last executing test programs: 5.394736555s ago: executing program 0 (id=2235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r3], 0x30}}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 5.030777722s ago: executing program 0 (id=2239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x2000}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) 4.884992989s ago: executing program 0 (id=2240): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 1', 0x1b) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f00000003c0), 0x1bf1, r0}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="040000001d00000004002202c7b01f8b289e0000d2cc3f3a4f23eac718b5ca1ad1aa5324abc9a06614c42c314adfbdda7d6576f71e8562146fa838eba9ed8d42e05fb85d3ba9f4a906def72e3fa377e738de08755cd26780680facc4db216042f92d55b298d8fe610815092e79274d02d6e1b5c64356c2f1484f83168749a31447", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r4, 0x0) ppoll(&(0x7f00000000c0)=[{r4}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r3, 0x401}, 0xc) syz_emit_ethernet(0x9d, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080503d7272a90c270cc58933e0da904dd01007bee50bfd9a73a04ab305b66c9d30d3f4f20eced8c68d49add7c866500c541b856c07041a2c1957eeeeb8283747d63855fc8133e1fd657bcd607e31a8073e35afa1f0df97026c229b00e7ab19c7599eb360e2a1c906862ea56868ead6c2cc558a117fe9c51077b37609eaf423961494bc64457472dd8875c157c591795c7"], 0x0) 4.703190633s ago: executing program 0 (id=2242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000000000000000000000850000007a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000008f00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$fou(&(0x7f0000000ac0), 0xffffffffffffffff) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000880)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) vmsplice(r0, &(0x7f00000007c0)=[{&(0x7f0000000100)="81afdec15b8c1db19120894814384e7448df962375f0", 0x16}, {&(0x7f0000000240)="8973d1558cf0ee9cd1ff1a8c8d3fd31e5344e056593fd1c6a7d0d07ec73bb1a2cfb4c439a170db56a863953680e05a9a090b66bf91a0980c4819cfe30ae4bd5d2d395c58244cf95e4ef4b2636271ae2572bf62679fa0794b37c05f3e6cb1809a1e75208ff1b5bdbee9c16ba84966d13c77c7a296294e943e44378a852452d96f763e36b957a78db49fa317380c01847b1505c3989fa5dae583e52affb3cf38a44a1547", 0xa3}], 0x2, 0xb) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f5f0000305f"], 0x0, 0x4a, 0x0, 0x1}, 0x28) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000000)={0x4, 0x3, 0x10001}, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) getsockname$packet(r7, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000900)=0x14) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f00000003c0)={0x8, 0x4, {0x9bf, @struct={0x7fffffff, 0xfffffff8}, 0x0, 0x6a, 0x2, 0x379, 0x3, 0x36bb, 0x0, @usage=0x5, 0x5, 0x5, [0xc, 0x5, 0x6, 0x10001, 0x6]}, {0x3, @usage=0x5, 0x0, 0x5, 0xf, 0x0, 0x3, 0x1, 0x42, @usage=0x1, 0x0, 0x1, [0xdcd6, 0x80000001, 0xc00000000000, 0x3, 0x2]}, {0x8, @struct={0x7, 0x9}, 0x0, 0x2a91, 0x6, 0x9, 0x9, 0x8, 0x400, @usage=0x3, 0x0, 0x5, [0x2, 0x9, 0x1, 0x2, 0x3, 0x4b5]}, {0x4, 0xb, 0x8}}) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r4, r7, 0x8f5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r9, 0x337, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x64018890}, 0x20040000) openat$cgroup_ro(r7, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x0, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000800)=[{{0x1, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x3, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x48) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000040)={0x0, 'lo\x00', {}, 0x8663}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040) 3.963514365s ago: executing program 4 (id=2251): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfd, 0x2, 0x0, 0x0, 0x6, 0x3200}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0xc0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) (async) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4) 3.738826479s ago: executing program 1 (id=2253): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001200ebff28bd7000fddbdf25e00000020000000000000000000000000000c45802003c4254d28c8739b85d8d88000c0015"], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) (async) close(0x3) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="720a6a812e564ec4ff00002334716c29b8bd8b000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x94) 3.41707923s ago: executing program 2 (id=2255): socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) (async) socket(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x73) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) (async) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f00000015c0)=@assoc_value={0x0, 0xfe55}, 0x8) 3.22790184s ago: executing program 3 (id=2256): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) unshare(0x26020480) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="18000000560001060200000000000000070000000024e300"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r2) 3.119845802s ago: executing program 1 (id=2257): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) socketpair(0x2, 0xa, 0x100, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000300)=0x2008, 0x4) sendmmsg$alg(r4, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="6b45e864ea13269e2dea60ce87df350bd04a048fc13d02b335209bbd79a94100b286141928753bd6519364aac370885ce96f4dbddeff6b3d1b8add250ba32eb9bc040752af2bacae46e149368541626713f2821d255a77d61fd63a2c", 0x5c}, {&(0x7f0000000400)="2288a23065513ffe18fc081ee5acb385ae8a30b7311d81071968bb4fce2410ce382988ea8d9185d35087cba055b49945a3797dbe0b60040ed0e7a815187bdce7fb6b8407b41f65ecbc5f59210684bdf9a956b73a7788b0659ef02247d6a8cab79036db2d7207db66cde69294df404d658e63018db8d69bc37f60c88ef0ef279b4b9e58419b43a870c191b8d53ca6417a45acc00720f2745490b0a1f723b9502ac1b320abda04e6f67c035c6a39ab969cfc20e6faa8e6113cfa9c1c45cfc3837a920a8c8cd362cee6970e8ba5f16725", 0xcf}], 0x2, &(0x7f0000000540)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20000800}, {0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000640)="29f9d54d94a3b7d05c365969ac73f6a0237c366b1b00e5448998418ac95e8b26b5f965e4be3bbfd493e3ae0a6228b432b35c31dd0f8b5e696b4f4f2ec9db68c84f9dab1fe630baff81040a290d6c52c58ab1c3c71b974916c4425bf76a4ff0937a9c43e9a8013e0294aa7111ab2d58ee70bc0e7eab4d4aa87a18c95deef783599eeec60cca14444fa1b11cbf46e6223c1c438d2340d435f8b58c7435f7012b788cc116d46f61047318069725daeedc6f2eb85748e0b1a757e377c88c0b1d5baf", 0xc0}, {&(0x7f0000000700)="41c474495df3e661ec68f254a8943cf8a63e90333628d78a25", 0x19}, {&(0x7f0000000740)="28f7f49f79c2c3b87bf30850d30dc5e9cfdc13244d6ae872431ff3d9c9ad8fdc29972a875a0251d829db027bf7e3c63623f7266bf1a6f10ffcb8c0206d904ba1e000f20316a126d02f4918597f8d7d93abc272720f25bfed45e8ac0c2345387a48975d20a1656b74ceb7292d4f9a06f7f3a674a84f4ea0ecbf07d3b435d5bcb3340ec037052a82ab3b98e1", 0x8b}, {&(0x7f0000000800)="406fc7cea7658cb8cb8ae033fafcb00fc329610d5668c1045ad77b5fac364a6408603fa86c13d7da023dcc392e42a192976deedc72f72668e34eb2b7c0ec7944c7e8d48ea53df3bb6bcc887bcc26fd11964d3590343d144189075e915a0079f2aa0d7ef7301ae3f954ab258b66ed", 0x6e}, {&(0x7f0000000880)="d9e73c747c450bcdf334c3e1ae25e9793453b7e8e3c7150e6111bd8f4bf944ce56a2a518ba65c7b094334a40e54d1e3e3f7d20bbe3", 0x35}, {&(0x7f00000008c0)="05f9d4b60661ed60ca928d30d1018ea311f6f760a732a98be7bd26cfb5879133315dbc1c7b2866258b1f50b4d99839ef149ac987ae78cd3c878bb79ccd78d6f86e38028dc68e5622c620ec7bc13cf3057049f5603d61a9cb5dd6b0452b52050fc734d4da6c3113f96724c0348c23c7789f1dc3e1045ed9c3f6ddbe3e33784d62c342caaedaff26cdd1afdc548cf9079502bed14457500ee55cf7a09f3912beb1fa13f513b756c8355b6370d28fe5f5f96d6133ecddd12a6a85bef29eb3e8618c328277", 0xc3}, {&(0x7f00000009c0)="707503ac6dbe3de4f73da44cd6a82534237571f52ac997bd1a41c6a9c03717a52614f2c014cebc532819827a1854b425e7203e855afc619a176f0777aa12cdf06a7aed9aee39fda74cce21f8e035a26e5442085ece85d71091c1d93acd8186a10634b3deb1c549774a49af25650cef88ed50f4683274014480ac32348da2515c07a9651fb53ff6d0c9ae21493a7d84aa558c45be46576d682e0202290a16cdceac4aac5dc8b45ccc79d53f104d2d5afaafa7a52a963243b1e2b5be88cad0054997540b8d3bdedf99e4c2317a6cf8fe75051dc0772384a4da9af3540a92867a2d0dc1196bb8d7a4639569ed92f55d", 0xee}], 0x7}], 0x2, 0x8010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xd, 0xe}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xd, 0xe}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) socket$nl_rdma(0x10, 0x3, 0x14) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000101401002dbd700001dcdf2508004b001300000008001d"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0xc0) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="1c005e800800020001000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) write(r0, &(0x7f0000000000)="09000300010001", 0x7) (async) write(r0, &(0x7f0000000000)="09000300010001", 0x7) 2.933046988s ago: executing program 4 (id=2258): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000400)='GPL\x00', 0xd, 0x1023, &(0x7f0000002cc0)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x0, r1, 0x19c00, 0x0, 0x3e, 0x10, &(0x7f0000000180)={0x0, 0x10, 0x5b, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 2.857798487s ago: executing program 4 (id=2259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r5], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r4}, 0xc) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0x1d, 0x65, 0x0, 0xd, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}}, "3297e3ba0fa8a2e71b"}}, 0x2b) 2.213081955s ago: executing program 3 (id=2260): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e00, @empty}, 0x10) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e00, @empty}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'syzkaller1\x00', {}, 0x400}) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'syzkaller1\x00', {}, 0x400}) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="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", 0x15a}, {&(0x7f0000000d00)="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", 0x327}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) socket$packet(0x11, 0xa, 0x300) (async) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r2, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xea, &(0x7f0000000fc0)=""/234, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r2, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xea, &(0x7f0000000fc0)=""/234, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.113517647s ago: executing program 1 (id=2261): r0 = socket$inet(0x2, 0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8}]}, 0x5e}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x4000000000a}, 0x60) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="0704", 0x2) socket$inet(0x2, 0x3, 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8}]}, 0x5e}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x4000000000a}, 0x60) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="0704", 0x2) (async) 2.088056382s ago: executing program 2 (id=2262): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1], &(0x7f0000000700), 0x200000000000000, 0x1}}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030400000000000000000000000074ccecb492b95826cc23fb38add19d601be7f820be04b5dacd68609907bfa5af9b50403ba7fee169e6aea13eae743bd39c669bbdd31559cd9b53be175e7ba963962f702bf267fceb6c8d522b46c7a19f35a10f00b8575b0872969bf0fe30d436c781c1256c2c7088af7762c8d7546b31011328989008e15778872bdc6e7a8dbbe203e7f6e9ba05fa10ec87e4cf65b41438c2ca22fdc4630221ad69ba0ba758466a8bce746e2e32", @ANYRES32=0x0, @ANYBLOB="1502000000001000140012800a00010069706f69620000000400028008000500", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0xba01}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x84e56105723e644b}, @TCA_TBF_BURST={0x8, 0x6, 0x20000000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xa, 0x4}, {0x9c, 0x0, 0x7, 0x1, 0x6, 0x5}, 0x6, 0x71d, 0xa74}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$IP_VS_SO_SET_EDITDEST(r13, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e21, 0x3, 'none\x00', 0x0, 0x60000000, 0x8000c}, {@rand_addr=0x64010102, 0x4e26, 0x10000, 0x0, 0x8005, 0x1}}, 0x44) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r13, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e21, 0x3, 'none\x00', 0x0, 0x60000000, 0x8000c}, {@rand_addr=0x64010102, 0x4e26, 0x10000, 0x0, 0x8005, 0x1}}, 0x44) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r14 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r14, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) 1.900000223s ago: executing program 3 (id=2263): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x10, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x8dff}}}}}}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair(0x22, 0x4, 0x8001, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000580)={r2, 0x2, 0x81, "5894e7bd5175995b1f113b8a03cdef55cd5a5ec760a681832909de9074a5c2154df58c6ed6737a38218ca8c8b43d9b3c8bc30076f6a4093654863f82fc3bc2608ee9d70d96cddc"}) r6 = socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) connect$rxrpc(r5, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x24) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = accept$unix(r0, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000004c0)={r3, r7, 0x4, 0x5a, &(0x7f0000000440)="aa645372b916fb88311f0a23e01ccd66461b3859f8629b149d6cc2af12cfe8e3e3dfb3d526b1aad5e539cbb3c77f0260ad7cd1539860bb206daf5e29081f7a334bc43b381711c8bbb5ccd36406ae9de7d09aec6d25bbf307cc99", 0x2, 0x57, 0x6, 0x2, 0x5, 0x0, 0x8001, 'syz0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0xd8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xac, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x2, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffc, 0x6}, {0x7fde, 0x40, 0x51, 0x3fc}, {0x7, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x200}, {0x1, 0x1800004, 0xa525, 0x200000}]}}, @TCA_U32_POLICE={0x4, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}]}, @TCA_U32_LINK={0xfffffffffffffe2a, 0x3, 0xd}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0xc040) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x10, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x8dff}}}}}}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socketpair(0x22, 0x4, 0x8001, &(0x7f0000000000)) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000580)={r2, 0x2, 0x81, "5894e7bd5175995b1f113b8a03cdef55cd5a5ec760a681832909de9074a5c2154df58c6ed6737a38218ca8c8b43d9b3c8bc30076f6a4093654863f82fc3bc2608ee9d70d96cddc"}) (async) socket$inet6(0xa, 0x2, 0x3a) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) (async) sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) (async) connect$rxrpc(r5, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x24) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) accept$unix(r0, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000004c0)={r3, r7, 0x4, 0x5a, &(0x7f0000000440)="aa645372b916fb88311f0a23e01ccd66461b3859f8629b149d6cc2af12cfe8e3e3dfb3d526b1aad5e539cbb3c77f0260ad7cd1539860bb206daf5e29081f7a334bc43b381711c8bbb5ccd36406ae9de7d09aec6d25bbf307cc99", 0x2, 0x57, 0x6, 0x2, 0x5, 0x0, 0x8001, 'syz0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0xd8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xac, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x2, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffc, 0x6}, {0x7fde, 0x40, 0x51, 0x3fc}, {0x7, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x200}, {0x1, 0x1800004, 0xa525, 0x200000}]}}, @TCA_U32_POLICE={0x4, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}]}, @TCA_U32_LINK={0xfffffffffffffe2a, 0x3, 0xd}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0xc040) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) 1.819229187s ago: executing program 2 (id=2264): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001540)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="781020fc386fe096dfc27e675fc1b52c60b83348e0e511", 0x17}], 0x1, 0x0, 0x0, 0x24000010}], 0x1, 0x40001) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0xfffff000, 0xd5, 0x0, 0x1}, 0x1c) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="dfeb010018000000000000006c0000006c0000000c000000000000000100000d000000000c0000000400000000000000000000010500000020000000000000000000000b020000000400000003000085ff7fffff0400000003000000030000000f00000002000000080000000e00000002000000f80000000c000000000000020200000000305f302e4f006100002e00"], 0x0, 0x90, 0x0, 0x0, 0x400}, 0x28) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @loopback, 0x9}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000ade100000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000300"/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7c, r3}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x2, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r2, 0x20, &(0x7f0000000940)={&(0x7f00000007c0)=""/144, 0x90, 0x0, 0x0}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000410000008500000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESHEX=r0], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000000b5c01000000800000000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000050000000400"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x800, 0x18}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0x0, 0x401, 0x8}, 0xc) 1.810984283s ago: executing program 1 (id=2265): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "0cbeb67c876b6de6", "dec5441e1fbf4ca771bbdfa10bf4708a", "2ce23716", "afe9312ecf5bb974"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) recvfrom$inet6(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5112abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00020300ffffffff00000000000000000000000086"], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x40084c0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xfc900, 0x0) close(r5) 1.810476036s ago: executing program 4 (id=2266): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000408010100000000000000000a000900010073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c841}, 0x0) 1.328915595s ago: executing program 3 (id=2267): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000800)=[{&(0x7f0000000840)="1db6", 0x2}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000140), 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000180)={r6, 0x4}, 0x8) listen(r3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000520600000000000000000000009500ec0000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r10 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r10, &(0x7f0000000280)=[{{&(0x7f0000000100)={0xa, 0x4e27, 0x10003ff, @mcast1, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="140000000000000029000000080000000800000000000000140000000000000029000000430000000900000000000000e80000000000000029000000360000006c19000000000000c910200100000100000000000000000000000502000505020004c91020010000000000000000000000000001079cf3170ddfd629da29d709493ffc93d4cfc0e5ebb19f2505cb1ca085692b0a8b020b1983c88ee106e120276cb081c2aead4922c82c658cc52cd4b3d67780886759da3b57ff49521fbe5c0f097825c987eb83509907b24e77d434e4ae83adb017373f31c51d6092cf7c083222cd49cd40a8c82c8bc9ec97007bec22304fd2cf4db6a7079b7ef0b9a1facd8a6e36b30c36e0c49496a8125e09dff5790400000000000000200000000000000029000000370000002f0100000000000001030000000401051500000000000000290000004300"], 0x250}}], 0x1, 0x4004804) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r12 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt(r12, 0x9, 0x4, &(0x7f00000002c0)=""/219, &(0x7f00000003c0)=0xdb) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r11, @ANYRES32=r11, @ANYBLOB="2f0000004520000504"], 0x20) 1.269340989s ago: executing program 0 (id=2268): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x6}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan4\x00', 0x0}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000002e0000000c000500000000000000000008000200", @ANYRES32=r7, @ANYBLOB="05002b00000000000600060002000000a74fe99f036d67864a5cd5d882bbbb0ebdcddf79ddde09ca2d16ba14b8e55c4d2ee23c"], 0x38}}, 0x40080) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 1.255114805s ago: executing program 2 (id=2269): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a", @ANYRES16=r4, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000280)=""/195, 0x83d00, 0x2b, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) (async) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x1, 0x1}, 0xfd}, 0x18) (async) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r9, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@private0, 0x3a}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/pid_for_children\x00') (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r11, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socket(0x11, 0x3, 0x9f) setsockopt(r1, 0x107, 0xf, &(0x7f0000000600)="00737232f19cbf1ec5677ebb8fb0", 0xa) socket$inet6_udp(0xa, 0x2, 0x0) 1.011848669s ago: executing program 2 (id=2270): socket$alg(0x26, 0x5, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) write$cgroup_devices(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="61202a3a2a6d0014fe1bc7216f"], 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000240), &(0x7f0000000340)=r4}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@initdev, @remote, 0x0}, &(0x7f0000000440)=0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000005c0100005c01b100000a000000090000000500000f0300000003000000ff030000b000000001000000020000000010000003000000020000005e690000010000000200000001000100020000000104000000000000d04209000000000400000d0000000002000000010000000f00000001000000060000000000000000000000050000000300000000000009040000000f0000ac0700000f0100000002000000384900000900000004000000000000000200000002000000010000000600000002000000b500000007000000020000000000000006000000050000000700000001000000020000008c048be09db42f50cbca04000000ff010000fd020000000000000b050000000400000002000013080000000200000004000000820b00000400000000010000070000000c000000000000090100000008000000060000060400000003000000070000000200000007000000060000000000000007000000080000000d0000000000000004000000ffffff"], &(0x7f0000000780)=""/158, 0x17e, 0x9e, 0x1, 0xc, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300040000000a000000000000020000000000003a1bc7612ff4d879818f", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="00000000040000000300"/28], 0x50) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x7fff000, 0xfffffffa, 0xd67}, &(0x7f0000000140)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r10, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24048894) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r12, 0x29, 0x3d, 0x0, &(0x7f00000002c0)) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="810000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014030300ff01000000000000000000000000000114000400fe8000000000080000000000000000bb0800074000000001d15d87e71fd154dbd5fcae4c9718788e78c6774973e8577034ec51a803bac5033cb7809cba783a1a92ab44281ee8bdd70e96e0360cfb02a5842516e1c631a39456b889e53b8352f8da5197e58ef6dc880453c0e6b2a6c211d1e933af5a44bf9a15241a"], 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 765.004709ms ago: executing program 4 (id=2271): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x207) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x48, r8, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b8c5e26a8d3d99976f7f7200ca75fb0a"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "48862547765f7296b19cd46bb568f28a"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffe02, 0x8e, 0x1}, {0xfffffee6, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x0) 764.524036ms ago: executing program 0 (id=2272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="0007000000b5adb119ca0b530275914ca2d883d024fa37e2abc082f18c83fc613b81052b27a13f80f8059b4b4149fee61f9d325cbdfa39fe7eab90e0ddeb6a769833570ea84a1aa1f4a70ce441f9f8e53d69ac3ed0750049e113726ff6631a85e2a84c0b57ccef7d58d3419b7c06c3a530d0d8bec0eb56e4ead460b103f05a41e87bf4c6b1674e613f71b39d894b649b333c0f5a89023ebc0b3f8655e264487a51f80bc4c79687049a5079641187d2a40751d08080abf9bd188e0a55612fe2079efba1f182c97e927c2a4188", @ANYRES32=0x0, @ANYBLOB="008000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) tee(r1, r1, 0x100000001, 0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f0000000040), 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x4e22, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000280)={0x8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) pread64(r4, &(0x7f0000002840)=""/4096, 0x1000, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000180)=""/71, &(0x7f0000000240)=0x47) 543.412368ms ago: executing program 1 (id=2273): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x200000, 0x0, 0xd405, &(0x7f0000000400), &(0x7f0000000440)=0x4c36}) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@loopback, 0x0, 0x32}, @in6=@loopback, {0x0, 0x2a3, 0x7f, 0xffffffffffffffff, 0x0, 0x33}, {0x7}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0xaf}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd2b}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x200}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffb0900030073797a32000000000900010073797a300000000008000a400000000420000000080a01040000000000000000010000000900010073797a30"], 0x9c}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket(0x2b, 0x1, 0x1) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000080), 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x880) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x8000000, 0x2, 0x0, 0x18, 0x800, 0x3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 299.128263ms ago: executing program 3 (id=2274): r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) r4 = gettid() sendmsg$nl_generic(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x38c, 0x1d, 0x10, 0x70bd29, 0x25dfdbfd, {0x12}, [@typed={0x8, 0xd6, 0x0, 0x0, @uid=r3}, @generic="f807771ad0eb3bb0cbb9800d2e050804a684cc3170d3a35b7a9e91d8ab88a0be64ccfd1251c2fd70a71ae99201eb0aa7d8aa5f485c949690662713d1e8caec7168a8d5474b9a1e256af29e46f2794f1cc1fe470517f0cac7fd32d68d08e4a18d9c0e8cd4af94970898ac6f6ec6b297b9435c726e09334efcf8c2d1857114bfbdc611c8ebc517ab21796567858301e516068d564d5020c12c45a73faf0c1f2243b66b38cc8d51b63f71e712886b1c3989633ba1a8", @generic="1fcf4076b637641e1c5620df6dd7d5a6b756a2df6f10d346b0410c080376df866807c2bfdbc9f1cf918e2a1a39b6f531b11121f7128e5b9fce9a661394ec3d6a416f209c9d0885afb5db90333b3d827ec72523f6da673f3db5afdca1943940ceb72165a4ff65e3eb5e5e77a45a0ff60550e8f8a23f44439b9fab13ecfd09fda79729d32ec64830e234e71fbfb9cdfe0052a6d44aeff5c8b81a0605c42d5aa7859e52e6dddc61abd81b6f1f8a05af22097d500fd0f5f2f26123cf4b8866b609b19778fdd2e31ba901e28bb6921721562cf14aba9a849953ceeaf06c80", @nested={0x1df, 0xca, 0x0, 0x1, [@generic="19979c1f90a09b613754f58e640a769f2a0872e2270098ac71a39c4d082d48fb6c005488a8d681aed9a746e1b42b1bc65f86fd5019801f6216637e10287297a727dd17c6915d569925fa0cae229b396b0fafc120856e93b8d26a8c537eea366209b8729ca80df53ed685bbcaf4d7b8ffa1ecf666d078409a43ac086e04143a617081f6a36e5a0c16612d3846a174e20b62078d096e5960ccdb9a43b9bced0ab7d0ff6aef1a366a936c9cb4c0", @generic="08c0751555000c4cf48d5690a47db1227e1f951896575157d2f30be169af7e9f3b51fbd9527e841be1e87c7d93b1c5efcc5dda29b37a58b1628fd4cf2551d98debffefacb7e793195d8b824f86c43792c6b4ccdce67a248a0e389cb058dbf5ef54b1318867e68dd372ee4038961b01190274d99c0aebbfad071a375634074b8abb6a7534a384a09852334bbb059e7a3ce3b1259da97193e686e7996463262f00eef477fdd8f3d704954831", @typed={0x7c, 0x1a, 0x0, 0x0, @binary="60f655a5403d87c6dde225d80bf7c94fbc784e6bf40de9dae64bf8976c78c19c1e261a200a537f4e1e45204265e7607c0c751dccf22b1f07d72f9efd4418fcbfba807a57df6af5e28756531d4bbd3cd4318a570730742264750ab7de44fef7941d252f42cef495cd5a2c8ec31258d5e74d78b7fcd259efcd"}, @typed={0x8, 0xe4, 0x0, 0x0, @pid=r4}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20004010) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r5, &(0x7f0000000600)={0x2, 0x4e22, @broadcast}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r6, 0x20, 0x70bd2c, 0x1, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x24}}}}, ["", "", ""]}, 0x28}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001b40)={&(0x7f00000007c0), 0xc, &(0x7f0000001b00)={&(0x7f0000000840)={0x12c0, r6, 0x100, 0x70bd25, 0xff6, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x7d4, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x56}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x24}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x31c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x318, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0xc, 0x3, 0x1b, 0xc, 0x6, 0x30, 0x0, 0x36, 0x36, 0x6, 0x6, 0x6, 0x60, 0x6c, 0x40, 0x18, 0x9, 0xc, 0xb, 0x18]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x21, 0x0, 0x5, 0x80, 0x7f, 0x2, 0xa]}}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x9}, {0x0, 0x8}, {0x6, 0x2}, {0x2, 0xa}, {0x0, 0x7}, {0x2, 0x2}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x4}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x4}, {0x4, 0x3}, {0x1, 0x5}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x1}, {0x5, 0x6}, {0x7}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x5, 0x6}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x6, 0x9}, {0x5, 0x3}, {0x4, 0x6}, {0x1, 0x8}, {}, {0x6, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x3, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x7f, 0x2, 0x6d, 0xc, 0x8, 0x7]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x6, 0x1, 0x4, 0xc, 0x9, 0x3, 0xc, 0x36, 0x36, 0x18, 0x4]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7, 0x7}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {0x6, 0x7}, {0x2, 0x3}, {0x3, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x6, 0x6}, {0x1, 0x9}, {0x6, 0x5}, {0x7, 0x2}, {0x6, 0x1}, {0x1}, {0x2, 0x2}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x8}, {0x5, 0x3}, {0x1, 0x5}, {0x1, 0x3}, {0x5, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x5, 0x2}, {0x4, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x2, 0x2}, {0x6, 0x4}, {0x3, 0x2}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x3, 0x1, 0x8, 0x0, 0x5e, 0x80]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x2}, {0x7, 0x8}, {0x3, 0x8}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0xa}]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x4, 0x48, 0x9, 0x6, 0x18, 0x4, 0x1, 0x24, 0x16, 0x1, 0x4, 0xb, 0x1c, 0x9, 0x0, 0x6, 0xc, 0x6c, 0x16, 0x36, 0x9, 0x18, 0x48, 0x36, 0x16, 0x6c, 0x6, 0x5, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x742, 0x3, 0xffff, 0x4, 0x6, 0x9, 0xe0, 0xfffd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x3ff, 0x6, 0xffff, 0x401, 0x7, 0x9]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{}, {0x7, 0x9}, {0x4, 0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x2, 0x7}, {0x6, 0x2}, {0x4, 0x1}, {0x4, 0x3}, {0x2, 0x5}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x7, 0x8}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0x3}, {0x5, 0x2}, {}, {0x2, 0x4}, {0x1, 0x5}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x3}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x4}, {0x2, 0x7}, {0x0, 0x2}, {0x3, 0x6}, {0x5, 0x2}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x6, 0x3}, {0x0, 0x6}, {0x6}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0x7}, {0x6, 0x1}, {0x3}, {0x5, 0x9}, {}, {0x6, 0x2}, {0x0, 0x5}, {0x1, 0x8}, {0x3}, {0x4, 0xa}, {0x4, 0x5}, {0x6, 0x3}, {0x6, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x7, 0xa}, {0x2, 0x6}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x3}, {0x5, 0x5}, {}, {0x1, 0x9}, {0x0, 0x5}, {0x1}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x10, 0x1000, 0x8, 0x6, 0x754, 0xc33, 0x3]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0xc, 0x9a7d, 0x0, 0x6, 0x8301, 0x2]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x5, 0x2}, {0x7, 0x6}, {0x3, 0x9}, {0x1, 0xa}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x9}, {0x2}, {0x0, 0x4}, {0x1, 0x8}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0x5}, {0x0, 0x8}, {0x4, 0xa}, {0x2, 0x7}, {0x0, 0x9}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0xa}, {0x4}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0xa}, {0x1, 0x5}, {}, {0x2, 0x9}, {0x3, 0x7}, {0x1, 0xa}, {0x0, 0x6}, {0x2, 0x9}, {0x4, 0x5}, {0x4}, {0x6, 0x7}, {0x1}, {0x2, 0x9}, {0x4, 0x5}, {0x1}, {0x7, 0x6}, {0x2, 0xa}, {0x0, 0xa}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x2}, {0x7, 0xa}, {0x6, 0x1}, {0x3}, {0x4, 0x8}, {0x1, 0x5}, {0x7, 0x6}, {0x3, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x1}, {}, {0x5}, {0x2, 0x5}, {0x4, 0x2}, {0x3, 0x8}, {0x3, 0x2}, {0x1, 0xa}, {}, {0x6, 0x4}, {0x4, 0x8}, {0x1, 0x3}, {0x3, 0x7}, {0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x6, 0x5}, {0x2, 0x9}, {0x4, 0x9}, {0x0, 0xa}, {0x7}, {0x7, 0x5}, {0x1}, {0x1, 0x6}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0xa}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x1}, {0x4, 0x7}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0x6}, {0x1}, {0x7, 0xa}, {0x5, 0x7}, {0x2, 0x7}, {0x6, 0x7}, {0x3, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x7}, {0x3, 0x8}, {0x6, 0x4}, {0x1, 0x2}, {0x2, 0x3}, {0x6, 0x3}, {0x3, 0x7}, {0x4, 0x8}, {0x3, 0x1}, {0x0, 0x3}, {0x2, 0x9}, {0x1, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0x6}, {0x2, 0x3}, {0x1, 0x8}, {0x3, 0xa}, {0x3, 0x7}, {0x4, 0x5}, {0x2, 0xa}, {0x7, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x3}, {0x2, 0x4}, {0x6, 0x2}, {0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x2, 0x5}, {0x7, 0x5}, {0x0, 0x1}, {0x7, 0x7}, {0x0, 0x4}, {0x2, 0x6}, {0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x2}, {0x6, 0x3}, {0x3}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x24, 0x0, 0x16, 0x4, 0x3, 0xc, 0x60, 0x44, 0x60, 0x1, 0x6, 0x1, 0x1b, 0xb, 0x2, 0x48, 0x2, 0x1b, 0x4, 0x4, 0x12, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x0, 0x18, 0x36, 0x36, 0xb, 0x3, 0x6, 0x24, 0x1, 0xc, 0x48]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0x2, 0x9, 0x2, 0xd4fa, 0x1, 0x26]}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x394}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x63}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x2}, {0x6, 0x2}, {0x1, 0xa}, {0x3, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x6}, {0x7, 0x4}, {0x7, 0xa}, {0x3, 0x3}, {}, {}, {0x6, 0x6}, {0x4, 0x8}, {0x4}, {0x0, 0x6}, {0x5, 0x4}, {0x4, 0x1}, {0x3, 0x3}, {0x5, 0x7}, {0x7, 0x6}, {0x0, 0x8}, {0x1, 0x6}, {0x2, 0x8}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x9}, {0x5, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x34c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x7, 0x8001, 0x8, 0x4, 0xb, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x3, 0x7, 0x6, 0x2, 0x7, 0x2, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x2, 0x1, 0xf5b, 0x5, 0x0, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x0, 0x16, 0x48, 0xb, 0xc, 0x60, 0x5, 0x12, 0x18, 0x9, 0x1b, 0x24, 0x5, 0x9, 0x24, 0x33, 0x16, 0x30, 0x6c, 0xc, 0x5, 0x0, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x9, 0xfffa, 0x7, 0x8, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x24, 0x60, 0x6c, 0x9, 0x48, 0x30, 0x36, 0x48, 0x48, 0x4, 0x16, 0x16, 0x9, 0x78, 0xb, 0x1b, 0xb, 0x6, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x9, 0x0, 0x1e, 0x6]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x1b, 0x6c, 0xb, 0x6c, 0x48, 0x5, 0x1, 0x2, 0xc, 0x30, 0x60, 0x12, 0x12, 0x6, 0x2, 0x18, 0x36, 0x5, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x2, 0xf, 0x0, 0x101, 0x6, 0x81, 0xffff]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{}, {0x1, 0x7}, {0x1, 0x9}, {0x4, 0x4}, {0x3, 0x5}, {0x3, 0x4}, {0x3, 0x3}, {0x3, 0x7}, {0x3}, {0x1, 0x9}, {0x5, 0x4}, {0x7, 0x8}, {0x1, 0x7}, {0x1, 0x2}, {}, {0x6, 0x7}, {0x4, 0xa}, {0x5, 0xa}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x4}, {0x7, 0x6}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfdf4, 0x1, 0x4, 0x3, 0xa, 0xfffd, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x2, 0xff, 0xfffd, 0x3, 0x0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0xc0f9, 0x2, 0x4, 0x2, 0xfffb]}}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x8}, {0x3, 0x6}, {0x4, 0x7}, {0x4, 0xa}, {0x4, 0x9}, {0x5, 0x4}, {0x5, 0x4}, {0x4, 0x2}, {0x0, 0x6}, {0x7, 0x7}, {0x5, 0x1}, {0x2, 0xa}, {0x7, 0x3}, {0x3, 0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x4}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x2}, {0x2, 0x3}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0x5}, {0x4, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x4}, {0x4}, {0x5, 0x5}, {0x7, 0x9}, {0x7, 0x2}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8001, 0xe, 0x5e2d, 0x3, 0x1, 0x2, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x4, 0xff, 0x6000, 0xfc00, 0x6dde, 0x60, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x3, 0x3, 0x6, 0x5, 0x2, 0x7, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffff, 0x0, 0x2, 0x9, 0x2d9, 0xd8, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x0, 0xfffc, 0xfff8, 0x6, 0x4, 0xe]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x2}, {0x6, 0x6}, {0x5, 0x8}, {0x7, 0x8}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0x6}, {0x5, 0x6}, {0x7}, {0x5, 0x5}, {0x2, 0x8}, {}, {0x6, 0x9}, {0x1, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x7, 0x8}, {0x2, 0x7}, {0x1, 0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x7, 0x7}, {0x4, 0x9}, {0x3, 0x5}, {0x1, 0x6}, {0x1, 0x4}, {0x7, 0x7}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdfdd, 0xa89f, 0x1, 0xfffa, 0x4, 0x7ff, 0xffff, 0x2]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x3, 0x1ff, 0x9, 0x7f, 0x4, 0x400, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x1, 0x7, 0x240d, 0x5, 0x7, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xdc6b, 0x0, 0x65, 0x3, 0x2, 0x9, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x1, 0x2, 0x9, 0x3, 0xce, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x0, 0x9, 0x3c, 0x213e, 0x5, 0x9b0]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x6}, {0x3, 0x3}, {0x2, 0x1}, {0x6, 0x5}, {0x2, 0x7}, {0x1, 0x2}, {0x5, 0x6}, {0x7, 0xa}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x3ff, 0x0, 0x4, 0x7, 0x80, 0x1000, 0x400]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x2, 0x5, 0x36, 0x3, 0x6c, 0x5, 0x1, 0x12, 0x4, 0x60, 0x1b, 0x24, 0x11, 0x24, 0x60, 0x1, 0x30, 0x16]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x3, 0x1, 0x0, 0x3, 0x4, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x5e0, 0x11d, 0x0, 0x1, [{0x25c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x4, 0x3, 0x2, 0x18, 0x1]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0xa}, {0x1, 0x6}, {0x0, 0x6}, {0x4, 0x8}, {0x0, 0x3}, {0x6, 0x4}, {0x4, 0x6}, {0x4, 0x1}, {0x6, 0x6}, {0x6, 0x9}, {0x4}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x6}, {}, {0x1, 0xa}, {0x3}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0x2}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0x1}, {0x4}, {0x7, 0x9}, {0x4, 0x3}, {0x3, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x2, 0x8}, {0x2, 0x6}, {0x5}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x2}, {0x3, 0x3}, {0x2, 0xa}, {0x1, 0x1}, {0x6, 0x2}, {0x6}, {0x4, 0x5}, {0x1, 0xa}, {0x4, 0x3}, {0x7, 0x9}, {0x7, 0x7}, {0x3, 0x2}, {0x1, 0xa}, {0x6, 0x2}, {0x2, 0x9}, {0x4, 0x4}, {0x4, 0x9}, {0x3, 0x1}, {0x2, 0x9}, {0x4, 0x4}, {0x4, 0xa}, {0x3, 0x1}, {0x1, 0x2}, {0x7, 0x4}, {0x1, 0x2}, {0x6, 0x7}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0xa9b42438b471872f, 0x2, 0x3, 0x36, 0x9, 0x30, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0xcc2, 0x8d74, 0x2, 0x44eb, 0x4000, 0x40]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x401, 0xa1, 0x4, 0xbe, 0x8, 0x7, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x194, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x5}, {0x4, 0x4}, {0x2, 0x6}, {0x6}, {0x7, 0x9}, {0x2, 0x9}, {0x2, 0x9}, {0x3, 0xa}, {0x0, 0xa}, {0x5, 0x6}, {0x3, 0x9}, {0x1}, {0x6, 0x2}, {0x7}, {0x7, 0x4}, {0x6}, {0x1, 0x9}, {0x3, 0x9}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {}, {0x3, 0xa}, {0x3, 0xa}, {0x4, 0x8}, {0x0, 0x6}, {0x6, 0x2}, {0x7, 0x6}, {0x2}, {0x0, 0x5}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x3}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x1, 0x8}, {0x6, 0x7}, {0x6, 0x7}, {0x1}, {0x1, 0x9}, {}, {0x5, 0x8}, {0x7, 0x8}, {0x6, 0x9}, {0x2, 0xa}, {0x7, 0x2}, {0x6, 0x9}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x1}, {0x1, 0x4}, {0x0, 0x9}, {0x3, 0x7}, {0x6}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x3}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x4}, {0x6}, {0x2, 0x8}, {0x5, 0x6}, {0x7, 0x3}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x5}, {0x5, 0x6}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x8}, {0x7}, {0x2}, {0x5, 0x5}, {0x0, 0x5}, {0x7, 0x5}, {}, {0x1, 0x5}, {0x6, 0x7}, {0x4, 0x3}, {0x6, 0x1}, {0x0, 0x8}, {0x3, 0xa}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0xa}, {0x6}, {0x7, 0xa}, {0x0, 0x6}, {0x4, 0x5}, {0x4, 0x7}, {0x4}, {}, {0x7, 0x8}, {0x0, 0x8}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x5}, {}, {0x7, 0x5}, {0x2, 0x7}, {0x1, 0x4}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x4}, {0x3, 0x4}, {0x6}, {0x2, 0x9}, {0x1, 0x9}, {0x5, 0x8}, {0x3, 0xa}, {0x5, 0x4}, {0x4, 0x9}, {0x4, 0x4}, {0x4}, {0x5, 0x4}, {0x1}, {0x1, 0x4}, {0x4, 0x8}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0x8}, {0x3, 0x6}, {0x0, 0x1}, {}, {0x1, 0x7}, {0x5, 0xa}, {0x4, 0xa}, {0x1, 0x3}, {0x1, 0x9}, {0x4, 0xa}, {0x0, 0x2}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x12, 0xc, 0x6c, 0x3, 0x16, 0x16, 0xc, 0x0, 0x60, 0x1b, 0x0, 0x1b, 0x9, 0x45, 0x30, 0x36, 0x2, 0x2]}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0x5, 0x36, 0x5, 0x30, 0xb, 0x5, 0x4, 0x5, 0x6, 0x3, 0x0, 0x27, 0x3, 0xb, 0x6c, 0x6c, 0x24, 0x12, 0x6c, 0x6, 0x6c, 0x0, 0x5, 0x5, 0x6, 0x24, 0x6, 0x4, 0x1, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2800, 0x2, 0x7, 0x2, 0x6, 0x1, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa93, 0x5, 0x1447, 0x20, 0x4, 0x1, 0x1000, 0x3ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x0, 0x1ff, 0x9, 0x9, 0xf5]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x4}, {0x1, 0x5}, {0x4, 0x1}, {0x6}, {0x1, 0x5}, {0x5, 0x7}, {0x5, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x8}, {0x2, 0x4}, {0x4, 0x9}, {0x5, 0x4}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x9}, {0x1}, {0x1, 0x9}, {0x3, 0x4}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x2, 0xa}, {0x5, 0x5}, {0x0, 0x3}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x7, 0x3}, {0x2, 0x9}, {0x7, 0x2}, {0x2, 0x6}, {0x7, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x7}, {0x2, 0x7}, {0x2, 0x6}, {0x3, 0x3}, {0x4, 0x6}, {0x6, 0x1}, {0x4, 0xa}, {0x6, 0x4}, {0x2, 0x4}, {0x3, 0x7}, {0x6, 0x4}, {0x6, 0x2}, {0x7, 0x3}, {0x5, 0x9}, {0x2, 0xa}, {0x7}, {0x3, 0x7}, {0x4, 0x5}, {0x7, 0x8}, {0x1, 0x8}, {0x4, 0x4}, {0x5, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x230, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x21c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0x3}, {0x1}, {0x7, 0x1}, {0x0, 0x9}, {0x4, 0x5}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x3}, {0x1}]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x9}, {0x5, 0x1}, {0x0, 0x4}, {0x2, 0x9}, {0x4, 0x2}, {0x0, 0x6}, {0x3, 0x9}, {0x1, 0x4}, {0x0, 0x6}, {0x4}, {0x1, 0x8}, {0x5, 0xa}, {0x4, 0xa}, {0x2, 0x7}, {0x5, 0x1}, {0x4, 0x2}, {0x3, 0x4}, {0x6, 0x6}, {0x5, 0x4}, {0x0, 0x5}, {0x7}, {0x1}, {0x4, 0x1}, {0x3, 0x7}, {0x7, 0x9}, {0x4, 0x8}, {}, {0x6, 0x1}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x5}, {0x6, 0x2}, {0x1, 0x4}, {0x4, 0x8}, {0x4, 0x9}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x3, 0x7}, {0x3, 0x1}, {0x0, 0x5}, {0x6, 0x2}, {0x6, 0x7}, {0x6, 0x6}, {0x6, 0x1}, {0x5, 0x2}, {0x6, 0x4}, {0x6, 0x3}, {0x3}, {0x7, 0x6}, {0x7, 0x8}, {0x4, 0x8}, {0x4}, {0x2, 0x9}, {0x0, 0x6}, {0x0, 0x8}, {0x1, 0x6}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x8, 0x8, 0xff, 0x3, 0x6, 0x8, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x591, 0x9ee2, 0x8e16, 0x2, 0x4, 0x100, 0xc]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x1}, {0x4}, {0x7, 0x6}, {0x2, 0x8}, {0x2, 0x15}, {0x5, 0x2}, {0x3, 0x9}, {0x1, 0x1}, {0x6, 0x5}, {0x2, 0x9}, {0x2, 0x3}, {0x0, 0x9}, {0x4, 0x7}, {0x6, 0x4}, {0x0, 0x8}, {0x0, 0x5}, {0x4, 0xa}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0x4}, {0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x3, 0x9, 0x6c, 0xb, 0x12, 0x5c, 0x6, 0x48, 0x12, 0x3, 0x2, 0x6, 0x36, 0x48, 0x3, 0x9, 0x1b, 0x12, 0x60, 0x16, 0x3, 0x41, 0x12, 0x0, 0x60, 0x16, 0x5, 0x2]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x0, 0x8, 0xf6f9, 0x8, 0xbaf, 0x5, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf, 0x0, 0x3, 0x4, 0x68d, 0x80, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x7}, {0x2, 0x8}, {0x3}, {0x2, 0x7}, {0x6, 0x8}, {0x2}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x7, 0x8}, {0x3, 0x5}, {0x3, 0x1}, {0x7, 0x3}, {0x4, 0x2}, {0x4, 0x4}, {0x5, 0x4}, {0x4, 0x2}, {0x4, 0x3}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0xa}, {0x6, 0x3}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x1, 0x5}, {0x3, 0x4}, {0x3, 0xa}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x4}, {0x0, 0x8}, {0x5, 0x4}, {0x5, 0xa}, {0x6, 0x9}, {0x2, 0x4}, {0x2, 0x4}, {0x1, 0x3}, {0x6, 0x5}, {0x4, 0x5}, {0x7, 0x7}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x7}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x68, 0xfff3, 0x7dcf, 0x16, 0xcbed, 0x5, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x96, 0xd8, 0x3d19, 0x34e4, 0x5, 0x9, 0x7, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa1e6, 0x1, 0xb949, 0x1, 0x1, 0x8, 0x1, 0x52b1]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x36, 0xb, 0x36, 0x4, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x20, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x49}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5b}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x5, 0x5, 0x8, 0x5cd, 0x1, 0x7, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xdb, 0x1134, 0xfffd, 0x3, 0x4, 0x0, 0xffb3]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0xa}, {0x3, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x6}, {0x2, 0x3}, {0x7, 0x9}, {0x6}, {0x3, 0xa}, {0x3, 0x3}, {0x2}, {0x2, 0x3}, {0x2, 0x5}, {0x3}, {0x4, 0x8}, {0x7, 0x4}, {0x7, 0x4}, {0x0, 0x7}, {0x0, 0x2}, {0x1}, {0x1, 0x7}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x6, 0x7}, {0x6, 0x7}, {0x1, 0x4}, {0x5, 0x8}, {0x6, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x6, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x4, 0x5}, {0x3, 0xa}, {0x5, 0x1}, {0x5, 0xa}, {0x6, 0x5}, {0x4, 0x6}, {0x3, 0x3}, {0x0, 0x6}, {0x0, 0x6}, {0x7, 0x4}, {0x7, 0x7}, {0x1, 0x6}, {0x1}, {0x0, 0x8}, {0x1, 0x9}, {0x6, 0x1}, {0x4, 0x3}, {0x4, 0x2}, {0x1, 0x5}, {0x4, 0xa}, {0x0, 0xa}, {0x2, 0x6}, {0x1, 0x1}, {0x4}, {0x2, 0x4}, {0x1, 0x2}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x4}, {0x2, 0x4}, {0x4, 0x1}, {0x7, 0xa}, {0x1, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfdcc, 0xfb73, 0x800, 0x400, 0x2, 0x0, 0x1]}}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb9}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xbf8a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x20}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3de5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x290, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x95}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfb}]}, {0x240, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x23c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x7, 0xdb, 0x6, 0x98, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0xc, 0x6, 0x6c, 0x3, 0x60, 0x9, 0x12, 0x48, 0x28, 0x16, 0x2, 0x1, 0xc, 0x12, 0x9, 0x30, 0x6c, 0x1, 0x12, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0xe399, 0x6822, 0x93e8, 0x7, 0x4, 0x7f, 0xfff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x6, 0x3}, {}, {0x5, 0x9}, {0x6, 0x8}, {0x2, 0xa}, {0x1}, {0x4, 0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x5, 0x4, 0xb, 0x1000, 0x9, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1809, 0x11, 0x1, 0x7182, 0x1000, 0x3, 0x8001, 0x7fff]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x4, 0x800, 0x8, 0x81, 0x9, 0x800, 0xf9d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x7, 0x7fff, 0x1, 0x200, 0xff, 0x13a, 0xc00]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xf, 0x9, 0xff77, 0x1, 0xb, 0x2, 0x200]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x24, 0x5, 0xc, 0x24, 0x5, 0x30, 0x18, 0x48, 0xb, 0x6, 0x48, 0x61f5cd09b804728, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xef, 0x1, 0x8001, 0x9, 0x0, 0x6, 0x400]}}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x9, 0x1, 0x6, 0xfffa, 0x1, 0x1ff, 0x40]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x2, 0x7ff, 0x22f0, 0x1, 0x9, 0x8]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x14, 0x1b, 0x1b, 0xb, 0xc, 0x24, 0x0, 0x16, 0x6, 0xb, 0x12, 0x6e, 0x2]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x9}, {0x4, 0x3}, {0x3}, {0x1, 0x8}, {0x1, 0x4}, {0x6, 0x1}, {0x3, 0xa}, {0x5, 0x9}, {0x4, 0x4}, {0x0, 0x3}, {0x1, 0x8}, {0x5}, {0x4}, {0x2}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5680, 0x0, 0x401, 0x4, 0x1, 0x1, 0x4, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8001, 0xffff, 0x1, 0x80, 0x401, 0x6, 0xfffb]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x5}, {0x7, 0x2}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0x9}, {0x4, 0x3}, {0x3, 0xa}, {0x3, 0x6}, {0x1, 0x7}, {0x5, 0x6}, {0x2, 0x6}, {0x6, 0x7}, {0x5, 0x1}, {0x5, 0x7}, {0x1, 0x9}, {0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x1}, {0x3, 0x2}, {}, {0x5}, {0x5, 0x4}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x6}, {0x6, 0x3}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0xa}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0xb, 0x6c, 0x2d, 0x1b, 0x36]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x1a4, 0x11d, 0x0, 0x1, [{0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x134, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xaa}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x6, 0x9, 0xec8a, 0xf, 0x7, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x4, 0x66d, 0x9, 0x4, 0x2, 0x3fc, 0x7]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x9, 0x53, 0x3, 0x0, 0x9, 0x1]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x16, 0x12, 0x18, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x3, 0x7, 0x5, 0x3, 0x400, 0x5, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6da, 0x3, 0x29, 0x0, 0x9e45, 0x5db, 0x0, 0xfff9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x60, 0xc, 0x12, 0x1, 0x18, 0x1b, 0xb, 0x2, 0x4, 0x24, 0x12, 0x24, 0xae939682040c18a7, 0x6c, 0x6c, 0x1, 0x60, 0x0, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xce}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x63}]}]}]}, 0x12c0}, 0x1, 0x0, 0x0, 0x20001814}, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000001b80)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x8, 0x40, 0x2, 0x100, 0xffffffffffffffff]}, &(0x7f0000001c00)=0x78) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x4c, 0x140f, 0x2, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x4c}}, 0x40044) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r10, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x40, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'srp\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x43}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000884) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001e80)={0xffffffffffffffff, 0xffffffffffffffff, 0x17, 0x0, @val=@perf_event={0xa}}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000001ec0)=r11, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000001f00)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @local}, 0x3, 0x1, 0x1, 0x2}}, 0x26) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002180)=@bpf_tracing={0x1a, 0x26, &(0x7f0000001f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@ld}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @ringbuf_query, @alu={0x7, 0x1, 0x0, 0x3, 0x6, 0xfffffffffffffffc, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe9, '\x00', 0x0, 0x285cc58aa2295a31, 0xffffffffffffffff, 0x8, &(0x7f00000020c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002100)={0x2, 0x9, 0x80000000, 0x8}, 0x10, 0x2a708, 0xffffffffffffffff, 0x0, &(0x7f0000002140)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, r1, r9, 0x1]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002440)={r12, 0x0, 0x78, 0x16, &(0x7f0000002240)="2ae0e8153eb99692c7ae941585e8e32686e0b0421f7b82168c89029f25b2b2037c8b0d9dcdb2c71fa4617a54168b2f9988e9d44c2a39a63151143932eee27b34af68c762c3c6ce2be6401d1c8745e18135e235ad579a9a3167bbd509f58a1c92fbe427c62a5ffa6ad3e51716c51c04e2da2130120306e431", &(0x7f00000022c0)=""/22, 0x2, 0x0, 0xa1, 0x7f, &(0x7f0000002300)="f6b7f98a0c14ea1f99ac2a18cd82a775af0ec2dc4e7e47a3d9767168b484fedae960bbc95aa4d60f9f8f41e5f1df235cd6d8a0e46dbffa1ea8c2e2313f6424d46dc8c2c97b88e186b0112b0e72d574ef5cab56d1d5c293a2f6635670a06d7bbb5353b9f1c9c3871b9929f8748073a8c86e74620a5c685c3e1bd76fc796b08a61ea530795a47f8e8b34b2543a3073d1339168f7419003994ff005b6aee50c7d5727", &(0x7f00000023c0)="9e51538f6b9900b09fc963a255eca83a0759fff3c136ea81c6ce5c94ce8c30f3577e2eee559ca98716462a423bb2547a615c069233512b70c5a9d60a370892903549c0f245e3be9b90a04624020c4392772a2a34424582146f29d07bb7bd982d2348cc43c5a26f52d2bf23c6c94201f7378bf237858a61d4a94e0d221e3251", 0x4, 0x0, 0x346e}, 0x50) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x48, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xb}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x9, 0x0, 0xb, 0x100, 0x2, 0x5, 0x6, 0x400, 0xf65]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000090) socket$nl_xfrm(0x10, 0x3, 0x6) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r13, &(0x7f0000002600)={0xa, 0x4e23, 0x7, @mcast1, 0x9}, 0x1c) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000002640)=@bloom_filter={0x1e, 0x80f1, 0x5, 0x7d, 0x200, 0xffffffffffffffff, 0x10, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002800)={r14, &(0x7f00000026c0)="f3e69450991dd04b88233c737ff03392828ff08a2ead3b8312cff983a0709fe6776703a9919163a002268df6a3074fd5bfe87d3b5abe3562bbcece947daf35f0aa388de20b98992e6bd8e1374642fb972dd074b77b4ebbfceda678fba05d68201a15a4b1c61ed62366fb513f5c931b353a02ae81416a0ac663b00f4dda73db96", &(0x7f0000002740)=""/140}, 0x20) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002880), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x5c, r15, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffff8001}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48884}, 0x4000000) 103.977701ms ago: executing program 1 (id=2275): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) socketpair(0x1a, 0x5, 0x80000000, &(0x7f0000000100)={0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000040)="f0ad68f0d1f2992f8e44feac402dda8c5cde6d6e049e99a86c6859ffd258d223d40f2f83d08f096bca24373e6f68b1c830164c7d9a94ac24965c77cc77c277738971068a3c243ea28d0ec1ce78cddd199b016210e217bdde555beb6e96d8cbc9ec1b430ed100846723b991d5038e693f50e7573ee7282b5c89feb4b9a22cf8c7ef3a5e3af856fc30349ff3365a147130bd4cf3344a2cd83e4bfc3282c5e728065333231ba032664f2be10debdb239b9512", 0xb1, 0x4, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @private0, 0x6}, 0x1c) 29.539471ms ago: executing program 4 (id=2276): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) (async) listen(r3, 0x2000000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x2, 0x6, 0x6, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0xfebf}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bda9, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x5a, 0x1, {0xfffffffc, 0x9, 0x800, 0x0, 0x80, 0xe11, 0x10000, 0x80000001, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b703000000000000a6000000ca00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="faffffff", 0x4) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000000)=0x3) (async) ioctl$PPPIOCSDEBUG(r10, 0x40047440, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r11, 0x29, 0x6, 0x0, 0xa4ff) (async) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) socket(0x400000000010, 0x3, 0x0) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x49, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0xfffffffd, 0x0, 0x0, 0x4}, 0x10}, 0x94) 7.952289ms ago: executing program 3 (id=2277): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='+*.\x00', 0x14000, &(0x7f0000000040)={@_ha_fsid={[0x6, 0x7]}, {0x4, 0x2, 0x40, 0x3}}, 0xffff, &(0x7f0000000080), &(0x7f00000000c0)=0x7}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000001c0)=0x10, 0x800) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000300)={r1, r2, 0x6, 0xf4, &(0x7f0000000200)="29fe0aa9e11744d95720e58e5eb1a9bbc974d135d3d7b9c44c1ee06246e009f663d3db78257946bdc6a567e72d8ee697143435269566bad42192d9a4eb6ce477d9537c76c9682b52d8b2b2fc5ad40c5a9b874ccc48df6883b3bb1cb699442c06fa7dafb110a2d1a49ffba9248a5f9101f00e5c9d20a490e23fdf4fd2afa3dc46a5fd7d9f39807d770d7522dcac98f1f4c30e989b9e30d358d30984bb67747b789b235d654645209d9efe1b80577aecd6276c12b1a9b2c58ccae0f0cdc3bc40bed1e8063edbb39268f9e764b1788f34bfedd5f594352d82be53d499ed8df2850480c617306c451f7fc6b6f5296380c43078e98538", 0xaf, 0x8, 0xcf0b, 0x2a8, 0x56b, 0x2, 0x0, 'syz0\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x3, 0x3, 0x101, 0x0, 0x0, {0x8, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xe998}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xf}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x2580}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000540)=@int=0x40, 0x4) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x1, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000580)=r0, 0x4) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000005c0)={{0x8, @dev={0xac, 0x14, 0x14, 0x28}, 0x4e21, 0x3, 'wrr\x00', 0x32, 0x101, 0x10}, {@remote, 0x4e22, 0x1, 0xa8, 0x2, 0xd0a}}, 0x44) ioctl$FITHAW(r2, 0xc0045878) (async) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000640)) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000a40)=0xa5a, 0x4) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r6, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x169e}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000021}, 0x20044099) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x120, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x39}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x120}}, 0x20000084) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000e00)=0x101, 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000e40)=0x7, 0x4) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, r8, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000010c0)={@map=r0, 0xc, 0x0, 0x3, &(0x7f0000000fc0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001000)=[0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001100)={@fallback=r2, r0, 0x15, 0x0, r0, @void, @value=r0, @void, @void, r9}, 0x20) (async) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x120, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20008000}, 0xc010) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000001340)={0xc0000005}) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$BTRFS_IOC_SPACE_INFO(r10, 0xc0109414, &(0x7f0000001380)={0xb5e, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000012480)={'bond_slave_1\x00', @broadcast}) 0s ago: executing program 2 (id=2278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ff9d, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}]}, 0x50}}, 0xc080) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYBLOB="35dccd293a09b30802a9fd63004bcaff0fb3c0f5a1a04e6ca73cbc1a8a67c541fada718370dd3706e9076599de68dfd127ce7e1fa3f17d7e8a7dd5fbcad9525cea57424981a3b89245a7655865f6ceb3483aa37b358194a095e4f4ba6813eecf9d2871ef84204389f6a7ef734ed702ca0215e2d1a7d8b832fbf82f56689ec77ef1", @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) close(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x70f0c761452e515}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x20, r6, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040800}, 0x4044810) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r5, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r5, &(0x7f0000005a80)=[{&(0x7f0000000440)="ed", 0x1}], 0x1) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) ppoll(&(0x7f0000000000)=[{r5, 0x441}], 0x1, 0x0, 0x0, 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r7, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) r8 = accept(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x80) setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, &(0x7f0000000140)={{0x6934, 0x81}, 0x40}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000305010000000052140000dcffff1815", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000630000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xa4, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ook 2 [ 141.768483][ T8232] ipt_ECN: cannot use operation on non-tcp rule [ 141.785217][ T8225] ipt_ECN: cannot use operation on non-tcp rule [ 141.880660][ T8231] syzkaller0: entered promiscuous mode [ 141.902695][ T8231] syzkaller0: entered allmulticast mode [ 142.233481][ T8251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.827106][ T24] bridge0: entered promiscuous mode [ 143.959196][ T8243] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.979408][ T8243] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 144.084694][ T8243] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.113866][ T8243] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 144.189873][ T8243] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.206737][ T8243] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 144.248373][ T8243] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 144.266184][ T8243] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 144.428387][ T8290] __nla_validate_parse: 8 callbacks suppressed [ 144.428405][ T8290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.580'. [ 144.538957][ T8302] SET target dimension over the limit! [ 144.878822][ T8317] geneve2: entered allmulticast mode [ 144.938306][ T8317] netlink: 32 bytes leftover after parsing attributes in process `syz.4.585'. [ 144.991111][ T8322] netlink: 'syz.0.586': attribute type 3 has an invalid length. [ 145.152819][ T8330] sctp: [Deprecated]: syz.3.589 (pid 8330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.152819][ T8330] Use struct sctp_sack_info instead [ 145.284660][ T8338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.592'. [ 145.435160][ T8350] netlink: 'syz.1.595': attribute type 1 has an invalid length. [ 145.602237][ T8362] netlink: 'syz.4.596': attribute type 1 has an invalid length. [ 145.644528][ T8350] bond1 (unregistering): Released all slaves [ 145.678191][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.596'. [ 145.907602][ T8362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.042352][ T8373] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 146.099265][ T8373] bond4: (slave batadv1): making interface the new active one [ 146.137361][ T8373] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 146.147795][ T8384] IPv6: addrconf: prefix option has invalid lifetime [ 146.154568][ T8384] IPv6: addrconf: prefix option has invalid lifetime [ 146.202143][ T8377] bond4 (unregistering): (slave batadv1): Releasing active interface [ 146.278211][ T8377] bond4 (unregistering): Released all slaves [ 146.348945][ T8398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.603'. [ 146.385067][ T8398] nbd: must specify a size in bytes for the device [ 146.748721][ T8420] netlink: 'syz.1.608': attribute type 1 has an invalid length. [ 146.903366][ T8420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.007089][ T8428] syzkaller1: entered promiscuous mode [ 147.030935][ T8428] syzkaller1: entered allmulticast mode [ 147.212100][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.613'. [ 147.285739][ T8445] netlink: 'syz.0.614': attribute type 21 has an invalid length. [ 147.301125][ T8445] netlink: 132 bytes leftover after parsing attributes in process `syz.0.614'. [ 147.400632][ T8450] lo speed is unknown, defaulting to 1000 [ 147.465841][ T8456] veth1_macvtap: left promiscuous mode [ 147.478314][ T8456] macsec0: entered allmulticast mode [ 148.147951][ T8480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.484718][ T8480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.700982][ T8499] syzkaller0: entered promiscuous mode [ 148.714446][ T8499] syzkaller0: entered allmulticast mode [ 148.789150][ T8480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.842948][ T8499] tipc: Enabled bearer , priority 0 [ 148.865000][ T7993] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.888489][ T8499] tipc: Resetting bearer [ 148.894874][ T7993] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.904781][ T7993] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.915000][ T7993] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.932456][ T8498] tipc: Resetting bearer [ 148.980631][ T8498] tipc: Disabling bearer [ 149.090104][ T8480] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.376451][ T7996] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.443668][ T8526] lo speed is unknown, defaulting to 1000 [ 149.460159][ T7996] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.487056][ T7996] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.564137][ T8014] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.765795][ T8549] netlink: 72 bytes leftover after parsing attributes in process `syz.0.643'. [ 149.789376][ T8549] netlink: 72 bytes leftover after parsing attributes in process `syz.0.643'. [ 149.804660][ T8549] netlink: 44 bytes leftover after parsing attributes in process `syz.0.643'. [ 149.824895][ T8549] netlink: 192 bytes leftover after parsing attributes in process `syz.0.643'. [ 150.204558][ T8569] netlink: 32 bytes leftover after parsing attributes in process `syz.2.650'. [ 150.311509][ T8575] netlink: 'syz.0.653': attribute type 2 has an invalid length. [ 150.316291][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 150.333348][ T8578] netlink: 'syz.3.651': attribute type 9 has an invalid length. [ 150.367788][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 150.409036][ T8574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.652'. [ 150.439652][ T8574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.652'. [ 150.482684][ T8575] : entered promiscuous mode [ 150.504976][ T8588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.655'. [ 150.514239][ T8578] erspan0: entered promiscuous mode [ 150.523959][ T8578] macvlan2: entered promiscuous mode [ 150.535111][ T8578] macvlan2: entered allmulticast mode [ 150.547090][ T8578] erspan0: entered allmulticast mode [ 150.767745][ T8598] netlink: 'syz.3.657': attribute type 16 has an invalid length. [ 151.026943][ T8606] syzkaller0: entered promiscuous mode [ 151.043720][ T8606] syzkaller0: entered allmulticast mode [ 152.055412][ T8651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.107767][ T8651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.213945][ T8651] erspan0: entered promiscuous mode [ 153.194687][ T8718] syzkaller1: entered promiscuous mode [ 153.209610][ T8718] syzkaller1: entered allmulticast mode [ 154.594864][ T8794] netlink: 'syz.2.705': attribute type 11 has an invalid length. [ 154.700862][ T8784] netlink: 'syz.2.705': attribute type 3 has an invalid length. [ 155.255337][ T8827] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.286667][ T8827] __nla_validate_parse: 12 callbacks suppressed [ 155.286687][ T8827] netlink: 72 bytes leftover after parsing attributes in process `syz.4.718'. [ 155.309088][ T8827] netlink: 64 bytes leftover after parsing attributes in process `syz.4.718'. [ 155.606885][ T8845] netlink: 44 bytes leftover after parsing attributes in process `syz.1.721'. [ 155.673147][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 155.769661][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 156.107841][ T8865] kthread_run failed with err -4 [ 156.135786][ T8875] GUP no longer grows the stack in syz.3.730 (8875): 200000003000-20000000a000 (200000001000) [ 156.153983][ T8875] CPU: 0 UID: 0 PID: 8875 Comm: syz.3.730 Not tainted syzkaller #0 PREEMPT(full) [ 156.154011][ T8875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 156.154030][ T8875] Call Trace: [ 156.154038][ T8875] [ 156.154046][ T8875] dump_stack_lvl+0xe8/0x150 [ 156.154095][ T8875] __get_user_pages+0x238c/0x2720 [ 156.154129][ T8875] ? __gup_longterm_locked+0xc3b/0x15c0 [ 156.154178][ T8875] __gup_longterm_locked+0xd52/0x15c0 [ 156.154202][ T8875] ? lock_acquire+0x106/0x350 [ 156.154245][ T8875] gup_fast_fallback+0x1d8c/0x20e0 [ 156.154297][ T8875] ? __pfx_gup_fast_fallback+0x10/0x10 [ 156.154320][ T8875] ? is_valid_gup_args+0x11f/0x200 [ 156.154342][ T8875] ? get_user_pages_fast+0x4d/0xb0 [ 156.154364][ T8875] __iov_iter_get_pages_alloc+0x378/0xa40 [ 156.154408][ T8875] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 156.154442][ T8875] iov_iter_get_pages2+0x5e/0xa0 [ 156.154472][ T8875] __se_sys_vmsplice+0x7b5/0x1660 [ 156.154520][ T8875] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 156.154547][ T8875] ? __pfx_futex_wait+0x10/0x10 [ 156.154635][ T8875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.154661][ T8875] do_syscall_64+0x174/0x580 [ 156.154688][ T8875] ? trace_irq_disable+0x3b/0x140 [ 156.154709][ T8875] ? clear_bhb_loop+0x40/0x90 [ 156.154729][ T8875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.154746][ T8875] RIP: 0033:0x7f2c5219de59 [ 156.154768][ T8875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.154783][ T8875] RSP: 002b:00007f2c52f91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 156.154804][ T8875] RAX: ffffffffffffffda RBX: 00007f2c52426090 RCX: 00007f2c5219de59 [ 156.154817][ T8875] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 156.154827][ T8875] RBP: 00007f2c52233e6f R08: 0000000000000000 R09: 0000000000000000 [ 156.154836][ T8875] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 156.154846][ T8875] R13: 00007f2c52426128 R14: 00007f2c52426090 R15: 00007ffe0e00fc98 [ 156.154877][ T8875] [ 156.645715][ T8894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.736'. [ 157.089277][ T8911] netlink: 64 bytes leftover after parsing attributes in process `syz.3.740'. [ 157.403766][ T8916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.743'. [ 157.455983][ T8917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.743'. [ 157.770881][ T8926] netlink: 136 bytes leftover after parsing attributes in process `syz.4.745'. [ 158.272761][ T8939] nbd2: detected capacity change from 0 to 63 [ 158.342070][ T5631] block nbd2: Receive control failed (result -104) [ 158.443606][ T8957] syzkaller1: entered promiscuous mode [ 158.471822][ T8957] syzkaller1: entered allmulticast mode [ 158.488764][ T8966] netlink: 'syz.2.757': attribute type 30 has an invalid length. [ 158.778901][ T8981] ip6erspan0: entered allmulticast mode [ 158.788223][ T8979] tipc: Started in network mode [ 158.793776][ T8979] tipc: Node identity 320aba498d71, cluster identity 4711 [ 158.801101][ T8979] tipc: Enabled bearer , priority 0 [ 158.809474][ T8979] syzkaller0: entered promiscuous mode [ 158.821418][ T8979] syzkaller0: entered allmulticast mode [ 158.862769][ T8979] tipc: Resetting bearer [ 158.891160][ T8977] tipc: Resetting bearer [ 158.929166][ T8977] tipc: Disabling bearer [ 159.420403][ T9022] SET target dimension over the limit! [ 159.434897][ T9020] lo speed is unknown, defaulting to 1000 [ 159.570863][ T9022] bond3: entered promiscuous mode [ 159.591474][ T9022] bond3: entered allmulticast mode [ 159.613962][ T9022] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.827127][ T9025] x_tables: duplicate underflow at hook 3 [ 160.258675][ T9062] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 160.414672][ T9064] netlink: 'syz.3.779': attribute type 12 has an invalid length. [ 160.439449][ T9064] netlink: 'syz.3.779': attribute type 29 has an invalid length. [ 160.469148][ T9064] __nla_validate_parse: 13 callbacks suppressed [ 160.469164][ T9064] netlink: 148 bytes leftover after parsing attributes in process `syz.3.779'. [ 160.486273][ T9064] netlink: 'syz.3.779': attribute type 3 has an invalid length. [ 160.494373][ T9064] netlink: 'syz.3.779': attribute type 2 has an invalid length. [ 160.502925][ T9064] netlink: 35 bytes leftover after parsing attributes in process `syz.3.779'. [ 160.521631][ T9062] team_slave_1: entered promiscuous mode [ 160.527735][ T9062] team_slave_1: left promiscuous mode [ 160.563054][ T9071] team_slave_1: entered promiscuous mode [ 160.569051][ T9071] team_slave_1: left promiscuous mode [ 160.816317][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 161.095519][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.788'. [ 161.179932][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 161.206953][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 161.803428][ T9145] lo speed is unknown, defaulting to 1000 [ 161.806339][ T9156] netlink: 'syz.3.801': attribute type 10 has an invalid length. [ 161.899750][ T9156] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 162.113355][ T9174] netlink: 84 bytes leftover after parsing attributes in process `syz.0.808'. [ 162.460261][ T9188] syzkaller0: refused to change device tx_queue_len [ 162.482434][ T9189] syzkaller0: refused to change device tx_queue_len [ 162.484360][ T9191] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 162.717073][ T9203] netlink: 'syz.4.815': attribute type 3 has an invalid length. [ 162.748234][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 163.206153][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 163.220334][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 163.558139][ T9258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.897905][ T9271] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 164.122406][ T9290] x_tables: unsorted entry at hook 1 [ 164.138522][ T9282] veth5: entered allmulticast mode [ 164.153584][ T9282] bond4: (slave veth5): Enslaving as an active interface with a down link [ 164.182587][ T9287] netlink: 'syz.1.838': attribute type 13 has an invalid length. [ 164.207397][ T9271] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 164.669069][ T9287] gretap0: refused to change device tx_queue_len [ 164.676702][ T9287] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 164.713098][ T9282] macvlan2: entered promiscuous mode [ 164.718591][ T9282] macvlan2: entered allmulticast mode [ 164.727660][ T9282] bond4: entered promiscuous mode [ 164.747309][ T9282] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 164.768318][ T9282] bond4: left promiscuous mode [ 164.883294][ T9299] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 164.899954][ T9302] netlink: 'syz.0.841': attribute type 13 has an invalid length. [ 164.960978][ T9309] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 164.977029][ T9299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.988514][ T9309] netlink: 'syz.2.844': attribute type 21 has an invalid length. [ 165.000331][ T9309] netlink: 'syz.2.844': attribute type 3 has an invalid length. [ 165.000774][ T9302] syz_tun: refused to change device tx_queue_len [ 165.021142][ T9302] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 165.096900][ T9311] syzkaller0: entered promiscuous mode [ 165.118388][ T9311] syzkaller0: entered allmulticast mode [ 165.321358][ T9330] lo speed is unknown, defaulting to 1000 [ 165.358254][ T9326] lo speed is unknown, defaulting to 1000 [ 165.440275][ T9334] openvswitch: netlink: Missing key (keys=40, expected=100) [ 165.647047][ T9341] __nla_validate_parse: 9 callbacks suppressed [ 165.647067][ T9341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.850'. [ 165.695569][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 165.917233][ T9348] xt_l2tp: invalid flags combination: 8 [ 166.011975][ T9351] syzkaller0: entered promiscuous mode [ 166.020379][ T9351] syzkaller0: entered allmulticast mode [ 166.187477][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 166.414243][ T9386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.862'. [ 166.478702][ T9388] lo speed is unknown, defaulting to 1000 [ 166.542770][ T9393] dvmrp0: entered allmulticast mode [ 166.631688][ T9400] netlink: 'syz.4.866': attribute type 4 has an invalid length. [ 166.796460][ T9400] sit0: left promiscuous mode [ 166.824181][ T9400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.844067][ T9400] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.874377][ T9400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.929441][ T9400] batadv_slave_0: left promiscuous mode [ 166.946252][ T9400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.956160][ T9400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.967826][ T9400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.991765][ T9400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.036624][ T9400] veth1_vlan: left promiscuous mode [ 167.047426][ T9400] veth0_vlan: left promiscuous mode [ 167.063097][ T9400] veth0_vlan: entered promiscuous mode [ 167.083990][ T9400] veth1_vlan: entered promiscuous mode [ 167.096816][ T9400] veth1_macvtap: left promiscuous mode [ 167.108172][ T9400] veth0_macvtap: left promiscuous mode [ 167.130265][ T9400] veth0_macvtap: entered promiscuous mode [ 167.145569][ T9400] veth1_macvtap: entered promiscuous mode [ 167.160154][ T9400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.168801][ T9400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.177253][ T9400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.185761][ T9400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.193926][ T9400] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 167.204206][ T9400] hsr1: left promiscuous mode [ 167.216587][ T9400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.262827][ T9400] ipip0: left promiscuous mode [ 167.269197][ T9400] bond2: left promiscuous mode [ 167.274807][ T9400] erspan1: left promiscuous mode [ 167.289680][ T9400] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.303687][ T9400] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.343841][ T9400] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 167.399497][ T8015] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.406806][ T8015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.456570][ T8015] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.463773][ T8015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.566716][ T9412] bond0: entered promiscuous mode [ 167.574558][ T9412] bond0: left promiscuous mode [ 167.591078][ T72] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.607540][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.872'. [ 167.616029][ T72] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.617817][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.872'. [ 167.634364][ T7993] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.657573][ T7993] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.708028][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 168.017782][ T7993] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.035673][ T7993] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.045079][ T7993] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.079809][ T7993] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.462864][ T9456] lo speed is unknown, defaulting to 1000 [ 168.938940][ T9474] sit0: left allmulticast mode [ 168.999039][ T9474] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.006637][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.048193][ T9498] Bluetooth: MGMT ver 1.23 [ 169.170189][ T9474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.193729][ T9474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.329186][ T9514] netlink: 32 bytes leftover after parsing attributes in process `syz.1.891'. [ 169.354861][ T9474] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 169.439138][ T9474] bond2: left allmulticast mode [ 169.449613][ T9474] erspan1: left allmulticast mode [ 169.455814][ T9474] vlan2: left allmulticast mode [ 169.460722][ T9474] bond0: left allmulticast mode [ 169.466781][ T9474] bond_slave_0: left allmulticast mode [ 169.472400][ T9474] bond_slave_1: left allmulticast mode [ 169.480201][ T9474] bond3: left allmulticast mode [ 169.494983][ T9474] geneve2: left allmulticast mode [ 169.504887][ T9474] ip6erspan0: left allmulticast mode [ 169.529501][ T72] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.560528][ T72] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.597243][ T72] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.628328][ T72] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.649075][ T72] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.678238][ T72] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.697970][ T72] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.711943][ T72] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.743496][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.759853][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.909761][ T9534] xt_l2tp: unknown flags: 8b [ 170.074748][ T9538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.898'. [ 170.227031][ T9545] vlan2: entered promiscuous mode [ 170.242296][ T9545] hsr0: entered promiscuous mode [ 170.259796][ T9545] vlan2: entered allmulticast mode [ 170.281046][ T9545] hsr0: entered allmulticast mode [ 170.302616][ T9545] hsr_slave_0: entered allmulticast mode [ 170.319217][ T9545] hsr_slave_1: entered allmulticast mode [ 170.360743][ T9548] x_tables: duplicate entry at hook 2 [ 170.370630][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 170.393580][ T9530] erspan0: left promiscuous mode [ 170.715219][ T9543] hsr_slave_0: left promiscuous mode [ 170.738646][ T9543] hsr_slave_1: left promiscuous mode [ 170.897135][ T9564] netlink: 24 bytes leftover after parsing attributes in process `syz.3.903'. [ 171.482732][ T9586] lo speed is unknown, defaulting to 1000 [ 171.736982][ T9601] netlink: 'syz.3.912': attribute type 1 has an invalid length. [ 171.782386][ T9601] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.852561][ T9603] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.888056][ T9603] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 171.905574][ T9603] bond3: (slave ipip0): Error -95 calling set_mac_address [ 172.063918][ T9607] netlink: 128 bytes leftover after parsing attributes in process `syz.0.913'. [ 172.212526][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'. [ 172.227382][ T9609] netlink: 'syz.1.914': attribute type 1 has an invalid length. [ 172.292023][ T9611] xt_l2tp: invalid flags combination: 8 [ 172.293513][ T9609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.366271][ T9613] vlan2: entered allmulticast mode [ 172.429853][ T9613] bond2: entered allmulticast mode [ 172.455802][ T9620] IPv6: sit1: Disabled Multicast RS [ 172.531367][ T9609] bond2: (slave geneve2): making interface the new active one [ 172.562884][ T9609] geneve2: entered allmulticast mode [ 172.589850][ T9609] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 172.650015][ T9609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.750370][ T9609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.959747][ T9640] netlink: 48 bytes leftover after parsing attributes in process `syz.0.923'. [ 173.137854][ T9643] netlink: 284 bytes leftover after parsing attributes in process `syz.0.924'. [ 173.564791][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'. [ 173.839557][ T5722] IPVS: starting estimator thread 0... [ 173.854774][ T9669] netlink: 72 bytes leftover after parsing attributes in process `syz.0.930'. [ 173.894036][ T9669] netlink: 72 bytes leftover after parsing attributes in process `syz.0.930'. [ 173.931373][ T9668] IPVS: using max 30 ests per chain, 72000 per kthread [ 173.946677][ T9660] 0: reclassify loop, rule prio 0, protocol 700 [ 174.062523][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.929'. [ 174.077717][ T7644] nci: nci_rx_work: unknown MT 0x6 [ 174.137717][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.934'. [ 175.014903][ T9711] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 176.792689][ T9660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.907032][ T9719] netlink: 'syz.4.942': attribute type 1 has an invalid length. [ 176.951505][ T9719] __nla_validate_parse: 35 callbacks suppressed [ 176.951522][ T9719] netlink: 756 bytes leftover after parsing attributes in process `syz.4.942'. [ 176.970495][ T9727] netlink: 'syz.3.945': attribute type 1 has an invalid length. [ 177.017880][ T9727] bond4: entered promiscuous mode [ 177.024309][ T9727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.118607][ T9727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.126863][ T9727] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 177.137225][ T9727] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 177.149187][ T9727] bond4: (slave gre1): making interface the new active one [ 177.157498][ T9727] gre1: entered promiscuous mode [ 177.164670][ T9727] bond4: (slave gre1): Enslaving as an active interface with an up link [ 177.353454][ T9737] tipc: Started in network mode [ 177.359226][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'. [ 177.381126][ T9737] tipc: Node identity 02494266ee65, cluster identity 4711 [ 177.386838][ T9742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'. [ 177.395811][ T9737] tipc: Enabled bearer , priority 0 [ 177.572605][ T9755] netlink: 'syz.4.951': attribute type 29 has an invalid length. [ 177.624468][ T9722] tipc: Disabling bearer [ 178.441074][ T9767] syzkaller0: entered promiscuous mode [ 178.451294][ T9767] syzkaller0: entered allmulticast mode [ 178.521099][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 180.716329][ T9812] tipc: Enabled bearer , priority 0 [ 180.724546][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.960'. [ 180.736441][ T9815] syzkaller0: entered promiscuous mode [ 180.742730][ T9815] syzkaller0: entered allmulticast mode [ 180.755042][ T9818] tipc: Resetting bearer [ 180.769370][ T9802] tipc: Resetting bearer [ 180.813763][ T9802] tipc: Disabling bearer [ 180.883623][ T24] IPVS: starting estimator thread 0... [ 180.992702][ T9844] IPVS: using max 27 ests per chain, 64800 per kthread [ 181.179940][ T9851] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma? [ 181.184378][ T9861] netlink: 'syz.4.973': attribute type 2 has an invalid length. [ 181.430327][ T9866] vlan2: entered promiscuous mode [ 181.451522][ T9866] hsr0: entered promiscuous mode [ 181.490911][ T9866] vlan2: entered allmulticast mode [ 181.514557][ T9866] hsr0: entered allmulticast mode [ 181.540630][ T9866] hsr_slave_0: entered allmulticast mode [ 181.557422][ T9866] hsr_slave_1: entered allmulticast mode [ 181.695638][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'. [ 181.728126][ T9878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.977'. [ 181.743163][ T9869] hsr_slave_0: left promiscuous mode [ 181.753048][ T9869] hsr_slave_1: left promiscuous mode [ 181.786114][ T9879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.977'. [ 183.174616][ T9895] syzkaller0: entered promiscuous mode [ 183.186072][ T9895] syzkaller0: entered allmulticast mode [ 183.321090][ T9919] tipc: Enabled bearer , priority 0 [ 183.336332][ T9950] netlink: 'syz.2.984': attribute type 2 has an invalid length. [ 183.374052][ T9883] tipc: Resetting bearer [ 183.478531][ T9883] tipc: Disabling bearer [ 183.524634][ T7996] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.554839][ T7996] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.603639][ T7996] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.621135][ T7996] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.649537][ T9955] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.986'. [ 183.890421][ T9974] openvswitch: netlink: IP tunnel dst address not specified [ 184.212328][ T9995] tipc: Enabled bearer , priority 0 [ 184.377663][ T9995] syzkaller0: entered promiscuous mode [ 184.392907][ T9995] syzkaller0: entered allmulticast mode [ 184.404391][ T9995] tipc: Resetting bearer [ 184.458317][T10001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1000'. [ 184.528430][T10003] netlink: 'syz.0.1001': attribute type 83 has an invalid length. [ 184.587093][ T72] tipc: Resetting bearer [ 184.595899][ T9993] tipc: Resetting bearer [ 185.290501][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 186.730405][ T9993] tipc: Disabling bearer [ 186.743741][T10001] ip6tnl2: entered allmulticast mode [ 186.750040][T10024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.786194][ T9939] tipc: Node number set to 3551968199 [ 186.930305][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 187.115781][T10053] netlink: 'syz.4.1010': attribute type 3 has an invalid length. [ 187.162585][T10055] netlink: 'syz.0.1013': attribute type 21 has an invalid length. [ 187.170713][T10055] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1013'. [ 187.309711][T10061] syzkaller0: entered promiscuous mode [ 187.338681][T10061] syzkaller0: entered allmulticast mode [ 187.829929][T10079] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 187.869629][T10079] bond3 (unregistering): Released all slaves [ 188.403794][ T1636] block nbd2: Possible stuck request ffff88802842e000: control (read@0,1024B). Runtime 30 seconds [ 188.418594][ T1636] block nbd2: Possible stuck request ffff88802842e1c0: control (read@1024,1024B). Runtime 30 seconds [ 188.429676][ T1636] block nbd2: Possible stuck request ffff88802842e380: control (read@2048,1024B). Runtime 30 seconds [ 188.440770][ T1636] block nbd2: Possible stuck request ffff88802842e540: control (read@3072,1024B). Runtime 30 seconds [ 188.975639][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1029'. [ 189.049151][T10125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.066493][T10184] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1045'. [ 190.082663][T10184] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1045'. [ 190.198721][T10192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1047'. [ 190.257245][T10198] netlink: 'syz.4.1047': attribute type 7 has an invalid length. [ 190.273620][T10198] netlink: 'syz.4.1047': attribute type 7 has an invalid length. [ 191.036052][T10215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1054'. [ 191.101049][T10218] syzkaller0: entered promiscuous mode [ 191.107249][T10218] syzkaller0: entered allmulticast mode [ 191.115267][T10216] lo speed is unknown, defaulting to 1000 [ 191.499405][T10232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 191.558117][T10235] netlink: 'syz.3.1059': attribute type 1 has an invalid length. [ 191.664399][T10238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1060'. [ 192.094431][T10258] bridge0: entered promiscuous mode [ 192.111428][T10258] bridge0: entered allmulticast mode [ 192.124096][T10258] team0: Port device bridge0 added [ 192.130987][T10259] bridge0: port 1(team0) entered blocking state [ 192.137795][T10259] bridge0: port 1(team0) entered disabled state [ 192.144627][T10259] team0: entered allmulticast mode [ 192.176411][T10259] team0: left allmulticast mode [ 192.905286][T10275] : renamed from bond_slave_0 (while UP) [ 193.003097][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 193.012494][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 193.042313][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 194.380540][T10226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.957688][T10308] ip6gre2: entered promiscuous mode [ 194.971046][T10308] ip6gre2: entered allmulticast mode [ 194.993591][ T7992] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 195.019374][ T7992] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 195.029042][ T9944] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 195.217729][ T9934] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 195.309273][T10290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.348501][T10329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.591543][T10337] netlink: 'syz.2.1085': attribute type 1 has an invalid length. [ 195.689360][T10337] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.741450][T10343] bond5: (slave syz_tun): making interface the new active one [ 195.794329][T10343] bond5: (slave syz_tun): Enslaving as an active interface with an up link [ 195.859033][T10351] tipc: Enabled bearer , priority 0 [ 195.883406][T10351] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 195.923807][ T9944] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 195.980118][T10355] xt_hashlimit: size too large, truncated to 1048576 [ 195.981134][T10347] tipc: Disabling bearer [ 196.227215][T10363] lo speed is unknown, defaulting to 1000 [ 196.634785][T10384] __nla_validate_parse: 3 callbacks suppressed [ 196.634802][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 196.660608][T10383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'. [ 196.974675][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 197.112348][T10414] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 197.207018][T10412] netlink: 'syz.4.1106': attribute type 9 has an invalid length. [ 197.398331][T10428] openvswitch: netlink: Message has 4 unknown bytes. [ 197.450457][T10435] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1114'. [ 197.462821][T10428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.476157][T10435] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1114'. [ 197.630278][T10441] netlink: 'syz.3.1116': attribute type 29 has an invalid length. [ 197.694918][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1116'. [ 197.793709][T10455] bond6: option lp_interval: invalid value (0) [ 197.800081][T10455] bond6: option lp_interval: allowed values 1 - 2147483647 [ 197.812359][T10455] bond6 (unregistering): Released all slaves [ 198.294980][T10483] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1128'. [ 198.702540][T10515] netlink: 'syz.0.1135': attribute type 1 has an invalid length. [ 198.718619][T10512] pimreg: entered allmulticast mode [ 198.742402][T10515] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1135'. [ 198.781018][T10510] pimreg: left allmulticast mode [ 199.041435][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 199.352532][T10541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1142'. [ 199.433910][T10545] syzkaller0: entered promiscuous mode [ 199.448061][T10545] syzkaller0: entered allmulticast mode [ 199.767123][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1146'. [ 199.989177][T10572] openvswitch: netlink: Missing key (keys=40, expected=80) [ 200.017505][T10573] netlink: 'syz.3.1151': attribute type 4 has an invalid length. [ 200.100743][ T9] lo speed is unknown, defaulting to 1000 [ 200.126700][ T9] syz2: Port: 1 Link DOWN [ 200.166650][T10582] netlink: 'syz.4.1154': attribute type 1 has an invalid length. [ 200.240215][T10582] 8021q: adding VLAN 0 to HW filter on device bond5 [ 200.305890][T10588] bond5: (slave geneve3): making interface the new active one [ 200.319322][T10588] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 200.333233][ T7996] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.374499][ T7996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.408485][ T7996] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.429106][ T7996] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.534230][T10603] bridge0: port 1(vlan2) entered blocking state [ 200.547797][T10603] bridge0: port 1(vlan2) entered disabled state [ 200.563285][T10603] vlan2: entered allmulticast mode [ 200.577303][T10603] geneve0: entered allmulticast mode [ 200.605761][T10603] vlan2: entered promiscuous mode [ 200.613896][T10603] geneve0: entered promiscuous mode [ 200.865236][T10621] vlan3: entered promiscuous mode [ 200.875684][T10621] bridge0: entered promiscuous mode [ 201.251660][T10631] nbd: must specify a size in bytes for the device [ 201.622573][T10662] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 201.886656][T10675] __nla_validate_parse: 12 callbacks suppressed [ 201.886677][T10675] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1178'. [ 201.968590][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 202.182778][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1180'. [ 202.270416][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1180'. [ 202.559225][T10690] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 202.567934][T10690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.922078][T10705] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1187'. [ 203.077812][T10713] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1191'. [ 203.125985][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 203.227491][T10713] bond0 (unregistering): Released all slaves [ 203.286382][T10714] bond6: option broadcast_neighbor: invalid value (4) [ 203.298865][T10714] bond6 (unregistering): Released all slaves [ 203.426063][T10729] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1193'. [ 203.436806][T10729] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1193'. [ 203.490378][T10731] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1194'. [ 203.503107][T10731] netlink: 'syz.2.1194': attribute type 5 has an invalid length. [ 203.615544][T10737] veth1_to_bond: entered allmulticast mode [ 203.622650][T10737] veth1_to_bond: entered promiscuous mode [ 203.630062][T10736] veth1_to_bond: left promiscuous mode [ 203.636537][T10736] veth1_to_bond: left allmulticast mode [ 203.655550][T10738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.703959][T10740] xt_addrtype: ipv6 does not support BROADCAST matching [ 203.793512][T10747] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 203.829497][T10747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.864144][T10747] vlan2: entered allmulticast mode [ 203.875493][T10747] bond0: entered allmulticast mode [ 203.896733][T10747] bond0: (slave geneve4): making interface the new active one [ 203.914983][T10747] geneve4: entered allmulticast mode [ 203.933538][T10747] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 203.945186][ T8015] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.953939][ T8015] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.962781][ T8015] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.982984][ T8015] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.125939][T10760] atomic_op ffff8880792cc998 conn xmit_atomic 0000000000000000 [ 204.346396][T10766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.380624][T10766] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 204.499449][T10781] sctp: [Deprecated]: syz.0.1210 (pid 10781) Use of int in max_burst socket option. [ 204.499449][T10781] Use struct sctp_assoc_value instead [ 204.740605][T10794] netlink: 'syz.2.1214': attribute type 1 has an invalid length. [ 204.904361][T10794] bond6: entered promiscuous mode [ 204.918817][T10794] 8021q: adding VLAN 0 to HW filter on device bond6 [ 205.219855][ T5723] lo speed is unknown, defaulting to 1000 [ 205.247012][ T5723] syz2: Port: 1 Link ACTIVE [ 205.317642][T10831] xt_hashlimit: size too large, truncated to 1048576 [ 205.416542][T10836] openvswitch: netlink: Tunnel attr 91 out of range max 16 [ 205.449243][T10825] dummy0: left promiscuous mode [ 205.549614][T10840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.977035][T10825] bond3: left promiscuous mode [ 205.989836][T10825] bond3: left allmulticast mode [ 206.012860][T10825] veth5: left allmulticast mode [ 206.030518][T10825] bridge0: left promiscuous mode [ 206.045777][T10825] bridge0: left allmulticast mode [ 206.067165][T10825] bond6: left promiscuous mode [ 206.135915][ T7991] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.166556][T10841] syzkaller0: entered promiscuous mode [ 206.181610][T10841] syzkaller0: entered allmulticast mode [ 206.198162][ T7991] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.213288][ T7991] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.234753][ T7991] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.259344][ T7991] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.278681][T10859] openvswitch: netlink: EtherType 0 is less than min 600 [ 206.341071][ T7991] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.368302][ T7991] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.380515][ T7991] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.822000][T10894] syzkaller0: entered promiscuous mode [ 206.842164][T10894] syzkaller0: entered allmulticast mode [ 206.913259][T10895] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 206.913259][T10895] Please contact the netfilter-devel mailing list or update your nftables rules. [ 206.961454][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 207.220751][T10916] netlink: 'syz.3.1247': attribute type 1 has an invalid length. [ 207.228960][T10916] __nla_validate_parse: 14 callbacks suppressed [ 207.228976][T10916] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1247'. [ 207.248304][T10909] 8021q: adding VLAN 0 to HW filter on device bond7 [ 207.478957][T10925] hsr0: entered allmulticast mode [ 207.497398][T10925] hsr_slave_0: entered allmulticast mode [ 207.513446][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 207.525564][T10925] hsr_slave_1: entered allmulticast mode [ 207.536101][T10929] hsr_slave_0: left promiscuous mode [ 207.551884][T10931] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1252'. [ 207.557159][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'. [ 207.578798][T10929] hsr_slave_1: left promiscuous mode [ 207.645262][T10929] hsr0 (unregistering): left allmulticast mode [ 207.746075][T10920] lo speed is unknown, defaulting to 1000 [ 207.837807][T10940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1255'. [ 207.861054][T10941] netlink: 'syz.3.1254': attribute type 83 has an invalid length. [ 207.924533][T10928] macsec1: entered promiscuous mode [ 207.992331][T10946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1256'. [ 208.245654][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 208.265923][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1258'. [ 208.324138][T10957] batadv0: entered promiscuous mode [ 208.350815][T10957] macsec1: entered promiscuous mode [ 208.370920][T10957] macsec1: entered allmulticast mode [ 208.392737][T10957] batadv0: entered allmulticast mode [ 208.422570][T10957] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 208.672427][T10962] netlink: 'syz.4.1262': attribute type 13 has an invalid length. [ 208.725402][T10962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1262'. [ 208.742432][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 208.763460][T10962] bond0: (slave bond_slave_0): Releasing backup interface [ 208.784958][T10962] bond_slave_0: left promiscuous mode [ 208.877826][T10962] bond_slave_0: entered promiscuous mode [ 208.890749][T10962] bond_slave_0: entered allmulticast mode [ 208.972603][T10965] syzkaller0: entered promiscuous mode [ 208.987583][T10965] syzkaller0: entered allmulticast mode [ 209.011417][ T9939] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 209.202880][T10975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1263'. [ 210.490350][T11041] sctp: [Deprecated]: syz.3.1275 (pid 11041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.490350][T11041] Use struct sctp_sack_info instead [ 211.702552][T11098] bridge_slave_1 (unregistering): left allmulticast mode [ 211.725341][T11098] bridge_slave_1 (unregistering): left promiscuous mode [ 211.744590][T11098] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.758193][T11115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.817279][T11108] veth0_macvtap: Caught tx_queue_len zero misconfig [ 212.160548][T11134] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 212.545869][T11151] __nla_validate_parse: 14 callbacks suppressed [ 212.545889][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 212.582802][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 212.597419][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 212.636784][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 212.656271][T11151] netlink: 'syz.4.1301': attribute type 7 has an invalid length. [ 212.679533][T11154] netlink: 'syz.4.1301': attribute type 7 has an invalid length. [ 212.715227][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 212.722331][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 212.749669][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 212.750616][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 212.799428][T11157] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 212.834064][T11154] netlink: 'syz.4.1301': attribute type 7 has an invalid length. [ 212.834820][T11157] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 212.855183][T11170] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 212.931673][T11151] netlink: 'syz.4.1301': attribute type 7 has an invalid length. [ 212.970068][T11180] netlink: 'syz.0.1308': attribute type 1 has an invalid length. [ 213.276238][T11190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1311'. [ 213.606776][T11197] macsec2: entered promiscuous mode [ 213.812515][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 214.086464][ T9651] block nbd64: NBD_DISCONNECT [ 214.482246][ T9651] udevd[9651]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 214.785036][T11262] lo speed is unknown, defaulting to 1000 [ 214.963704][T11271] netlink: 'syz.1.1325': attribute type 13 has an invalid length. [ 214.989265][T11271] netlink: 'syz.1.1325': attribute type 12 has an invalid length. [ 215.068905][T11284] x_tables: duplicate underflow at hook 1 [ 215.446457][T11301] x_tables: duplicate underflow at hook 1 [ 216.190439][ T5618] cgroup: fork rejected by pids controller in /syz1 [ 216.730651][T11372] : option downdelay: invalid value (18446744073709547007) [ 216.739501][T11372] : option downdelay: allowed values 0 - 2147483647 [ 216.759545][T11372]  (unregistering): Released all slaves [ 216.975537][ T8015] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.052245][T11377] xt_hashlimit: max too large, truncated to 1048576 [ 217.076745][T11377] No such timeout policy "syz1" [ 217.147808][T11379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.176451][T11379] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.235342][T11379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.267839][T11385] netlink: 'syz.3.1360': attribute type 13 has an invalid length. [ 217.284973][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.296278][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.307602][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.315724][T11385] netlink: 'syz.3.1360': attribute type 17 has an invalid length. [ 217.324287][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.335094][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.476114][T11379] veth1_vlan: left promiscuous mode [ 217.512607][T11379] veth0_vlan: left promiscuous mode [ 217.528369][T11379] veth0_vlan: entered promiscuous mode [ 217.558986][T11379] veth1_vlan: entered promiscuous mode [ 217.589118][T11399] __nla_validate_parse: 28 callbacks suppressed [ 217.589135][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'. [ 217.616446][T11379] veth1_macvtap: left promiscuous mode [ 217.639545][T11379] veth0_macvtap: left promiscuous mode [ 217.652506][T11379] veth0_macvtap: entered promiscuous mode [ 218.496905][ T1636] block nbd2: Possible stuck request ffff88802842e000: control (read@0,1024B). Runtime 60 seconds [ 218.508032][ T1636] block nbd2: Possible stuck request ffff88802842e1c0: control (read@1024,1024B). Runtime 60 seconds [ 218.519270][ T1636] block nbd2: Possible stuck request ffff88802842e380: control (read@2048,1024B). Runtime 60 seconds [ 218.535689][ T1636] block nbd2: Possible stuck request ffff88802842e540: control (read@3072,1024B). Runtime 60 seconds [ 218.733244][T11384] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.984241][T11384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.018338][T11384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.291096][T11384] erspan0: left allmulticast mode [ 219.405951][T11384] batadv0: left allmulticast mode [ 219.441431][ T5639] Bluetooth: hci0: command tx timeout [ 219.459552][T11385] erspan0: left promiscuous mode [ 219.493020][T11385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.501992][T11385] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.511699][T11385] batadv0: left promiscuous mode [ 219.519140][T11385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.549361][T11385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.558821][T11385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.570926][T11385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.582577][T11385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.603019][T11385] veth1_vlan: left promiscuous mode [ 219.609348][T11385] veth0_vlan: left promiscuous mode [ 219.616026][T11385] veth0_vlan: entered promiscuous mode [ 219.623540][T11385] veth1_vlan: entered promiscuous mode [ 219.634086][T11385] veth0_macvtap: left promiscuous mode [ 219.640418][T11385] veth0_macvtap: entered promiscuous mode [ 219.653023][T11385] veth1_macvtap: entered promiscuous mode [ 219.658761][T11385] veth1_macvtap: entered allmulticast mode [ 219.664753][T11385] macsec0: left allmulticast mode [ 219.669783][T11385] veth1_macvtap: left allmulticast mode [ 219.686839][T11385] 8021q: adding VLAN 0 to HW filter on device eth0 [ 219.698740][T11385] 8021q: adding VLAN 0 to HW filter on device eth1 [ 219.709950][T11385] 8021q: adding VLAN 0 to HW filter on device eth2 [ 219.722244][T11385] 8021q: adding VLAN 0 to HW filter on device eth3 [ 219.734966][T11385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.748204][T11385] erspan0: entered promiscuous mode [ 219.753707][T11385] erspan0: entered allmulticast mode [ 219.759149][T11385] macvlan2: left promiscuous mode [ 219.765417][T11385] macvlan2: left allmulticast mode [ 219.770567][T11385] erspan0: left allmulticast mode [ 219.782451][T11385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.791898][T11385] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.799925][T11385] bond4: left promiscuous mode [ 219.805072][T11385] gre1: left promiscuous mode [ 219.826015][T11385] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.835648][T11385] batadv0: entered promiscuous mode [ 219.840894][T11385] batadv0: entered allmulticast mode [ 219.846822][T11385] macsec1: left promiscuous mode [ 219.852135][T11385] macsec1: left allmulticast mode [ 219.857210][T11385] batadv0: left allmulticast mode [ 219.863458][T11385] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 219.949124][ T8015] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.008557][ T5765] lo speed is unknown, defaulting to 1000 [ 220.009905][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1371'. [ 220.056909][ T5746] lo speed is unknown, defaulting to 1000 [ 220.086556][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.093851][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.201109][T11432] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 220.218432][T11432] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 220.434031][ T8015] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.470714][T11454] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1376'. [ 220.492346][T11456] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1376'. [ 220.515234][T11454] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1376'. [ 220.545592][T11454] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1376'. [ 220.663963][T11456] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1376'. [ 220.692200][ T8015] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.750842][T11464] lo speed is unknown, defaulting to 1000 [ 220.816860][T11383] lo speed is unknown, defaulting to 1000 [ 221.035893][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 221.046257][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 221.060190][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 221.521499][ T5639] Bluetooth: hci0: command tx timeout [ 221.715201][ T8015] bridge_slave_1: left allmulticast mode [ 221.734109][ T8015] bridge_slave_1: left promiscuous mode [ 221.764408][ T8015] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.789375][ T8015] bridge_slave_0: left allmulticast mode [ 221.797066][ T8015] bridge_slave_0: left promiscuous mode [ 221.805358][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.830512][ T8015] pim6reg: left allmulticast mode [ 221.836271][ T8015] dvmrp0: left allmulticast mode [ 221.847982][ T8015] batman_adv: batadv0: Interface deactivated: gretap1 [ 221.894614][T11516] netlink: 'syz.2.1389': attribute type 1 has an invalid length. [ 222.160583][ T8015] batman_adv: batadv0: Removing interface: gretap1 [ 222.263653][ T8015] bond0 (unregistering): (slave gretap2): Releasing active interface [ 222.293621][ T8015] bond2 (unregistering): (slave geneve2): Releasing active interface [ 222.302117][ T8015] geneve2 (unregistering): left allmulticast mode [ 222.321393][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 222.351020][ T8015] bond0 (unregistering): Released all slaves [ 222.370492][ T8015] bond1 (unregistering): Released all slaves [ 222.392085][ T8015] bond2 (unregistering): Released all slaves [ 222.457533][T11484] syzkaller0: entered promiscuous mode [ 222.463432][T11484] syzkaller0: entered allmulticast mode [ 222.497047][T11499] syzkaller0: entered promiscuous mode [ 222.503315][T11499] syzkaller0: entered allmulticast mode [ 222.749548][T11524] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 223.611577][ T5639] Bluetooth: hci0: command tx timeout [ 224.870327][ T8015] tipc: Left network mode [ 225.514460][T11542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.681575][ T5639] Bluetooth: hci0: command tx timeout [ 226.058416][T11552] syzkaller0: entered promiscuous mode [ 226.071416][T11552] syzkaller0: entered allmulticast mode [ 226.083952][T11562] syzkaller0: entered promiscuous mode [ 226.098892][T11562] syzkaller0: entered allmulticast mode [ 226.186892][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 226.442287][T11607] __nla_validate_parse: 2 callbacks suppressed [ 226.442306][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'. [ 228.362463][T11383] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.369675][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.377075][T11383] bridge_slave_0: entered allmulticast mode [ 228.384548][T11383] bridge_slave_0: entered promiscuous mode [ 228.397232][T11383] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.404670][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.411970][T11383] bridge_slave_1: entered allmulticast mode [ 228.419671][T11383] bridge_slave_1: entered promiscuous mode [ 228.436842][T11607] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 228.524924][T11613] netlink: 'syz.3.1405': attribute type 9 has an invalid length. [ 228.686070][T11383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.703910][T11383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.827862][T11622] xt_hashlimit: size too large, truncated to 1048576 [ 228.901753][T11616] siw: device registration error -23 [ 228.950738][T11383] team0: Port device team_slave_0 added [ 228.980593][T11383] team0: Port device team_slave_1 added [ 228.996483][T11635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1408'. [ 229.025856][T11626] syzkaller1: entered promiscuous mode [ 229.069195][T11626] syzkaller1: entered allmulticast mode [ 229.126142][ T8015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.135035][ T8015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.173271][ T8015] veth1_vlan: left promiscuous mode [ 229.180428][ T8015] veth0_vlan: left promiscuous mode [ 229.378765][ T8015] team0 (unregistering): Port device team_slave_1 removed [ 229.399810][ T8015] team0 (unregistering): Port device team_slave_0 removed [ 229.658177][T11383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.691354][T11383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.743777][T11383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.752308][T11651] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1411'. [ 229.796258][T11383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.812510][T11383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.867680][T11383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.049486][T11655] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 230.104815][T11657] syzkaller0: entered promiscuous mode [ 230.181326][T11657] syzkaller0: entered allmulticast mode [ 230.249695][T11383] hsr_slave_0: entered promiscuous mode [ 230.279267][T11383] hsr_slave_1: entered promiscuous mode [ 230.616676][ T8015] IPVS: stop unused estimator thread 0... [ 230.738378][T11705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1422'. [ 230.789491][T11703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1422'. [ 230.808232][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1419'. [ 230.813972][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 230.861386][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1422'. [ 230.912310][T11703] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1422'. [ 230.964477][T11712] IPVS: set_ctl: invalid protocol: 136 100.1.1.1:20004 [ 231.045039][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 231.046922][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 231.233043][T11721] netlink: 'syz.0.1427': attribute type 15 has an invalid length. [ 231.452954][T11721] syzkaller0: entered promiscuous mode [ 231.469576][T11721] syzkaller0: entered allmulticast mode [ 231.494195][T11731] syzkaller0: entered promiscuous mode [ 231.509464][T11731] syzkaller0: entered allmulticast mode [ 234.038693][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 234.175388][T11761] __nla_validate_parse: 2 callbacks suppressed [ 234.175407][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 234.281598][T11761] vlan3: entered promiscuous mode [ 234.297771][T11761] veth1_macvtap: entered promiscuous mode [ 234.442415][T11763] bond2: entered allmulticast mode [ 234.570882][T11773] ip6gretap1: entered allmulticast mode [ 234.592979][T11773] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 234.721567][T11781] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 234.743098][T11781] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1437'. [ 234.940447][T11800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1441'. [ 235.285001][T11814] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 235.296266][T11814] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 235.307078][T11814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1444'. [ 235.456467][T11383] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 235.486951][T11383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.546864][T11383] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 235.570807][T11383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.592887][T11383] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 235.618647][T11383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.646889][T11383] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 235.702030][T11383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 235.850088][T11837] bridge2: entered promiscuous mode [ 235.864963][T11837] bridge2: entered allmulticast mode [ 235.903493][T11837] team0: Port device bridge2 added [ 235.927670][T11840] bridge0: port 2(team0) entered blocking state [ 235.941138][T11840] bridge0: port 2(team0) entered disabled state [ 235.948271][T11840] team0: entered allmulticast mode [ 235.954088][T11840] bridge0: entered allmulticast mode [ 235.967419][T11840] team0: left allmulticast mode [ 235.972777][T11840] bridge0: left allmulticast mode [ 236.170888][T11852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1452'. [ 236.190218][T11383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.265221][T11859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.580845][T11878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1457'. [ 237.324824][T11383] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.373724][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.380934][ T8014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.444242][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.451582][ T8014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.493303][T11903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1459'. [ 237.494962][T11908] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 237.523684][T11905] bond5: (slave syz_tun): Releasing active interface [ 237.540052][T11908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.554533][T11911] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 237.566176][T11905] bond4: (slave veth0_to_bond): Releasing active interface [ 237.578448][T11905] bond4: (slave veth5): Releasing active interface [ 237.599562][T11905] team0: Port device bridge0 removed [ 237.622969][T11905] vlan2: left allmulticast mode [ 237.669108][T11905] geneve0: left allmulticast mode [ 237.693390][T11905] vlan2: left promiscuous mode [ 237.710530][T11905] geneve0: left promiscuous mode [ 237.724049][T11905] bridge0: port 1(vlan2) entered disabled state [ 237.753354][T11905] team0: Port device bridge2 removed [ 237.759262][T11914] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1458'. [ 238.029191][T11931] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1465'. [ 238.316703][T11946] syzkaller1: entered promiscuous mode [ 238.358952][T11946] syzkaller1: entered allmulticast mode [ 238.538518][T11960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.620166][T11965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.706416][T11974] netlink: 'syz.2.1473': attribute type 13 has an invalid length. [ 239.307254][T12006] Bluetooth: MGMT ver 1.23 [ 239.407689][T12011] netlink: 'syz.4.1479': attribute type 27 has an invalid length. [ 239.497307][T12011] veth4: entered allmulticast mode [ 239.573243][T11383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.760798][T11383] veth0_vlan: entered promiscuous mode [ 239.806781][T11383] veth1_vlan: entered promiscuous mode [ 239.915426][T11383] veth0_macvtap: entered promiscuous mode [ 239.943000][T11383] veth1_macvtap: entered promiscuous mode [ 240.020040][T11383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.071743][T11383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.103420][T12042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 240.122697][T12042] lo: Caught tx_queue_len zero misconfig [ 240.176165][T12040] veth0_to_team: entered promiscuous mode [ 240.193044][T12040] ip6gretap0: entered promiscuous mode [ 240.227208][T12040] ip6gretap0: left promiscuous mode [ 240.235067][T12040] veth0_to_team: left promiscuous mode [ 240.304564][ T7994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.337530][ T7994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.388904][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 240.394392][ T7994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.428667][ T7994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.449062][T12048] syzkaller1: entered promiscuous mode [ 240.463765][T12048] syzkaller1: entered allmulticast mode [ 240.748637][T12069] netlink: 'syz.2.1492': attribute type 1 has an invalid length. [ 240.789108][ T8014] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.825473][ T8014] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.839768][ T7994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.854499][ T8014] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.875204][ T8014] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.886621][ T7994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.920805][ T8014] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.938301][ T8014] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.959139][ T8014] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.982221][ T8014] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.990868][T12078] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1492'. [ 241.077289][T12083] x_tables: duplicate entry at hook 1 [ 241.104502][T12079] ip6tnl0: Caught tx_queue_len zero misconfig [ 241.118927][T12084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1494'. [ 241.157178][T12088] netlink: 642 bytes leftover after parsing attributes in process `syz.0.1496'. [ 241.227324][ T8014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.238923][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 241.249473][ T8014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.496427][T12108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.810669][ T29] audit: type=1107 audit(1784260151.734:3): pid=12125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ϒi/;EHɖÆXٻ9iB [ 241.810669][ T29] qBYYe!ٶ*mӜy%7Ԃoo:myIZֶ߮9+;V 0 h !;' [ 241.857402][T12132] : renamed from lo (while UP) [ 241.869640][T12130] lo: Caught tx_queue_len zero misconfig [ 241.879350][T12130] netlink: 'syz.4.1506': attribute type 3 has an invalid length. [ 241.933896][T12132] ip6tnl1: entered allmulticast mode [ 241.956574][T12138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1507'. [ 241.975577][ T7996] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 241.996731][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 242.009044][ T7996] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 242.331439][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 242.451642][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 242.513227][T12162] bond5: entered promiscuous mode [ 242.544300][T12162] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.891961][T12184] xt_hashlimit: size too large, truncated to 1048576 [ 242.962128][T12187] netlink: 'syz.2.1522': attribute type 8 has an invalid length. [ 243.260190][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 243.566690][T12220] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1531'. [ 243.623814][T12214] syzkaller1: entered promiscuous mode [ 243.641431][T12214] syzkaller1: entered allmulticast mode [ 246.241551][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 246.341869][T12203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.685193][T12253] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 246.889223][T12270] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 247.245494][T12291] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 247.479816][T12296] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 247.516588][T12296] syzkaller1: linktype set to 786 [ 247.875569][T12320] netlink: 36764 bytes leftover after parsing attributes in process `syz.3.1555'. [ 247.896343][T12325] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1552'. [ 247.909786][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1555'. [ 247.964549][T12314] lo speed is unknown, defaulting to 1000 [ 247.996344][T12329] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1556'. [ 248.070630][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 248.674096][ T1636] block nbd2: Possible stuck request ffff88802842e000: control (read@0,1024B). Runtime 90 seconds [ 248.685983][ T1636] block nbd2: Possible stuck request ffff88802842e1c0: control (read@1024,1024B). Runtime 90 seconds [ 248.697943][ T1636] block nbd2: Possible stuck request ffff88802842e380: control (read@2048,1024B). Runtime 90 seconds [ 248.710242][ T1636] block nbd2: Possible stuck request ffff88802842e540: control (read@3072,1024B). Runtime 90 seconds [ 248.837956][T12365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1565'. [ 248.853460][T12355] smbdirect: ib_dev[syz2] removed [ 248.883236][T12365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1565'. [ 249.045242][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1566'. [ 249.162985][T12378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.222776][T12383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1567'. [ 249.269400][T12377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.356081][T12385] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI U]Y [ 249.587263][T12377] bridge2: entered promiscuous mode [ 249.613511][T12377] bridge2: entered allmulticast mode [ 249.626944][T12377] team0: Port device bridge2 added [ 249.715893][T12412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'. [ 250.058929][T12430] Can't find ip_set type bitmap:ip [ 250.076102][T12423] Can't find ip_set type bitmap:ip [ 250.330892][T12441] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004 [ 251.378871][T12486] openvswitch: netlink: IP tunnel dst address not specified [ 251.424666][T12488] openvswitch: netlink: IP tunnel dst address not specified [ 251.763421][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 252.158952][ T29] audit: type=1107 audit(1784260162.084:4): pid=12536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 252.445783][T12542] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.580599][T12556] team0: Mode changed to "loadbalance" [ 252.693866][T12542] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.864170][T12542] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.007836][T12542] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.220386][ T7991] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.320442][ T7996] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.365503][ T7991] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.413422][ T7644] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.633114][T12593] syzkaller0: entered promiscuous mode [ 253.650108][T12593] syzkaller0: entered allmulticast mode [ 254.084972][T12614] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 254.100171][T12614] syzkaller1: linktype set to 805 [ 254.293778][T12626] xt_hashlimit: size too large, truncated to 1048576 [ 254.624680][T12641] __nla_validate_parse: 14 callbacks suppressed [ 254.624697][T12641] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1635'. [ 254.720800][T12641] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 254.861098][T12649] xt_TCPMSS: Only works on TCP SYN packets [ 254.961690][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 255.130274][T12680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1645'. [ 255.340881][T12692] syz_tun: entered allmulticast mode [ 255.436395][T12692] syz_tun (unregistering): left allmulticast mode [ 255.441873][T12695] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1649'. [ 255.628221][T12706] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20002 [ 256.920442][T12730] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1663'. [ 256.971092][T12736] batadv2: entered promiscuous mode [ 256.974765][T12740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1662'. [ 256.989576][T12736] batadv2: entered allmulticast mode [ 257.047598][T12743] batadv2: entered promiscuous mode [ 257.053146][T12743] batadv2: entered allmulticast mode [ 257.111954][T12742] netlink: 'syz.3.1666': attribute type 2 has an invalid length. [ 257.122516][T12742] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1666'. [ 257.145575][T12740] macvtap1: entered allmulticast mode [ 257.161749][T12742] tipc: Enabled bearer , priority 0 [ 257.178520][T12752] bond9: (slave vti0): refused to change device type [ 257.250105][T12741] tipc: Disabling bearer [ 257.522617][ T8014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.533434][ T9935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.542686][ T9935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.552915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.572940][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.590563][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.656555][T12778] netlink: 'syz.2.1673': attribute type 1 has an invalid length. [ 257.916767][T12785] bond10: (slave geneve3): making interface the new active one [ 257.945252][T12785] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 258.001064][T12803] netlink: 'syz.3.1674': attribute type 1 has an invalid length. [ 258.014350][ T7991] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 258.029243][ T7991] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 258.038739][T12803] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1674'. [ 258.057443][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'. [ 258.090583][ T7991] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 258.112486][ T7991] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 258.143217][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'. [ 258.663772][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.675178][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'. [ 258.745741][T12831] ip6erspan0: entered promiscuous mode [ 258.788221][T12838] netlink: 'syz.2.1681': attribute type 3 has an invalid length. [ 258.803610][ T7991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.813907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.902767][T12838] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 258.928854][T12838] bridge4: entered allmulticast mode [ 258.935415][T12842] bond0: (slave ip6tnl0): refused to change device type [ 258.973722][T12842] block nbd0: not configured, cannot reconfigure [ 259.078184][T12851] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 259.165696][T12867] sctp: [Deprecated]: syz.4.1687 (pid 12867) Use of int in maxseg socket option. [ 259.165696][T12867] Use struct sctp_assoc_value instead [ 261.889040][T12842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.803326][ T5765] net_ratelimit: 3 callbacks suppressed [ 262.803344][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.057512][T12956] bond0: Error: Cannot enslave bond to itself. [ 263.182333][T12964] pimreg9: entered allmulticast mode [ 263.226298][T12966] gretap0: entered promiscuous mode [ 263.284226][ T7996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.293217][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.302344][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.312623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.324304][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.370070][T12974] tipc: Enabled bearer , priority 10 [ 263.652465][T12947] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 263.659056][T12947] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 264.401628][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.481439][ T9] tipc: Node number set to 3212556873 [ 264.561996][ T7996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.570294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.441851][ T9935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.721459][ T4988] udevd[4988]: worker [5621] /devices/virtual/block/nbd2 is taking a long time [ 268.402137][ T7993] net_ratelimit: 2 callbacks suppressed [ 268.402157][ T7993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.417936][ T9935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.427584][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.043178][ T7996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.051674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.442431][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.322295][ T7996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.330553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.481935][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.521727][ T9935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.891529][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 273.601576][ T5814] net_ratelimit: 1 callbacks suppressed [ 273.601595][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.161785][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.170055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.642415][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.362263][ T7993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.370875][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.681606][ T9935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.722263][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.761636][ T9935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.801843][ T9935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.283083][ T1636] block nbd2: Possible stuck request ffff88802842e000: control (read@0,1024B). Runtime 120 seconds [ 279.294272][ T1636] block nbd2: Possible stuck request ffff88802842e1c0: control (read@1024,1024B). Runtime 120 seconds [ 279.305542][ T1636] block nbd2: Possible stuck request ffff88802842e380: control (read@2048,1024B). Runtime 120 seconds [ 279.316817][ T1636] block nbd2: Possible stuck request ffff88802842e540: control (read@3072,1024B). Runtime 120 seconds [ 279.842601][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.922364][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.930656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.401746][ T8015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.409990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.881852][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.922389][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.963266][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.002588][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.043388][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.681748][ T8015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.690036][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.081740][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.321732][ T7993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.330087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.121955][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.635439][T12989] __nla_validate_parse: 4 callbacks suppressed [ 287.635459][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 287.785209][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1720'. [ 287.822308][T12999] nbd: couldn't find a device at index 65546 [ 287.824615][T13001] vlan3: entered promiscuous mode [ 287.844734][T13001] team_slave_0: entered promiscuous mode [ 287.862496][T12999] xt_socket: unknown flags 0x4c [ 288.038034][T13018] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1725'. [ 288.162930][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.232893][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1727'. [ 288.368303][T13038] netlink: 'syz.2.1729': attribute type 39 has an invalid length. [ 288.888233][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1734'. [ 288.920371][T13067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1734'. [ 288.956825][T13069] netlink: 'syz.2.1736': attribute type 3 has an invalid length. [ 288.982386][T13069] netlink: 'syz.2.1736': attribute type 1 has an invalid length. [ 289.018390][T13069] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1736'. [ 289.028636][T13074] netlink: 'syz.2.1736': attribute type 8 has an invalid length. [ 289.068205][T13069] NCSI netlink: No device for ifindex 12 [ 289.205303][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.615403][T13088] block nbd0: server does not support multiple connections per device. [ 289.640137][T13089] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 289.661698][T13088] block nbd0: shutting down sockets [ 289.691412][T13093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1742'. [ 289.850394][T13095] bond6: entered promiscuous mode [ 290.017106][T13099] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.145412][T13099] bridge_slave_0: left allmulticast mode [ 290.170513][T13099] bridge_slave_0: left promiscuous mode [ 290.192306][T13099] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.230940][T13099] bond0: (slave veth0_to_bond): Releasing backup interface [ 290.267106][T13099] bond0: (slave bond_slave_0): Releasing backup interface [ 290.279344][T13115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1746'. [ 290.295097][T13099] bond0: (slave bond_slave_1): Releasing backup interface [ 290.312780][T13099] team0: Port device team_slave_0 removed [ 290.328499][T13099] team0: Port device team_slave_1 removed [ 290.338962][T13099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.366515][T13099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.384852][T13099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.394710][T13099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.420965][T13099] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 290.585141][T13092] bond6: left promiscuous mode [ 290.638946][T13131] Cannot find del_set index 3 as target [ 291.130496][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 291.154592][T13158] bond1: ARP target 9.0.0.0 is already present [ 291.161729][T13158] bond1: option arp_ip_target: invalid value (9) [ 291.174539][T13158] bond1 (unregistering): Released all slaves [ 291.231048][T13167] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 291.636572][T13193] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 291.726935][T13193] ip6gre2: left promiscuous mode [ 291.785152][T13193] ip6gre2: left allmulticast mode [ 291.805494][ T9935] IPVS: starting estimator thread 0... [ 291.908953][T13207] IPVS: using max 33 ests per chain, 79200 per kthread [ 291.918087][T13215] netlink: 'syz.3.1770': attribute type 10 has an invalid length. [ 291.954950][T13193] bridge2: left promiscuous mode [ 291.972960][T13193] bridge2: left allmulticast mode [ 292.070262][T13211] bridge5: port 1(dummy0) entered blocking state [ 292.083750][T13211] bridge5: port 1(dummy0) entered disabled state [ 292.103773][T13211] dummy0: entered allmulticast mode [ 292.130678][T13211] dummy0: entered promiscuous mode [ 292.165572][ T7993] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.203411][T13215] bridge5: port 1(dummy0) entered blocking state [ 292.211564][T13215] bridge5: port 1(dummy0) entered forwarding state [ 292.245592][T13215] dummy0: left allmulticast mode [ 292.261691][T13215] bridge5: port 1(dummy0) entered disabled state [ 292.306472][ T7993] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.344237][ T8015] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.368251][ T8015] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.885502][T13266] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 292.960442][T13266] bond6 (unregistering): Released all slaves [ 293.011452][T13272] bridge0: port 1(dummy0) entered blocking state [ 293.019054][T13272] bridge0: port 1(dummy0) entered disabled state [ 293.025744][T13272] dummy0: entered allmulticast mode [ 293.059886][T13275] dummy0: left allmulticast mode [ 293.067861][T13275] bridge0: port 1(dummy0) entered disabled state [ 293.083968][T13277] veth0: entered promiscuous mode [ 293.103491][T13277] veth0: left promiscuous mode [ 293.393244][T13302] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 293.675148][T13310] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 293.700640][T13310] bridge0: port 1(macvlan2) entered blocking state [ 293.711612][T13310] bridge0: port 1(macvlan2) entered disabled state [ 293.724515][T13310] macvlan2: entered allmulticast mode [ 293.736669][T13310] batadv0: entered allmulticast mode [ 293.747330][T13310] macvlan2: entered promiscuous mode [ 293.760568][T13310] batadv0: entered promiscuous mode [ 293.769565][T13319] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 293.770288][T13313] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 293.797553][T13313] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 293.808831][T13313] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 294.066652][T13335] netlink: 'syz.3.1800': attribute type 1 has an invalid length. [ 294.193710][T13335] 8021q: adding VLAN 0 to HW filter on device bond7 [ 294.196203][T13347] __nla_validate_parse: 5 callbacks suppressed [ 294.196221][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1801'. [ 294.229720][T13336] dummy0: left promiscuous mode [ 294.250024][T13336] bond7: (slave dummy0): making interface the new active one [ 294.259699][T13336] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 294.276650][T13349] bond0: Caught tx_queue_len zero misconfig [ 294.328830][ T8015] bond7: (slave dummy0): link status definitely down, disabling slave [ 294.374995][ T8015] bond7: now running without any active interface! [ 294.483081][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 294.493434][T13361] Unknown options in mask 6 [ 294.565361][T13364] netlink: 'syz.4.1808': attribute type 1 has an invalid length. [ 294.599756][T13364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1808'. [ 294.661330][T13366] netlink: 'syz.4.1808': attribute type 1 has an invalid length. [ 294.741956][T13366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1808'. [ 295.135173][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'. [ 295.217511][T13412] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1815'. [ 295.237987][T13415] netlink: 'syz.4.1817': attribute type 11 has an invalid length. [ 295.289350][T13406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.599603][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1822'. [ 295.957127][T13446] sctp: [Deprecated]: syz.1.1826 (pid 13446) Use of int in max_burst socket option deprecated. [ 295.957127][T13446] Use struct sctp_assoc_value instead [ 296.067109][T13455] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 296.076891][T13459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1830'. [ 296.581068][T13489] netlink: 768 bytes leftover after parsing attributes in process `syz.2.1836'. [ 296.648416][T13496] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1838'. [ 297.047703][ T5636] block nbd0: Receive control failed (result -32) [ 297.063870][ T5631] block nbd0: Receive control failed (result -32) [ 297.064127][ T5639] block nbd0: Receive control failed (result -32) [ 297.638930][T13547] FAULT_INJECTION: forcing a failure. [ 297.638930][T13547] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 297.656103][T13547] CPU: 0 UID: 0 PID: 13547 Comm: syz.1.1853 Not tainted syzkaller #0 PREEMPT(full) [ 297.656126][T13547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 297.656152][T13547] Call Trace: [ 297.656159][T13547] [ 297.656167][T13547] dump_stack_lvl+0xe8/0x150 [ 297.656201][T13547] should_fail_ex+0x40c/0x560 [ 297.656229][T13547] _copy_from_user+0x2d/0xb0 [ 297.656257][T13547] kstrtouint_from_user+0xd6/0x180 [ 297.656283][T13547] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 297.656323][T13547] proc_fail_nth_write+0x8e/0x210 [ 297.656349][T13547] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 297.656381][T13547] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 297.656404][T13547] vfs_write+0x296/0xba0 [ 297.656438][T13547] ? __pfx_vfs_write+0x10/0x10 [ 297.656464][T13547] ? __fget_files+0x2a/0x420 [ 297.656491][T13547] ? __fget_files+0x3a2/0x420 [ 297.656512][T13547] ? __fget_files+0x2a/0x420 [ 297.656541][T13547] ksys_write+0x150/0x270 [ 297.656566][T13547] ? __pfx_ksys_write+0x10/0x10 [ 297.656602][T13547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.656631][T13547] do_syscall_64+0x174/0x580 [ 297.656654][T13547] ? trace_irq_disable+0x3b/0x140 [ 297.656675][T13547] ? clear_bhb_loop+0x40/0x90 [ 297.656696][T13547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.656715][T13547] RIP: 0033:0x7fbc7e35e68e [ 297.656733][T13547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 297.656749][T13547] RSP: 002b:00007fbc7f33dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.656768][T13547] RAX: ffffffffffffffda RBX: 00007fbc7f33e6c0 RCX: 00007fbc7e35e68e [ 297.656782][T13547] RDX: 0000000000000001 RSI: 00007fbc7f33e0a0 RDI: 0000000000000005 [ 297.656794][T13547] RBP: 00007fbc7f33e090 R08: 0000000000000000 R09: 0000000000000000 [ 297.656805][T13547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.656816][T13547] R13: 00007fbc7e626038 R14: 00007fbc7e625fa0 R15: 00007ffc614e9228 [ 297.656847][T13547] [ 298.429856][T13583] tipc: Started in network mode [ 298.440469][T13583] tipc: Node identity ac14140f, cluster identity 4711 [ 298.470850][T13583] tipc: New replicast peer: 255.255.255.255 [ 298.504131][T13583] tipc: Enabled bearer , priority 10 [ 298.539226][T13589] netlink: 'syz.0.1863': attribute type 1 has an invalid length. [ 298.587177][T13591] netlink: 'syz.2.1867': attribute type 13 has an invalid length. [ 298.604886][T13589] bond3: entered promiscuous mode [ 298.610565][T13589] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.646878][T13591] tipc: Enabled bearer , priority 0 [ 298.722792][T13591] syzkaller0: entered promiscuous mode [ 298.728310][T13591] syzkaller0: entered allmulticast mode [ 298.739316][T13583] bond3: entered allmulticast mode [ 298.755148][T13591] tipc: Resetting bearer [ 298.789256][T13583] bond3: (slave bridge3): making interface the new active one [ 298.797114][T13583] bridge3: entered promiscuous mode [ 298.806231][T13583] bridge3: entered allmulticast mode [ 298.839132][T13583] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 298.850980][T13602] syzkaller0: entered promiscuous mode [ 298.862395][T13602] syzkaller0: entered allmulticast mode [ 299.107841][T13606] syzkaller0: entered promiscuous mode [ 299.113539][T13606] syzkaller0: entered allmulticast mode [ 299.199765][T13613] netlink: 'syz.0.1873': attribute type 3 has an invalid length. [ 299.305117][T13622] __nla_validate_parse: 8 callbacks suppressed [ 299.305234][T13622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1875'. [ 299.376724][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'. [ 301.355353][T13590] tipc: Resetting bearer [ 301.779210][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1881'. [ 301.797459][T13652] netlink: 'syz.4.1882': attribute type 1 has an invalid length. [ 303.948446][T13590] tipc: Disabling bearer [ 303.956963][ T187] tipc: Node number set to 2886997007 [ 303.964304][ T5723] tipc: Node number set to 3962323558 [ 303.989191][T13652] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 304.080486][T13658] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1881'. [ 304.166529][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1884'. [ 304.190957][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1885'. [ 304.307786][T13670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.397754][T13681] bridge_slave_0: Caught tx_queue_len zero misconfig [ 304.406008][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1886'. [ 304.429479][T13670] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 304.518020][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1886'. [ 304.709650][T13697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1889'. [ 304.978275][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 304.978710][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'. [ 304.992769][T13716] Bluetooth: MGMT ver 1.23 [ 305.004002][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 305.126315][T13711] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1891'. [ 305.138190][T13711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1891'. [ 305.312514][T13730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1898'. [ 305.928815][T13758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1908'. [ 306.072439][T13759] syzkaller0: entered promiscuous mode [ 306.089677][T13759] syzkaller0: entered allmulticast mode [ 306.810765][T13795] xt_TPROXY: Can be used only with -p tcp or -p udp [ 307.034628][T13808] gtp1: entered allmulticast mode [ 307.160509][T13819] netlink: 'syz.4.1924': attribute type 1 has an invalid length. [ 308.049874][ T5283] veth0_macvtap: left promiscuous mode [ 308.452194][ T5631] block nbd1: Receive control failed (result -32) [ 308.452245][ T5639] block nbd1: Receive control failed (result -32) [ 309.100852][T13913] bridge5: entered promiscuous mode [ 309.153944][T13913] bridge5: entered allmulticast mode [ 309.187009][T13913] team0: Port device bridge5 added [ 309.232839][ T5765] IPVS: starting estimator thread 0... [ 309.345356][T13938] IPVS: using max 31 ests per chain, 74400 per kthread [ 309.354256][T13921] bridge6: entered promiscuous mode [ 309.361422][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 309.370098][ T1636] block nbd2: Possible stuck request ffff88802842e000: control (read@0,1024B). Runtime 150 seconds [ 309.381758][ T1636] block nbd2: Possible stuck request ffff88802842e1c0: control (read@1024,1024B). Runtime 150 seconds [ 309.393650][ T1636] block nbd2: Possible stuck request ffff88802842e380: control (read@2048,1024B). Runtime 150 seconds [ 309.405116][ T1636] block nbd2: Possible stuck request ffff88802842e540: control (read@3072,1024B). Runtime 150 seconds [ 309.411981][T13921] bridge6: entered allmulticast mode [ 309.495210][T13921] team0: Port device bridge6 added [ 309.980800][T13959] syzkaller0: entered promiscuous mode [ 310.002981][T13959] syzkaller0: entered allmulticast mode [ 310.023272][T13968] __nla_validate_parse: 7 callbacks suppressed [ 310.023291][T13968] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1953'. [ 310.039863][T13968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1953'. [ 310.049280][T13968] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1953'. [ 310.067354][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'. [ 310.076755][T13974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1954'. [ 310.303701][T13980] erspan1: entered allmulticast mode [ 310.588226][T13991] xt_limit: Overflow, try lower: 268435456/134217728 [ 310.612204][T13991] xt_limit: Overflow, try lower: 268435456/134217728 [ 310.620278][T13951] netlink: 'syz.0.1949': attribute type 4 has an invalid length. [ 311.008284][T14002] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1961'. [ 311.033681][T14002] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1961'. [ 311.133660][T14002] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1961'. [ 313.375385][T14011] netlink: 'syz.1.1964': attribute type 12 has an invalid length. [ 313.395612][T14007] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.1962'. [ 313.401835][T14011] netlink: 'syz.1.1964': attribute type 29 has an invalid length. [ 313.454635][T14011] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1964'. [ 313.697443][T14030] syzkaller0: entered promiscuous mode [ 313.715815][T14030] syzkaller0: entered allmulticast mode [ 313.955729][T14051] bond0: ARP target 0.0.0.2 is already present [ 313.963110][T14051] bond0: option arp_ip_target: invalid value (33554432) [ 314.289060][T14060] netlink: 'syz.3.1980': attribute type 1 has an invalid length. [ 314.353535][T14060] netlink: 'syz.3.1980': attribute type 3 has an invalid length. [ 314.420801][T14060] 8021q: adding VLAN 0 to HW filter on device bond9 [ 314.446173][T14060] bond8: (slave bond9): making interface the new active one [ 314.456992][T14060] bond8: (slave bond9): Enslaving as an active interface with an up link [ 315.132672][T14109] netlink: 'syz.3.1992': attribute type 1 has an invalid length. [ 315.205909][T14110] macsec3: entered promiscuous mode [ 315.470857][T14122] ip6gre3: entered promiscuous mode [ 315.495757][T14122] ip6gre3: entered allmulticast mode [ 315.517702][ T7996] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 315.540259][ T7996] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 315.548468][ T187] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 315.654011][T14139] __nla_validate_parse: 10 callbacks suppressed [ 315.654031][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 316.061531][ T187] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 316.481512][ T187] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 318.307644][T14158] syzkaller0: entered promiscuous mode [ 318.335523][T14158] syzkaller0: entered allmulticast mode [ 318.390412][T14159] tipc: Enabled bearer , priority 0 [ 318.443509][T14161] tipc: Resetting bearer [ 318.475836][T14145] tipc: Resetting bearer [ 318.524917][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 318.543615][T14145] tipc: Disabling bearer [ 318.579834][T14175] batadv_slave_0: Caught tx_queue_len zero misconfig [ 318.931428][T14192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2009'. [ 319.195087][T14208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2014'. [ 319.452710][T14219] vlan2: left allmulticast mode [ 319.463497][T14219] bond0: left allmulticast mode [ 319.470765][T14219] geneve4: left allmulticast mode [ 319.486131][T14219] macsec1: left promiscuous mode [ 319.495395][T14219] bond2: left allmulticast mode [ 319.506312][T14219] ip6gretap1: left allmulticast mode [ 319.529512][T14219] ip6erspan0: left promiscuous mode [ 319.567496][T14219] bond3: left promiscuous mode [ 319.580320][T14219] bridge3: left promiscuous mode [ 319.597778][T14219] bond3: left allmulticast mode [ 319.609659][T14219] bridge3: left allmulticast mode [ 319.772497][T14235] sctp: [Deprecated]: syz.3.2022 (pid 14235) Use of int in max_burst socket option deprecated. [ 319.772497][T14235] Use struct sctp_assoc_value instead [ 319.796217][T14237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2021'. [ 319.921512][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 320.420437][T14251] netlink: zone id is out of range [ 320.427343][T14251] netlink: zone id is out of range [ 320.437727][T14251] netlink: set zone limit has 8 unknown bytes [ 320.545085][T14259] syzkaller0: entered promiscuous mode [ 320.553755][T14259] syzkaller0: entered allmulticast mode [ 320.588495][T14247] ip6tnl2: entered allmulticast mode [ 323.437811][ T7994] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 323.448519][ T7994] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 323.461558][ T9935] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 323.515094][T14294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2036'. [ 323.532827][ T5746] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 323.623996][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 323.747566][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2037'. [ 323.909074][T14313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2040'. [ 323.971651][ T5746] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 324.003884][ T5746] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 324.328131][T14338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2044'. [ 324.361570][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2045'. [ 324.469114][T14352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2044'. [ 324.653572][T14348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.673652][T14348] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.711127][T14348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.386002][T14348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.397557][T14348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.409733][T14348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.426527][T14348] veth1_vlan: left promiscuous mode [ 325.434609][T14348] veth0_vlan: left promiscuous mode [ 325.444782][T14348] veth0_vlan: entered promiscuous mode [ 325.453559][T14348] veth1_vlan: entered promiscuous mode [ 325.467609][T14348] veth1_macvtap: left promiscuous mode [ 325.474985][T14348] veth0_macvtap: left promiscuous mode [ 325.483452][T14348] veth0_macvtap: entered promiscuous mode [ 325.493250][T14348] veth1_macvtap: entered promiscuous mode [ 325.505955][T14348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.516325][T14348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.528129][T14348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.537118][T14348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 325.552688][T14348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.591006][T14348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.610892][T14348] 8021q: adding VLAN 0 to HW filter on device bond3 [ 325.630079][T14348] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 325.640729][T14348] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.682962][T14348] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.696188][T14348] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 325.716023][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.723253][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.733257][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.740440][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.859814][T14352] 8021q: adding VLAN 0 to HW filter on device bond6 [ 325.889924][T14360] macsec1: entered promiscuous mode [ 325.993993][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 326.055443][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 326.073138][ T7641] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.098980][ T7641] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.123723][ T7641] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.145532][ T7641] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.208855][T14409] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2055'. [ 326.227248][ T7641] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.271577][ T7641] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.317734][ T7641] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.351295][ T7641] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.447421][T14412] bond0: (slave ip6tnl0): refused to change device type [ 326.526702][ T1121] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 326.568463][ T5723] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 326.580764][ T1121] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 326.787130][T14435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.862318][T14435] openvswitch: netlink: Message has 1 unknown bytes. [ 326.872045][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 327.228824][T14465] ip6tnl0: Caught tx_queue_len zero misconfig [ 327.257588][T14465] sctp: [Deprecated]: syz.2.2065 (pid 14465) Use of int in maxseg socket option. [ 327.257588][T14465] Use struct sctp_assoc_value instead [ 327.710070][T14488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.413911][ T1121] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.431590][ T1121] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.442599][ T1121] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.473992][ T1121] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.534563][T14538] SET target dimension over the limit! [ 328.561427][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 328.561445][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 328.581077][T14540] __nla_validate_parse: 6 callbacks suppressed [ 328.581094][T14540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2082'. [ 328.727622][T14552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2084'. [ 329.201179][T14581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2092'. [ 329.253478][T14583] xt_hashlimit: size too large, truncated to 1048576 [ 329.268107][T14584] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.2086'. [ 329.290676][T14586] xt_hashlimit: size too large, truncated to 1048576 [ 329.359478][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2093'. [ 329.388591][T14584] netlink: 'syz.1.2086': attribute type 1 has an invalid length. [ 329.410990][T14586] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 330.348125][T14621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2104'. [ 330.383723][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2105'. [ 330.437942][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2105'. [ 330.466864][T14636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.476093][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2105'. [ 330.502492][T14623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2105'. [ 330.801860][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 330.932295][T14655] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 330.976557][T14655] bond5 (unregistering): Released all slaves [ 332.401183][T14723] batman_adv: batadv0: Adding interface: ip6gretap1 [ 332.438366][T14723] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.472579][T14723] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 332.587818][T14735] netlink: 'syz.2.2136': attribute type 1 has an invalid length. [ 332.705669][T14745] netlink: 'syz.3.2137': attribute type 3 has an invalid length. [ 332.774987][T14752] netlink: 'syz.2.2136': attribute type 30 has an invalid length. [ 333.657654][T14799] tls_set_device_offload: netdev not found [ 333.694657][T14801] __nla_validate_parse: 7 callbacks suppressed [ 333.694678][T14801] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2148'. [ 333.712023][T14794] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2146'. [ 333.733162][T14801] syzkaller1: entered promiscuous mode [ 333.741325][T14801] syzkaller1: entered allmulticast mode [ 333.976431][T14766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.164824][T14819] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2150'. [ 334.333912][T14827] netlink: 'syz.4.2152': attribute type 28 has an invalid length. [ 334.362313][T14827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2152'. [ 335.098650][T14847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'. [ 335.189473][T14847] netlink: 'syz.2.2158': attribute type 10 has an invalid length. [ 335.220612][T14847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2158'. [ 335.390115][T14856] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2162'. [ 335.589167][T14863] x_tables: duplicate underflow at hook 1 [ 335.674368][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'. [ 335.883422][T14876] netlink: 'syz.2.2169': attribute type 1 has an invalid length. [ 336.108622][T14878] bond11: (slave ip6erspan0): making interface the new active one [ 336.132714][T14878] bond11: (slave ip6erspan0): Enslaving as an active interface with an up link [ 336.663674][T14892] batadv0: Caught tx_queue_len zero misconfig [ 336.782647][T14895] bond5: entered promiscuous mode [ 336.787965][T14895] bond5: entered allmulticast mode [ 336.793846][T14895] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.881505][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 337.038577][T14902] sctp: [Deprecated]: syz.0.2177 (pid 14902) Use of int in max_burst socket option. [ 337.038577][T14902] Use struct sctp_assoc_value instead [ 337.087995][T14902] IPVS: length: 254 != 24 [ 338.015075][T14921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2181'. [ 338.383931][T14935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2184'. [ 339.302783][T14967] syzkaller1: entered promiscuous mode [ 339.311926][T14967] syzkaller1: entered allmulticast mode [ 339.440370][T14978] netlink: 'syz.0.2196': attribute type 2 has an invalid length. [ 339.448881][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 339.457868][ T1636] block nbd2: Possible stuck request ffff88802842e000: control (read@0,1024B). Runtime 180 seconds [ 339.468920][ T1636] block nbd2: Possible stuck request ffff88802842e1c0: control (read@1024,1024B). Runtime 180 seconds [ 339.480147][ T1636] block nbd2: Possible stuck request ffff88802842e380: control (read@2048,1024B). Runtime 180 seconds [ 339.494928][ T1636] block nbd2: Possible stuck request ffff88802842e540: control (read@3072,1024B). Runtime 180 seconds [ 339.502511][T14978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2196'. [ 339.799046][T14993] netlink: 'syz.2.2199': attribute type 1 has an invalid length. [ 340.120882][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'. [ 340.170456][T15006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2202'. [ 340.187353][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2203'. [ 340.277296][T15020] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2203'. [ 340.313313][T15020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2203'. [ 340.528196][T15029] macsec1: entered promiscuous mode [ 340.672170][T15032] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 340.793137][T15041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2208'. [ 341.058036][T15053] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.2210'. [ 342.165403][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'. [ 342.287342][T15101] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 342.314403][T15101] bond6 (unregistering): Released all slaves [ 342.667356][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2226'. [ 342.707369][T15122] netlink: 'syz.2.2226': attribute type 1 has an invalid length. [ 342.731151][T15122] netlink: 'syz.2.2226': attribute type 2 has an invalid length. [ 342.778478][T15124] tc_dump_action: action bad kind [ 343.265235][T15149] xt_TPROXY: Can be used only with -p tcp or -p udp [ 343.328298][T15148] netdevsim netdevsim4: Direct firmware load for X failed with error -2 [ 343.359744][T15148] netdevsim netdevsim4: Falling back to sysfs fallback for: X [ 343.393855][T15151] syzkaller0: entered promiscuous mode [ 343.416939][T15151] syzkaller0: entered allmulticast mode [ 344.222311][T15181] tipc: Enabled bearer , priority 10 [ 344.313597][T15189] tc action pedit 'at' offset 5 out of bounds [ 344.321780][T15189] tc action pedit 'at' offset 5 out of bounds [ 344.327896][T15189] tc action pedit 'at' offset 5 out of bounds [ 344.334065][T15189] tc action pedit 'at' offset 5 out of bounds [ 344.340147][T15189] tc action pedit 'at' offset 5 out of bounds [ 344.346295][T15189] tc action pedit 'at' offset 5 out of bounds [ 344.352388][T15189] tc action pedit 'at' offset 5 out of bounds [ 344.358484][T15189] tc action pedit 'at' offset 5 out of bounds [ 344.364569][T15189] tc action pedit 'at' offset 5 out of bounds [ 344.370625][T15189] tc action pedit 'at' offset 5 out of bounds [ 344.376879][T15189] 0: reclassify loop, rule prio 0, protocol 800 [ 344.442211][T15191] 8021q: VLANs not supported on lo [ 344.615195][T15199] syzkaller1: entered promiscuous mode [ 344.632442][T15199] syzkaller1: entered allmulticast mode [ 344.950010][T15218] __nla_validate_parse: 15 callbacks suppressed [ 344.950026][T15218] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2253'. [ 345.201485][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 345.254878][T15223] netlink: 'syz.2.2255': attribute type 13 has an invalid length. [ 345.275495][T15223] netlink: 'syz.2.2255': attribute type 17 has an invalid length. [ 345.509725][T15223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.545831][T15223] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.565041][T15223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.608552][T15223] tipc: Resetting bearer [ 345.631714][T15223] tipc: Resetting bearer [ 345.827232][T15223] veth1_vlan: left promiscuous mode [ 345.843420][T15223] veth0_vlan: left promiscuous mode [ 345.851631][T15223] veth0_vlan: entered promiscuous mode [ 345.861489][T15223] veth1_vlan: entered promiscuous mode [ 345.912338][T15223] veth0_macvtap: left promiscuous mode [ 345.919481][T15223] veth0_macvtap: entered promiscuous mode [ 345.971443][T15223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 346.005562][T15223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 346.035360][T15223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 346.068406][T15223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 346.086196][T15223] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 346.106068][T15223] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 346.147402][T15223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.175840][T15223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.238160][T15223] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 346.347063][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2257'. [ 346.369237][ T8016] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 346.393006][T15241] syzkaller1: entered promiscuous mode [ 346.415518][T15241] syzkaller1: entered allmulticast mode [ 346.481852][ T8016] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 346.599155][T15252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2262'. [ 346.644388][ T8016] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 346.670106][ T8016] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 347.480211][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'. [ 347.887749][T15297] netlink: 49 bytes leftover after parsing attributes in process `syz.2.2270'. [ 348.284709][T15304] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 348.763151][ T8011] [ 348.765520][ T8011] ============================================ [ 348.767537][T15330] xfrm1: entered allmulticast mode [ 348.771715][ T8011] WARNING: possible recursive locking detected [ 348.771786][ T8011] syzkaller #0 Not tainted [ 348.787413][ T8011] -------------------------------------------- [ 348.793561][ T8011] kworker/u8:36/8011 is trying to acquire lock: [ 348.799802][ T8011] ffff88807b086558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 348.809824][ T8011] [ 348.809824][ T8011] but task is already holding lock: [ 348.817196][ T8011] ffff88802c470558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 348.827072][ T8011] [ 348.827072][ T8011] other info that might help us debug this: [ 348.835138][ T8011] Possible unsafe locking scenario: [ 348.835138][ T8011] [ 348.842596][ T8011] CPU0 [ 348.845881][ T8011] ---- [ 348.849212][ T8011] lock(&qdisc_xmit_lock_key#4); [ 348.854254][ T8011] lock(&qdisc_xmit_lock_key#4); [ 348.859300][ T8011] [ 348.859300][ T8011] *** DEADLOCK *** [ 348.859300][ T8011] [ 348.867454][ T8011] May be due to missing lock nesting notation [ 348.867454][ T8011] [ 348.875780][ T8011] 11 locks held by kworker/u8:36/8011: [ 348.881254][ T8011] #0: ffff8880553f3140 ((wq_completion)bond2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 348.892294][ T8011] #1: ffffc90005747c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 348.905291][ T8011] #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x17c0 [ 348.915029][ T8011] #3: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 348.925067][ T8011] #4: ffff88807ec80228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 348.937718][ T8011] #5: ffff88802c470558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 348.948058][ T8011] #6: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 348.957043][ T8011] #7: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 348.966838][ T8011] #8: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 348.975684][ T8011] #9: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 348.985601][ T8011] #10: ffff88807be0f228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 348.998379][ T8011] [ 348.998379][ T8011] stack backtrace: [ 349.004348][ T8011] CPU: 0 UID: 0 PID: 8011 Comm: kworker/u8:36 Not tainted syzkaller #0 PREEMPT(full) [ 349.004377][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 349.004394][ T8011] Workqueue: bond2 bond_alb_monitor [ 349.004426][ T8011] Call Trace: [ 349.004434][ T8011] [ 349.004440][ T8011] dump_stack_lvl+0xe8/0x150 [ 349.004495][ T8011] print_deadlock_bug+0x279/0x290 [ 349.004527][ T8011] __lock_acquire+0x24df/0x2cf0 [ 349.004548][ T8011] ? __pfx_netif_skb_features+0x10/0x10 [ 349.004563][ T8011] ? ret_from_fork_asm+0x1a/0x30 [ 349.004577][ T8011] ? __lock_acquire+0x683/0x2cf0 [ 349.004596][ T8011] ? sch_direct_xmit+0x15f/0x4c0 [ 349.004615][ T8011] lock_acquire+0x106/0x350 [ 349.004632][ T8011] ? sch_direct_xmit+0x15f/0x4c0 [ 349.004655][ T8011] _raw_spin_lock+0x2e/0x40 [ 349.004774][ T8011] ? sch_direct_xmit+0x15f/0x4c0 [ 349.004792][ T8011] sch_direct_xmit+0x15f/0x4c0 [ 349.004813][ T8011] ? __pfx_sch_direct_xmit+0x10/0x10 [ 349.004831][ T8011] ? arp_solicit+0xb90/0xe40 [ 349.004853][ T8011] __dev_queue_xmit+0x1754/0x37f0 [ 349.004871][ T8011] ? __dev_queue_xmit+0x29b/0x37f0 [ 349.004887][ T8011] ? __lock_acquire+0x683/0x2cf0 [ 349.004905][ T8011] ? arpt_do_table+0x25b/0x1f90 [ 349.004957][ T8011] ? __pfx___dev_queue_xmit+0x10/0x10 [ 349.004976][ T8011] ? __pfx_arpt_do_table+0x10/0x10 [ 349.004998][ T8011] ? NF_HOOK+0xa2/0x3c0 [ 349.005017][ T8011] NF_HOOK+0x33a/0x3c0 [ 349.005035][ T8011] ? __pfx_arp_xmit_finish+0x10/0x10 [ 349.005053][ T8011] ? NF_HOOK+0xa2/0x3c0 [ 349.005070][ T8011] ? __pfx_NF_HOOK+0x10/0x10 [ 349.005086][ T8011] ? lock_acquire+0x106/0x350 [ 349.005105][ T8011] ? __pfx_arp_xmit_finish+0x10/0x10 [ 349.005123][ T8011] ? inet_addr_type_dev_table+0x25/0x190 [ 349.005185][ T8011] arp_xmit+0x16c/0x270 [ 349.005202][ T8011] ? arp_xmit+0x23/0x270 [ 349.005219][ T8011] arp_solicit+0xbdc/0xe40 [ 349.005242][ T8011] ? __pfx_arp_solicit+0x10/0x10 [ 349.005262][ T8011] ? __neigh_event_send+0xea4/0x1510 [ 349.005317][ T8011] ? __pfx_arp_solicit+0x10/0x10 [ 349.005335][ T8011] __neigh_event_send+0xf0c/0x1510 [ 349.005358][ T8011] neigh_resolve_output+0x1a1/0x720 [ 349.005378][ T8011] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 349.005402][ T8011] ? ip_finish_output2+0x3de/0x10b0 [ 349.005421][ T8011] ip_finish_output2+0xc4b/0x10b0 [ 349.005441][ T8011] ? ip_skb_dst_mtu+0x811/0xa50 [ 349.005458][ T8011] ? ip_finish_output2+0x3de/0x10b0 [ 349.005479][ T8011] ? ip_finish_output+0x40b/0x530 [ 349.005498][ T8011] ip_output+0x29f/0x450 [ 349.005516][ T8011] ? ip_output+0x5a/0x450 [ 349.005534][ T8011] iptunnel_xmit+0x626/0xd10 [ 349.005582][ T8011] ip_tunnel_xmit+0x195b/0x2040 [ 349.005608][ T8011] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 349.005628][ T8011] ? __pfx_gre_build_header+0x10/0x10 [ 349.005687][ T8011] ? kfree+0x1c5/0x640 [ 349.005726][ T8011] ? pskb_expand_head+0x469/0x13a0 [ 349.005762][ T8011] __gre_xmit+0x19e/0x240 [ 349.005779][ T8011] ? __pfx___gre_xmit+0x10/0x10 [ 349.005798][ T8011] erspan_xmit+0xad5/0x1590 [ 349.005819][ T8011] ? __pfx_erspan_xmit+0x10/0x10 [ 349.005836][ T8011] ? __lock_acquire+0x683/0x2cf0 [ 349.005856][ T8011] dev_hard_start_xmit+0x2cd/0x830 [ 349.005875][ T8011] sch_direct_xmit+0x257/0x4c0 [ 349.005896][ T8011] ? __pfx_sch_direct_xmit+0x10/0x10 [ 349.005914][ T8011] ? __switch_to_asm+0x70/0x70 [ 349.005930][ T8011] __dev_queue_xmit+0x1754/0x37f0 [ 349.005948][ T8011] ? __dev_queue_xmit+0x29b/0x37f0 [ 349.005965][ T8011] ? __pfx___dev_queue_xmit+0x10/0x10 [ 349.005980][ T8011] ? rcu_is_watching+0x15/0xb0 [ 349.006008][ T8011] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 349.006025][ T8011] ? trace_kmem_cache_alloc+0x29/0xe0 [ 349.006040][ T8011] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 349.006058][ T8011] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 349.006074][ T8011] ? local_lock_release+0x9c/0x160 [ 349.006113][ T8011] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 349.006134][ T8011] ? __alloc_skb+0x4cc/0x7a0 [ 349.006153][ T8011] ? alb_send_lp_vid+0x14e/0x550 [ 349.006173][ T8011] alb_send_lp_vid+0x348/0x550 [ 349.006194][ T8011] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 349.006217][ T8011] alb_send_learning_packets+0x12c/0x300 [ 349.006238][ T8011] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 349.006256][ T8011] ? bond_alb_monitor+0xf3/0x17c0 [ 349.006276][ T8011] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 349.006318][ T8011] bond_alb_monitor+0x3d0/0x17c0 [ 349.006338][ T8011] ? bond_alb_monitor+0xf3/0x17c0 [ 349.006355][ T8011] ? __pfx_bond_alb_monitor+0x10/0x10 [ 349.006373][ T8011] ? rcu_is_watching+0x15/0xb0 [ 349.006394][ T8011] ? process_scheduled_works+0xa20/0x14e0 [ 349.006410][ T8011] process_scheduled_works+0xa8e/0x14e0 [ 349.006435][ T8011] ? __pfx_process_scheduled_works+0x10/0x10 [ 349.006453][ T8011] ? assign_work+0x3cf/0x5d0 [ 349.006470][ T8011] worker_thread+0xa47/0xfb0 [ 349.006495][ T8011] kthread+0x388/0x470 [ 349.006514][ T8011] ? __pfx_worker_thread+0x10/0x10 [ 349.006529][ T8011] ? __pfx_kthread+0x10/0x10 [ 349.006547][ T8011] ret_from_fork+0x514/0xb70 [ 349.006580][ T8011] ? __pfx_ret_from_fork+0x10/0x10 [ 349.006599][ T8011] ? __switch_to+0xc89/0x1420 [ 349.006617][ T8011] ? __pfx_kthread+0x10/0x10 [ 349.006636][ T8011] ret_from_fork_asm+0x1a/0x30 [ 349.006654][ T8011] [ 349.784700][T15339] netlink: 'syz.1.2279': attribute type 1 has an invalid length. [ 349.801361][T15339] netlink: 'syz.1.2279': attribute type 2 has an invalid length. [ 352.865724][ T4988] udevd[4988]: worker [5621] /devices/virtual/block/nbd2 timeout; kill it [ 352.874364][ T4988] udevd[4988]: seq 13231 '/devices/virtual/block/nbd2' killed [ 355.442025][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 356.081645][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!