last executing test programs: 38.370658655s ago: executing program 2 (id=2021): r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x194795dc6d6d5101) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000080)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000000c0)={0x3, "ca20f6c8a24081db70dd91bcb1ee7a6bad1044aa54394afbce1252a6ec059c5a5a0adc22b9e0f599b626c9179614f5e89fdb2a789fb1f4bce7e92725189192bf3b0783a03744c3450fef8a4f78c61ea4fc3f34a1f1cdee438be57b2a31779d3368c7e9fd831e8c3f802d963c4766c3fd7221735054188e6ea0ee0c93a2b5d8c0"}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000400)={r0, &(0x7f0000000300)='\x00', 0x69c0, &(0x7f0000000340)={@align=0x6, {0x5, 0x4, 0xffff92bb, 0x7}}, 0x2, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x5}) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x100010, r3, 0x81b2a000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x800, 0x5}, 0x90) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa0, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x22}}}}, [@NL80211_ATTR_KEY_SEQ={0x13, 0xa, "1fcda59db1ff1130932ce5f5d54db5"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x13, 0x4, "e736d5acf5c92d5cac6db78796ac67"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "80a1f4b698"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x7, 0x4, "8b9346"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "37184360af63f5f6ce7adc42afd8"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$inet6(0xa, 0x8000b, 0x5) ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000700)) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000740), &(0x7f0000000780)=0x4) r7 = accept(r6, &(0x7f00000007c0)=@l2, &(0x7f0000000840)=0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x4, 0x8}, {0xfff3, 0xb}, {0x8, 0x3}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000980)=@req3={0x7, 0x7, 0x1, 0x0, 0xd, 0x8, 0x2}, 0x1c) getsockname$packet(r3, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a00)=0x14) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000a40)={0x0, 0x1000, "75f86bca54c48c4a2edd7cceecbc4f37e5a06f0bfd9fe7fad75c77f7dc79777ae6945cb328ef477a16f0ae3554ed3eaf11ef6cb1b782c3c37af399501bb856773282c9e14c5b308501512f9a9e6f45d7a7bfc91a340b5f0be46c77895a273ec93104fd1f417474e15d3e858358697a0b05409c2b7e4abb9ebb7c5a0aa696592fc0e7f7bbc688419bb4d0f0ed69a726dd24deff5a40bd9a466c8eaf28f0a3725902743a79eb6a09c1e261bc310427508e3a48d6c48dfc030d85166520fadd1bd806b7167a9b822872fcf49c63fd648bbcc2b4ab5363cf1855d78417ca8fd7b824c9d0f62d2c9de143286b2f05e51561e90eed1110f2748db4bb25492ac87f591483b8e36aef219859b16b6c96d95e9641f36bee3a4531073c2295ee9ed3c7dfa844b0c2fd50baec736251308a5bd9c72d2a67ef53abf4b5f6e8d35735d4c4de7baee16c89a0a70b72d34e15e77512584edd263bcd9a2f018e9b7c5144fd759b0863c2396571967b391665523ea480985450a5411c5104f4c7218a38786da88516d366ba8bfc19d9b40e00320427f3dda796209670d344fe1e05655d5115b072a1acd87e8a23cc079b210c3a03849b2723357312bad90dc8e490c3d1cc0dbbed8b8dea451ff55d61d75115268dedb0c6bd213bc47e337bd5d11e37958b0ffdba6ce32d0675e7b93791158abd9a6f433c7c5f308bcd09088a6cb1a4c511249243505a178d26dc294eae50afc37ad7e9fe797e964930fb79bca97f94c7dd6afcba5638614163e8ab9b27788d44e640aedf70d544be556f67351f9e7e5f9d60b1a13c591bb36776b7769b80b55a08671d30a56ffe5ac292a4adabdb320f301d07a2cd4649f08f912679306b184a3d014cad81a8d3ce3604589152958d5c2fb71bfb7fe8ac586a0c987e0bb8d0c08c66ac5796064017720dc0dc53a8a7504dbc7e6b10296001e2cb03c9ff7035fffbc05a88196075f3b39683d8eb079895942ac36459283292532f4eef252315472a3688c6f3cb2a16c469b1fc1c54ab20cd2347df87a518f78a0675178aa10e24fe3235dbde4ae28846328200a320c4b2ad3de29d3ff099a9773812ca6cce6dd5ca3874207e9830dc1b22e036d3c4b6d0bd58f2c205309410e4b224ebb99d1bf7c442f6b97c0be4b4a533000172ab8f57d3bef9d2a941cb71eaf250ab5e8bce8445b2c29aaf296b2ba5db036c32c1c9df2287c031b35d53694ae42afd5f1748c8e88eb3499539358336c199629cc55ab61e04e0f5f2316ad11ff0f1ccf3a3c618b8087f4925e6d8ff035ec28f66df100595514428057873cab8191933b0a2be8fc66014cc4837642d9b12cc92657cc17afd715c62ecdc9adb644a11bcee515ad73a15c217b4fe694fe358231610b05b8eb4d2bb9e9a5a85b513de42650a1c86af48c001ee76a73b88cacf05931cefff6039afa5d787b7c96dab13391d21af5ac737486505d2b20353838501f75b30a03ae38525ffae68de4fd17884b787e9eb43bd6e1eb0e340f513436088f509f033a706c2fc629caa11599b5f6a9116fd6929c617fa7531d9cc997bf37dbd5c0351dfa8d8f512f5c7b79108cf29b2bce18443b70c863aaf49a78464c3a1d47cf3de2633e5490a82f77a986ce25cc1db2a0940f7cce451ca36f0c0418726116a720363796aaabca2419a3f76bbd55d0f1c39186db281ea9804d2355c5dc7c50ee2b2eeacce03e2139227f4bfc28cfcfe7dc6ff7c491ede0bc0aad0e0bddb63527cad898f561042006157d45c7cd62fcfe071e8f4612952a5da72f7c3d3ba960eb26dd46cc62c1217d7a81e54ce98040352effa219337be38fcaa7d032eeb2525ba45eef2fbadbe2d05455682d274271a7177ca706b4c19cbd97fa3b98274a00c330ab867044ea655fc37801ab8771397181432d93c9ddbad7f32578c1d5f0eb1dbb01767a8b43966ca8344d28dbdea8ccad91b171df873ab26a3d3b4e806fd7672b2429ba9ce8b6b445a8c3788ae5a7298eaa368299ec51566ab1fcb6ce3cf6c6a81ddfef09f8d9295a8dab39232849d39f648153b0559e50e6c401b7a27071ed8fb5ca02ee33547ec6d1c1a875b26dc57aa9a7d6017981b48165eb5592528c25834e5035d3f11107691cac0d28ace07189466920f9f3628d9615a321e0b3d0edfe6063a39892fca18a42a11dc066a39cc423434809375497c0444302160fe80c5ccec6c7ef6239bd2d80fc715ebda7680928004b51361bd975429afa6e885d776ff2c9d2c0ae673518e9281fce87fbd93e2527968f2c44d9185024f1f4b940396794de17f13249277ecdd6ac53b81bd0ca3e860ccae86ec691e07cad385181a2d04bca13d1da7dc8a76754b38a08ee662b56fb0ba5ab2cb60579decbf7eb84aa540f166658c3b6f27c0477f36fefacdd69448f4f965d1675f2f23ce30508f88ee189f200b4efa219d9f750f452ce4e9a31cb2692668927fee70d2e0bc5bd819ba7dde7fc66b9a9096e18240121a0052cb982bb2e8ae09470036d351e7e3f4410a7c0dd13ccb4277c318d716077c1b5948f854b8bc2322339c4e0188d9a2154debbbef023863a6077170c407bc1e5f7b47c548368a5c02e445a2b9cca3783d56240921d614f713c2146bb1a585d6b866485ef38dc77eafc1e54852653c92f6322b674f19a57b0a9bf6afd9d0e8234fe7f3919ae1193d4b213df4f00c56eb613c03fb95e30d8bdc8c31c0a1da3ffaa08a91f87527ed56e8805b2d2ff8c0d9acc1f11a1c73ff60b0ae03e0715564d315d15fd71a2d034039baa17f4c64de44b0d57dedfbf1a833cc9ceaa401b18b1add5961092fbc197ff920c570545d1542a3579be5b85c38b2d3d6d97aa75b8f16cd71045de6081e8c80013bb6adef23e2876bd4a8971c5175409ff0dbe965846c802e37539249d696b050e30334523e0f9bf354a598829bf16a0ea1b96988e3ff7e6cf886384f1ad07fef1dcf261d2ce5e0b7b02dc8a5769c6c787510638b56728056eb8b9c30764a20ed236f9ecfb1c3e5974c4f992c17f648c766105a2f6ba7ccc3755f9cd0ac1ac586a03adffa31e6a415b3e0fd18d83dd81dfa4cbc05f73062e1ce83ff4af76e4874e05a6f48c3c4d21689be95a132d4c9390fedaf2be040963fa443948566c3ae4133062f90a1f9d6ac4aadb9994028d2b0a77fea12a06002bd78654dc8a02f1f35baf26ed437a4340a5e1daa6cdac05b84963abc8cfda329050c0a9672b6ea7e342d776767d9476173b1f5c34b9459fba8c18335e3ed1daf5dff1c9d908222dca0ce14a91ab513f46f46d7739d97d1b74df05812797e22f83e0f070ebfeb2e71597e749925e4bb1939ead606ffbab46115d0a01039372d37ac50dcdfb0547fe36caf48624a6f4bb38bd2f85cd9fbb8c1e305fb85a64bcc1c2d8fa0075550392ae515679833d181f4b87e6462d433532237f764419c189061ecdafc168875da211ec0b3195f7e348787ebf05a14410b315cdf9100f51e7b2a1b757d4b5c20e195af826252ebbed773c2a7f35c3a01715fa4f10dd617b4f1e0c93de58ed2d68c4a10a4978b40fe029c05b80d495a547cbb51f55cccadcfd72ec602d44598c3c241b6b1c5327d65aa651a20297e95d3679981149fcdcc3aef19c14acb22c78bcd139d270ee814289ef32d4afb0e45c34ebec744d0c63534926d557876948d1c91f17cbd44b628bb22799424c7634671bf044ad326cf293cb12d1e97d0de248b3bb59ccc7e8f331bbf990b55e7f83026951fd44898aee6b6f079ebde6441336fac08a5e63a4ec3b5e6c071d32823a346ba47cc9e7ef07b3350edec3eb6b37da5b34240061d816e81f9471119a3a28c24e153972e233f6fd2fe8b72128820d05e62f855cb7e61b2b80312776a0eaa635368a9fbbfdc91be928a9ae82243c30955c6f700ded00707fd590794a93bfe6710afaa455c619c837160e36a89b85840c99cf09cac64a48f72a1eeb8849776776c8cfb51a360f113bdfcea095eb5afe55982a9cd87442f6ec5119b636e046463f05e7ebb1d112188742a5b6b9298c4ae75e38379b9b2a5fdd9699dcb7323e36e4d771588b779d0b4cce527869fbb3a1a31eff332c23b8da8709e24de135b1b727d87e4772001627d51cb1c9928f2787b530235eee8f1b364faab5fc0c25102d90427faf8fef9b3cce6ae25d078e1e80ed1b813c64038a4d4374d8ad8c344b66e3206c913e01756b99bb9a597eef954f60c084e02df916eaebb858a5e6a6f611c882045fd515124ad7fd431a2187263fa9c7e4ebf635710633f8742184c8418f75c78fdee64206d20975f46e191c0c3734231ce6af875c11bb7f8e8cf5ae3cc994bfbf9d02ead59c30b9dbc6335d0f49658023c7eb3f64cafea31be91fdbbefb056b9269ada5e5be460a6dad949fcd63bf03b6e2352a952208a11301379dbf2182b303579d6866074d408309fa0b8bca6308f2ec74ee9f6365e31ff48b01e510e82cb7107d18f07c897895f6fa93623a74091240b8608168a1b44f8679437373bc912c97abeae26e7f76700d83757de1e6af6a3b73db5226eee60434a98dc2859cdd602e7ec0f61e085646b21a8a16841a9e8a39591704a727835c4fa7fe6297a8b2bdc969b8e77259f357168c3aca3d0c991c62c379f15da933f4605cb3b16aab4e44aec3e53d343b32d7380cf0002bdaa9fb8040ce68eee19df716085334de85595c8fd8e37e5931a436afb577bb32afb4351c54e8f5f11c71e152772df3448ff02fdfb5a44b5df398519e1d4c1c445774eb9056be265593e673b84144764e6eb9a80ca84ef2cc3816e7bbacbd11cbcb51ccde1de7b16d216c2c0b537163028332ce0d2283ffcb432483b5dfd6003ab902b98f94b01fecdd933edcd730e9a1305be4c421da7908bb576af8bff59e6ad1f4d8c832c64ac0051943374fc1ac52c96807e5a310d69ee5316e7e205d3f75a49c009c5237ab8d27eaa437e7cc414e6c88d60c396f4ed9b3d95ceedecf7617d7dc119c5884ef272d0fef633bac586a7f7c38ac426eb6cfb89b910bee7b34ae862c8aa8a25e2270b903d0637c5856e34c473b3991b62a02aa7bf765f59d92a5af1a498a88efce6a119a4a1d56ab9983c4b4141a216733cdfe6f9c02d99d5d9d1c64dc161536aa8f5667c9d6665ecb821bd753c1d25d803fdb98449cd44d8bba618b9047940450be3bc693ed69d976b67b7afecfb8e373e2170d226f6862bac892b6faa94c974eee7e6f1d93918ed115a64b7c57257a7e65e74b40c37ca4a4a8a4f73e19feb6fc81b9ce6892966f27111dd54c6620a8dd980088233d42cb8c0f6bcc547cc442843c820535e980057e17925bbc8db542a42505cdd1aedb4a06b5478ed99e6cbad7e08df36fc632524332b8f473bd874ae36eadad1d72d8b99e4f19d9b7bc779485a5b5ccc03a89b100d17be65b0979a87c3ad70fc5faed82ec6181d6708450966d5195f6cb9f6468354b685cd3b3336052285d68a0d64820e8961cd116e79422b4dd01e2cfe8c69af808eb5103affb427ae5b22dafd6d6668aa63c1757a4804b4c71ddc2ae4cf0192c1113ce0b693b125d925272764965250c267ab08743b8bee49064085fa98d5ba74ac8b296a05d97e53286cffd2aefadd3288a81dbc3155bd0124c6b038217f2e313524cf3e658f1733498a18a055fb83af272daa35a4dd2160ef43c9376bea5de1f3239d976f0c41dd76115bb15cf8040272a5beb413dd52f81b834aab8efb4fb47113c42fb78e5c38347e8fc1fcbc0bd152781bcb683d20af877e0e45d34750c67b711cf6ad"}, &(0x7f0000001a80)=0x1008) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000001ac0)={r9, @in6={{0xa, 0x4e20, 0xf2df, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}}, [0x4a0, 0x53, 0x706, 0x9, 0x8, 0x1, 0x2c, 0xa000000, 0x5db3, 0xff, 0x860, 0x6, 0xbe, 0x416, 0xfffffffffffffffe]}, &(0x7f0000001bc0)=0x100) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000001c00)={0x5, [0x9525, 0x7, 0x2, 0x1, 0x401]}, &(0x7f0000001c40)=0xe) socket$packet(0x11, 0x3, 0x300) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x18, 0x38, &(0x7f0000001c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x2, 0x7, 0x9, 0x8, 0x16}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001e40)='GPL\x00', 0x5, 0xa1, &(0x7f0000001e80)=""/161, 0x41100, 0x10, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001f40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001f80)={0x2, 0xe, 0x3076, 0x4}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000001fc0)=[{0x3, 0x4, 0x7, 0xc}, {0x5, 0x4, 0x7, 0xc}, {0x4, 0x1, 0x3, 0x1}, {0x4, 0x3, 0x2}, {0x5, 0x1, 0xb, 0x4}, {0x0, 0x2, 0x10, 0x4}, {0x0, 0x5, 0xd}, {0x5, 0x3, 0x8, 0x2}, {0x3, 0x4, 0x3, 0xa}]}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000002140)={r3, r10}) sendmsg$inet(r5, &(0x7f00000022c0)={&(0x7f0000002180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000002280)=[{&(0x7f00000021c0)="ab3a78536a271ba2058e2d4a51cbddf84b1b96052b6500a1c0773a26c84e41feb463b57a5e3851380df0a376f8a7487d76dd13c9fa1d80d36f4482633fb5813fd9e357333549b6c71e48cb5a07862a31967ba74b1a8b2ab910cbcad94a44437bbb48e1a9ca24584d240ddf6b6e4ca302f7b027f0b643c1f1d85d2af70552f7e551291a92c6", 0x85}], 0x1}, 0x4000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002640)={0x6, 0x25, &(0x7f0000002400)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffff8}, @jmp={0x5, 0x0, 0x8, 0xa, 0xb, 0xffffffffffffffc0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x28}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000002540)='GPL\x00', 0x3ff, 0x29, &(0x7f0000002580)=""/41, 0x41100, 0x8, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000025c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000002600)={0x2, 0xa, 0x91720, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000028c0)={r11, 0x0, 0x25, 0x14, @val=@tcx}, 0x1c) 37.407692594s ago: executing program 2 (id=2036): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @remote}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_newroute={0x3c, 0x18, 0x8, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x14, 0x6, 0x0, 0x3, 0x0, 0xd, 0x600}, [@RTA_UID={0x8, 0x19, r2}, @RTA_IIF={0x8, 0x3, r3}, @RTA_PRIORITY={0x8, 0x6, 0xffffffff}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10080}, 0x20040011) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x4e22, 0x2, 0x4e21, 0xe0e1, 0xa, 0x80, 0x0, 0x4, r1, r5}, {0x0, 0xe, 0xe2, 0x712, 0x100000001, 0x1, 0xe33, 0x10}, {0xb50, 0x78, 0x8, 0x43a}, 0x800, 0x6e6bb3, 0x2, 0x1, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d5, 0x6c}, 0x0, @in=@local, 0x3503, 0x1, 0x2, 0x7f, 0x7, 0xd2, 0x267}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@can_delroute={0x74, 0x19, 0xfbcc156d437be88a, 0x70bd29, 0x25dfdbfb, {0x1d, 0x1, 0x7}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x4, 0x1, 0x0, 0x0, "17618963ba46b513"}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "f5d7fa7620bc4c3e"}, 0x7}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "3b50f80e5b358272"}, 0x6}}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "07aa130903a78f8a"}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10410010}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e22, 0x80000000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x101}}, 0x9, 0x2}, 0x90) bind$pptp(0xffffffffffffffff, &(0x7f0000000780)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x4001, 0x0) r9 = ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) r10 = socket$l2tp(0x2, 0x2, 0x73) accept$inet(r10, 0x0, &(0x7f0000000800)) r11 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r11, 0x29, 0xd0, &(0x7f0000000840), &(0x7f0000000880)=0x4) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000008c0)={0x1}, 0x4) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000980)={0x3dc, r12, 0x300, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x16c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8da85f4d3d0a4792}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x3dc}}, 0x8000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, r12, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x9}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000f00)={'vlan0\x00', {0x2, 0x0, @multicast1}}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x1, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000f80)={'macvtap0\x00', 0x400}) r14 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r14, &(0x7f0000000fc0)="3aaac8b2a757bbf2d1e0939df372fd982d23c90e445b349b0ffa5e3a26fc5b14e59643e6a794aa37bf83359d4a7ec1ac83d0c0238c4106b21e28cd20f511d809734f5fb9d8aa8110b279456623d15142028e25bbdd348726bd999f474abbc08d2583f9e309936434c658db77803f93dbaf471a8ee792a72e5c253255855d5b6a03f2561b88e92c8462964b7a655797204a480ebd4b2e41d8a13ce467f0c6730a1f76e4c67f13d797d9c63629cf18f9e176a07e05275b87401d569767e3f6b4b3390f087cc68905428adab0af3192a9e190ed9ebd3b36988c6d1ab82197be87", 0xdf, 0x48800, &(0x7f00000010c0)={0xa, 0x4e23, 0x80000000, @empty, 0x9}, 0x1c) ioctl$XFS_IOC_EXCHANGE_RANGE(r9, 0x40285881, &(0x7f0000001100)={r4, 0x0, 0x8, 0x1, 0x4, 0x8}) 37.224876441s ago: executing program 2 (id=2038): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2d}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x812) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, r2, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1ff}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xf8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_OURS={0x74, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x69, 0x5, "1920db713f9a7f733c5bd1025918bd36dfe72c314f4dc302024dc46f7c0f21f1b6c0237295ba9f722f4f4a0897dafa4ff43070d5ef64af8eb5b7e8ef14460a332735b4c4d6c836f724f56575f5e491eb7f101ca77cfe884cc4d0fd1db5d712fa83acdf42e0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={r0, &(0x7f0000000300)='\x00', 0x2, &(0x7f0000000340)={@_ha_fsid={[0xff, 0xa]}, {0x3, 0x4, 0x3, 0x6}}, 0x7ff, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x4}) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000440)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000480)={0x6, 'syzkaller0\x00', {0x3}, 0x2}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r3}, 0x8) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000500), &(0x7f0000000540)=0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000013c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000600)={0xd48, r1, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x214, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x400, 0x8, 0x9e8, 0x4374, 0x8, 0x4, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x0, 0x9, 0x12, 0x48, 0x24, 0x18, 0x6, 0x2, 0x36, 0x12, 0xb, 0x36, 0x2, 0x12, 0x1, 0x30, 0x12, 0x60, 0x36, 0x60, 0x12, 0x60, 0x36, 0x6c, 0x3, 0xb]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x6}, {0x7, 0x8}, {0x2, 0x3}, {0x3, 0x8}, {0x3, 0x8}, {0x4}, {0x5, 0xa}, {0x1, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x1, 0xa}, {0x5, 0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x4, 0x2}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x6, 0x2}, {0x7, 0x2}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x6, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x6}, {0x3, 0x6}, {0x7}, {0x2, 0x1}, {0x2, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x6}, {0x3, 0x1}, {0x6}, {0x7}, {0x6, 0x3}, {0x1}, {0x0, 0x3}, {0x4, 0x3}, {0x4, 0x5}, {0x3, 0x7}, {0x5, 0x9}, {0x7, 0x9}, {0x4, 0xa}, {0x6, 0x6}, {0x1, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x1, 0xff, 0x1, 0x3ff, 0x1, 0x3]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x9, 0x48, 0x30, 0x1b, 0x9, 0x1b, 0x36, 0x1, 0xb, 0xc, 0x5, 0x0, 0x1b, 0xb, 0x2, 0x5, 0x1, 0x30, 0xb, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc147, 0x9, 0x8a49, 0xa0, 0x401, 0xfee2, 0x4, 0x6]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xece, 0x5, 0x3, 0xfff8, 0x8, 0x2, 0xe, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x6}, {0x1, 0x2}, {0x4}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x7}, {0x6, 0x3}, {0x0, 0x1}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x5}, {0x2, 0x9}, {0x1, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x6}, {0x2, 0xa}, {0x0, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x5}, {0x1, 0x9}, {0x3, 0x1}, {0x3, 0x6}, {0x6}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0x8}, {0x2, 0x7}, {0x7, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x1}, {0x2, 0x2}, {0x3, 0x7}, {0x5, 0x5}, {0x6, 0x5}, {0x7, 0x8}, {0x5, 0x9}, {0x0, 0x8}, {0x6, 0x1}, {0x6, 0xa}, {0x4}, {0x1, 0x2}, {0x1, 0x4}, {0x0, 0x4}, {0x7, 0xa}, {0x6}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x4}, {0x5, 0x3}, {0x6, 0x4}, {0x4}, {0x4, 0xa}, {0x7, 0x9}, {0x4, 0xc}, {0x0, 0x9}, {0x1, 0xa}, {0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x9}, {0x0, 0x5}, {0x4, 0x8}, {0x1, 0x4}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x8}, {0x5, 0xa}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0x5}, {0x1, 0x1}, {0x6, 0x4}, {0x0, 0x7}, {0x2, 0x4}, {0x7, 0x9}, {0x2, 0xa}, {0x2, 0x7}, {0x2, 0x7}, {0x3, 0x7}, {0x4, 0x9}, {0x1}, {0x1, 0x5}, {0x6, 0x7}, {}, {0x0, 0x5}, {0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x7, 0x5}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x0, 0x6c, 0x9, 0x2, 0x6, 0x2, 0x60, 0x3, 0x18, 0x18, 0x18, 0x6, 0x48, 0x60, 0x9, 0x3, 0x36, 0x6c, 0x0, 0x6, 0x2, 0x6, 0x2, 0x12, 0xf3, 0x6, 0x5, 0x6c, 0x5, 0x1, 0x6]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x3, 0x6}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0xd, 0xe, 0x1000, 0x1, 0x10, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd6, 0x9, 0x7, 0x3, 0x6, 0x8608, 0x7, 0x38ba]}}]}]}, @NL80211_ATTR_TX_RATES={0x470, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf8, 0x1, 0x800, 0x8, 0x3, 0xb, 0x6, 0x4]}}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x8}, {0x1}, {0x5, 0x7}, {0x6, 0x8}, {0x2, 0x9}, {0x5, 0xa}, {0x0, 0x7}, {0x3, 0xa}, {}, {0x7, 0x7}, {0x2, 0x6}, {0x2, 0x9}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x3, 0x5}, {0x4, 0xd}, {0x1, 0x4}, {0x1}, {0x5, 0x2}, {0x3, 0x6}, {0x7, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x2}, {0x5, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0x2, 0x8}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x7}, {0x5, 0x7}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x9}, {0x0, 0x5}, {0x3, 0x5}, {0x3, 0x6}, {0x6, 0xa}, {0x1, 0xa}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x2, 0x5}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0x3, 0x1, 0x16, 0x2e, 0x9, 0x16, 0x60, 0x12, 0x1, 0x5d, 0x24, 0x1, 0x60, 0x5, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0xf, 0x81, 0xffff, 0x1ff, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0xb, 0x12, 0x1b, 0x4, 0x12, 0xb, 0x9, 0x36, 0x3, 0x24, 0x24, 0x12, 0xa, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x60d, 0x1, 0x81, 0x6, 0x40, 0x3, 0x3]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0xffc0, 0x8, 0x6, 0xbeb0, 0x6, 0x18a]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xeb, 0xda0, 0x8, 0x8, 0x1, 0xe, 0x101]}}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x29d4, 0x8, 0x3, 0x3919, 0xa9a, 0x8, 0x1, 0xfad]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x41a5, 0x576f, 0x8, 0x4, 0xff, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x4, 0xc05, 0x20c0, 0x5, 0x6, 0x7, 0x101]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x5, 0x2}, {0x5, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x2, 0x7}, {0x6, 0x6}, {0x6, 0x8}, {0x0, 0x8}, {0x5, 0x4}, {0x3, 0x7}, {0x3, 0x2}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0x2}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x6}, {0x4, 0x8}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0x8}, {0x3, 0x5}, {0x0, 0x4}, {0x6, 0x1}, {0x1, 0x2}, {0x7, 0x6}, {0x1, 0x8}, {0x4, 0x5}, {0x7, 0x2}, {0x2, 0x6}, {0x5, 0x1}, {0x0, 0x6}, {0x1, 0x3}, {0x7, 0x9}, {0x6, 0x4}, {0x7, 0x4}, {0x4, 0x5}, {0x2}, {0x2, 0x9}, {0x6, 0x2}, {0x4, 0x6}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x3}, {0x7, 0x3}, {0x4, 0x7}, {0x0, 0x6}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x3}, {0x4, 0x5}, {0x0, 0x1}, {0x0, 0x6}, {0x6, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0x8}, {0x1, 0x6}, {0x3, 0x2}, {0x7}, {0x4, 0x8}, {0x2}, {0x6, 0x9}, {0x7, 0xa}, {0x2, 0x7}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x8}, {0x2, 0x4}, {0x3, 0x8}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6c, 0x0, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x4, 0x3ff, 0xf001, 0x5, 0xf, 0x0, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x7}, {}, {0x2, 0x1}, {0x3, 0x8}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x5}, {0x6, 0x8}, {0x1, 0x1}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x3}, {0x6, 0x7}, {0x5, 0x7}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x3}, {0x0, 0x5}, {}, {0x5, 0x3}, {0x6, 0x1}, {0x4, 0x3}, {0x2}, {0x1, 0x6}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x7}, {0x3, 0x5}, {0x0, 0x9}, {0x5, 0xa}, {0x0, 0x5}, {0x1}, {0x6, 0x8}, {0x7, 0xa}, {0x4, 0x3}, {0x3, 0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x2, 0x2}, {0x7, 0x3}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x3, 0x2}, {0x7, 0x6}, {0x6, 0x2}, {0x4, 0x7}, {0x2, 0x9}, {0x4, 0x8}, {0x5, 0x9}, {0x2, 0x4}, {0x0, 0x6}, {0x1}, {0x6, 0x1}, {0x0, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x36, 0x16, 0x60, 0x3, 0xc, 0x36, 0x2, 0x1, 0x2, 0x12, 0xb, 0x12, 0xc, 0xc, 0x5, 0x3, 0x9, 0xc, 0x3, 0xb, 0x36]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x2d, 0x30, 0x48, 0x12, 0x9, 0x0, 0xb, 0x0, 0x58, 0x1, 0x12, 0x24659fb798e06b87, 0x2, 0x16, 0x48, 0x5, 0x3, 0x1, 0x36, 0x1b, 0x48, 0x2, 0x5, 0x60]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x9, 0xb, 0x6c, 0x60, 0x2, 0x2, 0x60, 0x1b, 0xc, 0x18, 0x9, 0x60, 0x4, 0x30, 0x4, 0x12, 0x30, 0x6, 0x6c, 0x12, 0x36, 0x6c, 0xc, 0x6c, 0xc, 0x4, 0x4, 0x1, 0x1b, 0xb, 0x2]}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x19, 0x1b, 0x72, 0x0, 0x5, 0x24, 0x3, 0x3, 0x21, 0x1, 0x18, 0x9, 0x5, 0x30, 0x12, 0x12, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x4, 0x5d95, 0x8, 0x4e, 0x5, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x30, 0x60, 0x2, 0x60, 0x12, 0x2, 0x48, 0xb, 0x36, 0x3, 0x4, 0x6c, 0x24, 0x12, 0x9, 0x24, 0x2, 0x12, 0xb, 0x6c, 0x1b, 0x12, 0x1, 0x6c, 0x0, 0x7f]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x9}, {0x7, 0x4}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0x8}, {0x4, 0x7}, {0x6, 0x5}, {0x7, 0x5}, {0x7, 0x5}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x5}, {0x6, 0x2}, {0x6, 0x3}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x3, 0xa}, {0x4, 0xa}, {0x0, 0x1}, {0x6}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x1, 0x4}, {0x3, 0x5}, {0x4, 0x8}, {0x1, 0x6}, {0x7, 0x8}, {0x0, 0x3}, {0x4, 0x8}, {0x3, 0x6}, {0x2}, {0x4, 0x3}, {0x3, 0x2}, {0x6, 0x4}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x5, 0x8, 0x3, 0xef9, 0x1, 0xff]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7, 0x1}, {0x5, 0x9}, {0x5, 0x3}, {0x6, 0x7}, {0x2, 0x1}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0x6}, {0x3, 0xa}, {0x6, 0x1}, {0x6, 0x4}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x9}, {0x7, 0x7}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0x4}, {0x5, 0xa}, {0x1, 0x7}, {0x2, 0x1}, {0x0, 0x2}, {0x4, 0x4}, {0x6, 0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0x2}, {0x1}, {0x4, 0x8}, {0x5, 0x5}, {0x3, 0x3}, {0x5, 0xa}, {0x0, 0x2}, {0x6, 0x2}, {0x6, 0x7}, {0x1, 0x4}, {0x2, 0x4}, {0x0, 0x4}, {0x2, 0x7}, {0x1, 0x1}, {0x5}, {0x7, 0x4}, {0x6, 0x1}, {0x5, 0x5}, {0x4, 0x1}, {0x7, 0x3}, {0x3, 0xa}, {0x7, 0x1}, {0x6, 0x1}, {0x5, 0x8}, {0x0, 0x6}, {0x3, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x3, 0x1}, {0x4, 0x8}, {0x7, 0x3}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x3}, {0x3, 0x1}, {0x2, 0x6}, {0x0, 0x3}, {0x3, 0x8}, {0x5, 0x5}, {0x5, 0xa}, {0x3, 0x1}, {0x3, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfe01, 0x0, 0xe6d8, 0x9, 0x0, 0x7, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x6, 0x18, 0x2, 0xc, 0xb, 0x3, 0x1, 0x60, 0x1, 0x36, 0x60, 0x6, 0x24, 0x3]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x0, 0x3, 0x16, 0x24, 0x16, 0x0, 0x1b, 0x4, 0x2, 0x9, 0x6c, 0x3, 0x4, 0x24, 0x6, 0x9, 0x24, 0x1b, 0x5b, 0x5, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0xa}, {0x2, 0x9}, {0x3, 0x6}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x2}, {0x5, 0x8}, {0x7}, {0x1, 0x3}, {0x3, 0x5}, {0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x7}, {0x0, 0x5}, {0x7}, {0x1, 0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x7, 0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x9}, {0x2, 0x5}, {0x4, 0x5}, {0x1, 0x6}, {0x1, 0x4}, {0x2, 0x7}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x2}, {0x3, 0x5}, {0x4, 0x1}, {0x0, 0x6}, {0x3, 0x6}, {0x2}, {0x0, 0x6}, {0x7, 0x3}, {0x4}, {0x4, 0x5}, {0x6, 0x1}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x4, 0x5}, {0x1, 0x8}, {0x4, 0x9}, {0x7, 0x9}, {0x6, 0x3}, {0x5, 0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x4, 0x4c, 0x4, 0x7ff, 0x8001, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x9, 0x8, 0x5, 0x4, 0xfffb, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xd, 0x7ff, 0x5, 0x5, 0x4, 0xb, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa0ce, 0x2, 0x2dc, 0x0, 0x4, 0xb56e, 0x6, 0xfff8]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x30, 0x12, 0x18, 0x24, 0x6c, 0x3, 0x6c, 0x4, 0x60, 0x24, 0x6c, 0x6, 0x60, 0x0, 0x6, 0x6, 0x2a, 0x12, 0x4, 0xb, 0x36, 0x1, 0x4, 0x12, 0x5, 0x18, 0x16, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xde00, 0x7, 0xf, 0xffff, 0x8, 0x6, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x24, 0x9, 0x38, 0x36, 0x1, 0x4, 0x60, 0x2, 0x1, 0x6c, 0x1, 0x3, 0x6, 0x4, 0x5, 0x1b, 0x16, 0x30, 0x30, 0xb, 0x72, 0x4, 0x3, 0x5, 0x30, 0x1, 0x9, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x8, 0x200, 0xff01, 0x3, 0x4, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x5, 0x8, 0xa9, 0x3, 0x8000, 0xb3f8]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xeb2, 0x0, 0x1, 0x2, 0x9e, 0x8]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xf801, 0x2, 0x6, 0x8, 0x0, 0xfe00, 0x5]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x30, 0x6d, 0x18, 0xb, 0x9, 0x4, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x30, 0x18, 0x24, 0x6c, 0xb, 0x18, 0xb, 0x16, 0x2, 0xf, 0x1, 0x0, 0x6, 0x5, 0xc, 0x36, 0x30, 0x0, 0x12, 0x48, 0x9, 0x24, 0xb, 0x9, 0x1, 0xb, 0x4, 0x36]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x3, 0xb, 0x4, 0x5, 0xb, 0x20, 0x3f, 0x16, 0x1b, 0x36, 0xc, 0x12, 0x18, 0x9, 0x18, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x48, 0x48, 0x1]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0x7}, {0x6, 0x9}, {0x4, 0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x248, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa6a, 0x0, 0x1, 0x400, 0x8, 0x8, 0xfe5]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x3, 0x30, 0x48, 0x22, 0x4, 0x6c, 0x9, 0x2, 0x24, 0x30, 0x12, 0x4, 0x6c, 0x18, 0xc, 0x16, 0x4, 0xb, 0x4, 0x30, 0x1, 0x12, 0xb, 0x0, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x6c1f, 0xf, 0x2, 0x1ff, 0x200, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcf, 0x5991, 0x100, 0x4, 0x0, 0x7, 0xffff, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x9, 0x4, 0x8, 0x7ff, 0x7, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x2, 0x6}, {0x0, 0x1}, {0x4, 0xa}, {0x4, 0x7}, {0x7, 0x3}, {0x2, 0xa}, {0x3, 0x7}, {0x2, 0x7}, {0x7, 0xa}, {0x4, 0x2}, {0x0, 0x3}, {0x6, 0x1}, {0x4, 0x3}, {0x0, 0x9}, {0x1}, {0x5, 0x1}, {0x1, 0x2}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x7}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0x1}, {0x2, 0x5}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x3}, {0x3, 0x2}, {0x5, 0x6}, {0x4, 0x5}, {0x1}, {0x6, 0x3}, {0x3, 0x6}, {0x1, 0x9}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x4}, {0x6, 0xa}, {0x6, 0x3}, {0x1, 0x9}, {0x6, 0x6}, {0x4, 0x6}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x2}, {0x5, 0x2}, {0x2, 0x9}, {0x3}, {0x5, 0x4}, {0x7, 0x3}, {0x7, 0x3}, {0x5, 0x5}, {0x4, 0x2}, {0x4, 0xa}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x4}, {0x3, 0x2}, {0x2, 0x2}, {0x7, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x128, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x6, 0x16, 0xb, 0x3, 0x1, 0x7a, 0x48, 0x5, 0x9, 0x5, 0x30, 0x5, 0x1b, 0x12, 0x3, 0xc, 0x36, 0x2, 0x1, 0x48, 0x48, 0x24, 0x12, 0x1, 0x66, 0x30]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x4}, {0x3, 0x7}, {0x4, 0x2}, {0x5, 0x6}, {0x5, 0x3}, {0x7, 0x8}, {0x7, 0x3}, {0x2, 0x2}, {0x3, 0x8}, {0x0, 0x1}, {0x6, 0x3}, {0x4, 0xa}, {0x4, 0x7}, {0x1, 0x8}, {0x2, 0x7}, {0x6, 0xa}, {0x4, 0xa}, {0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x2}, {0x4, 0x5}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x4, 0x7}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x6}, {0x3, 0xa}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x2}, {0x6, 0x2}, {0x3}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x4}, {0x5, 0x2}, {}, {0x0, 0x4}, {0x6, 0x9}, {0x4, 0x9}, {0x4}, {0x1, 0x1}, {0x1}, {0x7, 0x6}, {}, {0x5, 0x8}, {0x3, 0x4}, {0x4, 0x4}, {0x3, 0x4}, {0x5, 0x6}, {0x6}, {0x0, 0x3}, {0x5, 0x7}, {0x2, 0x2}, {0x5, 0x4}, {0x5, 0x6}, {0x2, 0x7}, {0x5, 0x7}, {0x7, 0x4}, {0x3, 0x4}, {0x5, 0x4}, {0x1, 0x4}, {0x2, 0x2}, {0x3, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x0, 0x569f, 0xe053, 0x8, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x7}, {0x1, 0x7}, {}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x8}, {0x2, 0x1}, {}, {0x2, 0x9}, {0x2, 0xa}, {0x3, 0x3}, {0x6, 0x9}, {0x6, 0x3}, {0x4, 0x4}, {0x5, 0x6}, {0x2, 0x1}, {0x4}, {0x4, 0x8}, {0x6, 0x6}, {0x6, 0x4}, {0x0, 0x9}, {0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x3, 0x5}, {0x6, 0x4}, {0x4, 0xa}, {0x5, 0x3}, {0x6}, {0x1, 0x7}, {0x2, 0x4}, {0x6, 0x2}, {0x2}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0x6}, {}, {0x0, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x5, 0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x1, 0x8}, {0x3, 0x5}, {}, {0x3, 0x3}, {0x7, 0x9}, {0x2, 0x1}, {0x3, 0x4}, {0x3, 0x7}, {0x6}, {0x4, 0x6}, {0x1, 0x9}, {0x3, 0xa}, {0x6, 0xa}, {0x2, 0x6}, {0x7, 0xa}, {0x2, 0x6}, {0x5, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x6, 0x2, 0x2, 0x8, 0x0, 0xfff9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x0, 0x5, 0x9, 0x1, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x800, 0x4, 0x9, 0x4, 0x20, 0x81, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x700c, 0xfff9, 0x6, 0xfff7, 0xe, 0x6, 0xf4, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd0, 0x8, 0x8001, 0x18, 0xe, 0x2, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0xff73, 0xfff9, 0x40, 0x8, 0x4, 0x3]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x5, 0xa}, {0x0, 0x8}, {}, {0x5, 0x6}, {0x0, 0x3}, {0x3, 0x9}, {0x7, 0x5}, {0x4, 0x4}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x5}, {0x4, 0x5}, {0x5, 0x6}, {0x3, 0x6}, {0x2}, {0x1, 0x6}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x1}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0x6}, {0x2}, {0x5, 0x3}, {0x1}, {0x7, 0x7}, {0x1, 0xa}, {0x3, 0x4}, {0x1, 0x1e}, {0x1, 0x3}, {0x1, 0x7}, {0x1, 0x4}, {0x3, 0xa}, {0x4, 0x9}, {0x6, 0x3}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x0, 0x401, 0x4, 0x5e73, 0xc, 0xbf1, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x7}, {0x1, 0x8}, {0x1, 0x1b}, {0x1, 0x4}, {0x2, 0x5}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0x8}, {0x2, 0x8}, {0x1, 0xa}, {0x1, 0x6}, {0x2, 0x3}, {0x3, 0x4}, {0x3, 0x5}, {0x1, 0xa}, {0x3, 0x5}, {0x3, 0x2}, {0x1, 0x9}, {0x6, 0x5}, {0x2, 0x5}, {0x7}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x4, 0x1}, {0x0, 0x7}, {0x4, 0x1}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0x7}, {0x0, 0x6}, {0x3, 0x9}, {0x1, 0x2}, {0x4}, {0x1, 0x6}, {0x0, 0x9}, {}, {0x7, 0x7}, {0x7, 0x7}, {0x4, 0x9}, {0x1, 0x5}, {0x2, 0x8}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x4}, {0x6, 0x5}, {0x7, 0x8}, {0x4}, {0x2, 0x8}, {0x1, 0x1}, {0x6, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x1, 0x2}, {0x7}, {0x1}, {0x2, 0x7}, {0x1, 0x4}, {0x3, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0x8}, {0x3, 0x7}, {0x5, 0x5}, {0x2, 0x8}, {0x7, 0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0x1bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x7, 0x1000, 0x4, 0x8, 0x1f, 0x9]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x3}, {0x1, 0x2}, {0x1, 0x11}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0xa}, {0x6}, {0x7, 0x7}, {0x5, 0x2}, {0x0, 0x6}, {0x2, 0x3}, {0x6, 0x9}, {0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x2}, {0x5}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x2}, {0x3, 0xa}, {0x4, 0x7}, {0x6, 0x2}, {0x3, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0x6}, {0x1, 0xa}, {0x6, 0x7}, {0x2, 0x6}, {0x3, 0x2}, {0x1, 0x5}, {0x2, 0x2}, {}, {0x6, 0x7}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x7, 0x8}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x5}, {0x4, 0x4}, {0x4}, {0x2, 0x7}, {0x0, 0xa}, {0x6, 0x3}, {0x4, 0x2}, {0x6}, {0x1, 0x3}, {}, {0x2, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x7, 0x8}, {0x4, 0x3}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x7}, {0x6, 0x2}, {0x0, 0x3}, {0x4, 0x1}, {0x0, 0x3}, {0x2, 0x2}, {0x6, 0x9}, {0x6, 0x9}, {0x6, 0xa}, {0x1, 0x6}, {0x3, 0x5}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0xa}, {}, {0x1, 0x3}, {0x3, 0x2}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6c, 0x88b671592810a67b, 0x5, 0x43, 0x3, 0x5, 0x18, 0xc, 0x6c, 0xc, 0x16, 0xc, 0x32, 0x3, 0x12, 0x0, 0x9, 0x30, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xffff, 0xa, 0x4f, 0x3, 0x3, 0x8, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x2, 0x1}, {}, {0x7, 0x5}, {0x1, 0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x1, 0x1}, {}, {0x1, 0xa}, {0x1, 0x6}, {0x3, 0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x2}, {0x5, 0x6}, {0x7, 0x5}, {0x3, 0x6}, {0x6}, {0x7, 0x7}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0x7}, {0x6, 0x5}, {0x0, 0x3}, {0x7, 0x8}, {0x2}, {0x4, 0x9}, {0x4, 0x2}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x6}, {0x7}, {0x7, 0x3}, {0x2, 0x3}, {0x7, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x2}, {0x5, 0x8}, {0x5, 0x4}, {0x4, 0x9}, {0x6, 0x7}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x5}, {0x3, 0x6}, {0x4, 0x4}, {0x7, 0x3}, {0x6, 0x8}, {0x7, 0x5}, {0x3, 0x1}, {0x5, 0x8}, {0x0, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x5, 0x6}, {0x5, 0x7}, {0x3, 0x7}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x5}, {0x7, 0x3}, {0x1, 0x2}, {0x5, 0x6}, {0x1, 0x4}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfff9, 0x6, 0x2, 0x5, 0xff9f, 0x0, 0x7]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xbf, 0x7, 0x3, 0x0, 0x5, 0xad, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3ff, 0x7, 0x8, 0xdc0, 0x0, 0x800, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0xc, 0x18, 0x2, 0x3549495fdd8d8ab0, 0x36, 0x4, 0x6c, 0x1b, 0x0, 0x36, 0x2b, 0x9, 0x16, 0x2, 0x1b, 0x60, 0x4, 0x1, 0x24, 0x3, 0x16, 0xb, 0x16, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x283c, 0x62, 0x0, 0x8, 0x88d0, 0x7ff, 0xbed]}}]}]}]}, 0xd48}}, 0x40000c1) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x210}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000020}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001540)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001580)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000015c0)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r8, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004846) bind$pptp(r3, &(0x7f00000016c0)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001700)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000001740)={0x0, 0x4}, &(0x7f0000001780)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000017c0)={r12, 0x400}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000001800)) r13 = socket$inet(0x2, 0x5, 0x6) getsockopt$IPT_SO_GET_ENTRIES(r13, 0x0, 0x41, &(0x7f0000001840)={'mangle\x00', 0xbd, "b9e621be073c235228e708af3f63a5cc2b2e2862494ac17f414faa782ce0fa45df788602abc2dc5a4685588a0e1978ebd329f931346d0611eb5acadf0d2b9e4583e1abbd9c28205b49f987730cac3e887845ed01f85e7945ea5970e2cf6f9faf2caf8ca5512106de8ac8a6d84dd33d31d9db64bd06222e1264c44672d970168b919f00d7f61a9e8eddc6e499b688b6793a158c5f8632c045232361e04c26f07373d61ec5dc550067f2d6e0815c3fed32670542733263947bcee8ac92e7"}, &(0x7f0000001940)=0xe1) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r5) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, r14, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r13, 0x89f4, &(0x7f0000001b40)={'sit0\x00', &(0x7f0000001ac0)={@empty, 0x0, 0x0, 0x50, 0x0, [{@private}, {@loopback}, {@loopback}, {@dev}, {@initdev}]}}) 36.930085303s ago: executing program 2 (id=2043): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac09}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1c0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}, @CTA_NAT_SRC={0x80, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xd19}, @CTA_ID={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x10048004}, 0x11) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000000080008"], 0x60}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffff001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x7c, &(0x7f0000000200)=""/124, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x7, 0x2, 0x88}, 0x10, 0x1764, 0xffffffffffffffff, 0x3, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000600)=[{0x2, 0x3, 0x2, 0xa}, {0x0, 0x4, 0xd, 0x5}, {0x3, 0x3, 0x7, 0xc}], 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x154, 0x2, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_ID={0x8}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x8, 0x8001, 0x7, 0x5, 0xd2a]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6d45}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x682a1755}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa07}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_ID={0x8}, @CTA_NAT_SRC={0x94, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20040001}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x54, 0x10, &(0x7f0000000700)="62b98d275bddc9a36121eb0c9794b27ed3e47811b5c7c940e561da38e3939758b26ef85014a92ecd18c0a1cf93df1616a2e4826570987dedeabc5735355b74f36a3c51aaac19661038397b32ec3d723df67b534a", &(0x7f0000000780)=""/16, 0xfe, 0x0, 0x7d, 0x86, &(0x7f00000007c0)="f15b5a062a4456aa3464c5983b6c957d5b52ab022045be49cfadded5371f3747fa09e08bd590481584682b5bba5455b1ab221388d374ee9a152a0c21b0ccc65a20a369ebbb0a0024a7ea89fcd46ad0c09e421e94588170071ea356aa03eb113fbd6ecccdc6999d3f6404a54d5e65e3e7c040eec6745ae43828084dcb49", &(0x7f0000000840)="3017d7836c8628ff3d1b9eecfaf5f64ba633c613d8b83e8ae99a8b5d9f075e68e341f756a53821d4fb80cb8b0818ce7f086a12e2abcbb3e7a6b77d56222d21eaffe0a11ad992e64284e7c3ab0d013b3a1487fb87e715ac1306c3e0f00b6896e8d674b282d5cc7b7ca67326081d14432f078614be092131663712636d00e0422abd47085ce3af", 0x0, 0x0, 0x10001}, 0x50) 36.786588108s ago: executing program 2 (id=2045): r0 = socket$kcm(0x10, 0x2, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000ff0200000000000000000000000000010004000000000000071800000000040000d704"], 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d280c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 36.641750397s ago: executing program 2 (id=2046): syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@fragment={0x33, 0x0, 0x5, 0x0, 0x0, 0x12, 0x66}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) syz_emit_ethernet(0x5a, &(0x7f0000001100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[@fragment={0x2b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x66}, @srh={0x89, 0x0, 0x4, 0x0, 0xfb, 0x68, 0x81}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) (async) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061135e0000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) 21.601498991s ago: executing program 32 (id=2046): syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@fragment={0x33, 0x0, 0x5, 0x0, 0x0, 0x12, 0x66}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) syz_emit_ethernet(0x5a, &(0x7f0000001100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[@fragment={0x2b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x66}, @srh={0x89, 0x0, 0x4, 0x0, 0xfb, 0x68, 0x81}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) (async) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 17.981445435s ago: executing program 1 (id=2324): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x2e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}}) (async) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r1) 17.979665185s ago: executing program 0 (id=2325): syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x1a, 0x0, 0x0, 0x1, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xfff7ff1f, 0x1}}, 0x20) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) (async) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000040)) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000080)='X', 0x1}], 0x1}, 0x0) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r10, &(0x7f0000000080)=ANY=[], 0x6) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r12 = openat$cgroup_devices(r11, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r12, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:4\t\nm'], 0xa) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r9) 17.874465514s ago: executing program 0 (id=2326): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.614950738s ago: executing program 1 (id=2328): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x31, 0xe, 0xffffffff}}) 17.550252111s ago: executing program 1 (id=2329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) r1 = socket(0x15, 0x5, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x4000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) close(0x3) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) 17.54885567s ago: executing program 0 (id=2330): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b405000a68400000791048908d8f2900000000001fa0000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x3e8f2ea607a91727, &(0x7f0000000140)={@mcast2}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x3, 0x101, 0x39, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x7, 0x5, 0x9}}) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=@getqdisc={0x34, 0x26, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1}, {0x2, 0x4}, {0xfff3, 0xfff2}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd2b, 0x801, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x20, 0x10, 0x5, 0x7, {{0xd, 0x4, 0x2, 0x5, 0x34, 0x64, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, {[@ra={0x94, 0x4}, @generic={0x44, 0x11, "7274dc5eddd64f06537885643d8b9e"}, @lsrr={0x83, 0xb, 0xe3, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x7, 0x7, 0x80000000, 0x7, {{0x1b, 0x4, 0x1, 0x8, 0x6c, 0x64, 0x0, 0x10, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @rr={0x7, 0x3, 0x9e}, @timestamp_prespec={0x44, 0x1c, 0x88, 0x3, 0x9, [{@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x81e}, {@multicast2, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0xbf, 0x3, 0x9, [{@empty, 0x7}]}, @end, @timestamp={0x44, 0x7, 0x72, 0x0, 0x4, [0x9e, 0x3, 0x9, 0x2, 0x1, 0x6, 0x7, 0x9]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x3, 0x4, 0x38, @private0, @mcast1, 0x10, 0x1, 0x80000001, 0x2}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x10, 0x8, 0x8, @private2, @local, 0x7800, 0x20, 0xc1, 0x800}}) 17.451298435s ago: executing program 1 (id=2332): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x36, 0x6, 0x0, @private2, @local, 0x7, 0x40, 0x7, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r1, 0x700, 0x7800, 0x4, 0xffffff01, {{0x6, 0x4, 0x2, 0x12, 0x18, 0x67, 0x0, 0x8e, 0x0, 0x0, @broadcast, @loopback, {[@end]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'pimreg\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000200)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000240)=0x1) r5 = accept$inet6(r0, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000002c0)={0x3, 'nr0\x00', {0x6}, 0x2f9}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x4, 0x4, 0x4a, 0x3, 0x5d, @mcast1, @private0, 0x0, 0x40, 0xfffffffb, 0x9}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x8340, @loopback}, @in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x2299, @remote, 0xf}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e22, 0x80000000, @loopback, 0xfff}], 0x90) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000480), &(0x7f00000004c0)=0x4) recvfrom$l2tp(r4, &(0x7f0000000500)=""/250, 0xfa, 0x40, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000700)={r5, &(0x7f0000000600)='@/\x00', 0x240000, &(0x7f0000000640)={@align=0x6, {0x6, 0x3, 0x6, 0x9}}, 0x3, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x44}) ioctl$SIOCX25SSUBSCRIP(r7, 0x89e1, &(0x7f0000000740)={'sit0\x00', 0x2, 0x1}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001d00)={'syztnl1\x00', &(0x7f0000001c80)={'ip6_vti0\x00', r6, 0x2f, 0x4, 0x6, 0x2, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7800, 0x4, 0x4}}) sendmsg$inet6(r8, &(0x7f0000001d80)={&(0x7f0000000840)={0xa, 0x4e24, 0x1ff, @remote, 0x5}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000000880)="fd582c274f59ac290b9a84be256c9c9a5a1e0abb759c0b9cfcf0aa76e8d94e526fc9ab3c09f7e009abac2e8eed852c133cf4d3d0652c7386ed0b46f79e5f1df848ff7ac746948f44fd01c41b6d95f6ecf252e1", 0x53}, {&(0x7f0000000900)="8652011c8007d04f12dcebd54f642c3c8eb40cd5ad3faeda5f22dd3c3755b3c03d8987f467d69bbbed1b00226c85901bfb31130f925b3a73c8019a3b1ee3420deeccfbb771f818883d78962eeababc6c1f79b0847055feb539aabf2e2205940943e25cb1c38c862895071e1ad6cee31450c8c9ef916622679a4e989ad5781650b4266bf6c164dfa89687cce372f9932e770ba6cd6b68e993b1ff6d74651ea5157d9031a5ced55372428eb3e1b2f0b2aa4e247f5b0635d73b02066909", 0xbc}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="8e3b54da549e6679fdd5e4054415a262de1809067aa2a5ab85ad97678a78c7209b6c1c1c94d6118ddd663436000f1abe2960f071359b500aee529e9afc5543ec14289aef04fb243de8afd815", 0x4c}, {&(0x7f0000001a40)="ee03cde7728c728f791b5a5a7758062b1666ef78eefa02950398a2d3a70054072a238a7233ae5d6e04fdd97e4ed57c1a437d10aca0827932142b336ae867384524eb6b6b4325402af3aaac3c31da9cbe96c4ebcfb95613e3d4522f05c66dcbaed9de9d27948e4b6011bd45cdc2a206fa295f9fc7038af0bd96151a7579b0b1668402c487fc4117473a3551d19e24f65d80bcf0cbcd36af53a7048d78e1524c9dbf0c4adbc04cab551e76d68301b7e41eced328e2bb585fc20b8b6553286fd66a943ed9fcc5b2338e7e8caab11bcc38a98bae5fadbf30e46e571576c31cda081114f32b81e6e1533bca033673d9435a7995d0bc0008bdaea1", 0xf8}, {&(0x7f0000001b40)="bd85c46bb15a150a4d7eb1d85901250c7ceb662dfebe121d129de18671ba967e37f6c5a2dbf753ebeb49e628052f64c09be00f30678e9765f42cb2ae9b43a3a323abd9a3bc93bca9b609a8e29e46575686456b00e95876573ad8c2d731e9a613b45d7683442424fe69da2fb8f5dc850d84ebe847237118af562100ce47f56a69413f6afd0c86204a7843c664b908d32acebce2e7a25410", 0x97}], 0x6, &(0x7f0000001d40)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r9}}}], 0x28}, 0x20000000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = accept$packet(r7, 0x0, &(0x7f0000001dc0)) setsockopt$packet_int(r11, 0x107, 0xa, &(0x7f0000001e00)=0x10001, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r10, 0xc0385869, &(0x7f0000001f80)={r0, &(0x7f0000001e80)='}&\\\x00', 0x81c02, &(0x7f0000001ec0)={@align=0x6, {0x81, 0xfff3, 0x3}}, 0x662a, &(0x7f0000001f00)={@_ha_fsid}, &(0x7f0000001f40)=0x4}) syz_genetlink_get_family_id$team(&(0x7f0000001e40), r12) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002000), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002300)={r7, 0xe0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000002080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000002100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002140), &(0x7f0000002180), 0x8, 0xb7, 0x8, 0x8, &(0x7f00000021c0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r12, 0x58, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r12, &(0x7f0000002600)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002400)={0x184, r13, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x94) getsockopt$IP_VS_SO_GET_SERVICES(r12, 0x0, 0x482, &(0x7f0000002640)=""/17, &(0x7f0000002680)=0x11) bind$can_raw(r7, &(0x7f00000026c0), 0x10) 17.123353096s ago: executing program 0 (id=2335): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x0, 0x700, 0x0, 0x5, {{0x6, 0x4, 0x2, 0x38, 0x18, 0x64, 0x0, 0xd8, 0x2f, 0x0, @local, @loopback, {[@noop]}}}}}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, r1}, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000a80)={{r0, &(0x7f0000000180)='\x00', 0x22000, &(0x7f0000000440)={@align=0x3, {0x4, 0x8, 0x180, 0x6c06}}, 0x3, &(0x7f0000000640), &(0x7f0000000780)=0x2}, {[0x5ed245be, 0x1ff, 0x3524, 0x9]}, 0x8, 0xfe, &(0x7f0000000980)=""/254}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@map=0xffffffffffffffff, 0x34, 0x1, 0x94f, &(0x7f0000000b00)=[0x0], 0x1, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0], &(0x7f0000000bc0)=[0x0]}, 0x40) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f00)=ANY=[@ANYRES32=r1, @ANYRES16=r3, @ANYBLOB="0c0000001400000000000000", @ANYRES64=r1, @ANYBLOB="b7032bbf2c9432b95b92c8c4563cf7cd643028683741c9ef4d3eba8260ce519d9747f10dd45f735cd76981fa19fe121c40ebc18ebace177025569c9fb336821adae5c24d023afeb347b2410fc615daf3fa32", @ANYRES64=r2], 0x20) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x7c2) syz_emit_ethernet(0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045980028000000000006907800000000000000004e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100c0090780000"], 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000003c0)=""/120, 0x6f}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000f80)=""/4100, 0x100c}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f0000000880)=""/247, 0xfe}, {&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000080), 0x2}], 0xc, 0x0, 0xfffffffffffffeba}, 0xfff}, {{0x0, 0x0, 0x0}, 0x10000004}], 0x2, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000002c0006801400050000000000000000000000000000000000000000000100"/192], 0xc0}}, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r9, 0x110, 0x6, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000d40)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtclass={0x64, 0x28, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x1, 0x2}, {0xfff2, 0xb}, {0x5, 0x3}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0xff}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x6, 0xe4}}, @TCA_RATE={0x6, 0x5, {0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x893}, 0x20040014) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000007c0)={{0x0, 0x1, 0x0, 0x1, 0x7, 0x100000001, 0xfffffffffffff77f, 0xfffffffd, 0xa, 0x0, 0x34a, 0x1, 0x6, 0x4, 0x2}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000c80)={{r11, 0x7fffffffffffffff, 0xfec8, 0xe0f, 0x9, 0x800, 0x4, 0xc1a4, 0x9, 0x4, 0x6, 0x8, 0x6, 0x9, 0xc}}) socket$inet_udp(0x2, 0x2, 0x0) 16.825245194s ago: executing program 4 (id=2336): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map, 0x3, 0x1, 0xfffffffc, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c62e9d9, 0x0, 0x0, 0x0, 0x2}, [@generic={0x6, 0x7, 0x5, 0xff57, 0x80000001}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000380)='GPL\x00', 0x9, 0xf0, &(0x7f00000003c0)=""/240, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x1, 0x10001, 0xe1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x4, 0x2, 0x6, 0x6}, {0x0, 0x5, 0x5, 0x5}, {0x4, 0x4, 0xb, 0x5}, {0x1, 0x2, 0x3}, {0x4, 0x3, 0x6}], 0x10, 0x5}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c62e9d9, 0x0, 0x0, 0x0, 0x2}, [@generic={0x6, 0x7, 0x5, 0xff57, 0x80000001}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000380)='GPL\x00', 0x9, 0xf0, &(0x7f00000003c0)=""/240, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x1, 0x10001, 0xe1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x4, 0x2, 0x6, 0x6}, {0x0, 0x5, 0x5, 0x5}, {0x4, 0x4, 0xb, 0x5}, {0x1, 0x2, 0x3}, {0x4, 0x3, 0x6}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, r2, 0x26, 0x4, 0x0, @void, @value=r5, @void, @void, r4}, 0x20) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {}, {0x2d}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x38, r6, 0x203, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000012}, 0x24048008) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x38, r6, 0x203, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000012}, 0x24048008) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000012c0)={'erspan0\x00', &(0x7f0000001240)={'syztnl2\x00', 0x0, 0x40, 0x10, 0xfa13, 0x7fff, {{0xb, 0x4, 0x3, 0x36, 0x2c, 0x67, 0x0, 0x9, 0x29, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x17, 0x77, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @loopback]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000012c0)={'erspan0\x00', &(0x7f0000001240)={'syztnl2\x00', 0x0, 0x40, 0x10, 0xfa13, 0x7fff, {{0xb, 0x4, 0x3, 0x36, 0x2c, 0x67, 0x0, 0x9, 0x29, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x17, 0x77, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @loopback]}]}}}}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r13, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0x7, 0xfffffffd, 0x91b4}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x7fffffff}}]}}}]}, 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001340)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001340)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000001380)={@private2, 0x0}, &(0x7f00000013c0)=0x14) sendmsg$TEAM_CMD_NOOP(r9, &(0x7f0000001a40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001400)={0x5fc, 0x0, 0x2, 0x1, 0x25dfdbfd, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa986}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1805}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xca}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x4, 0x0, 0x1}, {0x0, 0x1, 0x2, 0x7fffffff}, {0x100, 0x9, 0x7f, 0x1}, {0x6c9, 0x9, 0x1, 0x3}, {0x9f, 0x6, 0x7, 0x4}]}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3ff0, 0xd8, 0x6, 0x8}, {0x54b, 0x4, 0x0, 0x3d12}, {0xf88, 0x1, 0x3, 0x4}, {0xf698, 0x3, 0xdc, 0xea}, {0x4a1, 0x6, 0x8, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x980f}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc7}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r16}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r17}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xbb}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000) 16.663585706s ago: executing program 3 (id=2338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r2, 0x0, 0x1000, 0xc6, &(0x7f0000000340)="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", &(0x7f0000001340)=""/198, 0x4, 0x0, 0x8d, 0x86, &(0x7f0000001440)="34e5a2d1bc07cb36e508c83c3026cb1d7a85d7602e2058e99195b85649e7200dfeb0ec283e49a462c1321c81c470c859f994a24dda4582c9d6c7cfdcc72b3c67bced1158076c6f88b7743b81d5e29aa1ddbbffdea4fc5bbf86d670d11e7520e13ced55966e78c7de021fb0f291370620acb65bfdd88408fbfc3146a1774ee873f3d41ddb4d0e3d58cadd568f99", &(0x7f0000001500)="311eba10a7476bbec67a1aeedcecaa71e0d3d63225cbc2d02a7f9378f59989d51d511ed95106fc4de8521cba6d58e8997d3cfb556303d38fccfe4628a8326d77d05064ad1b59c3b8f40b2bc5bf69d2dd07db1bcef8c31eed998fb78031e482c6c410bf67e79ad7f03387411a6971658ccb92ce4f1391a0791cc62888b27073332b72d6d8ec1d", 0x0, 0x0, 0x5}, 0x50) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x40, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (rerun: 64) 16.585245577s ago: executing program 0 (id=2339): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000100)) (async) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000150a000200000000000000000000fffd"], 0x14}, 0x1, 0x0, 0x0, 0x40884}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r3, &(0x7f0000000640)=[{{&(0x7f0000000240)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/179, 0xb3}, {&(0x7f0000000380)=""/98, 0x62}, {&(0x7f0000000500)=""/206, 0xce}], 0x3}, 0x7}], 0x1, 0x5, &(0x7f0000000680)) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029680000001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000003c00038038000080340001802d000100fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6000000140000001000010000000000000000000084000a"], 0xec}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029680000001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000003c00038038000080340001802d000100fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6000000140000001000010000000000000000000084000a"], 0xec}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f00000006c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a80), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x6c, r8, 0x400, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8b}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc30}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x7, 0x10001]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x194, r6, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x61}}}}, [@NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x90000, 0x0, 0x1, 0xfffffffe, 0x8001]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3d7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x7, 0x1ff, 0xce]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xc7, 0x1, 0x0]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffffa}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x43}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x6, 0x7, 0xcf6f, 0x7, 0x7]}]}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe25e}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x3ff]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x5, 0x5, 0x6, 0x100, 0xc313, 0x2, 0x7]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xb6]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x1, 0xdf24, 0x7, 0x800, 0xe7c, 0x2, 0x6]}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6e6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x695}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x3, 0x5, 0xfffffffa, 0x1, 0x200, 0x8, 0x0, 0x5a, 0x7]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000) socket$inet_sctp(0x2, 0x5, 0x84) 16.58453408s ago: executing program 4 (id=2340): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="ad43000000000000600004"], 0x14}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000004000c"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xfc, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x51ce}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xb, 0x8, 0xfff, 0xfffffffa, 0x6}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4020888}, 0x854) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.500119462s ago: executing program 3 (id=2341): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000005000000fd0900008400000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f0ffffffffffffff00000000000000000000000000000000000000264a07f128ab8bc8360fd0e38503adbf69ad7ddf1f6e7750cd63465a9a536ec3bc7c1a030062f4eb85ce3c6305f75b78acc3126126b6a152d9ace631c039cb8e0de46f7f001732b1476b0cdab7d81e2ad106b7de939a88429b00b174f1191b6ac6322e89dd"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) r3 = socket$inet6(0xa, 0x3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x17, 0x2, {{0x4, 0x1, 0xff, 0x3, 0x80000001, 0xee9}}}}]}, 0x4c}}, 0x20040084) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map=r2, 0x13, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0]}, 0x40) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x4040010) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000018140100070000000000000008000100010000000800030085"], 0x20}}, 0x200c4050) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffd, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) bind$pptp(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) 16.467583649s ago: executing program 1 (id=2342): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000600)=@get={0x1, 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000002000100000e400058"}}}]}, 0x48}}, 0x20008080) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x3, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 16.370016766s ago: executing program 4 (id=2343): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = epoll_create1(0x0) sendfile(r2, r0, &(0x7f0000000140)=0x6, 0x276f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.314755002s ago: executing program 0 (id=2344): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb4b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004080) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x800442d2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x4620, @dev={0xac, 0x14, 0x14, 0x42}}, 0x39) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x505, 0x4) sendto$inet(r3, &(0x7f00000000c0)="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", 0x4de, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00800800010030cd882d3d2f9ac2ab7a656871bd00"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c5242a8a25210bf5ba33aa28cd01e3b953e73cc24cdb75acd1d7cbc32a8f74561d7058863885573cf33ef5ca3061dd829f769133e9437552163a0e73598a508c3b8bb86ad2b5e879044bf23397c8c9b260308d51a1755023b664fb81457eba6bf3b4b8ddbee13e326f02aea8309d986720c7c02536c1bbeb8be48dbfde397384fb81d6a3bbb227d69d375df4de8a1f7333558f2cc84b11d514544e3f", @ANYBLOB="908718de5c243871e7e4c2141f8d02315522fe1567c6d3c1fcd90304d6118239105c18ea0406d2a9f3f1", @ANYRESOCT=r5], 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x800) recvmsg$kcm(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x100) 16.282248183s ago: executing program 4 (id=2345): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32, @ANYBLOB="80007f0a0a0002000180c2"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r4 = accept4(r0, 0x0, 0x0, 0x80000) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) readv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/241, 0xf1}], 0x2) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x7fffffff}, &(0x7f0000000340)=0x8) r7 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x80800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000180)={0x3, 'macvlan0\x00', {0x3}, 0xf0}) sendfile(r6, 0xffffffffffffffff, &(0x7f0000002400)=0x3, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x14, @inherit={0x48, &(0x7f0000019400)=ANY=[]}, @devid}) socket(0x0, 0x5, 0x7ff) getsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000040)=""/16, &(0x7f00000001c0)=0x10) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0) 16.212148099s ago: executing program 3 (id=2346): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000007c0)={0x15, 0x101, 0x7, 0x5, 0x3, 0x81}) socketpair(0x2, 0x809, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x79}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x1a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x52, &(0x7f0000000380)=0x1000, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0xa, "37b14ec88ab4c248"}]}}}}}}}}, 0x0) 16.096090133s ago: executing program 1 (id=2347): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) close(0x3) socket$inet6(0xa, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012bbd70000e4ad294dcfbdbdf250700000005001400810000000500040006000000050012000300000006001b004e22000008001800e0000002050006000400000005000d000100000014001f0000000000000000000000ffffe00000020700000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x40044) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x9) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r9, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) (async) r10 = socket(0x10, 0x803, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@delchain={0x890, 0x65, 0x0, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1, 0xb}, {0x2, 0xfff3}, {0x4, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x848, 0x2, [@TCA_FLOW_POLICE={0x82c, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x33}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0x4d5, 0x1000000, 0xffffd566, 0x2, 0x800, 0x401, 0x1800000, 0x7, 0x5, 0x4, 0x400, 0x8, 0x1, 0xd64, 0x7f, 0x3, 0x9, 0x1, 0x80, 0x3, 0x100, 0x8001, 0x3, 0x933, 0xffffffff, 0x10, 0xa, 0x80000001, 0x3, 0x4, 0x5, 0x5007, 0x1, 0x6, 0x6, 0x3, 0x4, 0x0, 0x6, 0xff, 0x200, 0x6, 0x0, 0xffffffff, 0x7, 0xb, 0x2, 0x7, 0x5, 0x7475, 0x1, 0x8, 0x400, 0xf884, 0x1, 0x5, 0x89, 0xcb, 0xfffffffb, 0x400, 0x7, 0x8, 0x7fff, 0x9, 0xf9, 0x0, 0x6, 0x2, 0x1, 0xffff0001, 0x0, 0x2, 0x1, 0x5, 0x9, 0x7f, 0x8, 0x401, 0x7, 0xf, 0x19, 0xffff, 0xffffffff, 0x1, 0x5, 0x2, 0x7ff, 0x7, 0x6, 0x5, 0x9, 0x7, 0x0, 0xffff8000, 0xfffffff7, 0xfffffeff, 0x843, 0x7, 0x11, 0x10000, 0x7, 0x0, 0x8, 0x80, 0x7, 0x81, 0x7, 0x88e, 0x1000, 0x86e, 0x80000000, 0x1, 0xd, 0x5, 0x8, 0xebec, 0x6, 0x10001, 0x100, 0x5, 0x7, 0x4, 0xffffffff, 0xf, 0x6, 0x0, 0x1, 0x3, 0x871e, 0x0, 0x9, 0x5, 0x5, 0x0, 0x1, 0x1, 0xfffffffd, 0x5, 0x5, 0x6, 0x2, 0x2, 0xfffffff9, 0x10, 0x8, 0xf, 0x8, 0x6, 0xd, 0x9, 0x1, 0x401, 0x7e000000, 0x9, 0x5, 0xe, 0xc4f, 0x9, 0x5, 0x100, 0x7ff, 0xa, 0x80, 0x2, 0xd, 0x1, 0xf, 0xffffffff, 0xb3, 0xb4a, 0x8, 0x2, 0x9, 0x6, 0xd0, 0x7c, 0xdd8d, 0x10000, 0xded, 0x4, 0x80000001, 0x9, 0x4, 0x9, 0x6, 0x7f, 0x7fff, 0x8, 0xa, 0x10000, 0x3, 0xc8, 0x8000, 0x1, 0x3, 0xf7, 0xe, 0x5, 0x2, 0xfff, 0x9, 0x24f, 0x9, 0xb, 0xbae9, 0x7, 0xa00, 0x9, 0x1, 0x40b, 0x3, 0x80, 0x2, 0x6, 0x2, 0x400, 0x1, 0xc6d3, 0xfffffffa, 0x5, 0x0, 0x2ff, 0x8, 0x7, 0x500000, 0x6, 0x1, 0x5, 0x6, 0x4f, 0x9, 0x6, 0x400, 0x6, 0x4, 0x9, 0x10001, 0x9, 0x401, 0x6, 0x800, 0x1, 0x4, 0x4085d151, 0xfffff183, 0x785, 0x40, 0x98000000, 0x10000, 0x0, 0x2, 0x8000, 0x6, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9, 0xffffffff, 0x1, 0x5, 0x10, 0x2, 0x0, 0x3, 0x10000, 0x0, 0x10000, 0x2, 0x28, 0xfffff800, 0x22, 0xf8, 0x4, 0x9, 0x9, 0x2, 0xa4, 0xfffff168, 0x6, 0x9, 0x8, 0x7, 0x3, 0x1, 0x9, 0xe, 0x0, 0x4, 0x2, 0x800, 0x3ff, 0x9, 0x4, 0xfffffff8, 0x4, 0x630593f, 0x7fffffff, 0x100, 0xe395, 0x4013, 0x1, 0x3, 0x7fffffff, 0x9, 0x3, 0x2, 0x404, 0xffffffff, 0x1000, 0x1, 0x6, 0x8e, 0xa, 0x2bd5, 0x8, 0x200, 0x40, 0x7, 0xfffffff6, 0x5, 0x1, 0x103, 0x19, 0x4, 0x3, 0x5, 0x1, 0x0, 0xbe, 0xa, 0x7fff, 0x9f5, 0x2, 0x7, 0x81, 0x7, 0xc, 0x7, 0x1, 0x2d5, 0xffffffff, 0xfffffff3, 0x1, 0xd, 0x789ced61, 0x4, 0x2, 0x6, 0x9, 0x4ccf, 0xcf, 0x8, 0x4, 0x12, 0x8, 0x0, 0x6, 0x7f, 0x800, 0x6fb5, 0x2, 0x7, 0x6, 0x6, 0x80000001, 0x7, 0x8, 0x7fffffff, 0x3, 0x5, 0x0, 0x7, 0x1, 0x0, 0x3, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x1ff, 0x8, 0x101, 0xbe, 0x0, 0x5, 0xffff, 0x1, 0x2, 0x98000000, 0x0, 0x2, 0x4, 0x8, 0x0, 0x5, 0x7, 0x10001, 0xb, 0x9, 0x5, 0x8000, 0x48, 0x7, 0x174f, 0x8c, 0x4, 0x9, 0x3, 0x792, 0x9, 0xffff0f33, 0x3f5b, 0xb, 0x3000, 0xb5cd, 0x4, 0x3, 0x1, 0x0, 0xa, 0x0, 0x7, 0xb, 0x195, 0x5, 0x5, 0x10000, 0x3fc, 0x7, 0x5, 0x1, 0x7, 0x401, 0x8, 0x5, 0xa, 0x5, 0xd, 0x6, 0xfffffffd, 0xffff, 0xe4f, 0xffff, 0xf0, 0xffff8001, 0x3, 0x463d4c05, 0x9, 0x5, 0x413eaa4e, 0x0, 0x7f, 0x1, 0x85, 0x3, 0x7ff, 0x6, 0x9, 0xe, 0x1, 0x8000000, 0x9e, 0x40, 0x8, 0x215, 0x5, 0x8, 0x98cd028d, 0x9, 0xb5e, 0x5, 0x401, 0x80000001, 0x8001, 0x7, 0x7e1, 0x1, 0x80000000, 0xfffffff7, 0x1, 0x5, 0x10, 0x8, 0x401, 0x7ff, 0xe, 0x5, 0x1, 0x1e31, 0x8000, 0x81, 0x4, 0x57, 0x7, 0x101, 0x6d0, 0x7, 0x4, 0x8001, 0x80000001, 0x5, 0x3, 0xc, 0x9, 0x7, 0x400, 0x4, 0x6, 0x8, 0x10000]}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xe4d}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x872b}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}]}, 0x890}}, 0x0) 16.065148914s ago: executing program 3 (id=2348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}}, 0x44) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000000840)={&(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x45}, 0x0) close(0x3) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ce0000000001050500000000000000000a0000003c0002802c00018014000380ff01000000000000000000000000000114006016fe709d0400ff0200000000000000000000000000010c40028005000101000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400c4f20000000000000000f7ffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x48000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) 15.729869957s ago: executing program 4 (id=2349): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xe, &(0x7f0000000040)=@framed={{}, [@exit, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 15.728922888s ago: executing program 4 (id=2350): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r1) (async, rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000200), 0x0, 0x1, &(0x7f0000000280)={r4, r5+10000000}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) sendmsg$NL802154_CMD_SET_PAN_ID(r6, 0x0, 0x24040000) (async) r7 = socket(0x5, 0x6, 0x336) (async) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x4) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000001840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001800)={&(0x7f0000000e40)={0x988, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_ID={0x3e, 0x3, "0ca09b304a32767fe439bacef48c1855ab634728c5f64ab2001eeb17924791aa01d896c2b9cf4f234f88116ef6b80c8a8e35c959a129bdc11fe1"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc1, 0x3, "97763c376deaaf3dff3ac76867ab7c4507f165e06db12e2408bdf2b7d952a4ac5bf5613c6b52b71d045ccee388021ee74638fcbbd02c427b311ac61931c2194e3f15ec0ee6fddf4d33ec1cdc61e6c8da7d515f512b5cdc0c225d54497cc265c325290a127ec628855fbd849ce4f2cb494be8c6c86aee2d249c583e7d3310d6aa1db679ccb0c2063904730dfd1461d5ad5a2586a6d3c4ec12cb38f54eaf34d99541e132ffb955087e434ea6fcb540f824d7d7ede0a08fae99214c5e890e"}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x6f, 0x3, "3bb174dea007d5a666e3148cd13a88b1ecdf0f038acbf2ef4f9d2a4ad082125989d9b58713146110fa8111442d95ec2b87b06c1ccd1351489898d589be6758f26a4bd8b798782160868746018856fc88ef4b519b7476b1932be923c0ef002dd7d0a8466b4ac2f521e344b0"}, @TIPC_NLA_NODE_ID={0x80, 0x3, "8b610cd2946ddbf0f577ceda73604a1269060a5b6bef43b3a1a648605819407d8418d0c8228e2d520364e47142f0ee25ec5fd0a5351fc16a33404245c1f1349b4c17b64cecec3b590f2e4704d3c03b196c552bffd21c9759ae8462d4f634f1f715d9bf5da947ca0b25d54a70c28f0aa3431fda4b6231474873f2b986"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_LINK={0x12c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c91}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NODE={0x268, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0x90, 0x3, "4554c2b0668b1c83c60d11ba82e5cf303e85b1401294af111dcb7f45a2ff459fb1a7b809fa189e38a82b32d30d271496a60a64869a32b6650c0826437296ae29f49ec199a442e71146e1abfc90ad9f6e3903009f031b6fc120d64a88ca5876e5887b7cd3b4d5ba3f879ec03fb770ed81072c6487e153a4a0c228929377887221d1fa586aaf74a8a79b9babd4"}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "c0ff0a5cad6d4a6d7f574716955c7619eb78a83cfefe1db322879d59367faef7a32c43211c14f1997b54560edc8bc52e949956aa0fb32793566a32678a5ae93fdc6048a639a20463a5e767dabb6bb95b5a3da3dbdcc1b21c5a4147053eeeed97db37578779c4945927c058a786ba9a35dfe1da16b94001920b3e02fc61454bc3f2151d8dbfd3c867e5bcf086e3ed03cbebd4537598492bb4ab6fb6d8997e2b03909d9d7bf88d34def45d1c9fa60052ac1836b50c8ad74111fa2511a00a5db68543e281e7c6ae60102ef57fa935d8328dda3c3ee5f2366ea43d306013df1ecc75df3b"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "3e75589a3b47fc8b1871153c04769084fe82a2c481395753dece0002"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0x96, 0x3, "7ced98ae2678c84aebbc6fe9b69677a6a0a259300a390b48502c04b0d1409456b0015b7dd890d35ecc604d68d6b71cb2c03a07d3e60933bb33ad118539f43a9e9e80c1c6043bed94a06ae321fd0dabe54c2e38f1bf325fe2ba329b17aa82fcf6275ddc5787871cad96001affcd9e0f09160c3e2c165d2db85f091acd38b24bcf646e0d315266e4b0eceedd6bc62de85c506a"}]}, @TIPC_NLA_MEDIA={0x13c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe4f56440}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x606f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x213}]}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @empty, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8000, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @loopback, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xc0000000, @mcast1, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @remote, 0x1}}}}]}]}, 0x988}}, 0x801) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x0, 0x12, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200, 0xfc0c0000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0xcfc}, 0x28) 15.142772334s ago: executing program 3 (id=2351): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}}, 0x0) (async) 15.117649431s ago: executing program 3 (id=2352): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) getpeername(r4, 0x0, &(0x7f0000000540)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.086366586s ago: executing program 33 (id=2344): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb4b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004080) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x800442d2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x4620, @dev={0xac, 0x14, 0x14, 0x42}}, 0x39) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x505, 0x4) sendto$inet(r3, &(0x7f00000000c0)="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", 0x4de, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00800800010030cd882d3d2f9ac2ab7a656871bd00"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c5242a8a25210bf5ba33aa28cd01e3b953e73cc24cdb75acd1d7cbc32a8f74561d7058863885573cf33ef5ca3061dd829f769133e9437552163a0e73598a508c3b8bb86ad2b5e879044bf23397c8c9b260308d51a1755023b664fb81457eba6bf3b4b8ddbee13e326f02aea8309d986720c7c02536c1bbeb8be48dbfde397384fb81d6a3bbb227d69d375df4de8a1f7333558f2cc84b11d514544e3f", @ANYBLOB="908718de5c243871e7e4c2141f8d02315522fe1567c6d3c1fcd90304d6118239105c18ea0406d2a9f3f1", @ANYRESOCT=r5], 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x800) recvmsg$kcm(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x100) 71.29235ms ago: executing program 34 (id=2347): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) close(0x3) socket$inet6(0xa, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012bbd70000e4ad294dcfbdbdf250700000005001400810000000500040006000000050012000300000006001b004e22000008001800e0000002050006000400000005000d000100000014001f0000000000000000000000ffffe00000020700000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x40044) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x9) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r9, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) (async) r10 = socket(0x10, 0x803, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@delchain={0x890, 0x65, 0x0, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1, 0xb}, {0x2, 0xfff3}, {0x4, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x848, 0x2, [@TCA_FLOW_POLICE={0x82c, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x33}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0x4d5, 0x1000000, 0xffffd566, 0x2, 0x800, 0x401, 0x1800000, 0x7, 0x5, 0x4, 0x400, 0x8, 0x1, 0xd64, 0x7f, 0x3, 0x9, 0x1, 0x80, 0x3, 0x100, 0x8001, 0x3, 0x933, 0xffffffff, 0x10, 0xa, 0x80000001, 0x3, 0x4, 0x5, 0x5007, 0x1, 0x6, 0x6, 0x3, 0x4, 0x0, 0x6, 0xff, 0x200, 0x6, 0x0, 0xffffffff, 0x7, 0xb, 0x2, 0x7, 0x5, 0x7475, 0x1, 0x8, 0x400, 0xf884, 0x1, 0x5, 0x89, 0xcb, 0xfffffffb, 0x400, 0x7, 0x8, 0x7fff, 0x9, 0xf9, 0x0, 0x6, 0x2, 0x1, 0xffff0001, 0x0, 0x2, 0x1, 0x5, 0x9, 0x7f, 0x8, 0x401, 0x7, 0xf, 0x19, 0xffff, 0xffffffff, 0x1, 0x5, 0x2, 0x7ff, 0x7, 0x6, 0x5, 0x9, 0x7, 0x0, 0xffff8000, 0xfffffff7, 0xfffffeff, 0x843, 0x7, 0x11, 0x10000, 0x7, 0x0, 0x8, 0x80, 0x7, 0x81, 0x7, 0x88e, 0x1000, 0x86e, 0x80000000, 0x1, 0xd, 0x5, 0x8, 0xebec, 0x6, 0x10001, 0x100, 0x5, 0x7, 0x4, 0xffffffff, 0xf, 0x6, 0x0, 0x1, 0x3, 0x871e, 0x0, 0x9, 0x5, 0x5, 0x0, 0x1, 0x1, 0xfffffffd, 0x5, 0x5, 0x6, 0x2, 0x2, 0xfffffff9, 0x10, 0x8, 0xf, 0x8, 0x6, 0xd, 0x9, 0x1, 0x401, 0x7e000000, 0x9, 0x5, 0xe, 0xc4f, 0x9, 0x5, 0x100, 0x7ff, 0xa, 0x80, 0x2, 0xd, 0x1, 0xf, 0xffffffff, 0xb3, 0xb4a, 0x8, 0x2, 0x9, 0x6, 0xd0, 0x7c, 0xdd8d, 0x10000, 0xded, 0x4, 0x80000001, 0x9, 0x4, 0x9, 0x6, 0x7f, 0x7fff, 0x8, 0xa, 0x10000, 0x3, 0xc8, 0x8000, 0x1, 0x3, 0xf7, 0xe, 0x5, 0x2, 0xfff, 0x9, 0x24f, 0x9, 0xb, 0xbae9, 0x7, 0xa00, 0x9, 0x1, 0x40b, 0x3, 0x80, 0x2, 0x6, 0x2, 0x400, 0x1, 0xc6d3, 0xfffffffa, 0x5, 0x0, 0x2ff, 0x8, 0x7, 0x500000, 0x6, 0x1, 0x5, 0x6, 0x4f, 0x9, 0x6, 0x400, 0x6, 0x4, 0x9, 0x10001, 0x9, 0x401, 0x6, 0x800, 0x1, 0x4, 0x4085d151, 0xfffff183, 0x785, 0x40, 0x98000000, 0x10000, 0x0, 0x2, 0x8000, 0x6, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9, 0xffffffff, 0x1, 0x5, 0x10, 0x2, 0x0, 0x3, 0x10000, 0x0, 0x10000, 0x2, 0x28, 0xfffff800, 0x22, 0xf8, 0x4, 0x9, 0x9, 0x2, 0xa4, 0xfffff168, 0x6, 0x9, 0x8, 0x7, 0x3, 0x1, 0x9, 0xe, 0x0, 0x4, 0x2, 0x800, 0x3ff, 0x9, 0x4, 0xfffffff8, 0x4, 0x630593f, 0x7fffffff, 0x100, 0xe395, 0x4013, 0x1, 0x3, 0x7fffffff, 0x9, 0x3, 0x2, 0x404, 0xffffffff, 0x1000, 0x1, 0x6, 0x8e, 0xa, 0x2bd5, 0x8, 0x200, 0x40, 0x7, 0xfffffff6, 0x5, 0x1, 0x103, 0x19, 0x4, 0x3, 0x5, 0x1, 0x0, 0xbe, 0xa, 0x7fff, 0x9f5, 0x2, 0x7, 0x81, 0x7, 0xc, 0x7, 0x1, 0x2d5, 0xffffffff, 0xfffffff3, 0x1, 0xd, 0x789ced61, 0x4, 0x2, 0x6, 0x9, 0x4ccf, 0xcf, 0x8, 0x4, 0x12, 0x8, 0x0, 0x6, 0x7f, 0x800, 0x6fb5, 0x2, 0x7, 0x6, 0x6, 0x80000001, 0x7, 0x8, 0x7fffffff, 0x3, 0x5, 0x0, 0x7, 0x1, 0x0, 0x3, 0x6, 0x9, 0x3, 0x0, 0x1ff, 0x1ff, 0x8, 0x101, 0xbe, 0x0, 0x5, 0xffff, 0x1, 0x2, 0x98000000, 0x0, 0x2, 0x4, 0x8, 0x0, 0x5, 0x7, 0x10001, 0xb, 0x9, 0x5, 0x8000, 0x48, 0x7, 0x174f, 0x8c, 0x4, 0x9, 0x3, 0x792, 0x9, 0xffff0f33, 0x3f5b, 0xb, 0x3000, 0xb5cd, 0x4, 0x3, 0x1, 0x0, 0xa, 0x0, 0x7, 0xb, 0x195, 0x5, 0x5, 0x10000, 0x3fc, 0x7, 0x5, 0x1, 0x7, 0x401, 0x8, 0x5, 0xa, 0x5, 0xd, 0x6, 0xfffffffd, 0xffff, 0xe4f, 0xffff, 0xf0, 0xffff8001, 0x3, 0x463d4c05, 0x9, 0x5, 0x413eaa4e, 0x0, 0x7f, 0x1, 0x85, 0x3, 0x7ff, 0x6, 0x9, 0xe, 0x1, 0x8000000, 0x9e, 0x40, 0x8, 0x215, 0x5, 0x8, 0x98cd028d, 0x9, 0xb5e, 0x5, 0x401, 0x80000001, 0x8001, 0x7, 0x7e1, 0x1, 0x80000000, 0xfffffff7, 0x1, 0x5, 0x10, 0x8, 0x401, 0x7ff, 0xe, 0x5, 0x1, 0x1e31, 0x8000, 0x81, 0x4, 0x57, 0x7, 0x101, 0x6d0, 0x7, 0x4, 0x8001, 0x80000001, 0x5, 0x3, 0xc, 0x9, 0x7, 0x400, 0x4, 0x6, 0x8, 0x10000]}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xe4d}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x872b}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}]}, 0x890}}, 0x0) 38.518384ms ago: executing program 35 (id=2352): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) getpeername(r4, 0x0, &(0x7f0000000540)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 36 (id=2350): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r1) (async, rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000200), 0x0, 0x1, &(0x7f0000000280)={r4, r5+10000000}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) sendmsg$NL802154_CMD_SET_PAN_ID(r6, 0x0, 0x24040000) (async) r7 = socket(0x5, 0x6, 0x336) (async) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x4) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000001840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001800)={&(0x7f0000000e40)={0x988, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_ID={0x3e, 0x3, "0ca09b304a32767fe439bacef48c1855ab634728c5f64ab2001eeb17924791aa01d896c2b9cf4f234f88116ef6b80c8a8e35c959a129bdc11fe1"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc1, 0x3, "97763c376deaaf3dff3ac76867ab7c4507f165e06db12e2408bdf2b7d952a4ac5bf5613c6b52b71d045ccee388021ee74638fcbbd02c427b311ac61931c2194e3f15ec0ee6fddf4d33ec1cdc61e6c8da7d515f512b5cdc0c225d54497cc265c325290a127ec628855fbd849ce4f2cb494be8c6c86aee2d249c583e7d3310d6aa1db679ccb0c2063904730dfd1461d5ad5a2586a6d3c4ec12cb38f54eaf34d99541e132ffb955087e434ea6fcb540f824d7d7ede0a08fae99214c5e890e"}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x55}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x6f, 0x3, "3bb174dea007d5a666e3148cd13a88b1ecdf0f038acbf2ef4f9d2a4ad082125989d9b58713146110fa8111442d95ec2b87b06c1ccd1351489898d589be6758f26a4bd8b798782160868746018856fc88ef4b519b7476b1932be923c0ef002dd7d0a8466b4ac2f521e344b0"}, @TIPC_NLA_NODE_ID={0x80, 0x3, "8b610cd2946ddbf0f577ceda73604a1269060a5b6bef43b3a1a648605819407d8418d0c8228e2d520364e47142f0ee25ec5fd0a5351fc16a33404245c1f1349b4c17b64cecec3b590f2e4704d3c03b196c552bffd21c9759ae8462d4f634f1f715d9bf5da947ca0b25d54a70c28f0aa3431fda4b6231474873f2b986"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_LINK={0x12c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c91}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NODE={0x268, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0x90, 0x3, "4554c2b0668b1c83c60d11ba82e5cf303e85b1401294af111dcb7f45a2ff459fb1a7b809fa189e38a82b32d30d271496a60a64869a32b6650c0826437296ae29f49ec199a442e71146e1abfc90ad9f6e3903009f031b6fc120d64a88ca5876e5887b7cd3b4d5ba3f879ec03fb770ed81072c6487e153a4a0c228929377887221d1fa586aaf74a8a79b9babd4"}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "c0ff0a5cad6d4a6d7f574716955c7619eb78a83cfefe1db322879d59367faef7a32c43211c14f1997b54560edc8bc52e949956aa0fb32793566a32678a5ae93fdc6048a639a20463a5e767dabb6bb95b5a3da3dbdcc1b21c5a4147053eeeed97db37578779c4945927c058a786ba9a35dfe1da16b94001920b3e02fc61454bc3f2151d8dbfd3c867e5bcf086e3ed03cbebd4537598492bb4ab6fb6d8997e2b03909d9d7bf88d34def45d1c9fa60052ac1836b50c8ad74111fa2511a00a5db68543e281e7c6ae60102ef57fa935d8328dda3c3ee5f2366ea43d306013df1ecc75df3b"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "3e75589a3b47fc8b1871153c04769084fe82a2c481395753dece0002"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0x96, 0x3, "7ced98ae2678c84aebbc6fe9b69677a6a0a259300a390b48502c04b0d1409456b0015b7dd890d35ecc604d68d6b71cb2c03a07d3e60933bb33ad118539f43a9e9e80c1c6043bed94a06ae321fd0dabe54c2e38f1bf325fe2ba329b17aa82fcf6275ddc5787871cad96001affcd9e0f09160c3e2c165d2db85f091acd38b24bcf646e0d315266e4b0eceedd6bc62de85c506a"}]}, @TIPC_NLA_MEDIA={0x13c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe4f56440}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x606f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x213}]}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @empty, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8000, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @loopback, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xc0000000, @mcast1, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @remote, 0x1}}}}]}]}, 0x988}}, 0x801) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc2a00e9bfde908990817b364e51afe9c8dab05b16a6437211f9f0570759f1cae63487ff68fffffffffffe8e3932e2b75a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba7541189070000f50c000000d8e5b1dc91c5499be2097784a94b6cc2d272ac751d8bce5db4862c1b2eab7007ceea158dbc329bab5f8450147b2b9629fdd6cdb5507d3a76dbaf6f93d161caa513f8aa41f795507856ea0015166c56ea0103220ed5a66834be086ef206a8606b04fc8462cbbe8233f381b4eefbdbdac708c1f4959cb6c008397006da8e243ec9fb19f3fab2b0f46d73a9f2d7c674cdbe4d7f76f5fbd05043e81f435fccf5063a93aa9b4c7f68670594"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x0, 0x12, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200, 0xfc0c0000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0xcfc}, 0x28) kernel console output (not intermixed with test programs): nterface gretap0 may have been left with an inconsistent configuration, please check. [ 148.364492][ T8318] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 148.390434][ T8318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.467036][ T8320] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 148.483620][ T8326] xt_hashlimit: size too large, truncated to 1048576 [ 148.560308][ T8322] netlink: 'syz.1.651': attribute type 1 has an invalid length. [ 148.871531][ T8321] bond1: (slave gretap1): making interface the new active one [ 148.910529][ T8321] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 148.929022][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.955871][ T8339] bridge_slave_0 (unregistering): left allmulticast mode [ 148.975064][ T8339] bridge_slave_0 (unregistering): left promiscuous mode [ 148.987057][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.357278][ T8373] ipvlan2: entered promiscuous mode [ 149.411994][ T8375] x_tables: duplicate underflow at hook 2 [ 149.596980][ T8397] netlink: 'syz.4.667': attribute type 13 has an invalid length. [ 149.629856][ T8397] macsec0: entered allmulticast mode [ 149.865052][ T8415] __nla_validate_parse: 6 callbacks suppressed [ 149.865069][ T8415] netlink: 204 bytes leftover after parsing attributes in process `syz.0.670'. [ 150.231298][ T8434] pim6reg: entered allmulticast mode [ 150.362010][ T8442] netlink: 100 bytes leftover after parsing attributes in process `syz.2.678'. [ 150.676758][ T8461] netlink: 168 bytes leftover after parsing attributes in process `syz.3.682'. [ 150.731607][ T8463] tipc: Invalid UDP bearer configuration [ 150.731657][ T8463] tipc: Enabling of bearer rejected, failed to enable media [ 150.847600][ T8465] netlink: 'syz.2.684': attribute type 12 has an invalid length. [ 150.877306][ T8465] netlink: 'syz.2.684': attribute type 29 has an invalid length. [ 150.885588][ T8465] netlink: 148 bytes leftover after parsing attributes in process `syz.2.684'. [ 150.895478][ T8465] netlink: 59 bytes leftover after parsing attributes in process `syz.2.684'. [ 151.049290][ T8469] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 151.049290][ T8469] Please contact the netfilter-devel mailing list or update your nftables rules. [ 151.245232][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.690'. [ 151.286089][ T8489] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 151.638925][ T8509] bond3: entered promiscuous mode [ 151.663792][ T8509] bond3: entered allmulticast mode [ 151.670281][ T8509] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.685898][ T8519] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 151.745902][ T8519] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 151.816631][ T8522] bond4: option min_links: invalid value (18446744073709551614) [ 151.828933][ T8522] bond4: option min_links: allowed values 0 - 2147483647 [ 151.840456][ T8522] bond4 (unregistering): Released all slaves [ 152.142350][ T6643] IPVS: starting estimator thread 0... [ 152.233012][ T8551] IPVS: using max 28 ests per chain, 67200 per kthread [ 154.861300][ T8531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.109314][ T8581] netlink: 72 bytes leftover after parsing attributes in process `syz.0.719'. [ 155.181233][ T8583] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 155.196275][ T8583] bond4 (unregistering): Released all slaves [ 155.347599][ T8599] tipc: MTU too low for tipc bearer [ 155.357940][ T8598] tipc: MTU too low for tipc bearer [ 155.519750][ T8605] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 155.531143][ T8605] bond2 (unregistering): Released all slaves [ 155.552017][ T8610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.728'. [ 155.780000][ T8619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.731'. [ 156.075707][ T8643] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 156.120600][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 156.147881][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'. [ 156.450420][ T8663] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 156.451239][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 156.634011][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.747'. [ 156.664330][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.747'. [ 156.761002][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 156.843349][ T8678] syzkaller0: entered promiscuous mode [ 156.853001][ T8678] syzkaller0: entered allmulticast mode [ 156.885588][ T8678] netlink: 'syz.2.750': attribute type 4 has an invalid length. [ 156.903001][ T8678] netlink: 17 bytes leftover after parsing attributes in process `syz.2.750'. [ 156.959689][ T8682] Cannot find add_set index 4 as target [ 157.239677][ T8694] tipc: Started in network mode [ 157.259482][ T8694] tipc: Node identity ac14140f, cluster identity 4711 [ 157.273665][ T8694] tipc: New replicast peer: 255.255.255.255 [ 157.301029][ T8694] tipc: Enabled bearer , priority 10 [ 157.537903][ T8706] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 157.573541][ T8706] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 157.581590][ T8706] gretap1: entered promiscuous mode [ 157.593748][ T8706] gretap1: entered allmulticast mode [ 157.889187][ T8730] syzkaller0: entered promiscuous mode [ 157.907378][ T8730] syzkaller0: entered allmulticast mode [ 158.294236][ T8751] bond6: Unable to set up delay as MII monitoring is disabled [ 158.304476][ T8751] bond6 (unregistering): Released all slaves [ 158.425123][ T5741] tipc: Node number set to 2886997007 [ 158.668962][ T8771] xt_hashlimit: size too large, truncated to 1048576 [ 159.429794][ T8825] xt_ecn: cannot match TCP bits for non-tcp packets [ 160.166667][ T8868] openvswitch: netlink: IP tunnel attribute has 40 unknown bytes. [ 160.237235][ T8888] __nla_validate_parse: 50 callbacks suppressed [ 160.237253][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 160.318701][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 160.415674][ T8900] netlink: 248 bytes leftover after parsing attributes in process `syz.3.814'. [ 160.443315][ T8897] netlink: 32 bytes leftover after parsing attributes in process `syz.4.813'. [ 160.489887][ T8896] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.527470][ T8902] vxcan6: entered allmulticast mode [ 160.539022][ T8904] netlink: 'syz.1.816': attribute type 11 has an invalid length. [ 160.554364][ T8904] netlink: 224 bytes leftover after parsing attributes in process `syz.1.816'. [ 160.573103][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 160.739885][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.819'. [ 160.841493][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 160.850502][ T8919] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 160.861580][ T8926] netlink: 44 bytes leftover after parsing attributes in process `syz.2.823'. [ 160.886820][ T8921] pimreg: entered allmulticast mode [ 160.892369][ T8021] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 160.926581][ T8021] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 160.966474][ T8021] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 160.978767][ T8932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.824'. [ 161.016015][ T8021] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 161.098538][ T8937] unsupported nlmsg_type 40 [ 161.347066][ T8955] vcan0: entered allmulticast mode [ 161.529438][ T8961] vlan4: entered allmulticast mode [ 161.549889][ T8961] erspan0: entered allmulticast mode [ 161.567584][ T8953] lo: Caught tx_queue_len zero misconfig [ 161.673950][ T8984] xt_l2tp: unknown flags: 10 [ 162.592285][ T9055] veth: renamed from veth0_vlan [ 163.314471][ T9099] bridge3: entered promiscuous mode [ 163.334807][ T9099] bridge3: entered allmulticast mode [ 163.397649][ T9104] xt_connbytes: Forcing CT accounting to be enabled [ 163.646638][ T9109] bridge4: entered promiscuous mode [ 163.677565][ T9109] bridge4: entered allmulticast mode [ 163.712490][ T9109] team0: Port device bridge4 added [ 165.228486][ T9194] SET target dimension over the limit! [ 165.514323][ T9216] syzkaller0: entered promiscuous mode [ 165.520234][ T9207] netlink: 'syz.3.892': attribute type 13 has an invalid length. [ 165.554182][ T9216] syzkaller0: entered allmulticast mode [ 165.574399][ T9216] netlink: 'syz.0.894': attribute type 21 has an invalid length. [ 165.704348][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 165.849240][ T9216] __nla_validate_parse: 11 callbacks suppressed [ 165.849259][ T9216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.894'. [ 165.881436][ T5287] veth: left promiscuous mode [ 165.911862][ T5287] veth: entered promiscuous mode [ 165.923964][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 165.963513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 166.019438][ T9191] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 166.192839][ T9251] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 166.210981][ T9251] netlink: 40 bytes leftover after parsing attributes in process `syz.4.901'. [ 166.230629][ T9251] dummy0: entered promiscuous mode [ 166.253560][ T9251] bridge0: port 3(dummy0) entered blocking state [ 166.281228][ T9251] bridge0: port 3(dummy0) entered disabled state [ 166.310803][ T9251] dummy0: entered allmulticast mode [ 166.353825][ T9255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.902'. [ 166.391765][ T9255] netlink: 388 bytes leftover after parsing attributes in process `syz.0.902'. [ 166.905616][ T9291] netlink: 'syz.4.911': attribute type 2 has an invalid length. [ 166.967311][ T9293] netlink: 92 bytes leftover after parsing attributes in process `syz.1.913'. [ 166.985533][ T9293] netlink: 'syz.1.913': attribute type 1 has an invalid length. [ 167.001198][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 167.033589][ T9300] lo: Caught tx_queue_len zero misconfig [ 167.065102][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.915'. [ 167.233018][ T5633] Bluetooth: hci0: command 0x0c20 tx timeout [ 167.511741][ T9319] openvswitch: netlink: Invalid VLAN frame [ 167.529098][ T9315] openvswitch: netlink: Invalid VLAN frame [ 167.537149][ T9323] netlink: 56 bytes leftover after parsing attributes in process `syz.1.920'. [ 167.547034][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'. [ 167.569732][ T9323] netlink: 'syz.1.920': attribute type 2 has an invalid length. [ 168.171272][ T9358] netlink: 'syz.2.929': attribute type 21 has an invalid length. [ 168.207688][ T9358] netlink: 'syz.2.929': attribute type 4 has an invalid length. [ 168.246250][ T9358] netlink: 'syz.2.929': attribute type 5 has an invalid length. [ 168.277854][ T9364] netlink: 'syz.3.931': attribute type 1 has an invalid length. [ 168.509722][ T9378] tipc: Started in network mode [ 168.531752][ T9378] tipc: Node identity 3286db4ff48b, cluster identity 4711 [ 168.559888][ T9378] tipc: Enabled bearer , priority 0 [ 168.598475][ T9382] syzkaller0: entered promiscuous mode [ 168.651490][ T9382] syzkaller0: entered allmulticast mode [ 168.716012][ T9388] No such timeout policy "syz0" [ 168.736705][ T9378] tipc: Resetting bearer [ 168.807447][ T9376] tipc: Resetting bearer [ 168.866093][ T9376] tipc: Disabling bearer [ 169.270082][ T9422] sctp: [Deprecated]: syz.0.950 (pid 9422) Use of int in maxseg socket option. [ 169.270082][ T9422] Use struct sctp_assoc_value instead [ 169.500884][ T9431] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 169.920697][ T9470] veth0_macvtap: Caught tx_queue_len zero misconfig [ 170.508261][ T9515] ip6tnl0: Caught tx_queue_len zero misconfig [ 170.817938][ T9529] validate_nla: 4 callbacks suppressed [ 170.817956][ T9529] netlink: 'syz.3.981': attribute type 24 has an invalid length. [ 170.916480][ T9531] __nla_validate_parse: 15 callbacks suppressed [ 170.916497][ T9531] netlink: 576 bytes leftover after parsing attributes in process `syz.2.982'. [ 171.094434][ T9535] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.983'. [ 171.111784][ T9535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.983'. [ 172.161730][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 172.177276][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 172.265774][ T9558] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 172.628036][ T9572] tipc: Enabling of bearer rejected, failed to enable media [ 172.672569][ T9575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.994'. [ 172.701454][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 172.808514][ T9582] Cannot find del_set index 4 as target [ 172.850876][ T9582] Cannot find del_set index 4 as target [ 172.929674][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.986'. [ 172.961546][ T9595] x_tables: unsorted underflow at hook 1 [ 172.978815][ T9546] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 173.003910][ T9595] netlink: 284 bytes leftover after parsing attributes in process `syz.3.999'. [ 173.021712][ T9595] ip6tnl0: Caught tx_queue_len zero misconfig [ 173.490887][ T9618] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 173.867985][ T9639] veth0: entered promiscuous mode [ 173.880345][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 174.528847][ T9668] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 174.540666][ T9668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.854640][ T9689] netlink: 'syz.3.1028': attribute type 1 has an invalid length. [ 174.969539][ T9689] 8021q: adding VLAN 0 to HW filter on device bond6 [ 174.988927][ T9705] netlink: 'syz.2.1035': attribute type 11 has an invalid length. [ 175.032165][ T9700] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 175.533886][ T9743] syzkaller1: entered promiscuous mode [ 175.584011][ T9743] syzkaller1: entered allmulticast mode [ 175.721242][ T9756] syzkaller1: entered promiscuous mode [ 175.735051][ T9756] syzkaller1: entered allmulticast mode [ 175.922482][ T8024] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 175.945683][ T8024] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.981201][ T8024] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.009344][ T8024] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.537601][ T9800] __nla_validate_parse: 8 callbacks suppressed [ 176.537620][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1057'. [ 176.554447][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 176.569410][ T9801] netlink: 'syz.0.1059': attribute type 11 has an invalid length. [ 176.623600][ T9804] dvmrp8: entered allmulticast mode [ 176.633621][ T9793] syzkaller1: entered promiscuous mode [ 176.650494][ T9793] syzkaller1: entered allmulticast mode [ 176.729547][ T9807] netlink: 'syz.0.1061': attribute type 1 has an invalid length. [ 176.789215][ T9807] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 176.981151][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 177.002202][ T9825] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 177.027582][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'. [ 177.306470][ T9844] vlan5: entered allmulticast mode [ 177.331871][ T9844] bond0: entered allmulticast mode [ 177.362297][ T9848] openvswitch: netlink: IP tunnel dst address not specified [ 177.364047][ T9844] bond_slave_0: entered allmulticast mode [ 177.406164][ T9844] bond_slave_1: entered allmulticast mode [ 177.418773][ T9850] openvswitch: netlink: IP tunnel dst address not specified [ 177.553752][ T9863] netlink: 'syz.4.1075': attribute type 1 has an invalid length. [ 177.571306][ T9862] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1076'. [ 177.659347][ T9870] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1077'. [ 177.674611][ T9863] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.704356][ T9870] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.713785][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.849971][ T9879] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1080'. [ 177.895393][ T9879] netlink: 'syz.4.1080': attribute type 1 has an invalid length. [ 178.018161][ T9886] netlink: 'syz.4.1080': attribute type 6 has an invalid length. [ 178.025004][ T9888] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 178.066692][ T9888] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1084'. [ 178.100501][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 178.333820][ T9903] netlink: 'syz.0.1089': attribute type 1 has an invalid length. [ 178.352103][ T9905] netlink: 'syz.2.1087': attribute type 3 has an invalid length. [ 178.370534][ T9905] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1087'. [ 178.384831][ T9903] netlink: 'syz.0.1089': attribute type 8 has an invalid length. [ 178.445816][ T9900] netlink: 'syz.2.1087': attribute type 4 has an invalid length. [ 178.486629][ T9903] netdevsim netdevsim0: Direct firmware load for r1 failed with error -2 [ 178.509524][ T9903] netdevsim netdevsim0: Falling back to sysfs fallback for: r1 [ 178.615855][ T9912] openvswitch: netlink: Flow actions attr not present in new flow. [ 178.626571][ T9912] openvswitch: netlink: IPv4 tun info is not correct [ 179.835135][ T9976] netlink: 'syz.1.1109': attribute type 8 has an invalid length. [ 180.249172][ T9991] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 180.548806][ T9960] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 181.215527][T10064] IPVS: Error connecting to the multicast addr [ 181.360967][T10064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.620822][T10088] __nla_validate_parse: 6 callbacks suppressed [ 181.620838][T10088] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1136'. [ 181.633839][ T5633] Bluetooth: hci0: command 0x0c20 tx timeout [ 181.731332][T10096] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.1140'. [ 181.893554][T10096] syzkaller1: entered promiscuous mode [ 181.899185][T10096] syzkaller1: entered allmulticast mode [ 182.041055][T10114] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 182.212328][T10124] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.1151'. [ 182.238577][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'. [ 182.266410][T10124] validate_nla: 2 callbacks suppressed [ 182.266424][T10124] netlink: 'syz.0.1151': attribute type 4 has an invalid length. [ 182.268313][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1152'. [ 182.290442][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1152'. [ 182.503902][T10139] netlink: 'syz.0.1157': attribute type 10 has an invalid length. [ 182.520599][T10139] team0: Device ipvlan0 failed to register rx_handler [ 182.604600][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 183.013504][T10170] netlink: 'syz.0.1164': attribute type 21 has an invalid length. [ 183.033323][T10170] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1164'. [ 183.073023][T10170] netlink: 'syz.0.1164': attribute type 5 has an invalid length. [ 183.074510][T10173] netlink: 'syz.4.1165': attribute type 3 has an invalid length. [ 183.086511][T10170] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1164'. [ 183.090601][T10173] netlink: 'syz.4.1165': attribute type 3 has an invalid length. [ 183.118185][T10173] netlink: 'syz.4.1165': attribute type 3 has an invalid length. [ 183.127709][T10173] netlink: 'syz.4.1165': attribute type 3 has an invalid length. [ 183.234530][T10185] tipc: Enabled bearer , priority 0 [ 183.255435][T10185] syzkaller0: entered promiscuous mode [ 183.266064][T10185] syzkaller0: entered allmulticast mode [ 183.305775][T10185] tipc: Resetting bearer [ 183.326382][T10187] tipc: Enabling of bearer rejected, already enabled [ 183.338803][T10188] tipc: Enabled bearer , priority 0 [ 183.354380][T10187] tipc: Resetting bearer [ 183.370749][T10187] tipc: Disabling bearer [ 183.385280][T10188] syzkaller0: entered promiscuous mode [ 183.407908][T10188] syzkaller0: entered allmulticast mode [ 183.415996][T10192] netlink: 'syz.0.1169': attribute type 9 has an invalid length. [ 183.425189][T10194] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 2, id = 0 [ 183.533308][T10197] smc: net device team0 applied user defined pnetid SYZ2 [ 183.541377][T10193] tipc: Resetting bearer [ 183.548376][T10199] smc: net device team0 erased user defined pnetid SYZ2 [ 183.559896][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 183.636665][T10186] tipc: Resetting bearer [ 183.655628][T10186] tipc: Disabling bearer [ 183.947220][T10221] syzkaller0: entered promiscuous mode [ 183.959057][T10221] syzkaller0: entered allmulticast mode [ 184.087227][T10227] netlink: 'syz.3.1180': attribute type 6 has an invalid length. [ 184.128400][T10227] openvswitch: netlink: Multiple metadata blocks provided [ 184.880716][T10277] sch_fq: defrate 0 ignored. [ 184.913039][ T5643] Bluetooth: hci4: command 0x0406 tx timeout [ 185.101181][T10292] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 185.141095][T10294] tipc: Enabling of bearer rejected, failed to enable media [ 185.166956][T10295] syzkaller1: entered promiscuous mode [ 185.183787][T10295] syzkaller1: entered allmulticast mode [ 185.211027][T10295] syzkaller1: left promiscuous mode [ 185.229990][T10295] syzkaller1: left allmulticast mode [ 185.561660][T10319] veth1_macvtap: entered allmulticast mode [ 185.632192][T10324] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 185.672214][T10316] veth1_macvtap: left allmulticast mode [ 186.337707][T10378] netlink: 'syz.4.1222': attribute type 11 has an invalid length. [ 186.353457][T10378] netlink: 'syz.4.1222': attribute type 11 has an invalid length. [ 187.088695][T10426] x_tables: duplicate underflow at hook 2 [ 187.136629][T10433] __nla_validate_parse: 16 callbacks suppressed [ 187.136645][T10433] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1233'. [ 187.365867][T10445] validate_nla: 2 callbacks suppressed [ 187.365957][T10445] netlink: 'syz.0.1236': attribute type 4 has an invalid length. [ 187.380361][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 187.397101][T10443] netlink: 'syz.0.1236': attribute type 4 has an invalid length. [ 187.590708][T10457] netlink: 'syz.2.1238': attribute type 1 has an invalid length. [ 187.627269][T10457] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1238'. [ 187.665591][T10457] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1238'. [ 187.675509][T10463] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1241'. [ 187.678985][T10465] netlink: 'syz.4.1237': attribute type 1 has an invalid length. [ 187.719912][T10457] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1238'. [ 188.083755][T10479] netlink: 'syz.2.1244': attribute type 21 has an invalid length. [ 188.215439][T10484] nbd0: detected capacity change from 0 to 127 [ 188.352338][ T5633] block nbd0: Receive control failed (result -104) [ 188.476306][T10509] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1251'. [ 188.485847][T10505] veth1_macvtap: left promiscuous mode [ 188.545346][T10509] vlan3: entered allmulticast mode [ 188.557590][T10509] bond0: entered allmulticast mode [ 188.573997][T10514] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1251'. [ 188.597940][T10509] bond_slave_0: entered allmulticast mode [ 188.632008][T10509] bond_slave_1: entered allmulticast mode [ 188.641753][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'. [ 188.658930][T10518] 8021q: VLANs not supported on vxcan1 [ 188.708801][T10514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.749250][T10514] bond_slave_0: left allmulticast mode [ 188.775444][T10514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.791628][T10514] bond_slave_1: left allmulticast mode [ 188.802219][T10514] bond0 (unregistering): Released all slaves [ 188.817741][T10518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1255'. [ 188.867617][T10523] netlink: 'syz.0.1256': attribute type 3 has an invalid length. [ 188.917695][T10530] team0 (unregistering): Port device team_slave_0 removed [ 188.952335][T10530] team0 (unregistering): Port device team_slave_1 removed [ 189.591406][T10559] syzkaller0: entered promiscuous mode [ 189.599772][T10559] syzkaller0: entered allmulticast mode [ 189.744135][T10574] netem: change failed [ 191.076255][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 191.076408][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 191.082327][ T4942] Bluetooth: hci0: command 0x0c20 tx timeout [ 191.095037][ T5635] Bluetooth: hci2: command 0x0406 tx timeout [ 191.424881][T10604] syzkaller0: entered promiscuous mode [ 191.451694][T10604] syzkaller0: entered allmulticast mode [ 191.810281][T10624] netlink: set zone limit has 4 unknown bytes [ 191.936609][T10642] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 191.943747][T10642] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 192.267742][T10658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.326711][ T50] block nbd1: Receive control failed (result -32) [ 192.348412][T10661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.568261][T10677] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 192.613340][T10680] __nla_validate_parse: 9 callbacks suppressed [ 192.613356][T10680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1293'. [ 192.791199][T10691] netlink: 'syz.0.1299': attribute type 23 has an invalid length. [ 193.007835][T10707] netlink: 'syz.4.1306': attribute type 1 has an invalid length. [ 193.464977][T10730] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1311'. [ 193.556391][T10736] Bluetooth: MGMT ver 1.23 [ 193.679863][T10741] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 193.683027][ T5801] IPVS: starting estimator thread 0... [ 193.833788][T10749] IPVS: using max 39 ests per chain, 93600 per kthread [ 193.862444][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1319'. [ 193.885496][T10759] openvswitch: netlink: Flow actions attr not present in new flow. [ 193.914894][T10759] bond0: (slave bond_slave_1): Releasing backup interface [ 193.927837][T10759] bond_slave_1: left allmulticast mode [ 194.002585][T10761] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1320'. [ 194.120384][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.130160][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.348950][T10776] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.1324'. [ 194.390097][T10772] lo speed is unknown, defaulting to 1000 [ 194.414992][T10776] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 194.419783][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1324'. [ 194.609215][T10801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1331'. [ 194.618371][T10801] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 194.986931][T10816] syzkaller0: entered promiscuous mode [ 194.992557][T10816] syzkaller0: entered allmulticast mode [ 195.625238][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1340'. [ 197.420250][T10783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.600153][T10843] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1341'. [ 197.621477][T10845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1342'. [ 197.668997][ T8020] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 20002 - 0 [ 197.706902][ T8020] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 197.737555][ T8020] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 197.780880][ T8020] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 197.841384][T10858] netlink: 'syz.2.1347': attribute type 8 has an invalid length. [ 197.868608][T10858] sch_fq: defrate 0 ignored. [ 197.908880][T10864] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 197.947677][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1350'. [ 198.017558][ T6658] hsr0: entered promiscuous mode [ 198.019398][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1350'. [ 198.266167][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1356'. [ 198.602715][T10904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1361'. [ 198.648820][T10905] smbdirect: ib_dev[syz0] renamed to [s†z2] [ 198.718771][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'. [ 199.122242][T10929] netlink: 'syz.2.1366': attribute type 15 has an invalid length. [ 199.196148][T10932] bond4: invalid ARP target 0.0.0.0 specified for addition [ 199.221927][T10932] bond4: option arp_ip_target: invalid value (0) [ 199.248157][T10932] bond4 (unregistering): Released all slaves [ 199.606477][T10949] netlink: 'syz.2.1371': attribute type 8 has an invalid length. [ 199.606491][T10953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.632177][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 199.701470][T10959] netlink: 'syz.1.1373': attribute type 10 has an invalid length. [ 199.781580][T10962] netlink: 'syz.3.1374': attribute type 30 has an invalid length. [ 199.926497][T10976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.257792][T10994] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 200.380949][T10994] bond6: entered promiscuous mode [ 200.388001][T10994] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.508738][T11009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1387'. [ 200.698607][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 200.724769][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 200.924402][T11035] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1391'. [ 200.956483][T11035] xt_ecn: cannot match TCP bits for non-tcp packets [ 201.451012][T11053] netlink: 'syz.2.1396': attribute type 1 has an invalid length. [ 201.809251][T11074] xt_hashlimit: size too large, truncated to 1048576 [ 202.099181][T11084] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 202.123888][T11084] bond8: (slave lo): Enslaving as an active interface with an up link [ 202.135518][T11084] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 202.159033][ T6643] lo speed is unknown, defaulting to 1000 [ 202.168962][ T5801] lo speed is unknown, defaulting to 1000 [ 202.183771][ T6644] lo speed is unknown, defaulting to 1000 [ 202.917483][T11127] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 202.931150][T11127] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 202.939912][T11127] gretap2: entered promiscuous mode [ 202.951759][T11127] gretap2: entered allmulticast mode [ 203.113338][ T29] audit: type=1800 audit(1778142596.284:2): pid=11134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1420" name="memory.events" dev="tmpfs" ino=1604 res=0 errno=0 [ 203.472287][T11143] tipc: Started in network mode [ 203.477872][T11148] netlink: 'syz.0.1424': attribute type 13 has an invalid length. [ 203.493009][T11143] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 203.513105][T11143] tipc: Enabling of bearer rejected, failed to enable media [ 203.801459][T11159] __nla_validate_parse: 9 callbacks suppressed [ 203.801476][T11159] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1426'. [ 203.826917][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'. [ 203.932484][T11159] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1426'. [ 204.081149][T11170] netlink: 'syz.3.1429': attribute type 39 has an invalid length. [ 204.176929][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1432'. [ 204.217846][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1432'. [ 204.577642][T11189] IPVS: ip_vs_edit_dest(): server weight less than zero [ 204.600111][T11189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1436'. [ 204.669942][T11193] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1437'. [ 204.822300][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1437'. [ 204.842010][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1437'. [ 205.256532][T11206] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1439'. [ 205.775818][T11224] syzkaller0: entered promiscuous mode [ 205.799397][T11224] syzkaller0: entered allmulticast mode [ 205.880916][T11227] tipc: Enabled bearer , priority 0 [ 205.922283][T11224] tipc: Enabling of bearer rejected, media not registered [ 205.976184][T11224] tipc: Resetting bearer [ 205.998959][T11224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.057523][T11220] tipc: Resetting bearer [ 206.168925][T11220] tipc: Disabling bearer [ 206.218873][T11243] sctp: [Deprecated]: syz.1.1451 (pid 11243) Use of int in maxseg socket option. [ 206.218873][T11243] Use struct sctp_assoc_value instead [ 206.253499][T11252] netlink: 'syz.4.1454': attribute type 1 has an invalid length. [ 206.409450][T11252] bond7: entered promiscuous mode [ 206.458746][T11252] 8021q: adding VLAN 0 to HW filter on device bond7 [ 206.551262][T11266] bond7: (slave bridge9): making interface the new active one [ 206.595446][T11266] bridge9: entered promiscuous mode [ 206.615672][T11266] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 209.148977][T11247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.449520][T11311] __nla_validate_parse: 1 callbacks suppressed [ 209.449534][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1465'. [ 210.087924][T11360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1483'. [ 210.238336][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 210.284726][T11373] lo: Caught tx_queue_len zero misconfig [ 210.289351][T11368] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1487'. [ 210.290794][T11373] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 210.307393][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 210.387554][T11368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1487'. [ 210.443993][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 210.459763][T11378] sctp: [Deprecated]: syz.1.1488 (pid 11378) Use of int in max_burst socket option deprecated. [ 210.459763][T11378] Use struct sctp_assoc_value instead [ 210.479163][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 210.500877][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 210.522668][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 210.557032][T11386] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.660027][T11394] netlink: 'syz.3.1493': attribute type 64 has an invalid length. [ 210.705787][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.797029][T11386] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.074530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 211.146912][T11386] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.570122][T11386] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.881085][ T8025] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.903196][ T8025] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.934631][T11425] syz.3.1501 (11425) used greatest stack depth: 16592 bytes left [ 211.940821][T11440] xt_hashlimit: size too large, truncated to 1048576 [ 212.024133][ T8020] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.068665][ T8025] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.137157][T11450] netlink: Conntrack attr has 3 unknown bytes [ 212.230671][T11453] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.244427][T11453] bond3 (unregistering): Released all slaves [ 214.596076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.632969][T11438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.792926][T11468] netlink: 'syz.3.1509': attribute type 12 has an invalid length. [ 215.080826][T11479] bond8 (unregistering): Released all slaves [ 215.171259][T11491] batadv_slave_0: Caught tx_queue_len zero misconfig [ 215.187146][T11491] netem: change failed [ 215.438885][T11509] __nla_validate_parse: 10 callbacks suppressed [ 215.438902][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 215.553131][T11493] syzkaller0: entered promiscuous mode [ 215.558850][T11493] syzkaller0: entered allmulticast mode [ 215.566806][T11500] netlink: 'syz.0.1518': attribute type 12 has an invalid length. [ 215.575751][T11500] netlink: 'syz.0.1518': attribute type 29 has an invalid length. [ 215.588610][T11500] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1518'. [ 215.598377][T11500] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1518'. [ 215.830293][T11517] netlink: 'syz.1.1522': attribute type 2 has an invalid length. [ 215.847413][T11503] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 216.381848][T11537] xt_nat: multiple ranges no longer supported [ 216.392701][T11539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1529'. [ 216.413383][T11539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1529'. [ 216.444650][T11539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1529'. [ 216.505907][T11543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1530'. [ 216.510118][T11544] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1531'. [ 216.540379][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 216.737237][T11551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1533'. [ 216.904227][T11561] netlink: 'syz.0.1536': attribute type 13 has an invalid length. [ 216.924248][T11560] pim6reg1: entered promiscuous mode [ 216.938986][T11560] pim6reg1: entered allmulticast mode [ 217.116936][T11572] ip6tnl0: Caught tx_queue_len zero misconfig [ 217.728007][T11596] netlink: 'syz.0.1546': attribute type 30 has an invalid length. [ 217.922401][T11608] sctp: [Deprecated]: syz.2.1550 (pid 11608) Use of int in maxseg socket option. [ 217.922401][T11608] Use struct sctp_assoc_value instead [ 218.117787][T11610] lo speed is unknown, defaulting to 1000 [ 218.250035][T11629] syzkaller0: entered promiscuous mode [ 218.265761][T11629] syzkaller0: entered allmulticast mode [ 218.419535][T11639] netlink: 'syz.1.1556': attribute type 8 has an invalid length. [ 218.449419][ T11] block nbd0: Possible stuck request ffff888026bee000: control (read@0,1024B). Runtime 30 seconds [ 218.464804][ T11] block nbd0: Possible stuck request ffff888026bee1c0: control (read@1024,1024B). Runtime 30 seconds [ 218.477941][ T11] block nbd0: Possible stuck request ffff888026bee380: control (read@2048,1024B). Runtime 30 seconds [ 218.490370][ T11] block nbd0: Possible stuck request ffff888026bee540: control (read@3072,1024B). Runtime 30 seconds [ 219.308913][T11687] netlink: 'syz.3.1568': attribute type 12 has an invalid length. [ 219.394422][T11687] bond9: option primary_reselect: invalid value (255) [ 219.416024][T11687] bond9 (unregistering): Released all slaves [ 219.728100][T11705] netlink: 'syz.4.1574': attribute type 3 has an invalid length. [ 219.865265][T11707] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 219.910851][T11707] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 219.919791][T11707] gretap1: entered promiscuous mode [ 219.925429][T11707] gretap1: entered allmulticast mode [ 220.043540][T11720] IPVS: set_ctl: invalid protocol: 255 172.30.0.4:20001 [ 220.283480][ T8017] tipc: Subscription rejected, illegal request [ 220.318238][T11734] : entered promiscuous mode [ 220.405746][T11740] IPVS: length: 239 != 24 [ 220.425762][T11727] lo speed is unknown, defaulting to 1000 [ 220.625304][T11750] __nla_validate_parse: 17 callbacks suppressed [ 220.625320][T11750] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1590'. [ 220.650720][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 220.728683][ T8019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.748990][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 220.771952][ T8019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.806918][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 221.119894][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1593'. [ 221.133757][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1596'. [ 221.209737][T11767] team0 (unregistering): left promiscuous mode [ 221.217258][T11767] team_slave_1: left promiscuous mode [ 221.228120][T11767] team0 (unregistering): Port device team_slave_1 removed [ 221.254895][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'. [ 221.265949][T11767] team0 (unregistering): Port device bridge4 removed [ 221.294717][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1597'. [ 221.345062][T11781] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1597'. [ 221.498717][T11790] netlink: 'syz.1.1602': attribute type 3 has an invalid length. [ 221.510587][T11790] netlink: 'syz.1.1602': attribute type 1 has an invalid length. [ 221.538313][T11790] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1602'. [ 221.815441][ T8019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.844985][ T8019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.852956][T11804] netlink: 'syz.3.1607': attribute type 2 has an invalid length. [ 222.028640][T11767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.386483][T11825] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 222.422646][T11828] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 222.681289][T11844] netlink: 'syz.2.1621': attribute type 1 has an invalid length. [ 222.816067][T11850] bridge_slave_0 (unregistering): left allmulticast mode [ 222.826315][T11850] bridge_slave_0 (unregistering): left promiscuous mode [ 222.848343][T11850] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.024871][T11862] ipt_rpfilter: unknown options [ 223.166712][T11872] netlink: 'syz.0.1628': attribute type 1 has an invalid length. [ 223.329718][T11885] veth0: entered promiscuous mode [ 223.645852][T11884] veth0: left promiscuous mode [ 224.003314][T11925] x_tables: unsorted entry at hook 3 [ 224.156250][T11934] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 224.464317][T11951] syzkaller0: entered promiscuous mode [ 224.480693][T11951] syzkaller0: entered allmulticast mode [ 224.520082][T11951] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 224.768407][ T8017] wlan0: Trigger new scan to find an IBSS to join [ 224.869684][T11958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.928840][T11958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.970936][T11958] bond0 (unregistering): Released all slaves [ 225.042036][T11972] bridge11: entered promiscuous mode [ 225.054416][T11972] bridge11: entered allmulticast mode [ 225.167299][T11984] openvswitch: netlink: IP tunnel dst address not specified [ 225.175041][T11984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.235775][T11986] erspan0: entered promiscuous mode [ 225.784970][T12030] netlink: 'syz.2.1673': attribute type 83 has an invalid length. [ 225.887487][T12037] bond8: (slave lo): Releasing backup interface [ 225.904351][T12039] __nla_validate_parse: 13 callbacks suppressed [ 225.904367][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'. [ 225.947041][T12037] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 225.991470][T12037] bridge_slave_1: left allmulticast mode [ 225.997407][T12043] netlink: 'syz.2.1677': attribute type 1 has an invalid length. [ 226.003032][T12037] bridge_slave_1: left promiscuous mode [ 226.011130][T12037] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.024639][T12037] bond0: (slave bond_slave_0): Releasing backup interface [ 226.036956][T12037] bond_slave_0: left allmulticast mode [ 226.060729][T12037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.069170][T12037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.081239][T12037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.100931][T12037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.140957][T12037] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 226.180104][ T6644] lo speed is unknown, defaulting to 1000 [ 226.207594][ T6644] s†z2: Port: 1 Link DOWN [ 226.288074][T12043] bond3: entered promiscuous mode [ 226.307457][T12043] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.341876][T12056] bond3: (slave bridge6): making interface the new active one [ 226.371710][T12056] bridge6: entered promiscuous mode [ 226.379769][T12056] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 226.534269][T12053] syzkaller0: entered promiscuous mode [ 226.550681][T12053] syzkaller0: entered allmulticast mode [ 226.602045][T12074] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1681'. [ 226.611322][T12074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1681'. [ 226.644115][T12071] syzkaller0: entered promiscuous mode [ 226.651048][T12071] syzkaller0: entered allmulticast mode [ 226.694363][T12081] sit0: Caught tx_queue_len zero misconfig [ 228.435636][T12111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1690'. [ 229.713085][ T8023] wlan0: Trigger new scan to find an IBSS to join [ 229.964215][T12121] xt_CT: No such helper "pptp" [ 230.024366][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 230.668542][ T8017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.057472][T12200] openvswitch: netlink: IP tunnel dst address not specified [ 231.125151][T12202] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1712'. [ 231.240882][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 231.263739][T12209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1714'. [ 231.356144][T12221] netlink: 'syz.3.1718': attribute type 1 has an invalid length. [ 231.590176][T12228] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 231.619997][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1724'. [ 231.650634][T12241] : entered promiscuous mode [ 231.698803][T12248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1726'. [ 231.866613][T12258] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1727'. [ 231.885072][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.894226][ T8023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.902453][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.910550][ T8023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.919733][ T6643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.931933][ T6658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.541473][T12295] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 232.660335][T12305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1741'. [ 232.778191][T12317] netlink: 'syz.1.1744': attribute type 1 has an invalid length. [ 232.953463][T12320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1746'. [ 233.627951][T12343] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1751'. [ 233.856200][T12380] veth: renamed from veth0_vlan [ 233.872411][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 233.893669][T12385] netlink: 'syz.3.1755': attribute type 12 has an invalid length. [ 233.894619][T12386] netlink: 'syz.3.1755': attribute type 12 has an invalid length. [ 233.912191][T12385] netlink: 'syz.3.1755': attribute type 11 has an invalid length. [ 233.953057][T12386] netlink: 'syz.3.1755': attribute type 11 has an invalid length. [ 233.996689][T12392] netlink: 'syz.2.1757': attribute type 10 has an invalid length. [ 234.684071][T12430] ipvlan2: entered promiscuous mode [ 234.740283][T12430] ipvlan3: entered promiscuous mode [ 234.914238][T12444] 8021q: VLANs not supported on sit0 [ 235.313451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.683369][T12492] bond8: Unable to set up delay as MII monitoring is disabled [ 235.693406][T12492] bond8 (unregistering): Released all slaves [ 236.056101][T12514] gre2: entered promiscuous mode [ 236.077671][T12516] netlink: 'syz.4.1792': attribute type 1 has an invalid length. [ 236.213468][T12516] 8021q: adding VLAN 0 to HW filter on device bond8 [ 236.220860][T12527] __nla_validate_parse: 12 callbacks suppressed [ 236.220878][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'. [ 236.482641][T12534] ¾x9ÿ: renamed from bridge_slave_0 [ 236.739583][T12551] bond0: Caught tx_queue_len zero misconfig [ 236.938305][T12558] bridge4: entered promiscuous mode [ 236.977759][T12558] bridge4: entered allmulticast mode [ 236.994977][ T8021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.003167][ T8021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.013842][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.019096][T12572] IPVS: ip_vs_add_dest(): server weight less than zero [ 237.031202][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.071636][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1806'. [ 237.357489][T12595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1809'. [ 237.378655][T12595] sock: sock_timestamping_bind_phc: sock not bind to device [ 237.562623][T12607] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1813'. [ 237.655547][T12611] syzkaller0: entered allmulticast mode [ 237.692263][T12613] netlink: 'syz.4.1815': attribute type 1 has an invalid length. [ 237.735800][T12613] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 237.827682][T12616] lo: Caught tx_queue_len zero misconfig [ 237.928547][T12630] netlink: 'syz.4.1819': attribute type 1 has an invalid length. [ 237.944248][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1819'. [ 237.957613][T12630] netlink: 'syz.4.1819': attribute type 11 has an invalid length. [ 238.066221][T12633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.203402][T12645] macvtap1: entered allmulticast mode [ 238.208960][T12645] veth0_macvtap: entered allmulticast mode [ 238.392186][T12652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1826'. [ 238.417389][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 238.493797][T12657] syzkaller0: entered promiscuous mode [ 238.505892][T12657] syzkaller0: entered allmulticast mode [ 238.706501][T12668] netlink: 'syz.1.1830': attribute type 2 has an invalid length. [ 238.727048][T12668] tipc: Cannot configure node identity twice [ 238.752031][T12670] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1831'. [ 238.897138][T12677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.905098][T12676] tipc: Enabling of bearer rejected, failed to enable media [ 239.295947][T12695] syzkaller0: entered promiscuous mode [ 239.301692][T12695] syzkaller0: entered allmulticast mode [ 239.450452][T12706] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 239.506698][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1844'. [ 239.510522][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1842'. [ 239.599289][T12720] netlink: 'syz.0.1844': attribute type 32 has an invalid length. [ 239.649972][T12704] 8021q: adding VLAN 0 to HW filter on device bond9 [ 239.661140][T12704] bridge0: port 4(bond9) entered blocking state [ 239.668819][T12704] bridge0: port 4(bond9) entered disabled state [ 239.676436][T12704] bond9: entered allmulticast mode [ 239.686689][T12704] bond9: entered promiscuous mode [ 239.740772][T12719] 8021q: adding VLAN 0 to HW filter on device bond10 [ 239.748648][T12719] bridge0: port 5(bond10) entered blocking state [ 239.755166][T12719] bridge0: port 5(bond10) entered disabled state [ 239.762203][T12719] bond10: entered allmulticast mode [ 239.769446][T12719] bond10: entered promiscuous mode [ 239.808001][T12720] bond8: option coupled_control: invalid value (192) [ 239.817347][T12720] bond8 (unregistering): Released all slaves [ 239.873229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.881804][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.890222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.395716][T12758] netem: change failed [ 240.427161][T12760] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 240.528425][T12760] team1: entered promiscuous mode [ 240.545188][T12760] team1: entered allmulticast mode [ 240.855181][T12785] netlink: 'syz.3.1869': attribute type 1 has an invalid length. [ 240.920770][T12785] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 241.165442][T12798] dvmrp0: entered allmulticast mode [ 242.044794][T12860] tipc: Enabling of bearer rejected, media not registered [ 242.077120][T12861] __nla_validate_parse: 13 callbacks suppressed [ 242.077137][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1888'. [ 242.101062][T12850] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1886'. [ 242.168258][T12865] netlink: 'syz.1.1891': attribute type 1 has an invalid length. [ 242.234444][T12865] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 242.245368][T12865] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 242.267357][T12871] netlink: 'syz.3.1893': attribute type 29 has an invalid length. [ 242.278094][T12871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1893'. [ 242.287951][T12871] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1893'. [ 242.297537][T12869] netlink: 'syz.4.1892': attribute type 1 has an invalid length. [ 242.297557][T12869] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1892'. [ 242.297574][T12869] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1892'. [ 242.297589][T12869] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1892'. [ 242.334159][T12871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1893'. [ 242.346580][T12873] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1893'. [ 242.355733][T12872] bond0: (slave bridge5): Enslaving as an active interface with a down link [ 242.370070][T12865] macvlan2: entered promiscuous mode [ 242.388196][T12865] macvlan2: entered allmulticast mode [ 242.398545][T12873] unsupported nla_type 58 [ 242.403703][T12865] bond0: entered promiscuous mode [ 242.409721][T12865] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.431489][T12865] bond0: left promiscuous mode [ 242.461496][T12871] netlink: 'syz.3.1893': attribute type 29 has an invalid length. [ 242.736558][T12888] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1898'. [ 242.754718][ T8013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.762938][ T8013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.775849][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.786969][ T6644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.801697][T12890] validate_nla: 26 callbacks suppressed [ 242.801709][T12890] netlink: 'syz.0.1899': attribute type 1 has an invalid length. [ 242.975119][T12892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.006575][T12892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.041091][T12892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 243.235744][T12913] x_tables: duplicate underflow at hook 1 [ 243.358857][T12919] syz_tun: entered allmulticast mode [ 243.450520][T12892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.476141][T12892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.505268][T12892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 243.606858][T12925] syzkaller0: entered promiscuous mode [ 243.622714][T12925] syzkaller0: entered allmulticast mode [ 243.679630][T12892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.690613][T12892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.701950][T12892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 243.819390][T12892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.845931][T12892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.881891][T12892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 243.914564][T12937] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 243.943930][T12941] xt_l2tp: wrong L2TP version: 0 [ 243.948567][T12942] x_tables: duplicate underflow at hook 1 [ 243.964650][T12937] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 244.086510][T12946] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 244.148464][ T5801] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 244.222111][T12956] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 244.276416][ T8021] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.320331][ T8021] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 244.367704][ T8021] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 244.481553][ T8021] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.501755][ T8021] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 244.515234][ T8021] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 244.534455][ T8021] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.542787][ T8021] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 244.582313][ T8021] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 244.700081][ T3385] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.722269][T12989] IPVS: length: 206 != 8 [ 244.734688][ T3385] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 244.784558][ T3385] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 245.028852][T13005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.039070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.299644][T13029] netlink: 'syz.4.1937': attribute type 18 has an invalid length. [ 245.501752][T13045] macvlan1: left promiscuous mode [ 245.531400][T13045] macvlan1: left allmulticast mode [ 245.540424][T13045] veth1_vlan: left allmulticast mode [ 245.759130][T13063] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 245.811163][T13066] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.689749][T13117] netlink: 'syz.2.1963': attribute type 7 has an invalid length. [ 246.757176][T13117] erspan0: entered promiscuous mode [ 246.771145][T13117] gretap0: entered promiscuous mode [ 246.789069][T13117] debugfs: 'hsr1' already exists in 'hsr' [ 246.798504][T13117] Cannot create hsr debugfs directory [ 246.809456][T13117] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 246.830047][T13117] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 247.029480][T13141] syzkaller0: entered promiscuous mode [ 247.046996][T13141] syzkaller0: entered allmulticast mode [ 247.088192][T13141] __nla_validate_parse: 12 callbacks suppressed [ 247.088209][T13141] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1971'. [ 247.160325][T13141] netlink: 'syz.1.1971': attribute type 1 has an invalid length. [ 247.171682][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1975'. [ 247.195763][T13149] netlink: 'syz.0.1974': attribute type 4 has an invalid length. [ 247.337499][T13157] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 247.349583][T13157] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 247.447038][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1977'. [ 247.590572][T13173] netlink: 'syz.3.1982': attribute type 1 has an invalid length. [ 247.671623][T13173] 8021q: adding VLAN 0 to HW filter on device bond9 [ 247.686167][T13169] syzkaller1: entered promiscuous mode [ 247.691810][T13169] syzkaller1: entered allmulticast mode [ 247.707272][T13178] 8021q: adding VLAN 0 to HW filter on device bond9 [ 247.721196][T13178] bond9: (slave vcan1): The slave device specified does not support setting the MAC address [ 247.732258][T13178] bond9: (slave vcan1): Error -95 calling set_mac_address [ 248.330349][T13209] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1992'. [ 248.469429][T13214] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 248.476796][T13214] syzkaller1: Linktype set failed because interface is up [ 248.487500][T13216] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 248.497081][T13216] syzkaller1: Linktype set failed because interface is up [ 248.506163][T13213] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 248.513909][ T11] block nbd0: Possible stuck request ffff888026bee000: control (read@0,1024B). Runtime 60 seconds [ 248.524975][ T11] block nbd0: Possible stuck request ffff888026bee1c0: control (read@1024,1024B). Runtime 60 seconds [ 248.536747][ T11] block nbd0: Possible stuck request ffff888026bee380: control (read@2048,1024B). Runtime 60 seconds [ 248.548648][ T11] block nbd0: Possible stuck request ffff888026bee540: control (read@3072,1024B). Runtime 60 seconds [ 248.560316][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.568493][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.577951][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.587020][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.842358][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1999'. [ 248.868747][T13236] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 248.904260][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1999'. [ 248.933855][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1999'. [ 249.260293][T13261] x_tables: duplicate underflow at hook 1 [ 249.331819][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 249.427365][T13274] netlink: 'syz.3.2012': attribute type 1 has an invalid length. [ 249.637218][T13285] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2015'. [ 249.764023][T13293] netlink: 'syz.0.2019': attribute type 20 has an invalid length. [ 249.772091][T13293] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.787239][T13293] netlink: 496 bytes leftover after parsing attributes in process `syz.0.2019'. [ 250.463313][T13331] bond10: option fail_over_mac: invalid value (16) [ 250.495675][T13331] bond10 (unregistering): Released all slaves [ 251.121092][T13370] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 251.293841][T13376] netlink: 'syz.2.2043': attribute type 11 has an invalid length. [ 251.480397][T13383] openvswitch: netlink: EtherType 50a is less than min 600 [ 251.531960][T13389] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 251.686917][T13397] sctp: [Deprecated]: syz.1.2049 (pid 13397) Use of int in maxseg socket option. [ 251.686917][T13397] Use struct sctp_assoc_value instead [ 251.802118][T13401] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 251.823558][T13401] bond11 (unregistering): Released all slaves [ 251.854159][T13406] syzkaller0: entered promiscuous mode [ 251.860294][T13406] syzkaller0: entered allmulticast mode [ 252.190772][T13415] netlink: 'syz.3.2056': attribute type 4 has an invalid length. [ 252.241538][T13417] ip6gre1: entered promiscuous mode [ 252.253114][T13417] ip6gre1: entered allmulticast mode [ 252.282669][T13417] __nla_validate_parse: 13 callbacks suppressed [ 252.282685][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'. [ 252.562514][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2060'. [ 253.621707][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2075'. [ 253.745837][T13497] veth9: entered allmulticast mode [ 253.901393][T13499] syzkaller0: entered promiscuous mode [ 253.915352][T13499] syzkaller0: entered allmulticast mode [ 253.957653][T13501] syzkaller0: entered promiscuous mode [ 253.970108][T13503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2078'. [ 253.983127][T13501] syzkaller0: entered allmulticast mode [ 253.990509][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2078'. [ 254.003536][T13501] netlink: 'syz.1.2077': attribute type 10 has an invalid length. [ 254.061425][T13501] team0 (unregistering): Port device team_slave_0 removed [ 254.089731][T13501] team0 (unregistering): Port device erspan0 removed [ 254.112741][T13501] team0 (unregistering): Port device vlan0 removed [ 254.141647][T13501] veth1_vlan: left promiscuous mode [ 254.159665][T13501] team0 (unregistering): Port device macvlan1 removed [ 254.273186][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 254.416106][ T5801] IPVS: starting estimator thread 0... [ 254.513652][T13520] IPVS: using max 38 ests per chain, 91200 per kthread [ 254.670117][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2087'. [ 254.703143][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'. [ 254.882190][T13547] lo: entered promiscuous mode [ 254.895461][T13547] netlink: 'syz.1.2090': attribute type 2 has an invalid length. [ 254.912177][T13547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.110795][T13562] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2095'. [ 255.193434][T13566] netlink: 'syz.0.2096': attribute type 1 has an invalid length. [ 255.406183][T13578] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2100'. [ 255.441378][T13581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2099'. [ 255.554630][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.881927][T13609] ipt_ECN: cannot use operation on non-tcp rule [ 256.229492][T13612] netlink: 'syz.1.2109': attribute type 2 has an invalid length. [ 256.230527][T13614] x_tables: duplicate underflow at hook 2 [ 256.257407][T13614] xt_hashlimit: size too large, truncated to 1048576 [ 256.458176][T13626] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 256.519076][T13626] bond8: (slave lo): Enslaving as an active interface with an up link [ 256.533703][T13626] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 256.849208][T13639] syzkaller1: entered promiscuous mode [ 256.867359][T13639] syzkaller1: entered allmulticast mode [ 257.161021][T13645] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.364141][T13655] __nla_validate_parse: 5 callbacks suppressed [ 257.364160][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2125'. [ 258.271219][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'. [ 258.291949][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2132'. [ 258.338807][T13676] netlink: 'syz.1.2132': attribute type 11 has an invalid length. [ 258.368500][T13680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2133'. [ 258.386430][T13679] netlink: 'syz.0.2134': attribute type 1 has an invalid length. [ 258.405166][T13683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2133'. [ 258.420197][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 258.819878][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'. [ 258.964406][T13723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2145'. [ 258.989967][T13725] netlink: 'syz.4.2144': attribute type 1 has an invalid length. [ 259.052569][T13725] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2144'. [ 259.183986][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 259.319168][T13753] netlink: 'syz.4.2153': attribute type 1 has an invalid length. [ 259.319883][T13754] netlink: 'syz.4.2153': attribute type 1 has an invalid length. [ 259.339956][T13746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.345043][T13755] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 259.358063][T13751] netlink: 'syz.1.2151': attribute type 3 has an invalid length. [ 259.369752][T13753] 8021q: adding VLAN 0 to HW filter on device bond11 [ 259.505991][T13765] xfrm1: entered promiscuous mode [ 259.511132][T13765] xfrm1: entered allmulticast mode [ 259.914606][T13791] openvswitch: netlink: Missing key (keys=40, expected=100) [ 260.057827][T13798] sctp: [Deprecated]: syz.0.2165 (pid 13798) Use of int in max_burst socket option. [ 260.057827][T13798] Use struct sctp_assoc_value instead [ 260.661854][T13828] veth11: entered allmulticast mode [ 260.683829][T13828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.188867][T13860] xt_TPROXY: Can be used only with -p tcp or -p udp [ 261.348946][T13877] netlink: 'syz.3.2188': attribute type 29 has an invalid length. [ 261.378804][T13878] netlink: 'syz.3.2188': attribute type 29 has an invalid length. [ 261.424848][T13876] netlink: 'syz.3.2188': attribute type 32 has an invalid length. [ 261.644134][T13896] netlink: 'syz.0.2194': attribute type 1 has an invalid length. [ 261.696398][T13896] 8021q: adding VLAN 0 to HW filter on device bond9 [ 261.774471][T13902] bond9: (slave bridge3): making interface the new active one [ 261.815236][T13902] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 261.979409][T13909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.680310][T13946] __nla_validate_parse: 26 callbacks suppressed [ 262.680328][T13946] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.2210'. [ 262.962383][T13960] syzkaller1: entered promiscuous mode [ 262.994918][T13960] syzkaller1: entered allmulticast mode [ 263.048244][T13967] openvswitch: netlink: Missing valid actions attribute. [ 263.060796][T13969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2218'. [ 263.067286][T13967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.167036][T13973] tipc: Trying to set illegal importance in message [ 263.328856][T13983] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2224'. [ 263.551372][T13997] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.2227'. [ 263.616942][T14009] netlink: 'syz.1.2228': attribute type 8 has an invalid length. [ 264.234288][T14037] vcan1: entered promiscuous mode [ 264.239437][T14037] vcan1: entered allmulticast mode [ 264.376943][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2239'. [ 264.834920][T14083] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2248'. [ 265.039356][T14099] lo speed is unknown, defaulting to 1000 [ 265.482246][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2254'. [ 265.493612][T14113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.520205][T14113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.555215][T14124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.699036][T14129] netlink: 'syz.1.2258': attribute type 5 has an invalid length. [ 265.816036][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'. [ 265.866592][T14135] h: entered promiscuous mode [ 266.391222][T14160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2268'. [ 266.648900][T14162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.709894][T14162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 266.862648][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2276'. [ 266.967316][T14162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.991704][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.997294][T14162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 267.010245][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.019527][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 267.029169][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 267.037983][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 267.093811][T14162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.104635][T14162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 267.262333][T14162] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.281572][T14162] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 267.318998][T14198] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 267.498930][ T8021] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.517108][ T8021] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 267.610759][ T8013] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.641162][ T8013] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 267.711995][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.740420][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 267.789851][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.829552][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 267.872005][T14184] lo speed is unknown, defaulting to 1000 [ 268.050691][T14229] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2287'. [ 268.069880][T14231] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2290'. [ 268.229887][T14238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2292'. [ 268.265715][T14238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2292'. [ 268.306911][T14238] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2292'. [ 268.344966][T14231] "syz.3.2290" (14231) uses obsolete ecb(arc4) skcipher [ 268.489031][T14250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2295'. [ 268.638030][T14261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 268.749161][T14268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2299'. [ 268.818262][T14272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 268.846997][T14272] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 268.916401][T14278] netlink: 'syz.1.2300': attribute type 12 has an invalid length. [ 269.074571][ T5640] Bluetooth: hci5: command tx timeout [ 269.151466][T14292] netlink: 'syz.4.2307': attribute type 1 has an invalid length. [ 269.414443][T14298] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 269.436066][T14310] netlink: 'syz.0.2313': attribute type 5 has an invalid length. [ 269.444785][T14298] bond12: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 269.485121][T14298] bond12: (slave vxcan1): making interface the new active one [ 269.516810][T14298] bond12: (slave vxcan1): Enslaving as an active interface with an up link [ 269.647530][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 269.653863][T14287] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 269.670615][T14287] bond12: (slave vxcan3): Enslaving as a backup interface with an up link [ 269.938666][T14339] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2319'. [ 270.008462][T14184] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.017857][T14184] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.026202][T14184] bridge_slave_0: entered allmulticast mode [ 270.033997][T14184] bridge_slave_0: entered promiscuous mode [ 270.042527][T14184] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.050460][T14184] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.058457][T14184] bridge_slave_1: entered allmulticast mode [ 270.076359][T14184] bridge_slave_1: entered promiscuous mode [ 270.095747][T14348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.112101][T14347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.217420][T14184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.244032][T14184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.253652][T14350] netlink: 'syz.3.2323': attribute type 2 has an invalid length. [ 270.348213][T14184] team0: Port device team_slave_0 added [ 270.375316][T14184] team0: Port device team_slave_1 added [ 270.451602][T14184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.469373][T14184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.497008][T14184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.510586][T14184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.517854][T14184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.564068][T14184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.770836][T14367] veth5: entered promiscuous mode [ 270.778503][T14367] veth5: entered allmulticast mode [ 270.818387][T14383] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 270.970520][T14383] 8021q: adding VLAN 0 to HW filter on device bond13 [ 271.117993][T14378] vlan3: entered allmulticast mode [ 271.123465][T14378] bond13: entered allmulticast mode [ 271.148179][T14391] bond13: (slave geneve3): making interface the new active one [ 271.156775][ T5640] Bluetooth: hci5: command tx timeout [ 271.162470][T14391] geneve3: entered allmulticast mode [ 271.171348][T14391] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 271.194588][T14184] hsr_slave_0: entered promiscuous mode [ 271.201406][T14184] hsr_slave_1: entered promiscuous mode [ 271.208476][T14184] debugfs: 'hsr0' already exists in 'hsr' [ 271.215974][T14184] Cannot create hsr debugfs directory [ 271.229868][ T8019] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 271.244524][ T3385] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 271.275178][ T3385] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 271.366294][ T3385] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 271.823441][T14438] netem: invalid attributes len -5 [ 271.830151][T14438] netem: change failed [ 272.212373][T14457] netlink: 'syz.4.2345': attribute type 1 has an invalid length. [ 273.233075][ T5640] Bluetooth: hci5: command tx timeout [ 275.313087][ T5640] Bluetooth: hci5: command tx timeout [ 275.467959][ T4992] udevd[4992]: worker [6984] /devices/virtual/block/nbd0 is taking a long time [ 278.593267][ T11] block nbd0: Possible stuck request ffff888026bee000: control (read@0,1024B). Runtime 90 seconds [ 278.604201][ T11] block nbd0: Possible stuck request ffff888026bee1c0: control (read@1024,1024B). Runtime 90 seconds [ 278.615116][ T11] block nbd0: Possible stuck request ffff888026bee380: control (read@2048,1024B). Runtime 90 seconds [ 278.626005][ T11] block nbd0: Possible stuck request ffff888026bee540: control (read@3072,1024B). Runtime 90 seconds [ 287.157733][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 287.165491][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 287.174177][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 287.182708][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 287.193011][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.391869][T14484] lo speed is unknown, defaulting to 1000 [ 287.664442][T14484] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.671560][T14484] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.679092][T14484] bridge_slave_0: entered allmulticast mode [ 287.686540][T14484] bridge_slave_0: entered promiscuous mode [ 287.695115][T14484] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.702473][T14484] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.709771][T14484] bridge_slave_1: entered allmulticast mode [ 287.717530][T14484] bridge_slave_1: entered promiscuous mode [ 287.742479][T14484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.755795][T14484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.781492][T14484] team0: Port device team_slave_0 added [ 287.789279][T14484] team0: Port device team_slave_1 added [ 287.811775][T14484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.819017][T14484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.845346][T14484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.857298][T14484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.865313][T14484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.892225][T14484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.930203][T14484] hsr_slave_0: entered promiscuous mode [ 287.936418][T14484] hsr_slave_1: entered promiscuous mode [ 287.942378][T14484] debugfs: 'hsr0' already exists in 'hsr' [ 287.948631][T14484] Cannot create hsr debugfs directory [ 288.301047][ T5643] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 288.315252][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 288.315510][ T5643] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 288.331072][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 288.333605][ T5643] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 288.339186][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 288.348109][ T5643] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 288.354170][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 288.361828][ T5643] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 288.373799][ T5643] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 288.451841][ T5643] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 288.467077][ T5643] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 288.476042][ T5643] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 288.485644][ T5643] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 288.496598][ T5643] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 288.949728][T14510] lo speed is unknown, defaulting to 1000 [ 288.968236][T14504] lo speed is unknown, defaulting to 1000 [ 288.977065][T14505] lo speed is unknown, defaulting to 1000 [ 289.232982][ T5643] Bluetooth: hci6: command tx timeout [ 289.459720][T14510] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.468353][T14510] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.476252][T14510] bridge_slave_0: entered allmulticast mode [ 289.484682][T14510] bridge_slave_0: entered promiscuous mode [ 289.511222][T14510] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.518497][T14510] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.525733][T14510] bridge_slave_1: entered allmulticast mode [ 289.532591][T14510] bridge_slave_1: entered promiscuous mode [ 289.611183][T14510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.624567][T14510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.685011][T14510] team0: Port device team_slave_0 added [ 289.696337][T14510] team0: Port device team_slave_1 added [ 289.749668][T14510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.756871][T14510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.783612][T14510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.807981][T14510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.815075][T14510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.841345][T14510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.927787][T14510] hsr_slave_0: entered promiscuous mode [ 289.934282][T14510] hsr_slave_1: entered promiscuous mode [ 289.940299][T14510] debugfs: 'hsr0' already exists in 'hsr' [ 289.946219][T14510] Cannot create hsr debugfs directory [ 289.976159][T14504] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.983449][T14504] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.990727][T14504] bridge_slave_0: entered allmulticast mode [ 289.998216][T14504] bridge_slave_0: entered promiscuous mode [ 290.025020][T14504] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.032749][T14504] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.040263][T14504] bridge_slave_1: entered allmulticast mode [ 290.048425][T14504] bridge_slave_1: entered promiscuous mode [ 290.120218][T14504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.142402][T14504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.220766][T14504] team0: Port device team_slave_0 added [ 290.242472][T14504] team0: Port device team_slave_1 added [ 290.302566][T14505] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.309988][T14505] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.318184][T14505] bridge_slave_0: entered allmulticast mode [ 290.325305][T14505] bridge_slave_0: entered promiscuous mode [ 290.332733][T14504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.339783][T14504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.366778][T14504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.384325][T14505] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.391494][T14505] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.400407][T14505] bridge_slave_1: entered allmulticast mode [ 290.407440][T14505] bridge_slave_1: entered promiscuous mode [ 290.415301][T14504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.422255][T14504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.448416][ T5640] Bluetooth: hci7: command tx timeout [ 290.449322][ T5643] Bluetooth: hci8: command tx timeout [ 290.455238][T14504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.503670][T14505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.514216][ T5643] Bluetooth: hci9: command tx timeout [ 290.541367][T14505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.567990][T14504] hsr_slave_0: entered promiscuous mode [ 290.574462][T14504] hsr_slave_1: entered promiscuous mode [ 290.580433][T14504] debugfs: 'hsr0' already exists in 'hsr' [ 290.586602][T14504] Cannot create hsr debugfs directory [ 290.627218][T14505] team0: Port device team_slave_0 added [ 290.652449][T14505] team0: Port device team_slave_1 added [ 290.721764][T14505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.729204][T14505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.756413][T14505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.774337][T14505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.781290][T14505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.807933][T14505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.882049][T14505] hsr_slave_0: entered promiscuous mode [ 290.888510][T14505] hsr_slave_1: entered promiscuous mode [ 290.894954][T14505] debugfs: 'hsr0' already exists in 'hsr' [ 290.900674][T14505] Cannot create hsr debugfs directory [ 291.313026][ T5643] Bluetooth: hci6: command tx timeout [ 292.513097][ T5640] Bluetooth: hci7: command tx timeout [ 292.520101][ T5643] Bluetooth: hci8: command tx timeout [ 292.592998][ T5643] Bluetooth: hci9: command tx timeout [ 293.392981][ T5643] Bluetooth: hci6: command tx timeout [ 294.594173][ T5643] Bluetooth: hci8: command tx timeout [ 294.595066][ T5640] Bluetooth: hci7: command tx timeout [ 294.673088][ T5640] Bluetooth: hci9: command tx timeout [ 295.473500][ T5640] Bluetooth: hci6: command tx timeout [ 296.672952][ T5640] Bluetooth: hci8: command tx timeout [ 296.683070][ T5640] Bluetooth: hci7: command tx timeout [ 296.753223][ T5640] Bluetooth: hci9: command tx timeout [ 308.683339][ T11] block nbd0: Possible stuck request ffff888026bee000: control (read@0,1024B). Runtime 120 seconds [ 308.694645][ T11] block nbd0: Possible stuck request ffff888026bee1c0: control (read@1024,1024B). Runtime 120 seconds [ 308.705873][ T11] block nbd0: Possible stuck request ffff888026bee380: control (read@2048,1024B). Runtime 120 seconds [ 308.716948][ T11] block nbd0: Possible stuck request ffff888026bee540: control (read@3072,1024B). Runtime 120 seconds [ 327.001306][ T5643] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 327.011321][ T5643] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 327.019204][ T5643] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 327.030108][ T5643] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 327.038513][ T5643] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 327.265048][T14563] lo speed is unknown, defaulting to 1000 [ 327.666036][T14563] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.673569][T14563] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.680713][T14563] bridge_slave_0: entered allmulticast mode [ 327.687974][T14563] bridge_slave_0: entered promiscuous mode [ 327.695831][T14563] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.703732][T14563] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.710860][T14563] bridge_slave_1: entered allmulticast mode [ 327.718036][T14563] bridge_slave_1: entered promiscuous mode [ 327.745981][T14563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.758003][T14563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.785707][T14563] team0: Port device team_slave_0 added [ 327.793705][T14563] team0: Port device team_slave_1 added [ 327.815460][T14563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.822401][T14563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.849175][T14563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.861173][T14563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.868240][T14563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.895404][T14563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.933918][T14563] hsr_slave_0: entered promiscuous mode [ 327.940173][T14563] hsr_slave_1: entered promiscuous mode [ 327.946659][T14563] debugfs: 'hsr0' already exists in 'hsr' [ 327.952383][T14563] Cannot create hsr debugfs directory [ 329.073066][ T5640] Bluetooth: hci10: command tx timeout [ 331.153060][ T5640] Bluetooth: hci10: command tx timeout [ 333.233034][ T5640] Bluetooth: hci10: command tx timeout [ 335.313548][ T5640] Bluetooth: hci10: command tx timeout [ 338.753244][ T11] block nbd0: Possible stuck request ffff888026bee000: control (read@0,1024B). Runtime 150 seconds [ 338.764283][ T11] block nbd0: Possible stuck request ffff888026bee1c0: control (read@1024,1024B). Runtime 150 seconds [ 338.775537][ T11] block nbd0: Possible stuck request ffff888026bee380: control (read@2048,1024B). Runtime 150 seconds [ 338.786551][ T11] block nbd0: Possible stuck request ffff888026bee540: control (read@3072,1024B). Runtime 150 seconds [ 347.522568][ T5643] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 347.530421][ T5643] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 347.539593][ T5643] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 347.548190][ T5643] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 347.556117][ T5643] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 347.757903][T14582] lo speed is unknown, defaulting to 1000 [ 348.034212][T14582] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.041360][T14582] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.048960][T14582] bridge_slave_0: entered allmulticast mode [ 348.056903][T14582] bridge_slave_0: entered promiscuous mode [ 348.064723][T14582] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.071849][T14582] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.079357][T14582] bridge_slave_1: entered allmulticast mode [ 348.086535][T14582] bridge_slave_1: entered promiscuous mode [ 348.111593][T14582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.123665][T14582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.149764][T14582] team0: Port device team_slave_0 added [ 348.157916][T14582] team0: Port device team_slave_1 added [ 348.180197][T14582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.187288][T14582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.213603][T14582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.226573][T14582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.233836][T14582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.259981][T14582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.299130][T14582] hsr_slave_0: entered promiscuous mode [ 348.305467][T14582] hsr_slave_1: entered promiscuous mode [ 348.311441][T14582] debugfs: 'hsr0' already exists in 'hsr' [ 348.317613][T14582] Cannot create hsr debugfs directory [ 348.639706][ T5643] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 348.657727][ T5643] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 348.667086][ T5643] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 348.680793][ T5643] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 348.691359][ T5643] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 348.751992][ T5640] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 348.768428][ T5640] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 348.776323][ T5640] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 348.790921][ T5640] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 348.800882][ T5640] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 348.855128][ T5643] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 348.871339][ T5643] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 348.880388][ T5643] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 348.898437][ T5643] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 348.911521][ T5643] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 349.322393][T14602] lo speed is unknown, defaulting to 1000 [ 349.490743][T14609] lo speed is unknown, defaulting to 1000 [ 349.499359][T14604] lo speed is unknown, defaulting to 1000 [ 349.633146][ T5643] Bluetooth: hci11: command tx timeout [ 349.918769][T14602] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.926127][T14602] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.934288][T14602] bridge_slave_0: entered allmulticast mode [ 349.942212][T14602] bridge_slave_0: entered promiscuous mode [ 349.951013][T14602] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.958780][T14602] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.966980][T14602] bridge_slave_1: entered allmulticast mode [ 349.974530][T14602] bridge_slave_1: entered promiscuous mode [ 350.012532][T14602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.041949][T14602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.096400][T14602] team0: Port device team_slave_0 added [ 350.120396][T14602] team0: Port device team_slave_1 added [ 350.169371][T14602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.177562][T14602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.204356][T14602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.221373][T14602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.228915][T14602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.255475][T14602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.385659][T14602] hsr_slave_0: entered promiscuous mode [ 350.391914][T14602] hsr_slave_1: entered promiscuous mode [ 350.399530][T14602] debugfs: 'hsr0' already exists in 'hsr' [ 350.405583][T14602] Cannot create hsr debugfs directory [ 350.472141][T14609] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.479508][T14609] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.487617][T14609] bridge_slave_0: entered allmulticast mode [ 350.495690][T14609] bridge_slave_0: entered promiscuous mode [ 350.519252][T14609] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.526707][T14609] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.534570][T14609] bridge_slave_1: entered allmulticast mode [ 350.541464][T14609] bridge_slave_1: entered promiscuous mode [ 350.604956][T14609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.627322][T14609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.685641][T14604] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.693081][T14604] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.700249][T14604] bridge_slave_0: entered allmulticast mode [ 350.707940][T14604] bridge_slave_0: entered promiscuous mode [ 350.726000][T14609] team0: Port device team_slave_0 added [ 350.731824][T14604] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.739045][T14604] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.746259][T14604] bridge_slave_1: entered allmulticast mode [ 350.753393][T14604] bridge_slave_1: entered promiscuous mode [ 350.763749][ T5643] Bluetooth: hci12: command tx timeout [ 350.776301][T14609] team0: Port device team_slave_1 added [ 350.833283][T14604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.843508][ T5643] Bluetooth: hci13: command tx timeout [ 350.851418][T14609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.858718][T14609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.885084][T14609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.899024][T14604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.921899][T14609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.929168][T14609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.955900][T14609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.993483][ T5643] Bluetooth: hci14: command tx timeout [ 350.999917][T14604] team0: Port device team_slave_0 added [ 351.009232][T14604] team0: Port device team_slave_1 added [ 351.058202][T14604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.065209][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.092535][T14604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.117844][T14609] hsr_slave_0: entered promiscuous mode [ 351.124441][T14609] hsr_slave_1: entered promiscuous mode [ 351.130535][T14609] debugfs: 'hsr0' already exists in 'hsr' [ 351.136506][T14609] Cannot create hsr debugfs directory [ 351.147744][T14604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.155030][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.181087][T14604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.278375][T14604] hsr_slave_0: entered promiscuous mode [ 351.285087][T14604] hsr_slave_1: entered promiscuous mode [ 351.291371][T14604] debugfs: 'hsr0' already exists in 'hsr' [ 351.297437][T14604] Cannot create hsr debugfs directory [ 351.713139][ T5643] Bluetooth: hci11: command tx timeout [ 352.835468][ T5643] Bluetooth: hci12: command tx timeout [ 352.913148][ T5643] Bluetooth: hci13: command tx timeout [ 353.073043][ T5643] Bluetooth: hci14: command tx timeout [ 353.793010][ T5643] Bluetooth: hci11: command tx timeout [ 354.913179][ T5643] Bluetooth: hci12: command tx timeout [ 354.993862][ T5643] Bluetooth: hci13: command tx timeout [ 355.153069][ T5643] Bluetooth: hci14: command tx timeout [ 355.873574][ T5643] Bluetooth: hci11: command tx timeout [ 356.993127][ T5643] Bluetooth: hci12: command tx timeout [ 357.073154][ T5643] Bluetooth: hci13: command tx timeout [ 357.233182][ T5643] Bluetooth: hci14: command tx timeout [ 368.837313][ T11] block nbd0: Possible stuck request ffff888026bee000: control (read@0,1024B). Runtime 180 seconds [ 368.848554][ T11] block nbd0: Possible stuck request ffff888026bee1c0: control (read@1024,1024B). Runtime 180 seconds [ 368.860143][ T11] block nbd0: Possible stuck request ffff888026bee380: control (read@2048,1024B). Runtime 180 seconds [ 368.871409][ T11] block nbd0: Possible stuck request ffff888026bee540: control (read@3072,1024B). Runtime 180 seconds [ 370.099918][ T4992] udevd[4992]: worker [6984] /devices/virtual/block/nbd0 timeout; kill it [ 370.109333][ T4992] udevd[4992]: seq 14808 '/devices/virtual/block/nbd0' killed [ 380.515328][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 387.569724][ T5640] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 387.578811][ T5640] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 387.587042][ T5640] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 387.596274][ T5640] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 387.605690][ T5640] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 387.819754][T14659] lo speed is unknown, defaulting to 1000 [ 388.096667][T14659] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.105193][T14659] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.112584][T14659] bridge_slave_0: entered allmulticast mode [ 388.120692][T14659] bridge_slave_0: entered promiscuous mode [ 388.128481][T14659] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.135813][T14659] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.143272][T14659] bridge_slave_1: entered allmulticast mode [ 388.150254][T14659] bridge_slave_1: entered promiscuous mode [ 388.175943][T14659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.188280][T14659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.217139][T14659] team0: Port device team_slave_0 added [ 388.225371][T14659] team0: Port device team_slave_1 added [ 388.248466][T14659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.256239][T14659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.283561][T14659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.295587][T14659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.302521][T14659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.329195][T14659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.371535][T14659] hsr_slave_0: entered promiscuous mode [ 388.378115][T14659] hsr_slave_1: entered promiscuous mode [ 388.384628][T14659] debugfs: 'hsr0' already exists in 'hsr' [ 388.390378][T14659] Cannot create hsr debugfs directory [ 389.633726][ T5640] Bluetooth: hci15: command tx timeout [ 391.713166][ T5640] Bluetooth: hci15: command tx timeout [ 393.803789][ T5643] Bluetooth: hci15: command tx timeout [ 395.875799][ T5640] Bluetooth: hci5: command 0x0406 tx timeout [ 395.875811][ T5643] Bluetooth: hci15: command tx timeout [ 398.914140][ T11] block nbd0: Possible stuck request ffff888026bee000: control (read@0,1024B). Runtime 210 seconds [ 398.925069][ T11] block nbd0: Possible stuck request ffff888026bee1c0: control (read@1024,1024B). Runtime 210 seconds [ 398.936142][ T11] block nbd0: Possible stuck request ffff888026bee380: control (read@2048,1024B). Runtime 210 seconds [ 398.947566][ T11] block nbd0: Possible stuck request ffff888026bee540: control (read@3072,1024B). Runtime 210 seconds [ 407.603001][ T5640] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 407.612578][ T5640] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 407.620568][ T5640] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 407.631786][ T5640] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 407.642235][ T5640] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 407.846475][T14680] lo speed is unknown, defaulting to 1000 [ 408.136576][T14680] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.143760][T14680] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.150979][T14680] bridge_slave_0: entered allmulticast mode [ 408.158506][T14680] bridge_slave_0: entered promiscuous mode [ 408.166412][T14680] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.173727][T14680] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.181099][T14680] bridge_slave_1: entered allmulticast mode [ 408.188685][T14680] bridge_slave_1: entered promiscuous mode [ 408.216521][T14680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.228344][T14680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.255747][T14680] team0: Port device team_slave_0 added [ 408.263694][T14680] team0: Port device team_slave_1 added [ 408.287542][T14680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.294848][T14680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.321429][T14680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.335533][T14680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.342466][T14680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.368762][T14680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.408708][T14680] hsr_slave_0: entered promiscuous mode [ 408.415204][T14680] hsr_slave_1: entered promiscuous mode [ 408.421261][T14680] debugfs: 'hsr0' already exists in 'hsr' [ 408.427325][T14680] Cannot create hsr debugfs directory [ 408.678508][ T5640] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 408.699903][ T5640] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 408.708342][ T5640] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 408.717147][ T5640] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 408.725064][ T5640] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 408.760273][ T5640] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 408.778275][ T5640] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 408.788315][ T5640] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 408.798925][ T5640] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 408.807323][ T5640] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 409.188103][T14699] lo speed is unknown, defaulting to 1000 [ 409.271046][T14701] lo speed is unknown, defaulting to 1000 [ 409.698359][ T50] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 409.710237][ T50] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 409.718433][ T5635] Bluetooth: hci16: command tx timeout [ 409.719341][T14699] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.729203][ T50] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 409.731946][T14699] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.740808][ T50] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 409.746503][T14699] bridge_slave_0: entered allmulticast mode [ 409.754450][ T50] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 409.769063][T14699] bridge_slave_0: entered promiscuous mode [ 409.808454][T14699] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.818256][T14699] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.826451][T14699] bridge_slave_1: entered allmulticast mode [ 409.836172][T14699] bridge_slave_1: entered promiscuous mode [ 409.893702][T14699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.906962][T14699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.968286][T14699] team0: Port device team_slave_0 added [ 409.980692][T14699] team0: Port device team_slave_1 added [ 410.026464][T14699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.034420][T14699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.065422][T14699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.081239][T14699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.090149][T14699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.117912][T14699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.234676][T14699] hsr_slave_0: entered promiscuous mode [ 410.241104][T14699] hsr_slave_1: entered promiscuous mode [ 410.248158][T14699] debugfs: 'hsr0' already exists in 'hsr' [ 410.253930][T14699] Cannot create hsr debugfs directory [ 410.270843][T14728] lo speed is unknown, defaulting to 1000 [ 410.325579][T14701] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.333421][T14701] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.341013][T14701] bridge_slave_0: entered allmulticast mode [ 410.349829][T14701] bridge_slave_0: entered promiscuous mode [ 410.374740][T14701] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.393040][T14701] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.401121][T14701] bridge_slave_1: entered allmulticast mode [ 410.410722][T14701] bridge_slave_1: entered promiscuous mode [ 410.493914][T14701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.520125][T14701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.603896][T14701] team0: Port device team_slave_0 added [ 410.622730][T14701] team0: Port device team_slave_1 added [ 410.697601][T14701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.706003][T14701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.732581][T14701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.746611][T14701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.754021][ T50] Bluetooth: hci17: command tx timeout [ 410.755767][T14701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.786584][T14701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.833217][ T50] Bluetooth: hci18: command tx timeout [ 410.849141][T14701] hsr_slave_0: entered promiscuous mode [ 410.855932][T14701] hsr_slave_1: entered promiscuous mode [ 410.861977][T14701] debugfs: 'hsr0' already exists in 'hsr' [ 410.868394][T14701] Cannot create hsr debugfs directory [ 411.190249][T14728] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.198268][T14728] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.205608][T14728] bridge_slave_0: entered allmulticast mode [ 411.212646][T14728] bridge_slave_0: entered promiscuous mode [ 411.221084][T14728] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.228518][T14728] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.241255][ T50] Bluetooth: hci9: command 0x0406 tx timeout [ 411.247869][ T5643] Bluetooth: hci7: command 0x0406 tx timeout [ 411.262217][T14728] bridge_slave_1: entered allmulticast mode [ 411.262658][ T5635] Bluetooth: hci6: command 0x0406 tx timeout [ 411.268708][ T50] Bluetooth: hci8: command 0x0406 tx timeout [ 411.300452][T14728] bridge_slave_1: entered promiscuous mode [ 411.351607][T14728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.374320][T14728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.402361][T14728] team0: Port device team_slave_0 added [ 411.412057][T14728] team0: Port device team_slave_1 added [ 411.445999][T14728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.454234][T14728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.481021][T14728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.496120][T14728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.503561][T14728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.529778][T14728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.575515][T14728] hsr_slave_0: entered promiscuous mode [ 411.581801][T14728] hsr_slave_1: entered promiscuous mode [ 411.588463][T14728] debugfs: 'hsr0' already exists in 'hsr' [ 411.594798][T14728] Cannot create hsr debugfs directory [ 411.793139][ T5640] Bluetooth: hci19: command tx timeout [ 411.793436][ T4942] Bluetooth: hci16: command tx timeout [ 412.833021][ T4942] Bluetooth: hci17: command tx timeout [ 412.913926][ T4942] Bluetooth: hci18: command tx timeout [ 413.873133][ T5640] Bluetooth: hci19: command tx timeout [ 413.874815][ T4942] Bluetooth: hci16: command tx timeout [ 414.913561][ T4942] Bluetooth: hci17: command tx timeout [ 414.993463][ T4942] Bluetooth: hci18: command tx timeout [ 415.953503][ T4942] Bluetooth: hci19: command tx timeout [ 415.953514][ T5640] Bluetooth: hci16: command tx timeout [ 417.003119][ T4942] Bluetooth: hci17: command tx timeout [ 417.073092][ T4942] Bluetooth: hci18: command tx timeout [ 418.033352][ T4942] Bluetooth: hci19: command tx timeout [ 428.993670][ T11] block nbd0: Possible stuck request ffff888026bee000: control (read@0,1024B). Runtime 240 seconds [ 429.004935][ T11] block nbd0: Possible stuck request ffff888026bee1c0: control (read@1024,1024B). Runtime 240 seconds [ 429.016413][ T11] block nbd0: Possible stuck request ffff888026bee380: control (read@2048,1024B). Runtime 240 seconds [ 429.027598][ T11] block nbd0: Possible stuck request ffff888026bee540: control (read@3072,1024B). Runtime 240 seconds [ 432.193533][ T30] INFO: task syz-executor:14184 blocked for more than 143 seconds. [ 432.201491][ T30] Not tainted syzkaller #0 [ 432.207025][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.215760][ T30] task:syz-executor state:D stack:22280 pid:14184 tgid:14184 ppid:1 task_flags:0x400140 flags:0x00080002 [ 432.227724][ T30] Call Trace: [ 432.231035][ T30] [ 432.234410][ T30] __schedule+0x17b4/0x5680 [ 432.238923][ T30] ? __lock_acquire+0x6b5/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 432.244030][ T30] ? __pfx___schedule+0x10/0x10 [ 432.249429][ T30] ? schedule+0x90/0x360 [ 432.253878][ T30] schedule+0x164/0x360 [ 432.258369][ T30] schedule_preempt_disabled+0x13/0x30 [ 432.264477][ T30] __mutex_lock+0x7f7/0x1550 [ 432.269100][ T30] ? kernel_text_address+0xa5/0xe0 [ 432.285967][ T30] ? __mutex_lock+0x608/0x1550 [ 432.302654][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 432.324137][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 432.342882][ T30] ? stack_trace_save+0xa9/0x100 [ 432.347916][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 432.354279][ T30] ? radix_tree_lookup+0x240/0x290 [ 432.359442][ T30] genl_rcv_msg+0x10b/0x7a0 [ 432.364052][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.369116][ T30] netlink_rcv_skb+0x232/0x4b0 [ 432.373916][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.378956][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.384735][ T30] ? down_read+0x270/0x2e0 [ 432.389166][ T30] ? genl_rcv+0xd/0x40 [ 432.393545][ T30] genl_rcv+0x28/0x40 [ 432.397542][ T30] netlink_unicast+0x75c/0x8e0 [ 432.402293][ T30] netlink_sendmsg+0x813/0xb40 [ 432.407126][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.412429][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 432.417903][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.423244][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.428533][ T30] __sys_sendto+0x672/0x710 [ 432.433330][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 432.438398][ T30] ? fd_install+0x94/0x3d0 [ 432.443348][ T30] ? fd_install+0x306/0x3d0 [ 432.447851][ T30] __x64_sys_sendto+0xde/0x100 [ 432.452688][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.459027][ T30] do_syscall_64+0x15f/0xf80 [ 432.463749][ T30] ? trace_irq_disable+0x3b/0x140 [ 432.468791][ T30] ? clear_bhb_loop+0x40/0x90 [ 432.473936][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.479827][ T30] RIP: 0033:0x7f4f3035d60e [ 432.484296][ T30] RSP: 002b:00007ffe9a84bb18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 432.493008][ T30] RAX: ffffffffffffffda RBX: 0000555565105500 RCX: 00007f4f3035d60e [ 432.501033][ T30] RDX: 0000000000000020 RSI: 00007f4f31144670 RDI: 0000000000000005 [ 432.509512][ T30] RBP: 0000000000000001 R08: 00007ffe9a84bb94 R09: 000000000000000c [ 432.517725][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 432.525802][ T30] R13: 00007ffe9a84bbe8 R14: 00007f4f31144670 R15: 0000000000000000 [ 432.534319][ T30] [ 432.537361][ T30] INFO: task syz.0.2344:14446 blocked for more than 143 seconds. [ 432.545170][ T30] Not tainted syzkaller #0 [ 432.550101][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.558802][ T30] task:syz.0.2344 state:D stack:24064 pid:14446 tgid:14444 ppid:5625 task_flags:0x480140 flags:0x00080002 [ 432.571025][ T30] Call Trace: [ 432.574503][ T30] [ 432.577459][ T30] __schedule+0x17b4/0x5680 [ 432.581956][ T30] ? lapic_next_event+0x11/0x20 [ 432.586874][ T30] ? clockevents_program_event+0x491/0x630 [ 432.592707][ T30] ? __pfx___schedule+0x10/0x10 [ 432.598473][ T30] ? schedule+0x90/0x360 [ 432.602741][ T30] schedule+0x164/0x360 [ 432.607094][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 432.612649][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 432.618789][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 432.625432][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 432.631515][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 432.637726][ T30] nbd_set_size+0x454/0x680 [ 432.642242][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 432.647348][ T30] ? nla_memcpy+0x5b/0xc0 [ 432.651727][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 432.657584][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 432.663383][ T30] ? rcu_is_watching+0x15/0xb0 [ 432.668162][ T30] ? trace_kmalloc+0x2a/0xf0 [ 432.672745][ T30] ? __nla_parse+0x40/0x60 [ 432.677220][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 432.684380][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 432.690831][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 432.696426][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 432.702743][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 432.707776][ T30] genl_rcv_msg+0x61c/0x7a0 [ 432.712278][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.717803][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 432.723613][ T30] netlink_rcv_skb+0x232/0x4b0 [ 432.728389][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.733470][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.738774][ T30] ? down_read+0x270/0x2e0 [ 432.743669][ T30] ? genl_rcv+0xd/0x40 [ 432.747742][ T30] genl_rcv+0x28/0x40 [ 432.751966][ T30] netlink_unicast+0x75c/0x8e0 [ 432.757009][ T30] netlink_sendmsg+0x813/0xb40 [ 432.761813][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.767179][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 432.772178][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.777981][ T30] ____sys_sendmsg+0x972/0x9f0 [ 432.782741][ T30] ? __might_fault+0xaf/0x130 [ 432.787465][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.792742][ T30] ? import_iovec+0x73/0xa0 [ 432.797494][ T30] ___sys_sendmsg+0x2a5/0x360 [ 432.802332][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 432.807801][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.813065][ T30] ? futex_wait+0x2a2/0x390 [ 432.817592][ T30] ? __fget_files+0x2a/0x420 [ 432.822175][ T30] ? __fget_files+0x3a0/0x420 [ 432.826914][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 432.831864][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.838129][ T30] ? rcu_is_watching+0x15/0xb0 [ 432.842988][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.849074][ T30] do_syscall_64+0x15f/0xf80 [ 432.853821][ T30] ? trace_irq_disable+0x3b/0x140 [ 432.858856][ T30] ? clear_bhb_loop+0x40/0x90 [ 432.863935][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.869821][ T30] RIP: 0033:0x7fa4fd79cdd9 [ 432.874318][ T30] RSP: 002b:00007fa4fe62e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.882904][ T30] RAX: ffffffffffffffda RBX: 00007fa4fda15fa0 RCX: 00007fa4fd79cdd9 [ 432.890896][ T30] RDX: 0000000020000804 RSI: 0000200000001900 RDI: 000000000000000a [ 432.899426][ T30] RBP: 00007fa4fd832d69 R08: 0000000000000000 R09: 0000000000000000 [ 432.908155][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.916501][ T30] R13: 00007fa4fda16038 R14: 00007fa4fda15fa0 R15: 00007fff7e948878 [ 432.924804][ T30] [ 432.927824][ T30] INFO: task syz.1.2347:14460 blocked for more than 144 seconds. [ 432.935623][ T30] Not tainted syzkaller #0 [ 432.940573][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.949306][ T30] task:syz.1.2347 state:D stack:27904 pid:14460 tgid:14456 ppid:5631 task_flags:0x400040 flags:0x00080002 [ 432.961872][ T30] Call Trace: [ 432.965222][ T30] [ 432.968153][ T30] __schedule+0x17b4/0x5680 [ 432.972643][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 432.977648][ T30] ? __pfx___schedule+0x10/0x10 [ 432.982504][ T30] ? schedule+0x90/0x360 [ 432.987178][ T30] schedule+0x164/0x360 [ 432.991331][ T30] schedule_preempt_disabled+0x13/0x30 [ 432.996966][ T30] __mutex_lock+0x7f7/0x1550 [ 433.001600][ T30] ? __mutex_lock+0x608/0x1550 [ 433.006724][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 433.011421][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 433.017063][ T30] ? radix_tree_lookup+0x240/0x290 [ 433.022185][ T30] genl_rcv_msg+0x10b/0x7a0 [ 433.026746][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.031778][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 433.037213][ T30] netlink_rcv_skb+0x232/0x4b0 [ 433.041980][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.047426][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.052715][ T30] ? down_read+0x270/0x2e0 [ 433.057164][ T30] ? genl_rcv+0xd/0x40 [ 433.061849][ T30] genl_rcv+0x28/0x40 [ 433.065883][ T30] netlink_unicast+0x75c/0x8e0 [ 433.070661][ T30] netlink_sendmsg+0x813/0xb40 [ 433.078370][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.083727][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.088666][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.093993][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.099281][ T30] __sys_sendto+0x672/0x710 [ 433.104190][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 433.109408][ T30] ? exc_page_fault+0x6a/0xc0 [ 433.114180][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 433.119565][ T30] __x64_sys_sendto+0xde/0x100 [ 433.124511][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.130609][ T30] do_syscall_64+0x15f/0xf80 [ 433.135667][ T30] ? trace_irq_disable+0x3b/0x140 [ 433.140951][ T30] ? clear_bhb_loop+0x40/0x90 [ 433.145686][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.151579][ T30] RIP: 0033:0x7fb85435d60e [ 433.156117][ T30] RSP: 002b:00007fb8551eae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 433.164834][ T30] RAX: ffffffffffffffda RBX: 00007fb8551ec6c0 RCX: 00007fb85435d60e [ 433.172843][ T30] RDX: 0000000000000020 RSI: 00007fb8551eb000 RDI: 0000000000000004 [ 433.180816][ T30] RBP: 0000000000000000 R08: 00007fb8551eaf04 R09: 000000000000000c [ 433.188849][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 433.197113][ T30] R13: 00007fb8551eaf58 R14: 00007fb8551eb000 R15: 0000000000000000 [ 433.205134][ T30] [ 433.208161][ T30] INFO: task syz.4.2350:14471 blocked for more than 144 seconds. [ 433.218975][ T30] Not tainted syzkaller #0 [ 433.224330][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.233209][ T30] task:syz.4.2350 state:D stack:28344 pid:14471 tgid:14470 ppid:5624 task_flags:0x400040 flags:0x00080002 [ 433.245220][ T30] Call Trace: [ 433.248502][ T30] [ 433.251434][ T30] __schedule+0x17b4/0x5680 [ 433.256495][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 433.261459][ T30] ? __pfx___schedule+0x10/0x10 [ 433.266338][ T30] ? schedule+0x90/0x360 [ 433.270586][ T30] schedule+0x164/0x360 [ 433.274793][ T30] schedule_preempt_disabled+0x13/0x30 [ 433.280252][ T30] __mutex_lock+0x7f7/0x1550 [ 433.285253][ T30] ? kernel_text_address+0xa5/0xe0 [ 433.290706][ T30] ? __mutex_lock+0x608/0x1550 [ 433.295545][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 433.300238][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 433.305324][ T30] ? stack_trace_save+0xa9/0x100 [ 433.310270][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 433.316466][ T30] ? radix_tree_lookup+0x240/0x290 [ 433.321602][ T30] genl_rcv_msg+0x10b/0x7a0 [ 433.326153][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.331197][ T30] netlink_rcv_skb+0x232/0x4b0 [ 433.336006][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.341061][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.346883][ T30] ? down_read+0x270/0x2e0 [ 433.351312][ T30] ? genl_rcv+0xd/0x40 [ 433.355423][ T30] genl_rcv+0x28/0x40 [ 433.359411][ T30] netlink_unicast+0x75c/0x8e0 [ 433.364258][ T30] netlink_sendmsg+0x813/0xb40 [ 433.369048][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.374774][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.379708][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.385033][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.390437][ T30] __sys_sendto+0x672/0x710 [ 433.396622][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 433.401686][ T30] ? exc_page_fault+0x6a/0xc0 [ 433.406875][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 433.412163][ T30] __x64_sys_sendto+0xde/0x100 [ 433.417228][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.423434][ T30] do_syscall_64+0x15f/0xf80 [ 433.428030][ T30] ? trace_irq_disable+0x3b/0x140 [ 433.433516][ T30] ? clear_bhb_loop+0x40/0x90 [ 433.438190][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.444113][ T30] RIP: 0033:0x7f9684f5d60e [ 433.448527][ T30] RSP: 002b:00007f9685dace88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 433.457261][ T30] RAX: ffffffffffffffda RBX: 00007f9685dae6c0 RCX: 00007f9684f5d60e [ 433.465553][ T30] RDX: 0000000000000020 RSI: 00007f9685dad000 RDI: 0000000000000005 [ 433.473993][ T30] RBP: 0000000000000000 R08: 00007f9685dacf04 R09: 000000000000000c [ 433.481996][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 433.490103][ T30] R13: 00007f9685dacf58 R14: 00007f9685dad000 R15: 0000000000000000 [ 433.498650][ T30] [ 433.501706][ T30] INFO: task syz.4.2350:14472 blocked for more than 144 seconds. [ 433.509556][ T30] Not tainted syzkaller #0 [ 433.514529][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.523986][ T30] task:syz.4.2350 state:D stack:28088 pid:14472 tgid:14470 ppid:5624 task_flags:0x400140 flags:0x00080002 [ 433.535993][ T30] Call Trace: [ 433.539281][ T30] [ 433.542205][ T30] __schedule+0x17b4/0x5680 [ 433.546818][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 433.553586][ T30] ? __pfx___schedule+0x10/0x10 [ 433.559096][ T30] ? schedule+0x90/0x360 [ 433.563526][ T30] schedule+0x164/0x360 [ 433.567718][ T30] schedule_preempt_disabled+0x13/0x30 [ 433.573219][ T30] __mutex_lock+0x7f7/0x1550 [ 433.577847][ T30] ? kernel_text_address+0xa5/0xe0 [ 433.583412][ T30] ? __mutex_lock+0x608/0x1550 [ 433.588261][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 433.592986][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 433.598034][ T30] ? stack_trace_save+0xa9/0x100 [ 433.603032][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 433.607977][ T30] ? radix_tree_lookup+0x240/0x290 [ 433.613650][ T30] genl_rcv_msg+0x10b/0x7a0 [ 433.618503][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.623609][ T30] netlink_rcv_skb+0x232/0x4b0 [ 433.628381][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.633485][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.638792][ T30] ? down_read+0x270/0x2e0 [ 433.643778][ T30] ? genl_rcv+0xd/0x40 [ 433.647865][ T30] genl_rcv+0x28/0x40 [ 433.651853][ T30] netlink_unicast+0x75c/0x8e0 [ 433.656650][ T30] netlink_sendmsg+0x813/0xb40 [ 433.661438][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.666787][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.671736][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.677677][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.683033][ T30] __sys_sendto+0x672/0x710 [ 433.687549][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 433.692680][ T30] ? exc_page_fault+0x6a/0xc0 [ 433.697419][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 433.702710][ T30] __x64_sys_sendto+0xde/0x100 [ 433.707890][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.714249][ T30] do_syscall_64+0x15f/0xf80 [ 433.718871][ T30] ? trace_irq_disable+0x3b/0x140 [ 433.724219][ T30] ? clear_bhb_loop+0x40/0x90 [ 433.728914][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.735214][ T30] RIP: 0033:0x7f9684f5d60e [ 433.739621][ T30] RSP: 002b:00007f9685d8be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 433.748060][ T30] RAX: ffffffffffffffda RBX: 00007f9685d8d6c0 RCX: 00007f9684f5d60e [ 433.756074][ T30] RDX: 0000000000000024 RSI: 00007f9685d8c000 RDI: 0000000000000048 [ 433.764621][ T30] RBP: 0000000000000000 R08: 00007f9685d8bf04 R09: 000000000000000c [ 433.772594][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000048 [ 433.780625][ T30] R13: 00007f9685d8bf58 R14: 00007f9685d8c000 R15: 0000000000000000 [ 433.788835][ T30] [ 433.791872][ T30] INFO: task syz.3.2352:14479 blocked for more than 144 seconds. [ 433.800539][ T30] Not tainted syzkaller #0 [ 433.805513][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.814208][ T30] task:syz.3.2352 state:D stack:27904 pid:14479 tgid:14478 ppid:5623 task_flags:0x400140 flags:0x00080002 [ 433.826626][ T30] Call Trace: [ 433.829909][ T30] [ 433.832884][ T30] __schedule+0x17b4/0x5680 [ 433.837398][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 433.842333][ T30] ? __pfx___schedule+0x10/0x10 [ 433.847489][ T30] ? schedule+0x90/0x360 [ 433.851911][ T30] schedule+0x164/0x360 [ 433.856468][ T30] schedule_preempt_disabled+0x13/0x30 [ 433.861920][ T30] __mutex_lock+0x7f7/0x1550 [ 433.866560][ T30] ? __mutex_lock+0x608/0x1550 [ 433.871327][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 433.877225][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 433.882407][ T30] ? radix_tree_lookup+0x240/0x290 [ 433.888021][ T30] genl_rcv_msg+0x10b/0x7a0 [ 433.892611][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.897809][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 433.903273][ T30] netlink_rcv_skb+0x232/0x4b0 [ 433.908027][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.913497][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.918792][ T30] ? down_read+0x270/0x2e0 [ 433.923237][ T30] ? genl_rcv+0xd/0x40 [ 433.927480][ T30] genl_rcv+0x28/0x40 [ 433.931473][ T30] netlink_unicast+0x75c/0x8e0 [ 433.936283][ T30] netlink_sendmsg+0x813/0xb40 [ 433.941055][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.946747][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.951688][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.957208][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.962685][ T30] __sys_sendto+0x672/0x710 [ 433.967266][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 433.972303][ T30] ? exc_page_fault+0x6a/0xc0 [ 433.977465][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 433.982743][ T30] __x64_sys_sendto+0xde/0x100 [ 433.987548][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.993697][ T30] do_syscall_64+0x15f/0xf80 [ 433.998294][ T30] ? trace_irq_disable+0x3b/0x140 [ 434.003829][ T30] ? clear_bhb_loop+0x40/0x90 [ 434.008534][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.014492][ T30] RIP: 0033:0x7fd49bd5d60e [ 434.018914][ T30] RSP: 002b:00007fd49cbf7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 434.027377][ T30] RAX: ffffffffffffffda RBX: 00007fd49cbf96c0 RCX: 00007fd49bd5d60e [ 434.036397][ T30] RDX: 0000000000000024 RSI: 00007fd49cbf8000 RDI: 0000000000000004 [ 434.044444][ T30] RBP: 0000000000000000 R08: 00007fd49cbf7f04 R09: 000000000000000c [ 434.052417][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 434.060548][ T30] R13: 00007fd49cbf7f58 R14: 00007fd49cbf8000 R15: 0000000000000000 [ 434.068835][ T30] [ 434.071871][ T30] INFO: task syz-executor:14484 blocked for more than 145 seconds. [ 434.079887][ T30] Not tainted syzkaller #0 [ 434.084960][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.094144][ T30] task:syz-executor state:D stack:22600 pid:14484 tgid:14484 ppid:1 task_flags:0x400140 flags:0x00080002 [ 434.106092][ T30] Call Trace: [ 434.109369][ T30] [ 434.112285][ T30] __schedule+0x17b4/0x5680 [ 434.119839][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 434.125233][ T30] ? ktime_get+0x45/0x220 [ 434.129586][ T30] ? __pfx___schedule+0x10/0x10 [ 434.135128][ T30] ? schedule+0x90/0x360 [ 434.139407][ T30] schedule+0x164/0x360 [ 434.143656][ T30] schedule_preempt_disabled+0x13/0x30 [ 434.149139][ T30] __mutex_lock+0x7f7/0x1550 [ 434.153793][ T30] ? __mutex_lock+0x608/0x1550 [ 434.158585][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 434.163917][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 434.168987][ T30] ? __schedule+0x17ca/0x5680 [ 434.173947][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 434.178889][ T30] ? radix_tree_lookup+0x240/0x290 [ 434.184093][ T30] genl_rcv_msg+0x10b/0x7a0 [ 434.188628][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.194398][ T30] netlink_rcv_skb+0x232/0x4b0 [ 434.199226][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.204370][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 434.209686][ T30] ? down_read+0x270/0x2e0 [ 434.214310][ T30] ? genl_rcv+0xd/0x40 [ 434.218386][ T30] genl_rcv+0x28/0x40 [ 434.222352][ T30] netlink_unicast+0x75c/0x8e0 [ 434.227840][ T30] netlink_sendmsg+0x813/0xb40 [ 434.233258][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.238582][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 434.243738][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 434.249054][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.254426][ T30] __sys_sendto+0x672/0x710 [ 434.258938][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 434.264257][ T30] ? fd_install+0x94/0x3d0 [ 434.268707][ T30] ? fd_install+0x306/0x3d0 [ 434.273728][ T30] __x64_sys_sendto+0xde/0x100 [ 434.278524][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.284980][ T30] do_syscall_64+0x15f/0xf80 [ 434.289590][ T30] ? trace_irq_disable+0x3b/0x140 [ 434.294887][ T30] ? clear_bhb_loop+0x40/0x90 [ 434.299571][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.305676][ T30] RIP: 0033:0x7f90ccf5d60e [ 434.310110][ T30] RSP: 002b:00007ffd8c47cc38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 434.319140][ T30] RAX: ffffffffffffffda RBX: 000055557b5ea500 RCX: 00007f90ccf5d60e [ 434.327257][ T30] RDX: 0000000000000020 RSI: 00007f90cdd44670 RDI: 0000000000000005 [ 434.335868][ T30] RBP: 0000000000000001 R08: 00007ffd8c47ccb4 R09: 000000000000000c [ 434.344111][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 434.352091][ T30] R13: 00007ffd8c47cd08 R14: 00007f90cdd44670 R15: 0000000000000000 [ 434.361013][ T30] [ 434.364394][ T30] [ 434.364394][ T30] Showing all locks held in the system: [ 434.372126][ T30] 1 lock held by khungtaskd/30: [ 434.377837][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 434.387893][ T30] 1 lock held by klogd/4981: [ 434.392590][ T30] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 434.402684][ T30] 2 locks held by getty/5385: [ 434.407523][ T30] #0: ffff8880363890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 434.417368][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 434.427625][ T30] 1 lock held by udevd/6984: [ 434.432207][ T30] #0: ffff888026b4e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 434.442138][ T30] 2 locks held by syz-executor/14184: [ 434.447697][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.456149][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.465251][ T30] 6 locks held by syz.0.2344/14446: [ 434.470465][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.478802][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.488111][ T30] #2: ffff888026b40260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 434.499164][ T30] #3: ffff888026ba47c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 434.508780][ T30] #4: ffff888026ba4190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 434.521158][ T30] #5: ffff888026ba41c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 434.533737][ T30] 2 locks held by syz.1.2347/14460: [ 434.538959][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.547484][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.556771][ T30] 2 locks held by syz.4.2350/14471: [ 434.561991][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.570442][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.579588][ T30] 2 locks held by syz.4.2350/14472: [ 434.584862][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.593373][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.602576][ T30] 2 locks held by syz.3.2352/14479: [ 434.607864][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.616306][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.625449][ T30] 2 locks held by syz-executor/14484: [ 434.630821][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.639216][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.648651][ T30] 2 locks held by syz-executor/14504: [ 434.654209][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.662443][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.671654][ T30] 2 locks held by syz-executor/14505: [ 434.677658][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.686485][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.695593][ T30] 2 locks held by syz-executor/14510: [ 434.700964][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.709248][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.718592][ T30] 2 locks held by syz-executor/14563: [ 434.724411][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.732644][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.741711][ T30] 2 locks held by syz-executor/14582: [ 434.747822][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.756544][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.765585][ T30] 2 locks held by syz-executor/14602: [ 434.770952][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.779647][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.788654][ T30] 2 locks held by syz-executor/14604: [ 434.794062][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.802231][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.811686][ T30] 2 locks held by syz-executor/14609: [ 434.817119][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.825350][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.834842][ T30] 2 locks held by syz-executor/14659: [ 434.840213][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.848673][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.858071][ T30] 2 locks held by syz-executor/14680: [ 434.863964][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.872235][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.881446][ T30] 2 locks held by syz-executor/14699: [ 434.887096][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.895736][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.905309][ T30] 2 locks held by syz-executor/14701: [ 434.910708][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.919444][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.928674][ T30] 2 locks held by syz-executor/14728: [ 434.934186][ T30] #0: ffffffff8fe3e8e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.942468][ T30] #1: ffffffff8fe3e720 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 434.952708][ T30] [ 434.955448][ T30] ============================================= [ 434.955448][ T30] [ 434.964002][ T30] NMI backtrace for cpu 0 [ 434.964024][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 434.964043][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.964054][ T30] Call Trace: [ 434.964061][ T30] [ 434.964069][ T30] dump_stack_lvl+0xe8/0x150 [ 434.964095][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 434.964114][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 434.964135][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 434.964156][ T30] sys_info+0x135/0x170 [ 434.964180][ T30] watchdog+0xfd3/0x1030 [ 434.964212][ T30] ? watchdog+0x1c9/0x1030 [ 434.964242][ T30] kthread+0x388/0x470 [ 434.964264][ T30] ? __pfx_watchdog+0x10/0x10 [ 434.964285][ T30] ? __pfx_kthread+0x10/0x10 [ 434.964309][ T30] ret_from_fork+0x514/0xb70 [ 434.964332][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 434.964352][ T30] ? __switch_to+0xc79/0x1410 [ 434.964379][ T30] ? __pfx_kthread+0x10/0x10 [ 434.964402][ T30] ret_from_fork_asm+0x1a/0x30 [ 434.964438][ T30] [ 434.964444][ T30] Sending NMI from CPU 0 to CPUs 1: [ 435.076366][ C1] NMI backtrace for cpu 1 [ 435.076382][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 435.076399][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 435.076408][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 435.076428][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 2b d8 87 f5 cc [ 435.076441][ C1] RSP: 0018:ffffc90000197d30 EFLAGS: 00000002 [ 435.076455][ C1] RAX: 0000000000000001 RBX: ffffffff8ba86afe RCX: 0000000080000001 [ 435.076470][ C1] RDX: 0000000000000000 RSI: ffffffff8e00d8e3 RDI: ffffffff8c28abe0 [ 435.076481][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.076490][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 435.076498][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.076508][ C1] FS: 0000000000000000(0000) GS:ffff88812538f000(0000) knlGS:0000000000000000 [ 435.076520][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.076530][ C1] CR2: 000056171a6eeee8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 435.076544][ C1] Call Trace: [ 435.076550][ C1] [ 435.076555][ C1] lockdep_hardirqs_off+0x8d/0xd0 [ 435.076577][ C1] irqentry_enter+0x9f/0x130 [ 435.076594][ C1] sysvec_call_function_single+0xe/0xc0 [ 435.076612][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 435.076629][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 435.076647][ C1] Code: 0b 7e 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f1 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 435.076659][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 435.076672][ C1] RAX: 00000000001f4603 RBX: ffffffff819a815a RCX: 0000000080000001 [ 435.076682][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa8972 RDI: ffffffff8c28abe0 [ 435.076692][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 435.076703][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 435.076713][ C1] R13: 1ffff11003b5d000 R14: 0000000000000001 R15: 1ffff11003b5d000 [ 435.076725][ C1] ? do_idle+0x36a/0x5f0 [ 435.076747][ C1] default_idle+0x9/0x20 [ 435.076766][ C1] default_idle_call+0x72/0xb0 [ 435.076786][ C1] do_idle+0x36a/0x5f0 [ 435.076805][ C1] ? __pfx_do_idle+0x10/0x10 [ 435.076825][ C1] cpu_startup_entry+0x43/0x60 [ 435.076842][ C1] start_secondary+0x101/0x110 [ 435.076856][ C1] common_startup_64+0x13e/0x147 [ 435.076884][ C1] [ 435.339587][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 435.346439][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 435.355530][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 435.365577][ T30] Call Trace: [ 435.368845][ T30] [ 435.371759][ T30] vpanic+0x56c/0xa60 [ 435.375734][ T30] ? __pfx___schedule+0x10/0x10 [ 435.380587][ T30] ? __pfx_vpanic+0x10/0x10 [ 435.385096][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 435.391539][ T30] panic+0xc5/0xd0 [ 435.395275][ T30] ? __pfx_panic+0x10/0x10 [ 435.399691][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 435.405119][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 435.411275][ T30] watchdog+0x102c/0x1030 [ 435.415619][ T30] ? watchdog+0x1c9/0x1030 [ 435.420036][ T30] kthread+0x388/0x470 [ 435.424097][ T30] ? __pfx_watchdog+0x10/0x10 [ 435.428763][ T30] ? __pfx_kthread+0x10/0x10 [ 435.433351][ T30] ret_from_fork+0x514/0xb70 [ 435.437932][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 435.443027][ T30] ? __switch_to+0xc79/0x1410 [ 435.447700][ T30] ? __pfx_kthread+0x10/0x10 [ 435.452282][ T30] ret_from_fork_asm+0x1a/0x30 [ 435.457051][ T30] [ 435.460690][ T30] Kernel Offset: disabled [ 435.465051][ T30] Rebooting in 86400 seconds..