last executing test programs: 14m32.661145307s ago: executing program 0 (id=7756): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x30, r4, 0x5, 0x40000000, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4002}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x4048800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xdd}}], 0x38}, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x2}, @sack_perm, @mss={0x2, 0x8}, @mss, @sack_perm, @mss={0x2, 0x5}, @timestamp, @sack_perm], 0x8) sendmsg(r6, &(0x7f0000008500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="c8986d5d4000fd3374e15671de46ce993ae088c84f0cc1a1d48675f64443b0b9838879d94971c6f6297967", 0x2b}], 0x1}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be60004000007000000", @ANYRES32=r8, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m31.689297833s ago: executing program 0 (id=7769): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000040)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003f60000000001010101", 0x2e}], 0x1, 0x6, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f00000007c0)="00214500001400000000400600000a0000010a000002005000500000ffff00000001683003e80000e40201010101", 0x2e}], 0x1, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m27.982969755s ago: executing program 0 (id=7776): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000001c0)={{0x8, @local, 0x4e21, 0x1, 'none\x00', 0x20, 0xffff2599, 0x3d}, {@empty, 0x4e23, 0x2, 0x2, 0x4, 0x7}}, 0x44) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r2 = accept(r1, &(0x7f0000000040), &(0x7f0000000100)=0x80) getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010004b042cbd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="7b5c11289bd39bb61fdf342e301828850ba03eebfec9cf8e6955fccd3e605f683190e34d3a0d33481c45b24a4c7f6b293ddd6d18cd297c400740c165764a69aaae45661c17eeed4ccc45b1e005334ff908691ae4a713d27d"], 0x3c}}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000001c0)={{0x8, @local, 0x4e21, 0x1, 'none\x00', 0x20, 0xffff2599, 0x3d}, {@empty, 0x4e23, 0x2, 0x2, 0x4, 0x7}}, 0x44) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000240), &(0x7f00000002c0)=0x4) (async) accept(r1, &(0x7f0000000040), &(0x7f0000000100)=0x80) (async) getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010004b042cbd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="7b5c11289bd39bb61fdf342e301828850ba03eebfec9cf8e6955fccd3e605f683190e34d3a0d33481c45b24a4c7f6b293ddd6d18cd297c400740c165764a69aaae45661c17eeed4ccc45b1e005334ff908691ae4a713d27d"], 0x3c}}, 0x0) (async) 14m27.767312802s ago: executing program 0 (id=7779): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, 0x0, 0x111000, 0x0) (async, rerun: 64) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000580)={0x7, {{0xa, 0x4e24, 0x7, @remote, 0xc}}, {{0xa, 0x4e24, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00e271e47fcfaeaec0c86346e884377a46b618d1430f481fed5fa8ded2fa91b9b97dd630b46bf218a9d35407271b85c454c40aba33f28d6deaf9e63ce9bf5d57b0075ff554f6e636875a7886c31a88fa718ea61d719ed82c4765d21378d30adc2fe242f958e0ad3dfa00a717e4e3609549fcf0d048dc3a", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) (async) r5 = socket$igmp(0x2, 0x3, 0x2) (async) r6 = socket(0x10, 0x803, 0x2) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000001680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x5001000}, 0xc, &(0x7f0000001640)={&(0x7f00000006c0)={0xf6c, r1, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc80, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x43c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3f8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8477, 0x2, 0x5, 0x7ff, 0xcb6, 0x2, 0x0, 0x8]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x1, 0x3, 0x8c86, 0x7ff, 0x0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x10, 0x16, 0xbf1, 0x1, 0x401, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x75, 0x2, 0x0, 0x401, 0x9, 0xf, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x5, 0x8, 0x5c, 0x3, 0x5, 0x4, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x1, 0x30, 0x24, 0xb]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x5}, {0x1, 0x9}, {0x5}, {0x2, 0x9}, {0x5, 0x8}, {0x0, 0xa}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x7, 0xa}, {0x0, 0x2}, {0x6}, {0x7, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x16, 0xc, 0x1, 0x1b]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x7, 0x3}, {0x4, 0x8}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0x4}, {0x7, 0x4}, {0x0, 0xa}, {0x7}, {0x0, 0x9}, {0x6, 0x4}, {}, {0x1, 0x4}, {0x2, 0x9}, {0x3, 0xa}, {0x6, 0x5}, {0x1, 0x5}, {0x1}, {0x3}, {0x1, 0x7}, {0x2, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x5}, {0x7, 0xa}, {0x6, 0x2}, {0x7, 0x3}, {0x4, 0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x5, 0x7}, {0x7, 0x4}, {0x6}, {0x2, 0x1}, {0x3, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x6, 0x1}, {0x4, 0x3}, {0x1, 0x8}, {}, {0x1, 0xa}, {0x4}, {0x1, 0x9}, {0x6, 0x1}, {0x7, 0x1}, {0x0, 0x9}, {0x7, 0x4}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x2}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x2}, {0x0, 0xa}, {0x6, 0x9}, {0x4, 0x4}, {0x5, 0x9}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x5, 0x9}, {0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0x6}, {0x6, 0x2}, {0x3, 0x6}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x5}, {0x5, 0x3}, {0x4, 0x5}, {0x4, 0x7}, {0x6, 0x9}, {0x0, 0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x1, 0x5}, {0x1, 0x2}, {0x6, 0x7}, {}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x5}, {0x6, 0x4}, {0x7, 0x8}, {}, {0x2, 0x1}, {0x7, 0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x7}, {0x3, 0xa}, {0x5, 0x5}, {0x6, 0x6}, {0x7, 0xa}, {0x0, 0x7}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x5}, {0x4, 0x4}, {0x2, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x0, 0x1, 0x0, 0x8, 0x9, 0x5456, 0x101]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x24, 0x36, 0x9, 0x4, 0x24, 0x6c, 0x1b, 0x0, 0x36, 0xc, 0x12, 0x4, 0x48, 0x5, 0x2, 0x36, 0x48, 0x18, 0x2, 0x2, 0x5f, 0x6, 0x16, 0x3, 0x1b, 0x2, 0x4, 0x1c1cf1513f43002b, 0x48, 0xc, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0xcd1, 0xfffd, 0x1ff, 0x6, 0x7, 0xc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x4, 0x9, 0x25, 0x30, 0x34, 0x4, 0x1, 0x30, 0x24, 0x12, 0x55, 0x24, 0x16, 0x5, 0x36, 0x16, 0x30, 0x1b, 0xc, 0x48, 0x16, 0xb, 0x9, 0x2, 0x6, 0x2d, 0x5, 0xc, 0x6c, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x9, 0x36, 0x1b, 0x4, 0x48, 0xc, 0x48, 0x5, 0x24, 0x48, 0x2, 0x4, 0x6, 0x3, 0x30, 0x4, 0x6, 0x18, 0x24, 0x2, 0x6, 0x3, 0x5, 0x48, 0x16, 0x48, 0x12, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7b, 0x0, 0xec, 0x9203, 0x5, 0x392, 0x1]}}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x0, 0xad3, 0xc0, 0x9, 0x8, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x0, 0x4}, {0x5, 0x9}, {0x0, 0x8}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x6}, {0x3, 0x3}, {0x4, 0x9}, {0x0, 0x5}, {0x5, 0x6}, {0x7}, {0x3, 0x1}, {0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x1}, {}, {0x2}, {0x7, 0x3}, {0x7, 0x2}, {0x4, 0x1}, {0x6, 0x3}, {0x5, 0x3}, {0x0, 0x4}, {0x4, 0x6}, {0x2, 0xa}, {0x2, 0xa}, {0x0, 0x4}, {0x0, 0xa}, {0x3, 0x1}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7}, {0x0, 0x6}, {0x2}, {0x6, 0x9}, {0x7, 0x2}, {0x6, 0x6}, {0x3, 0x7}, {0x4, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x6, 0x9}, {0x4, 0x3}, {0x0, 0x3}, {0x5, 0x6}, {0x5, 0x2}, {0x6, 0xa}, {0x0, 0x1}, {0x5, 0x6}, {0x4, 0x3}, {0x0, 0x3}, {0x3}, {0x3, 0x2}, {0x3, 0x4}, {0x1, 0x6}, {0x3, 0x9}, {0x2, 0xa}, {0x4, 0x5}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x2, 0xb, 0x4, 0x12, 0x12, 0x24, 0x63, 0x1b, 0x5, 0x1b, 0x5, 0xf0, 0x36, 0xc, 0x4, 0x1, 0x1, 0x6, 0x5, 0x36, 0x1b, 0x3, 0x1b, 0x4, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x7, 0x3, 0x10, 0xff7f, 0x3, 0xa085]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x2, 0x5}, {0x0, 0x7}, {0x4, 0x8}, {0x7, 0x2}, {0x7, 0x2}, {0x3, 0x2}, {0x3, 0x1}, {0x3, 0x8}, {0x4, 0xa}, {}, {0x7, 0xa}, {0x4, 0x1}, {0x5, 0x9}, {0x2, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x6, 0xa}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x77, 0x0, 0xc, 0x2, 0x3, 0x79]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x1, 0x100, 0x400, 0x9da8, 0x8, 0x5, 0x401]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xb, 0x48, 0x1, 0x18, 0x4, 0x24, 0x36, 0x5, 0x12, 0xc, 0x1b, 0x30, 0x1, 0xb, 0x9, 0xc]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x6, 0x6}, {0x4, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x6, 0x7, 0xb67, 0x9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x60, 0xed24, 0x1, 0x0, 0xe, 0x5, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf800, 0xd, 0x9, 0x1000, 0x7, 0x2a79, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x5}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0xa}, {0x7, 0xa}, {0x3}, {0x3, 0x4}, {0x4, 0x11}, {0x3, 0x8}, {0x4, 0x2}, {0x4, 0x5}, {0x2, 0x7}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x7}, {0x6, 0x5}, {0x3, 0x4}, {0x1, 0x3}, {0x2, 0x7}, {0x4}, {}, {0x6, 0x5}, {0x5, 0xa}, {0x6, 0x9}, {0x4, 0x9}, {0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x4, 0x6}, {}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0x5}, {0x6, 0x1}, {0x4, 0x8}, {0x7, 0x9}, {0x3, 0x6}, {0x0, 0x3}, {0x2, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x336, 0x7f, 0x90, 0x2, 0x1, 0x0, 0x80, 0xe]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x8}, {0x5, 0x3}, {0x1, 0x4}, {0x5, 0xa}, {0x4, 0x4}, {0x7, 0xa}, {0x3}, {0x0, 0x6}, {0x6, 0x7}, {0x5, 0x1}, {0x5, 0x7}, {0x7, 0x3}, {0x0, 0x4}, {0x7}, {0x1, 0x9}, {0x1, 0x4}, {0x0, 0xa}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0x5}, {0x3, 0x1}, {0x0, 0x5}, {0x3, 0x7}, {0x6, 0x1}, {0x1, 0x5}, {0x6, 0x1}, {0x2, 0x2}, {0x3, 0x3}, {0x1, 0x6}, {0x5, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x0, 0x6}, {0x5, 0x8}, {0x5, 0x4}, {0x4, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x1}, {0x4, 0x7}, {0x0, 0xa}, {0x6, 0x1}, {0x0, 0x9}, {0x1, 0x4}, {}, {0x0, 0x3}, {0x4, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x41}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x3f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3d8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xcb, 0x6, 0x1000, 0x7, 0x8, 0x1, 0x5, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x0, 0x1, 0x9, 0xf26b, 0x57b2, 0x7, 0x1]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x6}, {0x4, 0x3}, {0x5, 0x7}, {0x5, 0x9}, {0x5, 0x3}, {0x1, 0x1}, {0x1, 0x2}, {0x2, 0x9}, {0x1}, {0x4, 0x1}, {0x3, 0x7}, {0x2, 0x2}, {0x3, 0x5}, {0x3, 0x5}, {0x7, 0x8}, {}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0x9}, {0x1, 0x9}, {0x2, 0x7}, {0x3, 0xa}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x5}, {0x2, 0xa}, {0x6, 0x9}, {0x2, 0x8}, {0x2, 0x5}, {0x6, 0xa}, {0x3, 0x2}, {0x5, 0xa}, {0x7, 0xa}, {0x5, 0x6}, {0x7, 0xa}, {0x0, 0x3}, {0x5, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x3, 0x1}, {0x0, 0x4}, {0x1, 0x9}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {}, {0x7, 0x8}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x6, 0x5, 0x1, 0x8f, 0x6, 0x9, 0x89]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0xa}, {0x2}, {0x1, 0x9}, {0x7, 0x9}, {0x1, 0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0xa}, {0x4, 0x6}, {0x3, 0x6}, {0x6, 0x2}, {0x7, 0x1}, {0x6, 0x7}, {0x3, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x0, 0x3}, {0x1}, {0x4, 0x6}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x47e, 0xcc53, 0x412, 0x1, 0x2000, 0x6, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xb, 0xff, 0x5, 0x6, 0xff1d, 0xa289, 0x3]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x5}, {0x2, 0x1}, {0x5, 0x8}, {0x3, 0x1c}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0x6}, {0x5, 0x5}, {0x7, 0x7}, {0x6, 0x9}, {0x4, 0x2}, {0x6, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0xa}, {0x1, 0xa}, {0x6, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x3, 0xa}, {0x2, 0x7}, {0x4, 0x6}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0x3}, {0x7, 0x3}, {0x2, 0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0x0, 0x5}, {0x3, 0x7}, {0x6, 0x5}, {0x7, 0x4}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x5}, {}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0x8}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0x24, 0x24, 0x6c, 0x4, 0xb, 0x1, 0x1, 0x9, 0x12, 0x4, 0x2, 0x2, 0xb, 0x4, 0x6, 0x6a, 0x12, 0x1, 0x4, 0x48, 0x9, 0x1, 0x48, 0x6, 0x12, 0x24, 0x48, 0x6, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xafa6, 0x7, 0x4000, 0x1, 0x4, 0xfff7, 0xe7d7]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0x8}, {0x7, 0x5}, {0x5, 0x9}, {0x0, 0x8}, {0x2, 0x5}, {0x4, 0x1}, {0x0, 0x9}, {0x3}, {0x4, 0x8}, {0x1, 0x3}, {0x7, 0x9}, {0x1, 0x5}, {0x1, 0x3}, {0x5, 0x8}, {0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x6, 0xa}, {0x2, 0x1}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x7}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x5}, {0x4, 0x8}, {0x2, 0x4}, {0x0, 0x4}, {0x5, 0x4}, {0x1, 0x3}, {0x2, 0x5}, {0x5, 0x8}, {0x0, 0x9}, {0x2, 0x3}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0x3}, {0x2, 0x9}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x3}, {0x6, 0x4}, {0x6, 0x8}, {0x7, 0x2}, {0x1, 0x6}, {0x0, 0x9}, {0x2, 0x3}, {0x6}, {0x7, 0x2}, {0x6, 0x3}, {0x2, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x6, 0x7}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x2}, {0x5, 0x5}, {0x3}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x6a58, 0x67, 0x0, 0x7, 0x9, 0x0, 0xe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x9, 0x5, 0x5, 0x7, 0xc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x200, 0xfff9, 0x8, 0x6, 0x800, 0xc, 0x4f]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0xa}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x7}, {0x1, 0xa}, {0x3, 0x2}, {0x5, 0x8}, {0x2, 0x9}, {0x3, 0x2}, {0x7, 0x8}, {0x6, 0x2}, {0x4, 0x3}, {0x7, 0x1}, {0x0, 0x2}, {0x7, 0x9}, {0x4, 0x2}, {}, {0x3, 0x5}, {0x4, 0x5}, {0x3, 0x4}, {0x7, 0x3}, {0x7, 0x5}, {0x0, 0x7}, {0x5, 0x7}, {0x7, 0x5}, {}, {0x4, 0x1}, {0x0, 0x8}, {0x0, 0xa}, {0x6, 0x5}, {0x4, 0x8}, {0x6}, {0x2, 0x5}, {0x1, 0x8}, {0x4, 0x3}, {0x0, 0x2}, {0x4, 0x6}, {0x6, 0x9}, {0x4, 0x6}, {0x0, 0x3}, {0x1}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0x8}, {0x3, 0xa}, {0x5, 0x7}, {0x0, 0x7}, {0x5, 0x4}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x6, 0x1, 0x4, 0x4, 0x8, 0x7f, 0xa8e2]}}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x6, 0x3, 0x4, 0x7fff, 0xb29e, 0x6]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xb, 0x60, 0x5b, 0x6c, 0x2, 0x3, 0x16, 0x18, 0x1, 0x4, 0x16, 0x16, 0x48, 0x3, 0xb, 0x1, 0xc, 0xb, 0x36, 0x3, 0x5, 0x1b, 0x55, 0x0, 0x5, 0x5, 0x48, 0x73, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x72e, 0x222, 0xcd67, 0x2, 0x9, 0x2, 0x8, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x2d00, 0x81, 0xffff, 0x6, 0x9, 0x3, 0xd3]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1a, 0x6, 0x6c, 0x12, 0x5, 0x4, 0x2, 0x5, 0x1, 0x36, 0xb, 0xc, 0x60, 0x1b]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x18, 0x9, 0x4, 0x9, 0x48, 0xb, 0x24, 0x1, 0x6c, 0x1, 0x1b, 0xc, 0x9, 0x60, 0x2, 0x2, 0x12, 0xb, 0x24, 0x4, 0x40, 0xb, 0x24, 0x60, 0x60, 0x36, 0x30, 0x12]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xf800, 0x9, 0x9, 0x1ff, 0x3, 0x2, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xb, 0x9, 0x0, 0x81, 0xffff, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0x5}, {0x3, 0x3}, {0x0, 0xa}, {0x2, 0x5}, {0x6, 0x3}, {0x2, 0x2}, {0x6, 0x7}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0x0, 0x7}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0xa}, {0x7}, {0x6, 0x3}, {0x4, 0x7}, {0x1, 0x1}, {0x7, 0x2}, {0x4, 0x1}, {0x6, 0x7}, {0x0, 0xa}, {0x4, 0x2}, {0x3, 0x4}, {0x0, 0x2}, {0x7, 0x2}, {0x4, 0x9}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0x7}, {0x2, 0x2}, {0x2, 0x4}, {0x3, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0x3}, {0x7, 0x5}, {0x7, 0xa}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x6}, {0x4, 0x4}, {0x5, 0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x6, 0x3}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x3}, {0x7, 0x2}, {0x7}, {0x5, 0x6}, {0x5}, {0x7, 0x3}, {0x0, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x6}, {0x0, 0xa}, {0x7}, {0x6, 0xa}, {0x1, 0x7}, {0x1, 0x4}, {0x7, 0x6}, {0x3, 0x5}, {0x1}, {0x4, 0x4}, {0x0, 0x8}, {0x6, 0x5}, {0x7, 0x6}, {0x5, 0xa}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x8}, {0x5, 0x3}, {0x4, 0x6}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x4}, {0x4, 0x5}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x3}, {0x1, 0x4}, {0x5, 0x8}, {0x2, 0x6}, {0x6, 0x2}, {0x3, 0x4}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0x8}, {0x2, 0x7}, {0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x0, 0x2, 0x4, 0x7, 0x1, 0x2000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xae}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}]}, {0x408, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x47}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x200, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x9}, {0x6, 0x1}, {0x3}, {0x7, 0x6}, {0x1, 0x7}, {0x1, 0xa}, {0x2, 0x2}, {0x4, 0x5}, {0x6, 0x4}, {0x0, 0x8}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x3}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x2}, {0x4, 0x1}, {0x5, 0xa}, {0x6, 0xa}, {0x0, 0x9}, {0x1, 0x5}, {0x3, 0xa}, {0x2, 0xa}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x5, 0xa}, {}, {0x3, 0x9}, {0x4, 0x8}, {0x3, 0x6}, {0x2, 0x2}, {0x3, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1, 0x8}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x3}, {0x5, 0x3}, {0x6, 0x2}, {0x5, 0x1}, {0x1}, {0x2, 0x9}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x9}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0xa}, {0x5, 0x8}, {0x3}, {0x0, 0x5}, {0x0, 0x4}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x3}, {0x5, 0x3}, {0x4, 0x2}, {0x1, 0xa}, {0x7, 0xa}, {0x5, 0x7}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x5}, {0x5, 0x6}, {0x0, 0x3}, {0x6, 0x8}, {0x1}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x6}, {0x4, 0x5}, {0x1, 0x7}, {0x7, 0x8}, {0x2, 0x2}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x2, 0x6}, {0x1, 0x4}, {0x4, 0x5}, {0x5, 0x6}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x6}, {0x7, 0x3}, {0x3, 0x6}, {0x2, 0x1}, {0x7, 0x4}, {0x3, 0x9}, {0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x1, 0x1}, {0x6}, {0x5, 0x5}, {0x0, 0x1}, {0x1}, {0x3, 0x9}, {0x6}, {0x4, 0x9}, {0x7, 0x8}, {0x7, 0x1}, {0x7, 0x2}, {0x1, 0xe}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x5e, 0x1b, 0x24, 0x4, 0x60, 0x4, 0x6, 0xb, 0x9, 0xc, 0x48, 0x5, 0x30, 0x24, 0x6c, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x401, 0xdf6f, 0x80, 0x9, 0x4, 0x800, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0xf800, 0x3ff, 0x2e7, 0x100, 0x5, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x3, 0x7, 0x8, 0x0, 0x6, 0x10]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xf45c, 0x5937, 0x0, 0x5, 0x0, 0x2, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x10, 0x60, 0x87, 0x85, 0x7, 0x2, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x9, 0x3, 0x1, 0x6c, 0x2, 0x32, 0x16, 0x1b, 0x5, 0x78, 0x16, 0x18, 0x16, 0x0, 0x16, 0x18, 0x69, 0xb, 0x5]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x3}, {0x1, 0x8}, {0x2, 0x8}, {0x1}, {0x1, 0x2}, {0x4, 0x1}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x100, 0x0, 0x8, 0xff, 0x8, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x2}, {0x3, 0x6}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0x7}, {0x6, 0x9}, {0x3, 0x4}, {0x2, 0x2}, {0x7, 0x6}, {0x4, 0x9}, {0x3, 0xa}, {0x6, 0x3}, {0x0, 0x9}, {0x3, 0xa}, {0x6, 0x1}, {0x1, 0x9}, {0x3}, {0x2, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x3, 0x7}, {0x4, 0x6}, {0x6}, {0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0xa}, {0x3, 0x1}, {0x4, 0x4}, {0x1, 0x2}, {0x2, 0x5}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x6}, {0x4, 0xa}, {0x2, 0xa}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x6}, {0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0x6}, {0x7}, {0x5, 0x2}, {0x3, 0x6}, {0x7, 0x6}, {0x7, 0xa}, {0x4, 0x6}, {0x2, 0x1}, {0x4, 0x5}, {0x7, 0x4}, {0x6, 0x5}, {0x1}, {0x3, 0x5}, {0x1, 0x8}, {0x1, 0x9}, {0x6, 0xa}, {0x7, 0x8}, {0x2, 0x1}, {0x1, 0x6}, {0x0, 0xa}, {0x0, 0xa}, {0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x54ce, 0x6b, 0x1, 0x2, 0x5, 0x4, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x200, 0x0, 0x6, 0x100, 0x3, 0x1, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x3, 0xc7, 0xab, 0x7, 0x9, 0x8, 0x8b]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x6c, 0x30, 0x12]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x30, 0x48, 0x1, 0x22, 0x48, 0x6c, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x94}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x2, 0x8, 0xb, 0xaf7, 0x0, 0x101, 0x7f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x397, 0x9, 0x401, 0x6, 0x7, 0x9, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9e7, 0xffff, 0x8, 0x4164, 0x6, 0x6, 0xfae]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x6, 0x1, 0x400, 0x7, 0x8, 0x6]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x48, 0x18, 0x5, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x6, 0x9, 0x80, 0x6, 0xe23, 0x400, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x200, 0x21ad, 0x3, 0x292f, 0xa5, 0xf2]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3ff, 0x9, 0x5, 0x1, 0xa03, 0x2, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x6, 0xd, 0x0, 0xd4, 0xd, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x7f, 0xd, 0xc200, 0x0, 0x1, 0x6]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0x12, 0x18, 0x24, 0x60, 0x12, 0x12, 0xb, 0x60, 0x74, 0x37, 0x3, 0x16, 0x0, 0x24, 0x18, 0x36, 0x70, 0x60, 0x12, 0x12, 0x3, 0x12, 0x6, 0x4, 0x60, 0x6c, 0x48, 0x6d, 0x1b, 0x12, 0xb]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x2, 0xc, 0x6, 0x18, 0x36, 0x0, 0xb, 0x48, 0x36, 0xc, 0x1b, 0x48, 0x60, 0x2, 0x6c, 0x16, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x6, 0x2e, 0x2, 0x10, 0x8, 0xfff9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbf}]}]}, @NL80211_ATTR_TID_CONFIG={0x1d0, 0x11d, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x6}, {0x6, 0x4}, {0x7, 0x9}, {0x5, 0x5}, {0x7, 0x3}, {0x1, 0x6}, {0x7, 0x9}, {0x4, 0x5}, {0x4, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x4, 0x8}, {0x3}, {0x1, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x7, 0xa}, {0x4, 0x9}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0x6}, {0x7, 0x6}, {0x4, 0x6}, {0x3, 0x9}, {0x5, 0x3}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x6}, {0x1}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x5}, {0x4, 0x9}, {0x6, 0x4}, {0x1, 0x8}, {0x1}, {0x2, 0x3}, {0x4, 0x4}, {0x5, 0x1}, {0x4, 0x2}, {0x0, 0x8}, {0x7, 0x7}, {0x1}, {0x3, 0x8}, {0x0, 0x9}, {0x5, 0x4}, {0x4, 0x8}, {0x0, 0x1}, {0x1, 0x8}, {0x3}, {0x4}, {0x7, 0x2}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0xa}, {0x5, 0x7}, {0x3}, {0x1, 0x9}, {0x6, 0x8}, {0x6, 0x7}, {0x2, 0x5}, {0x5, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x0, 0x3}, {0x3, 0x4}, {0x4, 0x5}, {0x3, 0x2}, {0x0, 0x4}, {0x3, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0x3}, {0x7, 0x6}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0x6}, {0x3, 0x6}, {0x2, 0xa}, {0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x6c]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x0, 0x0, 0x7, 0x8, 0x401, 0xdf, 0xf561]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x0, 0x0, 0xaa, 0x5, 0x5, 0xf022]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2a, 0x6, 0x6, 0x1, 0x6, 0x1, 0x6, 0xef4]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x5}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x3}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0xfffd, 0x8001, 0xe, 0x9, 0x5, 0x265]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0x180337924210fde1, 0x2, 0x30, 0x2f, 0x6c, 0x9, 0x36, 0x24, 0x60, 0x18, 0x0, 0x12, 0xb, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd8}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x25}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}]}, @NL80211_ATTR_TID_CONFIG={0x100, 0x11d, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xbe6f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x53}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffc00}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9aaa}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6d}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0xf6c}, 0x1, 0x0, 0x0, 0x800}, 0x20008001) (async) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r8, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x26, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x33}}}}], 0x20}, 0x0) 14m27.418404074s ago: executing program 0 (id=7786): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x3bb, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000001500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300fe0000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m27.27816193s ago: executing program 0 (id=7788): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xc040040) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000740)=0x6, 0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000002e40), &(0x7f0000002e80)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x34, r4, 0x1, 0x70bd28, 0xfffffffc, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xd81}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r10, 0x8010671f, &(0x7f0000000300)={&(0x7f0000000200)=""/78, 0x4e}) (async) pread64(r7, &(0x7f0000002880)=""/4091, 0xffb, 0x200000000000007) 14m11.867784046s ago: executing program 32 (id=7788): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xc040040) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000740)=0x6, 0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000002e40), &(0x7f0000002e80)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x34, r4, 0x1, 0x70bd28, 0xfffffffc, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xd81}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r10, 0x8010671f, &(0x7f0000000300)={&(0x7f0000000200)=""/78, 0x4e}) (async) pread64(r7, &(0x7f0000002880)=""/4091, 0xffb, 0x200000000000007) 9.976668114s ago: executing program 2 (id=13972): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'batadv_slave_1\x00', {}, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x8001, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x9, 0xfffffffa, 0x9, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x40000, 0x0, 0x20000, 0x2, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x107f, 0xa847, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x573ecac7, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x3, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x404, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x8, 0x800, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff, 0x2}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'batadv_slave_1\x00', {}, 0x5}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x8001, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x9, 0xfffffffa, 0x9, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x40000, 0x0, 0x20000, 0x2, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x107f, 0xa847, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x573ecac7, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x3, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x404, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x8, 0x800, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff, 0x2}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) (async) 7.106475572s ago: executing program 2 (id=13976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3c}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x80000000, 0x55, 0x9, 0x3, 0x12, 0x1}}]}}]}, 0x154}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a004400fe03000100000000080004000100000f060015000700000028001680080001000200000014000500"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000785e7b8bc24fdbe5f0fc67d32ec178550d93f41ab5b519f45a9f563ea8a31f552ad18fd547138e35e8719411fe6e381ad864306be7802e6dd3dd0c4644578cce09ba46247c4a4ff6a16e1a8c22e6356b927b570ae22f7fd164ce3b6c615a481d84091f8dd04592ff2e482a745f46f609bc0ec153bbf14114cdba2569a806aa18f2826faf194bbf9b2c0bae6a322a7ad07081d070d41713321b3529", @ANYRES16=r4, @ANYBLOB="000127bd7000fddbdf250e0000000800050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x44000) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 6.884404833s ago: executing program 5 (id=13978): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000140079104800000000007a0028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000240)={0x28, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4db2, 0x71}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb00000000000000000200010000000000000000fc00000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000008}) close(r6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x270, 0x66}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x8881) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r11, 0x89e7, &(0x7f0000000f40)="00c3") r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000058090000000000004000000018140000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000008af8ff00000000b7080000070000007b8af0ff000000faffa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001857000005000000000000000000000018000000ff07000000000000020000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x9702, 0x72, &(0x7f00000004c0)=""/114, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x10, 0x9, 0xb0dd}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x2, 0x1, 0xe, 0x6}, {0x0, 0x5, 0x10, 0x8c8f5b0e9df9bc8}, {0x5, 0x1, 0xf, 0x6}, {0x5, 0x1, 0x5, 0x4}, {0x2, 0x4, 0x5, 0x5}, {0x4, 0x4, 0x3, 0x6}, {0x3, 0x4, 0x5, 0x3}, {0x4, 0x1, 0xb, 0x1}, {0x5, 0x2, 0x0, 0xa}], 0x10, 0x7}, 0x94) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801}, [@IFLA_XDP={0x4}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x5}]}}}, @IFLA_IFALIASn={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x50}}, 0x43844) 2.480357106s ago: executing program 2 (id=13982): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000934) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32=r0, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$l2tp(0x2, 0x2, 0x73) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x3}, 0x28) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0xff000000, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}, {}, 0x33}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x100, 0x160, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@rateest={{0x68}, {'nicvf0\x00', 'nicvf0\x00', 0x28, 0x2, 0x6, 0xf4, 0x7, 0x9, {0x200}, {0x8}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278, 0x0, 0x1]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0xffffff00, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) (rerun: 32) getsockopt$inet_opts(r3, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) (async, rerun: 64) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) setsockopt$inet_buf(r5, 0x0, 0x11, &(0x7f0000000740)="170000000200010400ffbe8c5ee17688a20032e80101000a000082a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="bb0800450000300000000000019078ac1e0001ac1414aa040090780000000045a60007006600810229100000000000e0000001"], 0x0) (async, rerun: 32) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r2, 0x0, 0x7}, 0x38) (async, rerun: 32) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='freezer.parent_freezing\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000005, 0x100010, r7, 0x100000) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) (async) getsockopt$inet6_buf(r6, 0x29, 0x3d, 0x0, &(0x7f00000003c0)) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) socket(0x8, 0x800, 0xdf5) 2.429172572s ago: executing program 5 (id=13985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0x6, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e5}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) close(r3) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x51}, @void, @val={0xc, 0x99, {0x4, 0x4}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xeef3889f8d0c6966}, 0x80) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200c4fd14000600002fb96dbcf706e105030000000000000044ee1629d4b8bf4a31accb", 0x26}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200c4fd14000600002fb96dbcf706e105030000000000000044ee1629d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 1.852650993s ago: executing program 3 (id=13989): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='westwood', 0x8) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000013006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000600030001002c00", 0x32}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000098000000030a0179c0c0210000000000020000060900010073797a300000000078000300fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd"], 0xe0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40090) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) readv(r4, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/220, 0xdc}], 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 1.692797074s ago: executing program 5 (id=13990): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x478, 0x240, 0x0, 0xfeffffff, 0x0, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x2f}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0xfe, 0x3, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e22, 0x4e20, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e21, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x4, @multicast1, @multicast1, @gre_key=0x5, @port=0x4e21}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xe, 0xfffffffc, 0x5ce, 0x1}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x8, @remote, @rand_addr=0x64010102, @port=0x4e24, @port=0x4e20}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @private=0xa010101, @rand_addr=0x64010100, @port=0x4e20, @port=0x4e20}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @empty, 0xffffffff, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@broadcast, @ipv4=@multicast2, @icmp_id=0x66, @gre_key=0x8d5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) (async) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000500)={0x0, 0x0, 0x8, 0x8000, 0x2, 0x8000}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0x353, 0x3, 0x4, 0x2, 0x3, 0x2, 0x9, 0x74, 0x2, [0x2, 0x1, 0x88, 0x9, 0xfb, 0x404, 0x40, 0x6d5]}}) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xfff2, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0x8001}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x90, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_U32_SEL={0x84, 0x5, {0xb, 0x1, 0x7, 0x0, 0x0, 0xcc, 0x4, 0x1, [{0x1, 0x0, 0xf82, 0x101}, {0x6, 0x1, 0x1, 0xc}, {0x4, 0xfffffffe, 0x2, 0x1}, {0x3, 0x5, 0x1, 0xfffffff1}, {0x9, 0x3, 0xfffffff9, 0x2}, {0xedf5, 0xc, 0x2, 0xffff}, {0x0, 0x0, 0x81, 0x8}]}}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) 1.687720956s ago: executing program 3 (id=13991): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x18, r4, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x880) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f2, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x1, 0x3, 0x403}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x22}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000007900)=[{{&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="840000000000000000000000070000000702"], 0x1f8}}], 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) socket$igmp(0x2, 0x3, 0x2) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r8, 0xa01, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, "d7"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x118, r8, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="6af566b47c76"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "de453e149a"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "76f23a3bb24efd03d4e5c7eca0"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}], @NL80211_ATTR_SSID={0x7, 0x34, @random="921a9f"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_SSID={0x21, 0x34, @random="f6cbf37a2c363e7fd091c2c75a24791e072d5f0968ebc52e7c78e6f42b"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x20046841) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000001200), 0x0, 0x200000000000}}, 0x40) 1.658803414s ago: executing program 5 (id=13992): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000800000c000000ffffffff08040000", @ANYRES32, @ANYBLOB="c47d99efb91b7b3b000000000000002000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000200"/28], 0x50) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580)="10b395673ce862f7e0d442e5f67ce88cf3c0535fb57fa0052daec7cf9576ea499c54f62241eb71c8a8bccb4d18cdd93703fff624124269fdf9e4eb58161766ef82a03075c75932bc98dae4a3998ce7a5a2091b3d9e721cf8d36452f708ea214a8d8f4f013e1357859595a5134d29442559ea45063d21fdb0017675be788d9f92857d0da6fb3d263c51559a6498ee59c9fa36a8189e8e51b84d2ed9599725736a899a0fcfbfaf8afdf1e162e9dba099df27db8e4f870d79e28de9399b8f6add64f7c3851a5925333439b1841a7838c18a3b5bdd5d4c4ea5a69544a52ee566865c519a02b6c6ab4b15ce6f990eaf98", 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x1, r1}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b0c000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000000000620002200012800b00010065327370616e0000100002806f8882d9de5855bace8e5e14ebc562d32dc07f04b144f66daebcda53fd8b9c49db6a87071e18728bd1d3a2b1f04d8d6125eae7e3cf62864ef2b91bff76c49ff9757f59282660fa28d1a4ec0f476a9e5d393087b62dac4930e7f02822d820cf18f135e6c3ae762cd479b29ea3d26b885ace50a505003569b069cec7020c53f52f010d9eecdb6bda48ba34b6cd9e8a164aefe02209097f6905f3802c577d543692a46d15607876baa1f3f4e06c54eea5e1dac559d1ebaabd082f51d4633900"/232], 0x40}, 0x1, 0x0, 0x0, 0x1b9dbfca88d8e664}, 0x40080c0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'batadv0\x00'}) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x68) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={0xfc, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5ee, 0x6b}}}}, [@NL80211_ATTR_KEYS={0xb0, 0x51, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3887f12f70"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b51ba1f3ca808a4ee6a46ad145"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "699fdfa0873c33781cf15f417f"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e926589dba7d287b59ae8356b2"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x1, 0x0, {0xfffffffffffffff3, 0x5, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3}, 0x300, 0x5, 0x5}}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xfc}, 0x1, 0x0, 0x0, 0x60040044}, 0x4000800) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000040)={0x2000000b}) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000300aaaaaaaaaa3f0180c23e85000003aaaaaaaaaaaa"]) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r9, 0x0, 0x0) close(r8) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x40004) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) 1.552416608s ago: executing program 4 (id=13994): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x2, 0x0, 0x85, 0x4, 0x50, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x10, 0x8, 0x9}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e00000002000000000000000500000044020500", @ANYRES32=r1, @ANYBLOB="0e000000000000000000000000000000000000006ceaa8197ccaf3f28fa6a0b21b45f63270e2cb468220ff13661407e886b943156497f525d110b4a97533b64a5b89c096db", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0500000004000000040000000c00"/24, @ANYRES32=r0, @ANYBLOB], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0xfffffffffffffed2, 0x0, 0x8}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r6, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r0, 0x30, 0x0, @val=@netfilter={0x0, 0x0, 0xd, 0x1}}, 0x20) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x80, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000007a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000800)=r8, 0x4) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='H', 0x1}], 0x1}, 0x4000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010024bd7000fcdbdf2503000000180001801400020074756e703000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) r13 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r14 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r15, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/79, 0x4f}], 0x1}}], 0x1, 0x0, 0x0) shutdown(r15, 0x2) sendto$inet6(r14, &(0x7f00000000c0)="8003", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x1234, 0x0, @mcast1}, 0x1c) 1.543201401s ago: executing program 3 (id=13995): sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x612, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x13}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r2, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa3000038024000380060001000200000006000300a1aa0000060001000000e9ff0700020001000000080001"], 0x64}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c41517797710c7799ec270f15b7a70ec5268024cf5c9066c2b8fc9cf9e664e9b19700"/50, @ANYRES16=r4, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r6, @ANYBLOB="300030802c00018008000100000000002000038008000200030000000c00040000000000000000000600010000030000"], 0x4c}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x20000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f0000007c8000000000000018000000fdffffff0000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.45582942s ago: executing program 2 (id=13997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x41424344, @ANYRESOCT=0x0, @ANYBLOB="5c01000090780000"], 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newneigh={0x30, 0x1c, 0x400, 0x70bd29, 0x25dfdbff, {0x1c, 0x0, 0x0, 0x0, 0x2, 0x48, 0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x4, 0x9, 0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, &(0x7f0000000ac0)=0x8, r6, 0x0, 0x4, 0xf) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x7fffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000780)=0x1, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000700)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000740)=0x28) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000680)={{'\x00', 0x1}, {0x7fffffffffffffff}, 0xa4, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)="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", 0x189, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x183}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r9}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r9, 0x68, &(0x7f0000000200)}, 0x10) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) 1.278740623s ago: executing program 4 (id=13999): r0 = socket$packet(0x11, 0x4, 0x300) sendto$packet(r0, &(0x7f0000000000)="150120ab9dd930074f6716ac7c3c6e09c67b32664b28e037ff36e6af9fb87a9f7cf28884d91e583c2966967bcff6f24b0076ea15f6a42828e4201eb22a66e8e92211be526498151fbbc9b36af38fce1aeeea2ca56393c317a776fff8d6bd795b86d8c228834d11c74d61aa2a5a1d1ae0c759392303", 0x75, 0x40000, &(0x7f0000000080)={0x11, 0xe3, 0x0, 0x1, 0xa, 0x6, @random="481036ad4396"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'macsec0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r4, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r2, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}, 0x1, 0x0, 0x0, 0x20000010}, 0x200080c4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x2e, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af"]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r8}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$tun(r10, &(0x7f0000000240)={@val={0x0, 0x88a8}, @val={0x2, 0x80, 0x5, 0x2, 0x9, 0x4c2}, @arp=@generic={0xfcdf, 0x6000, 0x6, 0x1, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, "a9", @local, "15d84d2c15228c2246"}}, 0x2c) 1.15250099s ago: executing program 3 (id=14001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a4c000000060a010400000000000000000a0000090900010073797a310000000014000480100001800b000100736f636b657400000900020073797a320000000009000740920ed20f89000000140099ef1100010000000000000000000300000a301f1d0128d1b2f26556a5bb3db66c533d3e13593669614fb27b13bb4dfbff5079103e1bfd92225c49a05c37cf8c7ab2929b46fae611f9af9ca03a"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0xb0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x81, 0xc, "2d517b5a6cfa159dae7340434d10ab0b163840eae26e736515ff949ebf10e8b3e397bfde4df3f33591e0e49cab832d720151a2ad68c57903211d4920178bae644c5333946239914935b4370b67a0904d1935ea7f6dfca1687465330497c1bfdddaf3f7a1f8e85c649ee26c70fb54341f5a65f4d55036c901b5224aa584"}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x7c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x51, 0x8, "0b4f5095c115438a87b3b14718de6d3a9788f4b1519e9961ae86d0d190b3da5ac563ebb97bcd1faf94d8cefa0b01df2947f988345dc90f6766a025ed5c66f526bd6ba47a0794d6c4ac1f15b7b1"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x174}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2b, 0x6b, 0x74, 0x81, 0xf4f89daf2e20e823, @local, @mcast1, 0x7837, 0x10, 0xfffffffb, 0x9}}) bind$can_raw(r1, &(0x7f00000003c0)={0x1d, r2}, 0x10) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xe00}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040044}, 0x24040000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000640)={@empty, 0x4, 0x0, 0x2, 0x4, 0x3, 0x6}, 0x20) 1.110295043s ago: executing program 2 (id=14002): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f00000005c0), 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018e300000000000020000000060000000400f6ff0100000000000001048f99d4e700000020000000010000000000000108", @ANYRES16=r0, @ANYRES8=r0], 0x0, 0x3c, 0x0, 0x1}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f00000002c0)=""/25, 0x2}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r4, &(0x7f0000000a80), 0x0}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000015c0)=0x3e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x7, 0x4, 0x900, 0xbf, 0x28, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r7}, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) recvmsg(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x2}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000007c0)="b8f28c3ba12877ea5322777786eb23b2e4ef4c435688d83e749a56cc49c89a8e150940af318a1f7d7824d3b4ad6f85bce958ac422ecf1b40f9c16e841e0193cc7e877d66acaedcfd69e53f0e1020a4fa0ce53a1fcc63b0de523c00cafc65921512e934220e5d24f980556f5ef674cc0f4cfcf279e91a57a3f6279463c826942428a14dff09daabc4f2925061392e90a9c79440de0b550ed77ba65c38f5a5e64b34699c98280dc65be16d0653142d5e6dda1e95fe5a27e3f605f2710ff6b614e5414a", 0xc2}], 0x1}, 0x80c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xb, &(0x7f0000001180)=@framed={{0x18, 0x2}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0x178, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, {0x323, 0x0, 0x0, 0xc0, 0x4000, 0xfffffffffffffffc}, {}, {}, 0x70bd29, 0x3503, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0xfffc}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x178}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000100), 0x0}, 0x20) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2c91, 0x4) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x51, 0x10a}}], 0x18}, 0x4000040) 922.337796ms ago: executing program 3 (id=14004): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x28, 0x0, 0x0, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, {[@hopopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x2, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525050, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x23}, 0x94) 869.362009ms ago: executing program 4 (id=14005): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000080)="3d25ab555b", 0x0, 0x304a0000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r5, &(0x7f0000000280)}, 0x20) (async) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl(r6, 0x1, &(0x7f00000006c0)="58dc98f0") (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 720.324207ms ago: executing program 5 (id=14006): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xa, 0x32, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x603, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "94496c9a3cc2fbfd"}}, 0x48}}, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000008005d000000000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001ac0)={&(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000000000800000000007b0fc8aef9b9f7b11b6000000"], 0x10}, 0x80) socket(0xa, 0x3, 0x3a) unshare(0x2020600) (async) unshare(0x2020600) socket$kcm(0xa, 0x1, 0x0) epoll_create1(0x0) socketpair(0x23, 0x3, 0x4, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0xf132, 0xffffffffffffffff, 0xa4fdf000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x27}) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x27}) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) close(r2) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"], 0x24}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c) (async) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"], 0x24}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x400, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x10, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) 703.478467ms ago: executing program 4 (id=14007): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000240)="00ab0f", 0x3}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000004089f8e3580000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r3}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet6(r6, &(0x7f0000002000)={&(0x7f0000000200)={0xa, 0x4e22, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000000340)="91684d32d540e8d931c4ad32980972bc48a1591e872266290047ab61902f7ed18f1d94a4b968e48f03796b7ef61761d6e86b10fb1d91571e12b2ddb30fcbc42c94ef21912dcf93063a6ff4c89a5fc7d58715651881858f9233d72db732d49a6f851b0b5971a762874eb746cae323da261c9ef093d08da258b76974b74ff2fc6aa551c20b63d20a516e606817ac3a74172e99a3a0437f3c233be7895b809f7c07f28a2e9debe863ab92ba06f0", 0xac}, {&(0x7f0000000400)="0b0a0d1df1a5c950544c18630159071329b569b68a0ebf1ee79792a5cab7899883e3a64178e0a63fc892f4ed4415dcbab00828f94fd71a0d1b9ff337aa43a0d550e28b427d781f0c6241f0e307f140557ecf1dff9e610c4f13f1920c5f74d5d98cfe38ebe1cdc06336a29c6da282ec5c14", 0x71}, {&(0x7f0000000480)="19550b2ffd7a8a035b9fbf02a857200fe54da0613cb54bc6da11244353", 0x1d}, {&(0x7f0000000600)="749095d8acf4eecf9ddbc12966970d20418018ae8273969ec1f403a59f1616b5177a1d4dfab9a77cdea77c27a83663b88ab3ed44ae05858da7bb0aa7df1db0cf94ee553e900ec67af726a94832b79cff8dedd8fcdd23367b4ccd81d87ad7f13f8b92931b30bef2699459c059b089e3ec734f63e50821a83bde8e7f80274bcf7c2a170b586532d43a86a6b63fb29122dfa24f16e5c75379e4a69a8bfc602254dca1929a0695d890c6e5955c1209f48bc8330978304bc671e2d77f", 0xba}, {&(0x7f00000006c0)="3289c94a7d766e238f51e7bbb1c5e4a370118438da1dbafd1ff543fc424d40a6f56d4b077a229e75892e5b19d035b30bcb1e2f7d76831f47fa2331a6556412bdbdad1a62b19ae139bfa9ec832c91438ebda8e5becc01c68b52025b837d696dbacee43ff58169f1e04720c936cb66c0ee416f343d39e1474e4165080d0d264eb6c6cb0771f2977d4727700483bf1ce08f4b2dacec2645745042ec7989c2ebd6dc21d92e2d5c80df364c18fe15ab94565f903c0ac11021254e07ebaa9b68f32fdecc953d5e1ab2ea33bf68721e0169a59dc5", 0xd1}, {&(0x7f0000000840)="b8b96310cea78b8978a220e504532e42755a685428bc9191e10ea22af9c6f42020cebd427c62ec4784116404932328b31c6c24c306cd626e0ef0871ddf4f7b6e13cdcbbb3bf25240c2c4ee9a0c269c93f8f804518fc4bffb85dad1244c37e52cadb9ea3169767271f58be5bc33c46d0697849fbe3a32ce74462bb4f449002a9281befc232aa3b0dec4810f12abbc4746cb1b15b81e5f62d05956f56cf2bac60cb6e59f937cb5c34b22287a60345e89894968dec1d845c0a7cd10cea5d6d5b0551254d43293ee4a15a702705d1606a23d82fff2683f128a554bec516dea421aaf450b0352cceadaf31951336c75455484de5e1cdff584c952188f9c6641851ff14c5f60efb94c0f2d29a849c34e94d150a2f74972d6499eb233c1d4d88204e01b1b71378c8aa3095e12b9897a1c395186b33bff7b35e5f64608ddc2ede8809678160174456b41abf1ed8f17d3ec5c7a92796c33fe907679f9f702777fbcebc9ecaadec058cb746b5986813af47828d878c6b44ec3c2305b07cd0794d947fbf8777fc8d066301c094df059fce67e124aa809f0e18c74115e61a3a9247f242ff52164851935ae615ba51e99fcebd93ec1402f545a28c1d8ce9480d633457f63dc000d68afd9e50aeb160bdfce8b53f03762eff38d94dc807177a6eb912d06fbc46e3f498a446b9a9607beb9a6205229379b1837ec4a739621a559d94075dcaa838d6625ac5e45fd91d7786646623149f71189c9a7885fbdd0cf4a093894f1fa81f79616488b5e50d3619e0a9ef6b1b0323d9cfaa884a489b9b4f2681919b726fa62a8d98a0667e0815e3a37bc8e8225dfb12a013534aede60ad5a932cdd0f4ea9334bdd7c02a51cfff19b17e77cd3ea2e3f471232e8155c054c6829ab34ba6d48f94783f6ca25ae78e019320c27fd70af14e3a38bd633938a183e7776dc36f9815e76d4ab1d7ec7522126924331a6c1c2ed1a68d7a8fa6d5de17fefbd4923bf6a6ff91986c49f3449c41f6592670aed6a7485ac27ea0bb47e3242c0d4178c7e83b820eb16b7378c5e36f8b5fe3cea4d42908a5402a8a4cd6bef5db42599da1835ee81b7ca690037e144ced43a74d36634ccf645e785a306a55ee8470c1c38e19e09665dfc3b76aad378d2ba674e9a933704f6887f879ee8a51f4def778839cb5f77499f4d756f7e7dd20626d58e5f0babd9c0c5b87f8b313299eed69efe14a2172b108bf0ef81bd0c8956a3567a72e09f4b2a9450534b44cf33b370f06980b3064ab07f9ebd8c1ebb1705f2a4c76d0cf4fb3546ff2cb01cf580bedb1ff4a893e8c61658e9f717df8478a7554a6238b08bfbcaa9d33c93f7c04a239d12ff1d6fae6cccdac0a31d65c7e362bae33571fb37312348dd48f4fb3b17ccb43fda630264e93c5512570715026f8b3ea7522ad7268ca902778bc895ee02df1d35226be06fa616a38ab00aff72898859a0ffd79b586542dbe08c41cecb611b0219b9d8b0664134a61ecd8f8f1db03eb7d25f0d6f448dfdf3f1d8bbe8217a6363e86e4a5f02764e81cdea2234f064d8f40fc9b1716778af35eac10b9123d6ac469cb239e29911ff6d23fe7d1d08ab003439cf470bb4a0f5b81350ac518d56928f384874f4d835627320afa41fa66d3d5167a11ab3f1a2445903424745d3ae801e0b5bee686f9dd4bf4c660c317b2fb87a69a21a874513c74c8d97d6778ddf0bd3335ab0e1e3d6d847ab785893e95c610a19e5ea4caef57ffec3d60022b12f0d0eef9ea2baf57eb41a1203f76ddb5449d8db3c4a1317488cc82b46ea912e40e7011bdd4bab359d615420f6521bb71494224fdbe42ece8a0fed4c841e68e0f27845a2c3be420a527ec8a080c08b93eac7ad6a23a64224ebee5b902a820ec15f7112ce5fdd9028647913aa28651a1e1a30619fd2bc8cef8ccb502a71b78d234d18fe8ee9e1e75fe930799febf8ecd6f2aae6bb6f186daf9056e7f2c705227bf1f20c5171b1e5141afef1f389fb80c95f10faded3dcacf8cebee1fabf98493ef45cb5daa06d7a2b3a4292cf73c1c417d9d556ad6b67994130628d3ed8973ecb690656797e4431b2559eb83b0e55e200e482624ea53b4f2d0e6b299bf7bd27c79dcd52749a99f0975f751ebc4ff4bb3ab621b1d65caa97b62ac4b446c31feced9a2f68cd84d033d92da176c043266f09d5963264548ed7a600463490b4ee1365dab2a6226d4a929b9a64d09169e9e54b43ad5c7b14bff5732e9a5c11957bfca25f9e0687cd260b2b614101b39740847d4d9e1864f936041dd167f19f73be541cfd3765840bb22b330630550134712a17aba7b9fd66853a4ca1c41006e1b9c34ef1f4c49f93207fafe43675b5815622d3baa8c56b5ee1f572110defcaaf711dfa2dc2f9682832de23464f8bcb1df388ae17e86c7e8c11d5f2da702d53da04e59ac3207108e64e01ab419d858cbbf5a0eacb9e3f25c089f8d1a70eb108e85fe2399373bbaac39913858f818cd83f17639405ef34f48e4d8a92dcb979610394c86abbd52d0dc4c419348be9111a52f49a1ba515990be70b1546a17a2e0d96bbb34e15a9c98c153672ae7f48f2ade947d870c7e5cb8b0cbaf9881b9928a6918c9b1559519cfa1dcfb4742849ad5f08025751eb377a43d2e03d53b82a6d479e296ec5654ebaf5b0a46ca17f2687e8f18e7669b11f8740693a81b542f47cda1f9d511d90f14a7cbba8908dcb6a6590c76c4cae159f5ee746d6456b9d3fc6a03790178244cc772449ef0a5aec25b71830c990372a8e62cb24b5226bee9779fc83ab17d5c7157756607470be22540f184cc7dad745aadbe12154fd9102288f4c91de7192ddd7f0b1d6a59e13d099013a046829414a8d518e876f92e243717c4b70895557f1bac9d4610878c5d56e88ec22c7aca23f118398755e064a961928e9b291bf0422fc8e175018be6be559b53c6279bb97d177f76ec865648019a8e3e96b100f753d19596525fc5159fe3955779b4dc652360a27f8a5b586de38dc8f707ff5eff1805405fe1406ba6bf42eebb06e0d33445b97b30e83884b6de8b3b73bd605f4501b5741f48bfcd51b1a1285e6c405e895caec6c5e3bb11cbe27287cfa0cc30eac4c1b272c0d5102a7ac9ef35ee0bc0e64215c31705b4e0ddbc1ddc42ad784e68d6f90136d7e50e8289c4498ae6eadc2c27c8013dddc9bc01283335af0d20f16cbcb094a6f01a003e1c778dd11a3b4b12b3aa2434e92cc18b020bf64b0ac2162560443f57ac16692d932cf3c993ef8376d405d3956e637fb523502c263f0076270c2b0196ae7760a47e71ca6e4de537c8ba261214ea149ea657996629d9c45b24f0b8c22bb08dbeaf302a5802200cea51465710ee8b3af8f2d12779b590c63b781276418ecbdbfe911c84af7e265191095061a5fec0a294d5be5223c816b225b48ed2524c845f636cbb5da61a083af75bc36e6e34dae8584f1b442b916725f1a42e767e78a2ef0254407d58885fc6314f9e4c75ff90d4ba5bbd119e691884e8173b3db52e215c7ef8c0248c5b6b94dee97adf6d17ca7ff052b1c181eb84cc0ca52b3c6fcce856c288c7de8c4215c1fbd2b6a2af19145460ba0218e1815a2ba37f5f7b1c78c3e9c2604d5d8d8947a3c598de5660f1a2fe4d28070acccbf4555cefe83b7b49aca56f61da6451a0e2bcbdea81a9e923abee5080c70776837c24fe559629212f8f43f5cbaff7bd16606c586fcdc5d1ba92a9abe2e657ef0f1ab562696cf2e466ff12b75649c9b63bd21b806f792abfd8d4bc4097f2bf033a974251e32919532b004c89532b59b5f9ffa27ba2cbfe593ec2da9764f7398c4ccb19225b2d6904c084a00de832b0aba546438b2514c0f608c3fb4cf5e219745077aec54954de9c573ffc7b699e9bcc9549fbb92dd0a66e9d66a6135d83fba849cbcae9e09efeeeb5c787d1b203ea2fee2bd3555953f1f253880a12b50b4f9e3d0e56bcb0a479156ffe248edb73f15edf8d1b01f5852292222da4b78e7e29a03b01960cac81ef8d48d6a180d6ec5095b3a6d07184b7e969490368a697a500136ec1e4197aab1650e93dbc2c7d0854d890bec737b1ffba5e1a5c40def7d7a632b7e88691c8b3fd2d7dd0fbd73f0fea1182feae2c467f408842ca7ec7eab675eff54c58329c9a8ac15e404550bf09bd1d412fcf0b0c094b3e4d3f9ef2d0fc91738fbe4ac76c5b9e2a09cc8189d78f5f4bbc59b56a78a24e478ffb7da2df1fac663c7b81bb9dab564fb1d4b28c697a81879ab218b815bb0add5d09d4c239bbc263e3576fa0380022f2f2fcca02ceab2a05a074c316ad4f0d23c9ae2fd6ed063f7b97142d7773cfc26a95328a5e632253d7edf33fa64afd1a68b634a8803bfd125a775475323d333a40b38eacad77b2fa851bcfe07f877bfef757b8d6f442a86e3c2a7fa385acc117b651afc5f17e6621423930bdb6d01d5a2f653dae663e95f9d632bc6236972d1c3321f42ea12c55553f7a5bbe1f602f14eec07c1e13ee49cca615d85b8e1471fa8a34e839d0924f0816c2a1fa42c43673ae7d3ca0c627b6804099662e2491253a7acd81356aa2d8a9b7e3fc16ba95323d48bcb36864602f6e6e6661bc1ec77b96b54692b2d3ec98c5e838480be124c85b3f246e155a8f187dcc2edd03fbd13f0e25dda98327fd8361bc5395c3026c366961c5cd842f09f83766d0b9a71e440643cda879ac08099da1e4c1da9f428c34b5cb2e908f70407ca6b45f8cb8890b198971a8b2b0022ed7c9b794631da312e391d7a76991fa21735b3440d6b9c10e765ab4bedf9a89082cc85c67fdc4fce99ec37b3e5bc27afcce046e508fed7e5b5932ca2d99cc89ea2fe4c9635dbe57bbc9cf4e60d6bbad1f4605803100685aa14fbc5dc5620cf4f03eef704cf659d035fdeb439d9d9ec175a26276e8a6cb74fdda975cec29591dde7c9f110f60add0145b8354c71e602d32490b61907a8def6e825fab29b88aa7744a40f16d049e029e07f3e97fb55a9d8a6288bb24908a987bbf99a98f69ced4644c35cefbfde810052c7d4b657c9c54248f06f17a9e6d3f6dfa50632e47475bbe6943f3b086142fc0924dc3c9261c7b27a603ee5043963cfde28477afe11ce8fac1f441666834de4405e6d67b7d74f9cde13bad0f040345a345d694c4716c50a55b88fbb903fd57001b9a2452dea6879f37a85f70957538ccabf958bdc8ba25ad5095e2518036286b75c1f90ec619f886fc7a5c2dd89ffb9af61a72cd0d74235019cb1150118fffd690370416ac664f9d6e7b09eff08bf6a15db43cf3638f1d27a6f49ba7a66d9b924809fc9a8a9f87a3c852d1cd7197450d309ea558f5bf8c82978875bd5e89fe1e8371102747cc68f130f066c9b882a274989238d1b995fcec92794b6d2ed34edeff5e06e6203fe69ae48cdf351a1289454fa74adc9ae73f3cce36faed8158f2619b431d2696bbb78b2cd7aa557ca4eb9b674784667bfa0913fd9e3c266c34cb054911a8e5c53b9c01789e132e7a64161d523bc48ffea5728d2fad9f32d2167f8c0cb79c5248a07658dcc259b55022316d53e9329e0ee6a025311c6a2a0fe8016d727727e93d48faa25404f57f1a193141e4e76aabbec838c040a41ebf3b7ba2df2ccdc1dc6f07a5a6bb5e1be809e29e663154f5e3b1356e7c55cad2f7a4fd658564d8e298b5de8bdb3c05451b9514c8e4c5022786571479b78891b62f8bd9531ecc7eff8c0492ded28827b98625b92b3dcae13672243ccc97d0b14d5d1398c8a06fdc3fc6707b1baf4f0961f22893c129664c3a303f3e0e6339f", 0x1000}, {&(0x7f0000001840)="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", 0xfd}, {&(0x7f0000001940)="fc426093352e6c4cfc6e1d6b60bc30dd727f767637dfd6418c94ab100aded35ff598f4ae5d16da4921a3f60f222e7fd31a5f3db95c82270dfce0606e4e815e1afffc39fc8a5d8c1429b348465066c94238fdfc8e9d57a3c285b8fa8388f0ea98682732fcd09967caf512f8bb747260f84c51b5a1b3f9e2e52b39e0be46545d8e28b422f05aad", 0x86}], 0x8, &(0x7f0000001a80)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x238, 0x29, 0x37, {0x87, 0x43, '\x00', [@calipso={0x7, 0x58, {0x0, 0x14, 0x6d, 0x6, [0x2, 0x5, 0x55d, 0x9, 0x9, 0x1, 0x2, 0x200, 0x9, 0x7f]}}, @enc_lim={0x4, 0x1, 0x3}, @generic={0x76, 0x90, "846e02005e5d2463b3e9f9eff47358561d168dec7e906462d28a8fb1b6ae94dd9397e7a787c3b4ee72a36c3e652fa01f6f79bd2d8ca3412ef1a974a2c2c5391e15ea200123f8ffb960a5653a7c59e92fbeb6d551046ea4e85612939ec02e6080f50fe7e8a01464f8e5a64a86d582eb6f441e3b7d80ff47a2a3e07346629cf47bacf52fb99fbf6297ec7b8aa9ae2895f4"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x58, 0x3, [0x8, 0x10]}}, @generic={0x2, 0xfc, "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"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x3151}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x6, 0x6, 0x0, 0x4, 0x0, [@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x38}]}}}, @dstopts={{0x260, 0x29, 0x37, {0x6c, 0x48, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x6, 0x5, [0x4, 0x3, 0x5, 0x7]}}, @enc_lim={0x4, 0x1, 0xb8}, @pad1, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x20, {0x1, 0x6, 0x2, 0x8, [0xffffffff00000000, 0x7, 0x6]}}, @generic={0x6, 0xe5, "2ad50a9e0e343255d0cdc9a4b2edd54a018a836e2fdd262feb4100686dbdd0772f5db9faabcf9a8a7a56f2ff2260ccab5998d75fa36177c72bbb685c77610a0ef5d5ba030b59be647be49a83b106cb33f0c21dbcea9d8250e6af3a5296975cfb003fa4274ae7d8f3225d64b0401606f448a92fe4afd291e332fdb1ec16ce277410e28e2e0bba00748bef8716e946e44a8b6fbc7cd3d5fb38d6a5e43a2c289bdb4619a485202a9c4a5b3bd29e8326babd570f9ba2c0e51c5a220bb571e958af1e8d970d849b8f3d2e1582f283173f39edea267e8aa6fbad95a549310719433e324e24885b0e"}, @generic={0x1, 0x51, "78ab8aff407c6e7beb06404d50fbc686874c0242ee03342fc24fc48d8955b43065abd646a45c91a674449cf6ea8192f235993480657270d84bc44c5034d4036dee608bed45ffab0d0f8fc1d9de7c3cbb5f"}, @ra={0x5, 0x2, 0x1}, @generic={0x6, 0x9d, "a0b7fb21fffbe159f0daae84b905231cb1e4cda8b1aa6bd1f359e3c63f40083f4771cc928a58b7b59b8e4f5e217834f72d0c6c25ce5810de28bd2cfaa473bd9bd8c67f19912c16878c2a33fffd9279d0a971eec2adbee83abbb618d0311236d066764278123dba7e4b6b8ca4b3a793739022fe75b9b78f9b3750c94b4d05866d4ff423186958aac51c8e638b2a75e32f56e94df81cac6d2de6fa0ce43b"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0x568}, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xfffffffa, @private0, 0x10004}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r8, 0x1e5}, 0x8) write$tun(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180), &(0x7f0000000100)=0x8) 520.658318ms ago: executing program 5 (id=14008): bpf$MAP_CREATE(0x0, 0x0, 0xa3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='highspeed', 0x9) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)="a68770a2d4aaf8", 0x7, 0x24040001, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0xd}, 0x1c) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1210}], 0x1, 0x1ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x200142, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r3, 0x0, 0x4002) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000000)=""/135, 0x87}], 0x1}, 0x100) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1c}}, 0x0) shutdown(r1, 0x1) 432.673053ms ago: executing program 1 (id=14009): syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) 410.35789ms ago: executing program 1 (id=14010): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a000000000000791048000000000061043c000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0xc000) 363.577258ms ago: executing program 4 (id=14011): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f4, &(0x7f00000001c0)={'gretap0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x40040) close(r4) 313.320481ms ago: executing program 1 (id=14012): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x64, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4200000021200000400012800c0001006d6163766c616e003000028008000300030000000800010010000000100005800a000400aaaaaaaa090000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r2, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 295.632148ms ago: executing program 1 (id=14013): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x28) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x3, 0xb}, &(0x7f0000000000)=0x90) (async, rerun: 32) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) close(0x3) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x84, @loopback, 0x4e22, 0x3, 'sh\x00', 0x30, 0x80006, 0x6f}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0xc, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0x81, 0x1}}, 0x44) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xff, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0xfffc, 0x0, @local}}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000010000000fa00009f88889b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000d50a000000000000090033ec83907555a04acfc76aed04715191a9b5000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fffffffe7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x400000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r8, 0x6a, 0x4, 0x0, 0x0) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdb) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r7, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xc2, &(0x7f00000004c0)={@random="591a1d9a2bdb", @empty, @val={@val={0x88a8, 0x4, 0x0, 0x3}, {0x8100, 0x3, 0x0, 0xfff}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, '\x00', 0x84, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts={0x4b95da911eecfc40, 0x5, '\x00', [@generic={0x7, 0x2b, "9b136f96f4fd4a9e5bb3d97fd0b65392a3903eaf0d28653d3fc96440ca429e5659de6078b300fd0911bf84"}]}, @srh={0x84, 0x0, 0x4, 0x0, 0xf8, 0x40, 0x1}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x0, 0x3, 0x1, 0x2, 0x5, 0xa}, 0x1, {0x81}}}, {0x8, 0x22eb, 0x3, {{0x3, 0x2, 0x81, 0x3, 0x1, 0x0, 0x2, 0xa}, 0x2, {0x9, 0x9, 0x3, 0x2, 0x1, 0x1}}}}}}}}}, 0x0) 182.546933ms ago: executing program 2 (id=14014): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x840) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x18, &(0x7f0000001b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80000001}, @call={0x85, 0x0, 0x0, 0xd4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1200000004000000040000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000000000000000000000c5ce0fd186afefd8d9f7ed7c46c5e426d22961acaba8fe1ac4510ed6d888ec52115b5d6140963da3da618c1837bad0a2129aeae68d9469d648da9d078a3e50c4c2794c91b036262630aaa500000000000000000041c86e549540f0d5b900000000"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 105.200139ms ago: executing program 1 (id=14015): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0xfffffffffffffffe, 0x1, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0xdd4, 0xfffffff7, 0x8000, 0x1, 0x9, '\x00', 0x0, r1, 0x1, 0x0, 0x3, 0x7, @value=r0}, 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0xfff, &(0x7f00000014c0)=""/4095, 0x0, 0xc}, 0x94) 104.280909ms ago: executing program 4 (id=14016): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r0, 0x0) 54.727986ms ago: executing program 1 (id=14017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, 0x0, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0xf5) r3 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80, 0x1000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r6, @ANYBLOB="140001800800010000000100050003"], 0x2c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x200, 0xc8, 0x8, 0x0, 0x5803, 0x200, 0x2e8, 0x2e8, 0x200, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x3, 0x7, 0xfffff800, 0x96542ae, 0x217, 0x44dc, 0x7]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x200000, 0xffffffffffffffff, 0x4}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8b36, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r7, 0x9eb99ec2c7046a86, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x10}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x70, 0x30, 0x100, 0xfffffffc, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0xffff, 0x0, 0x2, 0x3}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x4000) 0s ago: executing program 3 (id=14018): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000011c0)={@map, 0xffffffffffffffff, 0x6, 0x3002}, 0x20) ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 5][T28489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1832.991743][T28489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1832.997577][T28489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1833.416911][ T31] audit: type=1800 audit(1790073813.567:46): pid=28520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12647" name="memory.events" dev="tmpfs" ino=303 res=0 errno=0 [ 1833.511903][T28522] bridge1: entered allmulticast mode [ 1834.069452][T28548] netlink: 'syz.2.12652': attribute type 1 has an invalid length. [ 1834.319812][T28569] netlink: 'syz.2.12656': attribute type 10 has an invalid length. [ 1834.452294][T28573] netlink: 'syz.1.12657': attribute type 4 has an invalid length. [ 1834.786521][T28593] Bluetooth: hci0: unsupported parameter 5135 [ 1834.786541][T28593] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 1835.104502][T28607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1835.357735][T28634] netlink: 'syz.3.12670': attribute type 1 has an invalid length. [ 1835.403118][T28638] netlink: 'syz.2.12672': attribute type 1 has an invalid length. [ 1835.475587][T28640] bond0: (slave geneve2): making interface the new active one [ 1835.476549][T28640] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1835.496483][T28998] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1835.496527][T28998] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1835.496558][T28998] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1835.496588][T28998] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1835.533897][T28634] __nla_validate_parse: 6 callbacks suppressed [ 1835.533916][T28634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12670'. [ 1835.549071][T28634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1835.575786][T28638] macvtap1: entered allmulticast mode [ 1835.610893][T28638] macvtap2: entered allmulticast mode [ 1835.649576][T28638] bond1: (slave bridge2): making interface the new active one [ 1835.657769][T28638] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1835.679054][T28648] netlink: 'syz.5.12674': attribute type 4 has an invalid length. [ 1835.692764][T28648] netlink: 'syz.5.12674': attribute type 4 has an invalid length. [ 1835.705142][T28332] lo speed is unknown, defaulting to 1000 [ 1835.705165][T28332] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 1835.790456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1835.854330][T28657] netlink: 244 bytes leftover after parsing attributes in process `syz.2.12677'. [ 1835.855591][T28657] netlink: 'syz.2.12677': attribute type 11 has an invalid length. [ 1836.059750][T28677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12682'. [ 1836.239424][T28683] bridge0: entered allmulticast mode [ 1836.293898][T28685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12685'. [ 1836.295859][T28686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12685'. [ 1836.300431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1836.366166][T28688] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12686'. [ 1836.366599][T28688] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12686'. [ 1836.367663][T28690] netlink: 'syz.4.12687': attribute type 2 has an invalid length. [ 1836.367680][T28690] netlink: 'syz.4.12687': attribute type 1 has an invalid length. [ 1836.367691][T28690] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12687'. [ 1837.334391][T28742] netlink: 388 bytes leftover after parsing attributes in process `syz.3.12696'. [ 1837.359447][T28742] syzkaller0: entered promiscuous mode [ 1837.359469][T28742] syzkaller0: entered allmulticast mode [ 1837.588918][T28754] ipvlan2: entered promiscuous mode [ 1837.589636][T28754] ipvlan2: entered allmulticast mode [ 1837.604713][T28754] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1837.673141][T28756] ipvlan3: entered promiscuous mode [ 1837.673165][T28756] ipvlan3: entered allmulticast mode [ 1837.673487][T28756] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1837.779340][T28762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12700'. [ 1837.779365][T28762] block nbd10: Unsupported socket: should be TCP or UNIX. [ 1837.851556][T28766] syzkaller0: entered promiscuous mode [ 1837.851576][T28766] syzkaller0: entered allmulticast mode [ 1837.883912][T28769] netlink: 'syz.5.12703': attribute type 1 has an invalid length. [ 1838.058725][T28779] netlink: 'syz.5.12705': attribute type 11 has an invalid length. [ 1838.113886][T28782] tipc: Enabling of bearer rejected, media not registered [ 1838.188509][ T31] audit: type=1800 audit(1790073818.337:47): pid=28785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12709" name="blkio.bfq.time_recursive" dev="tmpfs" ino=371 res=0 errno=0 [ 1838.245888][T28782] wg2 speed is unknown, defaulting to 1000 [ 1838.299181][T28796] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1838.367006][T28796] hsr_slave_1 (unregistering): left promiscuous mode [ 1838.797449][T28803] : (slave syz_tun): Releasing backup interface [ 1839.026589][T28782] lo speed is unknown, defaulting to 1000 [ 1839.697950][T28843] rds_bind: 24 callbacks suppressed [ 1839.697970][T28843] RDS: rds_bind could not find a transport for 0:0:80::, load rds_tcp or rds_rdma? [ 1840.479922][T28868] netlink: 'syz.5.12726': attribute type 10 has an invalid length. [ 1840.546538][T28871] __nla_validate_parse: 20 callbacks suppressed [ 1840.546558][T28871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12727'. [ 1840.546578][T28871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12727'. [ 1840.552625][T28871] syzkaller1: entered promiscuous mode [ 1840.552646][T28871] syzkaller1: entered allmulticast mode [ 1840.586133][T28871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12727'. [ 1840.620453][T28871] vlan4: entered allmulticast mode [ 1840.620475][T28871] bridge_slave_0: entered allmulticast mode [ 1840.669696][T28879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12729'. [ 1841.076444][T28904] netlink: 'syz.3.12732': attribute type 2 has an invalid length. [ 1841.188005][T28893] syzkaller0: entered promiscuous mode [ 1841.188029][T28893] syzkaller0: entered allmulticast mode [ 1841.238549][T28904] : entered promiscuous mode [ 1841.239505][T28907] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1841.280724][T28909] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12734'. [ 1841.596752][T28924] Cannot find add_set index 0 as target [ 1841.596935][T28924] Cannot find add_set index 0 as target [ 1841.597092][T28924] Cannot find add_set index 0 as target [ 1841.597249][T28924] Cannot find add_set index 0 as target [ 1841.597485][T28924] Cannot find add_set index 0 as target [ 1841.597642][T28924] Cannot find add_set index 0 as target [ 1841.597798][T28924] Cannot find add_set index 0 as target [ 1841.597949][T28924] Cannot find add_set index 0 as target [ 1841.598103][T28924] Cannot find add_set index 0 as target [ 1841.664428][T28924] Cannot find add_set index 0 as target [ 1841.784440][T28935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12738'. [ 1841.801662][T28919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12734'. [ 1842.858490][T28965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12742'. [ 1846.144611][T28971] netlink: 'syz.5.12744': attribute type 1 has an invalid length. [ 1846.194103][T28971] bond0: option mode: invalid value (8) [ 1846.195773][T28971] bond0 (unregistering): Released all slaves [ 1846.347345][T28980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12747'. [ 1846.376650][T28980] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12747'. [ 1846.407381][T28980] netlink: Unknown conntrack attr (type=13318, max=9) [ 1846.407433][T28980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1846.438472][T28980] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1846.744523][T29007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1846.745019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1846.748366][T29007] netlink: 'syz.5.12751': attribute type 17 has an invalid length. [ 1846.749556][T29152] lo speed is unknown, defaulting to 1000 [ 1846.749621][T29145] lo speed is unknown, defaulting to 1000 [ 1846.771291][T29010] netlink: Invalid conntrack timeout [ 1846.771319][T29010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1846.818328][T29004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12750'. [ 1847.044107][T29009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12749'. [ 1847.139396][T29012] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12749'. [ 1847.457445][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880375d3800: rx timeout, send abort [ 1847.761018][T29037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12754'. [ 1847.817629][T29048] wg2 speed is unknown, defaulting to 1000 [ 1847.957500][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880375d3800: abort rx timeout. Force session deactivation [ 1847.957707][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880375d0800: rx timeout, send abort [ 1848.084719][T29058] netlink: 'syz.1.12763': attribute type 1 has an invalid length. [ 1848.457751][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880375d0800: abort rx timeout. Force session deactivation [ 1848.582832][T29073] openvswitch: netlink: Key type 134 is out of range max 32 [ 1848.674692][T29048] lo speed is unknown, defaulting to 1000 [ 1848.980326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1848.993095][T29095] netlink: 'syz.5.12771': attribute type 4 has an invalid length. [ 1849.068257][T29097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12772'. [ 1849.143870][T28330] lo speed is unknown, defaulting to 1000 [ 1849.143908][T28330] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 1849.144014][T29105] netlink: 'syz.4.12772': attribute type 3 has an invalid length. [ 1849.309440][T29110] netlink: 'syz.3.12774': attribute type 1 has an invalid length. [ 1849.465746][T29121] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1849.466750][T29121] syzkaller0: entered promiscuous mode [ 1849.466767][T29121] syzkaller0: entered allmulticast mode [ 1849.559378][T29129] xt_hashlimit: max too large, truncated to 1048576 [ 1849.873146][T29138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12781'. [ 1849.903613][T29138] netlink: zone id is out of range [ 1849.923180][T29143] dvmrp0: entered allmulticast mode [ 1849.968197][T29146] hsr_slave_0: left promiscuous mode [ 1849.979111][T29146] hsr_slave_1: left promiscuous mode [ 1850.083664][T29149] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20000 [ 1850.104248][T29149] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20000 [ 1850.527698][T29171] Bluetooth: hci0: unsupported parameter 5135 [ 1850.527719][T29171] Bluetooth: hci0: unsupported parameter 8192 [ 1850.527732][T29171] Bluetooth: hci0: unsupported parameter 5135 [ 1850.527743][T29171] Bluetooth: hci0: unsupported parameter 8192 [ 1850.589532][T29171] tun0: tun_chr_ioctl cmd 1074025675 [ 1850.589555][T29171] tun0: persist enabled [ 1850.589746][T29171] tun0: tun_chr_ioctl cmd 1074025675 [ 1850.589759][T29171] tun0: persist enabled [ 1850.665800][T29175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12789'. [ 1850.682771][T29176] bridge0: port 1(erspan0) entered blocking state [ 1850.683371][T29176] bridge0: port 1(erspan0) entered disabled state [ 1850.685174][T29176] erspan0: entered allmulticast mode [ 1850.819894][T29185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1850.819911][T29185] IPv6: NLM_F_CREATE should be set when creating new route [ 1850.819937][T29185] IPv6: NLM_F_CREATE should be set when creating new route [ 1851.058938][T29192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.059533][T29192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.094315][T29198] xt_TCPMSS: Only works on TCP SYN packets [ 1851.094952][T29199] xt_TCPMSS: Only works on TCP SYN packets [ 1851.228180][T29192] macvtap1: left allmulticast mode [ 1851.228269][T29192] macvtap2: left allmulticast mode [ 1851.260359][T19356] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.261390][T19356] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.261428][T19356] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.261459][T19356] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.102939][ T1309] net_ratelimit: 505 callbacks suppressed [ 1853.102961][ T1309] aoe: packet could not be sent on syzkaller0. consider increasing tx_queue_len [ 1890.701575][T29219] nbd: must specify at least one socket [ 1890.735371][T29218] netlink: 'syz.3.12800': attribute type 21 has an invalid length. [ 1890.735394][T29218] IPv6: NLM_F_CREATE should be specified when creating new route [ 1890.755081][T29219] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1890.775395][T29219] bond2 (unregistering): Released all slaves [ 1890.848174][T29218] 8021q: VLANs not supported on ip6gre0 [ 1890.877563][T29230] netlink: 'syz.5.12803': attribute type 31 has an invalid length. [ 1890.913999][T29226] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1890.919026][T29227] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12802'. [ 1890.919667][T29226] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12802'. [ 1890.929260][T29226] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12802'. [ 1891.393155][T29254] syzkaller0: entered promiscuous mode [ 1891.393175][T29254] syzkaller0: entered allmulticast mode [ 1891.667439][T29270] netlink: 'syz.3.12815': attribute type 1 has an invalid length. [ 1891.754776][T29270] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1891.857907][T29275] bond8: (slave geneve3): making interface the new active one [ 1891.868873][T29275] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 1891.910412][T29277] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1891.910506][T29277] syzkaller1: linktype set to 823 [ 1891.911254][T29259] syzkaller1: entered promiscuous mode [ 1891.911272][T29259] syzkaller1: entered allmulticast mode [ 1892.371956][T29284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.372301][T29284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.678443][T29284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1892.714818][T29284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1892.801419][T29305] ip_tables: iptables: counters copy to user failed while replacing table [ 1893.115078][T29284] vlan2: left promiscuous mode [ 1893.175271][T29286] bridge2: entered promiscuous mode [ 1893.178020][T29289] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12820'. [ 1893.200848][T32648] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.200880][T32648] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1893.201394][T19356] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.201421][T19356] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1893.201482][T19356] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.201506][T19356] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1893.201552][T19356] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.201575][T19356] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1893.222744][T29305] ip_vti0: left promiscuous mode [ 1893.223213][T29305] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1893.359702][T29320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12824'. [ 1893.386999][T29320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12824'. [ 1893.456257][T29327] sctp: [Deprecated]: syz.2.12826 (pid 29327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1893.456257][T29327] Use struct sctp_sack_info instead [ 1893.459237][T29330] pim6reg: entered allmulticast mode [ 1893.474703][T29327] openvswitch: netlink: IP tunnel dst address not specified [ 1893.533429][T29334] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1893.556887][T29327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12826'. [ 1893.605882][T29327] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12826'. [ 1893.606026][T29327] gre1: entered allmulticast mode [ 1894.061297][ C1] openvswitch: cpu_id mismatch with handler threads [ 1894.061616][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1894.257235][T29359] 0: reclassify loop, rule prio 0, protocol 03 [ 1894.257543][T29362] 0: reclassify loop, rule prio 0, protocol 03 [ 1894.267892][T29329] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12825'. [ 1894.428860][T29369] netlink: 'syz.1.12836': attribute type 1 has an invalid length. [ 1894.456349][T29369] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12836'. [ 1894.722528][T29383] sctp: [Deprecated]: syz.4.12840 (pid 29383) Use of int in max_burst socket option. [ 1894.722528][T29383] Use struct sctp_assoc_value instead [ 1894.835477][T29387] syzkaller0: entered promiscuous mode [ 1894.835500][T29387] syzkaller0: entered allmulticast mode [ 1895.129047][T29393] bridge0: port 3() entered blocking state [ 1895.129465][T29393] bridge0: port 3() entered disabled state [ 1895.129651][T29393] : entered allmulticast mode [ 1895.129692][T29393] bond_slave_0: entered allmulticast mode [ 1895.129709][T29393] bond_slave_1: entered allmulticast mode [ 1895.135681][T29393] : entered promiscuous mode [ 1895.135702][T29393] bond_slave_0: entered promiscuous mode [ 1895.135873][T29393] bond_slave_1: entered promiscuous mode [ 1895.339960][T29405] lo: entered promiscuous mode [ 1895.349010][T29405] tunl0: entered promiscuous mode [ 1895.349165][T29405] gre0: entered promiscuous mode [ 1895.349308][T29405] gretap0: entered promiscuous mode [ 1895.349414][T29405] erspan0: entered promiscuous mode [ 1895.354070][T29405] ip_vti0: entered promiscuous mode [ 1895.354227][T29405] ip6_vti0: entered promiscuous mode [ 1895.354407][T29405] sit0: entered promiscuous mode [ 1895.354514][T29405] ip6tnl0: entered promiscuous mode [ 1895.354616][T29405] ip6gre0: entered promiscuous mode [ 1895.354720][T29405] syz_tun: entered promiscuous mode [ 1895.354854][T29405] ip6gretap0: entered promiscuous mode [ 1895.354950][T29405] bridge0: entered promiscuous mode [ 1895.355072][T29405] vcan0: entered promiscuous mode [ 1895.355207][T29405] bond0: entered promiscuous mode [ 1895.355220][T29405] bond_slave_0: entered promiscuous mode [ 1895.358060][T29405] bond_slave_1: entered promiscuous mode [ 1895.358347][T29405] team0: entered promiscuous mode [ 1895.358360][T29405] team_slave_0: entered promiscuous mode [ 1895.358511][T29405] team_slave_1: entered promiscuous mode [ 1895.358864][T29405] dummy0: entered promiscuous mode [ 1895.359009][T29405] nlmon0: entered promiscuous mode [ 1895.359138][T29405] vxcan0: entered promiscuous mode [ 1895.359281][T29405] vxcan1: entered promiscuous mode [ 1895.359408][T29405] veth0: entered promiscuous mode [ 1895.359539][T29405] veth1: entered promiscuous mode [ 1895.366510][T29405] wg0: entered promiscuous mode [ 1895.366661][T29405] wg1: entered promiscuous mode [ 1895.366791][T29405] wg2: entered promiscuous mode [ 1895.366929][T29405] veth0_to_bridge: entered promiscuous mode [ 1895.367188][T29405] veth1_to_bridge: entered promiscuous mode [ 1895.370830][T29405] veth0_to_bond: entered promiscuous mode [ 1895.377024][T29405] veth1_to_bond: entered promiscuous mode [ 1895.377306][T29405] veth0_to_team: entered promiscuous mode [ 1895.377558][T29405] veth1_to_team: entered promiscuous mode [ 1895.377810][T29405] veth0_to_batadv: entered promiscuous mode [ 1895.377938][T29405] batadv_slave_0: entered promiscuous mode [ 1895.379578][T29405] veth1_to_batadv: entered promiscuous mode [ 1895.379722][T29405] batadv_slave_1: entered promiscuous mode [ 1895.385094][T29405] xfrm0: entered promiscuous mode [ 1895.385244][T29405] veth0_to_hsr: entered promiscuous mode [ 1895.385504][T29405] veth1_to_hsr: entered promiscuous mode [ 1895.388072][T29405] hsr0: entered promiscuous mode [ 1895.388214][T29405] veth1_virt_wifi: entered promiscuous mode [ 1895.388357][T29405] veth0_virt_wifi: entered promiscuous mode [ 1895.388487][T29405] virt_wifi0: entered promiscuous mode [ 1895.397032][T29405] vlan0: entered promiscuous mode [ 1895.398848][T29405] vlan1: entered promiscuous mode [ 1895.399137][T29405] macvlan0: entered promiscuous mode [ 1895.399272][T29405] macvlan1: entered promiscuous mode [ 1895.399403][T29405] ipvlan0: entered promiscuous mode [ 1895.404162][T29405] ipvlan1: entered promiscuous mode [ 1895.407723][T29405] macvtap0: entered promiscuous mode [ 1895.407860][T29405] macsec0: entered promiscuous mode [ 1895.407965][T29405] geneve0: entered promiscuous mode [ 1895.408105][T29405] geneve1: entered promiscuous mode [ 1895.408246][T29405] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1895.408361][T29405] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1895.409439][T29405] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 1895.411170][T29405] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 1895.411296][T29405] mac80211_hwsim hwsim181 wlan0: entered promiscuous mode [ 1895.413824][T29405] mac80211_hwsim hwsim182 wlan1: entered promiscuous mode [ 1895.414175][T29405] ipip0: entered promiscuous mode [ 1895.414316][T29405] bridge1: entered promiscuous mode [ 1895.414434][T29405] bond1: entered promiscuous mode [ 1895.414447][T29405] bridge2: entered promiscuous mode [ 1895.414674][T29405] macvtap1: entered promiscuous mode [ 1895.414823][T29405] macvtap2: entered promiscuous mode [ 1895.418451][T29405] dvmrp0: entered promiscuous mode [ 1895.418606][T29405] gre1: entered promiscuous mode [ 1895.641966][T29417] lo: entered allmulticast mode [ 1895.999471][T29435] netlink: 'syz.5.12854': attribute type 21 has an invalid length. [ 1895.999493][T29435] __nla_validate_parse: 5 callbacks suppressed [ 1895.999504][T29435] netlink: 128 bytes leftover after parsing attributes in process `syz.5.12854'. [ 1896.032115][T29435] netlink: 'syz.5.12854': attribute type 4 has an invalid length. [ 1896.032136][T29435] netlink: 'syz.5.12854': attribute type 3 has an invalid length. [ 1896.032148][T29435] netlink: 3 bytes leftover after parsing attributes in process `syz.5.12854'. [ 1896.127665][T29414] lo: left allmulticast mode [ 1896.173366][T29441] netlink: 'syz.2.12856': attribute type 1 has an invalid length. [ 1896.271543][T29441] bond2: entered promiscuous mode [ 1896.272021][T29441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1896.279546][T29449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1896.279928][T29449] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 1896.279947][T29449] bond2: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 1896.287501][T29441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12856'. [ 1896.335774][T29449] bond2: (slave gre2): making interface the new active one [ 1896.335798][T29449] gre2: entered promiscuous mode [ 1896.353582][T29449] bond2: (slave gre2): Enslaving as an active interface with an up link [ 1896.458456][T29441] bond2 (unregistering): (slave gre2): Releasing backup interface [ 1896.458483][T29441] gre2: left promiscuous mode [ 1896.477762][T29441] bond2 (unregistering): Released all slaves [ 1896.724989][T29480] netlink: 'syz.2.12861': attribute type 1 has an invalid length. [ 1896.729209][T29480] netlink: 'syz.2.12861': attribute type 1 has an invalid length. [ 1896.979913][T29495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12866'. [ 1897.023049][T29498] x_tables: duplicate underflow at hook 1 [ 1897.364684][T29522] syzkaller0: left promiscuous mode [ 1897.364707][T29522] syzkaller0: left allmulticast mode [ 1898.150924][T29543] x_tables: unsorted entry at hook 2 [ 1898.178986][T29543] tc action pedit 'at' offset 5 out of bounds [ 1898.419006][T29552] netlink: 'syz.2.12877': attribute type 1 has an invalid length. [ 1898.544425][T29552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1898.545742][T29562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12880'. [ 1898.547052][T29553] syz_tun: left promiscuous mode [ 1898.557356][T29553] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 1898.641956][T29567] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12881'. [ 1898.660679][T29565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12879'. [ 1898.675615][T32636] bond2: (slave syz_tun): link status definitely down, disabling slave [ 1898.687976][T29567] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12881'. [ 1898.768033][T29579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12883'. [ 1898.768057][T29579] openvswitch: netlink: Flow key attribute not present in set flow. [ 1898.965535][T29574] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1898.984383][T29587] netlink: Conntrack attr has 1 unknown bytes [ 1898.984417][T29587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1899.154299][T29587] wg2 speed is unknown, defaulting to 1000 [ 1899.253930][T29600] syzkaller0: entered promiscuous mode [ 1899.253951][T29600] syzkaller0: entered allmulticast mode [ 1899.283710][T29600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12888'. [ 1899.336857][T29600] tipc: Started in network mode [ 1899.336889][T29600] tipc: Node identity c283f1c86607, cluster identity 4711 [ 1899.337152][T29600] tipc: Enabled bearer , priority 0 [ 1899.395036][T29599] tipc: Resetting bearer [ 1899.496852][T29599] tipc: Disabling bearer [ 1899.771489][T29619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1899.771828][T29619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1899.772161][T29619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1899.772475][T29619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1899.779618][T29619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1899.779962][T29619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1899.784012][T29619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1899.929030][T29624] batman_adv: batadv0: Adding interface: syzkaller0 [ 1899.929048][T29624] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1899.929078][T29624] batman_adv: batadv0: Interface activated: syzkaller0 [ 1900.192506][T29587] lo speed is unknown, defaulting to 1000 [ 1900.699956][T29610] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1900.764417][T29610] batman_adv: batadv0: Removing interface: syzkaller0 [ 1901.097471][T29650] : renamed from bond_slave_0 (while UP) [ 1901.115676][T29652] __nla_validate_parse: 4 callbacks suppressed [ 1901.115694][T29652] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12901'. [ 1901.409250][T29666] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12905'. [ 1901.561785][T29678] netlink: 'syz.2.12907': attribute type 10 has an invalid length. [ 1901.561818][T29678] bridge0: left promiscuous mode [ 1901.563097][T29679] netlink: 'syz.2.12907': attribute type 10 has an invalid length. [ 1901.566354][T29678] bridge0: entered promiscuous mode [ 1901.566665][T29678] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1901.666776][T29687] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12910'. [ 1901.669462][T29687] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12910'. [ 1902.491106][T29740] x_tables: duplicate entry at hook 1 [ 1902.657120][T29747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12923'. [ 1902.982751][T29746] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1902.982786][T29746] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.290467][T29771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12926'. [ 1903.568501][T29746] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1903.568535][T29746] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.817339][T29746] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1903.817373][T29746] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.869471][T29798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12932'. [ 1903.973589][T29746] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1903.973624][T29746] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.434183][T32666] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1904.434215][T32666] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.434262][T32666] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1904.434286][T32666] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.434316][T32666] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1904.434351][T32666] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.434381][T32666] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1904.434404][T32666] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.489328][T29862] tipc: Started in network mode [ 1904.489355][T29862] tipc: Node identity 021a4ed141b, cluster identity 4711 [ 1904.492640][T29862] tipc: Enabled bearer , priority 0 [ 1904.619346][T29877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12939'. [ 1904.666491][T29877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1904.699378][T29877] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1904.709495][T29877] bond0: (slave batadv3): Enslaving as an active interface with an up link [ 1904.745833][T29877] bond0 (unregistering): (slave batadv3): Releasing backup interface [ 1904.756187][T29877] bond0 (unregistering): Released all slaves [ 1905.318420][T29945] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12943'. [ 1905.428034][T29816] workqueue: Failed to create a rescuer kthread for wq "nfc39_nci_rx_wq": -EINTR [ 1905.605168][T29311] tipc: Node number set to 1135234769 [ 1905.978956][T29993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12948'. [ 1906.136559][T29993] bond0: (slave bond_slave_1): Releasing backup interface [ 1907.298950][T30037] net_ratelimit: 36 callbacks suppressed [ 1907.298971][T30037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1907.336803][T30037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1907.708517][T30049] netlink: 'syz.4.12959': attribute type 3 has an invalid length. [ 1907.860735][T30052] netlink: 'syz.4.12960': attribute type 7 has an invalid length. [ 1907.860756][T30052] netlink: 'syz.4.12960': attribute type 8 has an invalid length. [ 1908.340211][T30061] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12964'. [ 1908.395722][T30065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12965'. [ 1908.395745][T30065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12965'. [ 1908.396575][T30065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12965'. [ 1908.396602][T30065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12965'. [ 1908.496093][T30061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12964'. [ 1908.535190][T30071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12967'. [ 1908.535790][T30071] netlink: 108 bytes leftover after parsing attributes in process `syz.3.12967'. [ 1908.729828][T30080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12970'. [ 1908.904821][T30083] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1908.904843][T30083] syzkaller1: Linktype set failed because interface is up [ 1908.922261][T30089] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12974'. [ 1908.934565][T29152] syzkaller1: tun_net_xmit 90 [ 1909.826915][T30114] IPVS: length: 15 != 8 [ 1910.249645][T30132] netlink: 'syz.4.12986': attribute type 1 has an invalid length. [ 1910.287543][T30136] syzkaller0: mtu less than device minimum [ 1910.598934][T30152] bridge_slave_1: left allmulticast mode [ 1910.598961][T30152] bridge_slave_1: left promiscuous mode [ 1910.599174][T30152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.627151][T30152] bridge_slave_0: left allmulticast mode [ 1910.627175][T30152] bridge_slave_0: left promiscuous mode [ 1910.627366][T30152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1910.665116][T30158] netlink: 'syz.5.12996': attribute type 70 has an invalid length. [ 1910.874857][T30143] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1911.188667][T30184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1911.418005][T30194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1911.698608][T30216] tipc: Started in network mode [ 1911.698637][T30216] tipc: Node identity fecfb9ea9215, cluster identity 4711 [ 1911.698790][T30216] tipc: Enabled bearer , priority 0 [ 1911.732581][T30208] tipc: Resetting bearer [ 1911.822819][T30214] syzkaller0: entered promiscuous mode [ 1911.822841][T30214] syzkaller0: entered allmulticast mode [ 1911.823524][T30214] syzkaller0: left allmulticast mode [ 1911.842739][T30207] tipc: Resetting bearer [ 1911.887750][T30207] tipc: Disabling bearer [ 1911.918774][T30225] lo: entered allmulticast mode [ 1911.919475][T30224] lo: left allmulticast mode [ 1912.015162][T30229] netlink: 'syz.2.13013': attribute type 4 has an invalid length. [ 1912.031227][T30229] .`: renamed from bond0 [ 1912.158924][T30237] bond2: Unable to set up delay as MII monitoring is disabled [ 1912.169819][T30237] bond2 (unregistering): Released all slaves [ 1912.236409][T30243] : left allmulticast mode [ 1912.236431][T30243] bond_slave_0: left allmulticast mode [ 1912.236447][T30243] bond_slave_1: left allmulticast mode [ 1912.236463][T30243] : left promiscuous mode [ 1912.236474][T30243] bond_slave_0: left promiscuous mode [ 1912.236677][T30243] bond_slave_1: left promiscuous mode [ 1912.237079][T30243] bridge0: port 3() entered disabled state [ 1912.239934][T30243] bridge_slave_0: left allmulticast mode [ 1912.239949][T30243] bridge_slave_0: left promiscuous mode [ 1912.261541][T30243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.272301][T30243] bridge_slave_1: left allmulticast mode [ 1912.272324][T30243] bridge_slave_1: left promiscuous mode [ 1912.272506][T30243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.288095][T30243] : (slave bond_slave_0): Releasing backup interface [ 1912.306152][T30253] ip6t_srh: unknown srh match flags 4000 [ 1912.323963][T30243] : (slave bond_slave_1): Releasing backup interface [ 1912.369581][T30243] team0: Port device team_slave_0 removed [ 1912.376520][T30243] team0: Port device team_slave_1 removed [ 1912.376750][T30243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1912.377353][T30243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1912.378633][T30243] bond0: (slave geneve2): Releasing active interface [ 1912.409125][T30243] bond8: (slave geneve3): Releasing active interface [ 1912.418875][T30251] team0: Mode changed to "activebackup" [ 1912.419060][T30255] vlan0: entered promiscuous mode [ 1912.452687][T30243] tipc: Enabled bearer , priority 0 [ 1912.475554][T30257] geneve0: entered promiscuous mode [ 1912.481852][T30257] geneve0: left promiscuous mode [ 1912.539317][T30258] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1912.539352][T30258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1912.811113][T30273] ip6gre1: entered promiscuous mode [ 1912.811151][T30273] ip6gre1: entered allmulticast mode [ 1912.814069][T32648] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1912.814284][T32648] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1912.841309][T29152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1912.842392][T30271] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1913.264463][T29152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1913.330376][T29152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1914.346546][T30328] xt_policy: neither incoming nor outgoing policy selected [ 1914.545167][ T1309] aoe: packet could not be sent on syzkaller0. consider increasing tx_queue_len [ 1914.614523][T30345] __nla_validate_parse: 21 callbacks suppressed [ 1914.614543][T30345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13045'. [ 1914.614558][T30345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13045'. [ 1914.800280][T32645] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1914.800314][T32645] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.800640][T32648] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1914.800665][T32648] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.800699][T32648] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1914.800721][T32648] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.800755][T32648] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1914.800777][T32648] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.933909][T30352] bond2: option fail_over_mac: invalid value (127) [ 1914.936068][T30352] bond2 (unregistering): Released all slaves [ 1914.956346][T30358] netlink: 'syz.3.13050': attribute type 4 has an invalid length. [ 1914.956569][T30356] erspan0: entered promiscuous mode [ 1914.957126][T30358] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13050'. [ 1915.260622][T30376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13055'. [ 1915.260648][T30376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13055'. [ 1915.495683][T30380] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13056'. [ 1915.543998][T30382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13057'. [ 1915.651811][T30387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13058'. [ 1915.762256][T30355] erspan0: left promiscuous mode [ 1916.247334][T30393] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1916.257838][T30393] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13059'. [ 1916.486941][T30398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13061'. [ 1916.579974][T30398] syzkaller0: entered promiscuous mode [ 1916.582161][T30398] syzkaller0: entered allmulticast mode [ 1916.907199][T30424] mac80211_hwsim hwsim166 wlan0: left promiscuous mode [ 1917.020184][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1917.160431][T30434] bond2: entered allmulticast mode [ 1917.701859][T30465] ip_tables: iptables: counters copy to user failed while replacing table [ 1917.886638][T30476] ip6tnl2: entered allmulticast mode [ 1918.718527][T30516] netlink: 'syz.1.13088': attribute type 1 has an invalid length. [ 1918.796898][T30516] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1918.868009][T30521] bond3: (slave geneve2): making interface the new active one [ 1918.886799][T30521] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1918.923817][T30529] bridge0: port 1() entered blocking state [ 1918.923902][T30529] bridge0: port 1() entered disabled state [ 1918.924076][T30529] : entered allmulticast mode [ 1918.961763][T30529] : entered promiscuous mode [ 1919.036497][T30521] syz.1.13088 (30521) used greatest stack depth: 17984 bytes left [ 1919.037647][T29152] Dead loop on virtual device lo (net 4721), fix it urgently! [ 1919.094655][T19356] Dead loop on virtual device lo (net 4721), fix it urgently! [ 1919.223913][T30536] vlan3: entered promiscuous mode [ 1919.244009][T30532] udevd[30532]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1919.259951][T30532] udevd[30532]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1919.427774][T30549] syzkaller0: entered promiscuous mode [ 1919.427797][T30549] syzkaller0: entered allmulticast mode [ 1919.486458][T30561] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1919.620552][T30564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1919.636498][T30563] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1919.636999][T30567] __nla_validate_parse: 9 callbacks suppressed [ 1919.637012][T30567] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13102'. [ 1919.637027][T30567] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13102'. [ 1919.637041][T30567] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13102'. [ 1919.687464][T19373] Dead loop on virtual device lo (net 4721), fix it urgently! [ 1919.781630][T30574] syzkaller0: entered promiscuous mode [ 1919.781652][T30574] syzkaller0: entered allmulticast mode [ 1919.831508][T29152] Dead loop on virtual device lo (net 4721), fix it urgently! [ 1920.340292][T30598] bridge4: entered promiscuous mode [ 1920.340315][T30598] bridge4: entered allmulticast mode [ 1920.479936][T30607] ip6erspan0: entered allmulticast mode [ 1920.490787][T30609] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1920.595903][T30618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13111'. [ 1920.728510][T32636] Dead loop on virtual device lo (net 4721), fix it urgently! [ 1920.729219][T32636] Dead loop on virtual device lo (net 4721), fix it urgently! [ 1920.899831][T30640] netlink: 820 bytes leftover after parsing attributes in process `syz.4.13115'. [ 1921.501698][T28330] Dead loop on virtual device lo (net 4721), fix it urgently! [ 1921.998121][T30664] netlink: 324 bytes leftover after parsing attributes in process `syz.2.13120'. [ 1922.096189][T30668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13123'. [ 1922.134914][T30671] veth1_to_bond: entered allmulticast mode [ 1922.136569][T30671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13124'. [ 1922.136588][T30671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13124'. [ 1922.183802][T30668] netlink: 'syz.5.13123': attribute type 5 has an invalid length. [ 1922.183823][T30668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13123'. [ 1922.246583][T30669] veth1_to_bond: left allmulticast mode [ 1922.378809][T30685] bond5: entered promiscuous mode [ 1922.403558][T30692] syzkaller0: entered promiscuous mode [ 1922.403590][T30692] syzkaller0: entered allmulticast mode [ 1922.815568][T30705] bond0: (slave 17): Releasing backup interface [ 1922.875578][T30705] team0: Port device team_slave_0 removed [ 1922.910662][T30705] team0: Port device team_slave_1 removed [ 1922.911753][T30705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1922.911774][T30705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1922.913425][T30709] netlink: 'syz.4.13135': attribute type 16 has an invalid length. [ 1922.913446][T30709] netlink: 'syz.4.13135': attribute type 17 has an invalid length. [ 1922.916917][T30705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1922.916937][T30705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1922.919242][T30705] net_ratelimit: 2 callbacks suppressed [ 1922.919256][T30705] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1923.058315][T30709] 0{X: left allmulticast mode [ 1923.092010][T30709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1923.096045][T30709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1923.156883][T30717] netlink: 'syz.4.13135': attribute type 2 has an invalid length. [ 1923.156907][T30717] netlink: 'syz.4.13135': attribute type 2 has an invalid length. [ 1923.200655][T30709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1923.203987][T30709] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1923.437064][T30716] syzkaller0: entered promiscuous mode [ 1923.437080][T30716] syzkaller0: entered allmulticast mode [ 1923.801861][T30744] netlink: 'syz.1.13144': attribute type 1 has an invalid length. [ 1923.956501][T30744] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1923.995268][T30748] Cannot find map_set index 2 as target [ 1924.934134][T30762] netlink: 'syz.2.13149': attribute type 10 has an invalid length. [ 1924.941087][ C0] Dead loop on virtual device lo (net 4721), fix it urgently! [ 1925.001825][T30791] __nla_validate_parse: 8 callbacks suppressed [ 1925.001843][T30791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13154'. [ 1925.097075][T30796] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13156'. [ 1925.157674][T30798] erspan0: left allmulticast mode [ 1925.157901][T30798] bridge0: port 1(erspan0) entered disabled state [ 1925.179826][T30798] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1925.363707][T30800] tipc: Enabled bearer , priority 0 [ 1925.368582][T30800] syzkaller0: entered promiscuous mode [ 1925.368604][T30800] syzkaller0: entered allmulticast mode [ 1925.396141][T30800] tipc: Resetting bearer [ 1925.523184][T30799] tipc: Resetting bearer [ 1925.564783][T30799] tipc: Disabling bearer [ 1925.608557][T30813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13160'. [ 1925.805265][T30829] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13161'. [ 1925.822409][T29145] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1926.012375][T30848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13168'. [ 1926.060219][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1926.293540][T30853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13167'. [ 1926.608419][T30873] netlink: 'syz.1.13171': attribute type 1 has an invalid length. [ 1926.861486][T28330] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1926.878319][T30873] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1926.982273][T30875] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1926.982636][T30875] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1926.983137][T30875] bond5: (slave xfrm1): Error -95 calling set_mac_address [ 1927.048750][T30877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1927.146215][T30887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13173'. [ 1927.146251][T30887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13173'. [ 1927.192226][T30885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13174'. [ 1927.320281][T30892] veth5: entered promiscuous mode [ 1927.320304][T30892] veth5: entered allmulticast mode [ 1927.321099][T30892] bridge4: port 1(veth5) entered blocking state [ 1927.321203][T30892] bridge4: port 1(veth5) entered disabled state [ 1927.324076][T30892] bridge4: port 1(veth5) entered blocking state [ 1927.324178][T30892] bridge4: port 1(veth5) entered forwarding state [ 1927.365357][T32645] bridge4: port 1(veth5) entered disabled state [ 1927.478793][T30894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13175'. [ 1927.582629][T30912] netlink: 'syz.3.13180': attribute type 3 has an invalid length. [ 1927.871514][ T31] audit: type=1800 audit(1790073908.027:48): pid=30929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13184" name="memory.events" dev="tmpfs" ino=822 res=0 errno=0 [ 1928.084681][T30946] ip6tnl1: entered allmulticast mode [ 1928.432654][T30955] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1928.579835][T30972] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1928.867171][T30982] netpci0: tun_chr_ioctl cmd 1074025678 [ 1928.867622][T30982] netpci0: group set to 0 [ 1929.616749][T31032] syzkaller0: entered promiscuous mode [ 1929.616770][T31032] syzkaller0: entered allmulticast mode [ 1929.784061][T31044] bridge_slave_0: left promiscuous mode [ 1929.952547][T31053] block nbd10: Unsupported socket: should be TCP or UNIX. [ 1930.017714][ T31] audit: type=1800 audit(1790073910.167:49): pid=31056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13219" name="memory.events" dev="tmpfs" ino=2546 res=0 errno=0 [ 1930.019185][ T31] audit: type=1800 audit(1790073910.167:50): pid=31057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13219" name="memory.events" dev="tmpfs" ino=2546 res=0 errno=0 [ 1930.023437][ T31] audit: type=1804 audit(1790073910.177:51): pid=31056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.13219" name="/newroot/493/memory.events" dev="tmpfs" ino=2546 res=1 errno=0 [ 1930.396371][T31072] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 1930.457470][T31075] netlink: 'syz.2.13224': attribute type 4 has an invalid length. [ 1930.457492][T31075] __nla_validate_parse: 15 callbacks suppressed [ 1930.457504][T31075] netlink: 17 bytes leftover after parsing attributes in process `syz.2.13224'. [ 1930.511723][T31076] tipc: Started in network mode [ 1930.511753][T31076] tipc: Node identity 326491c6fc31, cluster identity 4711 [ 1930.518695][T31076] tipc: Enabled bearer , priority 20 [ 1930.615180][T31083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13230'. [ 1930.834057][T31098] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 1931.081456][T31106] sctp: [Deprecated]: syz.4.13233 (pid 31106) Use of int in maxseg socket option. [ 1931.081456][T31106] Use struct sctp_assoc_value instead [ 1931.083412][T31106] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13233'. [ 1931.429199][T31113] sctp: [Deprecated]: syz.5.13234 (pid 31113) Use of int in max_burst socket option deprecated. [ 1931.429199][T31113] Use struct sctp_assoc_value instead [ 1931.546059][T31119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13235'. [ 1931.546087][T31119] netlink: 67 bytes leftover after parsing attributes in process `syz.2.13235'. [ 1931.613612][T31121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13236'. [ 1931.692886][T29314] tipc: Node number set to 3461714374 [ 1931.831332][T31128] netlink: 'syz.1.13237': attribute type 1 has an invalid length. [ 1931.832513][T31129] netlink: 'syz.1.13237': attribute type 1 has an invalid length. [ 1931.877115][T31131] netlink: 'syz.2.13238': attribute type 21 has an invalid length. [ 1931.901009][T31128] gretap1: entered allmulticast mode [ 1931.905923][T31128] bond7: (slave gretap1): making interface the new active one [ 1931.915761][T31128] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 1931.916024][T31131] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13238'. [ 1931.919880][T31137] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13241'. [ 1932.078245][T31137] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13241'. [ 1932.147769][T31146] netlink: 495 bytes leftover after parsing attributes in process `syz.1.13243'. [ 1932.268837][T31152] netlink: 'syz.4.13247': attribute type 1 has an invalid length. [ 1932.313930][T31152] bond6: entered promiscuous mode [ 1932.314314][T31152] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1932.315074][T31152] netlink: 'syz.4.13247': attribute type 1 has an invalid length. [ 1932.315286][T31152] netlink: 'syz.4.13247': attribute type 1 has an invalid length. [ 1932.315485][T31152] netlink: 'syz.4.13247': attribute type 1 has an invalid length. [ 1932.316879][T31152] netlink: 'syz.4.13247': attribute type 1 has an invalid length. [ 1932.377338][T31154] bond6: (slave bridge5): making interface the new active one [ 1932.377360][T31154] bridge5: entered promiscuous mode [ 1932.385325][T31154] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1932.388032][T31160] tipc: Enabled bearer , priority 20 [ 1932.441039][T31165] block nbd10: server does not support multiple connections per device. [ 1932.442366][T31165] block nbd10: shutting down sockets [ 1933.060796][T31160] tipc: Resetting bearer [ 1933.067553][T31160] tipc: Resetting bearer [ 1933.306326][T31160] bond1: left promiscuous mode [ 1933.489102][T31160] bond2: left allmulticast mode [ 1933.522655][T31160] gretap1: left allmulticast mode [ 1933.641773][T32636] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1933.641822][T32636] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1933.641861][T32636] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1933.641884][T32636] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1933.641917][T32636] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1933.641940][T32636] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1933.641972][T32636] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1933.641994][T32636] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1933.649035][T29301] tipc: Node number set to 2760176072 [ 1934.137741][T31191] syzkaller1: entered promiscuous mode [ 1934.137763][T31191] syzkaller1: entered allmulticast mode [ 1934.157458][T31207] wg2 speed is unknown, defaulting to 1000 [ 1934.261699][T31216] veth3: entered allmulticast mode [ 1934.567301][T31207] lo speed is unknown, defaulting to 1000 [ 1935.179309][T31266] validate_nla: 5 callbacks suppressed [ 1935.179328][T31266] netlink: 'syz.5.13273': attribute type 30 has an invalid length. [ 1935.275739][T31270] xt_TCPMSS: Only works on TCP SYN packets [ 1935.480597][T31286] __nla_validate_parse: 20 callbacks suppressed [ 1935.480617][T31286] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13279'. [ 1935.560483][T31292] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13279'. [ 1935.772470][T31303] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13281'. [ 1935.793511][T31303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13281'. [ 1935.793532][T31303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13281'. [ 1935.879687][T31309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13283'. [ 1936.071375][T31321] veth1_to_batadv: left promiscuous mode [ 1936.946555][T31360] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13293'. [ 1936.984297][T31366] ip_tables: iptables: counters copy to user failed while replacing table [ 1937.025622][T31370] netlink: 41 bytes leftover after parsing attributes in process `syz.4.13297'. [ 1937.025679][T31370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1937.137620][T31370] syzkaller0: entered promiscuous mode [ 1937.137647][T31370] syzkaller0: entered allmulticast mode [ 1941.085087][T31402] syzkaller0: entered promiscuous mode [ 1941.085112][T31402] syzkaller0: entered allmulticast mode [ 1941.293100][T31429] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13305'. [ 1942.705089][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1945.171446][T31433] bond0: (slave gretap0): Error: Device is in use and cannot be enslaved [ 1945.211459][T31462] syzkaller0: entered promiscuous mode [ 1945.211481][T31462] syzkaller0: entered allmulticast mode [ 1945.213482][T31474] IPVS: Error connecting to the multicast addr [ 1945.366833][T31484] x_tables: duplicate underflow at hook 1 [ 1945.366912][T31484] x_tables: duplicate underflow at hook 1 [ 1945.366990][T31484] x_tables: duplicate underflow at hook 1 [ 1945.367058][T31484] x_tables: duplicate underflow at hook 1 [ 1945.367138][T31484] x_tables: duplicate underflow at hook 1 [ 1945.367208][T31484] x_tables: duplicate underflow at hook 1 [ 1945.367278][T31484] x_tables: duplicate underflow at hook 1 [ 1945.367347][T31484] x_tables: duplicate underflow at hook 1 [ 1945.367421][T31484] x_tables: duplicate underflow at hook 1 [ 1945.367490][T31484] x_tables: duplicate underflow at hook 1 [ 1945.454164][T31488] geneve2: entered promiscuous mode [ 1945.471145][T32648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.472755][T19373] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.472793][T19373] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.472825][T19373] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.671354][T31504] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13319'. [ 1945.671378][T31504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1945.990960][T31527] sctp: [Deprecated]: syz.5.13323 (pid 31527) Use of int in max_burst socket option deprecated. [ 1945.990960][T31527] Use struct sctp_assoc_value instead [ 1946.215629][T31539] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13325'. [ 1946.860259][T31577] netlink: 56 bytes leftover after parsing attributes in process `syz.5.13336'. [ 1946.971526][T31580] team_slave_0: entered allmulticast mode [ 1946.981625][T31580] team0: Port device team_slave_0 added [ 1947.075991][T31588] netlink: 'syz.1.13337': attribute type 4 has an invalid length. [ 1947.076013][T31588] netlink: 17 bytes leftover after parsing attributes in process `syz.1.13337'. [ 1947.276692][T31604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13343'. [ 1947.667896][T31620] bond0: option miimon: invalid value (18446744073357230079) [ 1947.667919][T31620] bond0: option miimon: allowed values 0 - 2147483647 [ 1947.669661][T31620] bond0 (unregistering): Released all slaves [ 1947.775767][T31631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13349'. [ 1947.775789][T31631] netlink: 'syz.2.13349': attribute type 10 has an invalid length. [ 1947.775798][T31631] netlink: 'syz.2.13349': attribute type 5 has an invalid length. [ 1947.775805][T31631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13349'. [ 1947.781538][T31631] geneve2: entered promiscuous mode [ 1947.781558][T31631] geneve2: entered allmulticast mode [ 1947.800577][T32645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 42106 - 0 [ 1947.801114][T32648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 42106 - 0 [ 1947.801174][T32648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 42106 - 0 [ 1947.801204][T32648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 42106 - 0 [ 1947.877814][T31633] xt_REDIRECT: bad rangesize 26624. [ 1948.156954][T31654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13354'. [ 1949.394157][T31699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13362'. [ 1949.402413][T31690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13362'. [ 1949.443300][T31690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13362'. [ 1950.434705][T31720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13365'. [ 1953.188322][T31724] __nla_validate_parse: 1 callbacks suppressed [ 1953.188341][T31724] netlink: 168 bytes leftover after parsing attributes in process `syz.5.13367'. [ 1953.200707][T31722] netlink: 'syz.4.13366': attribute type 29 has an invalid length. [ 1953.214768][T31724] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13367'. [ 1953.261152][T31736] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 1953.277687][T31731] netlink: 'syz.2.13370': attribute type 4 has an invalid length. [ 1953.277707][T31731] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13370'. [ 1953.277734][T31731] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1953.379907][T31740] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13371'. [ 1953.429779][T31746] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13376'. [ 1953.451770][T31740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13371'. [ 1953.509715][T31757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13373'. [ 1953.511946][T31754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13375'. [ 1953.515128][T31757] netlink: 'syz.4.13373': attribute type 2 has an invalid length. [ 1953.515146][T31757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13373'. [ 1953.774927][T31765] syzkaller1: entered promiscuous mode [ 1953.774949][T31765] syzkaller1: entered allmulticast mode [ 1953.834592][T31773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1953.853730][T31774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13380'. [ 1954.296848][T31804] bond7: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 1954.296876][T31804] bond7: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 1954.297053][T31804] bond7: entered allmulticast mode [ 1954.444055][T31815] netlink: 'syz.4.13395': attribute type 1 has an invalid length. [ 1954.471698][T31814] bond8: entered promiscuous mode [ 1954.471722][T31814] bond8: entered allmulticast mode [ 1954.472007][T31814] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1954.587623][T31826] mac80211_hwsim hwsim174 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1955.065682][T31855] netlink: 'syz.1.13407': attribute type 1 has an invalid length. [ 1955.118998][T31857] tc_dump_action: action bad kind [ 1955.351252][T31863] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1955.352894][T31863] bond8: (slave bond9): Enslaving as an active interface with an up link [ 1955.372608][T31880] netlink: 'syz.2.13412': attribute type 11 has an invalid length. [ 1955.372798][T31877] netlink: 'syz.2.13412': attribute type 11 has an invalid length. [ 1955.676540][T31894] xt_connbytes: Forcing CT accounting to be enabled [ 1956.047117][T31917] sctp: [Deprecated]: syz.3.13420 (pid 31917) Use of int in maxseg socket option. [ 1956.047117][T31917] Use struct sctp_assoc_value instead [ 1956.076893][T31917] openvswitch: netlink: Actions may not be safe on all matching packets [ 1956.337293][T31926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1956.595228][T31935] ip_tables: iptables: counters copy to user failed while replacing table [ 1956.738951][T31947] openvswitch: netlink: Missing valid actions attribute. [ 1956.898999][T31956] netlink: 'syz.3.13429': attribute type 10 has an invalid length. [ 1957.376156][T31956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1957.378045][T31956] team0: Port device netdevsim1 added [ 1957.487783][T31964] netlink: 'syz.1.13430': attribute type 11 has an invalid length. [ 1957.591029][T31964] gretap0: entered promiscuous mode [ 1957.663894][T31964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1957.667255][T31964] 8021q: adding VLAN 0 to HW filter on device team0 [ 1957.698760][T31964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1957.743307][T31978] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1957.778044][T31964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1957.778062][T31964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1957.778651][T31964] tipc: Resetting bearer [ 1957.778817][T31964] tipc: Resetting bearer [ 1957.785619][T31964] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1958.555450][ T7862] IPVS: starting estimator thread 0... [ 1958.642310][T32007] IPVS: using max 34 ests per chain, 81600 per kthread [ 1958.712337][T32018] __nla_validate_parse: 14 callbacks suppressed [ 1958.712356][T32018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13444'. [ 1959.258104][T32039] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13451'. [ 1959.928782][T32073] syzkaller0: entered promiscuous mode [ 1959.928805][T32073] syzkaller0: entered allmulticast mode [ 1960.034394][T32080] netlink: 'syz.5.13461': attribute type 1 has an invalid length. [ 1960.128040][T32080] bond4: entered promiscuous mode [ 1960.128584][T32080] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1960.297777][T32088] syzkaller1: entered promiscuous mode [ 1960.297802][T32088] syzkaller1: entered allmulticast mode [ 1960.341088][T32088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13463'. [ 1960.564389][T32102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13467'. [ 1960.564416][T32102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13467'. [ 1960.770299][T32125] netlink: 'syz.2.13472': attribute type 2 has an invalid length. [ 1960.777012][T32125] netlink: 'syz.2.13472': attribute type 2 has an invalid length. [ 1960.777031][T32125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13472'. [ 1960.788605][T32125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13472'. [ 1960.871645][T32131] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13475'. [ 1961.222960][T32146] syzkaller0: entered promiscuous mode [ 1961.222983][T32146] syzkaller0: entered allmulticast mode [ 1961.296283][T32645] IPVS: starting estimator thread 0... [ 1961.380540][T32153] IPVS: using max 30 ests per chain, 72000 per kthread [ 1961.445060][T32161] netlink: 'syz.5.13485': attribute type 21 has an invalid length. [ 1961.445081][T32161] netlink: 128 bytes leftover after parsing attributes in process `syz.5.13485'. [ 1961.445132][T32161] netlink: 'syz.5.13485': attribute type 4 has an invalid length. [ 1961.445144][T32161] netlink: 'syz.5.13485': attribute type 5 has an invalid length. [ 1961.445155][T32161] netlink: 3 bytes leftover after parsing attributes in process `syz.5.13485'. [ 1961.913536][T32191] openvswitch: netlink: Duplicate key (type 0). [ 1961.945879][T32198] netlink: 'syz.3.13497': attribute type 2 has an invalid length. [ 1962.010594][T32202] netlink: 'syz.5.13496': attribute type 1 has an invalid length. [ 1962.102257][T32202] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1962.203221][T32213] netlink: 'syz.4.13499': attribute type 1 has an invalid length. [ 1962.203623][T32213] netlink: 'syz.4.13499': attribute type 23 has an invalid length. [ 1962.479513][T32232] ip_tables: iptables: counters copy to user failed while replacing table [ 1962.599090][T32234] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1962.891877][T32247] bond4: (slave geneve3): making interface the new active one [ 1962.892642][T32247] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1962.902254][T32247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1962.902814][T32668] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1962.909638][T32668] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1962.921464][ T7862] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1962.921503][ T7862] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1963.009462][T32255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1963.334273][ T7862] tipc: Subscription rejected, illegal request [ 1963.539008][T32287] 8021q: VLANs not supported on ip_vti0 [ 1963.595001][T32289] syzkaller0: left promiscuous mode [ 1963.595024][T32289] syzkaller0: left allmulticast mode [ 1963.747012][T32300] __nla_validate_parse: 10 callbacks suppressed [ 1963.747031][T32300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13526'. [ 1963.789894][T32302] netlink: 104 bytes leftover after parsing attributes in process `syz.5.13527'. [ 1963.811960][T32297] syz_tun: entered allmulticast mode [ 1963.887664][T32307] ipvlan0: entered promiscuous mode [ 1963.887726][T32307] ipvlan0: entered allmulticast mode [ 1963.887740][T32307] veth0_vlan: entered allmulticast mode [ 1964.008508][T32311] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1964.037992][T32315] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13533'. [ 1964.038016][T32315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13533'. [ 1964.038031][T32315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13533'. [ 1964.049094][T32317] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13533'. [ 1964.049115][T32317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13533'. [ 1964.049130][T32317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13533'. [ 1964.252274][T32323] syzkaller0: entered promiscuous mode [ 1964.252299][T32323] syzkaller0: entered allmulticast mode [ 1964.258904][T32323] tipc: Enabled bearer , priority 0 [ 1964.785358][T32339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13538'. [ 1968.401117][T32328] tipc: Resetting bearer [ 1968.458488][T32342] lo: entered allmulticast mode [ 1968.477453][T32342] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13539'. [ 1968.477478][T32342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1968.477939][T32321] tipc: Resetting bearer [ 1968.539006][T32321] tipc: Disabling bearer [ 1968.558488][T29311] lo speed is unknown, defaulting to 1000 [ 1968.558511][T29311] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 1968.691710][T32352] sctp: [Deprecated]: syz.4.13541 (pid 32352) Use of int in maxseg socket option. [ 1968.691710][T32352] Use struct sctp_assoc_value instead [ 1968.790553][T32362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13545'. [ 1968.796639][T32362] validate_nla: 2 callbacks suppressed [ 1968.796656][T32362] netlink: 'syz.1.13545': attribute type 25 has an invalid length. [ 1968.796669][T32362] netlink: 'syz.1.13545': attribute type 3 has an invalid length. [ 1968.796682][T32362] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13545'. [ 1969.354570][T32386] netlink: 'syz.5.13553': attribute type 9 has an invalid length. [ 1969.354592][T32386] netlink: 'syz.5.13553': attribute type 6 has an invalid length. [ 1969.354604][T32386] netlink: 'syz.5.13553': attribute type 7 has an invalid length. [ 1969.354615][T32386] netlink: 'syz.5.13553': attribute type 8 has an invalid length. [ 1969.636807][T32407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13556'. [ 1969.719462][T32410] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1969.778685][T32415] syzkaller1: entered promiscuous mode [ 1969.778707][T32415] syzkaller1: entered allmulticast mode [ 1969.794439][T32415] tipc: New replicast peer: 255.255.255.255 [ 1969.798880][T32415] tipc: Enabled bearer , priority 5 [ 1969.799469][T32417] tipc: Enabling of bearer rejected, already enabled [ 1969.899199][T32422] syzkaller0: mtu less than device minimum [ 1969.899281][T32422] syzkaller0: mtu less than device minimum [ 1969.899362][T32422] syzkaller0: mtu less than device minimum [ 1969.899464][T32422] syzkaller0: mtu less than device minimum [ 1969.899549][T32422] syzkaller0: mtu less than device minimum [ 1969.899622][T32422] syzkaller0: mtu less than device minimum [ 1969.899693][T32422] syzkaller0: mtu less than device minimum [ 1969.915108][T32422] syzkaller0: mtu less than device minimum [ 1969.915216][T32422] syzkaller0: mtu less than device minimum [ 1970.161074][T32428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13562'. [ 1970.412092][T32445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13564'. [ 1971.188571][T32481] netlink: 'syz.4.13571': attribute type 2 has an invalid length. [ 1971.188592][T32481] netlink: 'syz.4.13571': attribute type 8 has an invalid length. [ 1971.188604][T32481] netlink: 120 bytes leftover after parsing attributes in process `syz.4.13571'. [ 1971.302988][T32489] tipc: Enabled bearer , priority 20 [ 1971.632055][T32500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13574'. [ 1971.735086][T32508] xt_hashlimit: size too large, truncated to 1048576 [ 1971.869102][T32512] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13577'. [ 1971.869320][T32512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13577'. [ 1972.267430][T32520] syzkaller0: entered promiscuous mode [ 1972.267453][T32520] syzkaller0: entered allmulticast mode [ 1972.487034][T32549] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13586'. [ 1975.346980][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1975.982564][ T1309] net_ratelimit: 60 callbacks suppressed [ 1975.982584][ T1309] aoe: packet could not be sent on syzkaller0. consider increasing tx_queue_len [ 1976.239510][T10235] tipc: Node number set to 1826273770 [ 1976.299398][T32578] : renamed from vlan0 [ 1976.440523][T32592] vlan3: entered promiscuous mode [ 1976.440546][T32592] bridge0: entered promiscuous mode [ 1976.440560][T32592] vlan2: entered promiscuous mode [ 1976.440573][T32592] geneve0: entered promiscuous mode [ 1976.630334][T32599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13594'. [ 1976.763590][T32607] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.916969][T32621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13601'. [ 1977.018495][T32607] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1977.072384][T32625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13602'. [ 1977.208740][T32607] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1977.366488][T32607] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1977.436399][T32659] ip6gretap1: entered allmulticast mode [ 1977.599659][T32664] sctp: [Deprecated]: syz.1.13608 (pid 32664) Use of int in max_burst socket option deprecated. [ 1977.599659][T32664] Use struct sctp_assoc_value instead [ 1977.732238][T32648] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1977.780351][T32648] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1978.060463][T32668] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1978.060503][T32668] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1978.276504][T32696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13616'. [ 1978.293812][T32696] netlink: 'syz.5.13616': attribute type 1 has an invalid length. [ 1978.293967][T32696] netlink: 'syz.5.13616': attribute type 1 has an invalid length. [ 1978.294093][T32696] netlink: 'syz.5.13616': attribute type 1 has an invalid length. [ 1978.294240][T32696] netlink: 'syz.5.13616': attribute type 1 has an invalid length. [ 1978.294370][T32696] netlink: 'syz.5.13616': attribute type 1 has an invalid length. [ 1978.294497][T32696] netlink: 'syz.5.13616': attribute type 1 has an invalid length. [ 1978.294669][T32696] netlink: 'syz.5.13616': attribute type 1 has an invalid length. [ 1978.296085][T32696] netlink: 'syz.5.13616': attribute type 1 has an invalid length. [ 1978.296223][T32696] netlink: 'syz.5.13616': attribute type 1 has an invalid length. [ 1978.296365][T32696] netlink: 'syz.5.13616': attribute type 1 has an invalid length. [ 1978.455373][T32703] netlink: Unknown conntrack attr (type=4869, max=9) [ 1978.455415][T32703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1978.643466][T32706] tipc: Enabled bearer , priority 5 [ 1978.643582][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.643721][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.643854][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.648018][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.649825][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.653518][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.653667][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.653803][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.653932][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.654160][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.654290][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.654417][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.654545][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.654671][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.658169][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.658301][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.658424][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.658551][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.658673][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.658796][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.658920][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.659044][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.659172][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.659347][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.659473][T32706] tipc: Enabling of bearer rejected, already enabled [ 1978.702668][T32709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13618'. [ 1978.777619][T32712] syzkaller0: entered promiscuous mode [ 1978.777638][T32712] syzkaller0: entered allmulticast mode [ 1978.822876][T32709] ip6gre1: entered promiscuous mode [ 1978.822897][T32709] ip6gre1: entered allmulticast mode [ 1978.833564][ T7862] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1978.833784][ T7862] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1978.861593][T29311] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1979.071592][T32724] bridge4: entered allmulticast mode [ 1979.106185][T32719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13621'. [ 1979.179751][T32719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13621'. [ 1979.181134][T32719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13621'. [ 1979.197418][T32719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13621'. [ 1979.197728][T32719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13621'. [ 1979.221356][T29145] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1979.581273][T29145] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1980.117684][ T303] tipc: Enabled bearer , priority 10 [ 1981.138614][ T367] tipc: Enabling of bearer rejected, failed to enable media [ 1981.139811][ T368] xt_hashlimit: size too large, truncated to 1048576 [ 1981.139827][ T368] xt_hashlimit: max too large, truncated to 1048576 [ 1981.405137][ T376] syzkaller0: left promiscuous mode [ 1981.405158][ T376] syzkaller0: left allmulticast mode [ 1981.468566][ T376] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1981.788528][T32666] tipc: Subscription rejected, illegal request [ 1981.995995][ T406] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1982.019676][ T407] __nla_validate_parse: 7 callbacks suppressed [ 1982.019698][ T407] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13662'. [ 1982.046573][ T407] x_tables: ip_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 1982.103865][ T412] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13663'. [ 1982.109382][ T416] netlink: 232 bytes leftover after parsing attributes in process `syz.4.13662'. [ 1982.172118][ T411] syzkaller0: entered promiscuous mode [ 1982.172146][ T411] syzkaller0: entered allmulticast mode [ 1982.232839][ T412] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13663'. [ 1982.233325][ T412] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13663'. [ 1982.233785][ T412] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13663'. [ 1982.234199][ T412] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13663'. [ 1982.234695][ T412] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13663'. [ 1982.235183][ T412] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13663'. [ 1982.235652][ T412] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13663'. [ 1982.236579][ T407] wg2 speed is unknown, defaulting to 1000 [ 1982.540288][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1983.221879][ T9598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1983.239792][ T9598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1983.247612][ T9598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1983.256282][ T9598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1983.266254][ T9598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1983.403831][T28571] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1983.404673][T28571] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1983.404985][T28571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1983.414268][T28571] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1983.414907][T28571] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1985.428412][T28571] Bluetooth: hci1: command tx timeout [ 1986.582405][ T407] lo speed is unknown, defaulting to 1000 [ 1986.671744][T20565] syz_tun (unregistering): left allmulticast mode [ 1986.826805][ T452] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1987.299724][ T478] __nla_validate_parse: 24 callbacks suppressed [ 1987.299757][ T478] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.13674'. [ 1987.299773][ T478] validate_nla: 26 callbacks suppressed [ 1987.299784][ T478] netlink: 'syz.3.13674': attribute type 1 has an invalid length. [ 1987.375633][ T482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13675'. [ 1987.501430][T28571] Bluetooth: hci1: command tx timeout [ 1987.502592][ T434] wg2 speed is unknown, defaulting to 1000 [ 1987.611130][ T495] netlink: 'syz.3.13677': attribute type 10 has an invalid length. [ 1987.790419][ T504] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13679'. [ 1987.793568][ T505] syzkaller1: entered promiscuous mode [ 1987.793585][ T505] syzkaller1: entered allmulticast mode [ 1987.993428][ T514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13681'. [ 1988.564223][ T434] lo speed is unknown, defaulting to 1000 [ 1988.721221][ T527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13685'. [ 1988.721616][ T528] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13685'. [ 1988.934689][ T534] IPv6: NLM_F_CREATE should be specified when creating new route [ 1988.934773][ T534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1988.934784][ T534] IPv6: NLM_F_CREATE should be set when creating new route [ 1988.934822][ T534] IPv6: NLM_F_CREATE should be set when creating new route [ 1988.934844][ T534] IPv6: NLM_F_CREATE should be set when creating new route [ 1988.935619][ T534] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.13686'. [ 1989.154821][ T550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13689'. [ 1989.304740][ T546] macvlan2: entered promiscuous mode [ 1989.304762][ T546] macvlan2: entered allmulticast mode [ 1989.306068][ T546] bond5: entered promiscuous mode [ 1989.306889][ T546] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1989.336561][ T546] bond5: left promiscuous mode [ 1989.399903][ T554] netlink: 'syz.3.13690': attribute type 10 has an invalid length. [ 1989.404407][ T550] macvlan2: entered promiscuous mode [ 1989.404428][ T550] macvlan2: entered allmulticast mode [ 1989.405067][ T550] bond5: entered promiscuous mode [ 1989.405804][ T550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1989.414041][ T550] bond5: left promiscuous mode [ 1989.463379][ T554] tipc: Disabling bearer [ 1989.489045][ T554] team0 (unregistering): Port device netdevsim1 removed [ 1989.580393][ T9598] Bluetooth: hci1: command tx timeout [ 1989.614079][ T434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1989.615783][ T434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1989.615936][ T434] bridge_slave_0: entered allmulticast mode [ 1989.619612][ T434] bridge_slave_0: entered promiscuous mode [ 1989.625245][ T434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1989.627345][ T434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1989.627476][ T434] bridge_slave_1: entered allmulticast mode [ 1989.629979][ T434] bridge_slave_1: entered promiscuous mode [ 1989.769772][ T434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1989.804096][ T434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1989.892109][ T434] team0: Port device team_slave_0 added [ 1989.913659][ T434] team0: Port device team_slave_1 added [ 1989.978297][ T434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1989.978374][ T434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1989.978389][ T434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1989.986072][ T434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1989.986090][ T434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1989.986112][ T434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1990.060440][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1990.195955][ T585] mac80211_hwsim hwsim182 wlan1: left promiscuous mode [ 1990.245792][ T434] hsr_slave_0: entered promiscuous mode [ 1990.254427][ T434] hsr_slave_1: entered promiscuous mode [ 1990.255205][ T434] debugfs: 'hsr0' already exists in 'hsr' [ 1990.256473][ T434] Cannot create hsr debugfs directory [ 1990.256740][ T587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13695'. [ 1990.256875][ T587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13695'. [ 1990.546030][ T593] wg2 speed is unknown, defaulting to 1000 [ 1990.697736][ T606] 8021q: adding VLAN 0 to HW filter on device .` [ 1990.704288][ T606] 8021q: adding VLAN 0 to HW filter on device team0 [ 1990.845066][ T606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1990.845090][ T606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1990.846048][ T606] tipc: Resetting bearer [ 1990.846316][ T606] tipc: Resetting bearer [ 1990.913083][ T606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1990.915544][ T606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1990.917181][ T606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1990.918261][ T606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1990.953877][ T606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1990.955818][ T606] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1990.957192][ T606] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1990.998093][ T606] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1991.010848][T29152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1991.051503][T32632] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0 [ 1991.051723][T32632] bond2: (slave syz_tun): link status definitely up, 10000 Mbps full duplex [ 1991.051746][T32632] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1991.055793][T32632] bond2: active interface up! [ 1991.124418][T32645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1991.124517][T32645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1991.126239][T32645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1991.126314][T32645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1991.241065][T32647] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0 [ 1991.244779][T32645] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0 [ 1991.256395][T32645] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1991.270860][T32632] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0 [ 1991.549952][ T593] lo speed is unknown, defaulting to 1000 [ 1991.559277][ T639] netlink: 'syz.2.13707': attribute type 3 has an invalid length. [ 1991.677244][ T9598] Bluetooth: hci1: command tx timeout [ 1991.981081][T29152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1991.995502][ T31] audit: type=1800 audit(1790073972.147:52): pid=667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13711" name=CB dev="tmpfs" ino=1372 res=0 errno=0 [ 1991.995857][ T31] audit: type=1800 audit(1790073972.147:53): pid=666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13711" name=CB dev="tmpfs" ino=1372 res=0 errno=0 [ 1992.705111][ T434] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1992.708953][ T434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1992.710565][ T691] ip_tables: iptables: counters copy to user failed while replacing table [ 1992.730526][ T434] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1992.745888][ T434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1992.748107][ T693] netlink: 'syz.3.13719': attribute type 10 has an invalid length. [ 1992.748635][ T434] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1992.761988][ T693] netlink: 'syz.3.13719': attribute type 10 has an invalid length. [ 1992.840541][ T434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1992.844789][ T693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1992.848987][ T693] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 1992.849288][ T693] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 1992.875264][ T693] : (slave netdevsim1): Enslaving as an active interface with an up link [ 1992.884806][ T434] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1992.903656][ T434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1993.010328][ T708] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1993.080612][ T434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1993.099858][ T434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1993.117416][T32675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.117476][T32675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1993.143228][T32675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1993.143290][T32675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1993.209753][ T711] wg2 speed is unknown, defaulting to 1000 [ 1993.808935][ T711] lo speed is unknown, defaulting to 1000 [ 1993.874887][ T740] netlink: 'syz.4.13725': attribute type 7 has an invalid length. [ 1994.082495][ T752] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20002 [ 1994.171638][ T757] xt_hashlimit: size too large, truncated to 1048576 [ 1995.190480][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1995.837794][ T434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1997.041419][ T784] netlink: 'syz.3.13733': attribute type 23 has an invalid length. [ 1997.111763][ T31] audit: type=1804 audit(1790073977.257:54): pid=790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.13735" name="/newroot/269/cgroup.controllers" dev="tmpfs" ino=1404 res=1 errno=0 [ 1997.142123][ T31] audit: type=1800 audit(1790073977.277:55): pid=790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13735" name="cgroup.controllers" dev="tmpfs" ino=1404 res=0 errno=0 [ 1997.330706][ T790] __nla_validate_parse: 64 callbacks suppressed [ 1997.330726][ T790] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13735'. [ 1997.541941][ T434] veth0_vlan: entered promiscuous mode [ 1997.566697][ T434] veth1_vlan: entered promiscuous mode [ 1997.669335][ T434] veth0_macvtap: entered promiscuous mode [ 1997.684995][ T434] veth1_macvtap: entered promiscuous mode [ 1997.734168][ T434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1997.758788][ T829] netlink: 'syz.2.13741': attribute type 10 has an invalid length. [ 1997.761294][ T829] team0: left promiscuous mode [ 1997.798090][ T829] 8021q: adding VLAN 0 to HW filter on device team0 [ 1997.803556][ T829] team0: entered promiscuous mode [ 1997.805775][ T829] .`: (slave team0): Enslaving as an active interface with an up link [ 1997.818001][ T434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1997.946478][T32645] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1997.963133][T32642] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1997.990634][T32632] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1997.990970][T32632] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.167535][T32655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1998.167557][T32655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1998.327228][T32655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1998.327249][T32655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1998.656269][ T851] netlink: 'syz.5.13668': attribute type 1 has an invalid length. [ 1998.694994][ T853] netlink: 'syz.2.13745': attribute type 16 has an invalid length. [ 1998.695015][ T853] netlink: 'syz.2.13745': attribute type 17 has an invalid length. [ 1998.739610][ T853] lo: left promiscuous mode [ 1998.763029][ T853] tunl0: left promiscuous mode [ 1998.763700][ T853] gre0: left promiscuous mode [ 1998.766511][ T853] gretap0: left promiscuous mode [ 1998.767049][ T853] erspan0: left promiscuous mode [ 1998.767564][ T853] ip_vti0: left promiscuous mode [ 1998.770131][ T853] ip6_vti0: left promiscuous mode [ 1998.770649][ T853] sit0: left promiscuous mode [ 1998.771145][ T853] ip6tnl0: left promiscuous mode [ 1998.775245][ T853] ip6gre0: left promiscuous mode [ 1998.776690][ T853] ip6gretap0: left promiscuous mode [ 1998.779732][ T853] vcan0: left promiscuous mode [ 1998.784365][ T853] .`: left promiscuous mode [ 1998.784585][ T853] bridge0: left promiscuous mode [ 1998.784803][ T853] team0: left promiscuous mode [ 1998.788028][ T853] dummy0: left promiscuous mode [ 1998.791613][ T853] nlmon0: left promiscuous mode [ 1998.793435][ T853] vxcan0: left promiscuous mode [ 1998.795100][ T853] vxcan1: left promiscuous mode [ 1998.795448][ T853] veth0: left promiscuous mode [ 1998.795813][ T853] veth1: left promiscuous mode [ 1998.797350][ T853] wg0: left promiscuous mode [ 1998.798572][ T853] wg1: left promiscuous mode [ 1998.801827][ T853] wg2: left promiscuous mode [ 1998.804352][ T853] veth0_to_bridge: left promiscuous mode [ 1998.808189][ T853] veth1_to_bridge: left promiscuous mode [ 1998.809111][ T853] veth0_to_bond: left promiscuous mode [ 1998.812754][ T853] bond_slave_0: left promiscuous mode [ 1998.814330][ T853] veth1_to_bond: left promiscuous mode [ 1998.814729][ T853] bond_slave_1: left promiscuous mode [ 1998.817299][ T853] veth0_to_team: left promiscuous mode [ 1998.818833][ T853] team_slave_0: left promiscuous mode [ 1998.819233][ T853] veth1_to_team: left promiscuous mode [ 1998.819602][ T853] team_slave_1: left promiscuous mode [ 1998.822916][ T853] veth0_to_batadv: left promiscuous mode [ 1998.824655][ T853] batadv_slave_0: left promiscuous mode [ 1998.825026][ T853] veth1_to_batadv: left promiscuous mode [ 1998.826761][ T853] batadv_slave_1: left promiscuous mode [ 1998.829972][ T853] xfrm0: left promiscuous mode [ 1998.836190][ T853] veth0_to_hsr: left promiscuous mode [ 1998.837641][ T853] veth1_to_hsr: left promiscuous mode [ 1998.839617][ T853] hsr0: left promiscuous mode [ 1998.840458][ T853] veth1_virt_wifi: left promiscuous mode [ 1998.842146][ T853] veth0_virt_wifi: left promiscuous mode [ 1998.842744][ T853] virt_wifi0: left promiscuous mode [ 1998.845610][ T853] vlan0: left promiscuous mode [ 1998.846753][ T853] vlan1: left promiscuous mode [ 1998.847296][ T853] macvlan0: left promiscuous mode [ 1998.849773][ T853] macvlan1: left promiscuous mode [ 1998.854116][ T853] ipvlan0: left promiscuous mode [ 1998.854659][ T853] ipvlan1: left promiscuous mode [ 1998.867119][ T853] macvtap0: left promiscuous mode [ 1998.877105][ T853] macsec0: left promiscuous mode [ 1998.877629][ T853] geneve0: left promiscuous mode [ 1998.894738][ T853] geneve1: left promiscuous mode [ 1998.898131][ T853] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1998.901408][ T853] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 1998.904412][ T853] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 1998.907869][ T853] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 1998.909844][ T853] mac80211_hwsim hwsim181 wlan0: left promiscuous mode [ 1998.916692][ T853] ipip0: left promiscuous mode [ 1998.919972][ T853] bridge1: left promiscuous mode [ 1998.923646][ T853] macvtap1: left promiscuous mode [ 1998.969758][ T853] macvtap2: left promiscuous mode [ 1998.969778][ T853] bond1: left promiscuous mode [ 1998.975843][ T853] dvmrp0: left promiscuous mode [ 1998.978227][ T853] gre1: left promiscuous mode [ 1998.978242][ T853] gre1: left allmulticast mode [ 1998.992631][ T853] ip6gre1: left promiscuous mode [ 1998.992650][ T853] ip6gre1: left allmulticast mode [ 1999.003491][ T853] ip6tnl1: left allmulticast mode [ 1999.006829][ T853] geneve2: left promiscuous mode [ 1999.006846][ T853] geneve2: left allmulticast mode [ 1999.030679][T29301] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1999.202211][ T854] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13745'. [ 1999.344652][T32645] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1999.344873][T32645] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1999.374102][T29301] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1999.446292][ T881] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13749'. [ 1999.544374][ T889] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13749'. [ 1999.544397][ T889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13749'. [ 1999.544413][ T889] netlink: 31 bytes leftover after parsing attributes in process `syz.2.13749'. [ 1999.544428][ T889] netlink: 'syz.2.13749': attribute type 2 has an invalid length. [ 1999.544439][ T889] netlink: 31 bytes leftover after parsing attributes in process `syz.2.13749'. [ 1999.581171][ T891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1999.602237][T10235] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1999.840483][T10235] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1999.903332][ T901] IPv6: Can't replace route, no match found [ 2000.018728][ T893] netlink: 'syz.4.13753': attribute type 27 has an invalid length. [ 2000.222477][T29314] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2000.294679][ T921] batman_adv: batadv0: Adding interface: macvtap0 [ 2000.294697][ T921] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2000.294721][ T921] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 2000.885474][ T967] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 2000.887111][ T967] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2000.930309][ T957] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2001.086171][ T971] veth1_vlan: left promiscuous mode [ 2001.098226][ T971] veth0_vlan: left promiscuous mode [ 2001.114964][ T971] veth0_vlan: entered promiscuous mode [ 2001.135127][ T971] veth1_vlan: entered promiscuous mode [ 2001.184540][ T971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2001.185497][ T971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2001.219200][ T971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2001.232964][ T971] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2001.235510][ T971] bridge0: port 1(vlan2) entered blocking state [ 2001.235612][ T971] bridge0: port 1(vlan2) entered forwarding state [ 2001.267680][ T976] xt_check_table_hooks: 23 callbacks suppressed [ 2001.267778][ T976] x_tables: unsorted underflow at hook 3 [ 2001.325289][ T971] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2001.379394][ T971] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2001.389939][ T971] 8021q: adding VLAN 0 to HW filter on device eth0 [ 2001.402112][ T971] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2001.404276][ T971] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2001.407917][ T971] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2001.409783][ T971] mac80211_hwsim hwsim174 wlan1: entered promiscuous mode [ 2001.412164][ T971] batman_adv: batadv0: Interface activated: macvtap0 [ 2001.494126][T32632] bridge4: port 1(veth5) entered blocking state [ 2001.494189][T32632] bridge4: port 1(veth5) entered forwarding state [ 2001.527485][T32645] openvswitch: cpu_id mismatch with handler threads [ 2001.527776][T32645] openvswitch: cpu_id mismatch with handler threads [ 2001.601567][T28988] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2001.625602][T28988] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 2001.627268][T28988] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2001.674706][T28988] bond3: active interface up! [ 2001.771640][T28988] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2001.771815][T28988] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2001.771887][T28988] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2001.773881][T32645] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2001.823208][T32647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2001.823227][T32647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2001.874737][ T999] netlink: 84 bytes leftover after parsing attributes in process `syz.5.13777'. [ 2001.961927][T29301] openvswitch: cpu_id mismatch with handler threads [ 2002.999769][ T1077] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13793'. [ 2003.085935][ T1081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2003.212615][ T1093] 8021q: VLANs not supported on ip6gre0 [ 2003.340725][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2003.493474][ T1107] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13799'. [ 2004.336451][ T1160] netlink: 324 bytes leftover after parsing attributes in process `syz.4.13813'. [ 2004.461651][T28571] Bluetooth: hci1: command 0x0405 tx timeout [ 2004.686350][ T1165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13814'. [ 2004.718075][ T1179] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13815'. [ 2004.718128][ T1172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13815'. [ 2004.734310][ T1172] vlan2: entered allmulticast mode [ 2004.734328][ T1172] geneve0: entered allmulticast mode [ 2005.420324][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2005.423641][ C1] openvswitch: cpu_id mismatch with handler threads [ 2005.740759][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2006.387567][ T1115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2006.389983][ T1130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13800'. [ 2006.725359][ T1209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13821'. [ 2006.850729][ T1237] tc_dump_action: action bad kind [ 2007.048559][ T1242] syzkaller0: entered promiscuous mode [ 2007.048581][ T1242] syzkaller0: entered allmulticast mode [ 2007.132946][ T1251] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13825'. [ 2007.133363][ T1250] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13825'. [ 2007.415275][ T1260] syzkaller0: entered promiscuous mode [ 2007.415308][ T1260] syzkaller0: entered allmulticast mode [ 2007.747647][ T1279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2007.757022][ T1279] syzkaller1: entered promiscuous mode [ 2007.757043][ T1279] syzkaller1: entered allmulticast mode [ 2007.875826][ T1286] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 2008.078357][ T1291] syzkaller0: entered promiscuous mode [ 2008.078378][ T1291] syzkaller0: entered allmulticast mode [ 2008.101557][ T1289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13835'. [ 2008.345003][ T1310] tc_dump_action: action bad kind [ 2008.415054][ T1315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13839'. [ 2008.530531][ T1319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13843'. [ 2008.533066][ T1319] SET target dimension over the limit! [ 2008.711891][ T1327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13845'. [ 2008.878971][T32675] tipc: Subscription rejected, illegal request [ 2009.894251][ T1387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13857'. [ 2010.010512][ T1399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13858'. [ 2011.826434][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2013.106854][ C1] openvswitch: cpu_id mismatch with handler threads [ 2013.743728][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2014.044891][ T1401] gretap1: entered allmulticast mode [ 2014.296005][ T1449] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13868'. [ 2014.351805][T10237] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2014.352176][T10237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2014.365924][ T1446] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 2014.374269][ T1446] batman_adv: batadv0: Adding interface: gretap1 [ 2014.374286][ T1446] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2014.374314][ T1446] batman_adv: batadv0: Interface activated: gretap1 [ 2014.376655][ T1452] netlink: 'syz.2.13864': attribute type 3 has an invalid length. [ 2014.376933][ T1452] netlink: 'syz.2.13864': attribute type 3 has an invalid length. [ 2014.413457][ T1445] syzkaller0: entered promiscuous mode [ 2014.413478][ T1445] syzkaller0: entered allmulticast mode [ 2014.458198][ T1448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13868'. [ 2014.464624][ T1445] tipc: Enabled bearer , priority 0 [ 2014.531157][ T1446] netlink: 'syz.5.13865': attribute type 4 has an invalid length. [ 2014.531179][ T1446] netlink: 17 bytes leftover after parsing attributes in process `syz.5.13865'. [ 2014.532764][ T1445] tipc: Resetting bearer [ 2014.577580][ T1439] openvswitch: netlink: Multiple metadata blocks provided [ 2014.590903][ T1439] netlink: 220 bytes leftover after parsing attributes in process `syz.2.13864'. [ 2014.617511][ T1444] tipc: Resetting bearer [ 2014.630669][T10237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2014.694876][ T1444] tipc: Disabling bearer [ 2014.739554][T32654] IPVS: starting estimator thread 0... [ 2014.779638][ T1471] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 2014.830995][ T1476] IPVS: using max 55 ests per chain, 132000 per kthread [ 2014.896989][ T1481] netlink: 'syz.1.13871': attribute type 2 has an invalid length. [ 2014.897010][ T1481] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13871'. [ 2014.923519][ T1481] netlink: 'syz.1.13871': attribute type 10 has an invalid length. [ 2014.950600][ T1481] team0: Port device dummy0 added [ 2014.950611][ T7574] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2015.151885][ T1493] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 2015.152269][ T1494] netlink: 'syz.5.13875': attribute type 21 has an invalid length. [ 2015.152285][ T1494] netlink: 128 bytes leftover after parsing attributes in process `syz.5.13875'. [ 2015.152350][ T1494] netlink: 'syz.5.13875': attribute type 4 has an invalid length. [ 2015.152362][ T1494] netlink: 'syz.5.13875': attribute type 3 has an invalid length. [ 2015.152373][ T1494] netlink: 3 bytes leftover after parsing attributes in process `syz.5.13875'. [ 2015.152638][ T1493] netlink: 'syz.5.13875': attribute type 21 has an invalid length. [ 2015.152652][ T1493] netlink: 128 bytes leftover after parsing attributes in process `syz.5.13875'. [ 2015.152814][ T1493] netlink: 'syz.5.13875': attribute type 4 has an invalid length. [ 2015.152828][ T1493] netlink: 3 bytes leftover after parsing attributes in process `syz.5.13875'. [ 2015.186989][ T1496] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13876'. [ 2015.189091][ T1496] Bluetooth: MGMT ver 1.23 [ 2015.412716][ T1500] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2016.016695][ T1529] debugfs: '1^!' already exists in 'ieee80211' [ 2016.218694][ T1529] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 2016.218718][ T1529] CPU: 1 UID: 0 PID: 1529 Comm: syz.2.13884 Not tainted syzkaller #0 PREEMPT(full) [ 2016.218740][ T1529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2016.218753][ T1529] Call Trace: [ 2016.218762][ T1529] [ 2016.218772][ T1529] dump_stack_lvl+0xe8/0x150 [ 2016.218809][ T1529] sysfs_warn_dup+0x8e/0xa0 [ 2016.218840][ T1529] sysfs_do_create_link_sd+0xc0/0x110 [ 2016.218871][ T1529] device_add_class_symlinks+0x1cf/0x240 [ 2016.219003][ T1529] device_add+0x467/0xb80 [ 2016.219026][ T1529] wiphy_register+0x1fc8/0x2ff0 [ 2016.219119][ T1529] ? __pfx_wiphy_register+0x10/0x10 [ 2016.219140][ T1529] ? __pfx_netdev_run_todo+0x10/0x10 [ 2016.219226][ T1529] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 2016.219323][ T1529] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 2016.219381][ T1529] ieee80211_register_hw+0x3dbb/0x4b00 [ 2016.219443][ T1529] ? ieee80211_register_hw+0x1991/0x4b00 [ 2016.219494][ T1529] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2016.219520][ T1529] ? __asan_memset+0x22/0x50 [ 2016.219561][ T1529] ? __hrtimer_setup+0x1b7/0x260 [ 2016.219588][ T1529] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2016.219671][ T1529] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 2016.219729][ T1529] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2016.219751][ T1529] ? kstrndup+0xbd/0x160 [ 2016.219783][ T1529] ? kstrndup+0xbd/0x160 [ 2016.219806][ T1529] hwsim_new_radio_nl+0xd8b/0xf90 [ 2016.219845][ T1529] genl_family_rcv_msg_doit+0x233/0x340 [ 2016.219878][ T1529] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2016.219916][ T1529] ? bpf_lsm_capable+0x9/0x20 [ 2016.219934][ T1529] ? security_capable+0x7e/0x2c0 [ 2016.219965][ T1529] genl_rcv_msg+0x614/0x7a0 [ 2016.219994][ T1529] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2016.220013][ T1529] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2016.220044][ T1529] netlink_rcv_skb+0x226/0x4a0 [ 2016.220070][ T1529] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2016.220092][ T1529] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2016.220133][ T1529] ? down_read+0x2be/0x330 [ 2016.220162][ T1529] genl_rcv+0x28/0x40 [ 2016.220180][ T1529] netlink_unicast+0x7bd/0x940 [ 2016.220217][ T1529] netlink_sendmsg+0x813/0xb40 [ 2016.220251][ T1529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2016.220284][ T1529] ? apparmor_socket_sendmsg+0x98/0x360 [ 2016.220308][ T1529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2016.220332][ T1529] sock_sendmsg_nosec+0x13a/0x180 [ 2016.220355][ T1529] ____sys_sendmsg+0x54e/0x850 [ 2016.220383][ T1529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2016.220418][ T1529] ? import_iovec+0x73/0xa0 [ 2016.220447][ T1529] ___sys_sendmsg+0x2a5/0x360 [ 2016.220470][ T1529] ? __lock_acquire+0x747/0x2de0 [ 2016.220496][ T1529] ? __pfx____sys_sendmsg+0x10/0x10 [ 2016.220535][ T1529] ? futex_wait+0x2a2/0x390 [ 2016.220596][ T1529] ? __fget_files+0x2a/0x420 [ 2016.220621][ T1529] ? __fget_files+0x3a2/0x420 [ 2016.220657][ T1529] __x64_sys_sendmsg+0x1b1/0x290 [ 2016.220686][ T1529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2016.220735][ T1529] do_syscall_64+0x166/0x520 [ 2016.220757][ T1529] ? trace_irq_disable+0x3b/0x140 [ 2016.220777][ T1529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2016.220797][ T1529] ? clear_bhb_loop+0x70/0xc0 [ 2016.220821][ T1529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2016.220840][ T1529] RIP: 0033:0x7fe2d2b9e159 [ 2016.220860][ T1529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2016.220876][ T1529] RSP: 002b:00007fe2d3ab3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2016.220898][ T1529] RAX: ffffffffffffffda RBX: 00007fe2d2e25fa0 RCX: 00007fe2d2b9e159 [ 2016.220912][ T1529] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000004 [ 2016.220924][ T1529] RBP: 00007fe2d2c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2016.220935][ T1529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2016.220946][ T1529] R13: 00007fe2d2e26038 R14: 00007fe2d2e25fa0 R15: 00007ffdb1207898 [ 2016.220980][ T1529] [ 2016.775436][ T1552] block nbd0: reconnected socket [ 2016.969261][T28571] block nbd0: Receive control failed (result -32) [ 2017.093957][ T1562] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2017.131727][ T1563] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 2020.012298][ T1567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2020.189794][ T1606] __nla_validate_parse: 3 callbacks suppressed [ 2020.189811][ T1606] netlink: 240 bytes leftover after parsing attributes in process `syz.5.13902'. [ 2020.313517][ T1602] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2020.314839][ T1617] batadv_slave_0: entered promiscuous mode [ 2020.327148][ T1602] s: renamed from veth0 [ 2020.727950][ T1640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13913'. [ 2020.808090][ T1643] ip_tables: iptables: counters copy to user failed while replacing table [ 2020.864721][ T1648] netlink: 220 bytes leftover after parsing attributes in process `syz.4.13916'. [ 2020.905386][ T1649] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13915'. [ 2020.905411][ T1649] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13915'. [ 2020.905425][ T1649] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13915'. [ 2021.130603][ T1616] batadv_slave_0: left promiscuous mode [ 2021.198986][ T1674] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13920'. [ 2021.199002][ T1674] openvswitch: netlink: Flow key attr not present in new flow. [ 2021.248103][ T1676] SET target dimension over the limit! [ 2023.182981][ T1607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2023.606335][ T1708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13928'. [ 2023.803111][ T1719] validate_nla: 7 callbacks suppressed [ 2023.803130][ T1719] netlink: 'syz.3.13932': attribute type 11 has an invalid length. [ 2023.975237][ T1728] bond10: (slave bond_slave_1): Device is not bonding slave [ 2023.975253][ T1728] bond10: option active_slave: invalid value (bond_slave_1) [ 2023.976289][ T1728] bond10 (unregistering): Released all slaves [ 2024.708793][ T1762] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13945'. [ 2024.729689][ T1762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13945'. [ 2027.820982][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2029.007967][ T1753] netlink: 'syz.2.13944': attribute type 12 has an invalid length. [ 2029.007994][ T1753] netlink: 'syz.2.13944': attribute type 29 has an invalid length. [ 2029.008005][ T1753] netlink: 148 bytes leftover after parsing attributes in process `syz.2.13944'. [ 2029.100692][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2029.101226][ C1] openvswitch: cpu_id mismatch with handler threads [ 2029.148501][ T1774] wg2 speed is unknown, defaulting to 1000 [ 2029.202564][ T1777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13948'. [ 2029.202597][ T1777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13948'. [ 2029.281573][ T1782] netlink: 'syz.4.13951': attribute type 21 has an invalid length. [ 2029.281597][ T1782] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13951'. [ 2029.314700][ T1782] netlink: 'syz.4.13951': attribute type 5 has an invalid length. [ 2029.314721][ T1782] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13951'. [ 2029.378232][ T1787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13950'. [ 2029.519319][ T1774] lo speed is unknown, defaulting to 1000 [ 2029.657024][ T1795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13953'. [ 2029.864984][ T1806] netlink: 'syz.4.13952': attribute type 1 has an invalid length. [ 2029.865831][ T1807] netlink: 'syz.4.13952': attribute type 1 has an invalid length. [ 2029.975928][ T1806] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2030.057559][ T1812] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.13955'. [ 2030.070339][ T1811] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2030.072004][ T1815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13955'. [ 2030.167209][ T1821] x_tables: duplicate entry at hook 3 [ 2030.356582][ T1830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13959'. [ 2030.746900][ T1832] veth1_vlan: left promiscuous mode [ 2030.756863][ T1832] veth0_vlan: left promiscuous mode [ 2030.780169][ T1832] veth0_vlan: entered promiscuous mode [ 2030.786379][ T1832] veth1_vlan: entered promiscuous mode [ 2030.839997][ T1832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2030.899543][ T1855] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 2031.023843][ T1832] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2031.155587][ T1832] 8021q: adding VLAN 0 to HW filter on device eth0 [ 2031.157815][ T1832] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2031.159693][ T1832] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2031.168864][ T1832] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2031.172054][ T1832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2031.173954][ T1832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2031.177405][ T1832] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2031.178446][ T1832] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2031.179515][ T1832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2031.183480][ T1832] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2031.233352][ T1832] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2031.259577][ T1842] gre1: entered allmulticast mode [ 2031.283128][T32654] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2031.283160][T32654] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.283198][T32654] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2031.283222][T32654] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.283255][T32654] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2031.283278][T32654] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.357524][T32675] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2031.357745][T32675] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2031.380900][ T1298] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2031.383973][T28998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2031.383991][T28998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2031.430666][T32675] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2031.430699][T32675] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2031.560270][ T1298] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2031.571529][ T1298] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2031.739191][ T1873] macvlan0: entered promiscuous mode [ 2031.862158][ T1888] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 2034.623587][ T1893] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 2035.500537][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2035.740568][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2036.123092][ T1931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13981'. [ 2037.434361][ T1309] aoe: packet could not be sent on syzkaller0. consider increasing tx_queue_len [ 2039.289304][ T1922] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 2039.430644][ T1949] xt_hashlimit: size too large, truncated to 1048576 [ 2039.489425][ T1955] xt_hashlimit: size too large, truncated to 1048576 [ 2039.627162][ T1962] sit0: entered promiscuous mode [ 2039.656974][ T1962] netlink: 'syz.4.13987': attribute type 1 has an invalid length. [ 2039.656995][ T1962] netlink: 1 bytes leftover after parsing attributes in process `syz.4.13987'. [ 2039.833669][ T1967] syzkaller0: entered promiscuous mode [ 2039.833692][ T1967] syzkaller0: entered allmulticast mode [ 2039.869807][ T1966] syzkaller1: entered promiscuous mode [ 2039.869830][ T1966] syzkaller1: entered allmulticast mode [ 2040.051436][ T1981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13988'. [ 2040.123345][ T1983] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 2040.389718][ T1998] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2040.643058][ T2019] siw: device registration error -23 [ 2040.674725][ T2019] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14000'. [ 2040.688242][ T2020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13999'. [ 2040.836732][ T2028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14003'. [ 2040.839291][ T2023] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2040.902789][ T2030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14003'. [ 2041.595152][T32654] IPVS: starting estimator thread 0... [ 2041.692128][ T2070] IPVS: using max 31 ests per chain, 74400 per kthread [ 2041.745249][ T2075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14014'. [ 2041.829758][ T2075] [ 2041.832129][ T2075] ====================================================== [ 2041.839173][ T2075] WARNING: possible circular locking dependency detected [ 2041.846229][ T2075] syzkaller #0 Not tainted [ 2041.850667][ T2075] ------------------------------------------------------ [ 2041.857723][ T2075] syz.2.14014/2075 is trying to acquire lock: [ 2041.863774][ T2075] ffff8880617c8f18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 2041.872718][ T2075] [ 2041.872718][ T2075] but task is already holding lock: [ 2041.880068][ T2075] ffff888027aaf548 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 2041.889566][ T2075] [ 2041.889566][ T2075] which lock already depends on the new lock. [ 2041.889566][ T2075] [ 2041.899957][ T2075] [ 2041.899957][ T2075] the existing dependency chain (in reverse order) is: [ 2041.908964][ T2075] [ 2041.908964][ T2075] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 2041.916880][ T2075] __mutex_lock+0x19d/0x1550 [ 2041.921994][ T2075] elevator_change+0x1af/0x480 [ 2041.927274][ T2075] elevator_set_none+0xb5/0x140 [ 2041.932641][ T2075] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 2041.939072][ T2075] nbd_start_device+0x189/0xb30 [ 2041.944492][ T2075] nbd_genl_connect+0x167d/0x1cd0 [ 2041.950035][ T2075] genl_family_rcv_msg_doit+0x233/0x340 [ 2041.956130][ T2075] genl_rcv_msg+0x614/0x7a0 [ 2041.961153][ T2075] netlink_rcv_skb+0x226/0x4a0 [ 2041.966434][ T2075] genl_rcv+0x28/0x40 [ 2041.970937][ T2075] netlink_unicast+0x7bd/0x940 [ 2041.976227][ T2075] netlink_sendmsg+0x813/0xb40 [ 2041.981514][ T2075] sock_sendmsg_nosec+0x13a/0x180 [ 2041.987092][ T2075] ____sys_sendmsg+0x54e/0x850 [ 2041.992388][ T2075] ___sys_sendmsg+0x2a5/0x360 [ 2041.997603][ T2075] __x64_sys_sendmsg+0x1b1/0x290 [ 2042.003068][ T2075] do_syscall_64+0x166/0x520 [ 2042.008182][ T2075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2042.014602][ T2075] [ 2042.014602][ T2075] -> #5 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 2042.023247][ T2075] blk_alloc_queue+0x544/0x690 [ 2042.028528][ T2075] __blk_mq_alloc_disk+0x194/0x390 [ 2042.034155][ T2075] nbd_dev_add+0x494/0xb60 [ 2042.039088][ T2075] nbd_init+0x168/0x1f0 [ 2042.039387][ T2083] xt_socket: unknown flags 0x4c [ 2042.048704][ T2075] do_one_initcall+0x250/0x870 [ 2042.053998][ T2075] do_initcall_level+0x10a/0x1a0 [ 2042.059494][ T2075] do_initcalls+0x59/0xa0 [ 2042.064348][ T2075] kernel_init_freeable+0x29d/0x3e0 [ 2042.070071][ T2075] kernel_init+0x22/0x1d0 [ 2042.074933][ T2075] ret_from_fork+0x514/0xb70 [ 2042.080079][ T2075] ret_from_fork_asm+0x1a/0x30 [ 2042.085370][ T2075] [ 2042.085370][ T2075] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 2042.092572][ T2075] fs_reclaim_acquire+0x71/0x100 [ 2042.098024][ T2075] __kmalloc_cache_node_noprof+0x66/0x620 [ 2042.104258][ T2075] create_worker+0x112/0x7c0 [ 2042.109387][ T2075] workqueue_prepare_cpu+0xe4/0x170 [ 2042.115097][ T2075] cpuhp_invoke_callback+0x434/0x810 [ 2042.120922][ T2075] _cpu_up+0x2ce/0x5b0 [ 2042.125504][ T2075] cpu_up+0x1d2/0x220 [ 2042.130002][ T2075] cpuhp_bringup_mask+0xb2/0x1a0 [ 2042.135543][ T2075] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 2042.141874][ T2075] bringup_nonboot_cpus+0x17/0x30 [ 2042.147412][ T2075] smp_init+0x32/0x110 [ 2042.152044][ T2075] kernel_init_freeable+0x27f/0x3e0 [ 2042.157751][ T2075] kernel_init+0x22/0x1d0 [ 2042.162597][ T2075] ret_from_fork+0x514/0xb70 [ 2042.167690][ T2075] ret_from_fork_asm+0x1a/0x30 [ 2042.172969][ T2075] [ 2042.172969][ T2075] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 2042.180688][ T2075] cpus_read_lock+0x42/0x160 [ 2042.185803][ T2075] static_key_slow_inc+0x12/0x30 [ 2042.191336][ T2075] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 2042.197585][ T2075] nbd_genl_foreach_sock+0x265/0x450 [ 2042.203402][ T2075] nbd_genl_reconfigure+0xbbb/0x1040 [ 2042.209205][ T2075] genl_family_rcv_msg_doit+0x233/0x340 [ 2042.215289][ T2075] genl_rcv_msg+0x614/0x7a0 [ 2042.220320][ T2075] netlink_rcv_skb+0x226/0x4a0 [ 2042.225602][ T2075] genl_rcv+0x28/0x40 [ 2042.230092][ T2075] netlink_unicast+0x7bd/0x940 [ 2042.235368][ T2075] netlink_sendmsg+0x813/0xb40 [ 2042.240647][ T2075] sock_sendmsg_nosec+0x13a/0x180 [ 2042.246202][ T2075] ____sys_sendmsg+0x54e/0x850 [ 2042.251485][ T2075] ___sys_sendmsg+0x2a5/0x360 [ 2042.256673][ T2075] __x64_sys_sendmsg+0x1b1/0x290 [ 2042.262212][ T2075] do_syscall_64+0x166/0x520 [ 2042.267312][ T2075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2042.273713][ T2075] [ 2042.273713][ T2075] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 2042.281354][ T2075] __mutex_lock+0x19d/0x1550 [ 2042.286457][ T2075] nbd_queue_rq+0x373/0xff0 [ 2042.291468][ T2075] blk_mq_dispatch_rq_list+0x499/0x1990 [ 2042.297526][ T2075] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 2042.304442][ T2075] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 2042.310947][ T2075] blk_mq_run_work_fn+0x16c/0x300 [ 2042.316486][ T2075] process_scheduled_works+0xc3d/0x1630 [ 2042.322548][ T2075] worker_thread+0xa47/0xfb0 [ 2042.327650][ T2075] kthread+0x38b/0x480 [ 2042.332249][ T2075] ret_from_fork+0x514/0xb70 [ 2042.337353][ T2075] ret_from_fork_asm+0x1a/0x30 [ 2042.342651][ T2075] [ 2042.342651][ T2075] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 2042.349872][ T2075] __mutex_lock+0x19d/0x1550 [ 2042.354982][ T2075] nbd_queue_rq+0xc1/0xff0 [ 2042.359932][ T2075] blk_mq_dispatch_rq_list+0x499/0x1990 [ 2042.365988][ T2075] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 2042.373001][ T2075] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 2042.379497][ T2075] blk_mq_run_work_fn+0x16c/0x300 [ 2042.385049][ T2075] process_scheduled_works+0xc3d/0x1630 [ 2042.391109][ T2075] worker_thread+0xa47/0xfb0 [ 2042.396301][ T2075] kthread+0x38b/0x480 [ 2042.400887][ T2075] ret_from_fork+0x514/0xb70 [ 2042.406179][ T2075] ret_from_fork_asm+0x1a/0x30 [ 2042.411471][ T2075] [ 2042.411471][ T2075] -> #0 (set->srcu){.+.+}-{0:0}: [ 2042.418594][ T2075] __lock_acquire+0x164c/0x2de0 [ 2042.423964][ T2075] lock_sync+0xb3/0x130 [ 2042.428634][ T2075] __synchronize_srcu+0xc9/0x2f0 [ 2042.434091][ T2075] elevator_switch+0x1e8/0x7b0 [ 2042.439365][ T2075] elevator_change+0x2fa/0x480 [ 2042.444635][ T2075] elevator_set_default+0x375/0x440 [ 2042.450341][ T2075] blk_register_queue+0x3f3/0x4e0 [ 2042.455943][ T2075] __add_disk+0x6b8/0xdb0 [ 2042.460784][ T2075] add_disk_fwnode+0x100/0x3a0 [ 2042.466065][ T2075] nbd_dev_add+0x733/0xb60 [ 2042.470990][ T2075] nbd_genl_connect+0x96c/0x1cd0 [ 2042.476436][ T2075] genl_family_rcv_msg_doit+0x233/0x340 [ 2042.482493][ T2075] genl_rcv_msg+0x614/0x7a0 [ 2042.487509][ T2075] netlink_rcv_skb+0x226/0x4a0 [ 2042.492814][ T2075] genl_rcv+0x28/0x40 [ 2042.497305][ T2075] netlink_unicast+0x7bd/0x940 [ 2042.502580][ T2075] netlink_sendmsg+0x813/0xb40 [ 2042.507863][ T2075] sock_sendmsg_nosec+0x13a/0x180 [ 2042.513390][ T2075] ____sys_sendmsg+0x54e/0x850 [ 2042.518667][ T2075] ___sys_sendmsg+0x2a5/0x360 [ 2042.523857][ T2075] __x64_sys_sendmsg+0x1b1/0x290 [ 2042.529308][ T2075] do_syscall_64+0x166/0x520 [ 2042.534413][ T2075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2042.540405][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2042.548251][ T2075] [ 2042.548251][ T2075] other info that might help us debug this: [ 2042.548251][ T2075] [ 2042.558466][ T2075] Chain exists of: [ 2042.558466][ T2075] set->srcu --> &q->q_usage_counter(io)#51 --> &q->elevator_lock [ 2042.558466][ T2075] [ 2042.572191][ T2075] Possible unsafe locking scenario: [ 2042.572191][ T2075] [ 2042.579690][ T2075] CPU0 CPU1 [ 2042.585085][ T2075] ---- ---- [ 2042.590446][ T2075] lock(&q->elevator_lock); [ 2042.595026][ T2075] lock(&q->q_usage_counter(io)#51); [ 2042.602912][ T2075] lock(&q->elevator_lock); [ 2042.610018][ T2075] sync(set->srcu); [ 2042.613968][ T2075] [ 2042.613968][ T2075] *** DEADLOCK *** [ 2042.613968][ T2075] [ 2042.622115][ T2075] locks held by syz.2.14014/2075: 6, last CPU#1: [ 2042.628513][ T2075] #0: ffffffff902c46a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2042.636719][ T2075] #1: ffffffff902c44e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 2042.645673][ T2075] #2: ffff88807e6ac1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 2042.656020][ T2075] #3: ffff888027aaf5d0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 2042.665840][ T2075] #4: ffff888027aaf058 (&q->q_usage_counter(queue)#55){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 2042.676703][ T2075] #5: ffff888027aaf548 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 2042.686522][ T2075] [ 2042.686522][ T2075] stack backtrace: [ 2042.692396][ T2075] CPU: 1 UID: 0 PID: 2075 Comm: syz.2.14014 Not tainted syzkaller #0 PREEMPT(full) [ 2042.701756][ T2075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2042.711802][ T2075] Call Trace: [ 2042.715073][ T2075] [ 2042.717997][ T2075] dump_stack_lvl+0xe8/0x150 [ 2042.722586][ T2075] print_circular_bug+0x2e2/0x300 [ 2042.727611][ T2075] check_noncircular+0x12f/0x150 [ 2042.732546][ T2075] __lock_acquire+0x164c/0x2de0 [ 2042.737390][ T2075] ? lockdep_unlock+0x5c/0xd0 [ 2042.742064][ T2075] ? __lock_acquire+0x1511/0x2de0 [ 2042.747079][ T2075] lock_sync+0xb3/0x130 [ 2042.751223][ T2075] ? __synchronize_srcu+0xb5/0x2f0 [ 2042.756320][ T2075] ? __synchronize_srcu+0xb5/0x2f0 [ 2042.761417][ T2075] __synchronize_srcu+0xc9/0x2f0 [ 2042.766342][ T2075] ? __pfx___synchronize_srcu+0x10/0x10 [ 2042.771870][ T2075] ? do_raw_spin_lock+0x12b/0x2f0 [ 2042.776892][ T2075] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2042.782690][ T2075] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 2042.788227][ T2075] ? synchronize_srcu+0x20a/0x260 [ 2042.793237][ T2075] elevator_switch+0x1e8/0x7b0 [ 2042.797991][ T2075] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 2042.803444][ T2075] elevator_change+0x2fa/0x480 [ 2042.808197][ T2075] ? do_raw_spin_unlock+0xf5/0x200 [ 2042.813304][ T2075] elevator_set_default+0x375/0x440 [ 2042.818491][ T2075] ? __pfx_elevator_set_default+0x10/0x10 [ 2042.824220][ T2075] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 2042.831330][ T2075] ? blk_crypto_sysfs_register+0x11c/0x170 [ 2042.837163][ T2075] blk_register_queue+0x3f3/0x4e0 [ 2042.842195][ T2075] __add_disk+0x6b8/0xdb0 [ 2042.846521][ T2075] add_disk_fwnode+0x100/0x3a0 [ 2042.851277][ T2075] nbd_dev_add+0x733/0xb60 [ 2042.855683][ T2075] ? __pfx_nbd_dev_add+0x10/0x10 [ 2042.860614][ T2075] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 2042.866408][ T2075] ? bpf_lsm_capable+0x9/0x20 [ 2042.871071][ T2075] ? security_capable+0x7e/0x2c0 [ 2042.876085][ T2075] ? radix_tree_lookup+0x25c/0x290 [ 2042.881188][ T2075] nbd_genl_connect+0x96c/0x1cd0 [ 2042.886120][ T2075] ? __pfx_nbd_genl_connect+0x10/0x10 [ 2042.891479][ T2075] ? rcu_is_watching+0x16/0xb0 [ 2042.896236][ T2075] ? trace_kmalloc+0x2a/0xf0 [ 2042.900812][ T2075] ? __kmalloc_noprof+0x38c/0x720 [ 2042.905825][ T2075] ? __nla_parse+0x40/0x60 [ 2042.910263][ T2075] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 2042.916591][ T2075] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 2042.922916][ T2075] genl_family_rcv_msg_doit+0x233/0x340 [ 2042.928458][ T2075] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2042.934520][ T2075] ? __lock_acquire+0x747/0x2de0 [ 2042.939453][ T2075] genl_rcv_msg+0x614/0x7a0 [ 2042.943948][ T2075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2042.948964][ T2075] ? __pfx_nbd_genl_connect+0x10/0x10 [ 2042.954332][ T2075] netlink_rcv_skb+0x226/0x4a0 [ 2042.959092][ T2075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2042.964130][ T2075] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2042.969442][ T2075] ? down_read+0x2be/0x330 [ 2042.973855][ T2075] genl_rcv+0x28/0x40 [ 2042.977912][ T2075] netlink_unicast+0x7bd/0x940 [ 2042.982675][ T2075] netlink_sendmsg+0x813/0xb40 [ 2042.987439][ T2075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2042.992723][ T2075] ? apparmor_socket_sendmsg+0x98/0x360 [ 2042.998368][ T2075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2043.003646][ T2075] sock_sendmsg_nosec+0x13a/0x180 [ 2043.008663][ T2075] ____sys_sendmsg+0x54e/0x850 [ 2043.013422][ T2075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2043.018705][ T2075] ? import_iovec+0x73/0xa0 [ 2043.023202][ T2075] ___sys_sendmsg+0x2a5/0x360 [ 2043.027876][ T2075] ? __lock_acquire+0x747/0x2de0 [ 2043.032805][ T2075] ? __pfx____sys_sendmsg+0x10/0x10 [ 2043.037995][ T2075] ? futex_wait+0x2a2/0x390 [ 2043.042502][ T2075] ? __fget_files+0x2a/0x420 [ 2043.047085][ T2075] ? __fget_files+0x3a2/0x420 [ 2043.051757][ T2075] __x64_sys_sendmsg+0x1b1/0x290 [ 2043.056692][ T2075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2043.062150][ T2075] do_syscall_64+0x166/0x520 [ 2043.066739][ T2075] ? trace_irq_disable+0x3b/0x140 [ 2043.071754][ T2075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2043.077807][ T2075] ? clear_bhb_loop+0x70/0xc0 [ 2043.082473][ T2075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2043.088361][ T2075] RIP: 0033:0x7fe2d2b9e159 [ 2043.092762][ T2075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2043.112361][ T2075] RSP: 002b:00007fe2d3ab3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2043.120772][ T2075] RAX: ffffffffffffffda RBX: 00007fe2d2e25fa0 RCX: 00007fe2d2b9e159 [ 2043.128733][ T2075] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000a [ 2043.136776][ T2075] RBP: 00007fe2d2c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2043.144741][ T2075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2043.152712][ T2075] R13: 00007fe2d2e26038 R14: 00007fe2d2e25fa0 R15: 00007ffdb1207898 [ 2043.160685][ T2075] [ 2043.344019][ T2088] udevd[2088]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2043.346808][ T1948] udevd[1948]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2044.460275][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!