last executing test programs: 1m39.955977831s ago: executing program 3 (id=3715): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000003380)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)="04", 0x1}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000840000000000000051a0"], 0x18}], 0x1, 0x0) r1 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x3, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r4, 0x0, 0x6b, 0x0, &(0x7f00000011c0)="dc188619b95d02ff4284860188a86a4e08", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x3, 0x4) sendto(r3, &(0x7f00000001c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/23, 0x17}, 0x80009}, {{&(0x7f00000002c0)=@nl, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/90}, {&(0x7f0000000580)=""/83}, {&(0x7f00000006c0)=""/140}, {&(0x7f0000000780)=""/91}, {&(0x7f0000000800)=""/68}, {&(0x7f0000000880)=""/40}, {&(0x7f00000008c0)=""/107}, {&(0x7f0000000940)=""/194}, {&(0x7f0000000a40)=""/183}], 0x0, &(0x7f0000000b00)=""/229}, 0x1}], 0x1ae, 0x10002, 0x0) bind$packet(r1, &(0x7f0000000140)={0x11, 0xc, r2, 0x1, 0x7, 0x6, @remote}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x11, r5, 0x1, 0x1, 0x6, @link_local}, 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000e00)={'syzkaller0\x00', @multicast}) (async) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000e40), 0x56) sendmsg$kcm(r10, &(0x7f0000000e80)={&(0x7f0000000ec0)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000f80)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000680)) 1m39.427138597s ago: executing program 1 (id=3720): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x805, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000640)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r7, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000880), 0x0, 0x0, 0x10, 0x8, 0x5d, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000900)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000940)={'bridge_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="4c00000013000500010000000000000007000000", @ANYRESOCT=r7, @ANYBLOB="00000000000000002c001a000600000002000000200004801c000180080001000100000008000200", @ANYRESDEC, @ANYRES8=r5, @ANYRESDEC=r6], 0x4c}}, 0x0) sendto(r3, &(0x7f0000000a80)="340000003f000500010000000000000001020000000000000c0001006f76732d647030000800020000000000080009002a000000", 0x34, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYRES8=r2], 0x20}, 0x1, 0x0, 0x0, 0x24008055}, 0x814) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f0000000b80)={0x200, 0x3, 0x7fffffff}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000bc0), 0x100, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000c80)={0x0, 0x0}) recvmmsg$unix(r9, &(0x7f0000000cc0)=[{{&(0x7f0000000d00), 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000e00)=""/41, 0x29}, {&(0x7f0000000e40)=""/90, 0x5a}, {&(0x7f0000000ec0)=""/50, 0x32}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/211, 0xd3}, {&(0x7f0000002000)=""/187, 0xbb}], 0x6, &(0x7f00000020c0)}}], 0x1, 0x10100, &(0x7f0000002100)={r10, r11+60000000}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r12, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000021c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002280)=ANY=[@ANYBLOB="40e1ffff6700010029bd7000000000000a00000000000000060007000000000018000880140001000000000000000000000004020700000008000500", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002340)={&(0x7f0000002380)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="020002007000ffdbdf250c0000007c000580440002800800020086d1000008000300ffffff7f080001000f000000080002009d33000008000300ff0f0000080003000500000008000400080000000800030001000000340002800800010010000000080003000400000008000200810000ec5a9849f0acf0e693f2a8b63901ca520008000300050000000800040005000000080001000f0000004551746d00c267ff082ff5394e49b9ea5cba7498a482a6a278071167b658644dc397a3c663"], 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000140)={r14, 0xda0, 0x3, 0x3, 0x0, 0x2f33, 0x1, 0x1ff, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x400101, 0x4005, 0x7fc, 0xf, 0xfffffffd}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={r14, @in={{0x2, 0x4e21, @empty}}, [0x8000, 0x100000001, 0xc, 0x6, 0xffffffffffff6d90, 0x2, 0x8000000000000001, 0x3ff, 0x3, 0x55, 0x5, 0x6, 0xfffffffffffff6d6, 0x9, 0x9]}, &(0x7f0000000340)=0x100) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100), 0x8) 1m36.814082568s ago: executing program 0 (id=3724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000002280)}, {0x0}], 0x2) 1m36.750944127s ago: executing program 4 (id=3725): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f000000affb)=[{}], 0x1, 0x7fff) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)={0xa0000004}) (async, rerun: 64) ioctl(r0, 0x0, &(0x7f0000000480)="63138a015fd0299deaf69260d6d32e902c47b68f983fdbddd8f70b4b35d2083052da087016cd80c8f4051f9383bfc7fb9f67d94b8b0f2788d5cf9899ec6f4d1e") (async, rerun: 64) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newtaction={0x4c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c00028008"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) 1m36.556162378s ago: executing program 1 (id=3727): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000001500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001540), 0x0, 0x10, &(0x7f0000001580), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001640)="b907ef23f66ad4f05c13e542703f", 0x0, 0x2000000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r0, 0x84, 0x25, &(0x7f00000006c0)={r3, @in={{0x2, 0x4e20, @empty}}, 0xff, 0x1, 0xb5c2}, &(0x7f0000000780)=0x90) 1m36.391916209s ago: executing program 3 (id=3728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x6c22c0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x1b59, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x100, @void}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg\x00', 0x1000}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x7, 0xa, &(0x7f0000000800)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @generic={0x2c, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @exit]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x27, 0xfffffffffffffdc5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0a00000003000000040000000800000000000000", @ANYRES32, @ANYBLOB="78e8269ce412b9876e4200000000000000000d4d0079444aa2e96c5ce75323e6b683156cb09d4be693f5a8dff83abf18f3cf57d1fa012a4b7f2cba7ea3ea4cc4d745f67bb870f0ca0e918c44a70c85caab67d0887016b9c08ffac29fcdbb1e28771225e4f3b8a8297f0d8f1a4896fcc87ce903d8dacc976ef6b53aa1efd27a8dd2962127176dd4355366a9cd4fa61d1d68ef139cd0000000000000f825f046b1ec4b383ad0afa1a566d4d8f92370bd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0xd, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000c40)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xa5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) openat$cgroup_devices(r6, &(0x7f0000000540)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r3], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x6004010) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x114, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0xe8, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x3, 0x6, 0xd, 0x5, 0x4, 0x1, 0x5, 0x9, [{0x8, 0x1, 0x19, 0x7}, {0x0, 0x7, 0xfe000000, 0x1}, {0x9, 0x4, 0x4, 0x4}, {0x7, 0x7, 0xd, 0x1}, {0x5, 0x0, 0x3, 0xffffffff}, {0x101, 0x398, 0x8, 0x2}, {0x9, 0x0, 0x8, 0x36}, {0x4, 0xe8c, 0xcc, 0x5}, {0xff, 0x40, 0x347c, 0x1a80}, {0xc, 0x80, 0xffffffff, 0x1ff}, {0x7, 0xe, 0xcf1713ac, 0x35ad5b6d}, {0x1, 0x6, 0xff, 0x4}, {0x0, 0xffff, 0x78e, 0x400}]}}]}}]}, 0x114}}, 0x0) write$tun(r0, &(0x7f00000004c0)=ANY=[], 0xfd6c) socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080007000000000016000000456f005f00660000401190780a010102ac1414164e244e20004b9078410a00011dfd7762dfbaa2109a0650af04a9a8c7476f949740f4a15c4ea704ec82b650523984963fdde6b016b8a81a87fa79f2c526307d00"/109], 0x6d) 1m36.135389681s ago: executing program 0 (id=3729): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x4bc, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async, rerun: 64) pipe(&(0x7f0000000180)) (async, rerun: 64) pipe(&(0x7f0000000080)) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) listen(r1, 0x8) (async) accept4(r1, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x6404481c) 1m35.502825802s ago: executing program 1 (id=3730): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet_buf(r4, 0x0, 0x20, 0x0, 0xff0f) r6 = socket(0x10, 0x803, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000380)=""/131, 0x83}, {&(0x7f0000000440)=""/64, 0x40}], 0x4, 0x0, 0x0, 0x800}, 0x200460d0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001000370400000000000000000000d5d0", @ANYRES32=r7, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000001000390423bd700000000000000003e4", @ANYRES32=r7, @ANYBLOB="00000000000000001800128008000100736974000c0002800600"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000040)) r10 = socket(0x2d, 0x2, 0x0) setsockopt(r10, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendto(r10, 0x0, 0x0, 0x0, &(0x7f0000000500)=@generic={0x2d, "00000000000020000800010000000600"}, 0x34) 1m35.470066683s ago: executing program 3 (id=3731): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x2, @local, 0x53}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb3b0ad952e966bbe242b92b746b023df2cb0b7161161a142749fe184fb0d000c63f90010a1ed2bf603dfdffcc250c30136f9ef2ef8b00"}, 0xd8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000440), 0x0, 0x3}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, 0x0, 0x4008804) sendmsg$kcm(r4, 0x0, 0x8400) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b000000000008000400"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x48000) sendmmsg$inet6(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000801) (async) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) recvfrom$inet(r1, &(0x7f0000000580)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYRESOCT=0x0], 0x50}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) (async) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0x1, {{0x2, 0x4e22, @multicast2}}}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) 1m35.360933585s ago: executing program 4 (id=3732): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = socket$inet(0x2, 0x5, 0x8000f2) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r3}, 0xc) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x762d1000) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@remote, @in=@loopback, 0x4e20, 0x13, 0x4e22, 0x1, 0xa, 0x80, 0x0, 0x2e}, {0x9, 0x7, 0xfffffffffffffff8, 0x9, 0x20d80eb7, 0x7, 0x6, 0x1000}, {0xf, 0x0, 0x0, 0xab4}, 0xfffffff8, 0x6e6bb9, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x32}, 0x2, @in6=@mcast2, 0x3501, 0x2, 0x3, 0x1, 0x2, 0x6507, 0x5}}, 0xe8) socket$pppl2tp(0x18, 0x1, 0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="1e", 0x1}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8400001e}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x30}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000540)={0xd7, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xd0}}, 0x400c020) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d3, &(0x7f0000000400)) bind$inet(r1, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) 1m35.215252773s ago: executing program 0 (id=3733): bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x20000007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002400)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003800)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000003840), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003980)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000003a40)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000003ac0)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000003b00)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000003bc0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000004880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004940)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000005940)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) accept4(r0, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000005980)={r7}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000006d00)={&(0x7f0000005a80)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000006c40)=[{&(0x7f0000005ac0)="a4b735191efa363bb0a9807a9c3c609bc8bcef16de6ce1cdaeefb8403c842a71c2dab24270dea4ced2e244d303c605e00df53849b2270b1adac8986ccdbc9d21d9510b313e1c495043e6d3851ac7045cc5d5863425b2ac16c86e919015e8b9118b787b5a18d4c9beb139bc62c3bd6a1d0dfdd2056697cea18159cc30c2aae905e67d448389bbfea0345e7ddd0b54868103da4e4bd08f8951ee89745c6654c8776fbb2d48c9a18833d367e4b412029b3db8ff006495d44aa531e62415b8b2af082e7c2ace0a8728c44ab0122eaac83031997b348a4f362dd840c98774acf66b41d6038cf023d79f7565ff31aa9c230cbde499fa40d3af365bf2deaa3dda17affe000d45dbcec81debd10b9a2f790f32740ee60c81d0ba2d2020f4769eb83aa529b363b0f616261879c5c65a85550da597722bd7796cf24353c0d6c3ef8e82fcebeae5ace3067367be83284f8e732881fb718ecc0fe0d875ca669d73f5cde4727dda541719fb06d5346034bd5ed0afa0db7016c283abb64e55b82caa648fc1031b891cf8b8970e53f3b7a9a9dfb0406956f1194c45fed9f49e5ac992b43033392c2e57ffd665e2e3f0b7c0720cf0b4c6b41802832361c84ffb207a390f9e5ad6cb2c6f450f9e2ab7f833e2fb549b8dfe18aefa36fe943df20af3a200ee84abb8a88fbff19cc6d424cef5356b33a66d7291337822ef70e03cbc7edb6c76e26f0c96c5a10ac8d310e4070c0455531d50d14cf508071cf8371604181f82d8fe4583b81b5680919667f9e7530dfea396bdc4ecb47f902717fb9ed97831a0ace342441a1fd775cd243ddba1c31a1ea5da6bc704c8b4218e3912d67983a3eb17f8727626b2a6a7eb0917132573e71810322d7f3a39c96bf586dcd484241974f9e3fb2062b62359326150842037fdffae2a95a21110c165aae0a3292ebb4f16769c4e6142a7fd4b8b61472a37852e4ead7b3590fe01b48b248811f9ac5e495088f5aac6512c935c9cf72a870135dcdcfccd0877e4c9fe75aba66ccb3852ff12bdfe8593e596f37ec0ba92dd2669717f0b430a2cbc82dd0ac22c4f2613576a92d2886ee4e24d60c1eb90f814102363907e787eadc596c606a09c1db616ed30190e06cc5900c920d611a421fc61b52a4e2ca02f771c344fe1cfc7c43f3ab1db81aa9901ff9bf04070b4feb67104d8aadb3dd0f00028b31917487d5b98cd7f6e58f8bc896ac7110d8ff05657fda8841ed364272be6850dbf2778a53637341aea85d14ad757339de9bf811c9f559a4b7f9eca078893928e8d9cc524a4a345f6fbec8d3127818cf6bda56b1d4761ad560add8a9f1e49d2d1740c2c63d61291d5f8241c91edb26a5318ce872b5e4659e01ca7213795863668ef1608524580402ddf416cbdd0240100c1b70cbafa6082e2fbdfc3fe68db85ffe2387c9aaf3138effb25b03f7c375b1382b470a40f40ddd3c97682864e23fce4d08422b4dff4348b5d732ed94f4ad934dbd5a4ca5416e9f8e884b59c05e507fbff1f6b4e962bef03b518d2d759d706dc26eba7a4ec9235701c0e28180c9332131230e0953b73efdf4520beacdc86c6c9bee2ea596162a4d2d5c176498ed560d0182a88286d5c15c707f6d1aaaae302db8d51bee09f1e8b41198d1c8e0ec40bb22e11d77cbb78cecbec2c820d4ba2b269045ac1020045665f14a1c6f9f92b4941184bde7ef3c1e5514222d6fc1544fc79795f154477fc8578ee0856491028ec34be0e5463ffe36b7355168a1d58f83c59c1217758d665b83d2c8e6c0160e234c2656b97afe3281cd2f8717b115fab83824b6d9ac3c4e7b6663ea8a1e5cf7b38109fa73c819ebc9e2724526b2c4ca04f90406d7b4d3ce1291167594037503313d8a9877c11968c68e90ba6833a30ea7bfa79c0d9fd2cbd946182c15cdd04155ae4e7e817f7ca00ea9f02ee9797fceee093d4fec0d9a94c97536fc4993c5aa11d8dcf5f7e080f7850d4ebe4c843a28e9e80a62acfaa24ce11401533970122c71751bc5d198220d9cf66c3c4271e8ea9b44c23e30f8eedbf5178a729fc720d7456cc814cd71c9acdc5d5b80d5e5063c03d57d009a2367b9b450324a74901e39a51bba0f1054c7bac1770febf532ea143c5d6f33f2bf3b99a2eea111f1d13b0eb87c9f587461cfb1b5cb329babf9382edd9f268d189de11907f26af8211995a327cf88e77d171d655bdaf8b5a3a8f983ace50de26d29bc7f79cbbce468901b383083fa649bfc1ce7c0e0952d417115b5133d58fb6417671186f63c8cfa4eb16b5e95e33f55a882e64ad90873300d8146029dd98578d2737a7d4b3158575e5baf8d3b117f7b3a0cdded7f4c69e9de88633d6f9637429d21ef9713859a180cd28aa899e9f127966d614d2c659e70bf1d928a33d3d64010615554aec75ebdc34b1c1bdc77c04784b01dd9f979865d6d9f9d43e15ae6ba6397e3f9f9b962e56ec25c39056825932109291634dfaf652f4e5e575df0d5fd1a56b07ed31fe1b4e61f2acf6f4e7cbbbe66c87651a16942c69b662558b23b78a4662627b7154f0b4b8becc2ef23e474f7d9ff6e1c149867f26de56acf657a4bb496d5cceabb7e1a44ab7856e8c5e338ad27e326af2d15963e2f9efdcca611ea1962786b93b97bfd677f3901499412665259e8dea68d543e00396993734cccdb91e6fe5cbeb392819d0534c70c984d5d92be3d6cef80681b2c2860a89141e9345ef81f7ef3f4d07d6ee1b9a0c7f80df85c05f86e27ddfdddcb0b8a4a5035e790fa5236b755587b5c50f06340d8b25555bcb06fff44cdb0d83d923915592c63ddd219799300f5c31a1307b17610e742d73b5b2ce148b7f5f71f97bc4443780510456dfa3d1788092f774bbfd37323c27e1f17f3a6eb1f52539dd0ba7f919d7f759a9a6beff0d4413073ade0c2ed6d7fbd325142837347eb3401879fc23fffbe07dcb19e5fa0568928862c130124de75df037f585cccd6b0b10458d7d5c62cb8a27436cac1d7c12ef6d13ce81b8d252a73b9cb1833ae3f557525864cd827c6aca0477b61db49aeae6dd3a361391c5ac9e3e8f742c94564673b8b10b229d4ff05770a12380919d3e8f8365468f492f5ddd54136b90004213641932404f6f9b36c255f7d9cfeaab4c83c8f265a102d8f8b8013e0ad0fbfc88888dd96f3011a6e2b37d9273dab30ad151f33dd2f6436d8979deab006e8df6adfa1a28645110c4829eff92ae23076e2d002d9aa30562e449f9b8da6ab1692b608b83d09d5e3a75963e2ef647c927e39dd25aeb9ec96f751d4f425b86455698721aec000f1c21dc427d355264b3c3ce62d59f66db0a52a5582df00f5c7c32f5fbbb876d47370f20acb9025c3ee3b6cae8ba6c03f28471432d877094cbd2c734113f582375240cdc89dcee9dfe2df58fd4aa0f112592bfc0c4b947a46d98defe21690cbb91e209e96a68e7aceb42d84c38ebbd6f3779aefb827a2aeed48e7362f7a2727d54225aaa4efe747c9925cb9801e9dc0dc355e8b0c29ce7f385c337bfef2c875f8c9dd6cea6b1d77124d5bc3525a159e126e0f9967bbcde616842d3b98c841479475b0b6100ce6860a2f0addbfe84e835c271d190a3085e5f1991a0e74b09b1e53e4808c15d599fdb45e006f1e0269b8a04aae960caf10a34f63c1602f020ac7d7df35b35b3fb71daf4b654b2ca144b6717712a9509b633e721783e432dd4ce1a2a2042d2f75c84cfb22ef5b287f32f426b7f694c488dab8196ac94acf0229778abeb9d493b87311652cbdf0c48187a3730a4fae4d75d0102c53661734215c2890d4892baa141846089679e4791a9cccdeba42ff1475b9fdd31b70f435749314bed93db7a86aabe969bf20b855165b541fe0cf4ac52899b25ffd408c1ef544240da46d2527bc7139e113a5e21a6cc67bd731e63836ce4414b9db82c03a8dd536403c32fe9edec5d01e1f9e012490fe95a08918b683f55e2d3f0a332c03f17b62984310d0752f9ff372e033ced6a14fc1787402000795f98a9ac41dc8f7a6eff0bba1650cc1448847e0fa946e753e35d7e74c060e5ae91a6714882ad02ace43cb0b92736ad340948e20b29e66c435b6f71208d058ccbaf37ee811c59553e0bc3cca1a6f4008b7684f34bbe90327f4a0d35411a61bb997de3b75ba86452273419895352813d620db066b58804c448e17b9e935feeeae89250e1dcbc5c990218171405fbc4dbab49b7dec0e882f8fec44c24cf5fd70902f63e8a6963261cc4aa882b650ae97e8840279a53f463dd6bfe6667d39906960bc26b8036f038808bb287f9a07c08cdeb54912c8d760565ef664d8adeb2bfb26317db3190545cd8b4bc8d3d7c633bd967b3d17bf9bc3b34a91c24797e6de2cfa33aec85fb65c32b19f17389b45e0fc6b250d0bc7e69760230d35025ebb3accc88f2a9ecc0e362d36b675da5d97f2161b316f14861f65dab86951aff218ab8d9b592696174ac103275f440adba284e62e56a8b7dcf880e3a7cda95c8778a07bff195aa7b2f61c081522bc78a299c4f14b60a57d86eb05a2e66729c31fa7ee78bf395f4d2dff4cc329917fca5bed532e5476c620310d26fe48d325a82936e470c6956cb4e8b5594721a953cf70f6da81290330d905549706e353ee1b8cf60eec1db8a42ecd0b568a5f22d8873af6553a8d79023f5e7d437c9295880739dd06e4f298a31c2e49dba5dae21b13b1db92d455c22ae76239bdaad3d6afd8b4a710f8d6302d9d14f017d2a89ec5dfebf50bf5d97b6d8febf5a8769f881afe7a817e17babf39c6e75ab6d1fe0843854e81b9c9ab8e6f48be6a1f5ace355c2663665e760b795eae2eb94b69dc23dbe9f312e920bd3b5ca9865b0997b46720cc8eeda29c8c17e1437beac1788a87be650dec8571b077513ba2476491465b0a93b4b8a81fea55c7ca05a1cb20713a3225559302b1c953c78fffbc5600f8d08881c32c362fe947e5be31f6928aeef50fffb29886ed382ee49160c1b8713bc28cb7e127028419073eb6939b99b97a34ec8350a519d50ce8bf0f875d479b1876dcb1bd39e503c3b287100b2446e3ae1416c856e62ac1999e069f2aa6695b821fb45819af4c22f3c9aac17da4ab79e58c595629633ef98ce8a9c2cc6b3dee829ef533097c6e6cb2003370feef8da131c807a5064b1e5ccd03c2029e47a105c852e0e1606a8cd00b1931784e04279aa6870923ec9713e4e138811e39e27c960b9e6b73c0c13fd3645c03ac5fd28dcb36cbafbc026fda1db18923a93a135ae485cf8a1d1048a94e00db162d49d8749b57cc25583ba6cec351497a5de96b8c7399c2ea243e0110ae1aefe9decab0cf7d604ceb64345802648681ffc2a6b2da4a48885187686304760682d697977cd9dda3e84b3f51b6185df4ce74b5a1994e802093f80c3b4f2dc91e6c25ecfed410613c8841389f1058398a99d2b81d22128fb6d3cc400f4b66e1570642ff4483fd8b04e5ef255ee42065363492a01614ab9eddd397e65c285f5ca2211776ce12e58d116b1630396eb6fbd5b43f81fe325c1046b9df31820d2000e5702ff04c79fd8bf7d36692cd034ed2923600a3b20baf0b61565fcddafd9ffa150ec5a61e51c52524c16e5768dcc7194ed1ebefa1f8592d4341ca1a4d808794dcfb500b03e0e548fcc944d8aeda1244dc6023c487593332d0a3e288be8a2cda3cbff7a91724d568a765bcdd371731ddd967896039d44873e481096a41d6e48e8c67d57bad683b64d206ed6f73edd4b4fd67ce78eefc0e1028ae8bffe7f9d602a3bc888a676cc9bfba52c95d9f4df0e", 0x1000}, {&(0x7f0000006ac0)="c259954e51931b51a1464d5303181704814bebfacf184b6c37ed886389f104ba7b3b10d05294d819dd05c6168497c74fb363bbfce15c3ba66f89b660d6c3561309ed415be0e03ee1cd36a1e727aae5cd44ab645160a345d823627acceb9a", 0x5e}, {&(0x7f0000006b40)="aa6a5c57f9bac3b70321936329c3d078e586d859487caac792119e71cd2ced192014c4047b42a0477c3d73979198242dacf2f999ae55af6c0555bed44a89efdee52b4f6bd9bddbab5332baa2d6e1de861c8bee3e9b9d9d7cf2fd27f1e12bdde218b83cae10712d98dae76fa9639dd03e942c79f8f4f844d1bda2bf49617a0110f8ef85cb1246c140da81d3be58013850851538755dc4df6b7a6b6bd374c2e0a61e5f3e053829486f75ebffc0bd706b4b6e668d255661d294e6c7749b6c38132fed798f9e589d64e2bd1dd0c3f21f6e33f208adaa91198b0ef8674bf5d07f13a9cdf7a3feeb9cbc6a237c92f1bc86b4e3f72e476ea8", 0xf5}], 0x3, &(0x7f0000006c80)=[@ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xd8, [@local, @remote, @multicast1, @multicast1, @private=0xa010101, @remote, @remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x68}, 0x20044004) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f00000059c0)=ANY=[@ANYBLOB="001000000000000002004e207f000001000000000000cc2c4c88f4a6840300"/144], 0x90) recvmmsg(r5, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003480)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=""/255, 0xff}, 0x200001}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003600)=""/213, 0xd5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003700)=""/144, 0x90}, 0x8000}], 0x5, 0x143, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000037c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000002204000a"], 0x14}}, 0x0) recvmmsg(r9, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)=""/4085, 0xff5}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x2}}], 0x1, 0x140, 0x0) 1m35.2142948s ago: executing program 2 (id=3734): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@local, @in=@loopback, 0x0, 0x100, 0x4e23, 0x0, 0xa, 0x60, 0x0, 0x819b86129fcd634a}, {0x0, 0x7, 0x20000010000, 0xff, 0x63b40c8e, 0x2000000, 0x10, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x800000000003, 0x4, 0xffffffffefffff7f}, 0x1, 0x6e6bb0, 0x2, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x2b}, 0xa, @in=@remote, 0x34fc, 0x4, 0x3, 0x0, 0x2, 0x6, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005efffffffffffffff0000000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000180)={{0x5, 0x80000000}, 0x3}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r5, 0x50) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)={0x3, 'batadv0\x00', {0x7f}, 0x2}) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r6, 0x50) close(0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000240)=0x1, 0x12) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet(r0, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000b00)="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", 0xf80}], 0x1}}, {{&(0x7f0000001b40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001d00)}}, {{&(0x7f00000002c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001d80)="86c5c2c70753e1c86962c2087c81d0cdcc1c718f612d53f294713ec54c3b521b62f55bbb3c8afe4a4c8ae94d0d50fe1ac841eb2ced76f75aa114da24d883713090fcb4e6edd20e56ebef44543f67cba59c7c192e020cae056f5824f179f7579377b488f21f8a2684646752d51f26f0f0dbe3602180bbaf0269d53449af4dba7810b9f382c5921d5b19b17c1209f244fff553eb54ede1e66ce1b890ad725d7e87d2b2065a7ecf7bde819b85e43732bd568d797554e827688214e1a3460bf9d195e26d2dd0b312decfc66eb2fffd9f7f4ce4423e60c53ad8eba8fd4e7473e8173452b9575cad54e9c2e44e4b1719f3d16268ab5816f38b7e09", 0xf8}, {&(0x7f0000000400)="68b22ac7b0ec9d8ee1f1053b0b4dd25a4c38098ccc55643e001000008961acd8e00c3637fe0000000004ec26d61c7afcfd9821708f9304b0f0c5d7e38d6bbcf89b1408f548f656ab41776fed18e51ba248e66d75cc15a71d5416718df374b617f8315cb601434840bae1b9940a6baefe44", 0x71}], 0x2, &(0x7f00000000c0)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0xb, 0x0, 0x5, [0x0, 0xfffffffd, 0x53, 0x4, 0x5]}, @ra={0x94, 0x4, 0x1}, @end]}}}], 0x30}}], 0x3, 0x40880d1) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000280)=ANY=[], 0x34}}, 0x28050) 1m34.915893031s ago: executing program 2 (id=3735): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x8000042, 0x1000003}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000dab3e0fff0ffffff18430000000000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m34.889185966s ago: executing program 4 (id=3736): syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x0, 0x0, @opaque="03000000"}}}}}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000a40)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x5, 0x2, 0xa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000ac0)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="6800000000090504000000000000000002000000090001007379003000000000140002800600010000020000050002000600000008000500000000002c0004800800070000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x2000000000000122, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a80)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x5a, &(0x7f0000000ac0)}, 0x9a) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6}]}) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000800)={r3, &(0x7f0000000700)='redirect\x00', 0xaa080, &(0x7f0000000740)={@_ha_fsid={[0x10000, 0x1]}, {0x10, 0x2, 0xfffffffa, 0x2}}, 0x100, &(0x7f0000000780), &(0x7f00000007c0)=0x4}) setsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000840)=0x9, 0x4) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x400}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000240)={'veth0_macvtap\x00', 0x200}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1010404, 0x4) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x168, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000001c0], 0x700, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x1, 0xeeb263aa66f41dcc, 'syz_tun\x00', 'dummy0\x00', 'nr0\x00', 'wlan0\x00', @multicast, [0xff, 0x0, 0x0, 0x0, 0xff], @random="a68146ce6ba5", [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0xa0, 0xd8, [], [@common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}], @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffe}}}}]}]}, 0x1e0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_mreqsrc(r8, 0x0, 0x26, &(0x7f0000000000)={@empty, @multicast1, @dev}, &(0x7f0000000040)=0xc) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000500)={{0x2, 0x4e24, @local}, {0x1, @broadcast}, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syzkaller0\x00'}) 1m34.723985031s ago: executing program 2 (id=3737): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {}, 0xfd}, 0x18) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd28}, 0x14}}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000001", @ANYRES16=r0, @ANYRES8=r1, @ANYRESHEX], 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r4}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000640)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000880)={&(0x7f00000008c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) 1m34.457920832s ago: executing program 3 (id=3738): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4c8d0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100060000001c0007800c00018008000140fffffffe0c00028008000140", @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4000050) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6c, r1, 0x20}, 0x38) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000017c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xa) connect$bt_rfcomm(r3, &(0x7f0000001800)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001680)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000016c0)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000001700)={&(0x7f0000001740)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000001780)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}], 0x18}, 0xc4) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001640)={r1, &(0x7f0000001580)="a8576065a34acd913186a149fee4c46b01c84bfe6c5239123a5b448ea5948b3b1582074a72e5c6a0b816a267b6f22cb59210ffc6b96dfbee2fb640d698ae9217a0338b54d2d7d3", &(0x7f0000001600)=@udp6, 0x4}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @alu={0x0, 0x0, 0xb, 0x9, 0x8, 0xffffffffffffffc0, 0x8}, @alu={0x7, 0x1, 0x5, 0x6, 0x5, 0x100, 0x4}, @generic={0x1, 0x3, 0x4, 0xc1a9, 0x1}, @call={0x85, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0xa, 0x9, 0xb, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000000}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000100)='syzkaller\x00', 0xf, 0x53, &(0x7f0000000140)=""/83, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x3, 0x6, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000240)=[{0x4, 0x3, 0xf, 0x4}, {0x1, 0x2, 0x1, 0x8}, {0x3, 0x4, 0x10, 0x8}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r4, 0x0, 0xeb, 0x65, &(0x7f0000000340)="848dc1091a4a3897be86db6b9c4da371adc298a4bde12b868bf748a60904f95e31a717d9164ea1411323c08edd313de9b87dda211d192084b12345c2dacaf4585477cf921d5b16f1221bf3ba235cb890e2e15a23e4513d940c396111a5c1ceaa5e515ed872a0963de6852e7a7b59c4b8eb6ccd2c6aa6ca0f742bbb4dac6d2c39a013205e55eb67eea02357937a6869b5c344b2db53d6113bde7b6995b97d319430dbd5c2a32094e7d221ea1655319f4a2a0fafcf2e16e26ee5818543307bca1acce6ed8d22bd2591ce81495dbca44f3cc28e60fbe206d96ed19d0d896df00783554675ce0bd50942a4c6f2", &(0x7f0000000440)=""/101, 0xa5, 0x0, 0x14, 0x1000, &(0x7f00000004c0)="f25e82935dc961f6de00f4cb0b274eca4457cfbe", &(0x7f0000000500)="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", 0x2, 0x0, 0x4}, 0x50) 1m34.186121147s ago: executing program 0 (id=3739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000002280)}, {0x0}], 0x2) 1m34.141818408s ago: executing program 2 (id=3740): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x4040}}], 0x2, 0x4040080) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, &(0x7f0000001480)={'sit0\x00', @random="5600230d1100"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x1007, &(0x7f0000000400)=""/4103, 0x41100, 0x68}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x70bd29, 0x25dfdc02, {0x7, 0x0, 0x0, r2, 0x2, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_FLAGS_EXT={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 1m33.84048535s ago: executing program 1 (id=3741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x9, 0x1}, 0x50) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x0, [], [0x0, 0x1], 0x0, [0x1]}, 0xffffffff}}, 0x4c}}, 0x4044804) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000008000500000000000800040000000014080006"], 0x2c}}, 0x0) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r4, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_mreq(r5, 0x29, 0x1d, 0x0, &(0x7f00000031c0)) connect$inet(r1, &(0x7f0000000580)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000005c0)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000600), 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40241, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0xc201}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000003180)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003140)={&(0x7f00000022c0)={0xe50, r9, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x2f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x5}, {0x5, 0x5}, {0x2, 0x4}, {0x2, 0xa}, {0x1, 0x9}, {0x3, 0x4}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x9}, {0x5, 0x5}, {0x4, 0x9}, {0x1, 0x4}, {0x2, 0x2}, {0x2, 0x7}, {0x3, 0x1}, {0x7, 0x7}, {0x0, 0x9}, {0x4, 0x2}, {0x3, 0x1}, {0x2}, {0x0, 0xa}, {0x0, 0x7}, {0x4, 0xa}, {0x6, 0x4}, {0x5, 0x2}, {0x0, 0x6}, {0x6, 0xa}, {0x2, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x4, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x7, 0xa}, {0x3, 0x5}, {0x4, 0x6}, {0x4, 0xa}, {0x5, 0x7}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x8}, {0x1, 0x7}, {0x5, 0x3}, {0x1, 0x5}, {0x6, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0x3}, {0x2, 0x8}, {0x0, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x12, 0x12, 0x60, 0x16, 0x0, 0x4, 0x60, 0x6, 0xc, 0x5, 0x9, 0x6, 0xb, 0x48, 0x60, 0x12, 0x30, 0x6, 0x30, 0x4, 0x18, 0x0, 0x9, 0x2]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x7}, {0x7, 0x9}, {0x1}, {}, {0x3, 0x8}, {0x1, 0x9}, {0x2}, {0x5, 0x7}, {0x5, 0xa}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x4}, {0x2, 0x7}, {0x1, 0x8}, {0x3, 0xa}, {0x6, 0x3}, {0x5, 0x2}, {0x2, 0x4}, {0x5, 0x7}, {0x2, 0x4}, {0x2, 0x2}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x8}, {0x3, 0x4}, {0x2, 0x4}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x9}, {0x2, 0x2}, {0x5, 0x4}, {0x4, 0xa}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x2}, {0x0, 0x7}, {0x2, 0x3}, {0x2, 0x6}, {0x5}, {0x5}, {0x3}, {0x5, 0x7}, {0x1, 0x8}, {0x7, 0x18}, {0x3}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x6}, {0x1, 0x7}, {0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x6, 0x8}, {0x5, 0x7}, {0x2, 0x2}, {0x1, 0x9}, {0x6, 0x9}, {0x4, 0x3}, {0x6, 0x9}, {0x0, 0x3}, {0x2, 0x5}, {0x7, 0xa}, {0x7, 0x1}, {0x2, 0x9}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x4}, {0x2, 0x6}, {0x0, 0x1}, {0x6, 0x3}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x1}, {0x6, 0x4}, {0x5, 0x6}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x7}, {0x5, 0x7}, {0x1, 0x2}, {0x4, 0x3}, {0x0, 0x7}, {0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x5, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x2, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x962, 0x6e, 0x5, 0x400, 0xa8, 0x7, 0x1]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x36, 0x5, 0x60, 0x12, 0x3, 0x4, 0x9, 0x1, 0x12, 0x12, 0x2, 0x1, 0x12, 0xb, 0x24, 0x30, 0x16, 0x4, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x1ff, 0xc, 0x5, 0x101, 0x0, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbe4b, 0x4, 0x5, 0x401, 0x2, 0x8001, 0x6, 0x100]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0xc, 0x24, 0x36, 0x16, 0xb, 0x3, 0x48, 0x2, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x2, 0x6, 0xb, 0x24f7, 0xfff1, 0x73ab]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x1, 0x24, 0x12, 0xb, 0x2, 0x4, 0x48, 0x3, 0x9, 0x1b, 0x24, 0x5, 0x2, 0x30, 0x5, 0x0, 0x9]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x2, 0x9}, {0x7, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x7, 0x1}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x5}, {0x1, 0x7}, {0x2, 0x9}, {0x7, 0x2}, {0x1, 0x5}, {0x2, 0x9}, {0x0, 0xa}, {0x7, 0x1}, {0x0, 0x7}, {0x4}, {0x1}, {0x4}, {0x1, 0x3}, {0x3, 0x6}, {0x3, 0x6}, {0x4, 0x15}, {0x0, 0x7}, {0x5, 0x7}, {0x3, 0x5}, {0x6, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x6, 0xb, 0x4, 0x7, 0xfff7, 0x7]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x2, 0x9}, {0x7, 0x9}, {0x4, 0x5}, {0x6, 0xa}, {0x2, 0xa}, {0x3, 0x5}, {0x7, 0x9}, {0x4, 0x7}, {}, {0x2, 0x2}, {0x6, 0x1}, {0x0, 0x9}, {0x5, 0x4}, {0x6, 0x2}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x1}, {0x2, 0x3}, {0x2, 0x9}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x2}, {0x4, 0x2}, {0x4, 0x9}, {0x1, 0x1}, {0x4, 0x2}, {0x1, 0x5}, {0x0, 0x8}, {0x6, 0xa}, {0x3, 0x3}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x60, 0x55, 0x4, 0x12, 0x2, 0x12, 0x4, 0x5]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x1}, {0x3, 0x6}, {0x0, 0x5}, {0x4, 0x1}, {0x5, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x8}, {0x7, 0x7}, {0x2, 0x5}, {0x0, 0x6}, {0x7, 0x7}, {0x0, 0x8}, {}, {0x5, 0x8}, {0x7}, {0x5, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x2}, {0x0, 0xa}, {0x5, 0x6}, {0x4, 0x8}, {0x0, 0x5}, {0x3}, {}, {0x1, 0x3}, {0x2, 0x7}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x6}, {0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x2, 0x3}, {0x4, 0xa}, {0x4, 0xa}, {0x6}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x6, 0x5}, {0x0, 0x8}, {0x5, 0x7}]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x1}, {0x7, 0x1}, {0x6, 0x7}, {0x3, 0x8}, {0x5, 0x1}, {0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x2, 0x7}, {0x7, 0x3}, {0x6, 0x5}, {0x7, 0x7}, {0x7, 0x1}, {0x7, 0x8}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x6}, {0x1, 0x4}, {0x1}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x4}, {0x2, 0x8}, {0x7, 0x1}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x7}, {0x6, 0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x3, 0x8}, {0x5, 0x2}, {0x7, 0x9}, {0x0, 0x8}, {0x6, 0x9}, {0x4, 0x9}, {0x6, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {0x3}, {0x5, 0x3}, {0x6, 0x5}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd2b, 0x9, 0x1ff, 0x8, 0xb9b, 0x99d, 0x80, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x4}, {0x6, 0x5}, {0x6, 0x6}, {0x2, 0x4}, {0x0, 0xa}, {0x6, 0xf}, {0x6, 0x1}, {0x4, 0x1}, {0x0, 0x6}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0x7}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0xa}, {0x7, 0x5}]}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1000, 0x40, 0x6, 0xd36, 0x800, 0xf, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0xa}, {0x5, 0x7}, {0x3, 0x2}, {0x5, 0x4}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0x9}, {0x6, 0x8}, {0x1, 0xa}, {0x6, 0x6}, {0x1, 0x4}, {0x2, 0x6}, {0x6, 0x8}, {0x4, 0x1}, {0x1, 0x7}, {0x0, 0x3}, {0x7, 0x7}, {0x1, 0x9}, {0x1}, {0x1, 0x6}, {0x5, 0xa}, {0x4, 0x3}, {0x1, 0x1}, {0x0, 0x4}, {0x2, 0x9}, {0x2, 0x9}, {0x5, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x4}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0x4}, {0x4, 0x5}, {0x2, 0x4}, {0x4, 0x9}, {0x4, 0x9}, {0x5, 0x9}, {0x6, 0x8}, {0x5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x6, 0x4}, {0x2, 0x4}, {0x6, 0x8}, {0x7, 0x8}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x5, 0x4}, {0x7, 0x2}, {0x4, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x4}, {0x2}, {0x2, 0x7}, {0x2, 0x5}, {0x2, 0x8}, {}, {0x5}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x5, 0xf0b, 0x5, 0x7fff, 0xe194]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xce, 0x833, 0x4, 0xffff, 0x7, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x1}, {0x5, 0x6}, {0x4}, {0x4, 0x2}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xc, 0x9, 0x23, 0x8, 0x9, 0xfff8, 0xfffc]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0xb, 0x18, 0x59, 0x18, 0x16, 0x7, 0x6, 0x1, 0x48, 0x3, 0x6, 0x6c, 0x2, 0x30, 0x60, 0x60, 0x6c, 0x5, 0x55064e970f543885, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x4, 0xfffa, 0x6, 0x1, 0x7, 0x7a]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x5, 0x1b, 0x2, 0x9, 0x16, 0x1, 0x4, 0x6, 0x48, 0x5, 0x24, 0x12, 0x9, 0x16, 0x60]}]}]}, @NL80211_ATTR_TX_RATES={0x27c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x4}, {0x4, 0x3}, {0x3, 0x9}, {0x5, 0x9}, {0x3, 0x5}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x4, 0x7}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x2}, {0x7, 0x3}, {0x1, 0x3}, {0x3, 0xa}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0xa}, {0x1, 0x2}, {0x6, 0x1}, {0x2}, {0x2, 0x5}, {0x1, 0x7}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x6, 0x8}, {0x6, 0x9}, {0x3, 0x8}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x2, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x7, 0x7}, {0x3, 0x8}, {0x5, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x1, 0x8}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x12, 0x5c, 0x9, 0x0, 0x24, 0x36, 0x70, 0x9, 0x18, 0xc, 0x9, 0x6c, 0x12, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xa2b0, 0x8001, 0xfffe, 0x8001, 0x0, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4800, 0xfffc, 0x9, 0x80, 0xffc0, 0x9]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6, 0x3, 0x48, 0x30, 0xb, 0x16, 0x16, 0x12, 0x6, 0x1, 0x24, 0x24, 0x48, 0x6, 0x4, 0x2, 0x6c, 0x30, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7f, 0xad, 0x0, 0x6, 0x1, 0x6, 0xe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x77, 0x106d, 0x8, 0x9, 0x4, 0x2, 0x3ff, 0xc000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0x8}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x1, 0xa}, {0x1}, {0x5, 0x8}, {0x5, 0xa}, {0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x4, 0x7}, {0x2}, {0x7, 0x5}, {0x2, 0x9}, {0x6, 0x9}, {0x6, 0x5}, {0x5, 0x1}, {0x4, 0x9}, {0x2, 0x3}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x4}, {0x2, 0x5}, {0x4, 0x3}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0x5}, {0x2}, {0x0, 0x8}, {0x0, 0x3}, {0x3, 0xa}, {0x1, 0x8}, {0x0, 0x7}, {0x7}, {0x6, 0x2}, {0x7, 0x3}, {0x2, 0x6}, {0x1, 0x7}, {0x4, 0x8}, {0x1}, {0x6, 0x1}, {0x2, 0x7}, {0x5, 0x4}, {0x5, 0x1}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x1}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x0, 0x40, 0xfff7, 0x7, 0x7, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x6, 0x6c, 0x6, 0x60, 0x3, 0x16, 0x6, 0x4, 0x6c, 0x36, 0x5, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x80, 0x0, 0x7f, 0x703, 0x0, 0x401, 0x5d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa, 0xffff, 0x7, 0x5, 0x5, 0x0, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x5}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x7, 0x0, 0x24, 0x16, 0x4, 0x1b, 0x7, 0x1b, 0x5, 0x3, 0x36, 0xb, 0x18, 0x18, 0x60, 0x5, 0x3, 0x24, 0x1b, 0x5, 0x24, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x9, 0xfff7, 0x0, 0x7, 0x4, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x65d5, 0x8, 0x9, 0x0, 0x4, 0x5, 0xa]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x2, 0x1}, {0x3}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xa}, {0x2, 0xa}, {0x1, 0x4}, {0x0, 0x9}, {0x1, 0x4}, {0x5, 0x5}, {0x2, 0x5}, {0x3, 0x9}, {}, {0x0, 0x4}, {0x2, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x5, 0xa}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x7, 0x1}, {0x3, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x6, 0x5}, {0x6, 0x6}, {0x7, 0x4}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x84c0, 0x0, 0x1, 0x0, 0xf, 0x688]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x2}, {0x1, 0xa}, {0x2, 0x2}, {0x2, 0x7}, {0x1, 0x4}, {0x2, 0x3}, {0x6, 0x9}, {0x4, 0x4}, {0x3, 0x8}, {0x7, 0x7}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0x2]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x6, 0x3a, 0x6, 0x9, 0x9, 0x3, 0x48, 0x24, 0x5, 0x12, 0x1b, 0x48, 0xb, 0x30, 0x6, 0x1, 0x7343827ab1a12f82, 0x12, 0x12, 0x2, 0x12, 0x6, 0x60, 0x5, 0xb, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x101, 0x6, 0x2, 0x7ff, 0x89, 0x881a, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x3, 0x9, 0x5, 0x60, 0xd8]}]}]}, @NL80211_ATTR_TX_RATES={0x304, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x9, 0x200, 0x1600, 0x1ff, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x0, 0x30, 0x7, 0x0, 0x1, 0xa857]}}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0x4}, {0x7}, {0x7, 0x8}, {0x2, 0x3}, {0x3, 0xa}, {0x3, 0x6}, {0x1, 0x4}, {0x3, 0x6}, {0x6, 0x9}, {0x6, 0x3}, {0x3, 0x9}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x6}, {0x5, 0x3}, {0x6, 0x8}, {0x0, 0x9}, {0x5, 0x2}, {0x1, 0x2}, {0x1, 0x5}, {0x4, 0x4}, {0x6, 0x5}, {0x4, 0x8}, {0x3, 0x5}, {0x3}, {0x3, 0x2}, {0x2, 0x1}, {0x7, 0x2}, {0x1}, {0x5}, {0x3}, {0x3, 0xa}, {0x5, 0x2}, {0x2, 0x2}, {0x2}, {0x0, 0x2}, {0x6, 0x7}, {0x6, 0x5}, {0x7, 0x5}, {0x5, 0x7}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x1}, {0x4, 0x4}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x8}, {0x6, 0x7}, {0x7, 0x2}, {0x4, 0x9}, {0x2, 0x1}, {0x4, 0x9}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x8}, {0x4}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x8}, {0x2, 0x7}, {0x6, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x1, 0x1}, {0x6, 0x4}, {0x3, 0x3}, {0x6, 0x7}, {0x0, 0x4}, {0x6, 0x9}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xbd, 0x7, 0x8a, 0xe8, 0xcf3, 0x5, 0xb]}}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1d, 0x4, 0x2, 0x3, 0x0, 0x7, 0xef5, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x9, 0x2, 0x3, 0x200, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x5}, {0x3, 0x6}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x5}, {0x5, 0x6}, {0x2, 0x3}, {0x4, 0x7}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x5, 0x3, 0xb, 0x10, 0x0, 0x400, 0xffff]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x1}, {0x5, 0x3}, {0x5, 0xa}, {0x7, 0x6}, {0x4, 0x6}, {0x4, 0x4}, {0x3, 0x6}, {0x1, 0x5}, {0x3, 0x1}, {0x3, 0x3}, {0x2, 0x2}, {0x4, 0xa}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0xc, 0x6]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf57a, 0x64, 0x5, 0x1000, 0x9, 0x4, 0x7, 0x4f45]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x1, 0x7, 0x80, 0x2, 0x100, 0x80, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7fff, 0x41cf, 0x5, 0x3, 0x0, 0xddfb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x3}, {0x7, 0x5}, {0x2, 0xa}, {0x4, 0x3}, {0x2, 0x6}, {0x1, 0x8}, {0x2, 0x7}, {0x7, 0x3}, {0x2, 0x9}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0x1}, {0x7, 0x8}, {0x2, 0x7}, {0x4}, {0x7, 0x8}, {0x7, 0xa}, {0x6, 0x2}, {0x6, 0x3}, {0x7, 0x4}, {0x6, 0x6}, {0x3, 0xa}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0x8}, {0x4, 0x4}, {0x1, 0x4}, {0x4}, {0x1, 0x6}, {0x6, 0x7}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0xa}, {0x1, 0x4}, {}, {0x4, 0xa}, {0x0, 0x8}, {0x2}, {0x0, 0x2}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x2}, {0x6, 0x5}, {0x3, 0x1}, {0x5, 0x3}, {0x5, 0x4}, {0x1, 0x1}, {0x4, 0x6}, {0x4, 0x2}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xffff, 0x7, 0x9, 0xbd8, 0x81, 0x9720, 0xf8a5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0x9, 0x16, 0x1, 0x3, 0x0, 0x2, 0x36, 0x1b, 0x24, 0x24, 0x24, 0x1, 0x9, 0x0, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x3b, 0x1, 0xffc0, 0xbe63, 0x7, 0x7, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0x16, 0x12, 0x3, 0x9, 0x48, 0x2, 0x12, 0x4, 0x30, 0xd, 0x2, 0x57, 0x1b, 0x6, 0x6c, 0x14, 0x6c, 0x18, 0x1, 0x1b, 0x18, 0xb, 0x24, 0x6c, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x34, 0x0, 0x6, 0x8, 0x3, 0x3]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x9}, {0x4, 0x9}, {0x5, 0x5}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x7}, {0x5, 0x1}, {0x7, 0x4}, {0x7, 0x4}, {0x3, 0x2}, {0x4, 0x7}, {0x3, 0x8}, {0x6, 0x8}, {0x7, 0x9}, {0x4, 0xa}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x4}, {0x1, 0x2}, {0x6}, {0x6, 0x2}, {0x2, 0x6}, {0x2, 0x5}, {0x2}, {0x6, 0x6}, {0x2, 0xa}, {0x3, 0x6}, {0x5, 0x9}, {0x1}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x9}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x1, 0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x3}, {0x0, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x1, 0x8}, {0x7}, {0x4}, {0x0, 0x8}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x3, 0x8, 0x8, 0x6, 0x7, 0x3664]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x16, 0xb, 0x48, 0x1, 0xc, 0x30, 0xc, 0xc, 0x0, 0xc, 0x2, 0x16, 0x4, 0xc, 0x1, 0x24, 0x1, 0x12, 0xb, 0x1, 0x52, 0x12]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6000, 0x4, 0x6, 0x4, 0x3ff, 0x28a2, 0xe]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0x2, 0x60, 0x5]}]}]}, @NL80211_ATTR_TX_RATES={0x17c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x5, 0x5}, {0x1}, {}, {0x6, 0xa}, {0x1, 0x3}, {0x5, 0x4}, {0x3, 0x1}, {0x2}, {0x0, 0xa}, {0x6, 0x8}, {0x6, 0x5}, {}, {0x6, 0x2}, {0x5, 0x3}, {0x7, 0x1}, {0x4}, {0x1, 0x7}, {0x2, 0x8}, {0x7, 0x8}, {0x6, 0x8}, {0x4, 0x1}, {0x0, 0xa}, {0x6, 0x7}, {0x5, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x1}, {0x2, 0x5}, {0x5, 0x8}, {0x5}, {0x1}, {0x7, 0x9}, {0x0, 0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x7}, {0x2}, {0x1, 0xa}, {0x1, 0x3}, {0x6, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0x9}, {0x1, 0x8}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0x8}, {0x7, 0xa}, {0x2, 0x5}, {0x7, 0x1}, {0x7, 0x8}, {0x2, 0x5}, {0x0, 0x9}, {0x2, 0xa}, {0x3, 0x8}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x5}, {0x6, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x36, 0x5, 0x5, 0x4, 0x60, 0x6c, 0x18, 0xc, 0x18, 0x5c, 0x2, 0x5, 0x2, 0x0, 0x30, 0x0, 0x30, 0x4d, 0x36, 0x6c, 0x1b, 0x4, 0x5, 0x16, 0x30, 0xb, 0x1b, 0x9, 0x65, 0x5, 0x36]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1b, 0x6c, 0x6, 0x2, 0x30, 0x36, 0x48, 0xb, 0x4, 0x48, 0x2e, 0x2, 0x2, 0x1a, 0x6, 0xc, 0x60, 0x5, 0x35]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8001, 0xa, 0x1000, 0x8, 0x80, 0xa, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0xe, 0x2, 0x9, 0x100, 0x3ff, 0xc]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x2, 0x1}, {0x0, 0x8}, {0x6, 0x8}, {0x3, 0x1}, {}, {0x2, 0x9}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0x7}, {0x6, 0x5}, {0x7, 0x8}, {}, {0x1, 0x2}, {0x3}, {0x3, 0x5}, {0x1, 0x5}, {0x6, 0x5}, {0x2, 0x7}, {0x3}, {0x0, 0x9}, {}, {0x7, 0x6}, {0x4, 0x6}, {0x0, 0x2}, {0x4, 0x4}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0xa}, {0x5, 0x8}, {0x5, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x7, 0xa}, {0x7, 0x9}, {0x7, 0x4}, {0x7, 0x1}, {0x1, 0x9}, {0x5, 0xa}, {0x0, 0x7}, {0x1, 0x3}, {0x2}, {0x5, 0x7}, {0x2, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x3}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x7}, {0x7, 0x4}, {}]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x5}, {0x1, 0x6}, {0x7}, {0x0, 0x2}, {0x2, 0x3}, {0x7, 0x2}, {0x5, 0x3}, {}, {0x1, 0xa}, {0x3, 0x2}, {0x5, 0x4}, {}, {0x1, 0x9}, {0x6, 0x9}, {0x2, 0x1}, {0x5, 0x5}, {0x4}, {0x1, 0x8}, {0x6, 0x6}, {0x6, 0xa}, {0x7, 0xa}, {0x2, 0x3}, {0x1, 0x4}, {0x0, 0x8}, {0x2, 0x8}, {0x3, 0xa}, {0x0, 0x6}, {0x3, 0xa}, {0x3, 0x4}, {0x2, 0x4}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x5, 0x4}, {0x0, 0x4}, {0x5, 0x3}, {0x7, 0xa}, {0x6, 0x4}, {0x7, 0x4}, {0x5, 0xa}, {0x3}, {0x7, 0x2}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x8}, {0x3, 0xa}, {0x5, 0x1}, {0x7, 0x7}, {0x5, 0x3}, {0x0, 0x2}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0x9}, {0x5, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x6, 0x7}, {0x3}, {0x3, 0xa}, {}, {0x1}, {0x4, 0x8}, {0x0, 0x5}, {0x3, 0x6}, {0x5, 0x2}, {0x7, 0x4}, {0x6, 0x8}, {0x7, 0x9}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x3}, {0x6, 0x8}, {0x7, 0x8}, {0x4, 0x5}, {0x1}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0x4}, {0x3}, {0x5}, {0x7, 0x8}, {0x5, 0x4}, {0x4}, {0x1, 0x6}, {0x5, 0x6}, {0x6, 0x6}, {0x5, 0x1}, {0x5, 0x4}, {0x4, 0x8}, {0x7, 0x9}, {0x4, 0x8}, {0x5, 0x5}, {0x0, 0x3}, {0x2}, {0x3, 0x3}, {0x5}, {0x3, 0x1}, {0x1, 0x2}, {0x1, 0x3}, {0x3, 0x3}, {0x0, 0x9}, {0x3, 0x7}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x4, 0x0, 0x2, 0x48, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x422, 0x9, 0x2, 0x9, 0x4, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x9, 0xb, 0x16, 0x16, 0x7, 0x36, 0x10, 0xb, 0x6, 0x1, 0x6, 0x74, 0x12, 0x24, 0x4, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x3}, {0x0, 0x3}, {0x1, 0x8}, {0x3, 0x7}, {0x2, 0x6}, {0x3, 0x6}, {0x5}, {0x0, 0x1}, {0x0, 0x3}, {0x4, 0x3}, {0x2, 0x4}, {0x3, 0x5}, {}, {0x1, 0x4}, {0x3, 0x6}, {0x2}, {0x4, 0x2}, {0x5, 0x7}, {0x7, 0x5}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0x6}, {}, {0x3, 0xa}, {}, {0x5, 0x4}, {0x0, 0xa}, {0x7, 0x1}, {0x4, 0x5}, {0x1, 0x5}, {0x0, 0x5}, {0x4, 0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x6, 0xa}, {0x2, 0xa}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x9}, {0x2, 0x3}, {0x2, 0x6}, {0x7, 0x2}, {0x0, 0x2}, {0x7, 0xa}, {0x7, 0x2}, {0x1, 0x2}, {0x4, 0x4}, {0x3, 0x7}, {0x7, 0x3}, {0x6, 0x6}, {}, {0x1, 0x3}, {0x7, 0xa}, {0x1, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0x3, 0xc, 0x36, 0x16, 0x60, 0x24, 0xb, 0x24, 0x9, 0x30, 0xb, 0x18, 0x4, 0x5, 0x1b, 0xd, 0x9, 0x60]}]}]}, @NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x2, 0xda, 0x8, 0xffff, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0xae1e3db54e70759f}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x10, 0x8, 0x9, 0x5, 0x10, 0xf8e5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x0, 0xfd0, 0x1, 0xb, 0x9, 0x2]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0xa}, {0x0, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x6}, {0x2, 0x6}, {0x6, 0x7}, {0x7, 0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x7, 0x2}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0xa}, {0x2}, {0x0, 0x6}, {0x7, 0x5}, {0x7}, {0x3, 0x5}, {0x5, 0x3}, {0x4, 0x4}, {}, {0x7, 0x1}, {0x6}, {0x2, 0x9}, {0x0, 0x6}, {0x6, 0x8}, {0x1}, {0x4, 0x2}, {0x5, 0x9}, {0x0, 0x2}, {0x3}, {0x4, 0x4}, {0x1, 0x1}, {0x0, 0x9}, {0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x7, 0x5}, {0x0, 0x8}, {0x2, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x7, 0x3}, {0x4, 0x6}, {0x1, 0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x7}, {0x6}, {0x7, 0x3}, {0x3, 0x4}, {0x4, 0x1}, {0x4, 0x7}, {0x4, 0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x2, 0x2}, {0x1, 0x2}, {0x3, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x7, 0x1}, {0x1}, {0x4, 0x8}, {0x1, 0x6}, {0x3, 0x3}, {0x1, 0x4}, {0x2, 0x8}, {0x4, 0x8}, {0x6, 0x1}, {0x2, 0x5}, {0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x3}, {0x4, 0x5}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x2}, {0x7, 0xa}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{}, {0x0, 0xa}, {0x7, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x2, 0x9}, {0x6, 0x8}, {0x4, 0x9}, {0x4}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x6c, 0x6c, 0x18, 0x1b, 0x30, 0x30, 0x0, 0x30, 0x2, 0x6c, 0x60, 0x60, 0x3, 0x18, 0x0, 0x3, 0x5, 0x30, 0xb, 0x1b]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0xb, 0x24, 0x6, 0x1b, 0x48, 0x1, 0xb, 0x16, 0x36, 0x5, 0x5, 0x9, 0x4, 0x4, 0x12, 0x48, 0xc, 0x18]}]}]}]}, 0xe50}, 0x1, 0x0, 0x0, 0x20000004}, 0x20) sendmsg$nl_route_sched(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newtfilter={0x884, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x9, 0x3, 0x5, {0x7, 0x2, 0x3, 0x6, 0x4824, 0x94}, {0x4, 0x1, 0x5, 0xfffa, 0x1, 0x7}, 0x6, 0xa1aa, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x1, 0x0, 0xe3a1, 0x9, 0x2, 0x1693, 0x9, 0xffffffff, 0xffffffff, 0x10000, 0x80, 0xfffffe01, 0x3, 0x1ff, 0x5, 0x8, 0x5, 0x2, 0x80000000, 0x1, 0x7, 0x3, 0xb3, 0xfffffbff, 0xc, 0xfc4, 0x5, 0x2, 0x5, 0x9, 0x34e, 0x3, 0x8, 0x3ff, 0x3, 0x9, 0x7, 0x7fffffff, 0x4, 0x6, 0x97f, 0xde, 0xd, 0x7, 0x2, 0x481d, 0x7fffffff, 0x0, 0x5, 0x4a09, 0xa63, 0x7fe, 0x3, 0x9, 0xcb, 0x3, 0x7, 0xffff45cc, 0x7, 0x8, 0x1, 0x5, 0xcbb, 0x8, 0x8662, 0x3, 0x9, 0x5, 0xffff, 0x27, 0xfffffffa, 0x8000, 0x1, 0x2, 0xfff, 0x8, 0x5, 0x1400000, 0x2, 0x40, 0x48, 0xa64, 0x40, 0x8, 0x2, 0xf, 0x0, 0x2, 0x7, 0x9, 0x400, 0x10000, 0x0, 0x5, 0x9, 0x7, 0x2, 0x6, 0x0, 0x3, 0x4, 0x2, 0x1, 0x2, 0x17141ccd, 0x3, 0x80000001, 0xfffffffb, 0xffffffe7, 0xff, 0x0, 0x20000000, 0x2, 0x6, 0x5, 0x9, 0x4b, 0x6, 0x8, 0x8, 0x200, 0x218d, 0x4, 0x4, 0x3ff, 0x1, 0xff, 0x3, 0x0, 0x2, 0x4, 0x1000, 0x6, 0x2, 0xffff2238, 0x9, 0xeaa8, 0x4, 0x8, 0x6, 0x9, 0xfe0c, 0xffffffff, 0xffffff81, 0x7, 0x8, 0x8001, 0x1000, 0xfff, 0x9, 0x1, 0x5, 0xfffffff7, 0x37, 0x78, 0x4, 0x9, 0x5, 0x5, 0x2, 0xfffffffb, 0x800, 0x62e, 0x5, 0xbb, 0x84, 0x3, 0x6, 0xc17e, 0x3, 0x6, 0xffffffff, 0xb, 0x3, 0x8, 0x1, 0x0, 0xef, 0xfffffffe, 0x8, 0x6, 0x9ad1, 0x5, 0x3, 0x4, 0x5, 0xb, 0xe, 0xfffffc01, 0x5, 0x39, 0x2, 0xb, 0x7fff, 0x74, 0x200, 0x200003, 0x0, 0xe1, 0x974, 0x2, 0x9, 0xfffffff9, 0x2, 0x9, 0x7, 0x2e, 0xfffffffa, 0x5fb, 0x7fffffff, 0x271a, 0x5, 0x2, 0x7, 0x56, 0x2, 0x5, 0xdd3, 0x4, 0x9, 0x9, 0x1, 0x4, 0xf, 0x400, 0x2, 0x800, 0x7, 0x0, 0xfffffffe, 0x1, 0x3, 0x3, 0x8, 0x3718, 0x6, 0xf, 0x8, 0x6, 0x1ff, 0x20000, 0x8, 0x7, 0x3, 0xfffffff8, 0x4, 0x0, 0x6, 0x5d, 0x49, 0x2, 0x8, 0x2, 0x3ff, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x8, 0x4d2a, 0x1, 0x5, 0x9, 0x0, 0x3, 0x8000, 0xffffba77, 0x9, 0x5, 0x4, 0x7, 0x3, 0xf, 0x4f0c, 0x4, 0x8000, 0x5, 0x10001, 0x1000, 0x0, 0x2, 0x3, 0x2, 0x8, 0xec, 0x800, 0x7f, 0x7, 0x1, 0x8, 0x0, 0xebe, 0x4, 0x5, 0x8e0, 0xfffffff9, 0x402a, 0x5, 0x1, 0x80000000, 0xcfc, 0x8, 0xffffff01, 0x9, 0x6, 0x1, 0x80000001, 0xffffffff, 0x8, 0x9, 0xffffffff, 0x7, 0xb90f, 0x7ff, 0x20, 0x0, 0x1, 0x5, 0x4, 0x1, 0xb1, 0x11d, 0x7e, 0x3, 0x800, 0x1, 0x2, 0x3, 0xccb, 0x7, 0x2, 0x9, 0xfffffff7, 0x6, 0x7b, 0x80, 0x304, 0x3, 0xc7, 0x8, 0x5, 0x1, 0x9, 0x2, 0x5, 0x0, 0x7, 0xfffffffa, 0x2, 0xa2, 0x8001, 0x3, 0xa, 0xd563, 0x7fff, 0x1, 0x53e468b3, 0x5, 0x3, 0x314, 0x400, 0x4, 0xffff, 0x800, 0xb, 0x5, 0x1, 0x7d, 0x0, 0xea34, 0x0, 0x7, 0x68d, 0x2, 0x6, 0x200, 0x10000, 0x793d, 0x7, 0x876d, 0xfffff800, 0x5, 0xfff, 0x6, 0x5, 0x0, 0xfffffff9, 0x1, 0x5, 0x5c88, 0x6, 0x80, 0x75e, 0x9, 0x8, 0x1ff, 0x7fffffff, 0x7, 0x81, 0xffffffff, 0x35, 0x0, 0x81, 0x101, 0x100, 0x52, 0x0, 0x9, 0x0, 0xfffffc00, 0xfffffffc, 0x6, 0x7fffffff, 0x9, 0x5, 0x6, 0x400, 0x6, 0x8001, 0x7, 0xfffff144, 0x5, 0x6, 0x200, 0x5, 0x4, 0x9, 0x7, 0x1, 0x9, 0xfff, 0xe, 0x7, 0x4, 0x3, 0x601f, 0x800, 0x6, 0x9, 0x7, 0x3, 0x7, 0x400, 0x9, 0x3, 0x8, 0x9, 0x9, 0x9, 0x3, 0x0, 0x3ee, 0x4, 0x62cb, 0x3ff, 0x2, 0x52, 0xfffffff9, 0xffffffff, 0xb62, 0x1, 0x10000, 0x9c8, 0x1, 0x80000001, 0x6eb, 0x4cc7, 0x2, 0x4, 0xbd9e, 0xfff, 0x7, 0x8, 0x2, 0x4, 0x1, 0x400, 0x3, 0xbf, 0x5, 0x5, 0x80000000, 0x2, 0x8, 0xfffffb1a, 0x81, 0x3, 0x7, 0x9e80, 0x100, 0x10, 0xc, 0x0, 0x2, 0x1, 0x5000000, 0x80000001, 0x8, 0x8d80, 0x4609, 0x3, 0x46b, 0x9, 0x4, 0x7, 0x6, 0x6, 0x200, 0x8, 0x8, 0x0, 0x1ff]}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x57}}]}, 0x884}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) connect$inet(r1, &(0x7f00000021c0)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001840)={0xffffffffffffffff, 0x20, &(0x7f0000001800)={&(0x7f0000000080)=""/73, 0x49, 0x0, &(0x7f0000000800)=""/4096, 0x1000}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m33.486625395s ago: executing program 3 (id=3742): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010", @ANYRES32=0x0, @ANYBLOB="096d050025100400280012800b00010067656e657665000018000280060005004e240000050008000000000004000600"], 0x50}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c155}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0xfffc}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x767c78b0}]}}}]}, 0x44}}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r4, 0xd371f000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="09000000170000000a0000004000000042000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r6, 0x80047453, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0), &(0x7f0000001800), 0x1000, r5}, 0x38) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000040)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000280)={r8, 0x1, 0x6, @remote}, 0x10) 1m33.319665732s ago: executing program 2 (id=3743): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x6, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)={{0x0, 0x8, 0x0, 0x67f6, 0x3, 0x4, 0x7ff, 0x22, 0x1, 0x90000, 0x0, 0xfffffffffffffff8, 0x9, 0x6, 0x8001}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000500)={r4, 0x2}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc040, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001500)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000001580)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000015c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001600), 0x12) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000240)={0x2, @in={{0x2, 0x4e20, @broadcast}}, [0x323, 0x6, 0x6, 0x3, 0x2e80000000000000, 0xae, 0x0, 0x5, 0xf8, 0x1, 0xa, 0x1, 0x2, 0x9, 0xed2]}, &(0x7f0000000340)=0x100) pread64(r7, &(0x7f0000001640)=""/4103, 0x1007, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x2, &(0x7f0000000200)=@raw=[@generic={0xbf, 0x1}, @generic={0x95}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m33.260158166s ago: executing program 0 (id=3744): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xff8, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x700, 0x8, 0x10001, 0xffffffff, {{0x3c, 0x4, 0x2, 0x27, 0xf0, 0x66, 0x0, 0x5, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x3e, 0x0, [{0x6, 0xa, "39fac75c78daf7a0"}, {0x2, 0x6, "f7533996"}, {0x7, 0x8, "52cf24011815"}, {0x7, 0xc, "afc8da4c3d0cb68b9af2"}, {0x0, 0xd, "76b851fcdc19338d6a3f64"}, {0x6, 0x7, "dddb216791"}]}, @timestamp_prespec={0x44, 0xc, 0x6b, 0x3, 0x9, [{@private=0xa010101, 0x278}]}, @cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x7, 0x7, "3db8f23b26"}, {0x6, 0x5, "7c4499"}, {0x0, 0x6, "d0cc74cd"}, {0x6, 0x6, "5c20835e"}, {0x0, 0x8, "1720b41bf779"}, {0x6, 0x6, "752d0bce"}]}, @timestamp_prespec={0x44, 0x3c, 0x6e, 0x3, 0x0, [{@remote, 0x8000}, {@private=0xa010100, 0x7}, {@local, 0x2}, {@loopback, 0xfffff72e}, {@local, 0x5}, {@rand_addr=0x64010101, 0x4}, {@private=0xa010100, 0x1}]}, @cipso={0x86, 0x28, 0x3, [{0x5, 0x3, "fc"}, {0x0, 0x6, "b9760282"}, {0x6, 0xb, "06dcd0b7fb91d9a82f"}, {0x7, 0xe, "a847ff9e3101bd8ad387bcfb"}]}, @end]}}}}}) (async, rerun: 32) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008000)) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1m33.216288555s ago: executing program 4 (id=3745): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c20098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0xc090) 1m33.155577909s ago: executing program 1 (id=3746): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0xd4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xa4, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x401}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xd4}}, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x3) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffc, @mcast2, 0x3}, 0x1c) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)='{b', 0x2}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)={0x18, 0x26, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@typed={0x4, 0x117, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r6, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000880}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0xd4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xa4, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x401}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xd4}}, 0x0) (async) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x3) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffc, @mcast2, 0x3}, 0x1c) (async) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)='{b', 0x2}], 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)={0x18, 0x26, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@typed={0x4, 0x117, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) (async) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r6, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000880}, 0x10) (async) 1m33.075545474s ago: executing program 0 (id=3747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000300)={@void, @val={0x3, 0x3, 0x8, 0x13, 0x16, 0xc}, @ipv4=@icmp={{0x5, 0x4, 0x3, 0x37, 0x30, 0x64, 0x0, 0xf5, 0x1, 0x0, @multicast2, @loopback}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x1, 0xfffd, {0x5, 0x4, 0x2, 0x5, 0x6, 0x64, 0x2, 0x8, 0x8, 0x1, @loopback, @empty}}}}, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x12, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ldst={0x2, 0x3, 0x6, 0x3, 0xb, 0xffffffffffffffc0, 0xfffffffffffffff0}, @cb_func={0x18, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m33.005479118s ago: executing program 4 (id=3748): syz_emit_ethernet(0x9e, &(0x7f0000000600)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x2b}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @dstopts={0x11}, @dstopts={0x87}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x124, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf5a0}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb95}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa90d}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xab}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x124}, 0x1, 0x0, 0x0, 0x40400c4}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x34, r3, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="b40000000000000079b048000000000079b03800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f0000000e00)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000e40)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x36) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x2, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x7, 0x5aa, 0xef35}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000c40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xd7f8029dc17921cc}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x6c, r3, 0xa04, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xf}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040020}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c0016"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r8 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) sendmsg$inet(r10, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x58}, 0x40000100) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0xd, &(0x7f0000001280)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001340)={r12}, 0xc) sendmmsg(r8, &(0x7f0000000640), 0x4000000000001f2, 0xfff0) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000240)={r5, &(0x7f00000000c0)='%\x00', 0xa401, &(0x7f0000000100)={@_ha_fsid={[0x7, 0xd669]}, {0x5, 0x0, 0x9, 0x4}}, 0x6, &(0x7f0000000140)={@_ha_fsid}, &(0x7f00000001c0)=0x5}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000080), &(0x7f0000000280)=r13}, 0x20) sendmsg$NFT_MSG_GETRULE(r13, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd4, 0x7, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0x69, 0x7, 0x1, 0x0, "5ba5f1c557f11d6a81517b287cdc1085b8953bef8ecdda821cd478ec53c0b6181c9e5222c5a50a0d9ba7aaf9faef24e01c2b6230c24a85d64995dd613bf68bd77af38272dabd43db56f8346b0d491034467ec54b9413e319e88d3ccfae60f7e8026d3426e0"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x32, 0x7, 0x1, 0x0, "37df5af92156edd82460e9870084a9cd65fea40f4eb42332b2e7a16440e1cde4306ea94ba6feeb3acea4dd7bc531"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000181}, 0x4) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000ffff2cbd7000ffdbde2500000000", @ANYRES32=0x0, @ANYBLOB="096d050025100400280012800b00010067656e657665000018000280060005004e240000050008000000000004000600"], 0x50}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) 1m28.141968209s ago: executing program 2 (id=3749): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000003780)={'batadv_slave_0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000004c00)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000004d00)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000004e00)=[{&(0x7f0000004e40)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005180)={0x1e, 0x4, &(0x7f0000005240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x200008}, [@generic={0x91, 0x1, 0x1, 0x22}]}, &(0x7f0000005280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ff9}, 0x94) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000003a40)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r3, @ANYBLOB=' '], 0x38}}, 0x6404481c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000003a80)={"c996c7320d6614d310ef1a03aed6a324", 0x0, 0x0, {0x7b, 0xdcbe9c5}, {0xe17, 0x8}, 0x0, [0x100, 0x98e9, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8, 0x2, 0x6, 0x5, 0x5, 0x7fffffffffffffff, 0x0, 0xf, 0x100000000000, 0x3, 0xffffffffffffffff, 0xff]}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000003c00)={{r0}, r4, 0x1c, @inherit={0x70, &(0x7f0000003b80)={0x1, 0x5, 0x3, 0x4592, {0x14, 0xfffffffffffffff9, 0x755d, 0x0, 0x9}, [0x4, 0x7, 0x5, 0xffff, 0x7fffffffffffffff]}}, @subvolid=0x6}) syz_emit_ethernet(0x112, &(0x7f0000003980)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00dc2b00fc020000000000000000000000000001fc02000000000000000000000000008119130407"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{&(0x7f0000000180)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000000280)=""/195, 0xc3}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/141, 0x8d}, {&(0x7f0000000540)=""/143, 0x8f}], 0x5}, 0x819}, {{&(0x7f0000000680)=@rc, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f00000007c0)=""/203, 0xcb}], 0x2}, 0xfff}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/111, 0x6f}, {&(0x7f0000000980)=""/77, 0x4d}, {&(0x7f0000000a00)=""/97, 0x61}, {&(0x7f0000000a80)=""/55, 0x37}], 0x4, &(0x7f0000000b00)=""/127, 0x7f}, 0x4de7}, {{&(0x7f0000000b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000000c00)=""/244, 0xf4}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/98, 0x62}, {&(0x7f0000001d80)=""/4, 0x4}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/243, 0xf3}, {&(0x7f0000002ec0)=""/178, 0xb2}], 0x7}, 0xfffffffe}, {{&(0x7f0000003000)=@isdn, 0x80, &(0x7f0000003180)=[{&(0x7f0000003080)=""/226, 0xe2}], 0x1, &(0x7f00000031c0)=""/65, 0x41}, 0x7f13e0d1}, {{&(0x7f0000003240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000003480)=[{&(0x7f00000032c0)=""/250, 0xfa}, {&(0x7f00000033c0)=""/169, 0xa9}], 0x2, &(0x7f00000034c0)=""/246, 0xf6}, 0xb1d}], 0x6, 0x0, &(0x7f0000003740)={0x0, 0x989680}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x2000800) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000003780), 0x6f5, 0x2000000022, &(0x7f00000037c0)={0x77359400}) write$tun(0xffffffffffffffff, &(0x7f0000005000)={@val={0x0, 0x17}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @multicast, @val={@val={0x88a8, 0x6, 0x1, 0x4}, {0x8100, 0x1, 0x0, 0x2}}, {@ipv6={0x86dd, @esp={0x7, 0x6, "b5cfc2", 0x137, 0x32, 0x0, @mcast2, @mcast1, {[@routing={0x33, 0xa, 0x2, 0x80, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @local]}, @fragment={0x15, 0x0, 0x9, 0x1, 0x0, 0x5, 0x64}, @fragment={0x11, 0x0, 0xb, 0x1, 0x0, 0x5, 0x66}], {0x4d5, 0x5d7b, @cc={0x1, 0x0, 0x81, 0x2, 0x8, 0x10000, 0x6, [@runt="2b74e7379cb473a85896b1576148ae41b06425a70f967237d6e18d21", @ipv6=@esp={0x1, 0x6, "10c751", 0x66, 0x32, 0xfe, @dev={0xfe, 0x80, '\x00', 0x12}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@fragment={0x3b, 0x0, 0xe, 0x1, 0x0, 0x17, 0x68}, @srh={0x3a, 0x2, 0x4, 0x1, 0x3, 0x28, 0xec1b, [@private1={0xfc, 0x1, '\x00', 0x1}]}], {0x4d4, 0x3, @basic={0x0, 0x0, 0x8, [@runt="f2cfebd8e223b98e18097dde98eefa88a4a97ada69d594ba11f9224735475c2324dd100ec72e7881f09494a27bf1d21afa13"]}, "f4c3b001dfea", 0x6}}}]}, "786eac", 0x3}}}}}}}, 0x179) bpf$PROG_LOAD(0x5, &(0x7f0000004ec0)={0x4, 0x4, &(0x7f0000004f80)=ANY=[@ANYBLOB="1800000000000000000000d333e9180061106c00ffffffff9500000000000000"], &(0x7f0000004fc0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$key(r6, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003840)={&(0x7f0000003880)=ANY=[@ANYBLOB="02090d0002"], 0x10}}, 0x24040800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000038c0)=ANY=[@ANYBLOB="400000001000010425bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="031700001b0801000a000100bbbbbbbbbbbb00000800050019e5e96b970724ea1b62ceeb073416fcc22c6c9f46ffdda662bf029eabcc872539494946adb184e6a5461ff0141fd726", @ANYRES32=r7, @ANYBLOB="0a000100aaaaaaaaaa3d0000"], 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m28.141427691s ago: executing program 3 (id=3750): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000000c0)=0x10) (rerun: 64) setsockopt(r1, 0x84, 0x80, &(0x7f0000000100)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r3, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x414, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x401, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x311, 0x64, 0x0, 0x1, [@nested={0x145, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r0}, @nested={0xb9, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f", @nested={0x6c, 0x1e, 0x0, 0x1, [@nested={0x59, 0xd4, 0x0, 0x1, [@generic="a4803e3fd1af764643b73de45d768de8db52619a63255c11ccef20dfffd887a99225e2f5ecae032cafb7216b237a1429eed88bc6f84aeb562009f34ab2a8894cd1d7697087420e5ab42922b7a9a487ed10c5c0e82b"]}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x100}]}]}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57b5f522ff05f1", @nested={0x15d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0x8, 0x94, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x30}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x414}], 0x1}, 0x0) 1m28.140275789s ago: executing program 4 (id=3751): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000004100010025bd7000fedbdf25010000000400488018000180140010800400108005000b007d263a7d00000000140002"], 0x44}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000000)='/\xd3\\\x00', 0x40400, &(0x7f00000000c0)={@align=0x80000000, {0x3, 0x1, 0xd6, 0x1}}, 0xd42, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xfff}) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={0xffffffffffffffff, r2}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000240)={@dev, @local, @broadcast}, &(0x7f0000000280)=0x28) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000500)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x8}, [@RTA_UID={0x8, 0x19, r4}, @RTA_UID={0x8, 0x19, r4}]}, 0x2c}}, 0x0) 0s ago: executing program 1 (id=3752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0x9, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x4c001}, 0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x110, r1, 0x215eb000) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000280)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000380)=0x2d) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x1}, &(0x7f0000000080)=0x8) socket$inet(0x2, 0x6, 0x6) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r4, 0x80, 0x9a5f, 0xfff, 0x4, 0x4e7}, 0x14) kernel console output (not intermixed with test programs): bearer rejected, failed to enable media [ 578.416782][ T9990] IPVS: ip_vs_send_async error -101 [ 579.457832][T16745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 579.473376][T16745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 579.475833][T16745] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 579.503491][T16745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 579.504444][T16745] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 580.207664][T17846] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2886'. [ 580.367994][T17850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2886'. [ 580.368023][T17850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2886'. [ 580.987529][T17859] 8021q: adding VLAN 0 to HW filter on device bond16 [ 581.185024][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2890'. [ 581.188631][T17865] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 581.453542][T17868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2890'. [ 581.615597][ T4932] Bluetooth: hci5: command tx timeout [ 582.243363][T17887] smc: smcd device lo applied user defined pnetid SYZ0 [ 582.365878][T17888] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2894'. [ 582.365908][T17888] nbd: must specify at least one socket [ 582.846299][T17899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2896'. [ 583.039337][T17908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2897'. [ 583.114206][T17899] netlink: 'syz.3.2896': attribute type 10 has an invalid length. [ 583.114269][T17899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2896'. [ 583.165584][T17899] batman_adv: batadv0: Interface activated: dummy0 [ 583.165651][T17899] batadv0: mtu less than device minimum [ 583.170042][T17899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 583.173676][T17899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 583.182722][T17899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 583.188478][T17899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 583.193360][T17899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 583.197074][T17899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 583.201288][T17899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 583.207021][T17899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 583.210589][T17899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 583.558225][T17919] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2898'. [ 583.634421][T17899] batman_adv: batadv0: Interface deactivated: dummy0 [ 583.634452][T17899] batman_adv: batadv0: Removing interface: dummy0 [ 583.695160][ T4932] Bluetooth: hci5: command tx timeout [ 583.854009][T17829] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.860443][T17829] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.860642][T17829] bridge_slave_0: entered allmulticast mode [ 583.866258][T17829] bridge_slave_0: entered promiscuous mode [ 583.914655][T17829] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.914769][T17829] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.914928][T17829] bridge_slave_1: entered allmulticast mode [ 583.939186][T17829] bridge_slave_1: entered promiscuous mode [ 584.269624][T17938] netlink: 'syz.0.2900': attribute type 1 has an invalid length. [ 584.573517][T17938] bond15: entered promiscuous mode [ 584.574003][T17938] 8021q: adding VLAN 0 to HW filter on device bond15 [ 584.648779][T17829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.693895][T17947] 8021q: adding VLAN 0 to HW filter on device bond15 [ 584.694937][T17947] bond15: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 584.694963][T17947] bond15: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 584.826677][T17947] bond15: (slave ip6gre2): making interface the new active one [ 584.826710][T17947] ip6gre2: entered promiscuous mode [ 584.828809][T17947] bond15: (slave ip6gre2): Enslaving as an active interface with an up link [ 584.887500][T17829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.178949][T17829] team0: Port device team_slave_0 added [ 585.204725][T17829] team0: Port device team_slave_1 added [ 585.277237][T17829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.277261][T17829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.277293][T17829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.281366][T17829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.281387][T17829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.281421][T17829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.428305][T17829] hsr_slave_0: entered promiscuous mode [ 585.429491][T17829] hsr_slave_1: entered promiscuous mode [ 585.775720][ T4932] Bluetooth: hci5: command tx timeout [ 585.984045][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 585.984085][T17976] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2911'. [ 586.931294][T17991] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2913'. [ 587.148246][T17997] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 587.233422][T18002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2913'. [ 587.605967][T18006] netlink: 'syz.3.2919': attribute type 1 has an invalid length. [ 587.780300][T18006] 8021q: adding VLAN 0 to HW filter on device bond17 [ 587.855309][ T4932] Bluetooth: hci5: command tx timeout [ 588.369610][T18006] bond17: (slave geneve4): making interface the new active one [ 588.402139][T18006] bond17: (slave geneve4): Enslaving as an active interface with an up link [ 588.861918][T17829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 588.909806][T17829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.924635][T17829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 588.952473][T17829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.000019][T17829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 589.023171][T17829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 589.024388][T17829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 589.068967][T17829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 589.240208][T18027] tc_dump_action: action bad kind [ 590.008373][T17829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.101249][T17829] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.139389][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.139515][ T7288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.247151][T18045] netlink: 'syz.3.2925': attribute type 16 has an invalid length. [ 590.247176][T18045] netlink: 'syz.3.2925': attribute type 17 has an invalid length. [ 590.247411][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.247555][ T9243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.408610][T18045] 0XD: left promiscuous mode [ 590.435012][T18045] sit0: left promiscuous mode [ 590.486512][T18045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.487555][T18045] dummy0: left promiscuous mode [ 590.489590][T18045] batadv0: left promiscuous mode [ 590.489611][T18045] batadv0: left allmulticast mode [ 590.491224][T18045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.622001][T18045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.638306][T18045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 590.638337][T18045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.639881][T18045] veth1_vlan: left promiscuous mode [ 590.641082][T18045] veth0_vlan: left promiscuous mode [ 590.642859][T18045] veth0_vlan: entered promiscuous mode [ 590.644868][T18045] veth1_vlan: entered promiscuous mode [ 590.691070][T18045] macvlan0: left promiscuous mode [ 590.703120][T18045] veth1_macvtap: left promiscuous mode [ 590.704613][T18045] veth0_macvtap: left promiscuous mode [ 590.704640][T18045] veth0_macvtap: left allmulticast mode [ 590.725962][T18045] veth0_macvtap: entered promiscuous mode [ 590.727239][T18045] veth1_macvtap: entered promiscuous mode [ 590.748708][T18045] bridge0: port 1(syz_tun) entered blocking state [ 590.748848][T18045] bridge0: port 1(syz_tun) entered listening state [ 590.749501][T18045] bridge0: left promiscuous mode [ 590.749522][T18045] bridge0: left allmulticast mode [ 590.753016][T18045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 590.790413][T18045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 590.839678][T18045] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.841794][T18045] 8021q: adding VLAN 0 to HW filter on device bond4 [ 590.861416][T18045] 8021q: adding VLAN 0 to HW filter on device eth0 [ 590.874677][T18045] 8021q: adding VLAN 0 to HW filter on device eth1 [ 590.889035][T18045] 8021q: adding VLAN 0 to HW filter on device eth2 [ 590.892011][T18045] 8021q: adding VLAN 0 to HW filter on device eth3 [ 590.910233][T18045] 8021q: adding VLAN 0 to HW filter on device bond5 [ 590.915015][T18045] vlan2: left allmulticast mode [ 590.967289][T18045] bond0: left allmulticast mode [ 590.967309][T18045] bond_slave_0: left allmulticast mode [ 590.969608][T18045] 8021q: adding VLAN 0 to HW filter on device bond6 [ 590.972653][T18045] 8021q: adding VLAN 0 to HW filter on device bond7 [ 590.975020][T18045] 8021q: adding VLAN 0 to HW filter on device bond8 [ 591.011885][T18045] 8021q: adding VLAN 0 to HW filter on device bond9 [ 591.045800][ T5776] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 591.073134][T18045] ipvlan2: left allmulticast mode [ 591.073174][T18045] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 591.073579][T18045] batman_adv: batadv0: Interface activated: ipvlan2 [ 591.097331][T18045] 8021q: adding VLAN 0 to HW filter on device bond10 [ 591.098927][T18045] ip6tnl2: left promiscuous mode [ 591.098949][T18045] ip6tnl2: left allmulticast mode [ 591.139865][T18045] 8021q: adding VLAN 0 to HW filter on device bond11 [ 591.140970][T18045] ip6tnl3: left allmulticast mode [ 591.208335][T18045] bridge2: left promiscuous mode [ 591.208365][T18045] bridge2: left allmulticast mode [ 591.210662][T18045] 8021q: adding VLAN 0 to HW filter on device bond12 [ 591.212090][T18045] 8021q: adding VLAN 0 to HW filter on device bond13 [ 591.248107][T18045] 8021q: adding VLAN 0 to HW filter on device bond15 [ 591.313175][T18055] netlink: 'syz.3.2929': attribute type 2 has an invalid length. [ 591.347247][T18058] xt_l2tp: missing protocol rule (udp|l2tpip) [ 591.430428][T18055] netlink: 'syz.3.2929': attribute type 2 has an invalid length. [ 592.067100][ T7288] bond10: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 592.067483][ T7288] bond10: (slave veth0_to_bond): making interface the new active one [ 592.096057][ T8355] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 592.104135][ T7288] bond10: active interface up! [ 592.184330][ T7036] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 592.184583][ T7036] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 592.184784][ T7036] bond2: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 592.184979][ T7036] bond2: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 592.185209][ T7036] bond2: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 592.185406][ T7036] bond2: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 592.185602][ T7036] bond2: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 592.185798][ T7036] bond2: (slave veth17): link status definitely up, 10000 Mbps full duplex [ 592.186054][ T7036] bond2: (slave veth19): link status definitely up, 10000 Mbps full duplex [ 592.217199][ T7036] bond2: (slave veth21): link status definitely up, 10000 Mbps full duplex [ 592.300036][ T7036] bond2: (slave veth23): link status definitely up, 10000 Mbps full duplex [ 592.325332][ T7036] bond2: (slave veth25): link status definitely up, 10000 Mbps full duplex [ 592.328426][ T7036] bond2: (slave veth27): link status definitely up, 10000 Mbps full duplex [ 592.331568][ T7036] bond2: (slave veth3): making interface the new active one [ 592.411193][ T7036] bond2: active interface up! [ 592.464466][T18071] tipc: Enabled bearer , priority 0 [ 592.508814][T18081] net_ratelimit: 12 callbacks suppressed [ 592.508840][T18081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.922705][T18089] syzkaller0: entered promiscuous mode [ 592.922731][T18089] syzkaller0: entered allmulticast mode [ 593.034078][ T7288] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 593.034324][ T7288] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 593.055994][ T44] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 593.137910][ T7292] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 593.138158][ T7292] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 593.168739][ T5776] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 593.258904][ T8355] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 593.661978][T18110] FAULT_INJECTION: forcing a failure. [ 593.661978][T18110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.662053][T18110] CPU: 0 UID: 0 PID: 18110 Comm: syz.4.2937 Not tainted syzkaller #0 PREEMPT(full) [ 593.662081][T18110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 593.662095][T18110] Call Trace: [ 593.662104][T18110] [ 593.662114][T18110] dump_stack_lvl+0xe8/0x150 [ 593.662152][T18110] should_fail_ex+0x410/0x560 [ 593.662188][T18110] _copy_to_user+0x31/0xb0 [ 593.662225][T18110] simple_read_from_buffer+0xe1/0x170 [ 593.662264][T18110] proc_fail_nth_read+0x1bb/0x230 [ 593.662288][T18110] ? common_file_perm+0x20e/0x2b0 [ 593.662321][T18110] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 593.662350][T18110] ? rw_verify_area+0x24a/0x4c0 [ 593.662374][T18110] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 593.662398][T18110] vfs_read+0x213/0xa80 [ 593.662423][T18110] ? __pfx___mutex_lock+0x10/0x10 [ 593.662464][T18110] ? __pfx_vfs_read+0x10/0x10 [ 593.662487][T18110] ? __fget_files+0x2a/0x420 [ 593.662524][T18110] ? __fget_files+0x3a2/0x420 [ 593.662556][T18110] ? __fget_files+0x2a/0x420 [ 593.662599][T18110] ksys_read+0x150/0x270 [ 593.662625][T18110] ? __pfx_ksys_read+0x10/0x10 [ 593.662660][T18110] do_syscall_64+0x166/0x520 [ 593.662689][T18110] ? trace_irq_disable+0x3b/0x140 [ 593.662714][T18110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.662738][T18110] ? clear_bhb_loop+0x70/0xc0 [ 593.662766][T18110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.662789][T18110] RIP: 0033:0x7fe85e55ed8e [ 593.662809][T18110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 593.662829][T18110] RSP: 002b:00007fe85f4befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 593.662853][T18110] RAX: ffffffffffffffda RBX: 00007fe85f4bf6c0 RCX: 00007fe85e55ed8e [ 593.662869][T18110] RDX: 000000000000000f RSI: 00007fe85f4bf0a0 RDI: 0000000000000004 [ 593.662883][T18110] RBP: 00007fe85f4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 593.662896][T18110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.662909][T18110] R13: 00007fe85e826038 R14: 00007fe85e825fa0 R15: 00007fff54789588 [ 593.662945][T18110] [ 593.846807][ T44] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 594.102035][T18114] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2939'. [ 594.102364][T18114] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2939'. [ 594.423047][T18123] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 594.672513][T18128] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2941'. [ 595.749924][T17829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.894854][T18154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2948'. [ 595.894982][T18154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2948'. [ 596.237766][T18163] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2949'. [ 596.323657][T18155] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.323701][T18155] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.434490][T17829] veth0_vlan: entered promiscuous mode [ 596.497328][T17829] veth1_vlan: entered promiscuous mode [ 596.613016][T18172] netlink: 'syz.4.2953': attribute type 1 has an invalid length. [ 596.613062][T18172] netlink: 'syz.4.2953': attribute type 2 has an invalid length. [ 596.614597][T18173] netlink: 'syz.4.2953': attribute type 1 has an invalid length. [ 596.614617][T18173] netlink: 'syz.4.2953': attribute type 2 has an invalid length. [ 596.714325][T18155] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.714371][T18155] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.815367][ C1] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 596.815396][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 596.876401][T18178] netlink: 'syz.0.2954': attribute type 1 has an invalid length. [ 596.976508][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 597.022496][T18155] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.022534][T18155] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.122395][T18181] gretap1: entered allmulticast mode [ 597.138930][T18183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2956'. [ 597.161788][T18183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2956'. [ 597.161825][T18183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2956'. [ 597.207945][T18183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2956'. [ 597.611287][T18194] nbd: couldn't find a device at index 0 [ 597.632432][T18194] netlink: 'syz.1.2959': attribute type 9 has an invalid length. [ 598.205861][T15819] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.205994][T15819] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.206089][T15819] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.361923][T18155] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.361968][T18155] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.716177][T17829] veth0_macvtap: entered promiscuous mode [ 598.773759][T17829] veth1_macvtap: entered promiscuous mode [ 599.135609][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 599.155970][ T9244] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.156006][ T9244] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.156062][ T9244] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.156091][ T9244] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.247422][T17829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.276294][T18223] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 599.282808][T18223] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 599.683950][ T9235] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.683993][ T9235] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.720317][T17829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.837313][ T7039] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.837354][ T7039] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.298819][ T7292] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.300041][ T7292] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.300844][ T7292] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.303609][T18255] netlink: 'syz.1.2971': attribute type 106 has an invalid length. [ 600.447851][ T9235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.656268][T18260] tunl0: entered promiscuous mode [ 600.665276][T18260] netlink: 'syz.3.2972': attribute type 4 has an invalid length. [ 600.665300][T18260] __nla_validate_parse: 138 callbacks suppressed [ 600.665313][T18260] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2972'. [ 601.002119][T18271] ip_tables: iptables: counters copy to user failed while replacing table [ 601.092241][T18275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2974'. [ 601.408958][T18276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2976'. [ 601.505967][ T9244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.505994][ T9244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.631447][T15821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.631475][T15821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.178979][T18298] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 602.404356][T18307] netlink: 'syz.3.2980': attribute type 3 has an invalid length. [ 602.444574][T18307] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 602.548406][T18310] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2981'. [ 603.051552][T18321] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20265 [ 603.099062][T18321] netlink: 'syz.0.2985': attribute type 1 has an invalid length. [ 603.842478][T18327] bond17: (slave geneve3): making interface the new active one [ 603.843304][T18327] bond17: (slave geneve3): Enslaving as an active interface with an up link [ 603.856437][ T7039] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 603.875307][T15821] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 603.878462][ T7039] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 603.878610][ T7039] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 603.970433][T16745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 603.989161][T16745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 603.992100][T16745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 604.009887][T16745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 604.025579][T16745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 604.259316][T18328] tipc: Resetting bearer [ 604.529683][ T9243] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:3c0e:e3ff:fe32:577f error=-28 [ 604.575971][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 604.576575][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 604.661657][T18344] netlink: 'syz.2.2988': attribute type 10 has an invalid length. [ 604.695609][T18344] syz_tun: entered promiscuous mode [ 604.849517][T18344] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 605.344222][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2984'. [ 605.668645][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2991'. [ 605.860411][ C1] bridge0: port 1(syz_tun) entered learning state [ 606.095388][ T4932] Bluetooth: hci3: command tx timeout [ 606.147561][T18377] netlink: 'syz.0.2992': attribute type 21 has an invalid length. [ 606.147624][T18377] IPv6: NLM_F_CREATE should be specified when creating new route [ 606.443934][T18388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2994'. [ 606.601668][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 606.744356][T18390] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2995'. [ 606.848047][T18390] tipc: Started in network mode [ 606.848086][T18390] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 606.848248][T18390] tipc: Enabled bearer , priority 0 [ 606.962587][T18394] tipc: Disabling bearer [ 607.429734][T18401] netlink: 'syz.0.2997': attribute type 4 has an invalid length. [ 607.450323][T18401] netlink: 'syz.0.2997': attribute type 4 has an invalid length. [ 607.598086][T18405] IPVS: Unknown mcast interface: pim6reg0 [ 608.056112][T18420] block nbd2: NBD_DISCONNECT [ 608.056144][T18420] block nbd2: Send disconnect failed -32 [ 608.056166][T18420] block nbd2: Send disconnect failed -32 [ 608.056186][T18420] block nbd2: shutting down sockets [ 608.187821][ T4932] Bluetooth: hci3: command tx timeout [ 608.259255][ T30] audit: type=1800 audit(1792180450.121:11): pid=18430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3005" name="memory.events" dev="tmpfs" ino=3074 res=0 errno=0 [ 608.290089][ T30] audit: type=1804 audit(1792180450.121:12): pid=18430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3005" name="/newroot/593/memory.events" dev="tmpfs" ino=3074 res=1 errno=0 [ 608.309798][T18419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3002'. [ 608.844567][T18434] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 608.952126][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3008'. [ 609.041661][ T7290] batman_adv: batadv0: Interface deactivated: gretap3 [ 609.062225][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 610.204160][ T7290] batman_adv: batadv0: Removing interface: gretap3 [ 610.253050][ T7290] batman_adv: batadv0: Removing interface: gretap2 [ 610.265375][ T4932] Bluetooth: hci3: command tx timeout [ 610.440539][ T7290] team0: Port device bridge2 removed [ 610.536456][ T7290] bond1 (unregistering): Released all slaves [ 610.556964][ T7290] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 610.558834][ T7290] bond2 (unregistering): Released all slaves [ 610.588619][ T7290] bond3 (unregistering): Released all slaves [ 610.614890][ T7290] bond4 (unregistering): (slave veth7): Releasing active interface [ 610.633490][ T7290] bond4 (unregistering): Released all slaves [ 610.654248][ T7290] bond5 (unregistering): Released all slaves [ 610.697969][ T7290] bond0 (unregistering): Released all slaves [ 611.111091][ T7290] tipc: Disabling bearer [ 611.111373][ T7290] tipc: Left network mode [ 611.336236][T18491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3013'. [ 611.949307][T18332] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.972404][T18332] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.972593][T18332] bridge_slave_0: entered allmulticast mode [ 612.011605][T18332] bridge_slave_0: entered promiscuous mode [ 612.052497][T18332] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.052614][T18332] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.052800][T18332] bridge_slave_1: entered allmulticast mode [ 612.084628][T18332] bridge_slave_1: entered promiscuous mode [ 612.343105][ T4932] Bluetooth: hci3: command tx timeout [ 612.418164][T18332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.549969][ T7290] IPVS: stopping master sync thread 16921 ... [ 612.574925][T18332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.688576][T18332] team0: Port device team_slave_0 added [ 612.702629][T18332] team0: Port device team_slave_1 added [ 612.962017][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 612.974751][T18523] netlink: 'syz.2.3019': attribute type 82 has an invalid length. [ 612.992843][T18487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3012'. [ 612.992869][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 612.993589][T18523] netlink: 'syz.2.3019': attribute type 10 has an invalid length. [ 613.517668][T18523] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 613.560214][T18523] team0: Port device wlan0 added [ 613.572796][T18540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3021'. [ 613.758774][T18332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.758815][T18332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.759013][T18332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.829757][T18332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.829812][T18332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.829858][T18332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.186670][ C0] ip6_tunnel: L xmit: Local address not yet configured! [ 614.292407][T18332] hsr_slave_0: entered promiscuous mode [ 614.304089][T18332] hsr_slave_1: entered promiscuous mode [ 614.318484][T18332] debugfs: 'hsr0' already exists in 'hsr' [ 614.318511][T18332] Cannot create hsr debugfs directory [ 614.471425][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3029'. [ 614.992453][T18588] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 615.008858][T18588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3032'. [ 615.671631][ T7290] hsr_slave_0: left promiscuous mode [ 615.694800][T18599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3035'. [ 616.709573][ T7290] smc: removing net device macvtap0 with user defined pnetid SYZ0 [ 617.386934][T18633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'. [ 617.494184][T18612] syzkaller0: entered promiscuous mode [ 617.494212][T18612] syzkaller0: entered allmulticast mode [ 617.533648][T18618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3037'. [ 617.533876][T18618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3037'. [ 618.175709][T18651] netlink: 'syz.0.3042': attribute type 21 has an invalid length. [ 618.175778][T18651] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3042'. [ 618.581022][T18332] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.673410][ T30] audit: type=1800 audit(1792180460.531:13): pid=18669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3046" name="memory.events" dev="tmpfs" ino=3166 res=0 errno=0 [ 618.721645][T18651] netlink: 'syz.0.3042': attribute type 4 has an invalid length. [ 618.721706][T18651] netlink: 'syz.0.3042': attribute type 5 has an invalid length. [ 618.721742][T18651] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3042'. [ 618.782849][ T7290] IPVS: stop unused estimator thread 0... [ 618.812100][T18671] bridge0: entered allmulticast mode [ 618.832495][T18668] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 618.832563][T18668] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 618.832632][T18668] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 619.100507][T18679] netlink: 'syz.3.3045': attribute type 4 has an invalid length. [ 619.167799][T18681] netlink: 'syz.3.3045': attribute type 4 has an invalid length. [ 619.249910][T18685] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3047'. [ 619.299167][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 619.463511][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3047'. [ 619.561636][T18332] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.692000][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3048'. [ 619.692027][T18696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3048'. [ 619.692055][T18696] netlink: 'syz.0.3048': attribute type 12 has an invalid length. [ 619.692071][T18696] netlink: 'syz.0.3048': attribute type 11 has an invalid length. [ 619.791697][T18683] bond1: option lacp_active: invalid value (5) [ 619.811090][T18683] bond1 (unregistering): Released all slaves [ 619.917085][T18702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3049'. [ 619.936476][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 620.069191][T18704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.082267][T18332] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.458352][T18332] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.542139][ T30] audit: type=1800 audit(1792180462.401:14): pid=18711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3051" name=680B20 dev="tmpfs" ino=3180 res=0 errno=0 [ 621.215875][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 621.215904][ C1] bridge0: topology change detected, propagating [ 621.431649][T18731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3058'. [ 621.448276][T18730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3058'. [ 621.530701][T18734] syzkaller0: left promiscuous mode [ 621.530729][T18734] syzkaller0: left allmulticast mode [ 621.739388][T18332] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 621.750208][T18332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 621.753594][T18332] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 621.780966][T18332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 621.803415][T18332] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 621.833110][T18332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 621.856743][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 621.861890][T18739] tipc: Resetting bearer [ 621.908973][T18747] bond0: (slave syz_tun): Releasing backup interface [ 621.951945][T18747] bridge_slave_0: left allmulticast mode [ 621.951974][T18747] bridge_slave_0: left promiscuous mode [ 621.952267][T18747] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.005000][T18747] bridge_slave_1: left allmulticast mode [ 622.005899][T18747] bridge_slave_1: left promiscuous mode [ 622.006230][T18747] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.079279][T18747] bond0: (slave bond_slave_0): Releasing backup interface [ 622.151264][T18747] bond0: (slave bond_slave_1): Releasing backup interface [ 622.226966][T18747] team0: Port device team_slave_0 removed [ 622.280343][T18747] team0: Port device team_slave_1 removed [ 622.284196][T18747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.284224][T18747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.332658][T18747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.332688][T18747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.374192][T18747] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 622.543774][T18332] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 622.579304][T18332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 622.668915][T18751] team0: Device xfrm0 is of different type [ 622.749994][T18752] tipc: Enabled bearer , priority 0 [ 622.791940][T15821] tipc: Resetting bearer [ 622.968009][T18754] ovs-s: entered promiscuous mode [ 623.064805][T18768] openvswitch: ovs-s: Dropping previously announced user features [ 623.279317][T18795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3067'. [ 623.279348][T18795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3067'. [ 623.284013][T18795] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3067'. [ 623.287494][T18795] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3067'. [ 623.444529][T18800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3068'. [ 623.566759][T18805] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3070'. [ 623.662261][T18332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.726705][T18332] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.751346][T15821] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.751460][T15821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.780776][T18800] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 623.784149][T14649] tipc: Node number set to 12429994 [ 623.812922][ T7290] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.813054][ T7290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.604548][T18846] netlink: 'syz.3.3077': attribute type 1 has an invalid length. [ 624.604573][T18846] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3077'. [ 625.094785][T18860] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3080'. [ 625.392651][T18865] netlink: 'syz.3.3082': attribute type 10 has an invalid length. [ 625.474157][T18872] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3082'. [ 625.526452][T18865] bridge0: port 1(syz_tun) entered disabled state [ 625.527294][T18865] bridge0: port 1(syz_tun) entered disabled state [ 625.565585][T18869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3083'. [ 625.592108][T18865] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 625.610367][ T7288] bond0: (slave bond_slave_0): interface is now down [ 625.610406][ T7288] bond0: (slave syz_tun): interface is now down [ 625.703431][ T7288] bond0: now running without any active interface! [ 625.760397][ T7292] bond4: (slave bond0): link status definitely down, disabling slave [ 625.788688][ T7292] bond4: now running without any active interface! [ 625.907972][T18877] bridge0: port 3(syz_tun) entered blocking state [ 625.908108][T18877] bridge0: port 3(syz_tun) entered disabled state [ 625.908263][T18877] syz_tun: entered allmulticast mode [ 626.657266][T18332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.725936][T18901] tipc: Can't bind to reserved service type 1 [ 626.734952][T18897] tipc: Failed to remove unknown binding: 66,0,0/382425614:2267175342/2267175343 [ 626.758548][T18897] tipc: Failed to remove unknown binding: 66,0,0/382425614:2267175342/2267175343 [ 627.314126][T18332] veth0_vlan: entered promiscuous mode [ 627.380902][T18332] veth1_vlan: entered promiscuous mode [ 627.558373][T18917] netlink: 'syz.2.3091': attribute type 1 has an invalid length. [ 627.741169][T18916] bond1: entered promiscuous mode [ 627.741196][T18916] bond1: entered allmulticast mode [ 627.741583][T18916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 627.790623][T18917] netlink: 'syz.2.3091': attribute type 1 has an invalid length. [ 627.863497][T18332] veth0_macvtap: entered promiscuous mode [ 627.915184][T18917] netlink: 'syz.2.3091': attribute type 1 has an invalid length. [ 627.915432][T18917] netlink: 'syz.2.3091': attribute type 1 has an invalid length. [ 627.915733][T18917] netlink: 'syz.2.3091': attribute type 1 has an invalid length. [ 627.916140][T18917] netlink: 'syz.2.3091': attribute type 1 has an invalid length. [ 627.916593][T18917] netlink: 'syz.2.3091': attribute type 1 has an invalid length. [ 627.930349][T18917] netlink: 'syz.2.3091': attribute type 1 has an invalid length. [ 627.930760][T18332] veth1_macvtap: entered promiscuous mode [ 627.999493][T18929] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 628.123349][T18332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.147622][T18923] bridge0: port 2(ip6gretap0) entered blocking state [ 628.147780][T18923] bridge0: port 2(ip6gretap0) entered forwarding state [ 628.148143][T18923] bridge0: port 1(syz_tun) entered blocking state [ 628.148304][T18923] bridge0: port 1(syz_tun) entered forwarding state [ 628.193937][T18933] x_tables: duplicate underflow at hook 3 [ 628.326294][T18923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 628.330447][T18923] 8021q: adding VLAN 0 to HW filter on device bond3 [ 628.369620][T18923] 8021q: adding VLAN 0 to HW filter on device eth0 [ 628.386574][T18923] 8021q: adding VLAN 0 to HW filter on device eth1 [ 628.388972][T18923] 8021q: adding VLAN 0 to HW filter on device eth2 [ 628.394159][T18923] 8021q: adding VLAN 0 to HW filter on device eth3 [ 628.474339][T18923] 8021q: adding VLAN 0 to HW filter on device bond5 [ 628.563408][T18923] 8021q: adding VLAN 0 to HW filter on device bond10 [ 628.565250][T18923] erspan0: entered promiscuous mode [ 628.589790][T18923] 8021q: adding VLAN 0 to HW filter on device bond11 [ 628.591147][T15807] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:3c0e:e3ff:fe32:577f error=-28 [ 628.623673][T18923] 8021q: adding VLAN 0 to HW filter on device bond12 [ 628.637896][T18923] 8021q: adding VLAN 0 to HW filter on device bond13 [ 628.663001][T18923] 8021q: adding VLAN 0 to HW filter on device bond14 [ 628.684062][T18923] 8021q: adding VLAN 0 to HW filter on device bond16 [ 628.707302][T18923] 8021q: adding VLAN 0 to HW filter on device bond17 [ 628.867184][T15821] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 628.868214][T15807] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 628.868262][T15807] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 628.868304][T15807] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 628.991475][ T7290] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 629.010357][ T7290] bond1: (slave veth3): making interface the new active one [ 629.036986][ T7290] bond1: active interface up! [ 629.071428][T18332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.288558][T18955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.400102][ T9243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.401308][ T9243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.509829][ T9244] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.510984][ T9244] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.621708][T18951] tipc: Resetting bearer [ 629.929611][T18963] sch_fq: defrate 0 ignored. [ 630.103432][T18967] __nla_validate_parse: 3 callbacks suppressed [ 630.103479][T18967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3101'. [ 630.243429][ T7288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.243456][ T7288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.366155][T15821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.366182][T15821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.573749][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'. [ 630.673411][T18977] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 630.713353][T18977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 630.793627][T18983] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3106'. [ 630.941002][T18983] syz.2.3106: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 630.941086][T18983] CPU: 1 UID: 0 PID: 18983 Comm: syz.2.3106 Not tainted syzkaller #0 PREEMPT(full) [ 630.941113][T18983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 630.941129][T18983] Call Trace: [ 630.941139][T18983] [ 630.941150][T18983] dump_stack_lvl+0xe8/0x150 [ 630.941191][T18983] warn_alloc+0x24d/0x270 [ 630.941220][T18983] ? kasan_save_track+0x4f/0x80 [ 630.941248][T18983] ? kasan_save_track+0x3e/0x80 [ 630.941279][T18983] ? __pfx_warn_alloc+0x10/0x10 [ 630.941303][T18983] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 630.941334][T18983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.941381][T18983] __vmalloc_node_range_noprof+0x127/0x1540 [ 630.941435][T18983] ? rcu_is_watching+0x16/0xb0 [ 630.941473][T18983] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 630.941498][T18983] ? __kmalloc_cache_noprof+0x321/0x600 [ 630.941526][T18983] ? __kmalloc_cache_noprof+0x14d/0x600 [ 630.941551][T18983] ? xskq_create+0x56/0x220 [ 630.941585][T18983] xskq_create+0x148/0x220 [ 630.941612][T18983] ? xsk_init_queue+0x8a/0xe0 [ 630.941641][T18983] xsk_init_queue+0x8a/0xe0 [ 630.941670][T18983] xsk_setsockopt+0x52a/0x960 [ 630.941701][T18983] ? __pfx_xsk_setsockopt+0x10/0x10 [ 630.941726][T18983] ? __pfx_aa_sk_perm+0x10/0x10 [ 630.941772][T18983] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 630.941806][T18983] ? __pfx_xsk_setsockopt+0x10/0x10 [ 630.941832][T18983] do_sock_setsockopt+0x17c/0x1b0 [ 630.941868][T18983] __x64_sys_setsockopt+0x13d/0x1b0 [ 630.941907][T18983] do_syscall_64+0x166/0x520 [ 630.941946][T18983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.941970][T18983] ? clear_bhb_loop+0x70/0xc0 [ 630.942000][T18983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.942024][T18983] RIP: 0033:0x7f9de859e559 [ 630.942047][T18983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.942067][T18983] RSP: 002b:00007f9de9504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 630.942092][T18983] RAX: ffffffffffffffda RBX: 00007f9de8825fa0 RCX: 00007f9de859e559 [ 630.942109][T18983] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 630.942123][T18983] RBP: 00007f9de86358b0 R08: 0000000000000004 R09: 0000000000000000 [ 630.942138][T18983] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.942152][T18983] R13: 00007f9de8826038 R14: 00007f9de8825fa0 R15: 00007ffe953cf118 [ 630.942191][T18983] [ 630.963925][T18983] Mem-Info: [ 630.963976][T18983] active_anon:5520 inactive_anon:0 isolated_anon:0 [ 630.963976][T18983] active_file:2 inactive_file:43570 isolated_file:0 [ 630.963976][T18983] unevictable:19 dirty:183 writeback:0 [ 630.963976][T18983] slab_reclaimable:12006 slab_unreclaimable:118448 [ 630.963976][T18983] mapped:25448 shmem:547 pagetables:1208 [ 630.963976][T18983] sec_pagetables:0 bounce:0 [ 630.963976][T18983] kernel_misc_reclaimable:0 [ 630.963976][T18983] free:1257509 free_pcp:9981 free_cma:0 [ 630.964124][T18983] Node 0 active_anon:22080kB inactive_anon:0kB active_file:8kB inactive_file:174068kB unevictable:76kB isolated(anon):0kB isolated(file):0kB mapped:101792kB dirty:732kB writeback:0kB shmem:2188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15480kB pagetables:4712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 630.964365][T18983] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 630.964512][T18983] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 630.964699][T18983] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 630.964812][T18983] Node 0 DMA32 free:1072384kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22080kB inactive_anon:0kB active_file:8kB inactive_file:174068kB unevictable:76kB writepending:732kB zspages:0kB present:3129332kB managed:2527420kB mlocked:76kB bounce:0kB free_pcp:39924kB local_pcp:21188kB free_cma:0kB [ 630.965012][T18983] lowmem_reserve[]: 0 0 0 0 0 [ 630.977821][T18983] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 630.978006][T18983] lowmem_reserve[]: 0 0 0 0 0 [ 630.978134][T18983] Node 1 Normal free:3942292kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 630.978318][T18983] lowmem_reserve[]: 0 0 0 0 0 [ 630.978422][T18983] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 630.978773][T18983] Node 0 DMA32: 890*4kB (UM) 621*8kB (UM) 119*16kB (UM) 280*32kB (UME) 171*64kB (UM) 51*128kB (UM) 25*256kB (UM) 10*512kB (UME) 10*1024kB (UME) 5*2048kB (UME) 245*4096kB (UM) = 1072384kB [ 630.979303][T18983] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 631.074041][T18983] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 7*16kB (UM) 6*32kB (UM) 9*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 2*2048kB (U) 960*4096kB (M) = 3942292kB [ 631.074227][T18983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 631.074244][T18983] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 631.074262][T18983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 631.074279][T18983] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 631.074298][T18983] 44092 total pagecache pages [ 631.074307][T18983] 0 pages in swap cache [ 631.074316][T18983] Free swap = 124996kB [ 631.074325][T18983] Total swap = 124996kB [ 631.074335][T18983] 2097051 pages RAM [ 631.074344][T18983] 0 pages HighMem/MovableOnly [ 631.074352][T18983] 433580 pages reserved [ 631.074361][T18983] 0 pages cma reserved [ 631.198847][T18994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.198925][T18994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.862302][T18994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.862369][T18994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.001740][T18987] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 632.374576][T16745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 632.390045][T16745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.395243][T16745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.418316][T16745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.420972][T16745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.421823][ T5616] bridge0: port 1(syz_tun) entered disabled state [ 632.526360][T19002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3108'. [ 632.557607][ T5616] syz_tun (unregistering): left allmulticast mode [ 632.557638][ T5616] syz_tun (unregistering): left promiscuous mode [ 632.557735][ T5616] bridge0: port 1(syz_tun) entered disabled state [ 633.191217][ T7039] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.191259][ T7039] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 633.191289][ T7039] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 633.741266][ T7039] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.741313][ T7039] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 633.742202][ T7039] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 633.811811][T19038] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 634.112392][ T7039] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.114665][ T7039] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 634.114703][ T7039] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 634.346449][ T7039] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.346517][ T7039] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 634.346583][ T7039] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 634.454356][T19059] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3121'. [ 634.504582][T19051] bond2: Removing last arp target with arp_interval on [ 634.576785][T16745] Bluetooth: hci1: command tx timeout [ 634.755343][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3122'. [ 635.020631][T16745] block nbd2: Receive control failed (result -32) [ 635.153454][ T7039] ip6gretap0: left allmulticast mode [ 635.153520][ T7039] ip6gretap0: left promiscuous mode [ 635.158628][ T7039] bridge0: port 2(ip6gretap0) entered disabled state [ 635.183990][T19077] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 635.184082][T19077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.321390][ T7039] dummy0: left allmulticast mode [ 635.355440][ T7039] dvmrp0: left allmulticast mode [ 635.561730][T19090] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3128'. [ 635.809261][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3130'. [ 635.851000][ T7039] bond15 (unregistering): (slave ip6gre2): Releasing backup interface [ 635.851196][ T7039] ip6gre2 (unregistering): left promiscuous mode [ 635.900014][T19105] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 636.197016][T19107] xt_CT: No such helper "netbios-ns" [ 636.460173][ T7039] bond14 (unregistering): (slave ip6gretap1): Releasing active interface [ 636.460244][ T7039] ip6gretap1 (unregistering): left allmulticast mode [ 636.655650][T16745] Bluetooth: hci1: command tx timeout [ 636.843982][ T7039] bond17 (unregistering): (slave geneve3): Releasing active interface [ 636.860946][ T7039] geneve1 (unregistering): left allmulticast mode [ 636.878750][ T7039] team0: Port device macvlan3 removed [ 636.912187][ T7039] bridge0 (unregistering): left allmulticast mode [ 637.003394][ T7039] bond1 (unregistering): (slave veth3): Releasing active interface [ 637.006629][ T7039] bond1 (unregistering): Released all slaves [ 637.030833][ T7039] bond2 (unregistering): Released all slaves [ 637.050358][ T7039] bond3 (unregistering): Released all slaves [ 637.103858][ T7039] bond11 (unregistering): (slave vlan3): Releasing active interface [ 637.120503][ T9243] smc: removing ib device syz0 [ 637.122309][ T7039] bond0 (unregistering): Released all slaves [ 637.147787][ T7039] bond4 (unregistering): Released all slaves [ 637.183649][ T7039] bond5 (unregistering): (slave bond6): Releasing active interface [ 637.184993][ T7039] bond5 (unregistering): Released all slaves [ 637.211158][ T7039] bond6 (unregistering): Released all slaves [ 637.234300][ T7039] bond7 (unregistering): Released all slaves [ 637.262406][ T7039] bond8 (unregistering): Released all slaves [ 637.283429][ T7039] bond9 (unregistering): (slave batadv1): Releasing active interface [ 637.300925][ T7039] bond9 (unregistering): Released all slaves [ 637.320876][ T7039] bond10 (unregistering): Released all slaves [ 637.338514][ T7039] bond11 (unregistering): Released all slaves [ 637.371867][ T7039] bond12 (unregistering): Released all slaves [ 637.392253][ T7039] bond13 (unregistering): (slave veth0_to_bond): Releasing active interface [ 637.392284][ T7039] veth0_to_bond: left promiscuous mode [ 637.392458][ T7039] veth0_to_bond: left allmulticast mode [ 637.433046][ T7039] bond13 (unregistering): Released all slaves [ 637.452676][ T7039] bond14 (unregistering): Released all slaves [ 637.471152][ T7039] bond15 (unregistering): Released all slaves [ 637.501440][ T7039] bond16 (unregistering): Released all slaves [ 637.521754][ T7039] bond17 (unregistering): Released all slaves [ 637.816173][ T8356] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 637.816395][ T8356] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 637.845845][ T8356] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 637.903288][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3128'. [ 637.978836][ T7288] tipc: Resetting bearer [ 638.125746][ T44] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 638.204997][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 638.501060][ T44] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 638.539088][T19130] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 638.539088][T19130] Please contact the netfilter-devel mailing list or update your nftables rules. [ 638.576547][ T44] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 638.735822][T16745] Bluetooth: hci1: command tx timeout [ 638.736909][ T9243] smbdirect: ib_dev[syz0] removed [ 638.895537][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 639.324886][T19152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3140'. [ 639.668635][T19160] validate_nla: 22 callbacks suppressed [ 639.668683][T19160] netlink: 'syz.4.3142': attribute type 1 has an invalid length. [ 639.969830][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3144'. [ 640.012108][T19174] netlink: 'syz.3.3143': attribute type 3 has an invalid length. [ 640.012134][T19174] netlink: 'syz.3.3143': attribute type 1 has an invalid length. [ 640.012151][T19174] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3143'. [ 640.012259][T19174] NCSI netlink: No device for ifindex 0 [ 640.381032][T19160] 8021q: adding VLAN 0 to HW filter on device bond12 [ 640.659307][T19163] bond12: (slave veth11): Enslaving as an active interface with a down link [ 640.718090][T19166] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 640.718399][T19166] bond12: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 640.815311][T16745] Bluetooth: hci1: command tx timeout [ 640.909030][T19197] openvswitch: netlink: IP tunnel dst address not specified [ 640.909440][T19197] openvswitch: netlink: IP tunnel dst address not specified [ 641.631766][T19211] ip6gretap0: entered promiscuous mode [ 641.694668][T19211] batadv0: entered promiscuous mode [ 641.929584][T19216] macsec1: entered promiscuous mode [ 642.024379][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 642.233724][T19229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3156'. [ 642.311439][T19233] Cannot find del_set index 0 as target [ 642.460710][T19233] netlink: 'syz.2.3157': attribute type 11 has an invalid length. [ 642.460769][T19233] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3157'. [ 642.638640][T19247] netlink: 'syz.4.3158': attribute type 1 has an invalid length. [ 642.817393][T19253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 643.074303][T19229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 643.363392][T19247] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 643.372632][T19252] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 643.544587][T19258] bridge7: entered promiscuous mode [ 644.269243][T19254] syzkaller0: entered promiscuous mode [ 644.269272][T19254] syzkaller0: entered allmulticast mode [ 644.481280][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3161'. [ 644.623594][T19007] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.626835][T19007] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.627254][T19007] bridge_slave_0: entered allmulticast mode [ 644.722298][T19007] bridge_slave_0: entered promiscuous mode [ 645.678586][T19288] bridge_slave_1: invalid flags given to default FDB implementation [ 645.678849][T19007] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.678974][T19007] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.679150][T19007] bridge_slave_1: entered allmulticast mode [ 645.683715][T19007] bridge_slave_1: entered promiscuous mode [ 645.725330][ T7039] tipc: Disabling bearer [ 645.725844][ T7039] tipc: Left network mode [ 645.899422][T19007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.902894][T19007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.371423][T19007] team0: Port device team_slave_0 added [ 646.399576][T19007] team0: Port device team_slave_1 added [ 646.644195][T19007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.644217][T19007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.644251][T19007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.706215][T19007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.706235][T19007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.706263][T19007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.483547][T19335] vlan1: entered promiscuous mode [ 647.483569][T19335] gretap0: entered promiscuous mode [ 647.690017][T19321] syzkaller0: entered promiscuous mode [ 647.690046][T19321] syzkaller0: entered allmulticast mode [ 648.095921][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 648.222566][T19007] hsr_slave_0: entered promiscuous mode [ 648.237717][T19007] hsr_slave_1: entered promiscuous mode [ 648.256586][T19007] debugfs: 'hsr0' already exists in 'hsr' [ 648.256655][T19007] Cannot create hsr debugfs directory [ 648.351095][T19335] vlan1: entered promiscuous mode [ 648.614037][ T7039] hsr_slave_0: left promiscuous mode [ 648.628158][ T7039] hsr_slave_1: left promiscuous mode [ 649.375917][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 649.904801][T19395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3183'. [ 651.392107][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 651.751351][T19408] syzkaller0: Caught tx_queue_len zero misconfig [ 652.075848][T19437] xt_bpf: check failed: parse error [ 653.002578][ T7039] IPVS: stop unused estimator thread 0... [ 653.092991][T19494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3198'. [ 653.111535][T19494] netlink: 'syz.2.3198': attribute type 12 has an invalid length. [ 653.114928][T19494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3198'. [ 653.116345][T19494] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3198'. [ 653.134140][T19498] ipt_REJECT: TCP_RESET invalid for non-tcp [ 653.177411][T19493] netdevsim netdevsim3 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 653.178598][T19493] 8021q: adding VLAN 0 to HW filter on device eth0 [ 653.179932][T19493] netdevsim netdevsim3 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 653.181077][T19493] 8021q: adding VLAN 0 to HW filter on device eth1 [ 653.182244][T19493] netdevsim netdevsim3 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 653.183315][T19493] 8021q: adding VLAN 0 to HW filter on device eth2 [ 653.184537][T19493] netdevsim netdevsim3 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 653.194898][T19493] 8021q: adding VLAN 0 to HW filter on device eth3 [ 653.221419][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 653.269519][T19497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3199'. [ 653.286207][T14630] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 653.291765][T14630] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 653.292209][T14630] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 653.438224][T14649] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 653.625435][T14630] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 653.646336][T14630] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 653.679077][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3202'. [ 653.698720][T19506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3200'. [ 653.700614][T19506] block nbd3: server does not support multiple connections per device. [ 653.701209][T19506] block nbd3: shutting down sockets [ 653.812175][T19511] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 653.813077][T19511] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 653.923952][T19518] netlink: 'syz.4.3203': attribute type 1 has an invalid length. [ 654.000835][T19518] syzkaller1: entered promiscuous mode [ 654.000868][T19518] syzkaller1: entered allmulticast mode [ 654.387469][T19536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3208'. [ 654.726538][T19007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 654.734100][T19007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 654.750153][T19007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 654.760184][T19007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 654.770186][T19007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 654.793335][T19007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 654.799839][T19007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 654.813327][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3212'. [ 654.833156][T19007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 655.017900][T19573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3215'. [ 655.018848][T19571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3215'. [ 655.072113][T19573] 8021q: adding VLAN 0 to HW filter on device bond13 [ 655.167283][T19579] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3214'. [ 655.244513][T19583] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 655.258946][T19577] bond13: (slave veth13): Enslaving as an active interface with an up link [ 655.284511][T19571] lo: entered promiscuous mode [ 655.284706][T19571] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 655.503376][T19007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.608182][T19007] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.658837][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.658972][ T7039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.690373][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.690488][ T7039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.432905][T19593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.804170][T19007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.890009][T19007] veth0_vlan: entered promiscuous mode [ 656.908885][T19007] veth1_vlan: entered promiscuous mode [ 656.968405][T19007] veth0_macvtap: entered promiscuous mode [ 656.991180][T19007] veth1_macvtap: entered promiscuous mode [ 657.032166][T19007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.081465][T19666] netlink: 'syz.1.3227': attribute type 26 has an invalid length. [ 657.084825][T19007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.286679][ T9235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.299063][T19669] C: Caught tx_queue_len zero misconfig [ 657.417889][T19682] Cannot find del_set index 3 as target [ 657.577473][ T7290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.577500][ T7290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.607445][ T7290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.693764][T19688] ipvlan2: entered allmulticast mode [ 657.693793][T19688] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 657.728130][T19688] batman_adv: batadv0: Adding interface: ipvlan2 [ 657.728151][T19688] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.728368][T19688] batman_adv: batadv0: Interface activated: ipvlan2 [ 657.736106][ T7290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.737842][T15807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.866501][T15812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.866527][T15812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.021302][T19701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3233'. [ 658.157821][T19708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.163985][T19710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3233'. [ 658.164010][T19710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3233'. [ 658.300249][T19710] macsec1: entered promiscuous mode [ 658.300275][T19710] veth1_macvtap: entered promiscuous mode [ 658.570037][T19729] netlink: 'syz.0.3107': attribute type 21 has an invalid length. [ 659.047812][ T4932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 659.053349][ T4932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 659.054551][ T4932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 659.078189][ T4932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 659.080294][ T4932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 659.202666][T19752] netlink: 'syz.2.3241': attribute type 2 has an invalid length. [ 659.887720][ T5615] syz_tun (unregistering): left allmulticast mode [ 659.907260][ T5615] bond0: (slave syz_tun): Releasing backup interface [ 659.955711][ T7039] smbdirect: ib_dev[syz5] removed [ 659.994771][ T8359] infiniband syz5: ib_query_port failed (-19) [ 660.057783][T19773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3244'. [ 660.057817][T19773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3244'. [ 660.590265][T19747] rxe_eth0 speed is unknown, defaulting to 1000 [ 660.602155][T19747] rxe_eth0 speed is unknown, defaulting to 1000 [ 660.603194][T19747] rxe_eth0 speed is unknown, defaulting to 1000 [ 660.764336][T19796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3246'. [ 661.023497][T19747] infiniband rxe0: set active [ 661.023522][T19747] infiniband rxe0: added rxe_eth0 [ 661.024663][ T5746] rxe_eth0 speed is unknown, defaulting to 1000 [ 661.135268][T16745] Bluetooth: hci2: command tx timeout [ 661.136655][T19747] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 661.136694][T19747] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 661.136738][T19747] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 661.422641][T19747] RDS/IB: rxe0: added [ 661.422700][T19747] smc: adding ib device rxe0 with port count 1 [ 661.422722][T19747] smc: ib device rxe0 port 1 has no pnetid [ 661.422829][T18198] rxe_eth0 speed is unknown, defaulting to 1000 [ 661.470163][T19747] rxe_eth0 speed is unknown, defaulting to 1000 [ 661.596163][T19815] syzkaller1: entered promiscuous mode [ 661.596191][T19815] syzkaller1: entered allmulticast mode [ 662.113043][T19823] netlink: 'syz.1.3251': attribute type 4 has an invalid length. [ 662.160921][T19809] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3247'. [ 662.371023][T19747] rxe_eth0 speed is unknown, defaulting to 1000 [ 662.401373][T19832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3253'. [ 662.878620][T19845] x_tables: duplicate underflow at hook 2 [ 662.899598][T19845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3255'. [ 662.980397][T19747] rxe_eth0 speed is unknown, defaulting to 1000 [ 663.215210][T16745] Bluetooth: hci2: command tx timeout [ 663.702376][T19860] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.749460][T19747] rxe_eth0 speed is unknown, defaulting to 1000 [ 663.789787][T19871] syzkaller0: entered promiscuous mode [ 663.789811][T19871] syzkaller0: entered allmulticast mode [ 664.050816][T19860] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.120432][T19747] rxe_eth0 speed is unknown, defaulting to 1000 [ 664.160860][T19886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3265'. [ 664.160922][T19886] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 664.240101][T19860] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.424129][T19860] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.832682][T19747] rxe_eth0 speed is unknown, defaulting to 1000 [ 664.835792][ T7039] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.933149][ T7292] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.050656][T15812] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.065448][T15812] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.183121][T19907] netlink: 'syz.1.3273': attribute type 16 has an invalid length. [ 665.183146][T19907] netlink: 'syz.1.3273': attribute type 3 has an invalid length. [ 665.183162][T19907] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.3273'. [ 665.294470][T19747] rxe_eth0 speed is unknown, defaulting to 1000 [ 665.305245][T16745] Bluetooth: hci2: command tx timeout [ 665.350345][T19906] syzkaller0: entered promiscuous mode [ 665.350371][T19906] syzkaller0: entered allmulticast mode [ 665.797604][T19923] netlink: 'syz.4.3278': attribute type 1 has an invalid length. [ 665.867020][T19923] 8021q: adding VLAN 0 to HW filter on device bond14 [ 665.882717][T19934] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 665.912521][T19924] bond14: (slave veth15): Enslaving as an active interface with a down link [ 665.933249][T19926] syz_tun: left allmulticast mode [ 665.933271][T19926] syz_tun: left promiscuous mode [ 665.933487][T19926] bridge0: port 3(syz_tun) entered disabled state [ 665.970163][T19935] nbd: nbd2 already in use [ 665.970893][T19935] block nbd2: NBD_DISCONNECT [ 665.970912][T19935] block nbd2: Send disconnect failed -32 [ 665.970926][T19935] block nbd2: shutting down sockets [ 665.998527][T19926] bond14: (slave syz_tun): making interface the new active one [ 665.999526][T19926] syz_tun: entered promiscuous mode [ 665.999783][T19926] bond14: (slave syz_tun): Enslaving as an active interface with an up link [ 666.088684][T19936] syzkaller0: entered promiscuous mode [ 666.088712][T19936] syzkaller0: entered allmulticast mode [ 666.124314][T19921] tipc: Started in network mode [ 666.124350][T19921] tipc: Node identity 8e0ce9a3d5d4, cluster identity 4711 [ 666.174544][T19921] tipc: Enabled bearer , priority 0 [ 666.267518][T19921] bond0: mtu less than device minimum [ 666.324248][T19943] macsec2: entered promiscuous mode [ 666.324277][T19943] macsec2: entered allmulticast mode [ 666.342729][T19936] tipc: Resetting bearer [ 666.351664][T19948] xt_TCPMSS: Only works on TCP SYN packets [ 666.444592][T19936] tipc: Disabling bearer [ 666.514462][T19952] netlink: 'syz.2.3282': attribute type 4 has an invalid length. [ 666.514494][T19952] netlink: 'syz.2.3282': attribute type 5 has an invalid length. [ 666.890189][T19747] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.891965][T19747] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.922005][T19747] bridge_slave_0: entered allmulticast mode [ 666.934228][T19747] bridge_slave_0: entered promiscuous mode [ 666.948332][T19747] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.948528][T19747] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.948700][T19747] bridge_slave_1: entered allmulticast mode [ 666.953913][T19747] bridge_slave_1: entered promiscuous mode [ 667.079084][T19981] ip6t_frag: unknown flags 4 [ 667.081803][T19970] syzkaller0: entered promiscuous mode [ 667.081827][T19970] syzkaller0: entered allmulticast mode [ 667.132245][T19747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.227981][T19747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.351317][T19747] team0: Port device team_slave_0 added [ 667.364426][T19747] team0: Port device team_slave_1 added [ 667.375272][T16745] Bluetooth: hci2: command tx timeout [ 667.430273][T19747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.430294][T19747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.430324][T19747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.483348][T19747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.483369][T19747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.483400][T19747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.514036][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3293'. [ 667.732373][T19997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3294'. [ 667.748367][T19747] hsr_slave_0: entered promiscuous mode [ 667.749497][T19747] hsr_slave_1: entered promiscuous mode [ 667.750256][T19747] debugfs: 'hsr0' already exists in 'hsr' [ 667.750277][T19747] Cannot create hsr debugfs directory [ 668.028929][T20013] Bluetooth: ISO socket layer initialized [ 668.364063][T19747] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.364105][T19747] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.502899][T20031] bond15: entered allmulticast mode [ 668.543589][T20027] bond15: (slave wireguard1): The slave device specified does not support setting the MAC address [ 668.545774][T20027] bond15: (slave wireguard1): Error -95 calling set_mac_address [ 668.578494][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3303'. [ 668.603926][T20033] bond15: (slave wireguard1): The slave device specified does not support setting the MAC address [ 668.604387][T20033] bond15: (slave wireguard1): Error -95 calling set_mac_address [ 668.757690][T19747] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.757720][T19747] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.763959][T20030] syzkaller1: entered promiscuous mode [ 668.763978][T20030] syzkaller1: entered allmulticast mode [ 668.953343][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3305'. [ 668.966688][T19747] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.966729][T19747] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.972639][T20048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3305'. [ 669.117123][T19747] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.117165][T19747] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.814747][T20083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3310'. [ 669.867083][T19747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 669.871544][T19747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 669.872542][T19747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 669.902281][T19747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 669.904857][T19747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 669.932855][T19747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 669.942385][T19747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 669.972251][T19747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 670.304223][T19747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.356682][T19747] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.381543][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3318'. [ 670.392926][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.393219][ T7039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.421397][ T7292] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.421505][ T7292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.817762][T20132] xt_ipcomp: unknown flags 1D [ 671.128942][T19747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.239331][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3321'. [ 671.254552][T19747] veth0_vlan: entered promiscuous mode [ 671.270679][T19747] veth1_vlan: entered promiscuous mode [ 671.322193][T19747] veth0_macvtap: entered promiscuous mode [ 671.353459][T19747] veth1_macvtap: entered promiscuous mode [ 671.415170][T19747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.433661][T19747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.478572][T20144] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 671.491778][ T9235] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.519919][ T9235] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.519964][ T9235] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.520003][ T9235] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.793029][T20155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3324'. [ 671.796720][ T7292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.796741][ T7292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.976193][T20154] netlink: 'syz.4.3324': attribute type 1 has an invalid length. [ 671.976216][T20154] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3324'. [ 672.007192][ T9235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.007215][ T9235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.101898][T20168] ip_tables: iptables: counters copy to user failed while replacing table [ 672.110220][T20168] netlink: 'syz.1.3326': attribute type 1 has an invalid length. [ 672.243265][T20176] netlink: 'syz.1.3329': attribute type 1 has an invalid length. [ 672.309838][T20180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.539253][T20176] syzkaller0: entered promiscuous mode [ 672.539283][T20176] syzkaller0: entered allmulticast mode [ 672.873340][T20190] netlink: 'syz.2.3332': attribute type 10 has an invalid length. [ 672.901176][ T4932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 672.904573][ T4932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 672.922669][ T4932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 672.938243][ T4932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 672.940463][ T4932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 675.064492][T16745] Bluetooth: hci0: command tx timeout [ 676.385731][T20190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 676.392920][T20190] team0: Port device netdevsim1 added [ 676.437046][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3333'. [ 676.493195][ T5623] bond14: (slave syz_tun): Releasing active interface [ 676.493263][ T5623] syz_tun (unregistering): left promiscuous mode [ 676.513030][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3333'. [ 676.622696][ T7292] tipc: Resetting bearer [ 676.679608][T20205] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3334'. [ 676.738117][T20197] 8021q: adding VLAN 0 to HW filter on device bond3 [ 676.780774][T20201] 8021q: adding VLAN 0 to HW filter on device bond4 [ 676.840829][T20209] netlink: 'syz.0.3335': attribute type 27 has an invalid length. [ 676.840854][T20209] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3335'. [ 676.858002][T20209] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.075351][T20224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3340'. [ 677.135903][T16745] Bluetooth: hci0: command tx timeout [ 677.233725][T20224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'. [ 677.233754][T20224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'. [ 677.323334][T20229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'. [ 677.512871][T20223] rxe_eth0 speed is unknown, defaulting to 1000 [ 677.810930][T20241] geneve1: entered promiscuous mode [ 678.040649][T20227] netlink: 58 bytes leftover after parsing attributes in process `syz.3.3339'. [ 678.317631][ T9235] bond10: left allmulticast mode [ 678.334305][ T9235] bond10: left promiscuous mode [ 678.353690][ T9235] bridge0: port 2(bond10) entered disabled state [ 678.372811][ T9235] veth0_virt_wifi: left allmulticast mode [ 678.372834][ T9235] veth0_virt_wifi: left promiscuous mode [ 678.373057][ T9235] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 678.478131][ T9235] batman_adv: batadv0: Interface deactivated: gretap2 [ 678.668060][ T9235] ip6gretap0 (unregistering): left allmulticast mode [ 679.215475][T16745] Bluetooth: hci0: command tx timeout [ 679.218029][ T9235] batman_adv: batadv0: Removing interface: gretap2 [ 679.289919][ T9235] bond8 (unregistering): (slave gretap3): Releasing active interface [ 679.448585][ T9235] bond1 (unregistering): Released all slaves [ 679.470441][ T9235] bond2 (unregistering): Released all slaves [ 679.494334][ T9235] bond3 (unregistering): Released all slaves [ 679.509798][ T9235] bond0 (unregistering): Released all slaves [ 679.532538][ T9235] bond4 (unregistering): Released all slaves [ 679.554089][ T9235] bond5 (unregistering): Released all slaves [ 679.570006][ T9235] bond6 (unregistering): Released all slaves [ 679.588447][ T9235] bond7 (unregistering): Released all slaves [ 679.616651][ T9235] bond8 (unregistering): Released all slaves [ 679.635193][ T9235] bond9 (unregistering): Released all slaves [ 679.653968][ T9235] bond11 (unregistering): Released all slaves [ 679.689103][ T9235] bond10 (unregistering): Released all slaves [ 679.713053][ T9235] bond12 (unregistering): (slave veth11): Releasing active interface [ 679.729196][ T9235] bond12 (unregistering): Released all slaves [ 679.756344][ T9235] bond13 (unregistering): (slave veth13): Releasing backup interface [ 679.759441][ T9235] bond13 (unregistering): Released all slaves [ 679.796012][ T9235] bond14 (unregistering): (slave veth15): Releasing active interface [ 679.798435][ T9235] bond14 (unregistering): Released all slaves [ 679.832967][ T9235] bond15 (unregistering): Released all slaves [ 679.851438][ T9235] bond16 (unregistering): Released all slaves [ 679.870596][T20189] rxe_eth0 speed is unknown, defaulting to 1000 [ 679.927183][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 680.531721][T20244] siw: device registration error -23 [ 680.901858][ T9235] : left promiscuous mode [ 681.298264][T16745] Bluetooth: hci0: command tx timeout [ 681.381563][T20316] sit1: entered allmulticast mode [ 681.550824][ T9235] ovs-dp0: left promiscuous mode [ 681.634718][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 681.666439][T20335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.709458][ T9235] ovs-s: left promiscuous mode [ 681.841553][ T9235] tipc: Disabling bearer [ 681.841657][ T9235] tipc: Left network mode [ 682.005351][ T9235] IPVS: stopping master sync thread 9990 ... [ 682.023170][T20345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3358'. [ 683.218567][T20189] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.219861][T20189] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.220107][T20189] bridge_slave_0: entered allmulticast mode [ 683.222433][T20189] bridge_slave_0: entered promiscuous mode [ 683.236662][T20189] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.238560][T20189] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.238754][T20189] bridge_slave_1: entered allmulticast mode [ 683.247710][T20189] bridge_slave_1: entered promiscuous mode [ 683.488091][ T9235] batman_adv: batadv0: Interface deactivated: macvlan0 [ 683.536340][ T9235] batman_adv: batadv0: Removing interface: macvlan0 [ 683.650596][T20189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.654875][T20189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.826942][T20399] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 684.004751][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3369'. [ 684.038912][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 684.113998][T20422] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3370'. [ 684.157948][T20428] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3370'. [ 684.202009][T20189] team0: Port device team_slave_0 added [ 684.234261][T20189] team0: Port device team_slave_1 added [ 684.310593][T20405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.454178][T20434] Bluetooth: MGMT ver 1.23 [ 684.469752][T20189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.469773][T20189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.469801][T20189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.483744][T20189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.483764][T20189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.483793][T20189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.654877][T20440] netlink: 'syz.3.3374': attribute type 39 has an invalid length. [ 684.757717][T20447] netlink: 'syz.0.3375': attribute type 1 has an invalid length. [ 684.986488][T20447] bond1: entered promiscuous mode [ 684.988317][T20447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 685.090373][T20189] hsr_slave_0: entered promiscuous mode [ 685.092028][T20189] hsr_slave_1: entered promiscuous mode [ 685.092617][T20189] debugfs: 'hsr0' already exists in 'hsr' [ 685.092639][T20189] Cannot create hsr debugfs directory [ 685.129207][T20448] vlan2: entered allmulticast mode [ 685.129233][T20448] bond1: entered allmulticast mode [ 685.210930][ T9235] veth1_macvtap: left promiscuous mode [ 685.475966][T20469] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3376'. [ 685.572705][T20476] netlink: 'syz.0.3376': attribute type 16 has an invalid length. [ 685.572746][T20476] netlink: 'syz.0.3376': attribute type 17 has an invalid length. [ 686.231140][T20476] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.314403][T20476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.327088][T20476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.398152][T20476] geneve1: left promiscuous mode [ 686.423809][T20476] sit1: left allmulticast mode [ 686.453070][T20476] bond1: left promiscuous mode [ 686.453821][T20476] vlan2: left allmulticast mode [ 686.453835][T20476] bond1: left allmulticast mode [ 686.461306][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 686.748893][ T7290] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.776033][T15812] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.776113][T15812] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.776151][T15812] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.972445][ T9235] IPVS: stop unused estimator thread 0... [ 688.432793][T20467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 688.525602][T20189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 688.587933][T20189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.588901][T20189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 688.615887][T20189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.619029][T20189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 688.677669][T20189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.678575][T20189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 688.720314][T20189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.943366][T20512] netlink: 'syz.0.3385': attribute type 2 has an invalid length. [ 688.943391][T20512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3385'. [ 689.036588][T20522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3386'. [ 689.229452][T20189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.323326][T20189] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.370426][ T9235] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.370546][ T9235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.421516][T15812] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.421630][T15812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.920719][T20565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3394'. [ 689.920747][T20565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3394'. [ 689.920763][T20565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3394'. [ 689.920782][T20565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3394'. [ 689.921038][T20565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3394'. [ 689.921057][T20565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3394'. [ 689.921072][T20565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3394'. [ 689.921093][T20565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3394'. [ 690.004814][T20558] gretap0: entered promiscuous mode [ 690.197424][T20565] hsr0: entered promiscuous mode [ 690.247506][T20573] bridge1: entered allmulticast mode [ 690.452627][T20567] hsr0: left promiscuous mode [ 690.752082][T15812] IPVS: starting estimator thread 0... [ 690.846748][T20598] IPVS: using max 26 ests per chain, 62400 per kthread [ 691.294038][T20623] ip_tables: iptables: counters copy to user failed while replacing table [ 691.311462][T20623] ip_tables: iptables: counters copy to user failed while replacing table [ 691.432708][T20623] ip_tables: iptables: counters copy to user failed while replacing table [ 691.509868][T20189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.611773][T20634] syzkaller0: entered promiscuous mode [ 691.611802][T20634] syzkaller0: entered allmulticast mode [ 691.988155][T20644] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 692.161108][T20649] syzkaller0: entered promiscuous mode [ 692.161134][T20649] syzkaller0: entered allmulticast mode [ 692.538552][T20189] veth0_vlan: entered promiscuous mode [ 692.607403][T20189] veth1_vlan: entered promiscuous mode [ 692.642084][T20674] can: request_module (can-proto-0) failed. [ 693.116382][T20694] veth0_to_bridge: entered promiscuous mode [ 693.116643][T20694] macvtap1: entered allmulticast mode [ 693.116660][T20694] veth0_to_bridge: entered allmulticast mode [ 693.123804][T20694] veth0_to_bridge: left allmulticast mode [ 693.123837][T20694] veth0_to_bridge: left promiscuous mode [ 693.768208][T20189] veth0_macvtap: entered promiscuous mode [ 693.803094][T20189] veth1_macvtap: entered promiscuous mode [ 693.895287][T20189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.934741][T20189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.042517][T20735] Bluetooth: MGMT ver 1.23 [ 694.106626][ T7292] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.107595][ T7292] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.107638][ T7292] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.107676][ T7292] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.214731][ T7290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.214757][ T7290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.301827][ T7292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.301852][ T7292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.331486][T20734] __nla_validate_parse: 254 callbacks suppressed [ 694.331513][T20734] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3416'. [ 694.332815][T20734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3416'. [ 694.367242][T20734] hsr_slave_0: left promiscuous mode [ 694.395654][T20734] hsr_slave_1: left promiscuous mode [ 694.491768][T20744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3419'. [ 694.776399][T20752] syzkaller0: entered promiscuous mode [ 694.776429][T20752] syzkaller0: entered allmulticast mode [ 694.925690][T20759] syzkaller0: entered promiscuous mode [ 694.925718][T20759] syzkaller0: entered allmulticast mode [ 694.994639][T20768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3423'. [ 694.994667][T20768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3423'. [ 695.644086][T20801] netlink: 'syz.3.3431': attribute type 1 has an invalid length. [ 695.644111][T20801] netlink: 'syz.3.3431': attribute type 2 has an invalid length. [ 695.644468][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3430'. [ 695.644488][T20802] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3430'. [ 695.644506][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3430'. [ 696.077015][T20815] syzkaller0: entered promiscuous mode [ 696.077042][T20815] syzkaller0: entered allmulticast mode [ 696.202126][T20821] x_tables: duplicate underflow at hook 1 [ 696.281047][ T30] audit: type=1107 audit(1792180538.141:15): pid=20823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=']frng{+N @uYM4CyEԍ'' [ 696.808868][T20842] @: renamed from dummy0 (while UP) [ 696.910780][T20845] Bluetooth: MGMT ver 1.23 [ 697.477616][T20871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3447'. [ 697.835736][T20885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3450'. [ 698.221446][T20903] vlan3: entered promiscuous mode [ 698.221473][T20903] bridge0: entered promiscuous mode [ 699.142493][T20940] netlink: 'syz.0.3458': attribute type 7 has an invalid length. [ 699.473366][T20947] __nla_validate_parse: 2 callbacks suppressed [ 699.473389][T20947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3461'. [ 699.628499][T20962] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3465'. [ 699.659945][T20960] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 699.730700][T20971] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 700.294182][T20999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3471'. [ 700.294754][ T30] audit: type=1804 audit(1792180542.151:16): pid=20997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3469" name="/newroot/79/cgroup.controllers" dev="tmpfs" ino=425 res=1 errno=0 [ 700.294918][ T30] audit: type=1800 audit(1792180542.151:17): pid=20997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3469" name="cgroup.controllers" dev="tmpfs" ino=425 res=0 errno=0 [ 700.506836][T21010] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3474'. [ 700.571230][T21013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3474'. [ 700.810733][T21024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.813278][T21024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3476'. [ 701.372011][T21053] netlink: 'syz.2.3484': attribute type 4 has an invalid length. [ 701.372041][T21053] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3484'. [ 702.107732][T21082] netlink: 'syz.0.3491': attribute type 10 has an invalid length. [ 702.114621][T21082] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 702.660354][T21120] syzkaller0: left promiscuous mode [ 702.660381][T21120] syzkaller0: left allmulticast mode [ 703.019549][T21132] xt_l2tp: v2 sid > 0xffff: 33554432 [ 705.108342][T21091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.120598][T21083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.421703][T21155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3503'. [ 705.910405][T21180] geneve1: entered promiscuous mode [ 705.951429][T21180] siw: device registration error -23 [ 706.057471][T21188] ip_tables: iptables: counters copy to user failed while replacing table [ 706.104930][T21176] netlink: 'syz.0.3510': attribute type 13 has an invalid length. [ 706.104956][T21176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3510'. [ 706.106858][T21176] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 706.273031][T21197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.520065][T21207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3516'. [ 706.554095][T21211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3517'. [ 706.747759][T21223] x_tables: duplicate underflow at hook 3 [ 707.063235][T21246] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 707.063281][T21246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.111516][ T30] audit: type=1804 audit(1792180548.971:18): pid=21246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3525" name="/newroot/19/cgroup.controllers" dev="tmpfs" ino=117 res=1 errno=0 [ 707.112524][ T30] audit: type=1800 audit(1792180548.971:19): pid=21246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3525" name="cgroup.controllers" dev="tmpfs" ino=117 res=0 errno=0 [ 707.123556][ T30] audit: type=1804 audit(1792180548.981:20): pid=21246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3525" name="/newroot/19/cgroup.controllers" dev="tmpfs" ino=117 res=1 errno=0 [ 707.376639][ T7039] IPVS: starting estimator thread 0... [ 707.384219][T21254] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20004 [ 707.475439][T21255] IPVS: using max 29 ests per chain, 69600 per kthread [ 707.555167][T21264] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 707.839364][T21279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3531'. [ 707.892512][T21282] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3531'. [ 708.032493][T21296] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 708.050369][T21296] bond1 (unregistering): Released all slaves [ 708.391532][T21311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3540'. [ 708.509023][T21325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3541'. [ 708.531527][T21313] syzkaller0: entered promiscuous mode [ 708.531553][T21313] syzkaller0: entered allmulticast mode [ 708.848698][T21347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3545'. [ 709.447285][T21395] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.3550'. [ 711.293243][T21311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 711.457575][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 711.458866][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 711.616992][T21414] netlink: 'syz.3.3553': attribute type 1 has an invalid length. [ 711.741016][T21418] __nla_validate_parse: 4 callbacks suppressed [ 711.741045][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3555'. [ 711.764773][T21418] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3555'. [ 711.784184][T21431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3553'. [ 711.857212][T21424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 711.913135][T21424] bond1: (slave bond2): making interface the new active one [ 711.953091][T21424] bond1: (slave bond2): Enslaving as an active interface with an up link [ 712.072125][T21414] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 712.100769][T21431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 712.404049][T21454] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 712.638520][T21461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3563'. [ 712.644608][T21461] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3563'. [ 712.830214][T21472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3563'. [ 712.852652][T21472] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3563'. [ 713.131566][T21485] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3566'. [ 713.229742][T21485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.269131][T21485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.303361][T21485] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 713.329209][T21485] bond0 (unregistering): Released all slaves [ 713.472325][T21491] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 713.486558][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3568'. [ 713.542653][T21495] syzkaller0: entered promiscuous mode [ 713.542678][T21495] syzkaller0: entered allmulticast mode [ 713.573571][T21493] xt_TPROXY: Can be used only with -p tcp or -p udp [ 713.627501][T21501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3573'. [ 713.627963][T21493] IPv6: NLM_F_CREATE should be specified when creating new route [ 713.688093][T15807] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.689266][T15807] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.689398][T15807] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.689438][T15807] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.500581][T21544] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 714.733063][T21553] netlink: 'syz.2.3585': attribute type 4 has an invalid length. [ 715.048941][T21565] tap0: tun_chr_ioctl cmd 1074025677 [ 715.049067][T21565] tap0: linktype set to 6 [ 715.340813][T21594] netlink: 'syz.3.3592': attribute type 4 has an invalid length. [ 715.559331][T21610] ip_tables: iptables: counters copy to user failed while replacing table [ 716.592953][T21655] netlink: 'syz.4.3606': attribute type 9 has an invalid length. [ 716.644134][T21655] bridge2: entered promiscuous mode [ 716.680275][T21660] netlink: 'syz.3.3607': attribute type 1 has an invalid length. [ 717.099614][T21683] netlink: 'syz.1.3612': attribute type 1 has an invalid length. [ 717.113415][T21674] __nla_validate_parse: 6 callbacks suppressed [ 717.113436][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 717.131512][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 717.133633][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 717.133920][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 717.134197][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 717.137407][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 717.144416][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 717.165462][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 717.165808][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 717.167512][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 717.324910][T21683] 8021q: adding VLAN 0 to HW filter on device bond6 [ 717.349165][T21698] netlink: 'syz.1.3612': attribute type 1 has an invalid length. [ 717.523645][T21687] bond6: (slave veth3): Enslaving as an active interface with a down link [ 717.579956][T21689] bond6: (slave macvlan0): making interface the new active one [ 717.602482][T21689] bond6: (slave macvlan0): Enslaving as an active interface with an up link [ 717.674959][T21693] bond6: (slave veth5): Enslaving as an active interface with a down link [ 717.862979][ T7039] bond6: (slave macvlan0): link status definitely down, disabling slave [ 717.873274][ T7039] bond6: now running without any active interface! [ 717.908904][T21712] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 718.033741][T21719] netlink: zone id is out of range [ 718.033778][T21719] netlink: zone id is out of range [ 718.033887][T21719] netlink: zone id is out of range [ 718.033979][T21719] netlink: zone id is out of range [ 718.033990][T21719] netlink: zone id is out of range [ 718.630653][T21738] bond0: Unable to set down delay as MII monitoring is disabled [ 718.644532][T21738] bond0 (unregistering): Released all slaves [ 718.665188][ T4932] Bluetooth: hci5: command 0x0406 tx timeout [ 719.581441][T21747] workqueue: Failed to create a rescuer kthread for wq "nfc28_nci_tx_wq": -EINTR [ 720.493804][T21884] netlink: 'syz.3.3635': attribute type 1 has an invalid length. [ 720.546679][T21897] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20003 [ 721.712697][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 721.762691][T21940] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 722.242348][T21964] __nla_validate_parse: 28 callbacks suppressed [ 722.242374][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3653'. [ 722.310426][T21969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3654'. [ 722.310456][T21969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3654'. [ 722.381419][T21974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3654'. [ 722.381455][T21974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3654'. [ 722.958912][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3657'. [ 722.974817][T21994] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3657'. [ 722.974843][T21994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.253273][T22012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3664'. [ 723.272075][T22013] netlink: 'syz.1.3662': attribute type 3 has an invalid length. [ 723.272101][T22013] netlink: 'syz.1.3662': attribute type 1 has an invalid length. [ 723.292771][T22013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3662'. [ 723.305744][T22014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3661'. [ 724.218216][T22043] bridge4: entered promiscuous mode [ 724.219281][T22043] bridge4: entered allmulticast mode [ 725.224147][T22042] idletimer_tg_helper: 9 callbacks suppressed [ 725.224168][T22042] xt_IDLETIMER: timeout value is zero [ 726.431870][T22120] tipc: Started in network mode [ 726.431910][T22120] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 726.432105][T22120] tipc: Enabled bearer , priority 0 [ 726.670910][T22127] netlink: 'syz.2.3682': attribute type 1 has an invalid length. [ 726.670967][T22127] netlink: 'syz.2.3682': attribute type 7 has an invalid length. [ 726.670984][T22127] netlink: 'syz.2.3682': attribute type 8 has an invalid length. [ 726.671003][T22127] NCSI netlink: No device for ifindex 1073545264 [ 726.908543][T22138] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 726.945456][T22132] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 727.536585][T22139] netlink: 'syz.4.3689': attribute type 4 has an invalid length. [ 728.192703][T22171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.220766][T22171] ip_tables: iptables: counters copy to user failed while replacing table [ 728.314027][T22173] __nla_validate_parse: 5 callbacks suppressed [ 728.314051][T22173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3694'. [ 728.314373][T22173] openvswitch: netlink: Flow actions attr not present in new flow. [ 728.356858][T22173] SET target dimension over the limit! [ 728.895989][T16745] Bluetooth: hci3: command 0x0406 tx timeout [ 731.502474][ T7292] bond3 (unregistering): (slave gretap0): Releasing backup interface [ 731.601475][ T7292] team0: Port device bridge1 removed [ 731.669181][ T7292] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 731.702696][ T7292] bond1 (unregistering): Released all slaves [ 731.720720][ T7292] bond2 (unregistering): Released all slaves [ 731.742657][ T7292] bond3 (unregistering): (slave bond4): Releasing backup interface [ 731.743391][ T7292] bond3 (unregistering): Released all slaves [ 731.769537][ T7292] bond4 (unregistering): Released all slaves [ 731.790136][ T7292] bond5 (unregistering): Released all slaves [ 731.821458][ T7292] bond6 (unregistering): Released all slaves [ 731.844738][ T7292] bond7 (unregistering): Released all slaves [ 731.862018][ T7292] bond8 (unregistering): Released all slaves [ 731.877021][ T7292] bond9 (unregistering): Released all slaves [ 731.893212][ T7292] bond10 (unregistering): Released all slaves [ 731.912661][ T7292] bond11 (unregistering): Released all slaves [ 731.931298][ T7292] bond0 (unregistering): Released all slaves [ 731.949713][ T7292] bond12 (unregistering): Released all slaves [ 731.970513][ T7292] bond13 (unregistering): Released all slaves [ 731.987876][ T7292] bond14 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 731.989783][ T7292] bond14 (unregistering): Released all slaves [ 732.019617][ T7292] bond15 (unregistering): Released all slaves [ 732.089050][T18198] tipc: Node number set to 11578026 [ 732.272450][T22187] netlink: 'syz.3.3698': attribute type 2 has an invalid length. [ 732.402487][T22187] : entered promiscuous mode [ 732.548230][T22193] GUP no longer grows the stack in syz.1.3701 (22193): 200000003000-20000000a000 (200000001000) [ 732.548270][T22193] CPU: 0 UID: 0 PID: 22193 Comm: syz.1.3701 Not tainted syzkaller #0 PREEMPT(full) [ 732.548296][T22193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 732.548311][T22193] Call Trace: [ 732.548320][T22193] [ 732.548330][T22193] dump_stack_lvl+0xe8/0x150 [ 732.548370][T22193] __get_user_pages+0x23b6/0x2750 [ 732.548410][T22193] ? lock_acquire+0x115/0x350 [ 732.548452][T22193] ? __gup_longterm_locked+0xc3b/0x15c0 [ 732.548496][T22193] __gup_longterm_locked+0xd52/0x15c0 [ 732.548534][T22193] ? lock_acquire+0x115/0x350 [ 732.548576][T22193] gup_fast_fallback+0x1d92/0x20e0 [ 732.548645][T22193] ? __pfx_gup_fast_fallback+0x10/0x10 [ 732.548682][T22193] ? lock_acquire+0x115/0x350 [ 732.548703][T22193] ? is_valid_gup_args+0x11f/0x200 [ 732.548739][T22193] ? get_user_pages_fast+0x4d/0xb0 [ 732.548774][T22193] __iov_iter_get_pages_alloc+0x378/0xa40 [ 732.548822][T22193] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 732.548854][T22193] iov_iter_get_pages2+0x5e/0xa0 [ 732.548904][T22193] __se_sys_vmsplice+0x7b5/0x1660 [ 732.548950][T22193] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 732.548987][T22193] ? __pfx_futex_wait+0x10/0x10 [ 732.549096][T22193] do_syscall_64+0x166/0x520 [ 732.549128][T22193] ? trace_irq_disable+0x3b/0x140 [ 732.549153][T22193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.549177][T22193] ? clear_bhb_loop+0x70/0xc0 [ 732.549206][T22193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.549234][T22193] RIP: 0033:0x7f262f59e559 [ 732.549256][T22193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.549277][T22193] RSP: 002b:00007f263051c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 732.549302][T22193] RAX: ffffffffffffffda RBX: 00007f262f825fa0 RCX: 00007f262f59e559 [ 732.549323][T22193] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000010 [ 732.549339][T22193] RBP: 00007f262f6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 732.549354][T22193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.549368][T22193] R13: 00007f262f826038 R14: 00007f262f825fa0 R15: 00007ffeab030e48 [ 732.549406][T22193] [ 732.569615][ T7292] tipc: Disabling bearer [ 732.759092][ T7292] tipc: Left network mode [ 732.767838][T22192] mac80211_hwsim hwsim23 wlan0: left allmulticast mode [ 733.237027][T22207] bond7 (unregistering): Released all slaves [ 733.578420][T22233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3708'. [ 733.582829][T22233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3708'. [ 734.299261][ T7292] IPVS: stopping backup sync thread 16223 ... [ 734.432152][T22257] xt_connbytes: Forcing CT accounting to be enabled [ 734.432179][T22257] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 734.768106][T22270] FAULT_INJECTION: forcing a failure. [ 734.768106][T22270] name failslab, interval 1, probability 0, space 0, times 0 [ 734.768143][T22270] CPU: 1 UID: 0 PID: 22270 Comm: syz.2.3717 Not tainted syzkaller #0 PREEMPT(full) [ 734.768167][T22270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 734.768182][T22270] Call Trace: [ 734.768191][T22270] [ 734.768202][T22270] dump_stack_lvl+0xe8/0x150 [ 734.768239][T22270] should_fail_ex+0x410/0x560 [ 734.768275][T22270] should_failslab+0xa8/0x100 [ 734.768309][T22270] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 734.768338][T22270] ? diag_suggestion+0x15d/0x260 [ 734.768368][T22270] ? diag_suggestion+0x15d/0x260 [ 734.768414][T22270] kvasprintf+0xeb/0x1a0 [ 734.768461][T22270] ? __pfx_kvasprintf+0x10/0x10 [ 734.768500][T22270] ? __pfx_bpf_diag_source+0x10/0x10 [ 734.768540][T22270] diag_suggestion+0x15d/0x260 [ 734.768580][T22270] ? __pfx_diag_suggestion+0x10/0x10 [ 734.768617][T22270] ? kfree+0x1c5/0x650 [ 734.768637][T22270] ? bpf_diag_program_structure+0x28a/0x430 [ 734.768677][T22270] bpf_diag_program_structure+0x330/0x430 [ 734.768715][T22270] ? verbose+0x11d/0x1a0 [ 734.768742][T22270] ? __pfx_bpf_diag_program_structure+0x10/0x10 [ 734.768779][T22270] ? bpf_prepare_btf_info+0x829/0x1260 [ 734.768821][T22270] check_subprogs+0x6a6/0x770 [ 734.768862][T22270] bpf_check+0x18a1/0x2ef0 [ 734.768909][T22270] ? __pfx_bpf_check+0x10/0x10 [ 734.768939][T22270] ? bpf_obj_name_cpy+0x194/0x1e0 [ 734.768979][T22270] bpf_prog_load+0x14d6/0x1c20 [ 734.769023][T22270] ? __pfx_bpf_prog_load+0x10/0x10 [ 734.769081][T22270] __sys_bpf+0xd0d/0xd90 [ 734.769118][T22270] ? __pfx___sys_bpf+0x10/0x10 [ 734.769159][T22270] ? __fget_files+0x2a/0x420 [ 734.769214][T22270] ? ksys_write+0x242/0x270 [ 734.769241][T22270] ? __pfx_ksys_write+0x10/0x10 [ 734.769271][T22270] __x64_sys_bpf+0xba/0xd0 [ 734.769300][T22270] do_syscall_64+0x166/0x520 [ 734.769330][T22270] ? trace_irq_disable+0x3b/0x140 [ 734.769354][T22270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.769378][T22270] ? clear_bhb_loop+0x70/0xc0 [ 734.769407][T22270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.769437][T22270] RIP: 0033:0x7f9de859e559 [ 734.769458][T22270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.769478][T22270] RSP: 002b:00007f9de9504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 734.769503][T22270] RAX: ffffffffffffffda RBX: 00007f9de8825fa0 RCX: 00007f9de859e559 [ 734.769520][T22270] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 734.769535][T22270] RBP: 00007f9de9504090 R08: 0000000000000000 R09: 0000000000000000 [ 734.769551][T22270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 734.769564][T22270] R13: 00007f9de8826038 R14: 00007f9de8825fa0 R15: 00007ffe953cf118 [ 734.769602][T22270] [ 735.402121][T22292] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3720'. [ 737.870744][T22303] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3725'. [ 738.278861][T22332] syzkaller1: entered promiscuous mode [ 738.278887][T22332] syzkaller1: entered allmulticast mode [ 738.345643][T22322] syzkaller1: left promiscuous mode [ 738.345672][T22322] syzkaller1: left allmulticast mode [ 739.303399][T22361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3734'. [ 740.038509][ T7292] hsr_slave_0: left promiscuous mode [ 740.039673][ T7292] hsr_slave_1: left promiscuous mode [ 740.066078][ T7292] veth1_vlan: left promiscuous mode [ 740.066160][ T7292] veth0_vlan: left promiscuous mode [ 741.057702][T22405] 8021q: adding VLAN 0 to HW filter on device bond3 [ 741.291758][T22418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3745'. [ 741.402971][ T7292] IPVS: stop unused estimator thread 0... [ 741.569480][T22430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3748'. [ 745.963435][T16745] Bluetooth: hci0: command 0x0405 tx timeout [ 829.217626][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 834.337607][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 844.575959][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 850.974961][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 850.989739][ C1] rcu: 0-....: (1 ticks this GP) idle=fdd4/1/0x4000000000000000 softirq=101831/101831 fqs=5 [ 851.000121][ C1] rcu: hardirqs softirqs csw/system [ 851.006553][ C1] rcu: number: 0 0 0 [ 851.012991][ C1] rcu: cputime: 0 0 0 ==> 16440(ms) [ 851.020817][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22441/1:b.el [ 851.028854][ C1] rcu: (detected by 1, t=10502 jiffies, g=124109, q=1691 ncpus=2) [ 851.036792][ C1] Sending NMI from CPU 1 to CPUs 0: [ 851.042059][ C0] NMI backtrace for cpu 0 [ 851.042077][ C0] CPU: 0 UID: 0 PID: 8351 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 851.042099][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 851.042114][ C0] Workqueue: events_power_efficient gc_worker [ 851.042139][ C0] RIP: 0010:timerqueue_linked_add+0x246/0x2e0 [ 851.042162][ C0] Code: 03 80 3c 28 00 74 08 4c 89 ef e8 95 79 52 f6 4d 89 75 00 49 8d 7d 08 ba 10 00 00 00 31 f6 e8 61 7b 52 f6 4c 89 f8 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 ff e8 6c 79 52 f6 4d 89 2f 4c 89 ef 48 89 [ 851.042178][ C0] RSP: 0018:ffffc90000007d40 EFLAGS: 00000802 [ 851.042194][ C0] RAX: 1ffff11017085083 RBX: ffff8880b8428418 RCX: 0000000000000000 [ 851.042209][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88804b944318 [ 851.042221][ C0] RBP: dffffc0000000000 R08: ffff88804b944317 R09: 0000000000000000 [ 851.042235][ C0] R10: ffff88804b944308 R11: ffffed1009728863 R12: 1ffff11017085078 [ 851.042250][ C0] R13: ffff88804b944300 R14: 0000000000000000 R15: ffff8880b8428418 [ 851.042264][ C0] FS: 0000000000000000(0000) GS:ffff888123abd000(0000) knlGS:0000000000000000 [ 851.042279][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 851.042293][ C0] CR2: 00007ffe54fea3f8 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 851.042311][ C0] Call Trace: [ 851.042320][ C0] [ 851.042331][ C0] ? trace_hrtimer_start+0x82/0x200 [ 851.042353][ C0] enqueue_hrtimer+0x18e/0x2c0 [ 851.042374][ C0] __hrtimer_run_queues+0x4ce/0xa10 [ 851.042412][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 851.042457][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 851.042482][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 851.042507][ C0] [ 851.042514][ C0] [ 851.042522][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 851.042543][ C0] RIP: 0010:lock_release+0x2e1/0x3c0 [ 851.042564][ C0] Code: c9 f2 12 00 00 00 00 eb b5 e8 9b 0a 47 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b3 84 f2 12 48 3b 44 24 28 75 48 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 10 0f 4a 0a cc 48 8d 3d d8 c8 d9 [ 851.042579][ C0] RSP: 0018:ffffc9000def7948 EFLAGS: 00000286 [ 851.042595][ C0] RAX: 8308dc7a80348a00 RBX: 0000000000000206 RCX: 0000000000000046 [ 851.042609][ C0] RDX: 0000000000000000 RSI: ffffffff8e6e8602 RDI: ffffffff8c6ddb80 [ 851.042622][ C0] RBP: ffff8880274cca80 R08: ffffffff917a367f R09: 1ffffffff22f46cf [ 851.042636][ C0] R10: dffffc0000000000 R11: fffffbfff22f46d0 R12: 0000000000000002 [ 851.042650][ C0] R13: 0000000000000002 R14: ffffffff8fd5c8e0 R15: ffff8880274cbe80 [ 851.042675][ C0] ? process_scheduled_works+0x97a/0x1630 [ 851.042701][ C0] gc_worker+0x1084/0x1890 [ 851.042720][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 851.042752][ C0] ? gc_worker+0x274/0x1890 [ 851.042772][ C0] ? __pfx_gc_worker+0x10/0x10 [ 851.042791][ C0] ? rcu_is_watching+0x16/0xb0 [ 851.042816][ C0] ? process_scheduled_works+0x97a/0x1630 [ 851.042841][ C0] process_scheduled_works+0xc3d/0x1630 [ 851.042890][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 851.042919][ C0] ? assign_work+0x3cf/0x5d0 [ 851.042945][ C0] worker_thread+0xa47/0xfb0 [ 851.042980][ C0] ? __kthread_parkme+0x71/0x1f0 [ 851.043012][ C0] kthread+0x38b/0x480 [ 851.043030][ C0] ? __pfx_worker_thread+0x10/0x10 [ 851.043055][ C0] ? __pfx_kthread+0x10/0x10 [ 851.043073][ C0] ret_from_fork+0x514/0xb70 [ 851.043105][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 851.043135][ C0] ? __switch_to+0xc89/0x1420 [ 851.043162][ C0] ? __pfx_kthread+0x10/0x10 [ 851.043180][ C0] ret_from_fork_asm+0x1a/0x30 [ 851.043219][ C0] [ 851.391355][ C1] task:dhcpcd-run-hook state:R running task stack:27496 pid:22441 tgid:22441 ppid:22439 task_flags:0x40004c flags:0x00080000 [ 851.404897][ C1] Call Trace: [ 851.408205][ C1] [ 851.411166][ C1] __schedule+0x17db/0x58f0 [ 851.415748][ C1] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 851.421784][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 851.426857][ C1] ? __pfx___schedule+0x10/0x10 [ 851.431780][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 851.437200][ C1] preempt_schedule_common+0x7f/0xd0 [ 851.442543][ C1] preempt_schedule_thunk+0x16/0x40 [ 851.447781][ C1] _raw_spin_unlock+0x41/0x50 [ 851.452502][ C1] __zap_vma_range+0x40e1/0x4f80 [ 851.457535][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 851.462871][ C1] ? mas_find+0x6d6/0xcb0 [ 851.467247][ C1] unmap_vmas+0x390/0x550 [ 851.471647][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 851.476531][ C1] ? mas_next_slot+0xc91/0xd70 [ 851.481363][ C1] exit_mmap+0x293/0x9f0 [ 851.485646][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 851.490473][ C1] ? __pfx_exit_aio+0x10/0x10 [ 851.495197][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 851.500457][ C1] __mmput+0x118/0x420 [ 851.504566][ C1] exit_mm+0x18e/0x240 [ 851.508690][ C1] do_exit+0x6cd/0x2360 [ 851.512885][ C1] ? __pfx_do_exit+0x10/0x10 [ 851.517505][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 851.522613][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 851.527873][ C1] do_group_exit+0x22d/0x2f0 [ 851.532509][ C1] __x64_sys_exit_group+0x3f/0x40 [ 851.537565][ C1] x64_sys_call+0x18c6/0x18d0 [ 851.542291][ C1] do_syscall_64+0x166/0x520 [ 851.546924][ C1] ? trace_irq_disable+0x3b/0x140 [ 851.552439][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.558542][ C1] ? clear_bhb_loop+0x70/0xc0 [ 851.563254][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.569174][ C1] RIP: 0033:0x7f792ccd26c5 [ 851.573623][ C1] RSP: 002b:00007ffe54feaa98 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 851.582070][ C1] RAX: ffffffffffffffda RBX: 00007ffe54fead04 RCX: 00007f792ccd26c5 [ 851.590090][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 851.598089][ C1] RBP: 0000000000000003 R08: 00007ffe54feab90 R09: 0000000000000002 [ 851.606087][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 851.614178][ C1] R13: 00007ffe54feadd0 R14: 00007f792cee2000 R15: 000055fa6eb05d98 [ 851.622204][ C1] [ 851.625254][ C1] rcu: rcu_preempt kthread starved for 1644 jiffies! g124109 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 851.636295][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 851.646312][ C1] rcu: RCU grace-period kthread stack dump: [ 851.652674][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 851.666208][ C1] Call Trace: [ 851.669515][ C1] [ 851.672474][ C1] __schedule+0x17db/0x58f0 [ 851.677042][ C1] ? __lock_acquire+0x747/0x2de0 [ 851.682140][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 851.687304][ C1] ? __pfx___schedule+0x10/0x10 [ 851.692192][ C1] ? lock_acquire+0x115/0x350 [ 851.696913][ C1] ? schedule+0x90/0x2b0 [ 851.701194][ C1] schedule+0x164/0x2b0 [ 851.705387][ C1] schedule_timeout+0x152/0x2c0 [ 851.710273][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 851.715682][ C1] ? __pfx_process_timeout+0x10/0x10 [ 851.721006][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 851.726849][ C1] ? prepare_to_swait_event+0x322/0x350 [ 851.732444][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 851.737345][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 851.743535][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 851.748939][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 851.754179][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 851.760048][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 851.764677][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 851.769908][ C1] ? __kthread_parkme+0x71/0x1f0 [ 851.774910][ C1] ? __kthread_parkme+0x199/0x1f0 [ 851.779977][ C1] kthread+0x38b/0x480 [ 851.784097][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 851.789326][ C1] ? __pfx_kthread+0x10/0x10 [ 851.793965][ C1] ret_from_fork+0x514/0xb70 [ 851.798609][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 851.803762][ C1] ? __switch_to+0xc89/0x1420 [ 851.808485][ C1] ? __pfx_kthread+0x10/0x10 [ 851.813140][ C1] ret_from_fork_asm+0x1a/0x30 [ 851.817968][ C1] [ 851.821012][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 851.827354][ C1] CPU: 1 UID: 0 PID: 7048 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 851.836924][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 851.847030][ C1] Workqueue: events_unbound toggle_allocation_gate [ 851.853572][ C1] RIP: 0010:smp_call_function_many_cond+0x1132/0x1500 [ 851.860391][ C1] Code: 78 44 8b 2b 44 89 ee 83 e6 01 31 ff e8 87 4e 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 72 49 0c 00 eb 35 f3 90 <43> 0f b6 04 2c 84 c0 75 0f f7 03 01 00 00 00 74 1d e8 58 49 0c 00 [ 851.880027][ C1] RSP: 0018:ffffc9000df97720 EFLAGS: 00000293 [ 851.886128][ C1] RAX: ffffffff81bbd728 RBX: ffff8880b8443728 RCX: ffff88807a6d5dc0 [ 851.894131][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 851.902132][ C1] RBP: ffffc9000df97870 R08: ffffffff917a367f R09: 1ffffffff22f46cf [ 851.910134][ C1] R10: dffffc0000000000 R11: fffffbfff22f46d0 R12: 1ffff110170886e5 [ 851.918136][ C1] R13: dffffc0000000000 R14: 1ffff1100f4dae6b R15: 0000000000000000 [ 851.926151][ C1] FS: 0000000000000000(0000) GS:ffff888123bbd000(0000) knlGS:0000000000000000 [ 851.935130][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 851.941739][ C1] CR2: 00007f9de8827dac CR3: 000000000fb48000 CR4: 00000000003526f0 [ 851.949759][ C1] Call Trace: [ 851.953069][ C1] [ 851.956033][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 851.961104][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 851.967463][ C1] ? kmem_cache_alloc_bulk_noprof+0xb8/0x7b0 [ 851.973483][ C1] ? __pfx___text_poke+0x10/0x10 [ 851.978471][ C1] smp_text_poke_batch_finish+0xb27/0x1110 [ 851.984314][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 851.990366][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 851.996763][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 852.003078][ C1] ? __jump_label_update+0x347/0x370 [ 852.008406][ C1] ? process_scheduled_works+0x97a/0x1630 [ 852.014200][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 852.020223][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 852.026169][ C1] static_key_enable+0x1a/0x20 [ 852.030974][ C1] toggle_allocation_gate+0xab/0x290 [ 852.036298][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 852.042244][ C1] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 852.048373][ C1] process_scheduled_works+0xc3d/0x1630 [ 852.054427][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 852.060457][ C1] ? assign_work+0x3cf/0x5d0 [ 852.065091][ C1] worker_thread+0xa47/0xfb0 [ 852.069761][ C1] kthread+0x38b/0x480 [ 852.073878][ C1] ? __pfx_worker_thread+0x10/0x10 [ 852.079033][ C1] ? __pfx_kthread+0x10/0x10 [ 852.083658][ C1] ret_from_fork+0x514/0xb70 [ 852.088295][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 852.093454][ C1] ? __switch_to+0xc89/0x1420 [ 852.098202][ C1] ? __pfx_kthread+0x10/0x10 [ 852.102832][ C1] ret_from_fork_asm+0x1a/0x30 [ 852.107666][ C1]