286431][T10896] bridge7: entered allmulticast mode [ 1437.327848][T10896] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 1437.360249][T10909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.452953][T10909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.579240][ C1] Dropped outbound packet type=806 [ 1437.755706][T10925] xt_hl: Unknown Hop Limit match mode: 206 [ 1438.036880][T10916] ip6_vti0: entered promiscuous mode [ 1438.089988][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8849'. [ 1438.491590][T31448] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.533843][T31448] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.579746][T31448] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.603287][T10939] netlink: zone id is out of range [ 1438.640694][T10939] netlink: zone id is out of range [ 1438.648333][T31448] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.666365][T10939] netlink: zone id is out of range [ 1438.747290][T10939] netlink: zone id is out of range [ 1438.859833][T31446] Dropped outbound packet type=806 [ 1439.246418][T10946] syzkaller1: entered promiscuous mode [ 1439.346897][T10946] syzkaller1: entered allmulticast mode [ 1439.419682][T10970] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8861'. [ 1439.913149][ C1] Dropped outbound packet type=806 [ 1440.594314][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8869'. [ 1440.939551][ C1] Dropped outbound packet type=806 [ 1441.204309][T10995] lo speed is unknown, defaulting to 1000 [ 1441.231884][T10995] lo speed is unknown, defaulting to 1000 [ 1441.664102][T11005] can: request_module (can-proto-0) failed. [ 1441.739720][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1442.303396][T31446] Dropped outbound packet type=806 [ 1442.772954][T11032] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 1442.810404][T11032] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 1443.339269][ C0] Dropped outbound packet type=806 [ 1443.569483][T11037] xt_CT: No such helper "snmp_trap" [ 1444.091040][T11052] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1444.105465][T11051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.143850][T11054] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1444.193156][T11054] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1444.249233][T11054] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1444.279898][T11054] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1444.302972][T11054] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1444.345027][T11054] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1444.379304][ C0] Dropped outbound packet type=806 [ 1444.386858][T11062] Cannot find del_set index 2 as target [ 1444.393181][T11054] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1444.414110][T11054] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1444.443121][T11054] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1444.501270][T11054] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1444.720357][T31446] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1444.809955][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8890'. [ 1444.923001][T11070] netlink: 'syz.0.8890': attribute type 4 has an invalid length. [ 1444.980934][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8890'. [ 1445.030223][T11070] netlink: 'syz.0.8890': attribute type 10 has an invalid length. [ 1445.055655][T11070] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8890'. [ 1445.096188][T11070] : entered promiscuous mode [ 1445.116223][T11070] bond0: (slave ): Releasing backup interface [ 1445.413416][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8894'. [ 1445.448444][T11081] netlink: 'syz.3.8894': attribute type 58 has an invalid length. [ 1445.471923][T11083] netlink: 260 bytes leftover after parsing attributes in process `syz.5.8895'. [ 1445.732277][T31448] Dropped outbound packet type=806 [ 1445.748061][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8896'. [ 1445.816804][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8896'. [ 1445.866724][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8896'. [ 1445.915301][T11089] team0: Port device team_slave_0 removed [ 1446.094440][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8899'. [ 1446.527537][T11121] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8904'. [ 1446.527979][T11118] syzkaller1: entered promiscuous mode [ 1446.582434][T11118] syzkaller1: entered allmulticast mode [ 1446.779273][ C0] Dropped outbound packet type=806 [ 1446.953660][T11137] syzkaller0: entered promiscuous mode [ 1446.972128][T11137] syzkaller0: entered allmulticast mode [ 1447.277671][T11148] xt_l2tp: v2 sid > 0xffff: 262144 [ 1447.462736][T11152] ip6erspan1: entered allmulticast mode [ 1447.502335][T11156] bridge0: entered allmulticast mode [ 1447.595797][T11162] netlink: 'syz.3.8917': attribute type 1 has an invalid length. [ 1447.625167][T11162] netlink: 'syz.3.8917': attribute type 2 has an invalid length. [ 1447.728787][T11163] erspan0: left promiscuous mode [ 1447.773819][T11163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.785593][T11163] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.819249][ C0] Dropped outbound packet type=806 [ 1447.834557][T11163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1447.845488][T11163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1447.860803][T11163] veth1_vlan: left promiscuous mode [ 1447.867645][T11163] veth0_vlan: left promiscuous mode [ 1447.875189][T11163] veth0_vlan: entered promiscuous mode [ 1447.883291][T11163] veth1_vlan: entered promiscuous mode [ 1447.896954][T11163] veth1_macvtap: left promiscuous mode [ 1447.904443][T11163] veth0_macvtap: left promiscuous mode [ 1447.911663][T11163] veth0_macvtap: entered promiscuous mode [ 1447.918802][T11163] veth1_macvtap: entered promiscuous mode [ 1447.931861][T11163] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1447.939463][T11163] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1447.948176][T11163] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1447.957442][T11163] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1447.966698][T11163] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1447.982771][T11163] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1447.998223][T11163] bond1: left promiscuous mode [ 1448.004645][T11163] bridge0: left promiscuous mode [ 1448.010336][T11163] bond10: left promiscuous mode [ 1448.016378][T11163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1448.062640][T11163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1448.078209][T11163] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check. [ 1448.101009][T22617] lo speed is unknown, defaulting to 1000 [ 1448.127146][T22617] syz2: Port: 1 Link ACTIVE [ 1448.358942][T31453] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1448.374054][T31453] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.387126][T31453] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1448.396801][T31453] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.428415][T31453] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1448.429634][T11177] ipt_ECN: cannot use operation on non-tcp rule [ 1448.439678][T31453] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.462202][T31453] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1448.495643][T31453] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.530369][T11181] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode [ 1448.557034][T11181] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode [ 1448.583768][T11183] netlink: 'syz.5.8924': attribute type 1 has an invalid length. [ 1448.658516][T11183] bond13: entered promiscuous mode [ 1448.666094][T11183] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1448.764724][T11191] bond13: (slave bridge8): making interface the new active one [ 1448.773241][T11191] bridge8: entered promiscuous mode [ 1448.798348][T11191] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 1448.965572][T31449] bond2: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 1449.001587][T31449] bond2: (slave veth9): making interface the new active one [ 1449.037851][T31449] bond2: active interface up! [ 1449.059858][T31453] Dropped outbound packet type=806 [ 1449.440314][T11240] netlink: 'syz.3.8931': attribute type 1 has an invalid length. [ 1449.921762][T11240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1450.139848][ C0] Dropped outbound packet type=806 [ 1450.360434][T11260] __nla_validate_parse: 10 callbacks suppressed [ 1450.360457][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8933'. [ 1450.390870][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8933'. [ 1450.425867][T11260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1450.455039][T11262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1450.625637][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8937'. [ 1450.952657][T30832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1450.972995][T30832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1450.984130][T30832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1450.998604][T30832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1451.010479][T30832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1451.179206][ C0] Dropped outbound packet type=806 [ 1451.361382][T11299] syzkaller0: entered promiscuous mode [ 1451.384198][T11299] syzkaller0: entered allmulticast mode [ 1451.930152][T11288] lo speed is unknown, defaulting to 1000 [ 1451.940959][T11288] lo speed is unknown, defaulting to 1000 [ 1451.980979][T11232] wlan0: Trigger new scan to find an IBSS to join [ 1452.011119][T11324] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8946'. [ 1452.228769][T11328] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8947'. [ 1452.430031][T16120] Dropped outbound packet type=806 [ 1452.440628][T11288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.447857][T11288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.455664][T11288] bridge_slave_0: entered allmulticast mode [ 1452.466653][T11288] bridge_slave_0: entered promiscuous mode [ 1452.475322][T11288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.483044][T11288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.492072][T11288] bridge_slave_1: entered allmulticast mode [ 1452.499655][T11288] bridge_slave_1: entered promiscuous mode [ 1452.532696][T11288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1452.546344][T11288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.582063][T11288] team0: Port device team_slave_0 added [ 1452.591485][T11288] team0: Port device team_slave_1 added [ 1452.628734][T11288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.643293][T11288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.669865][T11288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.686441][T11288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.694073][T11288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.721991][T11288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1452.771496][T11288] hsr_slave_0: entered promiscuous mode [ 1452.778180][T11288] hsr_slave_1: entered promiscuous mode [ 1452.785504][T11288] debugfs: 'hsr0' already exists in 'hsr' [ 1452.791937][T11288] Cannot create hsr debugfs directory [ 1452.949555][T11288] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1452.961238][T11288] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.064254][T11288] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1453.075180][T11288] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.100378][T20930] Bluetooth: hci1: command tx timeout [ 1453.155654][T11288] bond0: (slave netdevsim1): Releasing backup interface [ 1453.171234][T11288] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1453.184825][T11288] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.266563][T11288] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1453.277721][T11288] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.499316][ C1] Dropped outbound packet type=806 [ 1453.672891][T11279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1453.754553][T11288] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1453.826237][T11288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1453.866180][T11288] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1453.914779][T11288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1453.923848][T11288] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1453.942041][T11288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1453.950966][T11288] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1453.965380][T11288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1454.143258][T11355] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 1454.151449][T11355] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 1454.443510][T11369] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8956'. [ 1454.539638][ C1] Dropped outbound packet type=806 [ 1454.553646][T11372] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 1454.664837][T11288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1454.761955][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8959'. [ 1454.770934][T11288] 8021q: adding VLAN 0 to HW filter on device team0 [ 1454.823597][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.830879][ T7582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1454.940665][T16106] wlan0: Trigger new scan to find an IBSS to join [ 1454.988171][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.995460][ T7582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1455.103304][T11383] netlink: 34 bytes leftover after parsing attributes in process `syz.5.8960'. [ 1455.179990][T20930] Bluetooth: hci1: command tx timeout [ 1455.238316][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8961'. [ 1455.407717][T11385] netlink: 'syz.3.8961': attribute type 1 has an invalid length. [ 1455.439870][T11385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8961'. [ 1455.657942][T11393] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8963'. [ 1455.781151][T11397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1455.804119][T11232] Dropped outbound packet type=806 [ 1455.854356][T11396] batman_adv: batadv0: Adding interface: dummy0 [ 1455.862250][T11396] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1455.917156][T11396] batman_adv: batadv0: Interface activated: dummy0 [ 1455.949861][T11402] syzkaller0: entered promiscuous mode [ 1455.956921][T11402] syzkaller0: entered allmulticast mode [ 1456.171717][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8968'. [ 1456.332019][T11417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8969'. [ 1456.398525][T11423] netlink: 67 bytes leftover after parsing attributes in process `syz.5.8971'. [ 1456.737903][T11288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1456.859299][ C0] Dropped outbound packet type=806 [ 1457.042082][T11288] veth0_vlan: entered promiscuous mode [ 1457.081344][T11454] syzkaller0: entered promiscuous mode [ 1457.090347][T11454] syzkaller0: entered allmulticast mode [ 1457.126830][T11457] netlink: 'syz.3.8978': attribute type 15 has an invalid length. [ 1457.166359][T11288] veth1_vlan: entered promiscuous mode [ 1457.168667][T11457] netlink: 386 bytes leftover after parsing attributes in process `syz.3.8978'. [ 1457.243362][T11460] syzkaller0: entered promiscuous mode [ 1457.259468][T11460] syzkaller0: entered allmulticast mode [ 1457.261750][T20930] Bluetooth: hci1: command tx timeout [ 1457.418165][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8981'. [ 1457.516936][T11288] veth0_macvtap: entered promiscuous mode [ 1457.565595][T11288] veth1_macvtap: entered promiscuous mode [ 1457.663473][T11288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1457.725201][T11288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1457.774808][T11232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.788605][T11232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.801129][T11232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.826703][T11232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.899468][ C0] Dropped outbound packet type=806 [ 1457.942411][T11486] bond3: peer notification delay (24) is not a multiple of miimon (100), value rounded to 0 ms [ 1457.980470][T31449] wlan0: Trigger new scan to find an IBSS to join [ 1458.069735][T31444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.137623][T31444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.270503][T16120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.300117][T16120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.931279][T31444] wlan0: Creating new IBSS network, BSSID da:8b:63:6b:c7:b5 [ 1459.094051][T31444] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1459.117307][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8989'. [ 1459.146206][T31444] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1459.192637][T31444] Dropped outbound packet type=806 [ 1459.193853][T16120] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1459.241486][T16120] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1459.252431][T11503] bond0: Unable to set down delay as MII monitoring is disabled [ 1459.339463][T20930] Bluetooth: hci1: command tx timeout [ 1460.203572][T11555] netlink: get zone limit has 8 unknown bytes [ 1460.219199][ C1] Dropped outbound packet type=806 [ 1460.342384][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9002'. [ 1460.527000][T11530] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1460.654154][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9005'. [ 1460.689733][T11571] openvswitch: netlink: Flow actions attr not present in new flow. [ 1460.886612][T11581] syzkaller1: entered promiscuous mode [ 1460.906580][T11581] syzkaller1: entered allmulticast mode [ 1460.927518][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9008'. [ 1460.955455][T11584] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9009'. [ 1461.001959][T11581] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1461.259257][ C1] Dropped outbound packet type=806 [ 1461.758889][T11605] netlink: 'syz.1.9015': attribute type 6 has an invalid length. [ 1461.827559][T11605] tipc: Started in network mode [ 1461.863692][T11605] tipc: Node identity 0001000000400000002e, cluster identity 4711 [ 1462.217028][T11627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9023'. [ 1462.308386][T11634] dummy0: mtu less than device minimum [ 1462.416190][T11640] netlink: 'syz.2.9027': attribute type 3 has an invalid length. [ 1462.634705][T31444] Dropped outbound packet type=806 [ 1462.855296][T11658] netlink: 'syz.2.9032': attribute type 4 has an invalid length. [ 1462.856635][T11659] netlink: 'syz.2.9032': attribute type 4 has an invalid length. [ 1462.910931][T11662] netlink: 'syz.2.9032': attribute type 4 has an invalid length. [ 1462.946891][ T8430] lo speed is unknown, defaulting to 1000 [ 1462.987221][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9032'. [ 1463.028666][ T8430] lo speed is unknown, defaulting to 1000 [ 1463.056299][ T5822] lo speed is unknown, defaulting to 1000 [ 1463.166201][T11669] syzkaller0: entered promiscuous mode [ 1463.177507][T11669] syzkaller0: entered allmulticast mode [ 1463.293386][T11674] netlink: 'syz.2.9037': attribute type 1 has an invalid length. [ 1463.659259][ C1] Dropped outbound packet type=806 [ 1464.403941][T11693] xt_cgroup: xt_cgroup: no path or classid specified [ 1464.404666][T11694] xt_cgroup: xt_cgroup: no path or classid specified [ 1464.438978][T11690] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1464.484424][T11690] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1464.694278][T11705] syzkaller0: entered promiscuous mode [ 1464.700332][ C1] Dropped outbound packet type=806 [ 1464.757336][T11705] syzkaller0: entered allmulticast mode [ 1464.906983][T11716] syzkaller1: entered promiscuous mode [ 1464.931316][T11716] syzkaller1: entered allmulticast mode [ 1464.968884][T11712] IPVS: length: 111 != 7224 [ 1465.073160][T11729] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9050'. [ 1465.992447][T31444] Dropped outbound packet type=806 [ 1467.019213][ C0] Dropped outbound packet type=806 [ 1468.059277][ C0] Dropped outbound packet type=806 [ 1468.115518][T11748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9056'. [ 1468.491772][T11760] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1469.120861][T11786] tipc: Failed to obtain node identity [ 1469.134223][T11786] tipc: Enabling of bearer rejected, failed to enable media [ 1469.215664][T11232] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1469.330823][T11232] Dropped outbound packet type=806 [ 1469.359882][T11809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9069'. [ 1469.616796][T11829] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1469.632556][T11831] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9068'. [ 1469.807426][T11838] batadv_slave_1: entered promiscuous mode [ 1470.049793][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9076'. [ 1470.053283][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9078'. [ 1470.126297][T11846] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1470.153568][T11846] team0: Port device batadv1 added [ 1470.179918][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9079'. [ 1470.201209][T11850] tipc: Disabling bearer [ 1470.295073][T11846] netlink: 'syz.3.9076': attribute type 1 has an invalid length. [ 1470.358684][T11860] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9080'. [ 1470.379292][ C1] Dropped outbound packet type=806 [ 1470.442201][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9080'. [ 1471.159457][T11893] xfrm0 speed is unknown, defaulting to 1000 [ 1471.184744][T11893] xfrm0 speed is unknown, defaulting to 1000 [ 1471.205258][T11893] xfrm0 speed is unknown, defaulting to 1000 [ 1471.223291][T11893] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1471.251881][T11893] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1471.291009][T11893] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1471.390668][T11893] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1471.408254][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9092'. [ 1471.419354][ C1] Dropped outbound packet type=806 [ 1471.594668][T11905] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1471.641124][T11916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9093'. [ 1471.681170][T11893] xfrm0 speed is unknown, defaulting to 1000 [ 1471.738693][T11893] xfrm0 speed is unknown, defaulting to 1000 [ 1471.902657][T11893] xfrm0 speed is unknown, defaulting to 1000 [ 1472.098805][T11893] xfrm0 speed is unknown, defaulting to 1000 [ 1472.674832][T11893] xfrm0 speed is unknown, defaulting to 1000 [ 1472.693183][T11232] Dropped outbound packet type=806 [ 1472.722872][T11893] xfrm0 speed is unknown, defaulting to 1000 [ 1472.762112][T11893] xfrm0 speed is unknown, defaulting to 1000 [ 1472.815352][T11893] xfrm0 speed is unknown, defaulting to 1000 [ 1472.815392][T11951] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 1472.833476][T11951] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 1472.891327][T11893] xfrm0 speed is unknown, defaulting to 1000 [ 1473.429404][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1473.653850][T11973] netlink: 'syz.1.9104': attribute type 1 has an invalid length. [ 1473.683356][T11974] __nla_validate_parse: 1 callbacks suppressed [ 1473.683378][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9103'. [ 1473.685477][T11972] netlink: 'syz.5.9105': attribute type 1 has an invalid length. [ 1473.700650][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9103'. [ 1473.736459][T11972] netlink: 'syz.5.9105': attribute type 1 has an invalid length. [ 1473.750142][ C0] Dropped outbound packet type=806 [ 1473.757085][T11972] netlink: 'syz.5.9105': attribute type 2 has an invalid length. [ 1473.785584][T11972] netlink: 'syz.5.9105': attribute type 1 has an invalid length. [ 1473.795723][T32592] IPVS: starting estimator thread 0... [ 1473.840165][T11981] netlink: 588 bytes leftover after parsing attributes in process `syz.0.9106'. [ 1473.889924][T11980] IPVS: using max 27 ests per chain, 64800 per kthread [ 1474.454633][T11981] syzkaller1: entered promiscuous mode [ 1474.471220][T11981] syzkaller1: entered allmulticast mode [ 1474.779371][ C0] Dropped outbound packet type=806 [ 1475.527833][T11983] veth0_vlan: left promiscuous mode [ 1476.580724][T11988] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1476.657780][T11232] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.712625][T11232] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 1476.723538][T11232] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.735703][T11232] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 1476.752104][T12019] mac80211_hwsim hwsim55 syzkaller0: left promiscuous mode [ 1476.760792][T12019] mac80211_hwsim hwsim55 syzkaller0: left allmulticast mode [ 1476.791364][T11232] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.810027][T11232] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 1476.842306][T11232] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.857247][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9111'. [ 1476.875469][T11232] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 1477.033326][T12041] macvlan0: entered promiscuous mode [ 1477.115658][T12044] netlink: 'syz.3.9114': attribute type 11 has an invalid length. [ 1477.250488][T12055] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9114'. [ 1477.324903][T12044] netlink: 'syz.3.9114': attribute type 84 has an invalid length. [ 1477.344054][T12059] tipc: Enabled bearer , priority 0 [ 1477.360295][T12049] syzkaller0: entered promiscuous mode [ 1477.381918][T12049] syzkaller0: entered allmulticast mode [ 1477.493317][T12049] netlink: 'syz.5.9115': attribute type 7 has an invalid length. [ 1477.521934][T12053] syzkaller0: entered promiscuous mode [ 1477.533105][T12053] syzkaller0: entered allmulticast mode [ 1477.557297][T12049] tipc: Resetting bearer [ 1477.612310][T12046] tipc: Resetting bearer [ 1477.721996][T12046] tipc: Disabling bearer [ 1477.947651][T12076] netlink: 'syz.3.9119': attribute type 2 has an invalid length. [ 1477.984525][T12077] netlink: 'syz.3.9119': attribute type 2 has an invalid length. [ 1478.002390][T12079] netlink: 'syz.5.9120': attribute type 21 has an invalid length. [ 1478.010801][T12079] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9120'. [ 1478.028048][T12076] netlink: 'syz.3.9119': attribute type 8 has an invalid length. [ 1478.033563][T12079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9120'. [ 1478.056322][T12077] netlink: 'syz.3.9119': attribute type 8 has an invalid length. [ 1478.089859][T12076] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9119'. [ 1478.152881][T12077] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9119'. [ 1478.227989][T12088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9121'. [ 1479.883060][T12151] lo speed is unknown, defaulting to 1000 [ 1479.947782][T12151] lo speed is unknown, defaulting to 1000 [ 1480.225982][T12178] x_tables: duplicate underflow at hook 1 [ 1480.412847][T12151] xfrm0 speed is unknown, defaulting to 1000 [ 1482.059961][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1482.532747][T12139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1482.888953][T12184] syzkaller1: entered promiscuous mode [ 1482.908646][T12184] syzkaller1: entered allmulticast mode [ 1483.413240][T12200] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1483.994923][T12230] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9150'. [ 1484.303550][T12253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1484.329882][T12254] syzkaller0: entered promiscuous mode [ 1484.345972][T12254] syzkaller0: entered allmulticast mode [ 1484.388527][T12251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1484.390044][T12254] tipc: Enabled bearer , priority 0 [ 1484.454781][T12252] tipc: Resetting bearer [ 1484.581075][T12252] tipc: Disabling bearer [ 1484.955803][T12272] syzkaller0: entered promiscuous mode [ 1484.989271][T12272] syzkaller0: entered allmulticast mode [ 1485.011233][T30832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1485.027222][T30832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1485.042495][T30832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1485.055173][T30832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1485.063608][T30832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1485.594548][T12290] netlink: 'syz.5.9163': attribute type 7 has an invalid length. [ 1485.960824][T12303] bridge3: entered promiscuous mode [ 1485.966114][T12303] bridge3: entered allmulticast mode [ 1487.199817][T30832] Bluetooth: hci4: command tx timeout [ 1489.276859][T30832] Bluetooth: hci4: command tx timeout [ 1490.355625][T12305] syzkaller0: entered promiscuous mode [ 1490.363675][T12305] syzkaller0: entered allmulticast mode [ 1490.391908][T12315] macsec1: entered promiscuous mode [ 1490.855031][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9172'. [ 1490.897118][T12339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9172'. [ 1490.912528][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9172'. [ 1490.922365][T12339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9172'. [ 1490.961890][T12274] lo speed is unknown, defaulting to 1000 [ 1490.992217][T12274] lo speed is unknown, defaulting to 1000 [ 1491.154959][T12354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9175'. [ 1491.195528][T12346] can: request_module (can-proto-3) failed. [ 1491.263070][T12360] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9178'. [ 1491.339598][T30832] Bluetooth: hci4: command tx timeout [ 1491.458209][T12372] netlink: 'syz.3.9181': attribute type 1 has an invalid length. [ 1491.547006][T12372] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1491.567941][T12373] macvlan3: entered promiscuous mode [ 1491.576643][T12373] macvlan3: entered allmulticast mode [ 1491.583200][T12373] bond4: entered allmulticast mode [ 1491.588870][T12373] bond4: entered promiscuous mode [ 1491.596006][T12373] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1491.607452][T12373] team0: Port device macvlan3 added [ 1491.628025][T12374] tipc: Enabled bearer , priority 0 [ 1491.637304][T12360] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 1491.652807][T12368] syzkaller0: entered promiscuous mode [ 1491.667128][T12368] syzkaller0: entered allmulticast mode [ 1491.693481][T12274] xfrm0 speed is unknown, defaulting to 1000 [ 1491.766220][T12368] tipc: Resetting bearer [ 1491.855121][T12368] tipc: Disabling bearer [ 1492.430263][T12411] netlink: 'syz.3.9191': attribute type 1 has an invalid length. [ 1492.438722][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9191'. [ 1492.449016][T12411] netlink: 'syz.3.9191': attribute type 1 has an invalid length. [ 1492.666749][T12421] netlink: 'syz.2.9194': attribute type 83 has an invalid length. [ 1492.795415][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9195'. [ 1492.809933][T12426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1492.828786][T12424] mac80211_hwsim hwsim55 syzkaller0: entered promiscuous mode [ 1492.836817][T12424] mac80211_hwsim hwsim55 syzkaller0: entered allmulticast mode [ 1492.988351][T12429] netlink: 'syz.1.9197': attribute type 12 has an invalid length. [ 1493.051800][T12431] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1493.106911][T12274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.114758][T12274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.123127][T12274] bridge_slave_0: entered allmulticast mode [ 1493.134020][T12274] bridge_slave_0: entered promiscuous mode [ 1493.144724][T12274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.152377][T12274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.160530][T12274] bridge_slave_1: entered allmulticast mode [ 1493.169570][T12274] bridge_slave_1: entered promiscuous mode [ 1493.281735][T12274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1493.320398][T12274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1493.382655][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9200'. [ 1493.420570][T30832] Bluetooth: hci4: command tx timeout [ 1493.518976][T12274] team0: Port device team_slave_0 added [ 1493.562693][T12274] team0: Port device team_slave_1 added [ 1493.653307][T12454] xt_hashlimit: max too large, truncated to 1048576 [ 1493.662935][T12454] xt_bpf: check failed: parse error [ 1493.711216][T12445] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.787941][T12461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9204'. [ 1493.970618][T12274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1493.977665][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1494.005579][T12274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1494.086876][T12274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1494.094759][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1494.124894][T12274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1494.256770][T12445] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.264872][T12469] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1494.283424][T12469] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1494.382204][T12470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.406044][T12274] hsr_slave_0: entered promiscuous mode [ 1494.413340][T12274] hsr_slave_1: entered promiscuous mode [ 1494.421097][T12274] debugfs: 'hsr0' already exists in 'hsr' [ 1494.426900][T12274] Cannot create hsr debugfs directory [ 1494.457224][T12470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.516024][T12445] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.697482][T12445] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.860181][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1495.212576][T31452] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.266497][T31452] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.343276][T31452] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.494953][T11232] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.670376][T12499] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1495.782360][T12496] bond0: (slave bond_slave_1): Releasing backup interface [ 1495.899910][T12496] nbd: nbd1 already in use [ 1495.905345][T12503] ip6tnl1: entered promiscuous mode [ 1495.929791][T12496] block nbd1: NBD_DISCONNECT [ 1495.976021][T12496] block nbd1: Send disconnect failed -104 [ 1495.991774][T12496] block nbd1: shutting down sockets [ 1496.013815][T12515] geneve3: entered promiscuous mode [ 1496.180648][T16121] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.196776][T16121] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.208421][T16121] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.235478][T16121] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.253279][T12520] __nla_validate_parse: 4 callbacks suppressed [ 1496.253301][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9220'. [ 1496.395393][T12274] [ 1496.397987][T12274] ====================================================== [ 1496.405069][T12274] WARNING: possible circular locking dependency detected [ 1496.412550][T12274] syzkaller #0 Not tainted [ 1496.417152][T12274] ------------------------------------------------------ [ 1496.424789][T12274] syz-executor/12274 is trying to acquire lock: [ 1496.431303][T12274] ffff88801be9d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 1496.443632][T12274] [ 1496.443632][T12274] but task is already holding lock: [ 1496.451192][T12274] ffffffff8f3a25c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 1496.460814][T12274] [ 1496.460814][T12274] which lock already depends on the new lock. [ 1496.460814][T12274] [ 1496.471326][T12274] [ 1496.471326][T12274] the existing dependency chain (in reverse order) is: [ 1496.480358][T12274] [ 1496.480358][T12274] -> #12 (gdp_mutex){+.+.}-{4:4}: [ 1496.487813][T12274] __mutex_lock+0x19d/0x1550 [ 1496.493035][T12274] get_device_parent+0x16f/0x3a0 [ 1496.498511][T12274] device_add+0x2d4/0xb80 [ 1496.503542][T12274] device_create+0x269/0x300 [ 1496.508752][T12274] msr_device_create+0x33/0x50 [ 1496.514585][T12274] cpuhp_invoke_callback+0x434/0x810 [ 1496.520496][T12274] cpuhp_thread_fun+0x362/0x780 [ 1496.525870][T12274] smpboot_thread_fn+0x57c/0xa80 [ 1496.531335][T12274] kthread+0x388/0x470 [ 1496.536015][T12274] ret_from_fork+0x514/0xb70 [ 1496.541161][T12274] ret_from_fork_asm+0x1a/0x30 [ 1496.546453][T12274] [ 1496.546453][T12274] -> #11 (cpuhp_state-up){+.+.}-{0:0}: [ 1496.554283][T12274] cpuhp_thread_fun+0x127/0x780 [ 1496.559664][T12274] smpboot_thread_fn+0x57c/0xa80 [ 1496.565219][T12274] kthread+0x388/0x470 [ 1496.569811][T12274] ret_from_fork+0x514/0xb70 [ 1496.575101][T12274] ret_from_fork_asm+0x1a/0x30 [ 1496.580500][T12274] [ 1496.580500][T12274] -> #10 (cpu_hotplug_lock){++++}-{0:0}: [ 1496.589105][T12274] cpus_read_lock+0x42/0x160 [ 1496.594231][T12274] static_key_slow_inc+0x12/0x30 [ 1496.599710][T12274] setup_udp_tunnel_sock+0x2df/0x4f0 [ 1496.605636][T12274] l2tp_tunnel_register+0xe77/0x1570 [ 1496.611575][T12274] pppol2tp_connect+0x8e3/0x18b0 [ 1496.617143][T12274] __sys_connect+0x323/0x460 [ 1496.622276][T12274] __x64_sys_connect+0x7a/0x90 [ 1496.627571][T12274] do_syscall_64+0x174/0x580 [ 1496.632865][T12274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.639550][T12274] [ 1496.639550][T12274] -> #9 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1496.647297][T12274] lock_sock_nested+0x41/0x100 [ 1496.652716][T12274] tls_sw_sendmsg+0x161/0x2860 [ 1496.658317][T12274] sock_sendmsg_nosec+0x90/0x180 [ 1496.663909][T12274] sock_write_iter+0x2de/0x3e0 [ 1496.669216][T12274] do_iter_readv_writev+0x612/0x8c0 [ 1496.675034][T12274] vfs_writev+0x343/0x990 [ 1496.679899][T12274] do_writev+0x154/0x2e0 [ 1496.684715][T12274] do_syscall_64+0x174/0x580 [ 1496.689828][T12274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.696291][T12274] [ 1496.696291][T12274] -> #8 (&ctx->tx_lock){+.+.}-{4:4}: [ 1496.703784][T12274] __mutex_lock+0x19d/0x1550 [ 1496.709622][T12274] tls_sw_sendmsg+0x13c/0x2860 [ 1496.715795][T12274] sock_sendmsg_nosec+0x90/0x180 [ 1496.721296][T12274] sock_sendmsg+0x1ca/0x2d0 [ 1496.726614][T12274] __sock_xmit+0x245/0x4f0 [ 1496.731635][T12274] nbd_disconnect+0x3ad/0x560 [ 1496.737021][T12274] nbd_disconnect_and_put+0x32/0x280 [ 1496.742835][T12274] nbd_genl_disconnect+0x4af/0x590 [ 1496.748489][T12274] genl_family_rcv_msg_doit+0x233/0x340 [ 1496.754682][T12274] genl_rcv_msg+0x614/0x7a0 [ 1496.759729][T12274] netlink_rcv_skb+0x226/0x4a0 [ 1496.765017][T12274] genl_rcv+0x28/0x40 [ 1496.769617][T12274] netlink_unicast+0x7bb/0x940 [ 1496.775078][T12274] netlink_sendmsg+0x813/0xb40 [ 1496.780451][T12274] sock_sendmsg_nosec+0x13a/0x180 [ 1496.786201][T12274] ____sys_sendmsg+0x54e/0x850 [ 1496.791511][T12274] ___sys_sendmsg+0x2a5/0x360 [ 1496.796765][T12274] __x64_sys_sendmsg+0x1b1/0x290 [ 1496.802312][T12274] do_syscall_64+0x174/0x580 [ 1496.807466][T12274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.814031][T12274] [ 1496.814031][T12274] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 1496.821721][T12274] __mutex_lock+0x19d/0x1550 [ 1496.826920][T12274] nbd_queue_rq+0x373/0x1150 [ 1496.832121][T12274] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1496.838270][T12274] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1496.845238][T12274] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1496.851853][T12274] blk_mq_run_work_fn+0x16c/0x300 [ 1496.857493][T12274] process_scheduled_works+0xa8e/0x14e0 [ 1496.864712][T12274] worker_thread+0xa47/0xfb0 [ 1496.870270][T12274] kthread+0x388/0x470 [ 1496.875151][T12274] ret_from_fork+0x514/0xb70 [ 1496.880355][T12274] ret_from_fork_asm+0x1a/0x30 [ 1496.885735][T12274] [ 1496.885735][T12274] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 1496.892965][T12274] __mutex_lock+0x19d/0x1550 [ 1496.898237][T12274] nbd_queue_rq+0xc1/0x1150 [ 1496.903272][T12274] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1496.909881][T12274] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1496.916820][T12274] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1496.923337][T12274] blk_mq_run_work_fn+0x16c/0x300 [ 1496.929088][T12274] process_scheduled_works+0xa8e/0x14e0 [ 1496.935594][T12274] worker_thread+0xa47/0xfb0 [ 1496.940978][T12274] kthread+0x388/0x470 [ 1496.945569][T12274] ret_from_fork+0x514/0xb70 [ 1496.951052][T12274] ret_from_fork_asm+0x1a/0x30 [ 1496.956602][T12274] [ 1496.956602][T12274] -> #5 (set->srcu){.+.+}-{0:0}: [ 1496.963765][T12274] __synchronize_srcu+0xc9/0x2f0 [ 1496.969320][T12274] elevator_switch+0x1e8/0x7b0 [ 1496.974765][T12274] elevator_change+0x2fa/0x480 [ 1496.980142][T12274] elevator_set_default+0x375/0x440 [ 1496.986061][T12274] blk_register_queue+0x3f3/0x4e0 [ 1496.991733][T12274] __add_disk+0x6cb/0xe30 [ 1496.996618][T12274] add_disk_fwnode+0xfb/0x4b0 [ 1497.001820][T12274] nbd_dev_add+0x733/0xb60 [ 1497.006764][T12274] nbd_init+0x15f/0x1e0 [ 1497.011716][T12274] do_one_initcall+0x250/0x870 [ 1497.017092][T12274] do_initcall_level+0x10a/0x1a0 [ 1497.022623][T12274] do_initcalls+0x59/0xa0 [ 1497.027738][T12274] kernel_init_freeable+0x29d/0x3e0 [ 1497.033810][T12274] kernel_init+0x1d/0x1d0 [ 1497.038663][T12274] ret_from_fork+0x514/0xb70 [ 1497.043867][T12274] ret_from_fork_asm+0x1a/0x30 [ 1497.049247][T12274] [ 1497.049247][T12274] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 1497.057181][T12274] __mutex_lock+0x19d/0x1550 [ 1497.062647][T12274] elevator_change+0x1af/0x480 [ 1497.067952][T12274] elevator_set_none+0xb5/0x140 [ 1497.073416][T12274] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1497.079884][T12274] nbd_start_device+0x189/0xb30 [ 1497.086076][T12274] nbd_genl_connect+0x1597/0x1c10 [ 1497.091751][T12274] genl_family_rcv_msg_doit+0x233/0x340 [ 1497.098272][T12274] genl_rcv_msg+0x614/0x7a0 [ 1497.103310][T12274] netlink_rcv_skb+0x226/0x4a0 [ 1497.108688][T12274] genl_rcv+0x28/0x40 [ 1497.113195][T12274] netlink_unicast+0x7bb/0x940 [ 1497.118501][T12274] netlink_sendmsg+0x813/0xb40 [ 1497.123874][T12274] sock_sendmsg_nosec+0x13a/0x180 [ 1497.129456][T12274] ____sys_sendmsg+0x54e/0x850 [ 1497.134739][T12274] ___sys_sendmsg+0x2a5/0x360 [ 1497.140142][T12274] __x64_sys_sendmsg+0x1b1/0x290 [ 1497.145610][T12274] do_syscall_64+0x174/0x580 [ 1497.150808][T12274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.157230][T12274] [ 1497.157230][T12274] -> #3 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 1497.165949][T12274] blk_alloc_queue+0x544/0x690 [ 1497.171356][T12274] __blk_mq_alloc_disk+0x194/0x390 [ 1497.177034][T12274] nbd_dev_add+0x494/0xb60 [ 1497.182007][T12274] nbd_init+0x15f/0x1e0 [ 1497.187144][T12274] do_one_initcall+0x250/0x870 [ 1497.192570][T12274] do_initcall_level+0x10a/0x1a0 [ 1497.198036][T12274] do_initcalls+0x59/0xa0 [ 1497.202986][T12274] kernel_init_freeable+0x29d/0x3e0 [ 1497.208927][T12274] kernel_init+0x1d/0x1d0 [ 1497.213810][T12274] ret_from_fork+0x514/0xb70 [ 1497.218989][T12274] ret_from_fork_asm+0x1a/0x30 [ 1497.224290][T12274] [ 1497.224290][T12274] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1497.231723][T12274] fs_reclaim_acquire+0x71/0x100 [ 1497.237284][T12274] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 1497.243620][T12274] alloc_inode+0xb8/0x1b0 [ 1497.248653][T12274] iget_locked+0x131/0x6a0 [ 1497.253636][T12274] kernfs_get_inode+0x4f/0x770 [ 1497.259369][T12274] kernfs_get_tree+0x5cd/0x980 [ 1497.264750][T12274] vfs_get_tree+0x92/0x2a0 [ 1497.269692][T12274] do_new_mount+0x319/0xdc0 [ 1497.274812][T12274] __se_sys_mount+0x31d/0x420 [ 1497.280535][T12274] do_syscall_64+0x174/0x580 [ 1497.285694][T12274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.292371][T12274] [ 1497.292371][T12274] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 1497.300585][T12274] down_write+0x96/0x200 [ 1497.305448][T12274] kernfs_remove_by_name_ns+0x4e/0x140 [ 1497.311691][T12274] device_links_driver_bound+0x4ab/0x1440 [ 1497.318047][T12274] driver_bound+0xd8/0x2e0 [ 1497.323087][T12274] really_probe+0x774/0xae0 [ 1497.328556][T12274] __driver_probe_device+0x1e8/0x360 [ 1497.334372][T12274] driver_probe_device+0x4f/0x240 [ 1497.340099][T12274] __device_attach_driver+0x270/0x410 [ 1497.345998][T12274] bus_for_each_drv+0x258/0x2f0 [ 1497.351376][T12274] __device_attach+0x2c4/0x450 [ 1497.356673][T12274] device_initial_probe+0xa1/0xd0 [ 1497.362233][T12274] bus_probe_device+0x12a/0x220 [ 1497.367713][T12274] device_add+0x7d7/0xb80 [ 1497.372829][T12274] faux_device_create_with_groups+0x1a5/0x2b0 [ 1497.379485][T12274] regulator_dummy_init+0x19/0x40 [ 1497.385417][T12274] regulator_init+0xca/0x110 [ 1497.390617][T12274] do_one_initcall+0x250/0x870 [ 1497.395993][T12274] do_initcall_level+0x10a/0x1a0 [ 1497.401547][T12274] do_initcalls+0x59/0xa0 [ 1497.406424][T12274] kernel_init_freeable+0x29d/0x3e0 [ 1497.412151][T12274] kernel_init+0x1d/0x1d0 [ 1497.417304][T12274] ret_from_fork+0x514/0xb70 [ 1497.422423][T12274] ret_from_fork_asm+0x1a/0x30 [ 1497.427828][T12274] [ 1497.427828][T12274] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 1497.436629][T12274] __lock_acquire+0x1520/0x2cf0 [ 1497.442636][T12274] lock_acquire+0x106/0x350 [ 1497.447940][T12274] down_read+0x4a/0x330 [ 1497.453188][T12274] kernfs_remove+0x35/0x80 [ 1497.458687][T12274] __kobject_del+0xe0/0x310 [ 1497.463913][T12274] kobject_del+0x45/0x60 [ 1497.469387][T12274] cleanup_glue_dir+0x1a3/0x220 [ 1497.474878][T12274] device_del+0x77d/0x8f0 [ 1497.479823][T12274] unregister_netdevice_many_notify+0x1be4/0x2150 [ 1497.487012][T12274] unregister_netdevice_queue+0x2f5/0x340 [ 1497.493264][T12274] nsim_destroy+0x26d/0x800 [ 1497.498389][T12274] __nsim_dev_port_del+0x14e/0x200 [ 1497.504066][T12274] nsim_dev_reload_destroy+0x288/0x490 [ 1497.510154][T12274] nsim_drv_remove+0x58/0x170 [ 1497.515357][T12274] device_release_driver_internal+0x48b/0x880 [ 1497.522146][T12274] bus_remove_device+0x444/0x560 [ 1497.527610][T12274] device_del+0x524/0x8f0 [ 1497.532553][T12274] device_unregister+0x21/0xf0 [ 1497.537850][T12274] del_device_store+0x2b5/0x370 [ 1497.543286][T12274] kernfs_fop_write_iter+0x3a4/0x540 [ 1497.549302][T12274] vfs_write+0x612/0xba0 [ 1497.554081][T12274] ksys_write+0x150/0x270 [ 1497.559020][T12274] do_syscall_64+0x174/0x580 [ 1497.564228][T12274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.570821][T12274] [ 1497.570821][T12274] other info that might help us debug this: [ 1497.570821][T12274] [ 1497.581829][T12274] Chain exists of: [ 1497.581829][T12274] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 1497.581829][T12274] [ 1497.595312][T12274] Possible unsafe locking scenario: [ 1497.595312][T12274] [ 1497.602853][T12274] CPU0 CPU1 [ 1497.608219][T12274] ---- ---- [ 1497.613588][T12274] lock(gdp_mutex); [ 1497.617709][T12274] lock(cpuhp_state-up); [ 1497.624561][T12274] lock(gdp_mutex); [ 1497.631246][T12274] rlock(&root->kernfs_supers_rwsem); [ 1497.636801][T12274] [ 1497.636801][T12274] *** DEADLOCK *** [ 1497.636801][T12274] [ 1497.645213][T12274] 8 locks held by syz-executor/12274: [ 1497.651128][T12274] #0: ffff888034792450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1497.660658][T12274] #1: ffff888060da8880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1497.670786][T12274] #2: ffff8880296e5d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1497.681544][T12274] #3: ffffffff8f667720 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1497.691938][T12274] #4: ffff8880294ad128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1497.702506][T12274] #5: ffff8880294aa258 (&devlink->lock_key#13){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1497.712879][T12274] #6: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x800 [ 1497.722124][T12274] #7: ffffffff8f3a25c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 1497.731360][T12274] [ 1497.731360][T12274] stack backtrace: [ 1497.737371][T12274] CPU: 1 UID: 0 PID: 12274 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1497.737397][T12274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1497.737408][T12274] Call Trace: [ 1497.737416][T12274] [ 1497.737425][T12274] dump_stack_lvl+0xe8/0x150 [ 1497.737445][T12274] print_circular_bug+0x2e1/0x300 [ 1497.737466][T12274] check_noncircular+0x12e/0x150 [ 1497.737488][T12274] __lock_acquire+0x1520/0x2cf0 [ 1497.737508][T12274] ? irqentry_exit+0x218/0x8f0 [ 1497.737532][T12274] ? lockdep_hardirqs_on+0x7a/0x110 [ 1497.737554][T12274] ? __pfx___schedule+0x10/0x10 [ 1497.737575][T12274] ? kernfs_remove+0x35/0x80 [ 1497.737592][T12274] lock_acquire+0x106/0x350 [ 1497.737606][T12274] ? kernfs_remove+0x35/0x80 [ 1497.737627][T12274] down_read+0x4a/0x330 [ 1497.737642][T12274] ? kernfs_remove+0x35/0x80 [ 1497.737659][T12274] kernfs_remove+0x35/0x80 [ 1497.737675][T12274] __kobject_del+0xe0/0x310 [ 1497.737694][T12274] kobject_del+0x45/0x60 [ 1497.737709][T12274] cleanup_glue_dir+0x1a3/0x220 [ 1497.737729][T12274] device_del+0x77d/0x8f0 [ 1497.737749][T12274] ? __pfx_device_del+0x10/0x10 [ 1497.737765][T12274] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 1497.737843][T12274] ? netdev_unregister_kobject+0x347/0x450 [ 1497.737906][T12274] unregister_netdevice_many_notify+0x1be4/0x2150 [ 1497.737938][T12274] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1497.737957][T12274] ? __mutex_lock+0x30d/0x1550 [ 1497.737978][T12274] unregister_netdevice_queue+0x2f5/0x340 [ 1497.737997][T12274] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1497.738018][T12274] nsim_destroy+0x26d/0x800 [ 1497.738042][T12274] __nsim_dev_port_del+0x14e/0x200 [ 1497.738059][T12274] nsim_dev_reload_destroy+0x288/0x490 [ 1497.738078][T12274] nsim_drv_remove+0x58/0x170 [ 1497.738093][T12274] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1497.738113][T12274] device_release_driver_internal+0x48b/0x880 [ 1497.738136][T12274] bus_remove_device+0x444/0x560 [ 1497.738154][T12274] ? __pfx_bus_remove_device+0x10/0x10 [ 1497.738171][T12274] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1497.738190][T12274] device_del+0x524/0x8f0 [ 1497.738206][T12274] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1497.738252][T12274] ? __pfx_device_del+0x10/0x10 [ 1497.738271][T12274] ? sysfs_file_kobj+0x1a/0x230 [ 1497.738292][T12274] device_unregister+0x21/0xf0 [ 1497.738311][T12274] del_device_store+0x2b5/0x370 [ 1497.738333][T12274] ? __pfx_del_device_store+0x10/0x10 [ 1497.738355][T12274] ? sysfs_file_kobj+0x1e4/0x230 [ 1497.738375][T12274] ? sysfs_kf_write+0x166/0x260 [ 1497.738398][T12274] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1497.738419][T12274] kernfs_fop_write_iter+0x3a4/0x540 [ 1497.738441][T12274] vfs_write+0x612/0xba0 [ 1497.738461][T12274] ? __pfx_vfs_write+0x10/0x10 [ 1497.738479][T12274] ? do_sys_openat2+0x14e/0x200 [ 1497.738492][T12274] ? kmem_cache_free+0x182/0x650 [ 1497.738505][T12274] ? fd_install+0x94/0x3d0 [ 1497.738533][T12274] ksys_write+0x150/0x270 [ 1497.738551][T12274] ? __pfx_ksys_write+0x10/0x10 [ 1497.738571][T12274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.738588][T12274] do_syscall_64+0x174/0x580 [ 1497.738602][T12274] ? clear_bhb_loop+0x40/0x90 [ 1497.738619][T12274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.738635][T12274] RIP: 0033:0x7f5b6db5d68e [ 1497.738650][T12274] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1497.738664][T12274] RSP: 002b:00007ffde6f3ab58 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1497.738680][T12274] RAX: ffffffffffffffda RBX: 000055555fcdc500 RCX: 00007f5b6db5d68e SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1497.738692][T12274] RDX: 0000000000000001 RSI: 00007ffde6f3abe0 RDI: 0000000000000005 [ 1497.738703][T12274] RBP: 00007f5b6dc336f2 R08: 0000000000000000 R09: 0000000000000000 [ 1497.738712][T12274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1497.738722][T12274] R13: 00007ffde6f3abe0 R14: 00007f5b6e944620 R15: 0000000000000003 [ 1497.738739][T12274] [ 1498.335504][T12274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1498.452521][T12274] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1498.699515][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1498.711293][T31449] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.801930][T31449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.931218][T31449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.030025][T31449] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.155619][T31449] bridge_slave_1: left allmulticast mode [ 1499.162059][T31449] bridge_slave_1: left promiscuous mode [ 1499.167866][T31449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.176944][T31449] bridge_slave_0: left allmulticast mode [ 1499.183661][T31449] bridge_slave_0: left promiscuous mode [ 1499.190822][T31449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.307939][T31449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1499.319842][T31449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1499.330073][T31449] bond0 (unregistering): Released all slaves [ 1499.338036][T31449] bond1 (unregistering): Released all slaves [ 1499.352076][T31449] bond2 (unregistering): Released all slaves [ 1499.362516][T31449] bond3 (unregistering): Released all slaves [ 1499.373976][T31449] bond4 (unregistering): left allmulticast mode [ 1499.385056][T31449] bond4 (unregistering): left promiscuous mode [ 1499.393706][T31449] team0: Port device macvlan3 removed [ 1499.402575][T31449] bond4 (unregistering): Released all slaves [ 1499.727988][T31449] hsr_slave_0: left promiscuous mode [ 1499.761147][T31449] hsr_slave_1: left promiscuous mode [ 1499.777022][T31449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.785385][T31449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.794145][T31449] batman_adv: batadv0: Interface deactivated: dummy0 [ 1499.801694][T31449] batman_adv: batadv0: Removing interface: dummy0 [ 1499.812005][T31449] veth1_macvtap: left promiscuous mode [ 1499.817506][T31449] veth0_macvtap: left promiscuous mode [ 1499.823758][T31449] veth1_vlan: left promiscuous mode [ 1499.829921][T31449] veth0_vlan: left promiscuous mode [ 1499.875740][T31449] team0 (unregistering): Port device batadv1 removed [ 1499.932681][T31449] team0 (unregistering): Port device team_slave_1 removed [ 1499.945067][T31449] team0 (unregistering): Port device team_slave_0 removed [ 1500.006063][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1500.336229][T31449] IPVS: stop unused estimator thread 0... [ 1500.417736][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1500.711034][T31449] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1500.724019][T31449] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.735459][T31449] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1500.749401][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1500.804035][T31449] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1500.815265][T31449] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.826901][T31449] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1500.906147][T31449] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1500.918789][T31449] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.932383][T31449] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1500.983366][T31449] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1500.995195][T31449] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.006099][T31449] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1501.115811][T31449] bridge_slave_1: left allmulticast mode [ 1501.127790][T31449] bridge_slave_1: left promiscuous mode [ 1501.134743][T31449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.146277][T31449] bridge_slave_0: left allmulticast mode [ 1501.160812][T31449] bridge_slave_0: left promiscuous mode [ 1501.172480][T31449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.184192][T31449] bridge_slave_1: left allmulticast mode [ 1501.190768][T31449] bridge_slave_1: left promiscuous mode [ 1501.196544][T31449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.207214][T31449] bridge_slave_0: left allmulticast mode [ 1501.215250][T31449] bridge_slave_0: left promiscuous mode [ 1501.225292][T31449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.241023][T31449] bridge0: left allmulticast mode [ 1501.327136][T31449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.338052][T31449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.352289][T31449] bond0 (unregistering): Released all slaves [ 1501.607067][T31449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.618249][T31449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.628573][T31449] bond0 (unregistering): Released all slaves [ 1501.643362][T31449] bond1 (unregistering): Released all slaves [ 1501.653619][T31449] bond2 (unregistering): Released all slaves [ 1501.663518][T31449] bond3 (unregistering): Released all slaves [ 1501.673531][T31449] bond4 (unregistering): Released all slaves [ 1501.683583][T31449] bond5 (unregistering): Released all slaves [ 1501.693808][T31449] bond6 (unregistering): Released all slaves [ 1501.705294][T31449] bond7 (unregistering): Released all slaves [ 1501.724423][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1501.802439][T31449] tipc: Left network mode [ 1502.238722][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1502.250915][T31449] hsr_slave_0: left promiscuous mode [ 1502.274169][T31449] hsr_slave_1: left promiscuous mode [ 1502.280617][T31449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.288380][T31449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.303238][T31449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1502.311325][T31449] batadv0: mtu less than device minimum [ 1502.317373][T31449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1502.328812][T31449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1502.342114][T31449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1502.353848][T31449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1502.364907][T31449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1502.376599][T31449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1502.387426][T31449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1502.398859][T31449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1502.409766][T31449] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1502.425258][T31449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.433380][T31449] batman_adv: batadv0: Interface deactivated: dummy0 [ 1502.440675][T31449] batman_adv: batadv0: Removing interface: dummy0 [ 1502.451282][T31449] veth1_to_team: left promiscuous mode [ 1502.457891][T31449] veth1_macvtap: left promiscuous mode [ 1502.464342][T31449] veth0_macvtap: left promiscuous mode [ 1502.471630][T31449] veth1_vlan: left promiscuous mode [ 1502.477019][T31449] veth0_vlan: left promiscuous mode [ 1502.568023][T31449] team0 (unregistering): Port device team_slave_1 removed [ 1502.581338][T31449] team0 (unregistering): Port device team_slave_0 removed [ 1502.803480][T31449] team0 (unregistering): Port device team_slave_1 removed [ 1502.815771][T31449] team0 (unregistering): Port device team_slave_0 removed [ 1502.921881][T16120] smc: removing ib device syz1 [ 1502.932209][T12018] lo speed is unknown, defaulting to 1000 [ 1502.945200][T16120] smbdirect: ib_dev[syz1] removed [ 1502.951874][T12018] syz1: Port: 1 Link DOWN [ 1503.614699][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1503.986273][T31449] IPVS: stop unused estimator thread 0... [ 1503.986595][ T5287] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1504.258083][ T5287] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1504.494718][ T5287] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1504.737258][ T5287] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1504.984881][ T5287] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1505.246686][ T5287] 8021q: adding VLAN 0 to HW filter on device eth16