last executing test programs: 2.256071567s ago: executing program 1 (id=6836): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000400)={r3, 0x80}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x7, 0x7}, 0x8) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000180), 0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000057010000f0ffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="00000000000000001508c68abb0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000858133a932d2"], 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.912104377s ago: executing program 2 (id=6840): r0 = socket$kcm(0x10, 0x7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010004000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3084000000080003400000000a14000000110001026ca76f57a3f787a5c6bfb371a7bf00555eb8e6da60d76df73e3a6a0910cfec9f77dad78579c064bf9adc2eb78bc4fbf90a3ff0b661aaaadcc05609fa4db0c39abade0bd05cb85f9842e48e29c7e4e3d0f9e37df0e5cdd692d551b7f721a1d4106a0f16255c73ecd478e879ba95951125b56ada7b994dce07afcd2aa0750f3326708dd65c907f2eabf2326c5ceb8f5a3f73304d94978b72c9a63bad002a56ef56e0d8f8cf161859f13a2324cbc1ff05bb"], 0x64}, 0x1, 0x0, 0x0, 0x8150}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x6c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 1.883151689s ago: executing program 1 (id=6841): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@loopback, @broadcast, 0x1f, 0x16}}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000837000"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000002000008000300030000000800070000000200080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='contention_end\x00', r5, 0x0, 0x14}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002180), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000080), 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r11, 0xd}, 0x8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r4, @ANYBLOB="98f6eca3d121609c2a806c74a7658a6470d3dfa5db66d728e85d2bc7c1807e46d731922488044ef4403ecc4e7da50162e33fbd941a5d6ed28653dbb43453686864e94a768f72359c9f0bc3bae3a40484e5408692ed77f1821137b40a22e7ac42ffad5fc84791928e5a46f77cec583d141c12df007399ada429cbb9b860d2e606ace34dbbc9cf7ef5a33de6bb02dccc7ad366b14554b8705ec9574bfd863f171b08d50e4d1870d9b57a402f2546aeb75494c8a5ef6fdb1dd21083601f28af68f1fe"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.831128357s ago: executing program 2 (id=6842): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc8c1}, 0x20000080) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, &(0x7f00000000c0)=""/145, &(0x7f0000000040)=0x91) sendmmsg(r2, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x4000040) 1.666618959s ago: executing program 1 (id=6843): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (rerun: 64) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom}, [@remote, @rose, @remote, @default, @default, @netrom, @remote, @default]}, &(0x7f00000000c0)=0x48) recvfrom$ax25(r1, &(0x7f0000000100)=""/119, 0x77, 0x43, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r2}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f00000002c0)={0x790, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xffff}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x74c, 0x111, 0x0, 0x1, {0x748, 0x5, 0x0, 0x1, [{0x1d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x198, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcf1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x56c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x251}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x171fdbda}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x200, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe0}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x94}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xca}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2000000}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x200, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}]}]}}]}, 0x790}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000b00)=0x8, 0x4) (async) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000b40)={0x0, 0xffffffff, 0x9, 0x1, 0x3, 0x3, 0xa, 0xff, {0x0, @in6={{0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x7f}}, 0x1, 0x0, 0xfffffffd, 0x77, 0xee5b}}, &(0x7f0000000c00)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000c40)={r6, 0x8, 0x401}, &(0x7f0000000c80)=0x8) (async, rerun: 64) r8 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000cc0)={r7, 0xc, 0x7f, 0x856}, 0x10) (async, rerun: 64) r9 = socket(0x15, 0x80000, 0x6) (async, rerun: 64) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x11081800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r10, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7f}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0xc800) (async) write(r1, &(0x7f0000000e40)="002da697ca811ee00e961724928777211d0c2c50dbf28bc0736fff2d05ec8dc86bada7339db6823a3c5868dd7662c9a76b96690171c4a621ac025538c3bd60427c38b7c1194891f357b5d9f57ba62abfca899a6131f53411738621397f2cf16193938692b7434d33597cf007a619d090ec3759837c9d2e7862167e1ef24ea47461f00052576c526ddf39be409abd5f97d22385129ce1634f0419e42803f6c1e70d", 0xa1) (async) socket$unix(0x1, 0x2, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000f00)={r7, @in6={{0xa, 0x4e21, 0xb09686be, @private1, 0x1}}, 0x80, 0x2a0}, 0x90) (rerun: 32) socket$kcm(0x29, 0x5, 0x0) (async) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000fc0), 0x802, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001000)=@assoc_value={0x0}, &(0x7f0000001040)=0x8) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000012c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x98, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1fe848f9}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6d9645d7}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xaa2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb515}]}]}, @NFT_MSG_DELOBJ={0xa8, 0x14, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x81, 0x8, "ecf6cb6372930a6afbff5091a053142f05488ba12969f968a1875eaf9e452e6de51924f318b1af5558d83c74c31fa79fe4f9e281efce481ce4ff50b4d98fbbf759ba2625f6a95866cdbb530e3ae1788f4da375ebea69be2afa266fee4a84509b3c2d91e123524e4a1cee3b31e0948a1d3b28bb2e2f5eb58a100c70187a"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, r10, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x24}}, 0x20040084) (async) read$alg(r3, &(0x7f0000001400)=""/245, 0xf5) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000001500)={r13, 0xfffffff7}, 0x8) (async, rerun: 64) ioctl$FIBMAP(r12, 0x1, &(0x7f0000001540)=0x8) (rerun: 64) 1.625547118s ago: executing program 3 (id=6845): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000e9ffffffffffffff000000000000000000000000000000000000000000000000000a0000001f40c48a00000000804000020000000040000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f000000000000000000000000000000020000"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x2, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in=@local, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x67}, 0x6e6bb4}, [@migrate={0x9c, 0x11, [{@in=@empty, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x12}, @in=@broadcast, 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}, {@in=@private=0xa010101, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x4800) 1.568780866s ago: executing program 3 (id=6846): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4000, 0x0, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x4000, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r3) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, @loopback, @loopback={0x0, 0xffff888101827518}, 0x0, 0x40, 0x1}}) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) (async) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) 1.41132895s ago: executing program 3 (id=6848): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES16=r3], 0x40}}, 0x4008054) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES16=r3], 0x40}}, 0x4008054) 1.336775408s ago: executing program 0 (id=6849): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x2, 0x96c, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x4000000000007, 0x2}, 0x800, 0x0, 0x0, 0x0, 0x3, 0x1}}, 0xb8}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e0114802a0107"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.238980711s ago: executing program 1 (id=6850): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x68, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@struct={0x40000000, 0x3, 0x0, 0x13, 0x0, 0x1, [{0x1, 0xfffffffe}, {0xfffffffd}, {0x3, 0x0, 0x400}]}]}, {0x0, [0x2e]}}, 0x0, 0x4b, 0x0, 0x0, 0x428}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) 1.238077384s ago: executing program 0 (id=6851): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x100000000, 0x7}) write$cgroup_int(r1, &(0x7f00000000c0)=0x9, 0x12) unshare(0x24060400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10040800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000400)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 1.107652602s ago: executing program 4 (id=6852): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0xffff54ad, 0x0, 0xfd8, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x2000c010) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b, 0x3, "4b721b"}}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5545}}, 0x98a0, 0x2}, 0x90) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRESHEX=r0], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x2400c890) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0xffff54ad, 0x0, 0xfd8, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x2000c010) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x4b, 0x3, "4b721b"}}) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5545}}, 0x98a0, 0x2}, 0x90) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRESHEX=r0], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x2400c890) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)) (async) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) (async) 1.107158715s ago: executing program 3 (id=6853): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newlink={0x54, 0x10, 0xff05, 0x0, 0xfffffff8, {0x0, 0x0, 0x4a00, 0x0, 0x2844a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xe5102}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) getsockopt$inet6_int(r0, 0x29, 0x1d, &(0x7f0000000140), &(0x7f00000003c0)=0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009805}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="000425bd7000ffdbdf250e020000ab964793fe5c83cd646bf16d1755d2337a6a870838d09800"/49], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000240)="74ad96f494") sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) 1.016009276s ago: executing program 0 (id=6854): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000280)=0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}}, 0x20}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) 949.520404ms ago: executing program 1 (id=6855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x4164, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1738, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2400000000000}]}, {0x11f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_DATA={0x11e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "cf31c4d2e0bf84f4fa9325"}, @NFTA_DATA_VALUE={0xcd, 0x1, "f8502a556687310856694c943cdbcb9f19aaa7b983ffacf416e7567d74f880673d231214271de6a091e472fd1d8faf4bf07ca1a1e745032efd97d1aa3f1a25eb04b7a087356f40c7b92d061b352301f16eb47b85c22dd284cf683971d92eb89cd710d01883a5315218170ddb3fb55e1d731c7402b9f93eb26c9735e74ce18c840b42aa6eecc635138ff25f439c0060079a224fa3d3514b048250dd85b94a6d9ecdfbdfbf54ddee78c66f391fd5f283b4bb10c2911e3b3748a6077526ae14724e17a3ea205019117906"}, @NFTA_DATA_VALUE={0x18, 0x1, "67d21dccbad6135a7cf9fac8deec7a4986093e79"}, @NFTA_DATA_VALUE={0x9a, 0x1, "32da0477f43f4dda48f5ff639f6cc0df21e3c003555131b3146cf8522b6b4e7de537dfd7258ac135241111939c09394dce6eabb4b4523a1a991f1c9ba5c7bfb28df1ae8c8d5ac8eb5cb725b7bde46dfee8836b08ede7a2dec2760421fbb63610439f7c36aabbd8b218cd212be6818f2635707746898d7be0bdbbfde66c9af2cc98bd07f7a5bb723fa852524fafcc352bf5a98ea7074f"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x41c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x7, 0x6, 0x1, 0x0, "5a3294"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x4a}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x37c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "fcaec53754753e85e3d5187f0b7f64e27b01f9944bd3951da0858a413b343899bbfd3281e3f457db21039e4b04fa0124990311195efbb3671638726dbc98aea9fe46e8590f89e7303556ae2de8f68b82f4b44ae85ecb8a3947e785a9d34c192748d1a801d27e5a5b4d43a6b680ff22eec2c70b73d670d4ade8f76ce35697dbfedb476f0cd590ae62096ff24236c167fb548acf13562d8950b2f3a461b334fd7b533da9b8e690f1e41c2d21ec2865051b06f6597ded2cef93f0db3f7c0d6d86b57cccbd436951ab0ef4a7a8bacaff62181db25a231e3f5b733fe6db92c6aabe3424ded4a9e7343d04538556b2a09744d717fecf"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "7292d959b98a2eded09a86c3ad4c1141b83d081f542838d025a265feda13410f771b20986e9dfc768793844adc5a7debe44e48798e8f94c2b96a6ec413dd3e5192cad952e409b21a4776b60eeb71624887fbfadcf31a62c46a6f276a2caafe2c06fb9805485162032bbe13e036bb999dff51c69f0dc2c7d3959bab588f92c8bd434bf7192ed2e5b87a684e75a5ecb681915f2301673dda5db39f2ccdd20592965841b5f632c027cc433106049c0d0a4f90dc7ad553630497301fe0af216982d480acb5f5486b31e2b47fe9cc9c6b54f6026e1d9e1b6166e7a691cd780440"}, @NFTA_DATA_VALUE={0xce, 0x1, "d0390d65eaf9807eb6a12fc20a4df1b3080eb4f55c7f69a2a8426eb671c4d6f2c45dce7c496d8ae78a91c84ceaf1f6bcd4ba83c329a430a36433d6527ded76a1da525bb9b419fa4020ddb18d13711d443272af16d48247ec6015cdeba87dfdf177d578edd143519ef96a8c6c3989565c4799549a791300f055d3f70b1cd4142225c5c26496e8ca82b86f51b5ac051e86c70f5cd6d99b93c0c82e277df4962dc57b5532d4a9254a0e62fe850af405b2f36eb9a2f90fa8f29e2798911835c55d9f54a4e69244449110e9ff"}]}]}, {0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xdf, 0x6, 0x1, 0x0, "f5774c865dfe6330511f20470181caeea3c8113d9e800ecd13fac55501f3da5d0b8346e7bdad2d51c3f93610cedacfd1cb89978887cc76a7e1ce0845c8e33bce4e1418366330971f188e159460cbed159fd481dd48bc90e4f1fd13e740167b1f96c329ebe82b68ad2822a574cfc25d71b16bac0dce38cafc492a874bc3493dfe07b2000b2babc85e02d6202f2bc14ebcc469ae5760a745adfabcc9703a33e90e4fc749fefe13e30fe675772534ffd6ae3d6615b04924f4694a5d95e707fbe7a496f97fc8d0cd9e8c24c485e3695de5701b461a0ccb3c10bc550f17"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x79b8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x29f4, 0x3, 0x0, 0x1, [{0x29e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x19d4, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x63e}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x52}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffd}]}}}, {0x354, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x340, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_IMMEDIATE_DATA={0x204, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "c9830e8f09"}, @NFTA_DATA_VALUE={0xb5, 0x1, "8852e0409e039b35568f714443c7f3a037750a591d5ed16db7cb7dae9563f6ff331f201c36990a0ac93912ddc41a74a0181333f0f5cfb7ca6939a1c965a33ae214b9929dbfc6cebba5174a01013c08824887923aee12d0ffd4db5966b14a4685e831c38ac82e8891cefde92f90b6e4c8780d88a22b2a9e3051ba4dfd70b60cb00895fdec2852c7157c1cff39ccef662d0d9dd73299de8b9e7e3605e1f78d19867d0b09e305e91ac625ed9cdc2dbc3c5707"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x30, 0x1, "489caa03cb801168dcac1b8a081eb17a2958e3b137ca03fb5e59a2f7da6fde086326d655a68e2187cb68bc0f"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x57, 0x1, "b33e024c14a61f03061bb56d0eb03440926acf7529445b3e371c189e05ab11770b9c853b1014a876ef4dd31ef473c5b8de22e0929c25ab6423fb20718560acd66ea5d026024f2462a063c767a95fa189d745f3"}, @NFTA_DATA_VALUE={0x30, 0x1, "b3c68ba8dda71f4b49b1d28728cb2b61889f8cfe1bf9f3ee6a40f43abba2c53308ddfec87acb2b583771a02f"}]}, @NFTA_IMMEDIATE_DATA={0x74, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x62, 0x1, "e5e7de1bd669be8656343124c1d1b1a0a91a58891be42bd42f4fd4cd7646640b38db16715faeed048a12253e56ee6e6b6280b740dcc09385c7ff6cc3aa292574819b658e856bace8e518a40c706f9df0f65c0128dcb187e4bae4a49e8888"}]}, @NFTA_IMMEDIATE_DATA={0x74, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DATA={0x40, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x19, 0x1, "fc3fae5803aa09af24753a796d58bdce60ad265f99"}]}]}}}, {0x68, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xf, 0x1, 'MASQUERADE\x00'}]}}}, {0x4c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x33}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xcb}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1540, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x152c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x11b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x56, 0x1, "a1cc1e788e2ceaa6ea461f04ff015fbcbeacb8caed5ce46dd25e56d2091a2b0630a4aa6d4d0e8369e7163beb301aabc711579210dd39f086f93ad11f9cd053d2a39a8784b670b1f264aaab7cb27feb03d298"}, @NFTA_DATA_VALUE={0x39, 0x1, "057b69b32b16235f1f78442b43ddfc5d1a27b18bdce3cf62468b251f7951b86a76abaf8987594e6f42e340ff625c9fa12b9575dfae"}, @NFTA_DATA_VALUE={0xf3, 0x1, "cf986dfa5cce2fa86d0553e535bb66062113f0e839a780f9872310b2281d3a7ba278ff1bb9eb7888f99f476c52994a19bb016951c9328c86849edeff87dbf78fc1825f16c8cc341503921f1c0913cdb3046e164639b706da44139d64d4ad99a3fef5277e9394336467e2b270082e99bb633954d48710d9d1d68788bed6b94abd08974f97831dc6cfd26b2704c3b5ab54130b1b7a5ca6d9ab826df427315550589a25b4189c0a30f1c4136f547227561716b60280eee4fd5b972fa873a3f44dbd7eaf0cbdc4fd94c0f9cb3b3729c31244d8e06c84d3a862d674f7a31f3dd262fde89b5e17e1d79a53c7c0bcf07a07bc"}]}, @NFTA_IMMEDIATE_DATA={0x230, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x51, 0x1, "9c48bcbe08345e5a89089620e0106feb831a631812f07f09b8b9db1fb4eb2b2340cf6c4f57eaccdc40d6e5c72039240508c97f993d19203a1f63f5ba26f6727f8645e452ce040479111ca03865"}, @NFTA_DATA_VALUE={0xda, 0x1, "68280c6cefb5bd2bf17dc2259a5bce97cf44c4d744a07131a4ec50bdf9b6c8093b1f783f6921ecb509e52a894d3a4be26bdbc4a50359877aa2fa146f12c64bab99b2a80a1d98bffa2af8f5d67bdd3235c5d95632ff35e08e22a950e27dcf4af71fc8fef8128683e26c8402d29acda5b532eecc5141243ad02a1027938b7b29e8feb72dc4f902595f2a8a5788b615aa3d72e23e5bba92023e8dc07a0b57df9a59f57266a679fc13f6a8c26c921ed7dd8414e7edb196aa0e144bf11fad124dfea45b6033c9d33938d2f25cfb915fba1c885e74e01f2876"}, @NFTA_DATA_VALUE={0x56, 0x1, "324454bf5589fe6ac56364e698f03d73a0a781c99b532892a934bfaa610cbf418b3a87ae351c00918bfeaffa9fbf40774299eaf0ec30f54082f247dc48fb9190d99fc9e4dd09fbcbb289b40e95789ae960f7"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd1, 0x1, "9596544d6acc8ff616c1468ba1312e8aa55ecb92dc08407af971d74901f941bdd0e723ca285a9a1945572b56f24e97814b9844f516208a9ac36d75adb971b379bf57e2b028ce5637c9c03ec5c0f650e11e67546822a9ae3d690bd5516fa2d83cc40c9fe8f5d7d303fd41a13a4919653041882cdf0dddd4f646b66a7a5b1a9394d0dab02f2bfb5dfc0203dcb0fef83bce67903427b5d1a80c193bc8d5d70b886f7b2ecf9d9ff22a77452ea2efeecb06c6bec51d84924a8a96c76dbbf766af937a1874b82c8bc7bef1c6c44f8abf"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}]}, @NFTA_SET_ELEM_DATA={0x1008, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4000000}]}], {0x14, 0x10}}, 0x4204}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x28) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) unshare(0x60010400) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 897.693673ms ago: executing program 2 (id=6856): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000e9ffffffffffffff000000000000000000000000000000000000000000000000000a0000001f40c48a00000000804000020000000040000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f000000000000000000000000000000020000"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x2, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in=@local, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x67}, 0x6e6bb4}, [@migrate={0x9c, 0x11, [{@in=@empty, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x12}, @in=@broadcast, 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}, {@in=@private=0xa010101, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x4800) 839.931513ms ago: executing program 1 (id=6857): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0x6180, &(0x7f0000007bc0)) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) 817.608229ms ago: executing program 2 (id=6858): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x7f}, 0x80, 0x0}, 0x20000081) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 711.825249ms ago: executing program 0 (id=6859): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e240000000000004504040001ffffff9404000001000a00b7040000000100006a0af2fe000000008500000078000000b70000000000000095000000000000009e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9171e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62dd7c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18568136207304e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100d33128954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e117e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3feec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f864b0ba45efbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90104c48e41d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b81da301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3040000002e334319c8979c322e92fbc2c400009f2404b941553843de114fdb03c19d606bd760c40f7f28360820b82d548198041562bcbd9edce223b54cf3c35823f3c446f0a20160ac181c96606dbc967673aca98d6f5637b20fd2809a29ea5e40139a19415f7fc5d852209bdfed74008651752b5e052412d3e00a44417b7caf91a173925a66ee6e30723e73f3b7d66d2a5d09ff40c0bc6e7a5cfef7f327018578892a23014c3629f2e41af619f0d9f0ec8d551415051ff94391c03f3501c928ed7818af61729278f84d4730ef28af4c202e0f175e2a5cbddc8b973e2701b33f1b963025220c04817010b6fb70"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x728a}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xba6}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x77ff8}]}, 0x38}}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x38, 0x0, 0x0) close(r5) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) (async) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="02", 0x1}], 0x1}}], 0x1, 0x8005) (async) r10 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(r10, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xe, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETVNETHDRSZ(r14, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r14, &(0x7f0000000380)=ANY=[@ANYRES16=r14, @ANYBLOB="e1ed6f24d61a58cec867a7232e84e348930eeb2518c47315734d"], 0xfdef) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r12}, @nested={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 710.873917ms ago: executing program 4 (id=6860): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000000b060104000000000000000006000002050001000700000024000780080009400000ffff1800018014000240030000000000000000000000000000010900020073797a31"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004804) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x5, 0xfffffffffffffef4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @mcast2, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="140000000000000029"], 0x18}, 0x40c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100005fffdffffff000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000040c900002c00128009000100626f6e64000000001c00028008000513c1b300000000000500010006db1f0005001d0005"], 0x4c}}, 0x0) 642.151276ms ago: executing program 4 (id=6861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc2000ffffffff000000009c27094c9b49d28b4b687a7836bf9c11496e1b9161a601533628f1d115bdd80d1c39689100d0c2504405038b0bd2d9098fe892246b3a5f210110384d2ad3c147941e05d2a802298f5bebb060ef025196bdab4628ef40175612f9329de14e7562e613f61e60bf145482e3cdf9a0a6a4d19fd497e7bc86f457afada17c794c103126ebd740b35c14a127a6393322c9f9b6fe95a4d96249f81a0e5ccfbbd4c44c00bb075da81da09ebe12cad125db0eba67b1c900d3fde0029bc3f462512334a5ef8b92b7f67e7afd4e3e75f02bdcc1ad1438d670495aaf00d08b2a33fe3bcc07a92910dea07bf52188a8b942ae89", @ANYRES16=r1, @ANYBLOB="000127bd7000fddbdf257f00000008000300", @ANYRES32=r2, @ANYBLOB="14005500a09d157d41d09260cd8e4cffdb0321790a00f5000802110000010000140055009dd5c2c50f5c573da9c2a46ce0c5269e06004800420000000a00340002020202020200000a00f500dab705f7906e000014005500279e66ce182f395771464802d1d941a11a0034007a15b57b1bdc01f3649f89e22f98592c9fb4b584e7fc000014005500e188afb23e557c47f0a61faca47081570600480010000000"], 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x4040004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000200000000000000003519024800000009b7201a88bb80900a00000000000000000200000000f7ffff0940000000000900020073797a320000000009f9000073797a30eaff0440000000060c000010000100550fe2c34fc2db22b100"/115], 0x70}}, 0x0) 586.93812ms ago: executing program 4 (id=6862): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911080000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair(0x2c, 0x3, 0x4028, &(0x7f0000000080)={0xffffffffffffffff}) bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x5, 0x0, 0xd, r1}, 0x10) 417.117236ms ago: executing program 0 (id=6863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xfffffffffffffdef, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x0, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 414.677956ms ago: executing program 2 (id=6864): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027"], 0x124}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x4800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, 0x0, 0x20, 0x66, 0x8}, [@NDA_DST_MAC={0xa}, @NDA_PROTOCOL={0x5, 0xc, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1804}, 0x4) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24048844) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000002000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a31000000002800048008000240000000000800014000000005876bd29d76657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xf4}}, 0x0) 384.780459ms ago: executing program 4 (id=6865): r0 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x332372b3}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xb}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001900050000000000fcdbdf250000000000e90000000000cb5c678602024f9c000000000a5f142a000000000000000000000038a2aa0e00000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r1], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000002f00)=@raw={'raw\x00', 0xc01, 0x3, 0x1248, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x1100, 0x3c8, 0x3c8, 0x11b0, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfff9, 0x2, [0x7, 0xc, 0x1f, 0x32, 0x2a, 0xa, 0x3d, 0x3e, 0x2d, 0x17, 0x19, 0xc, 0x25, 0xd, 0x3e, 0x79], 0x0, 0x1000, 0x5b5}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12a8) sendmmsg$inet(r3, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 382.663759ms ago: executing program 3 (id=6866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x6008c2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f00000008"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) (async) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffe, 0x8000, 0x7, 0x81}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x40, &(0x7f0000000140)={0x11, 0x11, r7, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x4, @none, 0x1, 0x2}, 0xe) 175.125851ms ago: executing program 4 (id=6867): socket(0x840000000002, 0x3, 0xff) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$inet(0x2, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000011c0)={'syztnl1\x00', &(0x7f0000001140)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x3, 0x3, {{0x14, 0x4, 0x0, 0x4, 0x50, 0x67, 0x0, 0x7e, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, {[@cipso={0x86, 0x1b, 0x0, [{0x6, 0xb, "43daca862f0c6f8b38"}, {0x1, 0xa, "4b3859758566c882"}]}, @timestamp_addr={0x44, 0x14, 0xee, 0x1, 0x9, [{@remote, 0x5}, {@multicast2, 0xd}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4}]}}}}}) pipe(&(0x7f0000001a00)) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000001740)={0x25c, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x4}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r4}, {0x4}}, {{0x8, 0x1, r4}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6a19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="5b1ce07f6fd910993b5464964ec310b24cb392b936884fe96fde2fce0ec7d0af04e34cbc20e56bbce102cfaa3d05d4cd03bb4d896de5eebe2712f5a46e037ed04b59e3a79d99b854c548d9e5f01f9899a4", @ANYBLOB="d4c4f7227b1abc7c9300caad1d0f0f8e0dcd453496a185b6354a7891e36579740f7a86f5ec975f31c6f6ed957c0295ed00677f2fdd6e0ccff011bbd4ea1435951d0327ab21408a79bd1c5b0fb1caa19fc4708b1150c7744acae40341fc9572a8d21b7beca430052d9b12b9df52356ba3140010ba3c1611f7ea4bcbea180c309c0d806cd85998505ad33928b807cf3e8b500f52fd27a7abd20312f761155cf030", @ANYRESHEX=r5, @ANYRES16=r7, @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x48891}, 0x2000c800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002000010327bd7000ffdbdf2502000000000000051e000000080017004f204e20050016"], 0x2c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 100.697548ms ago: executing program 3 (id=6868): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x10}) sendmsg$nl_generic(r1, 0x0, 0x20000000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async, rerun: 64) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000012b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) (async, rerun: 64) r8 = socket$kcm(0xa, 0x2, 0x73) (rerun: 64) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f883472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a3f582d7c604013317281c5e9a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) close(r8) (async) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r9 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r9, 0x84, 0x81, 0x0, &(0x7f00000010c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000002c0)={'TPROXY\x00'}, &(0x7f0000000580)=0x1e) 70.569971ms ago: executing program 2 (id=6869): r0 = socket$inet6(0xa, 0x80002, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000020000155fbc5dfa5d912feaedac2ddd0950389cbccee000300000200000005b228080f00009b09a48003fd119e22"], 0x24}}, 0x42094) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2e, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/18, 0x12}, {0x0}], 0x2}, 0x101}], 0x1, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x2}, {}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x38, 0xff9, 0x8}, 0x20) 0s ago: executing program 0 (id=6870): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000000000)={0x24, @long}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000000100), 0x0, 0x726, 0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000e00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5ced1a9ed4e19044b2e1d182e389e0395bb14472b95056fa0df9e8a891b12197cd2d7e1b049a5d7b9d9423601188014c2d6f2afe609464032d78738a390c1e8320cc6798f9776e46c9561cf666a7bf2c28c03f0847fd8aa908d420a2dbcd7fe68a95e0b9349c334f065ed1814e4e61b3846d8729"], 0x3c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) sendmsg$AUDIT_USER(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0xf8, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfe, "0f772360d4ddad4f929e412f72f34d0a818fc426dc4560f5e3d113210528151e8c464be2a6089fa5f93a02e46cca23c18f58e5eb9b3cdf38e4232fa0f1de1cf7dca2b97ad1a37f0bb784238d06080d189bd1a3c5baaf0c759cf0867f420f9470f556397d60fad1623232d5e327354da1aa67c166208341fc2b2e65917827fec5b657f45260c0fefe254a5b82abe2a68b00286b9113e1700aa4db1112d19c829b56b2996d0958f939a884af5d11ca8e218f091e948b2a9ef4dec1d628bbc7ced191418feb1aac033f8dde4f48e478dbf5420f4156bd955f1be806b92bbd7a1cfbd04b6459d6f117", ["", "", "", "", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0xc4) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x5) kernel console output (not intermixed with test programs): w address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 920.966862][T27105] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 921.143780][T27113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5730'. [ 921.367383][T27127] lo speed is unknown, defaulting to 1000 [ 921.375481][T27127] C speed is unknown, defaulting to 1000 [ 921.473145][T27143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 921.480500][T27143] IPv6: NLM_F_CREATE should be set when creating new route [ 921.487773][T27143] IPv6: NLM_F_CREATE should be set when creating new route [ 921.906604][T27159] tipc: Enabling of bearer rejected, already enabled [ 922.005895][T27165] netlink: 'syz.4.5741': attribute type 2 has an invalid length. [ 922.014501][T27165] netlink: 'syz.4.5741': attribute type 9 has an invalid length. [ 922.026147][T27165] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5741'. [ 922.037764][ T30] audit: type=1107 audit(1764516738.470:12): pid=27164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 922.995937][T27192] pim6reg1: entered promiscuous mode [ 923.012504][T27192] pim6reg1: entered allmulticast mode [ 923.110565][T27206] netlink: 264 bytes leftover after parsing attributes in process `syz.3.5749'. [ 923.126027][T27206] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5749'. [ 923.791072][T27230] lo speed is unknown, defaulting to 1000 [ 923.805997][T27230] C speed is unknown, defaulting to 1000 [ 924.227598][T17046] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 924.246703][T17046] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 924.264151][T17046] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 924.276465][T17046] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 924.286229][T17046] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 924.320199][T27241] vxcan0: entered allmulticast mode [ 924.439525][T27239] syzkaller0: entered promiscuous mode [ 924.450833][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5771'. [ 924.455996][T27239] syzkaller0: entered allmulticast mode [ 924.525776][T27267] netlink: 'syz.1.5770': attribute type 32 has an invalid length. [ 924.570801][T27269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5772'. [ 926.381873][T17046] Bluetooth: hci2: command tx timeout [ 926.580423][T27264] lo speed is unknown, defaulting to 1000 [ 926.630616][T27264] C speed is unknown, defaulting to 1000 [ 926.630826][T27244] lo speed is unknown, defaulting to 1000 [ 926.693779][ T6627] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.727725][T27282] netlink: 'syz.1.5776': attribute type 1 has an invalid length. [ 926.736592][T27244] C speed is unknown, defaulting to 1000 [ 926.748783][T27282] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5776'. [ 926.769373][T27282] NCSI netlink: No device for ifindex 0 [ 926.780156][T27287] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 926.811393][ T6627] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.880001][T27289] netlink: 'syz.4.5777': attribute type 21 has an invalid length. [ 926.888071][T27289] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5777'. [ 926.950939][T27289] netlink: 'syz.4.5777': attribute type 4 has an invalid length. [ 926.959446][T27289] netlink: 'syz.4.5777': attribute type 5 has an invalid length. [ 926.967343][T27289] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5777'. [ 927.011768][ T6627] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 927.026411][T27297] netlink: 'syz.3.5780': attribute type 10 has an invalid length. [ 927.169310][ T6627] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 927.182290][T27304] sctp: [Deprecated]: syz.1.5783 (pid 27304) Use of int in max_burst socket option. [ 927.182290][T27304] Use struct sctp_assoc_value instead [ 927.331719][T27309] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5784'. [ 927.546472][T27244] chnl_net:caif_netlink_parms(): no params data found [ 927.672555][T27326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5788'. [ 927.734784][ T6627] batadv_slave_1: left allmulticast mode [ 927.760274][ T6627] bridge0: port 2(batadv_slave_1) entered disabled state [ 927.807596][ T6627] bridge0: port 1(batadv0) entered disabled state [ 927.880922][T27336] netlink: 'syz.0.5792': attribute type 10 has an invalid length. [ 927.904351][ T6627] veth7: left allmulticast mode [ 927.909840][ T6627] veth7: left promiscuous mode [ 927.914927][ T6627] bridge5: port 2(veth7) entered disabled state [ 927.924212][ T6627] ip6gretap2: left allmulticast mode [ 927.930609][ T6627] ip6gretap2: left promiscuous mode [ 927.936116][ T6627] bridge5: port 1(ip6gretap2) entered disabled state [ 928.193773][ T6627] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 928.202428][ T6627] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 5e:71:a2:f2:a3:34 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 928.466175][T17046] Bluetooth: hci2: command tx timeout [ 928.513618][ T6627] erspan0 (unregistering): left promiscuous mode [ 928.595271][ T6627] bond6 (unregistering): (slave erspan1): Releasing active interface [ 928.604758][ T6627] erspan1 (unregistering): left promiscuous mode [ 929.100876][ T6627] bond11 (unregistering): (slave bridge7): Releasing active interface [ 929.316630][ T6627] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 929.330295][ T6627] bond0 (unregistering): Released all slaves [ 929.343106][ T6627] bond1 (unregistering): Released all slaves [ 929.469342][ T6627] bond2 (unregistering): Released all slaves [ 929.597000][ T6627] bond3 (unregistering): (slave veth3): Releasing active interface [ 929.606007][ T6627] bond3 (unregistering): Released all slaves [ 929.619294][ T6627] bond4 (unregistering): Released all slaves [ 929.746830][ T6627] bond5 (unregistering): Released all slaves [ 929.879224][ T6627] bond6 (unregistering): Released all slaves [ 930.005788][ T6627] bond7 (unregistering): (slave veth5): Releasing active interface [ 930.014720][ T6627] bond7 (unregistering): Released all slaves [ 930.135254][ T6627] bond8 (unregistering): Released all slaves [ 930.260952][ T6627] bond9 (unregistering): Released all slaves [ 930.395879][ T6627] bond10 (unregistering): Released all slaves [ 930.408578][ T6627] bond11 (unregistering): Released all slaves [ 930.529171][T17046] Bluetooth: hci2: command tx timeout [ 930.552475][ T6627] bond12 (unregistering): (slave veth11): Releasing active interface [ 930.562959][ T6627] bond12 (unregistering): Released all slaves [ 930.610890][T27336] team0: Cannot enslave team device to itself [ 930.796356][T27344] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 930.883895][T27356] netlink: 'syz.0.5795': attribute type 1 has an invalid length. [ 930.883903][ T6627] : left promiscuous mode [ 930.917796][T27348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5794'. [ 930.950727][T27357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5796'. [ 931.002428][T27244] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.011055][T27244] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.040279][T27360] netlink: 'syz.4.5796': attribute type 3 has an invalid length. [ 931.059396][T27244] bridge_slave_0: entered allmulticast mode [ 931.067749][T27244] bridge_slave_0: entered promiscuous mode [ 931.095991][T27244] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.111914][T27244] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.132313][T27244] bridge_slave_1: entered allmulticast mode [ 931.154381][T27244] bridge_slave_1: entered promiscuous mode [ 931.179344][T27359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5795'. [ 931.220177][ T6627] tipc: Left network mode [ 931.309549][T27244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.324007][T27244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.442811][T27244] team0: Port device team_slave_0 added [ 931.465128][T27244] team0: Port device team_slave_1 added [ 931.569852][T27244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.588346][T27244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.625961][T27244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.669330][T27244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.676418][T27244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.707412][T27244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.812782][T27390] tipc: Failed to remove unknown binding: 66,1,1/2886997039:1534232071/1534232073 [ 931.887876][T27394] tipc: Failed to remove unknown binding: 66,1,1/2886997039:1534232071/1534232073 [ 931.915075][T27244] hsr_slave_0: entered promiscuous mode [ 931.938072][T27244] hsr_slave_1: entered promiscuous mode [ 931.938987][T27394] tipc: Failed to remove unknown binding: 66,1,1/2886997039:1534232071/1534232073 [ 931.954934][T27244] debugfs: 'hsr0' already exists in 'hsr' [ 931.984264][T27244] Cannot create hsr debugfs directory [ 932.163990][T27395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 932.422231][ T6627] hsr_slave_0: left promiscuous mode [ 932.436915][ T6627] veth0_virt_wifi: left allmulticast mode [ 932.526735][ T6627] pim6reg (unregistering): left allmulticast mode [ 932.608682][T17046] Bluetooth: hci2: command tx timeout [ 932.755045][T27422] netlink: 'syz.0.5810': attribute type 1 has an invalid length. [ 933.032422][T27437] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.5815'. [ 933.043000][T27437] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 933.582301][T27422] 8021q: adding VLAN 0 to HW filter on device bond4 [ 933.603178][T27425] 8021q: adding VLAN 0 to HW filter on device bond4 [ 933.613663][T27425] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 933.627270][T27425] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 933.673084][T27428] veth5: entered promiscuous mode [ 933.686127][T27428] bond4: (slave veth5): Enslaving as an active interface with a down link [ 933.805208][T27448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5818'. [ 933.849550][T27448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5818'. [ 933.915712][T27452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5819'. [ 934.130709][T27456] lo speed is unknown, defaulting to 1000 [ 934.147835][T27463] xt_cgroup: invalid path, errno=-2 [ 934.153567][ T6627] IPVS: stop unused estimator thread 0... [ 934.164333][T27456] C speed is unknown, defaulting to 1000 [ 934.391693][T27467] lo speed is unknown, defaulting to 1000 [ 934.419215][T27467] C speed is unknown, defaulting to 1000 [ 934.637600][T27244] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 934.700930][T27244] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 934.772360][T27244] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 934.969215][T27244] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 935.242862][T27497] netlink: 'syz.4.5829': attribute type 5 has an invalid length. [ 935.263433][T27497] netlink: 'syz.4.5829': attribute type 5 has an invalid length. [ 935.298112][T27244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.394075][T27244] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.407675][T27507] netlink: 'syz.0.5832': attribute type 1 has an invalid length. [ 935.430663][ T6627] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.437822][ T6627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.522013][T27507] 8021q: adding VLAN 0 to HW filter on device bond5 [ 935.551536][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.558729][ T6627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.689185][T27513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 935.718189][T27513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5834'. [ 935.821810][T27523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 935.963723][T27517] erspan0: entered allmulticast mode [ 936.440291][T27552] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5842'. [ 936.455052][T27552] netlink: 175 bytes leftover after parsing attributes in process `syz.1.5842'. [ 936.470018][T27547] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5842'. [ 936.766145][T27244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.821679][T27568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5848'. [ 936.880371][T27244] veth0_vlan: entered promiscuous mode [ 936.895162][T27244] veth1_vlan: entered promiscuous mode [ 936.934412][T27244] veth0_macvtap: entered promiscuous mode [ 936.954913][T27244] veth1_macvtap: entered promiscuous mode [ 937.002326][T27244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.030136][T27244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.057462][ T6635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.072582][ T6635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.088866][ T6635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.098275][T17046] Bluetooth: hci2: command tx timeout [ 937.119547][ T6635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.170129][T27582] macsec1: entered promiscuous mode [ 937.175515][T27582] bridge0: entered promiscuous mode [ 937.182736][T27582] bridge0: port 1(macsec1) entered blocking state [ 937.191000][T27582] bridge0: port 1(macsec1) entered disabled state [ 937.197645][T27582] macsec1: entered allmulticast mode [ 937.204031][T27582] bridge0: entered allmulticast mode [ 937.222732][T27582] macsec1: left allmulticast mode [ 937.227903][T27582] bridge0: left allmulticast mode [ 937.229541][T25500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.249939][T27582] bridge0: left promiscuous mode [ 937.316004][T27585] dummy0: entered promiscuous mode [ 937.330254][T27585] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 937.340930][T27585] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 937.351914][T27585] hsr0: entered allmulticast mode [ 937.359332][T27585] dummy0: entered allmulticast mode [ 937.366794][T27585] bond0: entered allmulticast mode [ 937.379460][T27585] bond_slave_0: entered allmulticast mode [ 937.389092][T27585] bond_slave_1: entered allmulticast mode [ 937.474069][T25499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.493436][T25499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.615210][T25499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.629561][T25499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.863868][T27616] netlink: 'syz.1.5859': attribute type 4 has an invalid length. [ 937.866258][T27615] netlink: 'syz.1.5859': attribute type 4 has an invalid length. [ 938.077319][T27628] geneve2: entered promiscuous mode [ 938.100085][ T6635] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 938.138679][ T6635] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 938.169955][ T6627] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 938.179422][ T6627] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 938.221702][T27642] syz_tun: entered allmulticast mode [ 938.284052][T27642] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 938.357325][T27645] gretap0: entered promiscuous mode [ 938.368919][ T6627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.386621][T27645] erspan0: left allmulticast mode [ 938.447783][T27645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.464196][T27645] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.471776][ C1] syz_tun: tun_net_xmit 54 [ 938.481428][T27645] 1ªX¹¦À: left allmulticast mode [ 938.486472][T27645] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 938.544366][T16086] bond0: (slave syz_tun): Releasing backup interface [ 938.566523][T25500] syz_tun: tun_net_xmit 90 [ 938.588349][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 938.590651][T20051] syz_tun: tun_net_xmit 110 [ 938.606046][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 938.619895][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 938.631647][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 938.635829][ T6635] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.639633][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 938.652544][ T6635] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.706567][T27650] lo speed is unknown, defaulting to 1000 [ 938.713813][T27650] C speed is unknown, defaulting to 1000 [ 938.752825][ T6635] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.763716][ T6635] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.826143][ T6635] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.836734][ T6635] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.899043][ C1] syz_tun: tun_net_xmit 54 [ 938.912043][T27629] syz_tun: left allmulticast mode [ 938.925782][ T6635] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.938672][ C1] syz_tun: tun_net_xmit 54 [ 938.959451][ T6635] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.034703][T27650] chnl_net:caif_netlink_parms(): no params data found [ 939.335636][T20051] syz_tun: tun_net_xmit 110 [ 939.348813][T20051] syz_tun: tun_net_xmit 90 [ 939.378690][ C1] syz_tun: tun_net_xmit 54 [ 939.398082][ C0] syz_tun: tun_net_xmit 26 [ 939.461813][T27650] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.478185][T27650] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.512838][T27650] bridge_slave_0: entered allmulticast mode [ 939.519205][ T6627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.540286][T27650] bridge_slave_0: entered promiscuous mode [ 939.583364][T27650] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.591253][T27650] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.599104][T27650] bridge_slave_1: entered allmulticast mode [ 939.607193][T27650] bridge_slave_1: entered promiscuous mode [ 939.674464][T27672] lo speed is unknown, defaulting to 1000 [ 939.703604][ T6635] tipc: Resetting bearer [ 939.902135][ T6635] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 939.929383][T27700] netlink: 'syz.2.5877': attribute type 1 has an invalid length. [ 940.368638][ C0] syz_tun: tun_net_xmit 26 [ 940.451508][ T6635] tipc: Disabling bearer [ 940.541506][ T6635] bond0 (unregistering): (slave 30): Releasing backup interface [ 940.551694][ T6635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.561034][ T6635] bond0 (unregistering): Released all slaves [ 940.649413][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.692930][ T5849] Bluetooth: hci1: command tx timeout [ 940.710754][ T6635] bond1 (unregistering): Released all slaves [ 940.833950][ T6635] bond2 (unregistering): Released all slaves [ 940.847056][ T6635] bond3 (unregistering): (slave lo): Releasing backup interface [ 940.856012][ T6635] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 940.869602][ T6635] bond3 (unregistering): Released all slaves [ 940.994715][ T6635] bond4 (unregistering): Released all slaves [ 941.020706][T27650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.030120][T27672] C speed is unknown, defaulting to 1000 [ 941.087695][T20051] lo speed is unknown, defaulting to 1000 [ 941.094497][T19580] lo speed is unknown, defaulting to 1000 [ 941.121437][T20051] syz2: Port: 1 Link DOWN [ 941.128585][T27650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.205937][ T6635] tipc: Disabling bearer [ 941.216234][ T6635] tipc: Disabling bearer [ 941.246312][ T6635] tipc: Left network mode [ 941.317231][ T6635] IPVS: stopping backup sync thread 27287 ... [ 941.341416][T27650] team0: Port device team_slave_0 added [ 941.355019][T27710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5885'. [ 941.379063][T27650] team0: Port device team_slave_1 added [ 941.418139][ C0] syz_tun: tun_net_xmit 26 [ 941.456138][T27717] veth0_vlan: entered allmulticast mode [ 941.488388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.525624][T27718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5885'. [ 941.596164][T27719] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.603934][T27719] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.626536][T27723] bridge0: entered allmulticast mode [ 941.722986][T27650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.733281][T27650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.737359][T27732] xt_time: unknown flags 0xf4 [ 941.760636][T27650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.779471][T25499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.828722][T27731] netlink: 'syz.2.5889': attribute type 1 has an invalid length. [ 941.829030][T27650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.845858][T27650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.872953][T27650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.933261][T27731] gretap1: entered allmulticast mode [ 942.220025][T27650] hsr_slave_0: entered promiscuous mode [ 942.226907][T27650] hsr_slave_1: entered promiscuous mode [ 942.249647][T27650] debugfs: 'hsr0' already exists in 'hsr' [ 942.255423][T27650] Cannot create hsr debugfs directory [ 942.308572][T27741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5892'. [ 942.318225][ C1] syz_tun: tun_net_xmit 58 [ 942.358113][T27741] block nbd6: Unsupported socket: should be TCP or UNIX. [ 942.438209][ C0] syz_tun: tun_net_xmit 58 [ 942.513008][T27750] tipc: Started in network mode [ 942.517922][T27750] tipc: Node identity 46775471bdbd, cluster identity 4711 [ 942.527317][T27750] tipc: Enabled bearer , priority 0 [ 942.548066][ C0] syz_tun: tun_net_xmit 26 [ 942.588254][T27749] syzkaller0: entered promiscuous mode [ 942.593769][T27749] syzkaller0: entered allmulticast mode [ 942.770956][T27749] tipc: Resetting bearer [ 942.777887][ T5849] Bluetooth: hci1: command tx timeout [ 942.818030][T27766] netlink: 'syz.1.5900': attribute type 4 has an invalid length. [ 942.826407][T27748] tipc: Resetting bearer [ 942.838324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.869909][T27748] tipc: Disabling bearer [ 942.876015][T27772] netlink: 'syz.1.5900': attribute type 4 has an invalid length. [ 942.890064][T25499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.036994][ T6635] hsr_slave_0: left promiscuous mode [ 943.050048][ T6635] hsr_slave_1: left promiscuous mode [ 943.056425][ T6635] batman_adv: 1: Removing interface: batadv_slave_0 [ 943.064416][ T6635] batman_adv: 1: Removing interface: batadv_slave_1 [ 943.078312][ T6635] `: left allmulticast mode [ 943.083371][ T6635] team_slave_0: left allmulticast mode [ 943.090729][ T6635] team_slave_1: left allmulticast mode [ 943.097157][ T6635] dummy0: left allmulticast mode [ 943.102922][ T6635] batadv0: left allmulticast mode [ 943.108986][ T6635] `: left promiscuous mode [ 943.113596][ T6635] team_slave_0: left promiscuous mode [ 943.119509][ T6635] team_slave_1: left promiscuous mode [ 943.121808][T27790] netlink: 'syz.2.5906': attribute type 1 has an invalid length. [ 943.160106][ T6635] ` (unregistering): Port device batadv0 removed [ 943.328386][ C0] syz_tun: tun_net_xmit 58 [ 943.518245][ C0] syz_tun: tun_net_xmit 26 [ 943.568799][ T6635] ` (unregistering): Port device team_slave_1 removed [ 943.616942][ T6635] ` (unregistering): Port device team_slave_0 removed [ 943.914849][ T6635] ` (unregistering): Port device dummy0 removed [ 944.048673][ T6629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.098978][T27780] vlan0: entered promiscuous mode [ 944.470933][T27813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5913'. [ 944.505830][T27813] netlink: 'syz.1.5913': attribute type 2 has an invalid length. [ 944.524311][T27813] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5913'. [ 944.578094][ C0] syz_tun: tun_net_xmit 26 [ 944.603417][T27814] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 944.621463][T27820] syz_tun: entered promiscuous mode [ 944.730954][T27817] C speed is unknown, defaulting to 1000 [ 944.767054][ T6635] IPVS: stop unused estimator thread 0... [ 944.857499][ T5849] Bluetooth: hci1: command tx timeout [ 945.071560][T27650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 945.131739][T27650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 945.175093][T27650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 945.188463][T25499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.268559][T27650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 945.598120][ C0] syz_tun: tun_net_xmit 26 [ 945.726446][T27650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.753420][T27650] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.767916][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.775165][ T6635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.833613][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.840838][ T6629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.361477][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.498477][T27650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.638079][ C0] syz_tun: tun_net_xmit 26 [ 946.978048][ T5849] Bluetooth: hci1: command tx timeout [ 947.173846][T27650] veth0_vlan: entered promiscuous mode [ 947.206761][T27650] veth1_vlan: entered promiscuous mode [ 947.257821][T27650] veth0_macvtap: entered promiscuous mode [ 947.288525][T27650] veth1_macvtap: entered promiscuous mode [ 947.354387][T27650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.371763][T27650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.394627][T25499] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.403481][T25499] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.413633][T25499] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.445708][T25499] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.540634][T25499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.592328][T25499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.608038][T25499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.689719][T25499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.702021][T25499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.758069][ C0] syz_tun: tun_net_xmit 26 [ 947.874441][T27926] netlink: 'syz.4.5863': attribute type 2 has an invalid length. [ 947.894029][T27926] netlink: 'syz.4.5863': attribute type 1 has an invalid length. [ 947.913070][T27926] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5863'. [ 947.934661][T27925] netlink: 'syz.4.5863': attribute type 32 has an invalid length. [ 948.092410][T27936] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 948.248534][T27943] siw: device registration error -23 [ 948.303754][T27940] C speed is unknown, defaulting to 1000 [ 948.329991][T27946] tipc: Enabled bearer , priority 0 [ 948.410246][T27946] syzkaller0: entered promiscuous mode [ 948.423205][T27946] syzkaller0: entered allmulticast mode [ 948.429853][T27946] tipc: Resetting bearer [ 948.473064][T27952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5943'. [ 948.541700][T27947] C speed is unknown, defaulting to 1000 [ 948.778370][ T6629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.868066][ C0] syz_tun: tun_net_xmit 26 [ 948.932182][T27963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.941298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.029504][T25499] tipc: Resetting bearer [ 949.044475][T27961] veth0_to_bridge: entered promiscuous mode [ 949.074723][T27937] tipc: Resetting bearer [ 949.142406][T27820] Set syz1 is full, maxelem 65536 reached [ 949.301408][T27975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5952'. [ 949.908114][ C0] syz_tun: tun_net_xmit 26 [ 949.938329][ T6629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.848067][ C0] syz_tun: tun_net_xmit 26 [ 950.904428][T28001] IPVS: Scheduler module ip_vs_sip not found [ 951.048366][ T6629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.324558][T27937] tipc: Disabling bearer [ 951.335595][T27957] veth0_to_bridge: left promiscuous mode [ 951.395695][T28003] netlink: 'syz.1.5959': attribute type 13 has an invalid length. [ 951.408195][T28003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5959'. [ 951.424535][T28005] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5960'. [ 951.715372][T28012] C speed is unknown, defaulting to 1000 [ 951.763787][T28022] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 951.782199][T28019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5964'. [ 951.808078][ C0] syz_tun: tun_net_xmit 26 [ 951.821507][T28023] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 951.896159][T28008] C speed is unknown, defaulting to 1000 [ 951.907687][T28033] C speed is unknown, defaulting to 1000 [ 951.982898][T28036] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5966'. [ 951.992198][T28036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5966'. [ 952.019538][T28036] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5966'. [ 952.068732][T28042] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5971'. [ 952.220480][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.465739][T28055] pim6reg1: entered promiscuous mode [ 952.486892][T28069] xt_hashlimit: size too large, truncated to 1048576 [ 952.493841][T28055] pim6reg1: entered allmulticast mode [ 952.502257][T28069] xt_hashlimit: max too large, truncated to 1048576 [ 952.634177][T28069] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 952.768635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.848495][ C0] syz_tun: tun_net_xmit 26 [ 953.216728][T28094] netlink: 'syz.4.5985': attribute type 2 has an invalid length. [ 953.340337][T28103] netlink: 'syz.1.5989': attribute type 4 has an invalid length. [ 953.539485][T28109] netlink: 'syz.4.5991': attribute type 12 has an invalid length. [ 953.609325][T28116] tipc: Enabling of bearer rejected, already enabled [ 953.792482][T28132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.803077][T28134] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 953.842285][T28134] netlink: 'syz.0.5999': attribute type 1 has an invalid length. [ 953.850441][T28134] __nla_validate_parse: 2 callbacks suppressed [ 953.850459][T28134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5999'. [ 953.867172][T28134] netlink: 364 bytes leftover after parsing attributes in process `syz.0.5999'. [ 953.876675][T28134] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5999'. [ 953.885988][T28134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5999'. [ 953.928203][ C0] syz_tun: tun_net_xmit 26 [ 954.478972][ T6629] net_ratelimit: 3 callbacks suppressed [ 954.478992][ T6629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.592411][T28143] delete_channel: no stack [ 954.695004][T28165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6008'. [ 954.935626][T28175] x_tables: duplicate underflow at hook 1 [ 955.088133][ C0] syz_tun: tun_net_xmit 26 [ 955.155898][T28183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6015'. [ 955.222704][T28183] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6015'. [ 955.258136][T28183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6015'. [ 955.275809][T28183] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6015'. [ 955.363428][T28183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6015'. [ 955.468721][T28191] netlink: 'syz.1.6012': attribute type 33 has an invalid length. [ 955.499949][T28191] `: renamed from team0 (while UP) [ 955.515543][T28201] netlink: 'syz.3.6016': attribute type 1 has an invalid length. [ 955.686948][T25499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.765911][T28210] netlink: 'syz.3.6020': attribute type 1 has an invalid length. [ 955.807104][T28210] vxcan5: entered allmulticast mode [ 956.028059][ C0] syz_tun: tun_net_xmit 26 [ 956.307523][T28234] tipc: Enabled bearer , priority 0 [ 956.350955][T28232] tipc: Disabling bearer [ 956.688485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.828827][ T6629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.967192][T28233] team0 (unregistering): Port device team_slave_0 removed [ 956.990834][T28233] team0 (unregistering): Port device team_slave_1 removed [ 957.021614][T28249] netlink: 'syz.0.6031': attribute type 4 has an invalid length. [ 957.088085][ C0] syz_tun: tun_net_xmit 26 [ 957.502811][T28284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.511264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.823066][T28306] syzkaller0: entered promiscuous mode [ 957.848868][T28306] syzkaller0: entered allmulticast mode [ 957.875663][T28308] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 957.982209][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.208043][ C0] syz_tun: tun_net_xmit 26 [ 958.585139][T28329] C speed is unknown, defaulting to 1000 [ 958.692948][T17046] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 958.704835][T17046] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 958.714109][T17046] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 958.723728][T17046] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 958.780289][T17046] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 959.006485][T28339] C speed is unknown, defaulting to 1000 [ 959.023613][T28363] __nla_validate_parse: 13 callbacks suppressed [ 959.023631][T28363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6061'. [ 959.108107][ C0] syz_tun: tun_net_xmit 26 [ 959.127190][T25499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.272075][T28370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6060'. [ 959.302372][T28371] tipc: Enabling of bearer rejected, failed to enable media [ 959.496963][T28376] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6065'. [ 959.528568][T28373] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6065'. [ 959.606179][T28384] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6067'. [ 959.616788][T28387] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6067'. [ 959.813627][ T5849] Bluetooth: hci1: command tx timeout [ 960.178058][ C0] syz_tun: tun_net_xmit 26 [ 960.281734][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.849007][ T5849] Bluetooth: hci4: command tx timeout [ 961.248160][ C0] syz_tun: tun_net_xmit 26 [ 961.398238][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.935642][T28339] chnl_net:caif_netlink_parms(): no params data found [ 962.057201][T28418] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6075'. [ 962.078194][ C1] syz_tun: tun_net_xmit 58 [ 962.115338][T28426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.132575][T28426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.180569][T28426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.213552][T28426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.238305][ C1] syz_tun: tun_net_xmit 58 [ 962.243965][T28339] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.263271][T28339] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.270597][ C0] syz_tun: tun_net_xmit 58 [ 962.275615][T28426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.283900][ C0] syz_tun: tun_net_xmit 26 [ 962.307289][T28426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.318298][T28339] bridge_slave_0: entered allmulticast mode [ 962.337842][T28339] bridge_slave_0: entered promiscuous mode [ 962.356122][T28431] netlink: 'syz.2.6076': attribute type 12 has an invalid length. [ 962.378671][T28339] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.407110][T28339] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.433942][T28339] bridge_slave_1: entered allmulticast mode [ 962.462341][T28437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6077'. [ 962.472907][T28339] bridge_slave_1: entered promiscuous mode [ 962.519801][T25500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.538524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.608273][ C0] syz_tun: tun_net_xmit 58 [ 962.621141][T28339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.653026][T28339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.752106][T28339] team0: Port device team_slave_0 added [ 962.768932][T28339] team0: Port device team_slave_1 added [ 962.940952][ T5849] Bluetooth: hci4: command tx timeout [ 962.991507][T28339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.015679][T28339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.049353][T28339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.109085][T28339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.119124][T28339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.160626][T28466] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 963.167597][T28339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.268075][ C0] syz_tun: tun_net_xmit 26 [ 963.332175][T28475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6087'. [ 963.339034][T28339] hsr_slave_0: entered promiscuous mode [ 963.349290][T28339] hsr_slave_1: entered promiscuous mode [ 963.349922][T28475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6087'. [ 963.360108][T28339] debugfs: 'hsr0' already exists in 'hsr' [ 963.369831][T28339] Cannot create hsr debugfs directory [ 963.608543][T28495] sctp: [Deprecated]: syz.1.6095 (pid 28495) Use of int in max_burst socket option. [ 963.608543][T28495] Use struct sctp_assoc_value instead [ 963.618663][T28497] netlink: 'syz.4.6096': attribute type 5 has an invalid length. [ 963.965660][T28504] C speed is unknown, defaulting to 1000 [ 964.076967][T28516] xt_l2tp: missing protocol rule (udp|l2tpip) [ 964.144888][T28521] __nla_validate_parse: 4 callbacks suppressed [ 964.144905][T28521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6101'. [ 964.318135][ C0] syz_tun: tun_net_xmit 26 [ 964.566887][T28339] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 964.604692][T28339] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 964.631563][T28339] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 964.656005][T28339] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 964.674505][T28534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6104'. [ 964.695572][T28534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6104'. [ 964.744855][T28534] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 964.760442][T28539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6103'. [ 964.776135][T28534] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 964.871478][T28542] veth3: entered promiscuous mode [ 965.008871][ T5849] Bluetooth: hci4: command tx timeout [ 965.062851][T28339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.085371][T28339] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.110388][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.117571][ T6629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.167897][T25499] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.175122][T25499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.186243][T28559] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6109'. [ 965.240614][T28559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6109'. [ 965.285081][T28559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6109'. [ 965.317047][T28559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6109'. [ 965.349290][T28559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6109'. [ 965.369254][T28559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6109'. [ 965.408040][ C0] syz_tun: tun_net_xmit 26 [ 965.702822][T28339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 965.865944][T28571] C speed is unknown, defaulting to 1000 [ 966.193162][T28339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.401411][T28339] veth0_vlan: entered promiscuous mode [ 966.418156][ C0] syz_tun: tun_net_xmit 26 [ 966.580019][T28339] veth1_vlan: entered promiscuous mode [ 966.617917][T28623] net_ratelimit: 5 callbacks suppressed [ 966.617935][T28623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.667726][T28623] syzkaller1: entered promiscuous mode [ 966.674739][T28623] syzkaller1: entered allmulticast mode [ 966.716466][T28339] veth0_macvtap: entered promiscuous mode [ 966.772838][T28339] veth1_macvtap: entered promiscuous mode [ 966.877437][T28632] netlink: 'syz.2.6130': attribute type 18 has an invalid length. [ 966.912429][T28339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.942365][T28339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.969301][ T6629] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.989288][ T6629] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.018520][ T6629] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.027281][ T6629] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.089938][ T5849] Bluetooth: hci4: command tx timeout [ 967.116611][T28645] C speed is unknown, defaulting to 1000 [ 967.217749][T28647] 8021q: adding VLAN 0 to HW filter on device bond6 [ 967.279492][T28654] netlink: 'syz.4.6136': attribute type 21 has an invalid length. [ 967.326740][T28654] netlink: 'syz.4.6136': attribute type 1 has an invalid length. [ 967.386218][ T6629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.412869][ T6629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.488717][ C0] syz_tun: tun_net_xmit 26 [ 967.590472][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.648388][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.985409][T28677] sctp: [Deprecated]: syz.4.6142 (pid 28677) Use of int in max_burst socket option. [ 967.985409][T28677] Use struct sctp_assoc_value instead [ 968.056981][T28679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 968.508085][ C0] syz_tun: tun_net_xmit 26 [ 968.584009][T17046] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 968.607555][T17046] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 968.618176][T17046] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 968.626632][T17046] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 968.636944][T17046] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 968.682194][T28692] C speed is unknown, defaulting to 1000 [ 968.981492][T28692] chnl_net:caif_netlink_parms(): no params data found [ 969.178631][T28720] __nla_validate_parse: 77 callbacks suppressed [ 969.178650][T28720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6153'. [ 969.202729][T28692] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.210237][T28692] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.218487][T28692] bridge_slave_0: entered allmulticast mode [ 969.225614][T28692] bridge_slave_0: entered promiscuous mode [ 969.241494][T28692] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.251083][T28692] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.259641][T28692] bridge_slave_1: entered allmulticast mode [ 969.267754][T28692] bridge_slave_1: entered promiscuous mode [ 969.302012][T28692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.314880][T28692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.326681][T28723] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:0 [ 969.367913][T28692] team0: Port device team_slave_0 added [ 969.383668][T28692] team0: Port device team_slave_1 added [ 969.423296][T28723] C speed is unknown, defaulting to 1000 [ 969.451730][T28692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.461816][T28692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.493931][T28692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.513484][T28692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.521253][T28692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.548233][ C0] syz_tun: tun_net_xmit 26 [ 969.548622][T28692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.659543][T25499] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 969.680064][T28692] hsr_slave_0: entered promiscuous mode [ 969.686652][T28692] hsr_slave_1: entered promiscuous mode [ 969.693130][T28692] debugfs: 'hsr0' already exists in 'hsr' [ 969.699061][T28692] Cannot create hsr debugfs directory [ 969.710447][T28732] veth1_to_bond: entered allmulticast mode [ 969.767443][T25499] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 969.820999][T28736] macvlan1: entered promiscuous mode [ 969.836825][T28736] ipvlan0: entered promiscuous mode [ 969.844310][T28736] ipvlan0: left promiscuous mode [ 969.845092][T28738] netlink: 'syz.0.6157': attribute type 5 has an invalid length. [ 969.857327][T28736] macvlan1: left promiscuous mode [ 969.910159][T25499] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 969.930641][T28731] veth1_to_bond: left allmulticast mode [ 970.007573][T25499] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 970.059219][T28741] netlink: 'syz.4.6158': attribute type 1 has an invalid length. [ 970.083071][T28741] netlink: 'syz.4.6158': attribute type 2 has an invalid length. [ 970.095765][T28741] netlink: 'syz.4.6158': attribute type 1 has an invalid length. [ 970.103998][T28741] netlink: 'syz.4.6158': attribute type 1 has an invalid length. [ 970.308381][T28751] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6162'. [ 970.334311][T25499] bond7: left allmulticast mode [ 970.348291][T25499] bond7: left promiscuous mode [ 970.358233][T25499] bridge0: port 3(bond7) entered disabled state [ 970.491794][T25499] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 970.628105][ C0] syz_tun: tun_net_xmit 26 [ 970.680356][T25499] bond3 (unregistering): (slave gretap1): Releasing active interface [ 970.688845][T17046] Bluetooth: hci0: command tx timeout [ 970.760914][T25499] bond8 (unregistering): (slave geneve3): Releasing active interface [ 971.314452][T25499] bond0 (unregistering): Released all slaves [ 971.450634][T25499] bond1 (unregistering): Released all slaves [ 971.580463][T25499] bond2 (unregistering): Released all slaves [ 971.593071][T25499] bond3 (unregistering): Released all slaves [ 971.641543][ C0] syz_tun: tun_net_xmit 26 [ 971.721254][T25499] bond4 (unregistering): Released all slaves [ 971.734431][T25499] bond5 (unregistering): Released all slaves [ 971.859619][T25499] bond6 (unregistering): Released all slaves [ 971.981476][T25499] bond7 (unregistering): Released all slaves [ 972.105287][T25499] bond8 (unregistering): Released all slaves [ 972.299870][T25499] tipc: Left network mode [ 972.335745][T25499] IPVS: stopping backup sync thread 25548 ... [ 972.454151][T28791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6173'. [ 972.510520][T28794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6173'. [ 972.531489][T28791] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6173'. [ 972.648077][ C0] syz_tun: tun_net_xmit 26 [ 972.770843][T17046] Bluetooth: hci0: command tx timeout [ 973.056636][T28815] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 973.182208][T28823] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 973.262094][T25499] hsr_slave_0: left promiscuous mode [ 973.281750][T25499] hsr_slave_1: left promiscuous mode [ 973.321022][T28826] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6179'. [ 973.398898][T28830] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 973.742889][ C0] syz_tun: tun_net_xmit 26 [ 974.631301][T28692] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 974.718603][T28692] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 974.726046][T28855] netlink: 'syz.4.6188': attribute type 1 has an invalid length. [ 974.748044][ C0] syz_tun: tun_net_xmit 26 [ 974.773181][T28859] FAULT_INJECTION: forcing a failure. [ 974.773181][T28859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.788380][T28859] CPU: 0 UID: 0 PID: 28859 Comm: syz.2.6187 Not tainted syzkaller #0 PREEMPT(full) [ 974.788405][T28859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 974.788417][T28859] Call Trace: [ 974.788425][T28859] [ 974.788433][T28859] dump_stack_lvl+0x189/0x250 [ 974.788461][T28859] ? __pfx____ratelimit+0x10/0x10 [ 974.788481][T28859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 974.788503][T28859] ? __pfx__printk+0x10/0x10 [ 974.788533][T28859] should_fail_ex+0x414/0x560 [ 974.788568][T28859] _copy_to_user+0x31/0xb0 [ 974.788593][T28859] simple_read_from_buffer+0xe1/0x170 [ 974.788623][T28859] proc_fail_nth_read+0x1b3/0x220 [ 974.788649][T28859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 974.788674][T28859] ? rw_verify_area+0x2a6/0x4d0 [ 974.788695][T28859] ? __lock_acquire+0xab9/0xd20 [ 974.788711][T28859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 974.788734][T28859] vfs_read+0x200/0xa30 [ 974.788755][T28859] ? fdget_pos+0x247/0x320 [ 974.788785][T28859] ? __pfx___mutex_lock+0x10/0x10 [ 974.788806][T28859] ? __pfx_vfs_read+0x10/0x10 [ 974.788830][T28859] ? __fget_files+0x2a/0x420 [ 974.788851][T28859] ? __fget_files+0x3a0/0x420 [ 974.788865][T28859] ? __fget_files+0x2a/0x420 [ 974.788888][T28859] ksys_read+0x145/0x250 [ 974.788913][T28859] ? __pfx_ksys_read+0x10/0x10 [ 974.788938][T28859] ? do_syscall_64+0xbe/0xfa0 [ 974.788963][T28859] do_syscall_64+0xfa/0xfa0 [ 974.788981][T28859] ? lockdep_hardirqs_on+0x9c/0x150 [ 974.789001][T28859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.789018][T28859] ? clear_bhb_loop+0x60/0xb0 [ 974.789041][T28859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.789057][T28859] RIP: 0033:0x7f223498e15c [ 974.789075][T28859] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 974.789090][T28859] RSP: 002b:00007f2235782030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 974.789111][T28859] RAX: ffffffffffffffda RBX: 00007f2234be5fa0 RCX: 00007f223498e15c [ 974.789125][T28859] RDX: 000000000000000f RSI: 00007f22357820a0 RDI: 0000000000000004 [ 974.789136][T28859] RBP: 00007f2235782090 R08: 0000000000000000 R09: 0000000000000000 [ 974.789148][T28859] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 974.789159][T28859] R13: 00007f2234be6038 R14: 00007f2234be5fa0 R15: 00007ffcd4bfdc58 [ 974.789192][T28859] [ 975.038292][T28692] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 975.057860][T17046] Bluetooth: hci0: command tx timeout [ 975.058539][T28692] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 975.097062][T28864] netlink: 'syz.2.6190': attribute type 1 has an invalid length. [ 975.111326][T28855] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 975.122080][T28855] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 975.139346][T28855] bond1: (slave xfrm1): making interface the new active one [ 975.147743][T28855] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 975.158873][T28866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6190'. [ 975.192950][T28864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 975.216671][T25499] IPVS: stop unused estimator thread 0... [ 975.223937][T28865] C speed is unknown, defaulting to 1000 [ 975.240672][T28864] bond2: (slave gretap1): making interface the new active one [ 975.249676][T28864] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 975.384500][T28879] netlink: 'syz.2.6193': attribute type 8 has an invalid length. [ 975.406446][T28879] netlink: 'syz.2.6193': attribute type 21 has an invalid length. [ 975.416824][T28879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6193'. [ 975.514026][T28887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6193'. [ 975.541394][T28887] ip_vti0: entered promiscuous mode [ 975.606544][T28879] ip_vti0: left promiscuous mode [ 975.614420][T28879] syz_tun: left promiscuous mode [ 975.637726][T28879] geneve2: left promiscuous mode [ 975.655516][T28879] veth3: left promiscuous mode [ 975.691171][T28893] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.724810][T28893] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 975.734930][ C0] syz_tun: tun_net_xmit 26 [ 975.823135][T28893] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.843781][T28893] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 975.960492][T28893] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.971122][T28893] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 976.050704][T28692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.125800][T28692] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.161439][T28893] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.176214][T28893] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 976.312873][T28926] netlink: 'syz.2.6207': attribute type 1 has an invalid length. [ 976.336229][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.343443][ T6629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.384371][T28926] netlink: 'syz.2.6207': attribute type 1 has an invalid length. [ 976.399461][T28929] netlink: 'syz.2.6207': attribute type 1 has an invalid length. [ 976.414707][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.421979][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.435959][T28933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6207'. [ 976.469959][T28929] 8021q: adding VLAN 0 to HW filter on device bond3 [ 976.500305][ T6629] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 976.509114][ T6629] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 976.524752][ T6629] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 976.537073][ T6629] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 976.645005][ T1326] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 976.658234][ T1326] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 976.681811][T25498] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 976.695541][T25498] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 976.808048][ C0] syz_tun: tun_net_xmit 26 [ 976.960281][T28955] tipc: Enabling of bearer rejected, failed to enable media [ 977.020298][T28955] syzkaller0: entered promiscuous mode [ 977.040950][T28955] syzkaller0: entered allmulticast mode [ 977.088959][T17046] Bluetooth: hci0: command tx timeout [ 977.373847][T28970] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.437618][T28692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.461925][T28979] ip6_vti0 speed is unknown, defaulting to 1000 [ 977.515532][T28970] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.533914][T28979] ip6_vti0 speed is unknown, defaulting to 1000 [ 977.544259][T28979] ip6_vti0 speed is unknown, defaulting to 1000 [ 977.621672][T28970] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.643286][T28692] veth0_vlan: entered promiscuous mode [ 977.666274][T28692] veth1_vlan: entered promiscuous mode [ 977.782554][T28970] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.814083][T28979] infiniband syz2: set down [ 977.818850][T28979] infiniband syz2: added ip6_vti0 [ 977.833370][T22498] ip6_vti0 speed is unknown, defaulting to 1000 [ 977.846111][T28692] veth0_macvtap: entered promiscuous mode [ 977.870734][T28692] veth1_macvtap: entered promiscuous mode [ 977.901976][T28979] RDS/IB: syz2: added [ 977.906051][T28979] smc: adding ib device syz2 with port count 1 [ 977.912563][T28979] smc: ib device syz2 port 1 has no pnetid [ 977.918803][T22498] ip6_vti0 speed is unknown, defaulting to 1000 [ 977.927835][T28979] ip6_vti0 speed is unknown, defaulting to 1000 [ 977.948093][ C0] syz_tun: tun_net_xmit 26 [ 977.966068][T28692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.031408][T28692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.099922][T25499] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.156752][T25499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.247849][T25499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.258712][T25499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.334108][T25499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.349354][T25499] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.357592][T25499] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.367854][T28979] ip6_vti0 speed is unknown, defaulting to 1000 [ 978.377441][T28999] C speed is unknown, defaulting to 1000 [ 978.419291][T25499] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.495318][ T6629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.514500][ T6629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.575783][ T6635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.584225][ T6635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.748970][T28979] ip6_vti0 speed is unknown, defaulting to 1000 [ 979.009925][ C0] syz_tun: tun_net_xmit 26 [ 979.047777][T29019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6234'. [ 979.107829][T28999] ip6_vti0 speed is unknown, defaulting to 1000 [ 979.411368][T28979] ip6_vti0 speed is unknown, defaulting to 1000 [ 979.442362][T29027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 979.907481][T29047] macvlan2: entered promiscuous mode [ 979.937056][T29053] macvlan3: entered promiscuous mode [ 979.988224][ C0] syz_tun: tun_net_xmit 26 [ 980.170862][T29060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6244'. [ 980.182334][T28979] ip6_vti0 speed is unknown, defaulting to 1000 [ 980.360399][T29074] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6249'. [ 980.521521][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6250'. [ 980.750053][T28979] ip6_vti0 speed is unknown, defaulting to 1000 [ 980.832988][T29087] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6252'. [ 980.844824][T29087] netlink: 'syz.2.6252': attribute type 1 has an invalid length. [ 981.048043][ C0] syz_tun: tun_net_xmit 26 [ 981.194600][T28979] ip6_vti0 speed is unknown, defaulting to 1000 [ 981.495302][T29060] C speed is unknown, defaulting to 1000 [ 981.931576][T29101] netlink: 'syz.2.6256': attribute type 13 has an invalid length. [ 981.940612][T29101] netlink: 'syz.2.6256': attribute type 17 has an invalid length. [ 982.158058][ C0] syz_tun: tun_net_xmit 26 [ 982.511018][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 982.520977][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 982.533115][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 982.541512][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 982.549310][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 982.752061][T29115] netlink: 1328 bytes leftover after parsing attributes in process `syz.2.6259'. [ 983.035651][T29117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6260'. [ 983.217046][T29111] C speed is unknown, defaulting to 1000 [ 983.232766][T29111] ip6_vti0 speed is unknown, defaulting to 1000 [ 983.528964][T29130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6265'. [ 983.576213][T29134] tc_dump_action: action bad kind [ 983.675200][T29130] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 983.761571][T29145] netlink: 'syz.1.6268': attribute type 10 has an invalid length. [ 983.769256][T29144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6270'. [ 983.825267][T29145] team0: Port device dummy0 added [ 983.929698][T29155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6271'. [ 983.938792][T29155] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6271'. [ 983.939077][T29145] netlink: 'syz.1.6268': attribute type 10 has an invalid length. [ 984.174274][T29111] chnl_net:caif_netlink_parms(): no params data found [ 984.248064][T29111] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.255255][T29111] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.263114][T29111] bridge_slave_0: entered allmulticast mode [ 984.271784][T29111] bridge_slave_0: entered promiscuous mode [ 984.281363][T29111] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.289517][T29111] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.296918][T29111] bridge_slave_1: entered allmulticast mode [ 984.304156][T29111] bridge_slave_1: entered promiscuous mode [ 984.334957][T29111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.347262][T29111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.382418][T29111] team0: Port device team_slave_0 added [ 984.391457][T29111] team0: Port device team_slave_1 added [ 984.421395][T29111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.429426][T29111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.456404][T29111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.469556][T29111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.477863][T29111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.503867][T29111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.569892][T29111] hsr_slave_0: entered promiscuous mode [ 984.577032][T29111] hsr_slave_1: entered promiscuous mode [ 984.585358][T29111] debugfs: 'hsr0' already exists in 'hsr' [ 984.591939][T29111] Cannot create hsr debugfs directory [ 984.608517][ T5849] Bluetooth: hci3: command tx timeout [ 984.648916][T29172] syzkaller0: entered promiscuous mode [ 984.654616][T29172] syzkaller0: entered allmulticast mode [ 984.849050][T29176] syzkaller0: entered promiscuous mode [ 984.854567][T29176] syzkaller0: entered allmulticast mode [ 984.883323][T29111] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 984.896124][T29111] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 984.922821][T29176] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 984.931238][T29176] CPU: 1 UID: 0 PID: 29176 Comm: syz.4.6278 Not tainted syzkaller #0 PREEMPT(full) [ 984.931263][T29176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 984.931276][T29176] Call Trace: [ 984.931283][T29176] [ 984.931291][T29176] dump_stack_lvl+0x189/0x250 [ 984.931325][T29176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 984.931349][T29176] ? __pfx__printk+0x10/0x10 [ 984.931374][T29176] ? kernfs_path_from_node+0x2f/0x290 [ 984.931396][T29176] ? kernfs_path_from_node+0x250/0x290 [ 984.931416][T29176] ? kernfs_path_from_node+0x2f/0x290 [ 984.931440][T29176] sysfs_warn_dup+0x8e/0xa0 [ 984.931461][T29176] sysfs_do_create_link_sd+0xc0/0x110 [ 984.931484][T29176] device_add_class_symlinks+0x1cf/0x240 [ 984.931510][T29176] device_add+0x475/0xb50 [ 984.931536][T29176] wiphy_register+0x1d2e/0x2d20 [ 984.931577][T29176] ? __pfx_wiphy_register+0x10/0x10 [ 984.931597][T29176] ? __pfx_netdev_run_todo+0x10/0x10 [ 984.931620][T29176] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 984.931654][T29176] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 984.931682][T29176] ieee80211_register_hw+0x3473/0x40d0 [ 984.931723][T29176] ? ieee80211_register_hw+0x1451/0x40d0 [ 984.931766][T29176] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 984.931790][T29176] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 984.931816][T29176] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 984.931836][T29176] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 984.931865][T29176] ? __hrtimer_setup+0x187/0x210 [ 984.931884][T29176] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 984.931909][T29176] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 984.931961][T29176] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 984.931978][T29176] ? trace_kmalloc+0x1f/0xd0 [ 984.931999][T29176] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 984.932025][T29176] ? kstrndup+0xbf/0x160 [ 984.932055][T29176] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 984.932081][T29176] ? __pfx___nla_validate_parse+0x10/0x10 [ 984.932117][T29176] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 984.932144][T29176] ? rcu_is_watching+0x15/0xb0 [ 984.932168][T29176] ? __nla_parse+0x40/0x60 [ 984.932192][T29176] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 984.932220][T29176] genl_family_rcv_msg_doit+0x215/0x300 [ 984.932246][T29176] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 984.932278][T29176] ? bpf_lsm_capable+0x9/0x20 [ 984.932299][T29176] ? security_capable+0x7e/0x2e0 [ 984.932335][T29176] genl_rcv_msg+0x60e/0x790 [ 984.932359][T29176] ? __pfx_genl_rcv_msg+0x10/0x10 [ 984.932376][T29176] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 984.932412][T29176] netlink_rcv_skb+0x208/0x470 [ 984.932431][T29176] ? __lock_acquire+0xab9/0xd20 [ 984.932451][T29176] ? __pfx_genl_rcv_msg+0x10/0x10 [ 984.932471][T29176] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 984.932513][T29176] ? down_read+0x1ad/0x2e0 [ 984.932538][T29176] genl_rcv+0x28/0x40 [ 984.932561][T29176] netlink_unicast+0x82f/0x9e0 [ 984.932590][T29176] ? __pfx_netlink_unicast+0x10/0x10 [ 984.932612][T29176] ? netlink_sendmsg+0x642/0xb30 [ 984.932632][T29176] ? skb_put+0x11b/0x210 [ 984.932657][T29176] netlink_sendmsg+0x805/0xb30 [ 984.932689][T29176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.932715][T29176] ? aa_sock_msg_perm+0xf1/0x1d0 [ 984.932741][T29176] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 984.932767][T29176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.932792][T29176] __sock_sendmsg+0x21c/0x270 [ 984.932822][T29176] ____sys_sendmsg+0x505/0x830 [ 984.932851][T29176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 984.932883][T29176] ? import_iovec+0x74/0xa0 [ 984.932910][T29176] ___sys_sendmsg+0x21f/0x2a0 [ 984.932935][T29176] ? __pfx____sys_sendmsg+0x10/0x10 [ 984.932998][T29176] ? __fget_files+0x2a/0x420 [ 984.933015][T29176] ? __fget_files+0x3a0/0x420 [ 984.933044][T29176] __x64_sys_sendmsg+0x19b/0x260 [ 984.933069][T29176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 984.933110][T29176] ? do_syscall_64+0xbe/0xfa0 [ 984.933135][T29176] do_syscall_64+0xfa/0xfa0 [ 984.933154][T29176] ? lockdep_hardirqs_on+0x9c/0x150 [ 984.933175][T29176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.933193][T29176] ? clear_bhb_loop+0x60/0xb0 [ 984.933214][T29176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.933232][T29176] RIP: 0033:0x7fdacef8f749 [ 984.933250][T29176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.933265][T29176] RSP: 002b:00007fdacd1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 984.933285][T29176] RAX: ffffffffffffffda RBX: 00007fdacf1e5fa0 RCX: 00007fdacef8f749 [ 984.933299][T29176] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000d [ 984.933312][T29176] RBP: 00007fdacf013f91 R08: 0000000000000000 R09: 0000000000000000 [ 984.933324][T29176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.933336][T29176] R13: 00007fdacf1e6038 R14: 00007fdacf1e5fa0 R15: 00007ffdfc06b698 [ 984.933371][T29176] [ 985.527030][T29111] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 985.548327][T29111] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 985.584229][T29187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6281'. [ 985.714712][T29187] C speed is unknown, defaulting to 1000 [ 985.735312][T29111] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 985.748865][T29111] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 985.789952][T29197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6283'. [ 985.799279][T29197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6283'. [ 985.809384][T29197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6283'. [ 985.818637][T29197] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6283'. [ 985.827803][T29197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6283'. [ 985.837761][T29187] ip6_vti0 speed is unknown, defaulting to 1000 [ 985.842162][T29111] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 985.855749][T29111] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 986.030200][T29203] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 986.276564][T29111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 986.372526][T29212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6288'. [ 986.567050][T29111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 986.602863][T29111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 986.689729][ T5849] Bluetooth: hci3: command tx timeout [ 986.699146][T29226] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6291'. [ 986.720001][T29226] ip6gretap0: entered promiscuous mode [ 986.736862][T29111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 986.772651][T29226] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6291'. [ 986.782201][T29224] C speed is unknown, defaulting to 1000 [ 986.890577][T29224] ip6_vti0 speed is unknown, defaulting to 1000 [ 987.046612][T29111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.172498][T29238] veth5: entered promiscuous mode [ 987.233528][T29111] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.268287][T25500] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.275449][T25500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.308946][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.316200][ T6635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.540689][T29249] C speed is unknown, defaulting to 1000 [ 987.599998][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6298'. [ 987.664937][T29259] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 987.674075][T29249] ip6_vti0 speed is unknown, defaulting to 1000 [ 987.998734][T29111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.076651][T29111] veth0_vlan: entered promiscuous mode [ 988.117833][T29111] veth1_vlan: entered promiscuous mode [ 988.193978][T29111] veth0_macvtap: entered promiscuous mode [ 988.235895][T29111] veth1_macvtap: entered promiscuous mode [ 988.311115][T29111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.343573][T29111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 988.516022][ T6629] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.525458][ T6629] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.714450][ T6629] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.768866][ T5849] Bluetooth: hci3: command tx timeout [ 988.807013][ T6629] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.907090][T29278] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20016 [ 989.148566][ T6629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.156422][ T6629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.254434][T25499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.266291][T29280] netlink: 'syz.2.6305': attribute type 3 has an invalid length. [ 989.292390][T25499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.012188][T29323] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 990.056464][T29319] C speed is unknown, defaulting to 1000 [ 990.076604][T29319] ip6_vti0 speed is unknown, defaulting to 1000 [ 990.344369][T29328] siw: device registration error -23 [ 990.729533][T29337] C speed is unknown, defaulting to 1000 [ 990.869707][ T5849] Bluetooth: hci3: command tx timeout [ 991.043651][T29337] ip6_vti0 speed is unknown, defaulting to 1000 [ 991.048052][T29344] netlink: 'syz.1.6319': attribute type 3 has an invalid length. [ 991.067057][T29344] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 991.092397][T29344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 991.517723][T29372] __nla_validate_parse: 4 callbacks suppressed [ 991.517742][T29372] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6326'. [ 991.839775][T29364] netlink: 'syz.1.6323': attribute type 30 has an invalid length. [ 991.925391][ T30] audit: type=1800 audit(1764516808.360:13): pid=29370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6323" name="memory.events" dev="tmpfs" ino=175 res=0 errno=0 [ 992.008011][T29364] bond1: option arp_missed_max: invalid value (0) [ 992.020179][T29364] bond1: option arp_missed_max: allowed values 1 - 255 [ 992.034215][T29364] bond1 (unregistering): Released all slaves [ 992.713471][T29408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6335'. [ 992.756311][T29408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6335'. [ 992.799313][T29411] FAULT_INJECTION: forcing a failure. [ 992.799313][T29411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.846266][T29411] CPU: 0 UID: 0 PID: 29411 Comm: syz.1.6337 Not tainted syzkaller #0 PREEMPT(full) [ 992.846291][T29411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 992.846303][T29411] Call Trace: [ 992.846311][T29411] [ 992.846319][T29411] dump_stack_lvl+0x189/0x250 [ 992.846347][T29411] ? __pfx____ratelimit+0x10/0x10 [ 992.846369][T29411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 992.846391][T29411] ? __pfx__printk+0x10/0x10 [ 992.846410][T29411] ? __might_fault+0xb0/0x130 [ 992.846445][T29411] should_fail_ex+0x414/0x560 [ 992.846476][T29411] _copy_from_user+0x2d/0xb0 [ 992.846499][T29411] ___sys_sendmsg+0x158/0x2a0 [ 992.846525][T29411] ? __pfx____sys_sendmsg+0x10/0x10 [ 992.846583][T29411] ? __fget_files+0x2a/0x420 [ 992.846600][T29411] ? __fget_files+0x3a0/0x420 [ 992.846629][T29411] __sys_sendmmsg+0x227/0x430 [ 992.846656][T29411] ? __pfx___sys_sendmmsg+0x10/0x10 [ 992.846688][T29411] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 992.846728][T29411] ? ksys_write+0x22a/0x250 [ 992.846754][T29411] ? __pfx_ksys_write+0x10/0x10 [ 992.846781][T29411] __x64_sys_sendmmsg+0xa0/0xc0 [ 992.846802][T29411] do_syscall_64+0xfa/0xfa0 [ 992.846821][T29411] ? lockdep_hardirqs_on+0x9c/0x150 [ 992.846838][T29411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.846856][T29411] ? clear_bhb_loop+0x60/0xb0 [ 992.846875][T29411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.846892][T29411] RIP: 0033:0x7fda14f8f749 [ 992.846909][T29411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 992.846924][T29411] RSP: 002b:00007fda15d51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 992.846945][T29411] RAX: ffffffffffffffda RBX: 00007fda151e5fa0 RCX: 00007fda14f8f749 [ 992.846958][T29411] RDX: 0000000000000001 RSI: 0000200000007380 RDI: 0000000000000004 [ 992.846971][T29411] RBP: 00007fda15d51090 R08: 0000000000000000 R09: 0000000000000000 [ 992.846989][T29411] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 992.847000][T29411] R13: 00007fda151e6038 R14: 00007fda151e5fa0 R15: 00007ffd22e6d028 [ 992.847033][T29411] [ 993.485088][T29433] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.493011][T29433] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.516900][T29434] netlink: 276 bytes leftover after parsing attributes in process `syz.1.6344'. [ 993.607794][T29433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.626101][T29433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.803252][T29434] IPv6: Can't replace route, no match found [ 993.924847][T29453] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.932552][T29453] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.962251][T25499] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.971280][T25499] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.989194][T29450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6348'. [ 994.003386][T25499] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.031497][T25499] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.112196][T29460] xt_hashlimit: invalid interval [ 994.255887][T29466] netlink: 'syz.0.6352': attribute type 8 has an invalid length. [ 994.326136][T29467] sctp: [Deprecated]: syz.3.6353 (pid 29467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 994.326136][T29467] Use struct sctp_sack_info instead [ 994.367228][T29476] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 994.589814][T29492] netlink: 'syz.4.6359': attribute type 4 has an invalid length. [ 994.606714][T29492] netlink: 'syz.4.6359': attribute type 4 has an invalid length. [ 994.639956][T29491] C speed is unknown, defaulting to 1000 [ 994.648164][T29495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6361'. [ 994.670843][T29491] ip6_vti0 speed is unknown, defaulting to 1000 [ 994.682871][T29496] C speed is unknown, defaulting to 1000 [ 994.787345][T29501] FAULT_INJECTION: forcing a failure. [ 994.787345][T29501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 994.802519][T29501] CPU: 1 UID: 0 PID: 29501 Comm: syz.1.6362 Not tainted syzkaller #0 PREEMPT(full) [ 994.802544][T29501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 994.802555][T29501] Call Trace: [ 994.802563][T29501] [ 994.802571][T29501] dump_stack_lvl+0x189/0x250 [ 994.802599][T29501] ? __pfx____ratelimit+0x10/0x10 [ 994.802620][T29501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 994.802642][T29501] ? __pfx__printk+0x10/0x10 [ 994.802661][T29501] ? __might_fault+0xb0/0x130 [ 994.802697][T29501] should_fail_ex+0x414/0x560 [ 994.802727][T29501] _copy_from_iter+0x404/0x1790 [ 994.802764][T29501] ? __pfx__copy_from_iter+0x10/0x10 [ 994.802787][T29501] ? __lock_acquire+0xab9/0xd20 [ 994.802810][T29501] ? skb_put+0x11b/0x210 [ 994.802835][T29501] l2cap_skbuff_fromiovec+0x9f/0x530 [ 994.802861][T29501] ? skb_put+0x11b/0x210 [ 994.802884][T29501] l2cap_chan_send+0x36a/0x2790 [ 994.802907][T29501] ? __lock_acquire+0xab9/0xd20 [ 994.802936][T29501] ? __pfx_l2cap_chan_send+0x10/0x10 [ 994.802951][T29501] ? __local_bh_enable_ip+0x12d/0x1c0 [ 994.802991][T29501] l2cap_sock_sendmsg+0x32e/0x4a0 [ 994.803017][T29501] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 994.803043][T29501] ? aa_sock_msg_perm+0xf1/0x1d0 [ 994.803074][T29501] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 994.803091][T29501] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 994.803114][T29501] __sock_sendmsg+0x21c/0x270 [ 994.803143][T29501] ____sys_sendmsg+0x52d/0x830 [ 994.803171][T29501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 994.803203][T29501] ? import_iovec+0x74/0xa0 [ 994.803228][T29501] ___sys_sendmsg+0x21f/0x2a0 [ 994.803252][T29501] ? __pfx____sys_sendmsg+0x10/0x10 [ 994.803320][T29501] ? __fget_files+0x2a/0x420 [ 994.803336][T29501] ? __fget_files+0x3a0/0x420 [ 994.803364][T29501] __sys_sendmmsg+0x227/0x430 [ 994.803392][T29501] ? __pfx___sys_sendmmsg+0x10/0x10 [ 994.803424][T29501] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 994.803465][T29501] ? ksys_write+0x22a/0x250 [ 994.803497][T29501] ? __pfx_ksys_write+0x10/0x10 [ 994.803525][T29501] __x64_sys_sendmmsg+0xa0/0xc0 [ 994.803549][T29501] do_syscall_64+0xfa/0xfa0 [ 994.803568][T29501] ? lockdep_hardirqs_on+0x9c/0x150 [ 994.803588][T29501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.803604][T29501] ? clear_bhb_loop+0x60/0xb0 [ 994.803625][T29501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.803642][T29501] RIP: 0033:0x7fda14f8f749 [ 994.803660][T29501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 994.803674][T29501] RSP: 002b:00007fda15d51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 994.803694][T29501] RAX: ffffffffffffffda RBX: 00007fda151e5fa0 RCX: 00007fda14f8f749 [ 994.803708][T29501] RDX: 0000000000000001 RSI: 0000200000007380 RDI: 0000000000000004 [ 994.803719][T29501] RBP: 00007fda15d51090 R08: 0000000000000000 R09: 0000000000000000 [ 994.803730][T29501] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 994.803741][T29501] R13: 00007fda151e6038 R14: 00007fda151e5fa0 R15: 00007ffd22e6d028 [ 994.803774][T29501] [ 995.541458][T29523] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6368'. [ 995.597470][T29496] ip6_vti0 speed is unknown, defaulting to 1000 [ 995.673046][T29530] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 995.746597][T29537] netlink: 'syz.2.6374': attribute type 2 has an invalid length. [ 995.817391][T29538] netlink: 'syz.2.6374': attribute type 2 has an invalid length. [ 995.818374][T29537] !: entered promiscuous mode [ 995.872282][T29538] !: left promiscuous mode [ 996.498565][T29545] dvmrp0: entered allmulticast mode [ 997.123994][T29577] Bluetooth: MGMT ver 1.23 [ 997.165661][T29576] tipc: Failed to remove unknown binding: 66,1,1/0:3984548251/3984548253 [ 997.166410][T29580] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6386'. [ 997.187210][T29581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.196185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.209141][T29576] tipc: Failed to remove unknown binding: 66,1,1/0:3984548251/3984548253 [ 997.228133][T29576] tipc: Failed to remove unknown binding: 66,1,1/0:3984548251/3984548253 [ 997.432106][T29586] C speed is unknown, defaulting to 1000 [ 997.464606][T29592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6391'. [ 997.476273][T29586] ip6_vti0 speed is unknown, defaulting to 1000 [ 997.533151][T29597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6393'. [ 997.684138][T29603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6391'. [ 997.966375][T29589] netlink: 'syz.1.6388': attribute type 10 has an invalid length. [ 997.985883][T29589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.001632][T29589] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 998.266648][T29617] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6397'. [ 998.280584][T29619] netlink: 'syz.0.6396': attribute type 6 has an invalid length. [ 998.355882][T29622] netlink: 'syz.0.6396': attribute type 6 has an invalid length. [ 998.369646][T29612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6395'. [ 998.500206][T29612] bridge_slave_1: left allmulticast mode [ 998.507413][T29612] bridge_slave_1: left promiscuous mode [ 998.513770][T29612] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.524444][T29612] bridge_slave_0: left allmulticast mode [ 998.530246][T29612] bridge_slave_0: left promiscuous mode [ 998.536184][T29612] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.782433][T25500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.790476][T25500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.171111][ T5849] Bluetooth: hci0: command tx timeout [ 999.380561][T29652] netlink: 'syz.2.6405': attribute type 21 has an invalid length. [ 999.398185][T29652] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6405'. [ 999.662341][T29643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6402'. [ 1000.127484][T29670] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6410'. [ 1000.171445][T29670] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6410'. [ 1000.677037][T29665] C speed is unknown, defaulting to 1000 [ 1000.717448][T29665] ip6_vti0 speed is unknown, defaulting to 1000 [ 1000.932159][T25500] wlan1: Trigger new scan to find an IBSS to join [ 1001.457398][T29713] bridge0: port 3(vlan2) entered blocking state [ 1001.465127][T29713] bridge0: port 3(vlan2) entered disabled state [ 1001.472377][T29713] vlan2: entered allmulticast mode [ 1001.479722][T29713] bridge0: entered allmulticast mode [ 1001.489729][T29713] vlan2: left allmulticast mode [ 1001.494643][T29713] bridge0: left allmulticast mode [ 1002.346601][T29736] __nla_validate_parse: 6 callbacks suppressed [ 1002.346622][T29736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6434'. [ 1002.594494][T29743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1002.602898][T29743] bridge0: port 3(bond1) entered blocking state [ 1002.609529][T29743] bridge0: port 3(bond1) entered disabled state [ 1002.617162][T29743] bond1: entered allmulticast mode [ 1002.625056][T29743] bond1: entered promiscuous mode [ 1002.966814][T29758] C speed is unknown, defaulting to 1000 [ 1002.992532][T29758] ip6_vti0 speed is unknown, defaulting to 1000 [ 1003.265648][T29766] netlink: 'syz.4.6442': attribute type 1 has an invalid length. [ 1003.270109][T29768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6444'. [ 1003.292839][T29768] : entered promiscuous mode [ 1003.351962][T29768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6444'. [ 1003.450239][T29768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6444'. [ 1003.477694][T29771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1003.486112][T29773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6444'. [ 1003.500552][T29771] bond2: (slave bond3): Enslaving as a backup interface with a down link [ 1003.573447][T29777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6444'. [ 1003.641746][T29776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6445'. [ 1003.753638][T29787] netlink: 'syz.4.6447': attribute type 4 has an invalid length. [ 1003.966799][T29798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6448'. [ 1003.977803][T25498] wlan1: Trigger new scan to find an IBSS to join [ 1004.066518][T29790] C speed is unknown, defaulting to 1000 [ 1004.125512][T29790] ip6_vti0 speed is unknown, defaulting to 1000 [ 1004.354258][T29800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6451'. [ 1004.398927][T29800] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6451'. [ 1004.756251][T29820] netlink: 'syz.2.6457': attribute type 6 has an invalid length. [ 1004.764394][T29820] netlink: 'syz.2.6457': attribute type 5 has an invalid length. [ 1004.802893][T29816] C speed is unknown, defaulting to 1000 [ 1004.893830][T29816] ip6_vti0 speed is unknown, defaulting to 1000 [ 1004.922544][T29824] syzkaller0: entered promiscuous mode [ 1004.941331][T29824] syzkaller0: entered allmulticast mode [ 1004.986500][T29827] C speed is unknown, defaulting to 1000 [ 1005.268492][T29838] netlink: 'syz.4.6463': attribute type 1 has an invalid length. [ 1005.289399][T29836] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1005.313099][T29827] ip6_vti0 speed is unknown, defaulting to 1000 [ 1005.346971][T29838] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1005.400557][T29843] bond5: (slave ip6gretap2): making interface the new active one [ 1005.409970][T29843] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1005.470153][T29838] veth3: entered promiscuous mode [ 1005.480286][T29838] bond5: (slave veth3): Enslaving as an active interface with a down link [ 1005.527449][T29838] erspan0: entered allmulticast mode [ 1005.533840][T29845] netlink: 'syz.0.6464': attribute type 4 has an invalid length. [ 1005.544357][T29838] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1005.778656][T29852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.483286][T29872] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1006.572725][T29880] netlink: 'syz.1.6475': attribute type 4 has an invalid length. [ 1006.846823][T29898] syzkaller1: entered promiscuous mode [ 1006.854511][T29898] syzkaller1: entered allmulticast mode [ 1006.875043][T29896] ip6tnl1: entered allmulticast mode [ 1006.930415][T25500] wlan1: Trigger new scan to find an IBSS to join [ 1007.008647][T25500] wlan1: Trigger new scan to find an IBSS to join [ 1007.085553][T29918] netlink: 'syz.0.6487': attribute type 10 has an invalid length. [ 1007.294125][T29922] bond7: entered promiscuous mode [ 1007.303834][T29922] bond7: entered allmulticast mode [ 1007.780902][T29953] netlink: 'syz.4.6494': attribute type 1 has an invalid length. [ 1007.833974][T29953] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1007.880319][T25500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.253601][T29974] netlink: 'syz.2.6498': attribute type 4 has an invalid length. [ 1008.459873][T29953] veth5: entered promiscuous mode [ 1008.470066][T29953] bond8: (slave veth5): Enslaving as an active interface with a down link [ 1008.657400][T29954] veth7: entered promiscuous mode [ 1008.667801][T29954] bond8: (slave veth7): Enslaving as an active interface with a down link [ 1008.696670][T29952] bond8: (slave erspan0): making interface the new active one [ 1008.709909][T29952] erspan0: entered promiscuous mode [ 1008.715569][T29952] bond8: (slave erspan0): Enslaving as an active interface with an up link [ 1008.851155][T29988] __nla_validate_parse: 12 callbacks suppressed [ 1008.851173][T29988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6502'. [ 1008.872435][T29985] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6501'. [ 1008.894067][T29982] C speed is unknown, defaulting to 1000 [ 1008.904694][T29991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6503'. [ 1008.936818][T29981] C speed is unknown, defaulting to 1000 [ 1008.977576][T29991] netlink: 'syz.2.6503': attribute type 1 has an invalid length. [ 1008.979890][T29982] ip6_vti0 speed is unknown, defaulting to 1000 [ 1008.989981][T29991] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6503'. [ 1009.307159][T30006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6510'. [ 1009.335672][T30004] syzkaller0: entered promiscuous mode [ 1009.341325][T30004] syzkaller0: entered allmulticast mode [ 1009.365321][T30009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6510'. [ 1009.456105][T30016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.466528][T30012] tipc: Enabled bearer , priority 0 [ 1009.515368][T30011] tipc: Resetting bearer [ 1009.533573][T30007] tipc: Disabling bearer [ 1009.724999][T29981] ip6_vti0 speed is unknown, defaulting to 1000 [ 1009.734621][T30026] netlink: 'syz.2.6513': attribute type 4 has an invalid length. [ 1010.028556][T30033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6515'. [ 1010.100577][T30037] netlink: 'syz.0.6517': attribute type 1 has an invalid length. [ 1010.188632][T30037] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1010.315572][T30041] bond5: (slave geneve2): making interface the new active one [ 1010.354128][T30041] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1010.402879][T30043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6520'. [ 1010.551990][T25499] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1010.605111][T25499] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1010.640245][T25499] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1010.748535][ T6629] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1011.009694][T25499] wlan1: Trigger new scan to find an IBSS to join [ 1011.153427][T30064] netlink: 'syz.2.6525': attribute type 4 has an invalid length. [ 1011.296524][T30073] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6527'. [ 1011.305050][T30069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6529'. [ 1011.338982][T30072] syzkaller0: entered promiscuous mode [ 1011.345218][T30072] syzkaller0: entered allmulticast mode [ 1011.532832][T30082] netlink: 'syz.2.6532': attribute type 11 has an invalid length. [ 1011.563293][T30082] netlink: 'syz.2.6532': attribute type 1 has an invalid length. [ 1011.602031][T30069] veth1_macvtap: left promiscuous mode [ 1011.733786][T30085] erspan1: entered allmulticast mode [ 1011.928230][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.964350][T30092] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 1012.100239][T30104] tipc: Started in network mode [ 1012.105151][T30104] tipc: Node identity be076d3d60cd, cluster identity 4711 [ 1012.120618][T30104] tipc: Enabled bearer , priority 0 [ 1012.172356][T30104] syzkaller0: entered promiscuous mode [ 1012.185367][T30104] syzkaller0: entered allmulticast mode [ 1012.215197][T30104] tipc: Resetting bearer [ 1012.224180][T30103] tipc: Resetting bearer [ 1012.270190][T30103] tipc: Disabling bearer [ 1013.237725][T30164] tipc: Enabled bearer , priority 10 [ 1013.575622][T30173] netlink: 'syz.0.6561': attribute type 96 has an invalid length. [ 1013.725115][T30179] C speed is unknown, defaulting to 1000 [ 1013.743260][T30179] ip6_vti0 speed is unknown, defaulting to 1000 [ 1013.896400][T30189] __nla_validate_parse: 12 callbacks suppressed [ 1013.896419][T30189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6566'. [ 1014.053892][T30194] veth1_to_bond: entered allmulticast mode [ 1014.142186][T30194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6567'. [ 1014.244733][T30205] syzkaller0: entered promiscuous mode [ 1014.251448][T30205] syzkaller0: entered allmulticast mode [ 1014.306701][T30208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6572'. [ 1014.315963][T30208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6572'. [ 1014.425219][T30194] bond0: (slave bond_slave_1): Releasing backup interface [ 1014.480755][T30214] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6574'. [ 1014.492742][T30214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6574'. [ 1014.504008][T30194] veth1_to_bond (unregistering): left allmulticast mode [ 1014.547592][T19580] tipc: Node number set to 4224341105 [ 1014.561718][T30219] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6576'. [ 1014.804261][T30228] netlink: 'syz.4.6580': attribute type 10 has an invalid length. [ 1014.814008][T30228] veth0_vlan: left promiscuous mode [ 1014.822360][T30228] veth0_vlan: entered promiscuous mode [ 1014.835362][T30228] team0: Device veth0_vlan failed to register rx_handler [ 1014.894641][T30229] netlink: 'syz.4.6580': attribute type 10 has an invalid length. [ 1014.907746][T30229] veth0_vlan: left promiscuous mode [ 1014.925645][T30229] veth0_vlan: entered promiscuous mode [ 1014.933709][T30231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6581'. [ 1014.936729][T30229] team0: Device veth0_vlan failed to register rx_handler [ 1015.020694][T30235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6582'. [ 1015.042642][T30237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6583'. [ 1015.051919][T30237] netlink: 'syz.2.6583': attribute type 18 has an invalid length. [ 1015.084185][T30235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1015.097735][T30240] tipc: Started in network mode [ 1015.108675][T30240] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711 [ 1015.117721][T30240] tipc: Enabling of bearer rejected, failed to enable media [ 1015.156498][T30235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.180909][T30235] bond6: (slave bond0): Enslaving as an active interface with an up link [ 1015.530104][T30244] bond6 (unregistering): (slave bond0): Releasing backup interface [ 1015.567995][T30244] bond6 (unregistering): Released all slaves [ 1015.601431][T30254] netlink: 'syz.2.6587': attribute type 8 has an invalid length. [ 1015.656918][T30249] C speed is unknown, defaulting to 1000 [ 1015.741548][T30249] ip6_vti0 speed is unknown, defaulting to 1000 [ 1015.769347][T30258] C speed is unknown, defaulting to 1000 [ 1015.917676][T30281] netlink: 'syz.0.6591': attribute type 10 has an invalid length. [ 1015.928687][T30281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.959104][T30281] team0: Port device bond0 added [ 1016.172532][T30288] bridge0: port 1(veth3) entered blocking state [ 1016.188898][T30288] bridge0: port 1(veth3) entered disabled state [ 1016.211408][T30288] veth3: entered allmulticast mode [ 1016.234854][T30288] veth3: entered promiscuous mode [ 1016.260738][T30284] bridge0: port 2(veth0_to_bond) entered blocking state [ 1016.267840][T30284] bridge0: port 2(veth0_to_bond) entered disabled state [ 1016.292099][T30284] veth0_to_bond: entered allmulticast mode [ 1016.305905][T30284] veth0_to_bond: entered promiscuous mode [ 1016.357686][T30258] ip6_vti0 speed is unknown, defaulting to 1000 [ 1016.657187][T30309] batman_adv: batadv0: Adding interface: dummy0 [ 1016.686344][T30309] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.712733][T30309] batman_adv: batadv0: Interface activated: dummy0 [ 1016.733908][T30311] batadv0: mtu less than device minimum [ 1016.794066][T30311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.806470][T30311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.818413][T30311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.830332][T30311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.842221][T30311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.854103][T30311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.866004][T30311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.877909][T30311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.889834][T30311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.217051][T30327] erspan0: left allmulticast mode [ 1017.329473][T30327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.387428][T30327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.402506][T30312] C speed is unknown, defaulting to 1000 [ 1017.491746][T30312] ip6_vti0 speed is unknown, defaulting to 1000 [ 1017.936042][T30333] C speed is unknown, defaulting to 1000 [ 1017.945609][T30333] ip6_vti0 speed is unknown, defaulting to 1000 [ 1019.442291][T30389] __nla_validate_parse: 20 callbacks suppressed [ 1019.442311][T30389] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6616'. [ 1019.540665][T30389] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6616'. [ 1019.568151][T30389] netlink: 'syz.4.6616': attribute type 6 has an invalid length. [ 1019.604038][T30389] netlink: 'syz.4.6616': attribute type 5 has an invalid length. [ 1019.618908][T30395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6617'. [ 1019.628004][T30389] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6616'. [ 1019.652620][T30396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6618'. [ 1019.707179][T30397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6618'. [ 1019.738539][T30396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6618'. [ 1019.832907][T30396] gretap1: entered promiscuous mode [ 1019.945373][T30408] batadv0: entered allmulticast mode [ 1020.052789][T30415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6623'. [ 1020.062843][T30415] netlink: 'syz.0.6623': attribute type 1 has an invalid length. [ 1020.070761][T30415] netlink: 'syz.0.6623': attribute type 1 has an invalid length. [ 1020.168663][T25492] erspan0: left promiscuous mode [ 1020.458458][T30429] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 1020.480908][T30429] netlink: 'syz.0.6626': attribute type 4 has an invalid length. [ 1020.769616][T30438] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6628'. [ 1020.817588][T30424] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.6624'. [ 1020.839085][T30441] x_tables: duplicate underflow at hook 3 [ 1021.289926][T30453] C speed is unknown, defaulting to 1000 [ 1021.299346][T30463] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1021.354167][T30453] ip6_vti0 speed is unknown, defaulting to 1000 [ 1021.361735][T30459] tipc: Started in network mode [ 1021.367090][T30459] tipc: Node identity ceb727898175, cluster identity 4711 [ 1021.378658][T30459] tipc: Enabled bearer , priority 0 [ 1021.627118][T30459] syzkaller0: entered promiscuous mode [ 1021.652745][T30459] syzkaller0: entered allmulticast mode [ 1021.706867][T30459] tipc: Resetting bearer [ 1022.444451][T30488] netlink: 'syz.2.6641': attribute type 1 has an invalid length. [ 1022.464038][T30491] netlink: 'syz.2.6641': attribute type 1 has an invalid length. [ 1024.178105][T30473] : renamed from bond_slave_0 (while UP) [ 1024.196960][ T13] tipc: Resetting bearer [ 1024.223688][T30452] tipc: Resetting bearer [ 1024.254081][T30452] tipc: Disabling bearer [ 1024.272246][T20054] tipc: Node number set to 1338124169 [ 1024.566039][T30500] ip6gretap0: entered promiscuous mode [ 1024.572392][T30500] vlan2: entered promiscuous mode [ 1024.584040][T30506] netlink: 'syz.3.6647': attribute type 1 has an invalid length. [ 1024.598639][T30506] __nla_validate_parse: 4 callbacks suppressed [ 1024.598660][T30506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6647'. [ 1024.946296][T30517] netlink: 'syz.4.6650': attribute type 1 has an invalid length. [ 1024.971421][T30517] bond9: entered promiscuous mode [ 1024.977001][T30517] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1025.004240][T30520] ªªªªªª: renamed from wg2 (while UP) [ 1025.073754][T30524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6650'. [ 1025.084348][T30524] bond9: entered allmulticast mode [ 1025.360461][T30537] bond9: (slave bridge1): making interface the new active one [ 1025.445236][T30537] bridge1: entered promiscuous mode [ 1025.455532][T30537] bridge1: entered allmulticast mode [ 1025.529393][T30537] bond9: (slave bridge1): Enslaving as an active interface with an up link [ 1025.786749][T30561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6661'. [ 1025.954063][T30568] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1026.344953][T30593] netlink: 4240 bytes leftover after parsing attributes in process `syz.0.6667'. [ 1026.454621][T30579] batman_adv: batadv0: Interface deactivated: dummy0 [ 1026.599352][T30579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.620836][T30579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.782819][T30579] ip6tnl1: left allmulticast mode [ 1026.795602][T30596] netem: change failed [ 1026.819191][T25489] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.859788][T25489] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.922494][T25489] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.944820][T25489] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.976231][T30600] syzkaller1: entered promiscuous mode [ 1026.982360][T30600] syzkaller1: entered allmulticast mode [ 1027.035363][T30606] netlink: 'syz.1.6671': attribute type 1 has an invalid length. [ 1027.053915][T30606] netlink: 'syz.1.6671': attribute type 2 has an invalid length. [ 1027.193816][T30618] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6676'. [ 1027.257577][T30621] netlink: 'syz.0.6678': attribute type 2 has an invalid length. [ 1027.334485][T30627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6681'. [ 1027.385427][T30621] C speed is unknown, defaulting to 1000 [ 1027.423046][T30621] ip6_vti0 speed is unknown, defaulting to 1000 [ 1027.430351][T30631] netlink: 'syz.2.6680': attribute type 23 has an invalid length. [ 1027.452848][T30631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6680'. [ 1027.763611][T30638] C speed is unknown, defaulting to 1000 [ 1027.880675][T30654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6688'. [ 1028.013967][T30638] ip6_vti0 speed is unknown, defaulting to 1000 [ 1029.059245][T30685] netlink: 'syz.1.6696': attribute type 32 has an invalid length. [ 1029.067145][T30685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6696'. [ 1029.145123][T30685] bond1: Setting coupled_control to off (0) [ 1029.307386][T30690] C speed is unknown, defaulting to 1000 [ 1029.327577][T30690] ip6_vti0 speed is unknown, defaulting to 1000 [ 1029.344669][T30695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6700'. [ 1029.555653][T30697] netlink: 'syz.0.6698': attribute type 16 has an invalid length. [ 1029.579615][T30697] netlink: 'syz.0.6698': attribute type 17 has an invalid length. [ 1029.696952][T30697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.704225][T30697] bridge0: port 2(bridge_slave_1) entered listening state [ 1029.711690][T30697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.718938][T30697] bridge0: port 1(bridge_slave_0) entered listening state [ 1029.754369][T30697] net_ratelimit: 12 callbacks suppressed [ 1029.754381][T30697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1029.831932][T30725] __nla_validate_parse: 3 callbacks suppressed [ 1029.831951][T30725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6706'. [ 1029.886381][T30731] mac80211_hwsim hwsim66 wlan0: entered promiscuous mode [ 1029.897439][T30731] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1029.920626][T30732] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1029.937092][T30734] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6706'. [ 1030.069350][T30725] netlink: 'syz.4.6706': attribute type 10 has an invalid length. [ 1030.234879][T30738] tipc: Resetting bearer [ 1031.031172][T30789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6724'. [ 1031.073075][T30789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1031.132638][T30789] C speed is unknown, defaulting to 1000 [ 1031.142035][T30789] ip6_vti0 speed is unknown, defaulting to 1000 [ 1031.450309][T30798] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6729'. [ 1031.472745][T30799] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1031.873449][T30811] batadv1: entered promiscuous mode [ 1031.965917][T30818] C speed is unknown, defaulting to 1000 [ 1032.003438][T30818] ip6_vti0 speed is unknown, defaulting to 1000 [ 1032.072758][T30829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6732'. [ 1032.287697][T30843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6735'. [ 1032.330370][T30843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6735'. [ 1032.367847][T30834] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6735'. [ 1032.485147][T30849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6737'. [ 1032.944054][T30860] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6741'. [ 1033.424960][T30873] macsec1: entered allmulticast mode [ 1033.436697][T30873] macsec0: entered allmulticast mode [ 1033.534432][T30881] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1034.050040][T30898] netlink: 'syz.2.6755': attribute type 4 has an invalid length. [ 1034.117106][T30902] netlink: 'syz.2.6755': attribute type 4 has an invalid length. [ 1034.215390][T30896] C speed is unknown, defaulting to 1000 [ 1034.252280][T30896] ip6_vti0 speed is unknown, defaulting to 1000 [ 1034.462545][T30911] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 1034.549348][T30917] C speed is unknown, defaulting to 1000 [ 1034.617076][T30920] C speed is unknown, defaulting to 1000 [ 1034.722545][T30933] C speed is unknown, defaulting to 1000 [ 1034.849130][T30939] __nla_validate_parse: 1 callbacks suppressed [ 1034.849149][T30939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6765'. [ 1034.897104][T30939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6765'. [ 1035.038528][T30941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6765'. [ 1035.048884][T30917] ip6_vti0 speed is unknown, defaulting to 1000 [ 1035.466153][T30920] ip6_vti0 speed is unknown, defaulting to 1000 [ 1035.553813][T20054] IPVS: starting estimator thread 0... [ 1035.648134][T30948] IPVS: using max 27 ests per chain, 64800 per kthread [ 1035.666579][T30951] netlink: 'syz.3.6767': attribute type 1 has an invalid length. [ 1035.675388][T30951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6767'. [ 1035.832554][T30933] ip6_vti0 speed is unknown, defaulting to 1000 [ 1035.913725][T30955] netlink: 'syz.1.6769': attribute type 2 has an invalid length. [ 1036.151141][T30957] C speed is unknown, defaulting to 1000 [ 1036.298255][T30957] ip6_vti0 speed is unknown, defaulting to 1000 [ 1037.146951][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'. [ 1037.202531][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'. [ 1037.216982][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'. [ 1037.238290][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'. [ 1037.278955][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'. [ 1037.380897][T30971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'. [ 1037.455370][T30977] netlink: 'syz.2.6776': attribute type 4 has an invalid length. [ 1037.814224][T30995] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1037.829701][T30996] netlink: 'syz.4.6781': attribute type 33 has an invalid length. [ 1037.837756][T30996] `: renamed from team0 (while UP) [ 1038.180610][T31003] : entered promiscuous mode [ 1038.200410][T31003] netlink: 'syz.1.6783': attribute type 1 has an invalid length. [ 1038.361838][T31003] bond3: entered promiscuous mode [ 1038.367551][T31003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1038.412456][T31010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1038.420373][T31010] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 1038.431254][T31010] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1038.452323][T31010] bond3: (slave gre1): making interface the new active one [ 1038.459773][T31010] gre1: entered promiscuous mode [ 1038.466954][T31010] bond3: (slave gre1): Enslaving as an active interface with an up link [ 1038.702202][T31021] netlink: 'syz.4.6787': attribute type 1 has an invalid length. [ 1039.115564][T31038] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap4 [ 1039.170733][T31042] netlink: 'syz.1.6794': attribute type 21 has an invalid length. [ 1039.562120][T31055] lo: Master is either lo or non-ether device [ 1039.762296][T31058] netlink: 'syz.0.6800': attribute type 13 has an invalid length. [ 1039.951896][T31071] __nla_validate_parse: 11 callbacks suppressed [ 1039.951915][T31071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6803'. [ 1040.050824][T31075] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6804'. [ 1040.054256][T31072] C speed is unknown, defaulting to 1000 [ 1040.070426][T31075] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6804'. [ 1040.140639][T31075] netlink: 'syz.2.6804': attribute type 1 has an invalid length. [ 1040.162029][T31072] ip6_vti0 speed is unknown, defaulting to 1000 [ 1040.193036][T31077] netlink: 'syz.4.6806': attribute type 8 has an invalid length. [ 1040.201034][T31077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6806'. [ 1040.297685][T31077] bond0: entered promiscuous mode [ 1040.302989][T31077] bond_slave_0: entered promiscuous mode [ 1040.309097][T31077] bond_slave_1: entered promiscuous mode [ 1040.316373][T31077] geneve0: entered promiscuous mode [ 1040.353262][T31077] bond0: left promiscuous mode [ 1040.371150][T31077] bond_slave_0: left promiscuous mode [ 1040.376808][T31077] bond_slave_1: left promiscuous mode [ 1040.400623][T31077] geneve0: left promiscuous mode [ 1040.572128][T31078] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1040.635434][T31078] bond4: (slave bond5): making interface the new active one [ 1040.667129][T31078] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1040.755789][T31105] netlink: 'syz.1.6813': attribute type 10 has an invalid length. [ 1040.766646][T31075] netlink: 'syz.2.6804': attribute type 29 has an invalid length. [ 1040.907317][T31107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6814'. [ 1041.000439][T31110] C speed is unknown, defaulting to 1000 [ 1041.025422][T31110] ip6_vti0 speed is unknown, defaulting to 1000 [ 1041.061427][T31116] netlink: 'syz.0.6816': attribute type 4 has an invalid length. [ 1041.157178][T31121] netlink: 'syz.0.6816': attribute type 4 has an invalid length. [ 1041.703993][T31123] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.715987][T31123] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1041.797729][T31132] netlink: 562 bytes leftover after parsing attributes in process `syz.0.6819'. [ 1041.947074][T31123] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.972537][T31138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6820'. [ 1041.990019][T31123] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1042.305835][T31123] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.348075][T31123] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1042.488845][T31154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6823'. [ 1042.567413][T31123] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.578057][T31123] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1042.796437][T31164] mac80211_hwsim hwsim68 wlan0: entered promiscuous mode [ 1042.805248][T31164] mac80211_hwsim hwsim68 wlan0: entered allmulticast mode [ 1043.134600][T31178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6827'. [ 1043.140434][T25500] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1043.170182][T25500] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1043.198138][T25500] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1043.230719][T25500] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1043.362978][T25500] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1043.373854][T25500] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1043.385365][T25500] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1043.394076][T25500] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1043.440549][T31191] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1043.473383][T31191] bond11 (unregistering): Released all slaves [ 1043.756126][T31204] C speed is unknown, defaulting to 1000 [ 1043.815120][T31204] ip6_vti0 speed is unknown, defaulting to 1000 [ 1043.836700][T31209] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.6834'. [ 1044.076614][T31212] sctp: [Deprecated]: syz.1.6836 (pid 31212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1044.076614][T31212] Use struct sctp_sack_info instead [ 1044.804163][T31248] macvlan1: entered promiscuous mode [ 1044.834405][T31248] macvlan1: left promiscuous mode [ 1044.864042][T31252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1044.869249][T31249] macvlan1: entered promiscuous mode [ 1044.885614][T31249] macvlan1: left promiscuous mode [ 1045.125706][T31262] netlink: 'syz.3.6853': attribute type 1 has an invalid length. [ 1045.216284][T31262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1045.274129][T31265] bond1: (slave gretap1): making interface the new active one [ 1045.299125][T31262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6853'. [ 1045.330343][T31265] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1045.362013][T31277] netlink: 'syz.2.6858': attribute type 4 has an invalid length. [ 1045.464986][T31286] netlink: 'syz.2.6858': attribute type 4 has an invalid length. [ 1045.626101][T31262] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1045.636643][T31262] bond1 (unregistering): Released all slaves [ 1045.721179][T31285] C speed is unknown, defaulting to 1000 [ 1045.747301][T31285] ip6_vti0 speed is unknown, defaulting to 1000 [ 1045.819993][T31296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6863'. [ 1045.829092][T31302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6864'. [ 1045.829172][T31302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6864'. [ 1045.847421][T31296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6863'. [ 1045.868364][T31302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6864'. [ 1045.889539][T31303] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6865'. [ 1151.247885][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1151.254894][ C0] rcu: 1-...!: (0 ticks this GP) idle=408c/1/0x4000000000000000 softirq=184742/184742 fqs=1 [ 1151.266216][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P31322/1:b..l P31318/1:b..l [ 1151.275462][ C0] rcu: (detected by 0, t=10502 jiffies, g=147309, q=257 ncpus=2) [ 1151.283280][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1151.283315][ C1] NMI backtrace for cpu 1 [ 1151.283338][ C1] CPU: 1 UID: 0 PID: 31278 Comm: syz.1.6857 Not tainted syzkaller #0 PREEMPT(full) [ 1151.283355][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1151.283364][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 1151.283391][ C1] Code: 08 f0 6e 92 65 8b 15 68 ec ae 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 7c 16 00 00 00 74 2c 8b 91 58 16 00 00 <83> fa 02 75 21 48 8b 91 60 16 00 00 48 8b 32 48 8d 7e 01 8b 89 5c [ 1151.283405][ C1] RSP: 0018:ffffc9000c507bf8 EFLAGS: 00000046 [ 1151.283419][ C1] RAX: ffffffff8a7868ff RBX: ffff888075f59068 RCX: ffff88807ac85ac0 [ 1151.283431][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc9000c507ae0 [ 1151.283441][ C1] RBP: 1ffff1100ebeb20d R08: 0000000000000003 R09: 0000000000000004 [ 1151.283451][ C1] R10: dffffc0000000000 R11: fffff520018a0f5c R12: ffff888075f59598 [ 1151.283463][ C1] R13: ffff8880470b7000 R14: ffff888075f59000 R15: ffff888075f59068 [ 1151.283474][ C1] FS: 000055557f09b500(0000) GS:ffff888126231000(0000) knlGS:0000000000000000 [ 1151.283488][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1151.283499][ C1] CR2: 00007fa92da8ac18 CR3: 0000000030a7a000 CR4: 00000000003526f0 [ 1151.283513][ C1] Call Trace: [ 1151.283521][ C1] [ 1151.283528][ C1] atm_dev_release_vccs+0xcf/0x360 [ 1151.283557][ C1] atm_dev_deregister+0x187/0x2e0 [ 1151.283579][ C1] atmtcp_c_close+0x102/0x150 [ 1151.283601][ C1] ? __pfx_atmtcp_c_close+0x10/0x10 [ 1151.283622][ C1] vcc_release+0x10f/0x580 [ 1151.283642][ C1] sock_close+0xc3/0x240 [ 1151.283663][ C1] ? __pfx_sock_close+0x10/0x10 [ 1151.283681][ C1] __fput+0x44c/0xa70 [ 1151.283705][ C1] task_work_run+0x1d4/0x260 [ 1151.283727][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1151.283753][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 1151.283770][ C1] exit_to_user_mode_loop+0xe9/0x130 [ 1151.283785][ C1] do_syscall_64+0x2bd/0xfa0 [ 1151.283804][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.283818][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1151.283834][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1151.283850][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.283865][ C1] RIP: 0033:0x7fda14f8f749 [ 1151.283880][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1151.283893][ C1] RSP: 002b:00007ffd22e6d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1151.283910][ C1] RAX: 0000000000000000 RBX: 00007fda151e7da0 RCX: 00007fda14f8f749 [ 1151.283920][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1151.283930][ C1] RBP: 00007fda151e7da0 R08: 00000000000000cc R09: 0000000922e6d47f [ 1151.283940][ C1] R10: 00007fda151e7cb0 R11: 0000000000000246 R12: 00000000000ff69f [ 1151.283950][ C1] R13: 00007fda151e5fa0 R14: ffffffffffffffff R15: 00007ffd22e6d2a0 [ 1151.283972][ C1] [ 1151.284306][ C0] task:syz.3.6868 state:R running task stack:24584 pid:31318 tgid:31317 ppid:28339 task_flags:0x400140 flags:0x00080000 [ 1151.587813][ C0] Call Trace: [ 1151.591090][ C0] [ 1151.594025][ C0] __schedule+0x1798/0x4cc0 [ 1151.598565][ C0] ? __pfx___schedule+0x10/0x10 [ 1151.603422][ C0] ? css_rstat_updated+0x23a/0x4f0 [ 1151.608550][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1151.613840][ C0] preempt_schedule_irq+0xb5/0x150 [ 1151.618953][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1151.624693][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1151.630515][ C0] irqentry_exit+0x6f/0x90 [ 1151.634931][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1151.640915][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 1151.646209][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 eb 8a d1 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 1151.665823][ C0] RSP: 0018:ffffc9000481e770 EFLAGS: 00000206 [ 1151.671898][ C0] RAX: f372b0a0bb30a300 RBX: 0000000000000202 RCX: f372b0a0bb30a300 [ 1151.679873][ C0] RDX: 0000000000000000 RSI: ffffffff8d8fb724 RDI: ffffffff8bbf08e0 [ 1151.687845][ C0] RBP: ffff8880207f65f0 R08: ffffc9000481f010 R09: 0000000000000000 [ 1151.695819][ C0] R10: ffffc9000481e8f8 R11: fffff52000903d21 R12: 0000000000000000 [ 1151.703800][ C0] R13: 0000000000000000 R14: ffffffff8df3d6e0 R15: ffff8880207f5ac0 [ 1151.711808][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1151.716935][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1151.722056][ C0] unwind_next_frame+0x19a9/0x2390 [ 1151.727177][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1151.732294][ C0] ? alloc_pages_noprof+0xa9/0x190 [ 1151.737411][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1151.743575][ C0] arch_stack_walk+0x11c/0x150 [ 1151.748356][ C0] ? get_free_pages_noprof+0xf/0x80 [ 1151.753561][ C0] stack_trace_save+0x9c/0xe0 [ 1151.758419][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1151.763804][ C0] save_stack+0xf5/0x1f0 [ 1151.768054][ C0] ? __pfx_save_stack+0x10/0x10 [ 1151.772907][ C0] ? post_alloc_hook+0x234/0x290 [ 1151.777849][ C0] ? get_page_from_freelist+0x2365/0x2440 [ 1151.783567][ C0] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 1151.789556][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 1151.794576][ C0] ? alloc_pages_noprof+0xa9/0x190 [ 1151.799698][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 1151.805956][ C0] __set_page_owner+0x8d/0x4c0 [ 1151.810731][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1151.816120][ C0] post_alloc_hook+0x234/0x290 [ 1151.820895][ C0] get_page_from_freelist+0x2365/0x2440 [ 1151.826511][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1151.832410][ C0] ? prepare_alloc_pages+0x213/0x610 [ 1151.837710][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 1151.843522][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1151.849862][ C0] ? policy_nodemask+0x27c/0x720 [ 1151.854830][ C0] ? __lock_acquire+0xab9/0xd20 [ 1151.859683][ C0] alloc_pages_mpol+0x232/0x4a0 [ 1151.864539][ C0] alloc_pages_noprof+0xa9/0x190 [ 1151.869480][ C0] get_free_pages_noprof+0xf/0x80 [ 1151.874502][ C0] kasan_populate_vmalloc+0x38/0x270 [ 1151.879793][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1151.885000][ C0] alloc_vmap_area+0xd7a/0x14c0 [ 1151.889885][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1151.895170][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1151.899947][ C0] ? __get_vm_area_node+0x13f/0x300 [ 1151.905145][ C0] ? unwind_get_return_address+0x4d/0x90 [ 1151.910781][ C0] ? bpf_prog_calc_tag+0x4c/0x370 [ 1151.915808][ C0] __get_vm_area_node+0x1f8/0x300 [ 1151.920846][ C0] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 1151.926744][ C0] ? bpf_prog_calc_tag+0x4c/0x370 [ 1151.931815][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1151.936614][ C0] ? bpf_check+0xf50/0x1d720 [ 1151.941224][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 1151.945823][ C0] ? do_syscall_64+0xfa/0xfa0 [ 1151.950522][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1151.956874][ C0] ? bpf_prog_calc_tag+0x4c/0x370 [ 1151.961899][ C0] vmalloc_noprof+0xb2/0xf0 [ 1151.966409][ C0] ? bpf_prog_calc_tag+0x4c/0x370 [ 1151.971438][ C0] bpf_prog_calc_tag+0x4c/0x370 [ 1151.976300][ C0] resolve_pseudo_ldimm64+0xbc/0xc50 [ 1151.981600][ C0] ? __pfx_check_btf_info+0x10/0x10 [ 1151.986805][ C0] ? __pfx_resolve_pseudo_ldimm64+0x10/0x10 [ 1151.992706][ C0] ? check_subprogs+0x4ef/0x5b0 [ 1151.997574][ C0] bpf_check+0x1c4a/0x1d720 [ 1152.002082][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1152.007366][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1152.012572][ C0] ? __lock_acquire+0xab9/0xd20 [ 1152.017431][ C0] ? __lock_acquire+0xab9/0xd20 [ 1152.022294][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1152.027339][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1152.033239][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1152.038446][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1152.044781][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1152.050683][ C0] ? try_to_wake_up+0x7f5/0x12b0 [ 1152.055622][ C0] ? css_rstat_updated+0x23a/0x4f0 [ 1152.060746][ C0] ? __lock_acquire+0xab9/0xd20 [ 1152.065609][ C0] ? __pfx_bpf_check+0x10/0x10 [ 1152.070391][ C0] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 1152.076642][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1152.081851][ C0] ? ktime_get_with_offset+0x93/0x2a0 [ 1152.087225][ C0] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 1152.093470][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1152.100076][ C0] ? __asan_memset+0x22/0x50 [ 1152.104672][ C0] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1152.109876][ C0] ? security_bpf_prog_load+0x125/0x3f0 [ 1152.115436][ C0] bpf_prog_load+0x13ba/0x19e0 [ 1152.120221][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 1152.125360][ C0] ? bpf_lsm_bpf+0x9/0x20 [ 1152.129698][ C0] ? security_bpf+0x7e/0x300 [ 1152.134294][ C0] __sys_bpf+0x507/0x860 [ 1152.138631][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1152.143419][ C0] ? rcu_is_watching+0x15/0xb0 [ 1152.148193][ C0] __x64_sys_bpf+0x7c/0x90 [ 1152.152621][ C0] do_syscall_64+0xfa/0xfa0 [ 1152.157217][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1152.162417][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.168486][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1152.173168][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.179063][ C0] RIP: 0033:0x7f640d78f749 [ 1152.183480][ C0] RSP: 002b:00007f640e67c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1152.191912][ C0] RAX: ffffffffffffffda RBX: 00007f640d9e5fa0 RCX: 00007f640d78f749 [ 1152.199899][ C0] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 1152.207874][ C0] RBP: 00007f640d813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1152.215844][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.223814][ C0] R13: 00007f640d9e6038 R14: 00007f640d9e5fa0 R15: 00007fff39ddc3e8 [ 1152.231814][ C0] [ 1152.234836][ C0] task:modprobe state:R running task stack:23720 pid:31322 tgid:31322 ppid:25500 task_flags:0x400000 flags:0x00080001 [ 1152.248325][ C0] Call Trace: [ 1152.251609][ C0] [ 1152.254546][ C0] __schedule+0x1798/0x4cc0 [ 1152.259087][ C0] ? __pfx___schedule+0x10/0x10 [ 1152.263939][ C0] ? page_table_check_set+0x18d/0x730 [ 1152.269334][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1152.274627][ C0] preempt_schedule_irq+0xb5/0x150 [ 1152.280265][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1152.285998][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1152.291810][ C0] irqentry_exit+0x6f/0x90 [ 1152.296231][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1152.302213][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 1152.307498][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 eb 8a d1 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 1152.327108][ C0] RSP: 0000:ffffc9000465fcd8 EFLAGS: 00000206 [ 1152.333183][ C0] RAX: f81ad3bc585a7e00 RBX: 0000000000000202 RCX: f81ad3bc585a7e00 [ 1152.341154][ C0] RDX: 0000000000000001 RSI: ffffffff8d8fb724 RDI: ffffffff8bbf08e0 [ 1152.349126][ C0] RBP: ffff88807c540b30 R08: 0000000000000000 R09: ffffffff820a74c7 [ 1152.357097][ C0] R10: 0000000000000000 R11: fffff520008cbf98 R12: 0000000000000001 [ 1152.365068][ C0] R13: 0000000000000001 R14: ffffffff8df3d6e0 R15: ffff88807c540000 [ 1152.373051][ C0] ? lock_vma_under_rcu+0x1a7/0x4a0 [ 1152.378273][ C0] ? lock_vma_under_rcu+0xec/0x4a0 [ 1152.383389][ C0] ? lock_vma_under_rcu+0xec/0x4a0 [ 1152.388505][ C0] lock_vma_under_rcu+0x3c2/0x4a0 [ 1152.393537][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1152.399083][ C0] ? __rseq_handle_notify_resume+0x384/0x1220 [ 1152.405164][ C0] ? do_user_addr_fault+0x1a8/0x1380 [ 1152.410457][ C0] do_user_addr_fault+0x2d9/0x1380 [ 1152.415610][ C0] ? rcu_is_watching+0x15/0xb0 [ 1152.420373][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 1152.425751][ C0] exc_page_fault+0x82/0x100 [ 1152.430351][ C0] asm_exc_page_fault+0x26/0x30 [ 1152.435198][ C0] RIP: 0033:0x7fa92db76487 [ 1152.439613][ C0] RSP: 002b:00007fff09f23bc0 EFLAGS: 00010202 [ 1152.445682][ C0] RAX: 00007fa92da8ac18 RBX: 0000000000000000 RCX: 00007fa92d8e42f8 [ 1152.453651][ C0] RDX: 0000000000000018 RSI: 00007fa92d8e4400 RDI: 0000000000000000 [ 1152.461626][ C0] RBP: 00007fff09f23ce0 R08: 0000000000000000 R09: 00007fa92db9eda0 [ 1152.469594][ C0] R10: 00007fa92d8bd000 R11: 0000000000000203 R12: 0000000000000001 [ 1152.477567][ C0] R13: 0000000000000000 R14: 00007fa92db5f5f0 R15: 0000000000000000 [ 1152.485564][ C0] [ 1152.488584][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g147309 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1152.499859][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1152.509826][ C0] rcu: RCU grace-period kthread stack dump: [ 1152.515710][ C0] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1152.529200][ C0] Call Trace: [ 1152.532482][ C0] [ 1152.535417][ C0] __schedule+0x1798/0x4cc0 [ 1152.539952][ C0] ? __lock_acquire+0xab9/0xd20 [ 1152.544810][ C0] ? __pfx___schedule+0x10/0x10 [ 1152.549689][ C0] ? schedule+0x91/0x360 [ 1152.553951][ C0] schedule+0x165/0x360 [ 1152.558113][ C0] schedule_timeout+0x12b/0x270 [ 1152.562963][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1152.568330][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1152.574228][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1152.579525][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1152.585082][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1152.589954][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1152.595851][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1152.601136][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1152.606340][ C0] ? finish_swait+0xcd/0x1f0 [ 1152.610940][ C0] rcu_gp_kthread+0x99/0x390 [ 1152.615536][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1152.620735][ C0] ? __kthread_parkme+0x7b/0x200 [ 1152.625680][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1152.630713][ C0] kthread+0x711/0x8a0 [ 1152.634790][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1152.639985][ C0] ? __pfx_kthread+0x10/0x10 [ 1152.644580][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1152.649782][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1152.654978][ C0] ? __pfx_kthread+0x10/0x10 [ 1152.659574][ C0] ret_from_fork+0x4bc/0x870 [ 1152.664166][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1152.669286][ C0] ? __switch_to_asm+0x39/0x70 [ 1152.674043][ C0] ? __switch_to_asm+0x33/0x70 [ 1152.678801][ C0] ? __pfx_kthread+0x10/0x10 [ 1152.683392][ C0] ret_from_fork_asm+0x1a/0x30 [ 1152.688175][ C0] [ 1152.691189][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1152.697505][ C0] CPU: 0 UID: 0 PID: 25489 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 1152.707141][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1152.717196][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1152.723703][ C0] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 1152.730387][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 e6 73 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 91 6f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 75 6f [ 1152.749995][ C0] RSP: 0000:ffffc9000b8ef640 EFLAGS: 00000293 [ 1152.756070][ C0] RAX: ffffffff81b4943b RBX: 1ffff11017128045 RCX: ffff888036290000 [ 1152.764040][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1152.772009][ C0] RBP: ffffc9000b8ef7c0 R08: ffffffff8f7d1e77 R09: 1ffffffff1efa3ce [ 1152.779986][ C0] R10: dffffc0000000000 R11: fffffbfff1efa3cf R12: ffff8880b8940228 [ 1152.787962][ C0] R13: dffffc0000000000 R14: ffff8880b883b400 R15: 0000000000000001 [ 1152.795932][ C0] FS: 0000000000000000(0000) GS:ffff888126131000(0000) knlGS:0000000000000000 [ 1152.804857][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1152.811445][ C0] CR2: 00007f65cf974010 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 1152.819415][ C0] Call Trace: [ 1152.822689][ C0] [ 1152.825625][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1152.830672][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1152.836997][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1152.842373][ C0] ? __kvmalloc_node_noprof+0x170/0x910 [ 1152.847925][ C0] ? __pfx___text_poke+0x10/0x10 [ 1152.852862][ C0] ? rcu_is_watching+0x15/0xb0 [ 1152.857628][ C0] ? trace_contention_end+0x39/0x120 [ 1152.862926][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1152.867952][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1152.873074][ C0] smp_text_poke_batch_finish+0x5f9/0x1130 [ 1152.878889][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 1152.885056][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1152.890098][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1152.896345][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 1152.902607][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1152.908593][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 1152.914502][ C0] static_key_enable+0x1a/0x20 [ 1152.919266][ C0] toggle_allocation_gate+0xad/0x240 [ 1152.924549][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1152.930441][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1152.936169][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1152.941889][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1152.947609][ C0] process_scheduled_works+0xae1/0x17b0 [ 1152.953193][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1152.959208][ C0] worker_thread+0x8a0/0xda0 [ 1152.963858][ C0] kthread+0x711/0x8a0 [ 1152.967950][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1152.973061][ C0] ? __pfx_kthread+0x10/0x10 [ 1152.977665][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1152.982867][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1152.988066][ C0] ? __pfx_kthread+0x10/0x10 [ 1152.992662][ C0] ret_from_fork+0x4bc/0x870 [ 1152.997258][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1153.002380][ C0] ? __switch_to_asm+0x39/0x70 [ 1153.007140][ C0] ? __switch_to_asm+0x33/0x70 [ 1153.011905][ C0] ? __pfx_kthread+0x10/0x10 [ 1153.016500][ C0] ret_from_fork_asm+0x1a/0x30 [ 1153.021286][ C0]