last executing test programs: 5.285808194s ago: executing program 2 (id=8062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x50, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0xfffffe8c}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x10001}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040080) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x5e0}], 0x1}, 0x20004014) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x802, 0x0}, 0xffffffc0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10, r8}, 0x94) 4.684518106s ago: executing program 4 (id=8070): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe0000002000000000000000000000000e00000010000000000000000000000004e200000000000000a"], 0xb8}, 0x1, 0x0, 0x80ffffffffffffff}, 0x24000080) 4.531105743s ago: executing program 4 (id=8071): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff0000000000003e000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x48}}, 0x0) 4.186996886s ago: executing program 4 (id=8074): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) listen(r0, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000180)=0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x3, 0x1, 0x0, 0x5, 0x1, 0x98, [{0x5, 0x3}]}]}, {0x0, [0x30, 0x30, 0x61, 0x30, 0x2e]}}, 0x0, 0x37, 0x0, 0x8, 0xbf81}, 0x20) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x6, 0x10}, 0xc) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r4, 0x4) 1.882898742s ago: executing program 4 (id=8075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0xd4b2, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000980), &(0x7f0000000a00)=0x68) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfdfbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0xd4b2, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000980), &(0x7f0000000a00)=0x68) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfdfbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) (async) 1.863636938s ago: executing program 3 (id=8076): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x217367e8e37c60cf, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) 1.842517949s ago: executing program 0 (id=8077): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x2, 0x1}, 0x1}, 0x18) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x1c, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x8}}}, 0x2a) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000b86b6e0000000000000000000c0008"], 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x2e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0x8) (async) accept4(r3, 0x0, 0x0, 0x0) (async) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x2, 0x1}, 0x1}, 0x18) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x1c, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x8}}}, 0x2a) (async) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000b86b6e0000000000000000000c0008"], 0xc4}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x2e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) (async) 1.79107675s ago: executing program 2 (id=8078): r0 = socket(0x11, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) recvmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x400000c2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.735399547s ago: executing program 1 (id=8079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0xfffffff9}, 0x2, 0xa, 0x40, 0x4, 0x1, 'syz0\x00', "a8ade9db18a9e1d93ee4ab381d1f2d57bf24d5a049b3e40ba20d8b981ce6931f", "af7af1d3b3c3ad33171d5f3ebe5ecc5d874c3a06e44c3142a7af088e33b5cb39", [{0x5, 0xb, {0x0, 0x4d}}, {0x7, 0x5, {0x3, 0x8}}, {0x3, 0x6, {0x3, 0x7ff}}, {0x3, 0x1fa0, {0x0, 0xff}}, {0x401, 0x5, {0x0, 0x5}}, {0x2, 0xfffc, {0x0, 0x1}}, {0x4, 0x9dc, {0x2, 0x7}}, {0x5, 0x400, {0x2, 0xfffffff9}}, {0xfffc, 0x1, {0x0, 0x800}}, {0xfff7, 0x10, {0x3, 0x6}}, {0x7df, 0x7, {0x0, 0x2d}}, {0x6, 0x9, {0x0, 0xffffffff}}, {0x4, 0x0, {0x3, 0xfffff000}}, {0x400, 0x1, {0x3}}, {0x0, 0x9, {0x3, 0xe}}, {0x0, 0xf, {0x1, 0x565}}, {0x81c, 0x1, {0x1, 0x2c}}, {0x6072, 0x7fff, {0x1, 0x3}}, {0x5, 0x3, {0x2, 0x3}}, {0x5, 0x9, {0x2, 0x4}}, {0xb9, 0xfffb, {0x1, 0x7}}, {0x0, 0x5, {0x3, 0x81}}, {0x5, 0x5, {0x0, 0xd65}}, {0x9, 0x6c01, {0x0, 0x5}}, {0x7, 0xa, {0x1, 0x7bd6}}, {0x6, 0x2, {0x1, 0xc600000}}, {0xfffa, 0x2, {0x0, 0x8}}, {0x2, 0xbe}, {0x6, 0x8c, {0x4, 0x5}}, {0x5, 0x5, {0x3, 0x3}}, {0x3, 0x1, {0x3, 0x3}}, {0xd29e, 0x3, {0x3, 0x1ff}}, {0x1e70, 0x5, {0x3, 0xfffffbff}}, {0x7, 0x6, {0x2, 0xff}}, {0x3, 0xc6b, {0x0, 0xf}}, {0xc, 0x5, {0x3, 0x3}}, {0x2, 0x1, {0x1, 0x9}}, {0x3, 0x0, {0x1, 0x9}}, {0x0, 0x7a8, {0x0, 0x6}}, {0x0, 0xfffa, {0x3, 0xa8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x20004c00) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) 1.686191852s ago: executing program 3 (id=8080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = socket(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r2) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r3, 0x53f63307afa5bb95, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x880) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.582320486s ago: executing program 0 (id=8081): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000380)={'gre0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f000000abc0)={&(0x7f000000aa40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x5, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0x8}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80001}, {0xfbfffffa, 0x1c3ff}]}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b000100697036677265000054", @ANYRES32], 0x94}}, 0x0) close(r2) 1.58204168s ago: executing program 3 (id=8082): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a000000000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004ff07000000000000797a3100000000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000400)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.578850055s ago: executing program 1 (id=8083): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="a905000000407464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x2c}], 0x100000000000008e}}], 0x1, 0x800) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="53fb7bdc0f56297e8d81469a615db4192f58aa8c358d9957d4f84ba90ec0a5bfe9ec59611f6a064f", 0x28}], 0x1, 0x0, 0x24c0}}], 0x1, 0x60040d1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) getsockopt$inet_mreq(r2, 0x0, 0x20, 0x0, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e23, @remote}}) r7 = socket(0x23, 0x5, 0x0) r8 = socket(0x11, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000400)={{{@in=@initdev, @in=@initdev}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f00000005c0)=0xe8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275c, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r10, r10, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r10, 0x2f, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x2a) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r8, &(0x7f00000001c0)={0x11, 0x8, r11, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) setsockopt$packet_int(r8, 0x107, 0x12, &(0x7f00000003c0)=0x9, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r12, 0x541b, &(0x7f0000000000)) 1.490083826s ago: executing program 3 (id=8084): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b000000000008"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) 1.299914178s ago: executing program 2 (id=8085): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000400000000000a20000000000a01010000000000000000010000050900010073797a30000000002c000000030a010200000000000000000100ffff0900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c00028008000440000000160500030000000000080002"], 0xc8}}, 0x48800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f00000002c0), 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c00990004000000170000001400040070696d36726567300000000000000000080005000600000014001780040003000400040004000400040001001400178004"], 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x34}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "36b3b73ec4b4756cc6fde90f"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x8811}, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010004200000fddbdf2502020200140002006e7230000000000000000000000000000900010073797a3200000000090003"], 0x70}, 0x1, 0x40030000000000, 0x0, 0x4000005}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000080)=0x20) write$tun(r8, &(0x7f0000000200)={@void, @val={0x1, 0x0, 0x1, 0xff, 0x8, 0x9}, @x25={0x2, 0x5, 0x1b, "39e71ff88d51c701043b67438f543f5db7f50f68430ccfb2"}}, 0x25) sendmsg$nl_route(r7, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@getnetconf={0x14, 0x52, 0x800, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000015c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001600)={0xcfc, r3, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x30}}}}, [@NL80211_ATTR_TX_RATES={0x404, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0xa4a6, 0x6, 0x5, 0x100, 0x1000, 0xfff]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x9}, {0x1, 0x19}, {0x1, 0x8}, {0x1, 0x6}, {0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x2, 0x5}, {0x4, 0x5}, {0x0, 0xa}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x6, 0x3}, {0x0, 0x3}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x6}, {0x6, 0x5}, {0x2}, {0x0, 0x1}, {0x3, 0x4}, {0x2, 0x2}, {0x1, 0x1}, {0x4, 0x6}, {0x6}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x5}, {0x6, 0x7}, {0x2, 0x2}, {0x6, 0x3}, {0x3}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x3}, {0x0, 0x2}, {0x2}, {0x0, 0x3}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x4}, {0x4}, {0x0, 0x1}, {0x6, 0xa}, {0x0, 0x5}, {0x1}, {0x0, 0x3}, {}, {0x1, 0x4}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0x5}, {0x4, 0x2}, {0x7, 0x3}, {0x1, 0x8}, {0x3, 0x1}, {0x7, 0x3}, {0x3, 0x3}, {0x5, 0x8}, {0x7, 0x1}, {0x4, 0x4}, {0x2, 0x4}, {0x7, 0x9}, {0x3, 0x8}, {0x7, 0x1}, {0x0, 0xa}, {0x3, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x351, 0xb, 0xfffc, 0x9, 0x3, 0x7fff, 0x4]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7}, {0x6, 0x2}, {0x2, 0x7}, {0x1, 0x7}, {0x6, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0xa}, {0x3, 0x4}, {0x0, 0x4}, {0x3, 0x6}, {0x0, 0x5}, {}, {0x3, 0x7}, {0x7, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0xa}, {0x1, 0x8}, {0x7, 0x6}, {0x5}, {0x6, 0x1}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x5}, {0x6, 0x9}, {0x0, 0x9}, {0x3, 0x6}, {0x5, 0x4}, {0x5, 0x4}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x1}, {0x2, 0x2}, {0x7, 0x5}, {0x7, 0x4}, {0x7, 0x1}, {0x6}, {0x0, 0xa}, {0x4, 0xa}, {0x5, 0x6}, {0x0, 0x2}, {0x7, 0x8}, {0x3, 0x9}, {0x2, 0x1}, {0x4, 0x4}, {0x0, 0x3}, {0x3, 0x9}, {0x3, 0x2}, {0x1, 0x4}, {0x2, 0x1}, {0x7, 0x8}, {0x2, 0x3}, {0x4, 0x7}, {0x0, 0x8}, {0x6, 0x5}, {0x5, 0x3}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x5, 0x4}, {0x7, 0x6}]}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0xe, 0x93, 0x4, 0x8, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0xb, 0x2, 0x1b, 0xb, 0xc, 0x1b, 0x5, 0x60, 0x6c, 0x0, 0x0, 0xc, 0x60, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x3e, 0x18, 0x16, 0xc, 0x10, 0x1, 0x6, 0x1b, 0x16, 0x5, 0x1, 0xceae43a5d410aff4, 0x60, 0x1b, 0x36, 0x24, 0x32, 0x6c, 0x1, 0x24, 0x12, 0x6, 0x1b, 0x8e4a17723100a046, 0x3, 0x2, 0x5, 0x5, 0x2, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3}, {0x3, 0x1}, {0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x7, 0x1}, {0x5, 0x4}, {0x1, 0x3}, {0x6, 0x4}, {0x2, 0xa}, {0x5, 0x4}, {0x5, 0x6}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x3}, {0x0, 0x7}, {0x7, 0x8}, {0x1, 0x4}, {0x4, 0x12}, {0x4, 0x3}, {0x6, 0x6}, {0x7}, {0x7, 0x9}, {0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x2, 0x6}, {0x5, 0x2}, {0x4, 0x9}, {0x1, 0xa}, {0x5}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0x5}, {0x7, 0x5}, {0x7}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x9}, {0x0, 0x7}, {0x0, 0x1}, {0x4, 0x4}, {0x7, 0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {0x6, 0x9}, {0x7, 0x5}, {0x2, 0x5}, {0x0, 0x8}, {0x6, 0x2}, {0x3, 0xa}, {0x7, 0x1}, {0x2, 0x8}, {0x0, 0x2}, {0x3, 0x8}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x4}, {0x2, 0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xfc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x2, 0x5}, {0x6, 0x9}, {0x7, 0x2}, {0x4, 0x6}, {0x4, 0x8}, {0x1, 0x1}, {0x4, 0xa}, {0x7, 0x1}, {0x6, 0xa}, {0x0, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x5}, {0x5, 0x2}, {0x6, 0x5}, {}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0x3}, {0x3}, {0x7, 0x5}, {0x3}, {0x0, 0x6}, {0x3, 0x3}, {0x4, 0x9}, {0x4, 0x2}, {0x4}, {0x5, 0x5}, {0x4, 0xa}, {0x1}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x1}, {0x7, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x4, 0x0, 0x6449, 0x800, 0xfff7, 0x3]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0x5}, {0x7, 0x8}, {0x6, 0x2}, {0x1, 0x2}, {0x2, 0x7}, {0x2, 0x7}, {0x2, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x4, 0x5}, {0x6, 0x4}, {0x2, 0x1}, {0x1, 0x9}, {0x1, 0x8}, {0x6, 0x6}, {0x1}, {0x1, 0x1}, {0x7}, {0x2, 0x4}, {0x7, 0x7}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x4}, {0x7, 0x6}, {0x7, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x1}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x5, 0x9}, {0x2, 0x2}, {0x6, 0xa}, {0x0, 0x5}, {0x2, 0x4}, {0x7}, {0x7, 0x5}, {0x7, 0xa}, {0x5, 0xa}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0x9}, {0x7, 0x5}, {0x2, 0x2}, {0x6, 0x1}, {}, {0x1, 0x5}, {0x4, 0xa}, {0x4, 0x4}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x4}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x1}, {0x2, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff, 0xe, 0x2, 0x3, 0x4, 0x3, 0x400]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x16, 0x30, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4c00, 0x8, 0x28f, 0x1, 0x3, 0x9, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x9}, {0x2}, {0x3, 0x5}, {0x3, 0x8}, {0x6, 0x4}, {0x0, 0x5}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {}, {0x6, 0x6}, {0x2, 0x6}, {0x5, 0x6}, {0x4, 0x1}, {0x3, 0x8}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x7}, {0x5, 0x4}, {0x4}, {0x7, 0x7}, {0x4, 0x3}, {0x3, 0x7}, {0x4, 0x7}, {0x2, 0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x2}, {0x1}, {0x4, 0x4}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x6, 0x8}, {0x0, 0x8}, {0x1}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x4, 0x2}, {0x6}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x3}, {0x2}]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1b, 0x1, 0x1, 0xb, 0x6, 0x20, 0x16, 0x16, 0x6, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xde, 0x5, 0x9, 0x8, 0x0, 0x6ae8, 0x80]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x6c, 0x16, 0x8, 0x30, 0x4, 0x9, 0x48, 0x1, 0x1b, 0x24, 0x24, 0x18, 0x24, 0x9, 0x16, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xaf0, 0xc, 0x7fff, 0x62, 0xee32, 0x3, 0x1514, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x5, 0x7fff, 0x6, 0x7, 0x4, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd9, 0x6, 0x1, 0x4, 0x8b, 0x0, 0x0, 0x4]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x3}, {0x5, 0x6}, {0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x5, 0x7}, {0x7, 0xa}, {0x7, 0x1}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x6}, {0x3, 0x1}, {0x2, 0x8}, {0x4, 0x3}, {0x4, 0x2}, {0x4, 0x8}, {0x4, 0x9}, {0x3, 0x8}, {0x7, 0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x3, 0x8}, {0x1, 0x6}, {0x4, 0x8}, {0x0, 0x9}, {0x3, 0x8}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x6}, {0x3, 0x1c}, {0x0, 0x5}, {0x2, 0x2}, {0x4}, {0x3, 0x6}, {0x1, 0x5}, {0x6, 0x8}, {0x1, 0x9}, {0x3, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x2, 0xffff, 0x3, 0x4, 0x8]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x2, 0x2, 0x0, 0x2, 0x8f0, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x8f9, 0xce30, 0xd99, 0x8, 0x4, 0x2]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x81, 0xb00, 0x6, 0x9, 0x6, 0xba, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc24, 0x7fff, 0x7, 0xffff, 0x7, 0x32e, 0x0, 0xe]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x6, 0x400, 0x9, 0x400, 0x86d, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x6}, {0x3, 0x4}, {0x2, 0x2}, {0x2, 0x9}, {0x5}, {0x6, 0x3}, {0x2, 0x6}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0x6}, {0x5, 0x8}, {0x3, 0x3}, {0x1, 0x9}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x4, 0x9}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x8}, {0x0, 0x2}, {0x7, 0x7}, {0x2, 0xa}, {0x0, 0x6}, {0x7}, {0x4, 0x4}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x36, 0x58, 0x5, 0x5, 0x48, 0x30, 0x30, 0x24, 0x36, 0x7b, 0xb, 0x1b, 0x60, 0xb, 0xc, 0xb, 0x48, 0x4, 0x3, 0x18, 0x36, 0x6c, 0x69, 0x0, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc4b7, 0xdbe5, 0x1, 0xc34, 0x2, 0x3, 0x101, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x7f, 0xf738, 0x1000, 0xde8, 0xf, 0x7]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb3, 0xc6, 0xe, 0x9, 0x6, 0x8000, 0x200, 0x968]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1, 0x887, 0x4, 0x1, 0x0, 0x100, 0x88]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3d7, 0x5, 0x1, 0x2c7, 0x5, 0xe4e0, 0x1000, 0x1]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0xfffb, 0x1, 0x9, 0x4, 0x3, 0xffff, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7a39, 0x6, 0x40, 0x9, 0x2, 0x8, 0x7f, 0x81]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x30, 0x6c, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xf, 0x94, 0x4, 0x3, 0x8000, 0x8, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x2c98, 0x7, 0x8, 0x0, 0x1ff, 0x10, 0x8]}}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0x4f, 0x5, 0x2, 0x30d80927f83f34e1, 0x36, 0x5, 0x9, 0x16, 0x36, 0x22, 0x2, 0xb, 0x30, 0x2, 0x16, 0x4, 0x48, 0x5, 0x24, 0x30, 0x36, 0x1, 0x1b, 0x48, 0x4, 0x2]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x8}, {0x1, 0x5}, {0x6, 0x8}, {0x4, 0xa}, {0x1, 0x9}, {0x7, 0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x9}, {0x7}, {0x4, 0x8}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0x4}, {0x2, 0x7}, {0x6, 0x5}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x7}, {0x3, 0x4}, {0x0, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x7}, {0x5, 0x6}, {0x2, 0x1}, {0x3}, {0x1, 0x9}, {0x1, 0x7}, {0x4, 0x5}, {0x6, 0x4}, {0x7, 0x1}, {0x2, 0x1}, {0x2, 0x9}, {0x2, 0x3}, {0x4, 0x3}, {0x6, 0xa}, {0x4, 0x7}, {0x7}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x5}, {0x0, 0x5}, {0x2, 0x5}, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x18, 0x2, 0x6c, 0xc, 0x18, 0x6, 0x4, 0x42, 0xb, 0xb, 0x6c, 0x3, 0x60, 0x24, 0x5, 0x6c, 0x4, 0x36]}]}]}, @NL80211_ATTR_TX_RATES={0x264, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x9, 0x12, 0x4b, 0x1, 0x16, 0x48, 0x1b, 0x26, 0xc, 0xc, 0x41b00f6416e4be7a, 0x4, 0x48, 0x36, 0x18, 0x9, 0x4, 0x6c, 0x3]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x2, 0x30, 0xb, 0x2, 0x60, 0x24, 0x24, 0x3, 0x9, 0x6, 0x11, 0x4, 0x15, 0x6c, 0x18, 0x24, 0x18, 0x0, 0x2, 0xc, 0x5, 0x5, 0x30, 0x30, 0x5e]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x4}, {0x4, 0x9}, {0x7, 0x6}, {0x2, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x7, 0x2}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x5}, {0x7}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x5, 0x6}, {0x3}, {0x7}, {0x5, 0x2}, {0x5, 0x6}, {0x7, 0x9}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x6, 0x9}, {0x3, 0x6}, {}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x7}, {0x6, 0x6}, {0x4, 0x1}, {0x5, 0x6}, {0x0, 0x7}, {0x2, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x8}, {0x4, 0xa}, {0x0, 0x6}, {0x5, 0x9}, {0x2, 0x4}, {0x0, 0x6}, {0x7, 0x6}, {0x6, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x7, 0x3}, {0x7, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x2, 0x7}, {0x7, 0x6}, {0x6, 0x2}, {0x7, 0x7}, {0x6, 0x1}, {0x6, 0x3}, {0x0, 0x6}, {0x4, 0xa}, {0x3, 0x8}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x0]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x3, 0x4, 0xc, 0x18, 0x6f, 0x36, 0x6, 0x5, 0x18, 0x9, 0x28, 0x2, 0x65, 0x36, 0x60, 0x12, 0x30, 0xfe22f7c4b4bb2fc7]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x82f8cb912f5991a1, 0x1e, 0x4, 0x48, 0x30, 0x1b, 0x6, 0x2, 0x24, 0x1b, 0x36]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x3}, {0x4, 0x9}, {0x3, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0x9}, {0x3, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x9}, {0x2, 0xa}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x6}, {0x2, 0x6}, {0x7, 0x2}, {0x5, 0x3}, {0x0, 0x8}, {0x3, 0x6}, {0x4}, {0x0, 0x7}, {0x6, 0xa}, {0x4, 0x1}, {0x6, 0x3}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x7}, {0x7, 0x2}, {0x0, 0x8}, {0x2}, {0x3}, {0x6, 0x4}, {0x2, 0x8}, {0x1, 0x7}, {0x3, 0x3}, {0x4, 0x6}, {0x0, 0x2}, {0x3, 0xa}, {0x2, 0xa}, {0x7, 0x8}, {}, {0x4, 0x2}, {0x3, 0x8}, {}, {0x5}, {0x2, 0xa}, {0x0, 0x6}, {0x5, 0x9}, {}, {0x2, 0x5}, {0x1, 0xa}, {0x6, 0x5}, {0x3, 0x2}, {0x2}, {0x0, 0x8}, {0x0, 0x1}, {0x7, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x1}, {0x6, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x2, 0x5}, {0x5, 0x3}, {0x7, 0x4}, {0x1, 0x3}, {0x1}, {0x6, 0x6}, {0x6, 0x2}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x100, 0x3, 0x1ff, 0x9, 0x81, 0x618, 0x7]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x8}, {0x6, 0x4}, {0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x2, 0xa}, {0x6, 0x9}, {0x5, 0xa}, {0x2, 0x6}, {0x5, 0x3}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0xa}, {0x0, 0xa}, {0x3, 0x6}, {0x2, 0x1}, {0x6, 0x7}, {0x4, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x0, 0x9}, {}, {0x7, 0x8}, {0x3, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x3, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x3, 0x2}, {0x4, 0x2}, {0x6, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x6, 0x5}, {0x1, 0x6}, {0x3, 0x6}, {0x3, 0x1}, {0x4, 0x8}, {0x3, 0x5}, {0x2, 0xa}, {0x1}, {0x2, 0x8}, {0x3, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x4, 0x7}, {0x3, 0x9}, {0x1, 0x6}, {0x1, 0x4}, {0x5, 0x7}, {0x2, 0x7}, {0x3, 0x9}, {0x5, 0x1}, {0x7, 0x7}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0xa}, {0x5, 0x7}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x9}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x11e, 0x1b, 0x7, 0xd, 0x8000, 0x8, 0xa94, 0x9]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xff, 0x0, 0xfff8, 0x1, 0x3, 0x6, 0x7]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x3}, {0x6, 0x2}, {0x5, 0x8}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0x4}, {0x2, 0x2}, {0x6}, {0x4, 0x6}, {0x3, 0x6}, {0x5, 0x8}, {0x6, 0x9}, {0x6, 0xa}, {0x3, 0xa}, {0x2, 0x7}, {0x4, 0x8}, {0x3, 0x9}, {0x1, 0x8}, {0x1, 0x3}, {0x6, 0x7}, {0x3}, {0x6}, {0x1, 0x7}, {0x3, 0xa}, {0x3, 0xa}, {0x3, 0x3}, {0x3, 0xa}, {0x1, 0x8}, {0x7, 0x8}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x6, 0x4}, {0x5, 0xa}, {0x7, 0x6}, {0x5, 0x8}, {0x7, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x2, 0x8}, {0x7, 0x8}, {0x0, 0x2}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0x8}, {0x4, 0xa}, {0x7, 0x1}, {0x6, 0x6}, {0x4, 0x4}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0x6}, {0x0, 0x9}, {0x1, 0x7}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x535b, 0x3, 0x4d67, 0x7, 0x3d, 0x7, 0x7, 0x200]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x24, 0x4, 0x16, 0xb, 0x60, 0x18, 0xb, 0x24, 0x1, 0x12, 0x16, 0x60, 0x60, 0x6, 0x1b, 0x60, 0x3, 0x60, 0x7f, 0x1b, 0xc, 0x1, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x98b, 0x6, 0x3, 0x7, 0x8, 0x4, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x410, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x3, 0x800, 0x100, 0x7, 0x0, 0x40]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x2}, {0x4, 0x2}, {0x3, 0x9}, {0x4}, {0x1, 0x9}, {0x1, 0x9}, {0x6, 0x3}, {0x5, 0x3}, {0x0, 0x1}, {0x6, 0x5}, {0x6, 0x2}, {0x5, 0x5}, {0x6}, {0x4, 0x7}, {0x1, 0x2}, {0x1, 0x2}, {0x0, 0x3}, {0x4, 0x7}, {0x2, 0x8}, {0x4}, {0x1, 0x4}, {0x3, 0x2}, {0x6, 0x3}, {0x3}, {0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x7}, {0x7}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0xa}, {0x7, 0x7}, {0x5, 0x4}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x1}, {0x1, 0x9}, {0x1}, {0x5, 0x9}, {0x6, 0x7}, {0x6, 0x3}, {0x6}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x6c, 0x6, 0x3, 0x12, 0xb, 0x5, 0x9, 0x24, 0x60, 0xb, 0x1, 0x36, 0x30, 0x48, 0x12]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0xc, 0x5, 0x13, 0xb, 0x48, 0x6c, 0x6c, 0x12, 0x5, 0x16, 0x36, 0xc, 0x3, 0x30, 0xb, 0x18, 0x1, 0x1, 0x36, 0x24, 0x4, 0x12, 0x60, 0x6c, 0x30, 0x6, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0xa}, {0x2}, {0x2, 0x7}, {0x1, 0x2}, {0x4, 0x8}, {0x7, 0x2}, {0x4, 0x4}, {0x0, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x3, 0x5}, {0x5, 0x6}, {0x6, 0x9}, {0x3}, {0x5, 0x7}, {0x3, 0x3}, {0x1, 0x9}, {0x2, 0x2}, {0x5, 0x6}, {0x5, 0x2}, {0x7, 0x4}, {0x1, 0x7}, {0x0, 0x6}, {0x2, 0x5}, {0x1, 0x7}, {0x7, 0x7}, {0x6, 0xa}, {0x7, 0x6}, {0x1}, {0x6, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x6, 0xa}, {0x7, 0xa}, {0x1, 0x1}, {0x0, 0x8}, {0x6, 0xa}, {0x0, 0x15}, {0x6, 0x1}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x8}, {0x1}, {0x5, 0x2}, {0x7, 0xa}, {0x1, 0x2}, {0x0, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x3, 0x6}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x4}, {0x4, 0xa}, {0x0, 0x2}, {0x1, 0x1}, {0x2, 0x7}, {0x6, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0xc, 0x6, 0x24, 0x30, 0x5, 0x36, 0x0, 0x5c, 0x36, 0x6c, 0x3, 0xc, 0xc, 0x36, 0x5, 0x6c, 0x30, 0xb, 0x6c, 0x1, 0x12, 0xc, 0x9, 0x36, 0x9, 0x1b]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x2, 0x2}, {0x3, 0x6}, {0x0, 0xa}, {0x3, 0x6}, {0x0, 0xa}, {0x2, 0x4}, {0x7}, {0x7, 0x9}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0x2}, {0x1, 0x6}, {0x2, 0x8}, {0x3, 0x1}, {0x6, 0x6}, {0x4, 0x4}, {0x1, 0x6}, {0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x5, 0xa}, {0x2, 0x2}, {0x5}, {0x1, 0x7}, {0x6, 0x9}, {0x3, 0x1}, {0x1}, {0x1, 0x9}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0x5}, {0x6, 0x7}, {0x7, 0x8}, {0x5, 0x7}, {0x6, 0x4}, {0x3, 0xa}, {0x6, 0x8}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x7, 0x6}, {0x0, 0x3}, {0x4, 0x5}, {0x6}, {0x2}, {0x1, 0x8}, {0x6, 0x7}, {0x2, 0x5}, {0x2, 0x9}, {0x1, 0x9}, {0x2, 0x2}, {0x3, 0x7}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0xa}, {0x6, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x4, 0x9}, {0x5, 0x2}, {0x6}, {0x1, 0x4}, {0x0, 0x5}, {0x3, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x7}, {0x2, 0x4}, {0x6, 0x4}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x7}, {0x6, 0x6}, {0x0, 0x2}, {0x3}, {0x0, 0x8}, {0x0, 0x1}, {0x5, 0x3}, {0x6, 0x4}, {0x1, 0xa}, {0x3, 0xa}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x16, 0x0, 0x15, 0x1, 0x60, 0x5, 0x6c, 0x9, 0x11, 0x4, 0x24, 0x16, 0x6c, 0x16, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x7}, {0x4, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x4}, {0x1, 0x9}, {0x6, 0xa}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x5}, {0x5, 0x3}, {0x1, 0x8}, {0x1}, {0x4, 0xa}, {0x6, 0x2}, {0x0, 0xa}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x6, 0x7, 0x3, 0x7ff, 0x4, 0x5, 0x87]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1000, 0x7, 0x96, 0xd, 0xb, 0xfff, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x400, 0x4, 0x3, 0x7, 0x8, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x5, 0x8001, 0x100, 0x200, 0x21, 0xa6f, 0x6]}}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x2730a334a56e4114, 0x5, 0x16, 0x48, 0xc, 0x16, 0x6, 0x60, 0x6, 0xc, 0xc, 0x1b, 0x1b]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x3}, {0x2, 0x6}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0x8}, {0x0, 0x7}, {0x6, 0x8}, {0x4, 0x9}, {0x2, 0x2}, {0x7, 0x2}, {0x5, 0x7}, {0x5, 0x5}, {0x7, 0x4}, {0x1, 0x6}, {0x5, 0x6}, {0x7}, {0x2, 0x9}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x2}, {0x6, 0xa}, {0x0, 0x3}, {0x6, 0x6}, {0x6, 0x5}, {0x2, 0x9}, {0x6, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x7}, {0x2}, {0x1}, {0x1, 0x2}, {0x6, 0x7}, {0x1, 0x1}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0x5}, {0x2, 0x1}, {}, {0x3, 0x4}, {0x6}, {0x6, 0x8}, {0x5}, {0x7, 0x8}, {0x2, 0x6}, {0x2, 0x6}, {0x1, 0x8}, {0x1, 0x8}, {0x1, 0x9}, {0x3, 0x7}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x9}, {0x1, 0x1}, {0x5, 0x4}, {0x4, 0x3}, {0x1, 0x3}, {0x4, 0x2}, {0x4, 0xa}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x2}, {0x0, 0x2}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x6, 0xa}, {0x7, 0x5}, {0x5}, {0x0, 0x6}, {0x1}, {0x2, 0x2}, {0x3, 0x3}, {0x2, 0xa}, {0x5, 0x5}, {0x5}, {0x5, 0x5}, {0x1}, {0x5, 0x7}, {0x7, 0x8}, {0x4, 0x5}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x5}, {0x3, 0xa}, {0x6, 0x3}, {0x3, 0xa}, {0x5, 0x9}, {0x6, 0x4}, {0x7}, {0x0, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0xa}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x170, 0x7ff, 0x1, 0x100, 0x0, 0x1, 0x100, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x7}, {0x7, 0x6}, {0x6, 0x8}, {0x2, 0x6}, {0x7, 0x3}, {0x0, 0x9}, {0x2, 0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x5, 0x5}, {0x4, 0x2}, {0x3, 0x3}, {0x1, 0x5}, {0x6, 0x4}, {0x2, 0x5}, {0x0, 0x3}, {0x5, 0x4}, {0x2, 0x6}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x4}, {0x4, 0xa}, {0x4, 0x6}, {0x7, 0x9}, {0x1, 0x1}, {0x5, 0x4}, {0x4, 0x6}, {0x2, 0x4}, {0x4, 0x5}, {0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x2, 0x8}, {0x2, 0x2}, {0x2, 0x4}, {0x3, 0x1}, {0x2, 0x3}, {0x5, 0x1}, {0x0, 0x8}, {0x3, 0x9}, {0x5, 0x8}, {0x5, 0x6}, {0x2, 0x3}, {0x6, 0x8}, {0x3, 0x7}, {0x1, 0x2}, {0x4}, {0x5, 0x9}, {0x1, 0x6}, {}, {0x2, 0xa}, {0x6, 0x4}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x7}, {0x0, 0x4}, {0x3, 0x3}, {0x0, 0xa}, {0x6, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x6, 0x2, 0x6e, 0xbd12, 0xd6, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x5}, {0x5, 0x5}, {0x0, 0x3}, {0x2, 0x4}, {0x2, 0x2}, {0x7, 0x6}, {0x5, 0x5}, {0x1, 0x9}, {0x1, 0x4}, {0x2, 0x3}, {0x2, 0x3}, {0x3, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {}, {0x2}, {0x4, 0x5}, {}, {0x0, 0x8}, {0x1, 0x9}, {0x4, 0x8}, {0x4, 0x3}, {0x4, 0xa}, {0x7, 0x9}, {0x3, 0x5}, {0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x7, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0x7}, {0x7}, {0x2, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbe, 0x101, 0xc00, 0x8, 0x1, 0x4, 0xc, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x1ff, 0xff01, 0x5, 0x7f, 0x3ff, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x5}, {0x0, 0x6}, {0x4}, {0x6, 0x8}, {0x0, 0x1}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0xa}, {0x1, 0x3}, {0x4, 0xa}, {0x0, 0x5}, {0x4, 0x8}, {0x1, 0x2}, {0x2}, {0x1, 0xa}, {0x2, 0x2}, {0x3, 0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x7, 0x6}, {0x6, 0x1}, {0x7, 0x2}, {0x7, 0x7}, {0x0, 0x4}, {0x5, 0x5}, {0x6, 0x2}, {0x7, 0x5}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x30, 0xc, 0x36, 0x3, 0x1, 0x18, 0x3, 0x1, 0x4, 0x2, 0x24, 0x5, 0x63, 0x5, 0x0, 0x9, 0x30, 0x1e, 0xb, 0x3, 0x6]}]}]}]}, 0xcfc}, 0x1, 0x0, 0x0, 0x20048004}, 0x40) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="08120adc2df50b000000690014000280080043000200000008000400ac0300100000d800"/45], 0x40}, 0x1, 0x2000000000000000}, 0x0) 1.02196093s ago: executing program 1 (id=8086): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0xf00, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x202, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x40000) 890.576173ms ago: executing program 1 (id=8087): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25080000f7c5420827bdd32430a588dcbb52f27eb89656ddc64822eee5c5ff23d770c12241a60e471815561bdfd48ede1f54aa9c1a5c2f34cf82b2f3fd8999fe790a5c650ef23bf3e2545645d4752f9f9892ff0dd04b3e86f8822679afb6d54eb68231e1bf45b319447be5cd7fdf6b709ce8d963634adffeb48f1e47056380dadfc280340372bd3d3c4e393b03239ae4a7c3fdd57c6f298f1bdc18a978c3994d24839dae7cc9f2c25f3d2842"], 0x14}}, 0x80) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e1401003dbd010001000000080001"], 0x18}}, 0x20004018) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x260008d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 748.645774ms ago: executing program 1 (id=8088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002600)=@delchain={0x3dc, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3b0, 0x2, [@TCA_BPF_ACT={0x3ac, 0x1, [@m_xt={0xd4, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xac, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x1d8, 0x0, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xf9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7540b4a32031dc5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xd0, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0xa5, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_netfilter(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x14, 0x0, 0x6, 0x401}, 0x14}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xb, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x24, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002600)=@delchain={0x3dc, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3b0, 0x2, [@TCA_BPF_ACT={0x3ac, 0x1, [@m_xt={0xd4, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xac, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x1d8, 0x0, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xf9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7540b4a32031dc5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xd0, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0xa5, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) (async) socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) sendmsg$nl_netfilter(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x14, 0x0, 0x6, 0x401}, 0x14}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xb, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x24, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) 520.111316ms ago: executing program 0 (id=8089): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0x300, 0x70bd2b, 0x25dfdbfd, {0x80, 0x14, 0x0, 0x0, 0xff, 0x2, 0xfe, 0x8, 0x2e00}, ["", "", ""]}, 0x1c}}, 0x0) 429.084243ms ago: executing program 2 (id=8090): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0xffaf}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 355.089205ms ago: executing program 0 (id=8091): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) socket$inet(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x10, 0x2, {{0xffffffff, 0xffff, 0x5, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) 353.753025ms ago: executing program 4 (id=8092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r0}, 0x48) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x1, 0x2}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000580)={0x41, 0x0, 0x1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r7, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 157.151064ms ago: executing program 3 (id=8093): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0500000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmmsg$inet6(r0, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="4cf7", 0x2}], 0x1}}], 0x1, 0x4040001) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 156.755253ms ago: executing program 2 (id=8094): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000064000007000000500000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6}, 0x48) 152.597415ms ago: executing program 0 (id=8095): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@loopback, @mcast1, @empty, 0x7fff, 0x6, 0x8000, 0x400, 0x9, 0x200002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001063cf06e2ffffff0000000001000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c0002800600050088a800000a000100aaaaaaaaaa000000"], 0x48}}, 0x0) 84.996608ms ago: executing program 1 (id=8096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x11, 0x14, 0x121, 0x0, 0x0, {0x23}}, 0x18}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt(r2, 0x84, 0x14, &(0x7f00000001c0)="1f00d10000000000", 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3], 0x84}}, 0x0) 10.487207ms ago: executing program 3 (id=8097): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000002000010001800000d93a5a93ec21b8000000000a042000000000000000000010000200fe88000001086e8f98e4e3b09d"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) listen(r4, 0x0) listen(r4, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000007054000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c000280080001400000000908000240000000000800044000000000080003400000000108000540000000040900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x814}, 0x4) 10.0824ms ago: executing program 2 (id=8098): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x468, 0x398, 0x2c8, 0x1d0, 0x2c8, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @local, [], [0x0, 0x0, 0x0, 0xff000000], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {0x2000000}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@empty, 0xe, 0x1b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) 8.645094ms ago: executing program 4 (id=8099): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x4c, 0xf3, 0x48, [0x4, 0x9, 0x0, 0x2, 0x5, 0x0, 0x0, 0x40000002]}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 0s ago: executing program 0 (id=8100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x2, 0x1fc, @loopback, 0x8}, 0x1c) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x2, 0x1fc, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c000580040001"], 0x44}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c000580040001"], 0x44}}, 0x0) sendto$inet6(r0, &(0x7f0000000680)="6459df536e39c72401df00e39f31561fde3bb80bac686827534cf60be8fdefc76c65806bb8f09878182b793929e034a5d78a57a18afda3cde2fb36d45d4b1c694bd33c71c03a84cfaa054b08ac9b4f99e2b4f30bcc790e5bd6bfba9ce11e0c72ac1dc421b21c6a13f21aa0d0c4f082ff9c794caa761896d4a97c1e6f3a2f54754e5611eba7ec5b55fd0a43f287de703e095fb9816f464097c7535c55133a634a15b05d97cf28596b88b71fbfa304a966196bd09e7f9d7ac16942cf01f7960e4eac2083a9863919cb2ae95cc1f677011871afea27f3c4b0ade4b1f2360b3f5faac19b0c73ce34211d", 0xe8, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0xffffffff}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) (async) r4 = socket(0x10, 0x80002, 0x0) accept4(r4, 0x0, 0x0, 0x80000) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x6, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): eft promiscuous mode [ 724.259281][ T1120] veth0_macvtap: left promiscuous mode [ 724.887514][T27449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6416'. [ 724.912116][T27208] team0: Port device team_slave_0 added [ 724.925668][T27429] syzkaller0: entered promiscuous mode [ 724.931310][T27429] syzkaller0: entered allmulticast mode [ 724.992286][T27208] team0: Port device team_slave_1 added [ 725.069872][T27208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.094965][T27208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.167649][T27455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6417'. [ 725.169837][T27208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.207604][T27455] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6417'. [ 725.218685][T27208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.230676][T27458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6418'. [ 725.240534][T27208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.271313][T27208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.295117][T27458] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 725.324904][T23807] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 725.445302][T27208] hsr_slave_0: entered promiscuous mode [ 725.470276][T27208] hsr_slave_1: entered promiscuous mode [ 725.490974][T27208] debugfs: 'hsr0' already exists in 'hsr' [ 725.501838][T27208] Cannot create hsr debugfs directory [ 725.576888][T27471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6421'. [ 725.654697][T23807] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 725.974301][ T1120] IPVS: stop unused estimator thread 0... [ 726.082210][T27486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6424'. [ 726.093410][ T4941] Bluetooth: hci0: command tx timeout [ 726.170673][T27495] veth0_macvtap: Caught tx_queue_len zero misconfig [ 726.190048][T27495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6426'. [ 726.230675][T27486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6424'. [ 726.265620][T27486] Bluetooth: MGMT ver 1.23 [ 726.346877][T27499] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6428'. [ 726.408107][T27507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6429'. [ 726.428047][T27505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6430'. [ 726.447765][T27507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6429'. [ 726.479644][T27507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6429'. [ 726.509981][T27507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6429'. [ 726.544276][T27507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6429'. [ 726.582560][T27510] macvtap0: entered allmulticast mode [ 726.594908][T27510] veth0_macvtap: entered allmulticast mode [ 726.748845][T27518] sctp: [Deprecated]: syz.2.6433 (pid 27518) Use of int in max_burst socket option deprecated. [ 726.748845][T27518] Use struct sctp_assoc_value instead [ 727.170373][T27539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 727.177706][T27539] IPv6: NLM_F_CREATE should be set when creating new route [ 727.572133][T27208] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 727.598960][T27563] x_tables: unsorted underflow at hook 2 [ 727.639356][T27208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 727.639798][T27565] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 727.670270][T27208] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 727.734613][T27208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 727.759749][T27208] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 727.810795][T27208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 727.841140][T27208] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 727.879272][T27208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 727.959166][T27572] tipc: Started in network mode [ 727.982401][T27572] tipc: Node identity a29d0e0d6457, cluster identity 4711 [ 727.996748][T27572] tipc: Enabled bearer , priority 0 [ 728.045507][T27577] syzkaller0: entered promiscuous mode [ 728.087075][T27577] syzkaller0: entered allmulticast mode [ 728.103504][T27572] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 728.192577][T27572] tipc: Resetting bearer [ 728.227268][T27571] tipc: Resetting bearer [ 728.294366][T27571] tipc: Disabling bearer [ 728.542226][T27208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.608640][T27208] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.679665][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.686949][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.754366][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.761624][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.015155][T27599] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 729.041063][T27634] netlink: 'syz.3.6462': attribute type 4 has an invalid length. [ 729.047014][T27599] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 729.430854][T27651] netlink: 'syz.0.6466': attribute type 1 has an invalid length. [ 729.552320][T27625] syzkaller1: entered allmulticast mode [ 729.616796][T27651] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 729.988131][T27678] netlink: 'syz.0.6471': attribute type 1 has an invalid length. [ 730.595417][ T4991] udevd[4991]: worker [21048] /devices/virtual/block/nbd4 is taking a long time [ 731.917089][T27678] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 732.164702][T27705] __nla_validate_parse: 9 callbacks suppressed [ 732.164723][T27705] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6473'. [ 732.432905][T27725] netlink: 'syz.4.6478': attribute type 12 has an invalid length. [ 732.537447][T23796] IPVS: starting estimator thread 0... [ 732.633674][T27731] IPVS: using max 27 ests per chain, 64800 per kthread [ 732.646399][T27739] Cannot find add_set index 0 as target [ 732.660541][T27740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6482'. [ 732.671287][T27739] x_tables: duplicate underflow at hook 2 [ 732.684147][T27740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6482'. [ 732.719860][T27208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.741110][T27739] syzkaller0: entered promiscuous mode [ 732.756873][T27739] syzkaller0: entered allmulticast mode [ 732.767065][T27743] netlink: 'syz.2.6483': attribute type 11 has an invalid length. [ 732.777307][T27739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6481'. [ 732.797078][T27743] netlink: 'syz.2.6483': attribute type 4 has an invalid length. [ 732.807480][T27734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.817708][T27739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.827699][T27743] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6483'. [ 733.099367][T27208] veth0_vlan: entered promiscuous mode [ 733.176006][T27208] veth1_vlan: entered promiscuous mode [ 733.227995][T27208] veth0_macvtap: entered promiscuous mode [ 733.241612][T27208] veth1_macvtap: entered promiscuous mode [ 733.259156][T27766] netlink: 596 bytes leftover after parsing attributes in process `syz.4.6487'. [ 733.269137][T27208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.282422][T27208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.324566][ T1120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.348620][ T1120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.368704][ T1120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.396233][ T1120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.037283][T27761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 736.138047][T27806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6499'. [ 736.168757][ T6962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.194678][ T6962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.288832][T27808] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6500'. [ 736.341747][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.365986][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.525469][T27816] syzkaller0: entered promiscuous mode [ 736.551959][T27816] syzkaller0: entered allmulticast mode [ 736.606497][T27826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6361'. [ 736.986190][T27836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.027128][T27842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6513'. [ 737.135875][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 737.150355][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 737.159387][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 737.171806][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 737.179752][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 737.238301][T27849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6514'. [ 737.705845][T27874] netlink: 'syz.0.6521': attribute type 1 has an invalid length. [ 737.765141][T27873] syzkaller0: entered promiscuous mode [ 737.790443][T27873] syzkaller0: entered allmulticast mode [ 737.976661][T27874] bond2: entered promiscuous mode [ 737.986721][T27874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 738.035628][T27879] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 738.072288][T27879] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 738.108641][T27879] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 738.460538][T27888] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 738.491667][T27890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6523'. [ 738.538638][T27891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6523'. [ 739.219877][ T4941] Bluetooth: hci2: command tx timeout [ 739.257884][T27928] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6535'. [ 739.724869][ T48] batadv7: left allmulticast mode [ 739.739663][ T48] batadv7: left promiscuous mode [ 739.757958][ T48] bridge0: port 6(batadv7) entered disabled state [ 739.792447][ T48] batadv6: left allmulticast mode [ 739.806978][ T48] batadv6: left promiscuous mode [ 739.819905][ T48] bridge0: port 5(batadv6) entered disabled state [ 739.840263][ T48] batadv5: left allmulticast mode [ 739.862139][ T48] batadv5: left promiscuous mode [ 739.880722][ T48] bridge0: port 4(batadv5) entered disabled state [ 739.909096][ T48] batadv4: left allmulticast mode [ 739.914219][T27951] netlink: 'syz.1.6540': attribute type 1 has an invalid length. [ 739.955950][ T48] batadv4: left promiscuous mode [ 739.963629][ T48] bridge0: port 3(batadv4) entered disabled state [ 739.977147][ T48] batadv3: left allmulticast mode [ 739.986698][ T48] batadv3: left promiscuous mode [ 739.993527][ T48] bridge0: port 2(batadv3) entered disabled state [ 740.005962][ T48] batadv1: left allmulticast mode [ 740.022998][ T48] batadv1: left promiscuous mode [ 740.028782][ T48] bridge0: port 1(batadv1) entered disabled state [ 740.055829][ T48] pim6reg: left allmulticast mode [ 740.061183][ T48] bond12: left allmulticast mode [ 740.173674][ T10] block nbd4: Possible stuck request ffff888027a25080: control (read@0,1024B). Runtime 180 seconds [ 740.185947][ T10] block nbd4: Possible stuck request ffff888027a25240: control (read@1024,1024B). Runtime 180 seconds [ 740.197105][ T10] block nbd4: Possible stuck request ffff888027a25400: control (read@2048,1024B). Runtime 180 seconds [ 740.208315][ T10] block nbd4: Possible stuck request ffff888027a255c0: control (read@3072,1024B). Runtime 180 seconds [ 740.276953][ T48] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 740.329362][T27962] netlink: 'syz.4.6541': attribute type 1 has an invalid length. [ 740.600554][ T48] bond5 (unregistering): (slave geneve4): Releasing active interface [ 740.836970][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.857220][ T48] bond_slave_0: left allmulticast mode [ 740.872517][ T48] bond0 (unregistering): Released all slaves [ 740.892364][ T48] bond1 (unregistering): Released all slaves [ 740.918185][ T48] bond2 (unregistering): Released all slaves [ 740.947095][ T48] bond3 (unregistering): Released all slaves [ 740.974133][ T48] bond4 (unregistering): Released all slaves [ 741.012308][ T48] bond5 (unregistering): Released all slaves [ 741.041472][ T48] bond6 (unregistering): Released all slaves [ 741.062594][ T48] bond7 (unregistering): Released all slaves [ 741.070607][T27979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6544'. [ 741.096131][ T48] bond8 (unregistering): Released all slaves [ 741.113075][ T48] bond9 (unregistering): Released all slaves [ 741.131485][ T48] bond10 (unregistering): Released all slaves [ 741.157594][ T48] bond11 (unregistering): Released all slaves [ 741.174702][ T48] bond12 (unregistering): Released all slaves [ 741.200451][ T48] bond13 (unregistering): Released all slaves [ 741.218320][ T48] bond14 (unregistering): Released all slaves [ 741.236052][ T48] bond15 (unregistering): Released all slaves [ 741.253844][ T48] bond16 (unregistering): Released all slaves [ 741.271286][ T48] bond17 (unregistering): Released all slaves [ 741.289594][ T48] bond18 (unregistering): Released all slaves [ 741.303340][ T4941] Bluetooth: hci2: command tx timeout [ 741.331822][ T48] bond19 (unregistering): Released all slaves [ 741.350678][ T48] bond20 (unregistering): Released all slaves [ 741.368997][ T48] bond21 (unregistering): Released all slaves [ 741.387218][ T48] bond22 (unregistering): Released all slaves [ 741.411404][ T48] bond23 (unregistering): Released all slaves [ 741.433033][ T48] bond24 (unregistering): Released all slaves [ 741.449506][ T48] bond25 (unregistering): Released all slaves [ 741.478273][ T48] bond26 (unregistering): Released all slaves [ 741.495534][ T48] bond27 (unregistering): Released all slaves [ 741.512336][ T48] bond28 (unregistering): Released all slaves [ 741.535163][ T48] bond29 (unregistering): Released all slaves [ 741.551898][ T48] bond30 (unregistering): Released all slaves [ 741.610835][T27964] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 741.659877][T27962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 741.725000][T27965] bond2: (slave ip6gretap1): making interface the new active one [ 741.749509][T27965] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 741.783102][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 741.852025][T27988] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6546'. [ 742.036000][T27993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6550'. [ 742.139509][T27996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6549'. [ 742.316814][T28010] sctp: [Deprecated]: syz.3.6551 (pid 28010) Use of int in maxseg socket option. [ 742.316814][T28010] Use struct sctp_assoc_value instead [ 742.961056][T28043] netlink: 'syz.3.6557': attribute type 1 has an invalid length. [ 743.085672][T28048] netlink: 'syz.4.6558': attribute type 11 has an invalid length. [ 743.199230][T28043] 8021q: adding VLAN 0 to HW filter on device bond8 [ 743.252382][T28046] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 743.338165][T28046] bond8: entered allmulticast mode [ 743.383295][ T4941] Bluetooth: hci2: command tx timeout [ 743.581858][T28059] xt_hashlimit: size too large, truncated to 1048576 [ 743.979367][T28075] bond3: option resend_igmp: invalid value (32767) [ 743.990900][T28075] bond3: option resend_igmp: allowed values 0 - 255 [ 744.009309][T28075] bond3 (unregistering): Released all slaves [ 744.015499][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 744.170754][ T48] hsr_slave_0: left promiscuous mode [ 744.201487][ T48] hsr_slave_1: left promiscuous mode [ 744.225210][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.235043][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.459267][ T36] smc: removing ib device syz2 [ 744.755194][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 744.774095][T28093] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 744.810920][T27845] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.816762][ T36] smbdirect: ib_dev[syz2] removed [ 744.837304][T27845] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.865459][T27845] bridge_slave_0: entered allmulticast mode [ 744.921333][T27845] bridge_slave_0: entered promiscuous mode [ 745.016137][T27845] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.034136][T27845] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.044318][T27845] bridge_slave_1: entered allmulticast mode [ 745.097728][T27845] bridge_slave_1: entered promiscuous mode [ 745.237101][T28112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 745.356499][T27845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.392962][T27845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.456374][ T4941] Bluetooth: hci2: command tx timeout [ 745.660951][T27845] team0: Port device team_slave_0 added [ 745.685799][T27845] team0: Port device team_slave_1 added [ 745.908563][T27845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.916631][T27845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.951092][T27845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.967392][T27845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.975135][T27845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.001889][T27845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.239744][T27845] hsr_slave_0: entered promiscuous mode [ 746.248867][T27845] hsr_slave_1: entered promiscuous mode [ 746.258149][T27845] debugfs: 'hsr0' already exists in 'hsr' [ 746.264249][T27845] Cannot create hsr debugfs directory [ 747.218564][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.505831][ T48] IPVS: stop unused estimator thread 0... [ 747.522253][T28094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.152623][T27845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 748.199604][T27845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 748.230474][T27845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 748.262756][T27845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 748.295951][T27845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 748.348774][T27845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 748.379798][T27845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 748.436993][T27845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 748.461517][T28164] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6576'. [ 748.548002][T28176] ip6erspan0: entered allmulticast mode [ 748.587368][T28155] netlink: 'syz.4.6574': attribute type 1 has an invalid length. [ 748.626475][T28155] netlink: 'syz.4.6574': attribute type 4 has an invalid length. [ 748.688448][T28155] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.6574'. [ 748.753733][T28194] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6582'. [ 748.813010][T28195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6582'. [ 748.919567][T27845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.978090][T27845] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.012776][T28202] sctp: [Deprecated]: syz.1.6584 (pid 28202) Use of int in maxseg socket option. [ 749.012776][T28202] Use struct sctp_assoc_value instead [ 749.028943][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.036171][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.086160][T28202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6584'. [ 749.110062][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.117332][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.189366][T28268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6599'. [ 750.530858][T28285] netlink: 'syz.1.6602': attribute type 1 has an invalid length. [ 750.732820][T27845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.894077][T28294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6605'. [ 750.915705][T28299] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6606'. [ 750.938218][T28294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6605'. [ 750.966497][T27845] veth0_vlan: entered promiscuous mode [ 751.002641][T27845] veth1_vlan: entered promiscuous mode [ 751.140278][T27845] veth0_macvtap: entered promiscuous mode [ 751.168386][ T4991] udevd[4991]: worker [21048] /devices/virtual/block/nbd4 timeout; kill it [ 751.185304][T27845] veth1_macvtap: entered promiscuous mode [ 751.207519][ T4991] udevd[4991]: seq 30464 '/devices/virtual/block/nbd4' killed [ 751.288559][T27845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.329286][T27845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.390571][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.433774][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.489810][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.504482][T28320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6612'. [ 751.529778][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.619855][T28320] team0 (unregistering): Port device team_slave_0 removed [ 751.667734][T28324] x_tables: unsorted entry at hook 3 [ 751.678265][T28320] team0 (unregistering): Port device team_slave_1 removed [ 751.891343][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.924030][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.041363][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.061650][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.233953][T28348] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 752.759334][T28375] syzkaller0: entered promiscuous mode [ 752.779276][T28375] syzkaller0: entered allmulticast mode [ 752.921441][T28382] sock: sock_set_timeout: `syz.2.6627' (pid 28382) tries to set negative timeout [ 752.943930][T28391] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 754.032628][T28449] __nla_validate_parse: 5 callbacks suppressed [ 754.032648][T28449] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6648'. [ 754.280318][T28467] lo: Caught tx_queue_len zero misconfig [ 754.330464][T28476] veth0_to_bond: mtu less than device minimum [ 754.357284][T28480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6653'. [ 754.598436][T28480] bond1: Invalid ad_actor_system MAC address. [ 754.626255][T28480] bond1: option ad_actor_system: invalid value (1) [ 754.656972][T28480] bond1 (unregistering): Released all slaves [ 754.676349][T28489] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 754.806133][T28493] netlink: 'syz.3.6655': attribute type 1 has an invalid length. [ 755.046051][T28487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.109789][T28487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.158126][T28487] bond0 (unregistering): (slave bond1): Releasing backup interface [ 755.203794][T28487] bond0 (unregistering): Released all slaves [ 755.336796][T28512] netlink: 'syz.4.6663': attribute type 21 has an invalid length. [ 755.357461][T28512] netlink: 'syz.4.6663': attribute type 1 has an invalid length. [ 755.485068][T28524] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 755.632694][T28535] bridge: RTM_NEWNEIGH with unconfigured vlan 1537 on bridge0 [ 755.909209][T28547] xfrm0 speed is unknown, defaulting to 1000 [ 756.002883][T28555] netlink: 'syz.4.6678': attribute type 1 has an invalid length. [ 756.201476][T28563] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 756.275280][T28565] netlink: 'syz.1.6682': attribute type 1 has an invalid length. [ 756.647422][T28577] netlink: 'syz.2.6685': attribute type 4 has an invalid length. [ 758.161832][T28547] xfrm0 speed is unknown, defaulting to 1000 [ 758.165858][T28555] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 758.169861][T28558] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 758.180283][T28565] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 758.212087][T28547] xfrm0 speed is unknown, defaulting to 1000 [ 758.245672][T28547] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 758.282885][T28547] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 758.307768][T28547] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 758.326100][T28547] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 758.391644][T28547] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 758.475137][T28588] xt_ecn: cannot match TCP bits for non-tcp packets [ 758.519852][T28547] xfrm0 speed is unknown, defaulting to 1000 [ 758.548343][T28547] xfrm0 speed is unknown, defaulting to 1000 [ 758.558020][T28547] xfrm0 speed is unknown, defaulting to 1000 [ 758.567148][T28547] xfrm0 speed is unknown, defaulting to 1000 [ 758.580091][T28547] xfrm0 speed is unknown, defaulting to 1000 [ 758.589564][T28547] xfrm0 speed is unknown, defaulting to 1000 [ 758.599572][T28547] xfrm0 speed is unknown, defaulting to 1000 [ 758.616519][T28547] xfrm0 speed is unknown, defaulting to 1000 [ 758.627194][T28547] xfrm0 speed is unknown, defaulting to 1000 [ 758.675220][T28600] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 758.817587][T28604] veth0_to_bridge: entered promiscuous mode [ 758.888229][T28614] netlink: 'syz.3.6697': attribute type 4 has an invalid length. [ 759.061834][T28622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6698'. [ 759.084016][T28604] syzkaller0: entered promiscuous mode [ 759.096213][T28604] syzkaller0: entered allmulticast mode [ 761.430799][T28602] veth0_to_bridge: left promiscuous mode [ 761.602479][T28644] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.634578][T28646] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 761.795478][T28660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6710'. [ 761.813387][T28658] netlink: 'syz.1.6708': attribute type 4 has an invalid length. [ 761.837386][T28660] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 762.068225][T28679] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 762.104869][T28679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6714'. [ 762.306273][T28691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6717'. [ 762.329427][T28695] netlink: 'syz.3.6718': attribute type 1 has an invalid length. [ 762.350478][T28696] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 762.489770][T28695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.519866][T28698] bond0: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 762.562807][T28698] bond0: entered allmulticast mode [ 762.888896][T28732] netlink: 'syz.2.6727': attribute type 10 has an invalid length. [ 762.900548][T28733] netlink: 'syz.3.6729': attribute type 1 has an invalid length. [ 762.925991][T28733] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6729'. [ 762.966218][T28732] team0: Port device dummy0 added [ 763.172670][T28745] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 763.286243][T28748] veth0: entered promiscuous mode [ 763.452288][T28743] veth0: left promiscuous mode [ 763.806500][T28769] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6739'. [ 764.005513][T28779] netlink: 'syz.1.6745': attribute type 1 has an invalid length. [ 764.007594][T28780] netlink: 'syz.4.6743': attribute type 4 has an invalid length. [ 764.038171][T28777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6744'. [ 764.092064][T28789] openvswitch: netlink: Multiple metadata blocks provided [ 764.135188][T28789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6746'. [ 764.160628][T28779] bond1: entered promiscuous mode [ 764.177053][T28779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 764.221469][T28792] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 764.235799][T28792] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 764.246500][T28792] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 764.332203][T28801] openvswitch: netlink: IP tunnel TTL not specified. [ 764.499581][T28810] ieee802154 phy0 wpan0: encryption failed: -22 [ 764.584177][T28818] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 764.867697][T28841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6761'. [ 764.877568][T28843] netlink: 'syz.4.6762': attribute type 39 has an invalid length. [ 764.896669][T28845] netlink: 'syz.1.6763': attribute type 1 has an invalid length. [ 764.950605][T28845] bond2: entered promiscuous mode [ 764.956989][T28845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 764.992631][T28847] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 765.025602][T28847] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 765.050924][T28847] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 765.109165][T28841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6761'. [ 765.120549][T28850] netlink: 'syz.4.6764': attribute type 10 has an invalid length. [ 765.130813][T28850] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 765.306234][T28857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6767'. [ 765.324735][T28855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6766'. [ 765.353910][T28857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6767'. [ 765.386748][T28863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6767'. [ 765.415755][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.427502][T28867] netlink: 'syz.3.6770': attribute type 9 has an invalid length. [ 765.439288][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.452374][T28863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6767'. [ 765.549185][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.574907][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.670504][T28875] bridge_slave_1: left allmulticast mode [ 765.693623][T28875] bridge_slave_1: left promiscuous mode [ 765.699559][T28875] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.756116][T28875] bridge_slave_0: left allmulticast mode [ 765.797770][T28875] bridge_slave_0: left promiscuous mode [ 765.812321][T28875] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.965011][T28896] bond3: entered promiscuous mode [ 765.970673][T28896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 765.990974][T28896] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 766.003847][T28896] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 766.014665][T28896] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 766.239801][T28907] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 766.384129][T28909] vlan2: entered allmulticast mode [ 766.389604][T28909] bond0: entered allmulticast mode [ 766.397140][T28909] bond_slave_0: entered allmulticast mode [ 766.403110][T28909] bond_slave_1: entered allmulticast mode [ 766.435617][T28911] syzkaller1: entered promiscuous mode [ 766.448718][T28911] syzkaller1: entered allmulticast mode [ 766.570655][T28914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6782'. [ 766.782138][T28933] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 766.842502][T28936] validate_nla: 1 callbacks suppressed [ 766.842524][T28936] netlink: 'syz.1.6789': attribute type 1 has an invalid length. [ 767.009236][T28936] bond3: entered promiscuous mode [ 767.028329][T28936] 8021q: adding VLAN 0 to HW filter on device bond3 [ 767.368500][T28965] pimreg3: entered allmulticast mode [ 767.528521][T28976] netlink: 'syz.0.6800': attribute type 21 has an invalid length. [ 767.541604][T28976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6800'. [ 767.868297][T28994] netlink: 'syz.0.6804': attribute type 4 has an invalid length. [ 767.885607][T28996] netlink: 'syz.4.6805': attribute type 1 has an invalid length. [ 767.938661][T28996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 767.954441][T28999] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 767.971464][T28999] bond3: entered allmulticast mode [ 768.005416][T29001] netlink: 'syz.0.6806': attribute type 29 has an invalid length. [ 768.149862][T29017] bridge0: port 3(batadv1) entered blocking state [ 768.158626][T29017] bridge0: port 3(batadv1) entered disabled state [ 768.165787][T29017] batadv1: entered allmulticast mode [ 768.175979][T29017] batadv1: entered promiscuous mode [ 768.289391][T29022] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 768.314563][T29022] syzkaller0: entered promiscuous mode [ 768.320485][T29022] syzkaller0: entered allmulticast mode [ 768.401454][T29028] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 768.486484][T29031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 768.643383][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 768.652662][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 768.905925][T29005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 769.229462][T29050] netlink: 'syz.2.6823': attribute type 1 has an invalid length. [ 769.248222][T29052] netlink: 'syz.0.6822': attribute type 1 has an invalid length. [ 769.308905][T29050] bond1: entered promiscuous mode [ 769.314732][T29050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 769.358704][T29062] netlink: 'syz.1.6825': attribute type 21 has an invalid length. [ 769.373407][T29052] 8021q: adding VLAN 0 to HW filter on device bond4 [ 769.381903][T29062] IPv6: NLM_F_CREATE should be specified when creating new route [ 769.397754][T29054] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 769.444471][T29054] bond4: entered allmulticast mode [ 769.457370][T29055] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 769.524573][T29055] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 769.553277][T29055] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 769.568914][T29070] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 769.598951][T29071] __nla_validate_parse: 3 callbacks suppressed [ 769.598968][T29071] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.6826'. [ 769.676984][T29064] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 769.723819][T29075] Bluetooth: MGMT ver 1.23 [ 769.903283][T29087] sock: sock_timestamping_bind_phc: sock not bind to device [ 769.923938][T29088] sock: sock_timestamping_bind_phc: sock not bind to device [ 769.984047][T29094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6833'. [ 769.996556][T29094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6833'. [ 770.005899][T29094] netlink: 'syz.1.6833': attribute type 22 has an invalid length. [ 770.015020][T29094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6833'. [ 770.024957][T29094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6833'. [ 770.144885][T29098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6835'. [ 770.160814][T29100] IPv6: sit1: Disabled Multicast RS [ 770.172678][T29098] veth0_macvtap: left promiscuous mode [ 770.254768][ T10] block nbd4: Possible stuck request ffff888027a25080: control (read@0,1024B). Runtime 210 seconds [ 770.265691][ T10] block nbd4: Possible stuck request ffff888027a25240: control (read@1024,1024B). Runtime 210 seconds [ 770.276971][ T10] block nbd4: Possible stuck request ffff888027a25400: control (read@2048,1024B). Runtime 210 seconds [ 770.288199][ T10] block nbd4: Possible stuck request ffff888027a255c0: control (read@3072,1024B). Runtime 210 seconds [ 770.330093][T29104] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 770.353618][T29104] netlink: 'syz.0.6838': attribute type 3 has an invalid length. [ 770.361814][T29104] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6838'. [ 770.707304][T29125] gretap0: refused to change device tx_queue_len [ 770.720954][T29125] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 770.767171][T29125] netlink: 576 bytes leftover after parsing attributes in process `syz.2.6846'. [ 771.097250][T29141] bond_slave_0: mtu greater than device maximum [ 771.120384][T29151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6852'. [ 771.169833][T29149] bond5: entered promiscuous mode [ 771.175544][T29149] 8021q: adding VLAN 0 to HW filter on device bond5 [ 771.194782][T29152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6850'. [ 771.209461][T29154] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 771.222893][T29154] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 771.233654][T29154] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 771.525015][T29167] 8021q: adding VLAN 0 to HW filter on device bond4 [ 771.544663][T29175] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 771.556965][T29175] bond4: entered allmulticast mode [ 771.643004][T29167] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 772.018769][T29203] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 772.032877][T29203] batman_adv: batadv0: Adding interface: gretap1 [ 772.049713][T29203] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.106922][T29203] batman_adv: batadv0: Interface activated: gretap1 [ 772.112195][T29206] validate_nla: 6 callbacks suppressed [ 772.112737][T29206] netlink: 'syz.0.6870': attribute type 1 has an invalid length. [ 772.159168][T29209] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 772.289989][T29216] bond_slave_0: mtu greater than device maximum [ 772.315582][ T5723] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 772.533593][T29234] netlink: 'syz.3.6881': attribute type 1 has an invalid length. [ 772.563946][ T5723] hid-generic 0005:0458:100E.0003: unknown main item tag 0x0 [ 772.595359][ T5723] hid-generic 0005:0458:100E.0003: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 772.606862][T29236] netlink: 'syz.4.6880': attribute type 4 has an invalid length. [ 772.633667][ T5723] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 772.675194][T29236] .`: renamed from bond0 (while UP) [ 772.766793][T29244] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 772.999190][T29257] netlink: 'syz.0.6889': attribute type 1 has an invalid length. [ 773.015292][T29259] openvswitch: netlink: Actions may not be safe on all matching packets [ 773.078397][T29257] bond6: entered promiscuous mode [ 773.087337][T29257] 8021q: adding VLAN 0 to HW filter on device bond6 [ 773.125696][T29258] bond6: (slave bridge1): making interface the new active one [ 773.147241][T29258] bridge1: entered promiscuous mode [ 773.160334][T29258] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 773.191066][T29263] bond_slave_0: mtu greater than device maximum [ 773.369412][T29274] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 773.495263][T29280] netlink: 'syz.0.6897': attribute type 1 has an invalid length. [ 773.556949][T29280] 8021q: adding VLAN 0 to HW filter on device bond7 [ 773.572889][T29286] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 773.586601][T29286] bond7: entered allmulticast mode [ 773.677729][T29291] bridge4: entered promiscuous mode [ 773.683009][T29291] bridge4: entered allmulticast mode [ 773.723649][T29291] team0: Port device bridge4 added [ 773.761531][T29285] netlink: 'syz.3.6899': attribute type 13 has an invalid length. [ 773.801407][T29285] gretap0: refused to change device tx_queue_len [ 773.808989][T29285] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 773.995280][T29308] netlink: 'syz.0.6905': attribute type 10 has an invalid length. [ 774.007129][T29308] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 774.088063][T29313] netlink: 'syz.0.6907': attribute type 4 has an invalid length. [ 774.328188][T29325] netlink: 'syz.0.6911': attribute type 1 has an invalid length. [ 774.378234][T29325] 8021q: adding VLAN 0 to HW filter on device bond8 [ 774.396128][T29325] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 774.432040][T29325] bond8: entered allmulticast mode [ 774.491537][T29332] sctp: [Deprecated]: syz.3.6913 (pid 29332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 774.491537][T29332] Use struct sctp_sack_info instead [ 774.510497][T29334] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 774.626952][T29340] __nla_validate_parse: 28 callbacks suppressed [ 774.626973][T29340] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6917'. [ 774.893492][ T5630] Bluetooth: hci3: command 0x040f tx timeout [ 774.957793][T29353] syzkaller1: entered promiscuous mode [ 774.963558][T29353] syzkaller1: entered allmulticast mode [ 775.048210][T29365] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 775.549756][T29391] netlink: 'syz.2.6935': attribute type 4 has an invalid length. [ 775.664280][T29399] bond_slave_0: mtu greater than device maximum [ 775.756177][T29406] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6940'. [ 775.773052][T29406] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6940'. [ 775.784203][T29405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6939'. [ 775.807259][T29404] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6940'. [ 775.825020][T29404] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6940'. [ 776.383820][T29438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6948'. [ 776.425075][T29438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6948'. [ 776.519324][T29447] bond_slave_0: mtu greater than device maximum [ 776.544740][ T809] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 776.559103][T29450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6948'. [ 776.917580][T29473] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6961'. [ 776.943530][ T809] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 777.047792][T29482] lo speed is unknown, defaulting to 1000 [ 777.061915][T29482] lo speed is unknown, defaulting to 1000 [ 777.080201][T29482] lo speed is unknown, defaulting to 1000 [ 777.093025][T29482] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 777.108772][T29482] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 777.165748][T29482] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 777.232048][T29482] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 777.392258][T29482] lo speed is unknown, defaulting to 1000 [ 777.415004][T29482] lo speed is unknown, defaulting to 1000 [ 777.448810][T29482] lo speed is unknown, defaulting to 1000 [ 777.478388][T29482] lo speed is unknown, defaulting to 1000 [ 777.498593][T29482] lo speed is unknown, defaulting to 1000 [ 777.549219][T29482] lo speed is unknown, defaulting to 1000 [ 777.567972][T29482] lo speed is unknown, defaulting to 1000 [ 777.586063][T29482] lo speed is unknown, defaulting to 1000 [ 777.602783][T29482] lo speed is unknown, defaulting to 1000 [ 777.832481][T29514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 778.024438][T29532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.110777][T29528] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.118152][T29528] bridge0: port 1(bridge_slave_0) entered listening state [ 780.143546][T29536] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 780.280437][T29546] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 780.448844][T29555] validate_nla: 3 callbacks suppressed [ 780.448864][T29555] netlink: 'syz.3.6988': attribute type 1 has an invalid length. [ 780.527332][T29555] 8021q: adding VLAN 0 to HW filter on device bond12 [ 780.544179][T29561] bond12: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 780.561959][T29561] bond12: entered allmulticast mode [ 780.638163][T29567] __nla_validate_parse: 35 callbacks suppressed [ 780.638184][T29567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6993'. [ 780.658866][T29566] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 780.777611][T29583] geneve2: entered promiscuous mode [ 780.782957][T29583] geneve2: entered allmulticast mode [ 780.802030][T29583] IPv4: Oversized IP packet from 127.202.26.0 [ 780.807869][T29581] bond_slave_0: mtu greater than device maximum [ 780.820330][ T57] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 780.830507][ T809] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 780.838172][ T57] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 780.848120][ T57] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 780.857591][ T57] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 781.303852][T14455] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 783.668782][T29571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 795.373225][ T5630] Bluetooth: hci5: command 0x0406 tx timeout [ 800.334157][ T10] block nbd4: Possible stuck request ffff888027a25080: control (read@0,1024B). Runtime 240 seconds [ 800.345027][ T10] block nbd4: Possible stuck request ffff888027a25240: control (read@1024,1024B). Runtime 240 seconds [ 800.356124][ T10] block nbd4: Possible stuck request ffff888027a25400: control (read@2048,1024B). Runtime 240 seconds [ 800.367218][ T10] block nbd4: Possible stuck request ffff888027a255c0: control (read@3072,1024B). Runtime 240 seconds [ 807.842008][T29589] bond3: Unable to set down delay as MII monitoring is disabled [ 807.852221][T29589] bond3 (unregistering): Released all slaves [ 807.871705][T29599] netlink: 'syz.0.6997': attribute type 9 has an invalid length. [ 807.896010][T29597] netlink: 'syz.1.6998': attribute type 18 has an invalid length. [ 807.991047][ T57] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.008502][ T57] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.020527][ T57] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.055485][ T57] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.335948][T29606] netlink: 'syz.2.7004': attribute type 1 has an invalid length. [ 808.418500][T29606] 8021q: adding VLAN 0 to HW filter on device bond3 [ 808.426241][T29621] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 808.444894][T29621] bond3: entered allmulticast mode [ 808.469875][T29626] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 808.485156][T29624] bond_slave_0: mtu greater than device maximum [ 808.514743][T23807] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 808.528168][T29606] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 808.559950][T29628] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 808.633080][T29630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7010'. [ 808.658803][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.703499][T23807] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 808.777903][T29633] netlink: 816 bytes leftover after parsing attributes in process `syz.2.7012'. [ 809.149689][T29631] block nbd9: Receive control failed (result -32) [ 809.158424][ T4941] block nbd5: Receive control failed (result -32) [ 809.164713][T29637] block nbd12: Receive control failed (result -32) [ 809.175118][T29648] block nbd11: Receive control failed (result -32) [ 809.175604][T24835] block nbd8: Receive control failed (result -32) [ 809.182939][ T5630] block nbd6: Receive control failed (result -32) [ 809.189700][T25570] block nbd7: Receive control failed (result -32) [ 809.208321][T29634] block nbd10: Receive control failed (result -32) [ 809.216681][T29654] block nbd13: Receive control failed (result -32) [ 809.311483][T29661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7016'. [ 809.360191][T29661] x_tables: duplicate underflow at hook 1 [ 809.387157][T29667] netlink: 'syz.2.7019': attribute type 4 has an invalid length. [ 809.517935][T29677] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7022'. [ 809.538150][T29677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7022'. [ 809.652958][T29675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7016'. [ 809.687547][T29675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7016'. [ 810.147534][T29700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7027'. [ 810.219154][T29700] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 810.275097][T29700] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 810.323533][T29700] gretap1: entered promiscuous mode [ 810.343938][T29700] gretap1: entered allmulticast mode [ 810.464535][T29713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7029'. [ 810.577768][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 810.617528][T29717] netlink: 'syz.0.7030': attribute type 8 has an invalid length. [ 810.630041][T29716] : renamed from bond0 (while UP) [ 811.178529][T29747] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7040'. [ 811.659864][T29778] netlink: 'syz.2.7052': attribute type 1 has an invalid length. [ 811.817623][T29788] netlink: 'syz.4.7056': attribute type 2 has an invalid length. [ 811.843721][T29778] bond0: entered promiscuous mode [ 811.859587][T29778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.928333][T29784] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 811.947475][T29784] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 811.962864][T29784] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 812.193071][T29808] 8021q: VLANs not supported on ip6_vti0 [ 812.342621][T29813] block nbd14: Unsupported socket: should be TCP or UNIX. [ 812.543951][T29825] 8021q: adding VLAN 0 to HW filter on device bond4 [ 812.841930][T29844] netlink: 'syz.1.7070': attribute type 16 has an invalid length. [ 812.901798][T29844] veth0_macvtap: entered allmulticast mode [ 813.098180][T29852] SET target dimension over the limit! [ 813.202304][T29861] netlink: 'syz.2.7077': attribute type 12 has an invalid length. [ 813.210881][T29861] netlink: 'syz.2.7077': attribute type 29 has an invalid length. [ 813.244025][T29861] netlink: 'syz.2.7077': attribute type 3 has an invalid length. [ 813.259215][T29861] netlink: 'syz.2.7077': attribute type 2 has an invalid length. [ 813.287437][T29861] netlink: 'syz.2.7077': attribute type 3 has an invalid length. [ 813.775562][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 814.005800][ T30] audit: type=1804 audit(1783016615.667:13): pid=29919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7096" name="/newroot/246/cgroup.controllers" dev="tmpfs" ino=1266 res=1 errno=0 [ 814.031020][T29910] bridge6: entered promiscuous mode [ 814.044937][T29910] bridge6: entered allmulticast mode [ 814.066398][ T30] audit: type=1800 audit(1783016615.667:14): pid=29919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7096" name="cgroup.controllers" dev="tmpfs" ino=1266 res=0 errno=0 [ 814.210319][T29930] __nla_validate_parse: 18 callbacks suppressed [ 814.210338][T29930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7099'. [ 814.379163][T29936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7100'. [ 814.562210][T29938] netlink: 'syz.1.7102': attribute type 10 has an invalid length. [ 814.586576][T29938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7102'. [ 814.640056][T29938] team0: Port device geneve1 added [ 814.864726][T29966] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 814.875717][T29966] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 815.232323][T29976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7108'. [ 815.726473][T29985] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7109'. [ 815.737781][T29985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7109'. [ 815.860094][T25570] Bluetooth: hci4: command 0x0406 tx timeout [ 816.659441][T29990] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7111'. [ 817.369441][T29941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 817.801101][T30022] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7120'. [ 817.910159][T30028] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7122'. [ 819.012375][T30090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7132'. [ 820.990645][T30098] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7136'. [ 821.139540][T30109] syzkaller0: entered promiscuous mode [ 821.166708][T30109] syzkaller0: entered allmulticast mode [ 821.885814][T30163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7155'. [ 821.917633][T30163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7155'. [ 821.940530][T30163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7155'. [ 822.026066][T30168] syzkaller0: entered promiscuous mode [ 822.031740][T30168] syzkaller0: entered allmulticast mode [ 822.046351][T30168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7157'. [ 822.056014][T30168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7157'. [ 822.070454][T30168] vlan0: entered promiscuous mode [ 822.569673][T30196] netlink: 816 bytes leftover after parsing attributes in process `syz.0.7166'. [ 822.672146][T30200] netlink: ct family unspecified [ 822.689288][T30200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 822.785367][T26471] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xf7 [ 822.849474][T14455] IPVS: starting estimator thread 0... [ 822.957821][T30221] IPVS: using max 25 ests per chain, 60000 per kthread [ 823.250983][T30246] netlink: 816 bytes leftover after parsing attributes in process `syz.2.7179'. [ 825.566110][T30198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.578768][T30218] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7171'. [ 825.855952][T30259] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7183'. [ 826.100181][T30281] __nla_validate_parse: 1 callbacks suppressed [ 826.100200][T30281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7188'. [ 826.148485][T30282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7191'. [ 826.208067][T30282] netlink: 'syz.2.7191': attribute type 5 has an invalid length. [ 826.226253][T30282] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7191'. [ 826.313501][T30283] bridge1: entered allmulticast mode [ 826.391239][T23807] IPVS: starting estimator thread 0... [ 826.447217][T30295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7193'. [ 826.496194][T30293] IPVS: using max 26 ests per chain, 62400 per kthread [ 826.531503][T30297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7195'. [ 826.697435][T30297] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7195'. [ 826.709335][T30303] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 826.781610][T30297] bond5: entered promiscuous mode [ 826.808373][T30297] bridge2: entered promiscuous mode [ 826.856639][T30297] bond5: entered allmulticast mode [ 826.877936][T30297] bridge2: entered allmulticast mode [ 826.895486][T30297] 8021q: adding VLAN 0 to HW filter on device bond5 [ 826.945980][T30314] gtp0: entered promiscuous mode [ 827.122056][T30317] sit2: entered allmulticast mode [ 827.307302][T30335] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 827.378996][T30320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7203'. [ 827.446768][T30317] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7202'. [ 827.461987][T30317] batman_adv: batadv0: Adding interface: dummy0 [ 827.483194][T30317] batman_adv: batadv0: Interface activated: dummy0 [ 827.767920][T30346] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7208'. [ 828.039010][T30357] netlink: 'syz.0.7210': attribute type 1 has an invalid length. [ 828.077059][T30357] bond9: entered promiscuous mode [ 828.082707][T30357] 8021q: adding VLAN 0 to HW filter on device bond9 [ 828.107808][T30357] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 828.122998][T30357] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 828.134390][T30357] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 828.278966][T30367] netlink: 'syz.0.7213': attribute type 1 has an invalid length. [ 828.324626][T30367] 8021q: adding VLAN 0 to HW filter on device bond10 [ 828.375125][T30367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7213'. [ 828.465529][T30374] vlan2: entered promiscuous mode [ 828.470683][T30374] : entered promiscuous mode [ 828.475745][T30374] bond_slave_0: entered promiscuous mode [ 828.481700][T30374] bond_slave_1: entered promiscuous mode [ 828.549779][T30377] SET target dimension over the limit! [ 828.562073][T30377] SET target dimension over the limit! [ 828.698522][T30388] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 828.756848][T25570] Bluetooth: hci2: link tx timeout [ 828.769095][T25570] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 829.675247][T30404] veth1_macvtap: left promiscuous mode [ 830.209635][T30326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 830.434986][ T10] block nbd4: Possible stuck request ffff888027a25080: control (read@0,1024B). Runtime 270 seconds [ 830.445924][ T10] block nbd4: Possible stuck request ffff888027a25240: control (read@1024,1024B). Runtime 270 seconds [ 830.458195][ T10] block nbd4: Possible stuck request ffff888027a25400: control (read@2048,1024B). Runtime 270 seconds [ 830.469459][ T10] block nbd4: Possible stuck request ffff888027a255c0: control (read@3072,1024B). Runtime 270 seconds [ 830.490780][T30421] netlink: 'syz.0.7231': attribute type 1 has an invalid length. [ 830.623359][T30440] netlink: 'syz.4.7236': attribute type 1 has an invalid length. [ 830.669783][T30438] 8021q: adding VLAN 0 to HW filter on device bond6 [ 830.681890][T30438] bond0: (slave bond6): making interface the new active one [ 830.690371][T30438] bond6: entered promiscuous mode [ 830.698202][T30438] bond0: (slave bond6): Enslaving as an active interface with an up link [ 830.737721][T30422] mac80211_hwsim hwsim36 ÿ: renamed from wlan1 [ 830.786885][T30446] netlink: 'syz.1.7237': attribute type 1 has an invalid length. [ 830.804926][T30440] bond0: entered promiscuous mode [ 830.810411][T30440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.818310][T29654] Bluetooth: hci2: command 0x0406 tx timeout [ 830.904813][T30446] 8021q: adding VLAN 0 to HW filter on device bond5 [ 830.988197][T30443] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 831.044730][T30443] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 831.075323][T30443] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 831.173108][T30470] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 831.453761][T30483] __nla_validate_parse: 6 callbacks suppressed [ 831.453781][T30483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7247'. [ 831.502841][T30483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7247'. [ 831.547071][T30478] xt_l2tp: missing protocol rule (udp|l2tpip) [ 831.577588][T30493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7250'. [ 831.620304][T30482] xfrm0 speed is unknown, defaulting to 1000 [ 831.659944][T30482] lo speed is unknown, defaulting to 1000 [ 831.919692][T30511] netlink: 'syz.2.7255': attribute type 1 has an invalid length. [ 832.016145][T30511] bond7: entered promiscuous mode [ 832.021846][T30511] 8021q: adding VLAN 0 to HW filter on device bond7 [ 832.205152][T30514] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 832.260504][T30514] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 832.325920][T30514] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 832.388934][T30526] netlink: 'syz.0.7260': attribute type 1 has an invalid length. [ 832.557337][T30526] 8021q: adding VLAN 0 to HW filter on device bond11 [ 832.759488][T30536] syzkaller0: entered promiscuous mode [ 832.773586][T30536] syzkaller0: entered allmulticast mode [ 832.936793][T30555] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7267'. [ 833.100797][T30563] netlink: 'syz.0.7269': attribute type 1 has an invalid length. [ 833.182802][T30564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7269'. [ 833.220903][T30564] bond12 (unregistering): Released all slaves [ 833.279750][T30576] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 833.545298][T30592] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7279'. [ 833.756605][T30606] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 833.969034][T30618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7287'. [ 834.111747][T14455] IPVS: starting estimator thread 0... [ 834.215919][T30623] IPVS: using max 27 ests per chain, 64800 per kthread [ 834.340716][T30628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7288'. [ 834.397159][T30639] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 834.413734][T30639] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 834.707259][T30657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7296'. [ 834.726563][T30659] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001 [ 834.830610][T30659] nbd: must specify an index to disconnect [ 834.958119][T30671] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7300'. [ 834.968123][T30670] xt_nfacct: accounting object `syz1' does not exist [ 835.034411][T30671] netlink: 'syz.0.7300': attribute type 9 has an invalid length. [ 835.105964][T30670] netlink: 'syz.3.7299': attribute type 1 has an invalid length. [ 835.544737][T30707] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 835.555348][T30703] netlink: 'syz.1.7309': attribute type 21 has an invalid length. [ 835.576419][T30703] IPv6: NLM_F_CREATE should be specified when creating new route [ 835.601857][T30703] netlink: 'syz.1.7309': attribute type 1 has an invalid length. [ 835.775298][T30718] netlink: 'syz.4.7310': attribute type 1 has an invalid length. [ 835.956250][T30718] bond4: entered promiscuous mode [ 835.961002][T30735] Dead loop on virtual device ip6_vti0 (net 321), fix it urgently! [ 835.971703][T30718] 8021q: adding VLAN 0 to HW filter on device bond4 [ 835.984415][T30718] netlink: 'syz.4.7310': attribute type 21 has an invalid length. [ 835.992720][T30718] IPv6: NLM_F_CREATE should be specified when creating new route [ 836.001521][T30718] netlink: 'syz.4.7310': attribute type 1 has an invalid length. [ 836.112913][T30730] 8021q: adding VLAN 0 to HW filter on device bond4 [ 836.140634][T30730] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 836.170460][T30730] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 836.216556][T30730] bond4: (slave vti0): making interface the new active one [ 836.235433][T30730] vti0: entered promiscuous mode [ 836.244587][T30730] vti0: left promiscuous mode [ 836.261702][ T5286] veth1_macvtap: left promiscuous mode [ 836.391693][T30736] nbd14: detected capacity change from 0 to 63 [ 836.476572][T30755] __nla_validate_parse: 10 callbacks suppressed [ 836.476592][T30755] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7321'. [ 836.521410][T30755] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7321'. [ 836.531028][T30755] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7321'. [ 836.542744][T30759] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7322'. [ 836.578327][T29654] block nbd14: Receive control failed (result -104) [ 836.585714][T25570] block nbd14: Receive control failed (result -32) [ 836.765949][T30766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7323'. [ 836.812400][T30773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7326'. [ 836.829205][T30776] sctp: [Deprecated]: syz.0.7324 (pid 30776) Use of int in max_burst socket option deprecated. [ 836.829205][T30776] Use struct sctp_assoc_value instead [ 837.044193][T30785] validate_nla: 2 callbacks suppressed [ 837.044228][T30785] netlink: 'syz.0.7328': attribute type 1 has an invalid length. [ 837.091210][T30785] bond12: entered promiscuous mode [ 837.105936][T30785] 8021q: adding VLAN 0 to HW filter on device bond12 [ 837.139976][T30788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7328'. [ 837.186126][T30788] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 837.227173][T30788] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 837.243535][T30788] bond12: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 837.359699][T30794] netlink: 'syz.2.7330': attribute type 1 has an invalid length. [ 837.855247][T30821] netlink: 13 bytes leftover after parsing attributes in process `syz.2.7335'. [ 838.036876][T30834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.194853][T30842] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7341'. [ 838.374684][T30850] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 838.381399][T30850] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 838.440083][T30850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7343'. [ 838.465086][T30850] hsr_slave_0: left promiscuous mode [ 838.484712][T30850] hsr_slave_1: left promiscuous mode [ 839.138657][T30886] sctp: [Deprecated]: syz.2.7353 (pid 30886) Use of int in maxseg socket option. [ 839.138657][T30886] Use struct sctp_assoc_value instead [ 840.529613][T30958] SET target dimension over the limit! [ 840.653647][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.660937][ C1] bridge0: topology change detected, propagating [ 841.456359][T25570] Bluetooth: hci0: command 0x0406 tx timeout [ 841.538800][T30998] bond8 (unregistering): Released all slaves [ 841.738632][T31004] bond8 (unregistering): Released all slaves [ 841.756000][T31019] __nla_validate_parse: 6 callbacks suppressed [ 841.756020][T31019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7389'. [ 841.822826][T31016] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7389'. [ 842.176073][T31045] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7399'. [ 842.400717][T31057] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 842.614467][T31073] netlink: 'syz.1.7408': attribute type 1 has an invalid length. [ 842.659197][T31073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7408'. [ 842.849774][T31088] vlan3: entered allmulticast mode [ 842.856507][T31088] bridge_slave_0: entered allmulticast mode [ 842.905957][T31084] syzkaller0: entered promiscuous mode [ 842.911665][T31084] syzkaller0: entered allmulticast mode [ 842.977640][T31084] bond5: invalid ARP target 0.0.0.0 specified for addition [ 842.988342][T31084] bond5: option arp_ip_target: invalid value (0) [ 843.001458][T31084] bond5 (unregistering): Released all slaves [ 843.422575][T31115] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7417'. [ 843.448158][T31115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7417'. [ 843.478197][T31115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7417'. [ 843.552414][T31122] syzkaller1: entered promiscuous mode [ 843.566826][T31122] syzkaller1: entered allmulticast mode [ 843.721599][T31135] netlink: 'syz.0.7422': attribute type 1 has an invalid length. [ 843.778643][T31135] bond13: entered promiscuous mode [ 843.785300][T31135] 8021q: adding VLAN 0 to HW filter on device bond13 [ 843.801357][T31142] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 843.819360][T31142] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 843.830231][T31142] bond13: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 843.848335][T31144] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 844.038043][T31154] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7428'. [ 844.256472][T31164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7431'. [ 844.365190][T31174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7432'. [ 844.599562][T31184] netlink: 'syz.3.7439': attribute type 1 has an invalid length. [ 844.685734][T31193] openvswitch: netlink: Flow key attr not present in new flow. [ 844.726332][T31184] bond13: entered promiscuous mode [ 844.751169][T31184] 8021q: adding VLAN 0 to HW filter on device bond13 [ 844.786143][T31194] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 844.801760][T31194] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 844.814308][T31194] bond13: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 844.852043][T31198] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 845.071512][T31213] IPv6: sit1: Disabled Multicast RS [ 845.120902][T31213] macsec2: entered promiscuous mode [ 845.134627][T31213] bridge0: entered promiscuous mode [ 845.150840][T31213] macsec2: entered allmulticast mode [ 845.171548][T31213] bridge0: entered allmulticast mode [ 845.187543][T31213] bridge0: port 1(macsec2) entered blocking state [ 845.206248][T31213] bridge0: port 1(macsec2) entered disabled state [ 845.232070][T31213] bridge0: left allmulticast mode [ 845.289835][ T5723] bridge0: left promiscuous mode [ 845.676883][T31245] netlink: 'syz.2.7457': attribute type 1 has an invalid length. [ 845.764071][T31245] bond8: entered promiscuous mode [ 845.778046][T31245] 8021q: adding VLAN 0 to HW filter on device bond8 [ 845.827687][T31251] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 845.846844][T31251] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 845.858881][T31251] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 846.117098][T31266] netlink: 'syz.2.7463': attribute type 1 has an invalid length. [ 846.165595][T31266] 8021q: adding VLAN 0 to HW filter on device bond9 [ 846.179475][T31266] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 846.196719][T31266] bond9: entered allmulticast mode [ 846.282905][T31275] netlink: 'syz.4.7465': attribute type 1 has an invalid length. [ 846.392144][T31272] netlink: 'syz.2.7466': attribute type 3 has an invalid length. [ 846.404212][T31278] openvswitch: netlink: Missing key (keys=40, expected=100) [ 846.490423][T31280] veth0: entered promiscuous mode [ 846.555863][T31279] veth0: left promiscuous mode [ 846.800886][T31297] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 846.848463][T31299] __nla_validate_parse: 14 callbacks suppressed [ 846.848483][T31299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7475'. [ 846.998384][T31305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7477'. [ 847.032396][T31307] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 847.058377][T31307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7479'. [ 847.165722][T31307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7479'. [ 847.329304][T31321] xt_ecn: cannot match TCP bits for non-tcp packets [ 847.489672][T31332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7486'. [ 848.445392][T31377] netlink: 816 bytes leftover after parsing attributes in process `syz.2.7501'. [ 848.474153][T31379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7501'. [ 848.495657][T31379] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7501'. [ 848.639217][T31384] netlink: 'syz.0.7503': attribute type 5 has an invalid length. [ 848.719002][T31354] netlink: 'syz.1.7494': attribute type 3 has an invalid length. [ 848.740300][T31387] syzkaller0: entered promiscuous mode [ 848.752216][T31387] syzkaller0: entered allmulticast mode [ 848.786129][T31395] netlink: 'syz.3.7500': attribute type 6 has an invalid length. [ 848.848043][T31392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7500'. [ 849.153008][T31409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7508'. [ 849.740668][T31435] bridge0: port 4(batadv2) entered blocking state [ 849.766221][T31435] bridge0: port 4(batadv2) entered disabled state [ 849.799339][T31435] batadv2: entered allmulticast mode [ 849.825673][T31435] batadv2: entered promiscuous mode [ 850.125590][T31454] netlink: 'syz.1.7521': attribute type 2 has an invalid length. [ 850.158324][T31454] nbd: must specify at least one socket [ 850.224640][ T48] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 850.234435][ T48] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 850.639221][T31475] syzkaller0: entered promiscuous mode [ 850.664857][T31475] syzkaller0: entered allmulticast mode [ 851.143892][T31493] netlink: 'syz.0.7532': attribute type 5 has an invalid length. [ 851.170227][T31493] geneve2: entered promiscuous mode [ 851.194041][T31493] geneve2: entered allmulticast mode [ 851.210044][T19629] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 851.240490][T19629] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 851.271664][T19629] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 851.337200][T19629] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 851.380371][T31504] team0: Device gtp0 is up. Set it down before adding it as a team port [ 851.461573][T31507] ipt_REJECT: TCP_RESET invalid for non-tcp [ 851.596309][T31512] ip6tnl0: Caught tx_queue_len zero misconfig [ 851.821870][T31523] netlink: 'syz.0.7542': attribute type 1 has an invalid length. [ 851.955187][T31523] 8021q: adding VLAN 0 to HW filter on device bond14 [ 852.302502][T31540] netlink: 'syz.4.7546': attribute type 1 has an invalid length. [ 852.381990][T31540] 8021q: adding VLAN 0 to HW filter on device bond5 [ 852.407927][T31543] Can't find ip_set type [ 852.412423][T31545] bond5: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 852.452022][T31545] bond5: entered allmulticast mode [ 852.526694][T31550] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 852.554660][T31552] TCP: TCP_TX_DELAY enabled [ 852.588888][T31552] __nla_validate_parse: 9 callbacks suppressed [ 852.588909][T31552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7549'. [ 852.714206][T31562] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7550'. [ 852.762149][T31558] netlink: 'syz.2.7552': attribute type 1 has an invalid length. [ 852.798193][T31558] nbd: error processing sock list [ 853.044175][T31577] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7555'. [ 853.056563][T31577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7555'. [ 853.127137][T31579] netlink: 'syz.2.7558': attribute type 1 has an invalid length. [ 853.190749][T31579] 8021q: adding VLAN 0 to HW filter on device bond10 [ 853.225691][T31585] netlink: 'syz.3.7560': attribute type 1 has an invalid length. [ 853.264759][T31585] 8021q: adding VLAN 0 to HW filter on device bond14 [ 853.302542][T31589] syzkaller0: entered promiscuous mode [ 853.308233][T31589] syzkaller0: entered allmulticast mode [ 853.317809][T31585] bond14: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 853.337076][T31585] bond14: entered allmulticast mode [ 853.706088][T31603] syzkaller0: entered promiscuous mode [ 853.714397][T31603] syzkaller0: entered allmulticast mode [ 853.722773][T31608] veth1_to_bond: entered allmulticast mode [ 853.739484][T31603] veth1_to_bond: entered promiscuous mode [ 853.760001][T31603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7565'. [ 853.786962][T31603] veth1_to_bond (unregistering): left allmulticast mode [ 853.795264][T31603] veth1_to_bond (unregistering): left promiscuous mode [ 853.907099][T31617] validate_nla: 1 callbacks suppressed [ 853.907117][T31617] netlink: 'syz.1.7572': attribute type 1 has an invalid length. [ 853.952247][T31618] netlink: 'syz.2.7571': attribute type 1 has an invalid length. [ 854.281986][T31603] .`: (slave bond_slave_1): Releasing backup interface [ 854.522244][T31617] 8021q: adding VLAN 0 to HW filter on device bond6 [ 854.591945][T31619] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.608557][T31619] batman_adv: batadv0: Interface deactivated: dummy0 [ 854.622307][T31619] batman_adv: batadv0: Removing interface: dummy0 [ 854.684036][T31619] bridge_slave_0: left allmulticast mode [ 854.689893][T31619] bridge_slave_0: left promiscuous mode [ 854.697531][T31619] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.721336][T31619] bridge_slave_1: left allmulticast mode [ 854.727860][T31619] bridge_slave_1: left promiscuous mode [ 854.736571][T25570] Bluetooth: hci2: command 0x0406 tx timeout [ 854.753160][T31619] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.797762][T31619] team0: Port device team_slave_0 removed [ 854.827985][T31619] team0: Port device team_slave_1 removed [ 854.838099][T31619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.848158][T31619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.863754][T31619] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 854.882182][T31618] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 854.883028][T31620] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 854.909619][T31620] bond6: entered allmulticast mode [ 856.125642][T31655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7580'. [ 856.136337][T31655] openvswitch: netlink: EtherType 0 is less than min 600 [ 856.146596][T31655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7580'. [ 857.637245][T31666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7581'. [ 857.699110][T31647] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.722129][T31655] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 857.750074][T31655] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 857.771214][T31655] gretap1: entered promiscuous mode [ 857.793890][T31655] gretap1: entered allmulticast mode [ 858.045454][T31685] openvswitch: netlink: Key type 31 is not supported [ 858.177041][T31696] netlink: 'syz.1.7591': attribute type 2 has an invalid length. [ 858.295746][T31703] 8021q: adding VLAN 0 to HW filter on device .` [ 858.307418][T31703] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.327593][ T5723] lo speed is unknown, defaulting to 1000 [ 858.354088][ T5723] syú2: Port: 1 Link ACTIVE [ 858.440822][T31709] x_tables: duplicate underflow at hook 3 [ 858.586823][T31726] netlink: 'syz.4.7598': attribute type 1 has an invalid length. [ 858.628406][T31720] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 858.636352][T31720] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 858.644282][T31720] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 858.652150][T31720] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 858.660101][T31720] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 858.668017][T31720] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 858.675951][T31720] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 858.700740][T31731] netlink: 'syz.0.7599': attribute type 1 has an invalid length. [ 858.717095][T31726] 8021q: adding VLAN 0 to HW filter on device bond6 [ 858.734868][T31728] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 858.763837][T31728] bond6: entered allmulticast mode [ 858.785126][T31731] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 858.915096][T31743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7600'. [ 858.935979][ T48] nci: nci_ntf_packet: unknown ntf opcode 0x25 [ 859.061265][T31737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 859.080018][T31743] 8021q: adding VLAN 0 to HW filter on device bond15 [ 859.142392][T31745] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 859.200056][T31754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7603'. [ 859.211476][T31754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7603'. [ 859.225744][T31754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7603'. [ 859.235829][T31754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7603'. [ 859.315705][T31752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7604'. [ 859.515828][T31759] siw: device registration error -23 [ 859.627464][T31764] ±ÿª¨úrBº“: renamed from lo (while UP) [ 859.643504][T31766] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 859.659227][T31771] netlink: 'syz.4.7611': attribute type 1 has an invalid length. [ 859.736374][T31771] 8021q: adding VLAN 0 to HW filter on device bond7 [ 859.807953][T31774] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 859.822343][T31778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7612'. [ 859.847158][T31774] bond7: entered allmulticast mode [ 859.917767][T31778] bridge0: port 1(batadv8) entered blocking state [ 859.948811][T31778] bridge0: port 1(batadv8) entered disabled state [ 859.974927][T31778] batadv8: entered allmulticast mode [ 860.000147][T31778] batadv8: entered promiscuous mode [ 860.065267][T31788] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 860.078863][T31789] netlink: 'syz.1.7616': attribute type 1 has an invalid length. [ 860.091874][T31792] netlink: 'syz.4.7617': attribute type 9 has an invalid length. [ 860.184575][T31789] 8021q: adding VLAN 0 to HW filter on device bond7 [ 860.198663][T31792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7617'. [ 860.245093][T31803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.297621][T31796] bond7: (slave geneve3): making interface the new active one [ 860.332065][T31796] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 860.364588][T31794] net_ratelimit: 48 callbacks suppressed [ 860.364610][T31794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 860.389632][ T48] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 860.399419][ T48] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled [ 860.506568][ T10] block nbd4: Possible stuck request ffff888027a25080: control (read@0,1024B). Runtime 300 seconds [ 860.517782][ T10] block nbd4: Possible stuck request ffff888027a25240: control (read@1024,1024B). Runtime 300 seconds [ 860.533265][ T10] block nbd4: Possible stuck request ffff888027a25400: control (read@2048,1024B). Runtime 300 seconds [ 860.544684][ T10] block nbd4: Possible stuck request ffff888027a255c0: control (read@3072,1024B). Runtime 300 seconds [ 860.782944][T31821] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7624'. [ 860.899770][T31828] IPv6: NLM_F_CREATE should be specified when creating new route [ 860.991474][T31830] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 861.053156][T31834] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 861.281045][T31846] bridge0: port 7(batadv4) entered blocking state [ 861.309627][ T30] audit: type=1804 audit(1783016662.967:15): pid=31845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7634" name="/newroot/298/cgroup.controllers" dev="tmpfs" ino=1535 res=1 errno=0 [ 861.354459][T31846] bridge0: port 7(batadv4) entered disabled state [ 861.361896][T31846] batadv4: entered allmulticast mode [ 861.367730][ T30] audit: type=1800 audit(1783016662.967:16): pid=31845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7634" name="cgroup.controllers" dev="tmpfs" ino=1535 res=0 errno=0 [ 861.393747][T31846] batadv4: entered promiscuous mode [ 861.608144][T31866] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 861.624970][T31868] netlink: 'syz.3.7641': attribute type 1 has an invalid length. [ 861.663297][T31868] netlink: 'syz.3.7641': attribute type 2 has an invalid length. [ 861.759548][T31875] netlink: 'syz.0.7644': attribute type 1 has an invalid length. [ 861.779481][ T48] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 861.788905][ T48] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 861.879636][T31875] 8021q: adding VLAN 0 to HW filter on device bond16 [ 861.894809][T31880] bond16: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 861.902961][T31888] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20005 [ 861.916676][T31880] bond16: entered allmulticast mode [ 861.956467][T31888] syzkaller0: entered promiscuous mode [ 861.963431][T31888] syzkaller0: entered allmulticast mode [ 862.449902][T31919] netlink: 'syz.4.7660': attribute type 1 has an invalid length. [ 862.496617][T31919] 8021q: adding VLAN 0 to HW filter on device bond8 [ 862.507341][T31919] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 862.531274][T31919] bond8: entered allmulticast mode [ 862.649753][T31930] bond0: (slave gre0): refused to change device type [ 862.803047][T31943] __nla_validate_parse: 4 callbacks suppressed [ 862.803069][T31943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7668'. [ 863.022925][T31955] openvswitch: netlink: Key type 31 is not supported [ 863.030612][T31952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.042032][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.491470][T31977] bond8: option lp_interval: invalid value (0) [ 863.504631][T31977] bond8: option lp_interval: allowed values 1 - 2147483647 [ 863.522144][T31977] bond8 (unregistering): Released all slaves [ 863.682653][T31994] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7686'. [ 863.780137][T32000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7688'. [ 863.794127][T32003] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7689'. [ 863.941757][T32017] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 863.965656][T32019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7693'. [ 863.985524][T32009] syzkaller0: entered promiscuous mode [ 863.996704][T32009] syzkaller0: entered allmulticast mode [ 864.224464][T32032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7699'. [ 864.257447][T32032] bridge0: port 8(batadv5) entered blocking state [ 864.268416][T32032] bridge0: port 8(batadv5) entered disabled state [ 864.278120][T32032] batadv5: entered allmulticast mode [ 864.286649][T32032] batadv5: entered promiscuous mode [ 864.599230][T32056] tls_set_device_offload_rx: netdev not found [ 864.753618][ T12] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 864.763870][ T12] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 864.847672][T32067] netlink: 'syz.0.7711': attribute type 2 has an invalid length. [ 864.857046][T32067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 864.893544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.104360][T32083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7718'. [ 865.106181][T32076] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7715'. [ 865.122913][T32083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7718'. [ 865.142589][T32076] nbd: illegal input index 544538596 [ 865.152211][T32083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7718'. [ 865.161716][T32081] bridge3: entered promiscuous mode [ 865.168523][T32081] bridge3: entered allmulticast mode [ 865.187308][T32084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.229682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.264933][T32084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.353008][T32083] xt_l2tp: invalid flags combination: 8 [ 865.364936][T32083] netlink: 'syz.4.7718': attribute type 1 has an invalid length. [ 865.414110][T32082] net_ratelimit: 1 callbacks suppressed [ 865.414128][T32082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.102875][T32112] netlink: 'syz.3.7727': attribute type 1 has an invalid length. [ 866.248600][T32112] bond16: entered promiscuous mode [ 866.274910][T32112] 8021q: adding VLAN 0 to HW filter on device bond16 [ 866.291127][T32123] bond16: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 866.304645][T32123] bond16: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 866.321187][T32123] bond16: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 866.421251][T32130] netlink: 'syz.0.7731': attribute type 12 has an invalid length. [ 866.463269][T32130] netlink: 'syz.0.7731': attribute type 29 has an invalid length. [ 866.476109][T32130] netlink: 'syz.0.7731': attribute type 2 has an invalid length. [ 866.832250][T32160] syzkaller0: entered promiscuous mode [ 866.872759][T32160] syzkaller0: entered allmulticast mode [ 866.897949][ T10] block nbd14: Connection timed out, retrying (0/2 alive) [ 866.907080][ T10] block nbd14: Connection timed out, retrying (0/2 alive) [ 866.915327][ T10] block nbd14: Connection timed out, retrying (0/2 alive) [ 866.922631][ T10] block nbd14: Connection timed out, retrying (0/2 alive) [ 866.929918][ T10] block nbd14: Dead connection, failed to find a fallback [ 866.939874][ T10] block nbd14: shutting down sockets [ 866.947949][ T10] blk_print_req_error: 111 callbacks suppressed [ 866.947968][ T10] I/O error, dev nbd14, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 866.964889][ T10] buffer_io_error: 138 callbacks suppressed [ 866.964996][ T10] Buffer I/O error on dev nbd14, logical block 3, async page read [ 866.979029][ T10] I/O error, dev nbd14, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 866.988352][ T10] Buffer I/O error on dev nbd14, logical block 2, async page read [ 866.996371][ T10] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 867.005715][ T10] Buffer I/O error on dev nbd14, logical block 1, async page read [ 867.013709][ T10] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 867.027065][ T10] Buffer I/O error on dev nbd14, logical block 0, async page read [ 867.035443][T32170] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 867.044887][T32170] Buffer I/O error on dev nbd14, logical block 0, async page read [ 867.054339][T32170] Buffer I/O error on dev nbd14, logical block 1, async page read [ 867.062262][T32170] Buffer I/O error on dev nbd14, logical block 2, async page read [ 867.070402][T32170] Buffer I/O error on dev nbd14, logical block 3, async page read [ 867.078615][T32170] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 867.088173][T32170] Buffer I/O error on dev nbd14, logical block 0, async page read [ 867.096188][T32170] Buffer I/O error on dev nbd14, logical block 1, async page read [ 867.104533][T32170] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 867.114141][T32170] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 867.123676][T32170] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 867.133544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.146980][T32170] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 867.157502][T25637] ldm_validate_partition_table(): Disk read failed. [ 867.174735][T25637] Dev nbd14: unable to read RDB block 0 [ 867.189845][T25637] nbd14: unable to read partition table [ 867.220185][T32163] xt_CT: No such helper "snmp" [ 867.232463][T32172] --map-set only usable from mangle table [ 867.240090][T25637] ldm_validate_partition_table(): Disk read failed. [ 867.287555][T25637] Dev nbd14: unable to read RDB block 0 [ 867.319698][T25637] nbd14: unable to read partition table [ 867.892552][T32200] syzkaller0: entered promiscuous mode [ 867.900292][T32200] syzkaller0: entered allmulticast mode [ 868.147674][T32215] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 870.097301][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.646435][T32184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 870.838379][T32271] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 870.894233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.905562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.390195][T32305] bridge0: port 5(ipvlan2) entered blocking state [ 871.397219][T32305] bridge0: port 5(ipvlan2) entered disabled state [ 871.404685][T32305] ipvlan2: entered allmulticast mode [ 871.411297][T32305] bridge0: entered allmulticast mode [ 871.421559][T32305] ipvlan2: left allmulticast mode [ 871.429863][T32310] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 871.436949][T32305] bridge0: left allmulticast mode [ 871.468700][T32313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 871.592396][T32318] netlink: 'syz.1.7792': attribute type 2 has an invalid length. [ 871.779891][T32323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.791888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.182207][ T30] audit: type=1804 audit(1783016673.837:17): pid=32344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7798" name="/newroot/424/cgroup.controllers" dev="tmpfs" ino=2175 res=1 errno=0 [ 872.248433][ T30] audit: type=1800 audit(1783016673.837:18): pid=32344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7798" name="cgroup.controllers" dev="tmpfs" ino=2175 res=0 errno=0 [ 872.301201][T32344] netlink: 'syz.3.7798': attribute type 11 has an invalid length. [ 872.402944][T32325] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 872.428622][ T5723] lo speed is unknown, defaulting to 1000 [ 872.453308][ T5723] syú2: Port: 1 Link DOWN [ 872.610222][T32360] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 872.804322][T32368] netlink: 'syz.2.7806': attribute type 63 has an invalid length. [ 872.827541][T32372] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 872.844286][T32372] syzkaller1: linktype set to 823 [ 872.864072][T32376] netlink: 'syz.2.7806': attribute type 63 has an invalid length. [ 872.889363][T32368] netlink: 'syz.2.7806': attribute type 63 has an invalid length. [ 873.090280][T32390] bond0: left promiscuous mode [ 873.106389][T32390] bond6: left promiscuous mode [ 873.147685][T32392] __nla_validate_parse: 3 callbacks suppressed [ 873.147703][T32392] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7812'. [ 873.212252][T32392] 0·: renamed from hsr0 (while UP) [ 873.251056][T32392] 0·: entered allmulticast mode [ 873.264576][T32392] hsr_slave_0: entered allmulticast mode [ 873.281136][T32392] hsr_slave_1: entered allmulticast mode [ 873.306667][T32392] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 873.354483][T32398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7814'. [ 873.367013][T32403] erspan0: entered promiscuous mode [ 873.379605][T32403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7815'. [ 873.429832][T32406] netlink: 'syz.2.7816': attribute type 1 has an invalid length. [ 873.448266][T32406] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7816'. [ 873.518544][T32406] workqueue: Failed to create a rescuer kthread for wq "phy8": -EINTR [ 873.700913][T32421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7820'. [ 873.756485][T32423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7822'. [ 873.830607][T32429] netlink: 'syz.1.7822': attribute type 1 has an invalid length. [ 873.878345][T32428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7823'. [ 873.890719][T32425] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7821'. [ 873.924262][T32425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7821'. [ 873.946830][T32428] veth0_macvtap: left allmulticast mode [ 873.952564][T32428] veth0_macvtap: left promiscuous mode [ 874.101562][T32435] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.7824'. [ 874.470452][T32468] netlink: 'syz.3.7835': attribute type 4 has an invalid length. [ 874.512594][T32468] netlink: 'syz.3.7835': attribute type 2 has an invalid length. [ 874.533029][T32468] syzkaller0: entered promiscuous mode [ 874.539929][T32468] syzkaller0: entered allmulticast mode [ 874.556676][T32468] netlink: 'syz.3.7835': attribute type 4 has an invalid length. [ 874.930890][T32487] netlink: 'syz.3.7841': attribute type 10 has an invalid length. [ 874.968199][T32487] bond0 (unregistering): Released all slaves [ 875.059980][T32494] siw: device registration error -23 [ 875.751658][T32541] xt_hashlimit: size too large, truncated to 1048576 [ 876.181094][T25570] block nbd15: Receive control failed (result -107) [ 876.388923][T32569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.206898][T32617] ksmbd: Daemon and kernel module version mismatch. ksmbd: 69, kernel module: 1. User-space ksmbd should terminate. [ 878.212242][T32665] __nla_validate_parse: 25 callbacks suppressed [ 878.212262][T32665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7892'. [ 878.316812][T32669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7896'. [ 878.355559][T32672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7897'. [ 878.452345][T32669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7896'. [ 878.549383][T32677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.558023][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.700619][T32669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7896'. [ 878.936596][T32677] batman_adv: batadv0: Interface deactivated: gretap1 [ 879.052877][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.091985][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.124517][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.143632][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.162439][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.180443][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.209476][ T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.240974][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.369670][T32703] C: renamed from lo [ 879.396920][T32703] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 879.653613][T32717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7910'. [ 879.777692][T32720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7911'. [ 879.886889][T32720] netlink: 'syz.4.7911': attribute type 1 has an invalid length. [ 879.988785][T32721] bridge5: port 1(geneve2) entered blocking state [ 879.996837][T32721] bridge5: port 1(geneve2) entered disabled state [ 880.011838][T32721] geneve2: entered allmulticast mode [ 880.037706][T32721] geneve2: entered promiscuous mode [ 880.205434][T32733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7915'. [ 880.605816][T32762] netlink: 'syz.1.7922': attribute type 1 has an invalid length. [ 880.619140][T32761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7921'. [ 880.670235][T32761] bridge0: port 3(batadv1) entered blocking state [ 880.680471][T32761] bridge0: port 3(batadv1) entered disabled state [ 880.691134][T32761] batadv1: entered allmulticast mode [ 880.699759][T32761] batadv1: entered promiscuous mode [ 880.858773][ T309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7923'. [ 881.107315][ T324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 881.143702][ T57] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 881.153612][ T57] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 881.511503][ T340] bridge0: port 2(batadv9) entered blocking state [ 881.533598][ T340] bridge0: port 2(batadv9) entered disabled state [ 881.552048][ T340] batadv9: entered allmulticast mode [ 881.560141][ T340] batadv9: entered promiscuous mode [ 881.566777][ T338] tipc: Started in network mode [ 881.571752][ T338] tipc: Node identity 2651d25cc90b, cluster identity 4711 [ 881.591421][ T338] tipc: Enabled bearer , priority 0 [ 881.607392][ T346] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 881.740493][ T338] syzkaller0: entered promiscuous mode [ 881.754255][ T338] syzkaller0: entered allmulticast mode [ 881.768863][ T338] tipc: Resetting bearer [ 881.812152][ T360] FAULT_INJECTION: forcing a failure. [ 881.812152][ T360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.836984][ T336] tipc: Resetting bearer [ 881.846909][ T360] CPU: 1 UID: 0 PID: 360 Comm: syz.3.7940 Not tainted syzkaller #0 PREEMPT(full) [ 881.846937][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 881.846951][ T360] Call Trace: [ 881.846960][ T360] [ 881.846971][ T360] dump_stack_lvl+0xe8/0x150 [ 881.847018][ T360] should_fail_ex+0x40c/0x560 [ 881.847061][ T360] _copy_to_user+0x31/0xb0 [ 881.847092][ T360] simple_read_from_buffer+0xe1/0x170 [ 881.847161][ T360] proc_fail_nth_read+0x1bb/0x230 [ 881.847209][ T360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 881.847255][ T360] ? rw_verify_area+0x24a/0x4c0 [ 881.847286][ T360] ? tun_chr_write_iter+0xe0/0x200 [ 881.847401][ T360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 881.847430][ T360] vfs_read+0x213/0xa80 [ 881.847468][ T360] ? __pfx___mutex_lock+0x10/0x10 [ 881.847496][ T360] ? __pfx_vfs_read+0x10/0x10 [ 881.847529][ T360] ? __fget_files+0x2a/0x420 [ 881.847563][ T360] ? __fget_files+0x3a2/0x420 [ 881.847589][ T360] ? __fget_files+0x2a/0x420 [ 881.847627][ T360] ksys_read+0x150/0x270 [ 881.847662][ T360] ? __pfx_ksys_read+0x10/0x10 [ 881.847703][ T360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.847728][ T360] do_syscall_64+0x174/0x580 [ 881.847752][ T360] ? trace_irq_disable+0x3b/0x140 [ 881.847780][ T360] ? clear_bhb_loop+0x40/0x90 [ 881.847807][ T360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.847829][ T360] RIP: 0033:0x7f7a7995e68e [ 881.847850][ T360] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 881.847869][ T360] RSP: 002b:00007f7a7a8e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 881.847891][ T360] RAX: ffffffffffffffda RBX: 00007f7a7a8e66c0 RCX: 00007f7a7995e68e [ 881.847907][ T360] RDX: 000000000000000f RSI: 00007f7a7a8e60a0 RDI: 0000000000000006 [ 881.847920][ T360] RBP: 00007f7a7a8e6090 R08: 0000000000000000 R09: 0000000000000000 [ 881.847934][ T360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.847947][ T360] R13: 00007f7a79c26218 R14: 00007f7a79c26180 R15: 00007ffea30d5f48 [ 881.847983][ T360] [ 882.071092][ T36] batman_adv: batadv9: No IGMP Querier present - multicast optimizations disabled [ 882.080403][ T36] batman_adv: batadv9: No MLD Querier present - multicast optimizations disabled [ 884.381563][ T336] tipc: Disabling bearer [ 884.399996][ T809] tipc: Node number set to 4015706716 [ 884.685785][ T392] sctp: [Deprecated]: syz.3.7953 (pid 392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 884.685785][ T392] Use struct sctp_sack_info instead [ 884.811477][ T401] __nla_validate_parse: 6 callbacks suppressed [ 884.811497][ T401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7956'. [ 884.907179][ T406] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7957'. [ 885.091766][ T414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7962'. [ 885.322267][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805206ac00: rx timeout, send abort [ 885.377138][ T428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7968'. [ 885.400884][ T431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7968'. [ 885.495408][ T431] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7968'. [ 885.505843][ T431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7968'. [ 885.822489][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888058107800: rx timeout, send abort [ 885.830986][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805206ac00: abort rx timeout. Force session deactivation [ 886.148834][ T466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7980'. [ 886.295265][ T470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7981'. [ 886.330951][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888058107800: abort rx timeout. Force session deactivation [ 888.481081][ T436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 888.807624][ T493] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7989'. [ 889.653677][ T30] audit: type=1107 audit(1783016691.247:19): pid=536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 890.033708][ T561] __nla_validate_parse: 4 callbacks suppressed [ 890.033732][ T561] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8006'. [ 890.398693][ T575] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 890.481883][ T578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8011'. [ 890.584245][T32170] block nbd4: Possible stuck request ffff888027a25080: control (read@0,1024B). Runtime 330 seconds [ 890.597066][T32170] block nbd4: Possible stuck request ffff888027a25240: control (read@1024,1024B). Runtime 330 seconds [ 890.608542][T32170] block nbd4: Possible stuck request ffff888027a25400: control (read@2048,1024B). Runtime 330 seconds [ 890.619898][T32170] block nbd4: Possible stuck request ffff888027a255c0: control (read@3072,1024B). Runtime 330 seconds [ 890.751941][ T593] netlink: 'syz.4.8014': attribute type 8 has an invalid length. [ 891.127295][ T609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8016'. [ 893.405501][ T609] team0: Port device team_slave_0 removed [ 893.699824][ T642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8027'. [ 893.731100][ T645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8026'. [ 893.788883][ T645] bridge0: port 10(batadv10) entered blocking state [ 893.814168][ T645] bridge0: port 10(batadv10) entered disabled state [ 893.838135][ T645] batadv10: entered allmulticast mode [ 893.855051][ T645] batadv10: entered promiscuous mode [ 894.115674][ T30] audit: type=1800 audit(1783016695.777:20): pid=655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8030" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2391 res=0 errno=0 [ 894.149577][ T30] audit: type=1800 audit(1783016695.777:21): pid=659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8030" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2391 res=0 errno=0 [ 894.273971][ T12] batman_adv: batadv10: No IGMP Querier present - multicast optimizations disabled [ 894.283546][ T12] batman_adv: batadv10: No MLD Querier present - multicast optimizations disabled [ 894.469604][ T664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 894.511366][ T664] vlan1: entered allmulticast mode [ 894.541253][ T664] veth0_vlan: entered allmulticast mode [ 894.749099][ T668] IPVS: set_ctl: invalid protocol: 115 10.1.1.0:20001 [ 895.002024][ T679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 895.009411][ T679] IPv6: NLM_F_CREATE should be set when creating new route [ 895.016727][ T679] IPv6: NLM_F_CREATE should be set when creating new route [ 895.037886][ T680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8040'. [ 895.045945][ T679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 895.091050][ T680] bridge0: port 5(batadv3) entered blocking state [ 895.098199][ T680] bridge0: port 5(batadv3) entered disabled state [ 895.118257][ T684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8041'. [ 895.134767][ T680] batadv3: entered allmulticast mode [ 895.156737][ T680] batadv3: entered promiscuous mode [ 895.432988][ T700] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 895.441080][ T698] batadv10: left allmulticast mode [ 895.451228][ T698] batadv10: left promiscuous mode [ 895.472212][ T698] bridge0: port 10(batadv10) entered disabled state [ 895.496915][ T698] batadv9: left allmulticast mode [ 895.505844][ T698] batadv9: left promiscuous mode [ 895.512699][ T698] bridge0: port 2(batadv9) entered disabled state [ 895.525713][ T698] batadv8: left allmulticast mode [ 895.537788][ T698] batadv8: left promiscuous mode [ 895.554763][ T698] bridge0: port 1(batadv8) entered disabled state [ 895.579719][ T698] batadv7: left allmulticast mode [ 895.593301][ T6962] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 895.593412][ T698] batadv7: left promiscuous mode [ 895.602681][ T6962] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 895.625858][ T698] bridge0: port 9(batadv7) entered disabled state [ 895.639305][ T698] batadv6: left allmulticast mode [ 895.648016][ T698] batadv6: left promiscuous mode [ 895.654959][ T698] bridge0: port 8(batadv6) entered disabled state [ 895.677841][ T698] batadv5: left allmulticast mode [ 895.684231][ T698] batadv5: left promiscuous mode [ 895.706461][ T717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8049'. [ 895.715571][ T698] bridge0: port 7(batadv5) entered disabled state [ 895.727438][ T698] batadv4: left allmulticast mode [ 895.733331][ T698] batadv4: left promiscuous mode [ 895.738751][ T698] bridge0: port 6(batadv4) entered disabled state [ 895.750601][ T698] batadv3: left allmulticast mode [ 895.767956][ T698] batadv3: left promiscuous mode [ 895.784228][ T698] bridge0: port 5(batadv3) entered disabled state [ 895.796030][ T698] batadv2: left allmulticast mode [ 895.801411][ T698] batadv2: left promiscuous mode [ 895.808386][ T698] bridge0: port 4(batadv2) entered disabled state [ 895.818251][ T698] batadv1: left allmulticast mode [ 895.824870][ T698] batadv1: left promiscuous mode [ 895.830275][ T698] bridge0: port 3(batadv1) entered disabled state [ 896.116072][ T734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8055'. [ 896.172630][ T734] bridge0: port 6(batadv4) entered blocking state [ 896.181330][ T734] bridge0: port 6(batadv4) entered disabled state [ 896.191640][ T734] batadv4: entered allmulticast mode [ 896.199804][ T734] batadv4: entered promiscuous mode [ 896.412188][ T754] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 896.677576][ T1120] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 896.687004][ T1120] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 896.870231][ T789] netlink: 'syz.1.8068': attribute type 1 has an invalid length. [ 896.948649][ T792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8068'. [ 897.035292][ T789] bond8: entered promiscuous mode [ 897.046816][ T789] 8021q: adding VLAN 0 to HW filter on device bond8 [ 897.058979][ T792] bond8: entered allmulticast mode [ 897.119112][ T789] bond8: (slave bridge2): making interface the new active one [ 897.136146][ T789] bridge2: entered promiscuous mode [ 897.153920][ T804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8071'. [ 897.154232][ T789] bridge2: entered allmulticast mode [ 897.165038][ T748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 897.211067][ T789] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 897.254220][ T804] bridge0: port 7(batadv5) entered blocking state [ 897.269053][ T804] bridge0: port 7(batadv5) entered disabled state [ 897.305846][ T804] batadv5: entered allmulticast mode [ 897.330566][ T804] batadv5: entered promiscuous mode [ 897.744962][T26471] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 897.754354][T26471] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 899.740369][ T815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8074'. [ 900.162933][ T852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8083'. [ 900.217992][ T856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8083'. [ 900.230190][ T857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8081'. [ 900.240315][ T857] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8081'. [ 900.272684][ T852] xfrm1: entered promiscuous mode [ 900.293179][ T852] xfrm1: entered allmulticast mode [ 900.358245][ T858] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.374700][ T858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.449226][ T858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 900.467880][ T858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 900.479738][ T858] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 900.489512][ T858] veth1_vlan: left promiscuous mode [ 900.504861][ T858] veth1_vlan: entered promiscuous mode [ 900.522414][ T867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8085'. [ 900.540321][ T858] veth1_macvtap: left promiscuous mode [ 900.558601][ T858] veth1_macvtap: entered promiscuous mode [ 900.586112][ T858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 900.598188][ T858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 900.607002][ T858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 900.609351][ T862] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8085'. [ 900.625879][ T858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 900.637107][ T858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 900.647474][ T858] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 900.657735][ T858] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 900.662248][ T862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8085'. [ 900.670699][ T858] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 900.687513][ T858] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 900.699797][ T858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 900.709106][ T858] 8021q: adding VLAN 0 to HW filter on device bond3 [ 900.718961][ T858] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 900.729238][ T858] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 900.747990][ T858] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 900.756605][ T858] 8021q: adding VLAN 0 to HW filter on device bond4 [ 900.764678][ T48] bond5: (slave ip6gretap1): link status down again after 0 ms [ 900.776741][ T858] 8021q: adding VLAN 0 to HW filter on device bond5 [ 900.796482][ T858] 8021q: adding VLAN 0 to HW filter on device bond6 [ 900.808200][ T858] 8021q: adding VLAN 0 to HW filter on device bond7 [ 900.857997][ T858] 8021q: adding VLAN 0 to HW filter on device bond8 [ 900.878609][ T858] batman_adv: batadv0: Interface activated: gretap1 [ 900.889136][ T858] 8021q: adding VLAN 0 to HW filter on device bond9 [ 900.904600][ T858] 8021q: adding VLAN 0 to HW filter on device bond10 [ 900.913694][ T858] 8021q: adding VLAN 0 to HW filter on device bond11 [ 900.925849][ T858] 8021q: adding VLAN 0 to HW filter on device bond12 [ 900.976126][ T858] 8021q: adding VLAN 0 to HW filter on device bond13 [ 900.988145][ T858] 8021q: adding VLAN 0 to HW filter on device bond14 [ 900.998598][ T858] 8021q: adding VLAN 0 to HW filter on device bond15 [ 901.007847][ T858] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 901.024688][ T57] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.037510][ T57] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 901.049791][ T875] netlink: 'syz.1.8088': attribute type 11 has an invalid length. [ 901.059837][ T57] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.070129][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.081421][ T57] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.092782][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.166864][ T867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8085'. [ 901.223421][ T57] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.241336][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.257293][ T57] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.271882][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.383690][ T14] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 901.396385][ T884] netlink: zone id is out of range [ 901.426463][ T887] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8093'. [ 901.548388][ T57] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 901.591070][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 901.704232][ T894] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 901.733766][ T14] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 901.752420][ T14] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 901.787369][ T898] [ 901.789754][ T898] ====================================================== [ 901.796865][ T898] WARNING: possible circular locking dependency detected [ 901.803932][ T898] syzkaller #0 Not tainted [ 901.808356][ T898] ------------------------------------------------------ [ 901.815443][ T898] syz.0.8100/898 is trying to acquire lock: [ 901.821347][ T898] ffffffff8ec84680 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x6a/0x610 [ 901.831296][ T898] [ 901.831296][ T898] but task is already holding lock: [ 901.838676][ T898] ffff888068979d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 901.847473][ T898] [ 901.847473][ T898] which lock already depends on the new lock. [ 901.847473][ T898] [ 901.857890][ T898] [ 901.857890][ T898] the existing dependency chain (in reverse order) is: [ 901.866910][ T898] [ 901.866910][ T898] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 901.874747][ T898] lock_sock_nested+0x41/0x100 [ 901.880059][ T898] inet_shutdown+0x6a/0x390 [ 901.885133][ T898] nbd_mark_nsock_dead+0x2cb/0x550 [ 901.890851][ T898] recv_work+0x1cee/0x1e10 [ 901.895843][ T898] process_scheduled_works+0xa8e/0x14e0 [ 901.901947][ T898] worker_thread+0xa47/0xfb0 [ 901.907072][ T898] kthread+0x388/0x470 [ 901.911690][ T898] ret_from_fork+0x514/0xb70 [ 901.916836][ T898] ret_from_fork_asm+0x1a/0x30 [ 901.922145][ T898] [ 901.922145][ T898] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 901.929823][ T898] __mutex_lock+0x19d/0x1550 [ 901.934961][ T898] nbd_queue_rq+0x373/0x1150 [ 901.940086][ T898] blk_mq_dispatch_rq_list+0x499/0x1990 [ 901.946239][ T898] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 901.953152][ T898] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 901.959675][ T898] blk_mq_run_work_fn+0x16c/0x300 [ 901.965243][ T898] process_scheduled_works+0xa8e/0x14e0 [ 901.971323][ T898] worker_thread+0xa47/0xfb0 [ 901.976449][ T898] kthread+0x388/0x470 [ 901.981062][ T898] ret_from_fork+0x514/0xb70 [ 901.986189][ T898] ret_from_fork_asm+0x1a/0x30 [ 901.991484][ T898] [ 901.991484][ T898] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 901.998723][ T898] __mutex_lock+0x19d/0x1550 [ 902.003863][ T898] nbd_queue_rq+0xc1/0x1150 [ 902.008910][ T898] blk_mq_dispatch_rq_list+0x499/0x1990 [ 902.015000][ T898] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 902.021881][ T898] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 902.028420][ T898] blk_mq_run_work_fn+0x16c/0x300 [ 902.033995][ T898] process_scheduled_works+0xa8e/0x14e0 [ 902.040087][ T898] worker_thread+0xa47/0xfb0 [ 902.045232][ T898] kthread+0x388/0x470 [ 902.049858][ T898] ret_from_fork+0x514/0xb70 [ 902.054999][ T898] ret_from_fork_asm+0x1a/0x30 [ 902.060302][ T898] [ 902.060302][ T898] -> #3 (set->srcu){.+.+}-{0:0}: [ 902.067449][ T898] __synchronize_srcu+0xc9/0x2f0 [ 902.072935][ T898] elevator_switch+0x1e8/0x7b0 [ 902.078317][ T898] elevator_change+0x2fa/0x480 [ 902.083614][ T898] elevator_set_default+0x375/0x440 [ 902.089529][ T898] blk_register_queue+0x3f3/0x4e0 [ 902.095159][ T898] __add_disk+0x6cb/0xe30 [ 902.100056][ T898] add_disk_fwnode+0xfb/0x4b0 [ 902.105280][ T898] nbd_dev_add+0x733/0xb60 [ 902.110242][ T898] nbd_init+0x15f/0x1e0 [ 902.115017][ T898] do_one_initcall+0x250/0x870 [ 902.120326][ T898] do_initcall_level+0x10a/0x1a0 [ 902.125841][ T898] do_initcalls+0x59/0xa0 [ 902.130711][ T898] kernel_init_freeable+0x29d/0x3e0 [ 902.136445][ T898] kernel_init+0x1d/0x1d0 [ 902.141319][ T898] ret_from_fork+0x514/0xb70 [ 902.146448][ T898] ret_from_fork_asm+0x1a/0x30 [ 902.151742][ T898] [ 902.151742][ T898] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 902.159576][ T898] __mutex_lock+0x19d/0x1550 [ 902.164700][ T898] elevator_change+0x1af/0x480 [ 902.169996][ T898] elevator_set_none+0xb5/0x140 [ 902.175384][ T898] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 902.181738][ T898] nbd_start_device+0x189/0xb30 [ 902.187125][ T898] nbd_genl_connect+0x1597/0x1c10 [ 902.192684][ T898] genl_family_rcv_msg_doit+0x233/0x340 [ 902.198767][ T898] genl_rcv_msg+0x614/0x7a0 [ 902.203818][ T898] netlink_rcv_skb+0x226/0x4a0 [ 902.209128][ T898] genl_rcv+0x28/0x40 [ 902.213657][ T898] netlink_unicast+0x7bb/0x940 [ 902.219490][ T898] netlink_sendmsg+0x813/0xb40 [ 902.224789][ T898] sock_sendmsg_nosec+0x13a/0x180 [ 902.230353][ T898] ____sys_sendmsg+0x54e/0x850 [ 902.235661][ T898] ___sys_sendmsg+0x2a5/0x360 [ 902.240877][ T898] __x64_sys_sendmsg+0x1b1/0x290 [ 902.246359][ T898] do_syscall_64+0x174/0x580 [ 902.251574][ T898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.258003][ T898] [ 902.258003][ T898] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 902.266648][ T898] blk_alloc_queue+0x544/0x690 [ 902.271967][ T898] __blk_mq_alloc_disk+0x194/0x390 [ 902.277616][ T898] nbd_dev_add+0x494/0xb60 [ 902.282579][ T898] nbd_init+0x15f/0x1e0 [ 902.287280][ T898] do_one_initcall+0x250/0x870 [ 902.292596][ T898] do_initcall_level+0x10a/0x1a0 [ 902.298079][ T898] do_initcalls+0x59/0xa0 [ 902.302948][ T898] kernel_init_freeable+0x29d/0x3e0 [ 902.308681][ T898] kernel_init+0x1d/0x1d0 [ 902.313549][ T898] ret_from_fork+0x514/0xb70 [ 902.318685][ T898] ret_from_fork_asm+0x1a/0x30 [ 902.324014][ T898] [ 902.324014][ T898] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 902.331252][ T898] __lock_acquire+0x1520/0x2cf0 [ 902.336648][ T898] lock_acquire+0x106/0x350 [ 902.341702][ T898] fs_reclaim_acquire+0x71/0x100 [ 902.347176][ T898] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 902.353530][ T898] __alloc_skb+0x1d7/0x7a0 [ 902.358479][ T898] tcp_send_active_reset+0x8a/0x550 [ 902.364295][ T898] __tcp_close+0x462/0xec0 [ 902.369256][ T898] tcp_close+0x28/0x110 [ 902.373953][ T898] inet_release+0x143/0x190 [ 902.378996][ T898] sock_close+0xad/0x220 [ 902.383785][ T898] __fput+0x418/0xa50 [ 902.388307][ T898] task_work_run+0x1d9/0x270 [ 902.393474][ T898] exit_to_user_mode_loop+0x1fa/0x730 [ 902.399392][ T898] do_syscall_64+0x353/0x580 [ 902.404538][ T898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.410964][ T898] [ 902.410964][ T898] other info that might help us debug this: [ 902.410964][ T898] [ 902.421201][ T898] Chain exists of: [ 902.421201][ T898] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 902.421201][ T898] [ 902.433975][ T898] Possible unsafe locking scenario: [ 902.433975][ T898] [ 902.441440][ T898] CPU0 CPU1 [ 902.446853][ T898] ---- ---- [ 902.452228][ T898] lock(sk_lock-AF_INET6); [ 902.456744][ T898] lock(&nsock->tx_lock); [ 902.463709][ T898] lock(sk_lock-AF_INET6); [ 902.470766][ T898] lock(fs_reclaim); [ 902.474763][ T898] [ 902.474763][ T898] *** DEADLOCK *** [ 902.474763][ T898] [ 902.482953][ T898] 2 locks held by syz.0.8100/898: [ 902.487985][ T898] #0: ffff88805f454d00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 902.498258][ T898] #1: ffff888068979d60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 902.507425][ T898] [ 902.507425][ T898] stack backtrace: [ 902.513324][ T898] CPU: 1 UID: 0 PID: 898 Comm: syz.0.8100 Not tainted syzkaller #0 PREEMPT(full) [ 902.513345][ T898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 902.513356][ T898] Call Trace: [ 902.513364][ T898] [ 902.513372][ T898] dump_stack_lvl+0xe8/0x150 [ 902.513401][ T898] print_circular_bug+0x2e1/0x300 [ 902.513422][ T898] check_noncircular+0x12e/0x150 [ 902.513454][ T898] __lock_acquire+0x1520/0x2cf0 [ 902.513481][ T898] ? __lock_acquire+0x683/0x2cf0 [ 902.513511][ T898] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 902.513531][ T898] lock_acquire+0x106/0x350 [ 902.513554][ T898] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 902.513577][ T898] ? napi_skb_cache_get+0x151/0x7d0 [ 902.513597][ T898] ? lock_acquire+0x106/0x350 [ 902.513622][ T898] fs_reclaim_acquire+0x71/0x100 [ 902.513644][ T898] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 902.513664][ T898] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 902.513684][ T898] ? local_lock_release+0x9c/0x160 [ 902.513702][ T898] ? __alloc_skb+0x189/0x7a0 [ 902.513719][ T898] ? __alloc_skb+0x1d7/0x7a0 [ 902.513736][ T898] ? __alloc_skb+0x1d7/0x7a0 [ 902.513756][ T898] __alloc_skb+0x1d7/0x7a0 [ 902.513776][ T898] tcp_send_active_reset+0x8a/0x550 [ 902.513797][ T898] __tcp_close+0x462/0xec0 [ 902.513825][ T898] tcp_close+0x28/0x110 [ 902.513847][ T898] inet_release+0x143/0x190 [ 902.513865][ T898] sock_close+0xad/0x220 [ 902.513890][ T898] ? __pfx_sock_close+0x10/0x10 [ 902.513919][ T898] __fput+0x418/0xa50 [ 902.513945][ T898] task_work_run+0x1d9/0x270 [ 902.513973][ T898] ? __pfx_task_work_run+0x10/0x10 [ 902.514004][ T898] exit_to_user_mode_loop+0x1fa/0x730 [ 902.514027][ T898] ? rcu_is_watching+0x15/0xb0 [ 902.514053][ T898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.514072][ T898] do_syscall_64+0x353/0x580 [ 902.514091][ T898] ? trace_irq_disable+0x3b/0x140 [ 902.514114][ T898] ? clear_bhb_loop+0x40/0x90 [ 902.514134][ T898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.514152][ T898] RIP: 0033:0x7f299639de59 [ 902.514169][ T898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.514185][ T898] RSP: 002b:00007ffffda9ad58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 902.514203][ T898] RAX: 0000000000000000 RBX: 00007ffffda9ae40 RCX: 00007f299639de59 [ 902.514216][ T898] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 902.514226][ T898] RBP: 00000000000dc220 R08: 0000000000000001 R09: 0000000000000000 [ 902.514237][ T898] R10: 0000001b31820000 R11: 0000000000000246 R12: 00007ffffda9ae80 [ 902.514249][ T898] R13: 00007f2996625fac R14: 00000000000dc28a R15: 00007f2996625fa0 [ 902.514270][ T898] [ 902.787233][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.813488][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.853846][ T1120] net_ratelimit: 55 callbacks suppressed [ 905.853869][ T1120] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.868190][ T1120] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 905.983761][T19629] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.991569][T19629] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 906.103283][ T12] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 906.111120][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 906.223247][T19629] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 906.231038][T19629] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 906.343168][T19629] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 906.350921][T19629] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 910.873267][ T36] net_ratelimit: 80 callbacks suppressed [ 910.873291][ T36] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.886935][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.003211][T19629] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 911.011037][T19629] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.123961][ T14] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 911.131773][ T14] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.243912][T19629] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 911.251695][T19629] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 911.363413][ T1120] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 911.371255][ T1120] bond5: (slave ip6gretap1): failed to get link speed/duplex