last executing test programs: 4.071024082s ago: executing program 4 (id=1857): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x20000078}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x6, 0x2, 0x3, 0x3}]}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'nicvf0\x00'}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r5, 0xb15}, 0x14}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440), 0x10) 3.374226409s ago: executing program 3 (id=1860): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1d, 0x125, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x2, 0x39, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008c4}, 0x4c884) 3.208463932s ago: executing program 4 (id=1862): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x44, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000780), 0x4) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000000314040028bd7000ffdbdf250900020073797a31040000000800410072786500140033006c6f00000000000000000000000000000900020073797a32000000000800410072786500140033006e7230000000000000000000000000000fa4a986cbb08132202370e08184193ac0c357b8802c87c5a66cf876a3a7cd795f180471014d70418e98b23afe4ac9c681d15669b70d7f0fa33c"], 0x60}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) (async) getsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, &(0x7f0000000240)) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000140)=0xd938, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) bind$llc(r2, &(0x7f0000000200)={0x1a, 0x20, 0xe, 0x3, 0x2, 0x2, @local}, 0x10) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r4, 0x28, 0x7, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x3, &(0x7f0000000340), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x20000004) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f00000001c0)=0x2e1b, 0x4) (async) close(0x3) (async) connect$unix(r8, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) (async) getsockopt$sock_buf(r5, 0x1, 0x5, &(0x7f0000000040)=""/176, &(0x7f0000000100)=0xb0) (async) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 3.112975887s ago: executing program 0 (id=1863): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x1478}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20000000, {0x9, 0x3, 0x400}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffff85fd}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x50}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffff85fd}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x50}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000400000003740006140006006970366772653000000000000000000008000700000000000800040064310101080005"], 0x40}, 0x1, 0xffffffff00000003}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000400000003740006140006006970366772653000000000000000000008000700000000000800040064310101080005"], 0x40}, 0x1, 0xffffffff00000003}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0xb1, 0xfd, 0x8, 0x18, @empty, @loopback, 0x20, 0x7, 0xba3, 0xff}}) r12 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r12, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$sock_int(r12, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r12, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r12, &(0x7f00000013c0)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001400)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x4000000) (async) sendmmsg$inet(r12, &(0x7f00000013c0)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001400)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x4000000) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=r11, @ANYBLOB="081006000853287dc6397488ec7281327a580804001c0012800c0001006d6163766c616e4b6fddfabc0c3e7363c08e000c0002800800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3.092450541s ago: executing program 1 (id=1864): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='-/\'&.(!/\\/$]\x00', 0x20000, &(0x7f0000000040)={@_ha_fsid={[0x10000, 0x4]}, {0x1, 0x4f4, 0x5, 0x1}}, 0xd1, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x1c0000}) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000140)={@local, @initdev}, &(0x7f0000000180)=0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/net\x00') r2 = socket$unix(0x1, 0x5, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @private, @local}, &(0x7f0000000340)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x7, 0x7fffffff, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x8041, 0x80, 0x3, 0xc073}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x9, 0x6, 0x20, @empty, @private2, 0x10, 0x40, 0x9, 0x3}}) getpeername$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000680)={@broadcast, @broadcast, 0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000700)={@initdev, @multicast2, 0x0}, &(0x7f0000000740)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @multicast1}, &(0x7f00000007c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1f0, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20000884}, 0x4040010) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000a80)={0x10, 0x84}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b00)={'ip_vti0\x00', r11, 0x7800, 0x8, 0x5e, 0x4, {{0x1f, 0x4, 0x3, 0xf, 0x7c, 0x64, 0x0, 0x5e, 0x29, 0x0, @empty, @multicast2, {[@noop, @ssrr={0x89, 0x7, 0x5, [@rand_addr=0x64010100]}, @end, @timestamp_addr={0x44, 0x54, 0xfb, 0x1, 0x0, [{@multicast1, 0xc}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xf}, {@rand_addr=0x64010101, 0x2b16}, {@private=0xa010100, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x400}, {@multicast1, 0x100}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x33}}, {@loopback, 0x4}]}, @lsrr={0x83, 0xb, 0x72, [@multicast2, @multicast1]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)=@newneigh={0x74, 0x1c, 0x4, 0x70bd26, 0x25dfdbff, {0x1c, 0x0, 0x0, r14, 0x40, 0x11}, [@NDA_SRC_VNI={0x8, 0xb, 0xafec}, @NDA_DST_IPV6={0x14, 0x1, @private0}, @NDA_VLAN={0x6}, @NDA_SRC_VNI={0x8, 0xb, 0x3}, @NDA_SRC_VNI={0x8, 0xb, 0x5}, @NDA_DST_IPV6={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @NDA_PROTOCOL={0x5, 0xc, 0xb}, @NDA_VNI={0x8, 0x7, 0xfffffff8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8}, 0x8800) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000d00)={0xffffffffffffff7f, 0x9, 0x0, 0x8, 0x5, 0x0, [{0xffffffffffffffff, 0x0, 0x0, '\x00', 0x500}, {0x1e, 0x7, 0x6e8, '\x00', 0x208}, {0x9, 0x7, 0x10}, {0x400, 0xc, 0x7, '\x00', 0x80}, {0x8000, 0xff, 0x4, '\x00', 0x402}]}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000e40)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)="d6eb63acc608c859c62321c350cfa767ca4ba832a534f1b8915f1d47097fcd9fe4884854960ce31e784cd910923bcf057b6f5d3a993e02149284e344de2c8437c509b729e4a123d6664eaf761d266622c25f4444", 0x54}, {&(0x7f0000000f40)="523e944b5e808c0c83ecba326243f9d90f520e7984c3152c43a39a91e475a90e83dfb64263bce157a1af62e55d25148c5b97687d46b130e4bc2d852057967478812c63e17f7e4ffe6a8ad8d842d9a83bf52d4936b6782ce720938d8838e21d00a5d0", 0x62}], 0x2, &(0x7f0000001000)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}, 0x4000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000010c0)={0x0, @loopback, @multicast2}, &(0x7f0000001100)=0xc) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x13, 0x19, &(0x7f0000001140)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ldst={0x3, 0x3, 0x2, 0x6, 0x779032be5fe50cc3, 0xffffffffffffffc0}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000001240)='syzkaller\x00', 0x9, 0x96, &(0x7f0000001280)=""/150, 0x41000, 0x10, '\x00', r6, @fallback=0x17, r0, 0x8, &(0x7f0000001340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001380)={0x4, 0xf, 0x8, 0x1}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000013c0)=[r0], 0x0, 0x10, 0x4}, 0x94) ioctl$XFS_IOC_FSGROWFSLOG(r15, 0x4008586f, &(0x7f00000014c0)={0x1a, 0x55de}) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r16, &(0x7f0000002280)={&(0x7f0000001500), 0xc, &(0x7f0000002240)={&(0x7f00000015c0)={0xc7c, r17, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r18}, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x2}, {0x7, 0x5}, {0x2, 0xa}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0x7}, {0x1, 0x8}, {0x2, 0xa}, {0x7, 0x7}, {0x7, 0x6}, {0x7, 0x7}, {0x4}, {0x4, 0x9}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x5, 0xa}, {0x7, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x1000, 0xd9, 0x4, 0x401, 0xd, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x260, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x6c, 0x24, 0x12, 0x4, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0xc, 0x6, 0x9, 0x6, 0x60, 0x32, 0xc, 0x24, 0x1b, 0x2, 0x12, 0x16, 0x3a, 0x16, 0x1, 0x4, 0x6c, 0x36, 0xb, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x5}, {0x0, 0x8}, {0x5, 0x7}, {0x2, 0x4}, {0x5, 0x4}, {0x4, 0x3}, {0x5, 0x4}, {0x0, 0x4}, {0x5, 0x2}, {}, {0x2, 0x9}, {}, {0x1, 0x6}, {0x2}, {0x0, 0x7}, {0x4, 0x1}, {0x6}, {0x0, 0xa}, {0x6, 0x7}, {0x1, 0x6}, {0x0, 0x6}, {0x5}, {0x2, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x3, 0x9}, {0x6, 0x1}, {0x1, 0x6}, {0x1, 0x4}, {0x7, 0x1}, {0x6, 0x1}, {0x6, 0x7}, {0x2, 0x3}, {0x2}, {0x1, 0x6}, {0x7, 0x8}, {0x1, 0x2}, {0x3, 0x5}, {0x6, 0x8}, {0x7, 0x7}, {0x4, 0x3}, {0x3, 0x2}, {0x7, 0x7}, {}, {0x4, 0xa}, {0x0, 0x5}, {0x6, 0x4}, {0x0, 0x6}, {0x2, 0x8}, {0x1}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x6, 0x8}, {0x3, 0x9}, {0x1, 0x3}, {0x1, 0x6}, {}, {0x6, 0x9}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x6}, {0x7, 0x8}, {0x3, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x6}, {0x7, 0x4}, {0x1, 0xa}, {0x5, 0x1}, {0x3}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x5}, {0x5, 0x2}, {0x7}, {0x0, 0x1e}, {0x5, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xe007, 0x7f00, 0x4, 0x1779, 0x4, 0x6b, 0x2]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x6, 0xc, 0x6c, 0x9, 0x30, 0x60, 0x3, 0x0, 0x18, 0x9, 0xb, 0x5, 0xc, 0x0, 0x0]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x401, 0x3, 0x7800, 0x2, 0x401, 0x5, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xfff, 0xa, 0x40, 0x3, 0x101, 0x2dc4, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7ff, 0xd0a5, 0xe1d, 0x92e, 0x6, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x4, 0x6}, {0x6, 0x4}, {0x7, 0x4}, {0x7, 0x2}, {0x3, 0x4}, {0x2, 0x8}, {0x6, 0x4}, {0x0, 0x1}, {0x7, 0x2}, {0x7, 0x8}, {0x6, 0x2}, {0x6, 0x5}, {0x3}, {0x5, 0x7}, {0x6, 0x8}, {0x1, 0x2}, {0x1, 0x3}, {0x1, 0x2}, {0x6, 0xa}, {0x1, 0x4}, {0x1}, {0x0, 0x4}, {0x4, 0x6}, {0x6, 0x3}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0x7}, {0x3, 0x2}, {0x3, 0x5}, {0x2, 0x9}, {0x5, 0x6}, {0x2, 0x1}, {0x2, 0x7}, {0x1, 0x7}, {0x1, 0x1}, {0x6, 0x9}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x5}, {0x1}, {0x0, 0x9}, {0x2}, {0x7, 0x1}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x12b, 0x417, 0x8, 0xfff, 0x1, 0x6000, 0x4]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x9}, {0x1, 0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x8}, {0x2, 0x5}, {0x3, 0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x6, 0x2}, {0x7}, {0x2, 0x1}, {0x1, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x2}, {0x7, 0x3}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0x18, 0x30, 0x0, 0x1b, 0x12, 0x48, 0x18, 0x2, 0x1b, 0x0, 0x16, 0x6c, 0x4, 0x5, 0x1b, 0x16, 0x6c, 0x36, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0xd6e9, 0x9, 0x401, 0x4, 0xb2a, 0xd4bb]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfff, 0x8, 0x9, 0x7ff, 0x81, 0x25, 0x200]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x8, 0x4, 0x2, 0x100, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc38a, 0xebd7, 0x81, 0xce19, 0x9, 0xdf1f, 0x6, 0x2536]}}]}]}, @NL80211_ATTR_TX_RATES={0x180, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x84, 0xa31, 0x1, 0x4, 0x81, 0xffc0]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x7}, {0x2, 0x6}, {0x3, 0x1}, {0x1, 0xa}, {0x4, 0x6}, {0x4, 0x6}, {0x2, 0x4}, {0x4, 0x8}, {0x7, 0x5}, {0x2, 0x8}, {0x7, 0x5}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x5}, {0x5, 0xa}, {0x3, 0x6}, {0x2, 0x5}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x4}, {0x6, 0x9}, {0x5, 0x7}, {0x3, 0x2}, {0x5, 0x1}, {}, {0x6, 0x1}, {0x5, 0x3}, {0x0, 0x6}, {0x1, 0x8}, {0x2, 0x7}, {0x3}, {0x7, 0x3}, {0x5, 0x1}, {0x1}, {0x1, 0x3}, {0x7, 0x3}, {0x0, 0x5}, {0x4, 0x1}, {0x5, 0x9}, {0x7, 0xa}, {0x1, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x66, 0x16, 0xb, 0x55]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x2, 0x1, 0x1, 0x9, 0x0, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x1}, {0x1, 0x7}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x7}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x8}, {0x3, 0xa}, {0x4, 0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x1, 0x5}, {0x6, 0x7}, {0x0, 0x8}, {0x3, 0x2}, {0x5, 0x10}, {0x6, 0x6}, {0x0, 0x7}, {0x4, 0xa}, {0x1, 0x8}, {0x5, 0x9}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x5}, {0x7, 0x2}, {0x3, 0x1}, {0x4, 0x5}, {0x7, 0x4}, {}, {0x4, 0x1}, {0x6}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x7}, {0x3, 0x7}, {0x0, 0x8}, {0x6, 0x5}, {0x0, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x636, 0x5, 0xb5ff, 0x80, 0x0, 0x91, 0x8]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x48, 0x1, 0xb, 0x12, 0x30, 0x1, 0x1b, 0xb, 0x12, 0x9, 0xb, 0x12, 0xb, 0x5, 0x6c, 0x48, 0x2, 0x5, 0x24]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2321, 0x7, 0x9, 0x0, 0x6, 0x358d, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x54, 0x12, 0x1, 0x2, 0x4, 0x5, 0x60, 0x30, 0x5, 0x16, 0x6c, 0x33, 0x3, 0x4, 0x3, 0x3, 0x36, 0xc]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xf2, 0x2, 0x8, 0x80, 0x7, 0x240, 0x1c0]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x8f, 0x100, 0x1, 0x6d3, 0xc00, 0x1, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1e8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x3, 0xc000, 0xc, 0x0, 0x2, 0x6, 0x9]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x2, 0x30, 0xc, 0x16, 0xb, 0x60, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9920, 0x100, 0x8000, 0x1, 0x0, 0x82f, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x28, 0x2, 0x3, 0x3, 0x48, 0xc, 0xb, 0x48, 0x3, 0x1b, 0x5d, 0x16, 0x24, 0x1b, 0x36, 0x3, 0x18, 0x2, 0x6, 0x9, 0x3, 0x1, 0x30]}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x4}, {0x5, 0x9}, {0x4, 0x7}, {0x6, 0x3}, {0x7, 0x1}, {0x7, 0x7}, {0x0, 0x2}, {0x7, 0x5}, {0x1, 0x9}, {0x6, 0xa}, {0x2, 0xa}, {0x1, 0x2}, {0x6, 0x1}, {0x1, 0x2}, {0x3, 0x2}, {0x7, 0xa}, {0x7, 0x8}, {}, {0x1, 0x3}, {0x7, 0x7}, {0x7, 0xf}, {0x7}, {0x2, 0x5}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x4, 0x2}, {0x6, 0x4}, {0x2, 0xa}, {0x6, 0x1c}, {0x6, 0x9}, {0x2, 0xa}, {0x3, 0x1}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb799, 0x1f8e, 0xa, 0x3ee, 0xb, 0x101, 0xf800, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xb82, 0x40, 0xfff8, 0x401, 0x3]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0x60, 0x1, 0x24, 0x24, 0x36, 0x12, 0x3d, 0x2, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x400, 0xffff, 0x5, 0x3, 0xd841, 0x4, 0xc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x9, 0x3, 0x0, 0x3, 0x3, 0x1]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x9, 0x9, 0x6, 0xd, 0x8, 0x2]}}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x1, 0x16, 0x24, 0x22, 0x5, 0x9, 0x12, 0x24, 0x60, 0xc, 0x18, 0x4, 0x1, 0xc, 0x4, 0x24, 0x16, 0x2, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x2, 0x7}, {0x7, 0x7}, {0x1, 0x2}, {0x6}, {0x0, 0xa}, {0x1, 0x7}, {0x4, 0x9}, {0x5, 0x1}, {0x6, 0x7}, {0x7, 0xa}, {0x1, 0x6}, {0x3}, {0x1, 0x3}, {0x5, 0x7}, {0x0, 0x4}, {0x1, 0x1}, {0x5, 0x8}, {0x6, 0x3}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x2}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x4, 0x4}, {0x1}, {0x4, 0x1}, {0x1, 0x3}, {0x6}, {0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x3, 0x3}, {0x4, 0x3}, {0x6, 0x6}, {0x7, 0x1}, {0x7, 0x8}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x6}, {0x3, 0x5}, {0x2, 0xa}, {0x1}, {0x3, 0x6}, {0x6, 0x1}, {0x7}, {0x3, 0x9}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x4, 0x7}, {0x0, 0x9}, {0x2, 0x7}, {0x4}, {0x6, 0x6}, {0x0, 0x4}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x1}, {0x4, 0x7}, {0x4, 0x1}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x8}, {0x7, 0x9}, {0x7, 0x4}, {0x0, 0x1}, {0x5, 0x7}, {0x1}, {0x7, 0x8}, {0x4}, {0x0, 0xa}, {0x4, 0x5}, {0x5, 0x3}, {0x7, 0x1}, {0x0, 0xa}, {0x3, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x7}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x7f, 0x2, 0x7, 0x0, 0x80, 0x5e, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb13d, 0x2, 0x0, 0x1fdc, 0x200, 0x5, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf6, 0x5, 0x49, 0x8, 0x2, 0x7, 0x4d, 0x1]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x12, 0x18, 0x12, 0x5, 0x6c, 0x48, 0x18, 0x5, 0x30, 0x48, 0x1b, 0xc, 0x12, 0x18, 0x4, 0x5, 0x0, 0x7]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x240, 0x8000, 0x2, 0x5, 0xfff7, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x6, 0xc4, 0xd11, 0x93e, 0x5, 0xfffd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x7f, 0x2, 0x5, 0x8001, 0x8001, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6112, 0x4, 0x6, 0x5c, 0x4, 0x2, 0x4, 0x9e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x1, 0x833, 0x7, 0x2, 0x0, 0x2]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x18, 0x9, 0x6, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x4, 0x18, 0x13, 0x1, 0x30, 0xc, 0xd305bdbfed6a124e, 0x2, 0x6c, 0xb, 0x12, 0xc, 0x0, 0x6c, 0x311f2720eb5517af, 0x6c, 0x6c, 0x36, 0x1b, 0x16, 0x60, 0x24, 0x3, 0x1b, 0xb, 0x9]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x5, 0x368, 0xfff, 0x4, 0x1, 0xb91, 0xdb]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x6}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x5, 0xa}, {0x3, 0x1c}, {0x7}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x2, 0x8}, {0x2, 0x6}, {0x1, 0x4}, {0x7, 0x7}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0x6}, {0x6, 0x8}, {0x6, 0x6}, {0x4}, {0x3, 0x9}, {0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x3, 0x8}, {0x5, 0x4}, {0x5, 0x3}, {0x1, 0x8}, {0x1, 0x13}, {0x1, 0x2}, {0x1, 0x6}, {0x2, 0x9}, {0x1}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x6}, {0x5, 0x4}, {0x4, 0xa}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x4, 0x5}, {0x3, 0xa}, {0x5, 0x4}, {0x6, 0x4}, {0x5, 0x3}, {0x1, 0x5}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x4}, {0x2, 0x8}, {0x6, 0x2}, {0x3, 0x9}, {0x6}, {0x3, 0x7}, {0x6, 0x7}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x3}, {0x7, 0x9}, {0x4, 0x8}, {0x1, 0x9}, {0x7, 0x9}, {0x5, 0x8}, {0x1, 0x9}, {0x7, 0x7}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0x7}, {0x3, 0x2}, {0x6, 0x5}, {0x2, 0x2}, {0x7, 0x2}, {0x5, 0x2}, {0x6, 0xa}, {0x4, 0x1}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0x5}, {}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x6}, {0x0, 0xa}, {0x4, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0x9}, {0x1}, {0x6, 0x8}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x7, 0x2}, {0x0, 0x4}, {0x7, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2400, 0xe, 0x401, 0x9, 0x1000, 0x1, 0xfff8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0xcb, 0x372, 0xfffe, 0x5, 0x5, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x48, 0x60, 0x0, 0x18, 0x6, 0xc, 0x2, 0x3, 0x9, 0x9, 0x60, 0x6, 0x30, 0x18, 0x2, 0x16, 0x1b, 0x60, 0x6c, 0x0, 0x6c, 0xac87b4c9d7733de4, 0x1b, 0x24, 0x4, 0x5]}]}]}, @NL80211_ATTR_TX_RATES={0x1fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xa2e8, 0x9a, 0x9, 0xfffa, 0x1, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x30, 0xc, 0x35, 0x16, 0x16, 0x4, 0x48, 0x24, 0x1, 0x1b, 0x60, 0x6, 0x4, 0x36, 0x24, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0x12, 0x4, 0x6, 0x48, 0x16, 0x2, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x6, 0x410, 0x0, 0xff, 0x2, 0xff, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x733, 0x8, 0x2, 0x1, 0x4, 0x5, 0x3, 0x59e]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x5, 0x1, 0x3, 0xf7, 0xd, 0xfbff]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0x4, 0xb, 0x2, 0x48, 0x1, 0x5, 0xb, 0x30, 0x6, 0x5, 0xc, 0x48, 0x12, 0x6, 0x1b, 0x5, 0x16, 0xc, 0x18, 0x5, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xffff, 0xfffb, 0x5, 0x5, 0x83fe, 0x400, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x5}, {0x4, 0x4}, {0x5, 0x5}, {0x1, 0xa}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0xa}, {0x7, 0x2}, {0x4, 0x9}, {0x7, 0x2}, {0x1}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x8}, {0x3, 0x9}, {0x4, 0x1}, {0x2, 0x2}, {0x2, 0x5}, {0x7, 0xa}, {0x4, 0x6}, {0x6}, {0x4, 0x7}, {0x1, 0x9}, {0x4, 0x7}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x7}, {0x7, 0xa}, {0x3, 0x1}, {0x1, 0x7}, {0x7, 0x2}, {0x6, 0x1}, {0x6, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x2, 0x6}, {0x5, 0x8}, {0x0, 0x6}, {0x7}, {0x2, 0x8}, {0x7, 0x5}, {0x7, 0x3}, {0x7, 0x5}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0x2}, {0x5, 0x8}, {0x7, 0x1}, {0x6, 0x1}, {0x5}, {0x2, 0x2}, {0x2, 0x5}, {0x6, 0x5}, {0x4, 0x3}]}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x12f, 0x8001, 0x1, 0x4, 0x121, 0x1, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x8}, {0x6, 0x6}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x6}, {0x4, 0xa}, {0x2, 0x6}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0xa}, {0x3, 0x7}, {0x2, 0x8}, {0x1, 0x2}, {0x5, 0x8}, {0x6, 0x7}, {0x6, 0x6}, {0x3, 0x1}, {0x6, 0xa}, {0x1}, {0x1, 0x7}, {0x2}, {0x1, 0x7}, {0x4, 0x6}, {0x2, 0x5}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0x3}, {0x6, 0x3}, {0x4, 0x6}, {0x5, 0x2}, {0x6, 0x7}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x9}, {0x3, 0x3}, {0x1, 0x12}, {0x0, 0x2}, {0x7, 0x5}, {0x7, 0x8}, {0x5, 0x2}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0xa}, {0x7, 0x3}, {0x3}, {0x0, 0x3}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa505, 0x3, 0x27a0, 0x800, 0x5ab, 0xfa0, 0x1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbe2, 0x6, 0x2, 0x2280, 0x5, 0xe, 0x853d, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x7, 0x3}, {0x6, 0x6}, {0x4, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x4, 0x5}, {0x5}, {0x2, 0x5}, {0x4, 0x4}, {0x1, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x264, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7, 0x7}, {0x4, 0x8}, {}, {0x3}, {0x7, 0x3}, {0x6, 0x2}, {0x5, 0x3}, {0x0, 0xa}, {0x7, 0x4}, {0x4, 0x6}, {0x4, 0x8}, {0x7, 0x5}, {0x3, 0x5}, {0x5, 0x9}, {0x6, 0x4}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x4, 0xa}, {0x5}, {0x3, 0x6}, {0x2, 0x4}, {0x2, 0x5}, {0x4, 0x1}, {0x4, 0x5}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x7}, {0x1, 0x7}, {0x1, 0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x3, 0x1}, {0x1, 0xa}, {0x2, 0x6}, {0x6}, {0x3, 0x5}, {0x3, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x4, 0x8}, {0x0, 0x6}, {0x5, 0x4}, {0x3, 0x7}, {0x1, 0x6}, {0x3, 0x2}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x6}, {0x0, 0x9}, {0x6, 0x3}, {0x6, 0x9}, {0x3, 0x3}, {0x3, 0xa}, {0x7, 0x4}, {0x6, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x4}, {0x6, 0x2}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x5, 0xa}, {0x5, 0x8}, {0x5, 0x2}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0xffff, 0x8, 0x0, 0x8, 0x8, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x3}, {0x5, 0xa}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x7}, {0x3, 0x5}, {0x7, 0x7}, {0x3, 0x5}, {0x1}, {}, {0x4, 0x5}, {0x5, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x7, 0x3}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x9}, {0x3, 0x4}, {0x3, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x8}, {0x3, 0xa}, {0x2, 0x3}, {0x7, 0x5}, {0x4, 0x3}, {0x5, 0x6}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x2, 0x3}, {0x1, 0x8}, {0x7, 0x6}, {0x4, 0x1}, {0x4, 0x5}, {0x4, 0x9}, {0x2, 0x8}, {0x1, 0xa}, {0x5, 0x7}, {0x2, 0x9}, {0x6, 0x6}, {0x6, 0x5}, {0x2, 0x8}, {0x1, 0x3}, {0x3, 0x6}, {0x0, 0x5}]}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0xa}, {0x1, 0x4}, {0x3, 0x6}, {0x2, 0x9}, {0x1, 0x6}, {0x5, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x6}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x2}, {0x0, 0x8}, {0x5, 0x8}, {0x1, 0x6}, {0x3, 0x9}, {0x4, 0x3}, {0x7}, {0x5, 0x6}, {0x5}, {0x1, 0x1}, {0x7, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x9}, {0x5, 0x5}, {0x3, 0xa}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0x1}, {0x2, 0xa}, {0x5, 0xa}, {0x7, 0x4}, {0x2, 0x2}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x8}, {0x4, 0x8}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x3}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f8, 0x4, 0x7, 0x7, 0x7, 0xf, 0xffff, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf13, 0x1, 0x68e, 0x0, 0x8, 0xe50, 0xb967, 0xa]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x2, 0x1, 0x1, 0x1, 0x6, 0x5, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfcea, 0x40, 0x400, 0x210, 0x7, 0xfffa, 0xa413, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x6, 0x64, 0x3, 0x60, 0xc, 0x16, 0x3, 0x36, 0x60, 0x4, 0x1, 0x30, 0x48, 0x9, 0x1b, 0x16, 0x62, 0x12, 0x6, 0x60, 0x36, 0x50, 0x48, 0x24, 0x3, 0x60, 0x12, 0xc, 0x1, 0x48]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x24, 0x6c, 0xc, 0x1b, 0x16, 0x24]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x1, 0xfff, 0x1, 0x5, 0x800, 0x7, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0xc7c}, 0x1, 0x0, 0x0, 0x8c0}, 0x20004880) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002300)={'pimreg0\x00', &(0x7f00000022c0)=@ethtool_sfeatures={0x3b, 0x3, [{0x9, 0x3}, {0x5, 0xfffffffa}, {0x400, 0x5}]}}) 2.909810195s ago: executing program 3 (id=1865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000001}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x8895}, 0x40) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x438, 0x0, "45ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b42a870604b55907b7d9f5cc440a9461ae68370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60c85d749598ac313fecd1e4ec6e8dd1995db3286855f34db39"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) 2.733821511s ago: executing program 4 (id=1866): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.468080454s ago: executing program 1 (id=1867): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 2.375895256s ago: executing program 0 (id=1868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)="63e35006da46db9a966285ae31c6ce10e3dd6b9bad9bdae5043067c39179d87d86342fd537494abdfb4e2535b007e740dc80f61196aa66eefefa351757839aec074c3468a55c9862dcb8c451ba20f479c65795dfa729bc0f2d3a15", &(0x7f0000000080)="8df9974254", 0xd5, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000180), &(0x7f00000004c0)=""/69}, 0x20) 2.375338886s ago: executing program 3 (id=1869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="5400000013000500020000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000034001a80300004802c000680080001000100000008000200e8030000080003000300000008000300a0860100080005"], 0x54}}, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000240)={0x8000001, 0x6}, 0x8) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmmsg(r9, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10002, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 2.272867303s ago: executing program 4 (id=1870): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010100}, 0x10) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'macvtap0\x00'}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000080)=0x2, 0x4) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000680)={&(0x7f00000000c0)=0x8, 0x236, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000640)}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xdc, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000980)={0x8, 'vlan0\x00', {'dvmrp1\x00'}, 0x800}) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000ac0)={r0, &(0x7f00000009c0)='@\x00', 0x80000, &(0x7f0000000a00)={@_ha_fsid={[0x6, 0x1]}, {0x8, 0xfffc, 0x6, 0x8}}, 0x2, &(0x7f0000000a40)={@_ha_fsid}, &(0x7f0000000a80)=0xc}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000b00), r2) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000c40)={&(0x7f0000000b40), 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000c80), 0x10) readv(r1, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/171, 0xab}], 0x1) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000dc0)={0x2, 0x0, @remote}, &(0x7f0000000e00)=0x10) getsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000e40)={@local, @broadcast, @private}, &(0x7f0000000e80)=0xc) socket$inet(0x2, 0x80000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) connect$netlink(r6, &(0x7f0000000fc0)=@proc={0x10, 0x0, 0x25dfdbff, 0x40}, 0xc) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001040)={0x480, 0x3f3, 0x8, 0x70bd2c, 0x25dfdbfd, {0x10, 0x2, 0x1, [0x0, 0x10000, 0x5, 0xc, 0xffffff7f, 0xff, 0x8, 0x1, 0x66, 0x1, 0x3, 0x7ff, 0x6, 0xa, 0xdf1, 0xfff, 0x7, 0x5, 0xce, 0xfff, 0x7fffffff, 0x0, 0x800, 0xfffffffd, 0x8001, 0x6a44, 0xa, 0x80000000, 0xff, 0x5, 0x6, 0x7, 0x9b, 0x1, 0x5, 0x9, 0xfffffffd, 0x0, 0x6, 0x1ff, 0xf8, 0xfffffffb, 0xb, 0x8, 0x6, 0x100, 0xd72, 0x8, 0x5, 0x36, 0xb0000000, 0x1, 0x0, 0x6, 0xd, 0x9, 0xe, 0x8001, 0x2, 0xb, 0x5, 0x5f, 0x41, 0x6], [0xfffffffe, 0x7f90, 0x4, 0x3, 0x7ff, 0x4, 0x8, 0x7, 0x0, 0x3ff, 0x9, 0x5a2, 0x1000, 0x9, 0x2, 0x8, 0xecc, 0xffff, 0x4, 0x7, 0x9, 0x6, 0x5, 0x55, 0x1, 0x3ff, 0x0, 0x7, 0x6d2d, 0x0, 0x2, 0x9, 0x80000001, 0x4, 0x3, 0x8, 0x3ff, 0x10000, 0x100, 0x9, 0xb, 0x1, 0x2, 0xfffffff7, 0x100, 0x3ff, 0xd4, 0x5, 0x7, 0xd138, 0xffff, 0x4, 0x3, 0x8001, 0x9, 0x0, 0x9, 0x4, 0x4, 0x3, 0x1, 0x4, 0x80000001, 0x1], [0x2, 0x6bca6bf4, 0x5, 0x401, 0x9, 0xfffffffa, 0xd102, 0x5, 0x9, 0x7, 0x10001, 0x7647, 0x3, 0x80000000, 0x1ff, 0x5, 0xfffffffa, 0x1, 0x1, 0xc, 0x0, 0x5, 0x3, 0x1, 0x390, 0x1, 0xb7, 0x2, 0x7, 0xffff, 0x800, 0x401, 0x10000, 0x1000, 0x80, 0x80000000, 0x4, 0x10, 0x5, 0x80, 0xfffffff9, 0x9, 0x1, 0x8, 0x80000000, 0x2, 0x9, 0x5, 0xb03f, 0x7, 0xf3, 0x8, 0x9, 0x9, 0x13, 0x0, 0xe8b6, 0x0, 0xe, 0x619dbf65, 0x80000001, 0x8, 0x401, 0x40], [0x35e, 0x7, 0xffffff25, 0x8, 0xfffffff5, 0xfffffffc, 0x6, 0xd6a, 0x1, 0xca, 0x5, 0xfffffff8, 0x4, 0x47, 0x9, 0x1, 0x1, 0x8, 0x6, 0x0, 0x80000001, 0x58a2, 0x3, 0x10040, 0x7, 0xcd, 0x7, 0xfffffffb, 0x6, 0x2, 0x2, 0xff, 0x0, 0x7, 0x4, 0x2, 0x6, 0x8, 0x5, 0x7fff, 0x8, 0x3, 0x1, 0x4, 0x800000, 0x100, 0x6, 0x1, 0x8, 0x1, 0x5, 0x6, 0x3, 0x1000, 0x6, 0x3, 0x8001, 0x6, 0xe, 0x0, 0xffffff7f, 0x8000, 0xfffffff8, 0x7], 0x5e, ['source_mac_is_multicast\x00', 'source_mac_is_multicast\x00', 'netdevsim\x00', 'netdevsim', '.\x00', 'wlan0\x00', '+t]),\\{\x00', 'SMC_PNETID\x00']}, ["", ""]}, 0x480}, 0x1, 0x0, 0x0, 0x600620c1}, 0x4040001) pwrite64(r0, &(0x7f0000001540)="a72d1d283a3193135868305a4208175246bf46bc501fd25683f17611f5db559635976b18a535fafdf96b00e74c0857085a09ae7cccea8b", 0x37, 0x3) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000001580)) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000015c0)) r7 = accept(r1, &(0x7f0000001600)=@rc={0x1f, @fixed}, &(0x7f0000001680)=0x80) ioctl$OCFS2_IOC_GROUP_ADD64(r7, 0x40186f03, &(0x7f00000016c0)={0x8001, 0xfa1, 0x7fff, 0x7}) connect$vsock_stream(r7, &(0x7f0000001700)={0x28, 0x0, 0xffffffff, @local}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001740), &(0x7f0000001780)=0xc) 2.001384728s ago: executing program 1 (id=1872): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112de000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r0, &(0x7f0000000000)={0x3, 0x0, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r4, 0xb03}, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x4f3e}]}}}]}, 0x3c}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000080)=0xf4, 0x4) 1.988762882s ago: executing program 0 (id=1873): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000080)={0x10, 0x3b, 0x1}, 0x10}, {&(0x7f0000000280)=ANY=[@ANYBLOB="0000007cc37849db7d72f2106aa57af4c6ea0fa5f5a12867384c7158720196f0800c0f0788aa46f59dec1d09250b64ce7fb6b933794c5b2afe2d1aacd0d2007a96d8"], 0x10}], 0x2}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32, @ANYRES64=r0, @ANYRES64=r1], 0x17c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r4) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="04a11deb9b3d90373b708f6f57c355a369a5f9de7bf51f0a", @ANYRES32=r7, @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x400c000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000037c00000400c2800c00018006000600894f"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc000) 1.690925062s ago: executing program 1 (id=1875): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x605, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x34}}, 0x4000801) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001000400000008000400", @ANYRES32=r3], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110005cf000000000000000200000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 1.529269125s ago: executing program 0 (id=1877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f00003f9000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000e1ff30c2add443ff2bf3ec1eac33f43fc0f207dcfd3d16d563c411fef2b0b3af3764788aba92fed7516f308eca5e76e4428bf1f758"]) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000580)=ANY=[@ANYBLOB="d0070000", @ANYRES16=r7, @ANYBLOB="200026bd7000fcdbdf253b0000000c0099007f00000007000000cf023300b0acf500ffffffffffff080211000001ffffffffffff7c00a60a0a81010004004d00100163dde649ece5f211e7fb4675a5f6d621358e347fbf1f4133b350a44851f177d1a3b18f291b13b76566b0de78c236fa92ae6222ce4c59075fcffef762e9b778a5154b7a13bfd6a180030f043b095207c3cb4626b15dbb581e989e5c9d98f6c385ddbdb5bfa522c17c6a1fd206fc0444d5053c91a406dbcce13715b1f15c64a23e246cea88c040f96d906f3ec75239c6cd768155c76a86b8b8830a5827da3582b616f07697945ab2871367ef686c31c75498ee76e22e699ecc59475cf77fa77d1c06e939e157ef9181f038aa2f253e9ebf53c02fb653b0c569f11ba7f6756ec0b74b6e176dcbdf2694acf55d57205588f6e06e4287d18d49118459082cb1fca98c6d9888ae5f918be8266057660b42186738b499bf683173c994e07bb0fddc72a9b8efa213ac6e2f699b139d828eb1b96a349905c27c8cbc88a1f274cb1edb3fe04cdbc8c1884d882492010c83a09db83701bb0aaa09a05c83e9f6c35dbb52cfe7522c0a8d5ae2f2a51b95c333a1451d89dc1574104494b67117e53150184a5e560f859d633cacb9d4ddadcad040541ef730376830d6db5fdd622f3c40563e567001d312948d9a2e060bc195b8ad277e50ab973c34a1bcbfbef4f77150f91ed6c75cd59b20a2b5688254a1fdf8b6599d431d9a71c667fb8f90793f54824d48e8460190e0d1d595405ea0571c49e2f5718710752d6d9afc32c82f99acdd34b8625ebf0c28a4bab5801d14861dca0f3e401fabfbb730beb573c316e8d54470eebac8c3caeb0f3ecaee03fbbaf0c5b5d2847318dd6416b3f424d6dcaa0f580d6b5b27f1ab478fc84329235369d2b15b1b96c8adb49a35846a08a70259c1d2476c817b2aec3d53ac273148b4d58cf580777c471d45bf48a2839357f92d34f37fabab61ce17a363b46979cee9c9be5fa9d022457305bcafc9d918000800a1000200000008009f00050000000800a1000900000008009f000600000004006c00080057007e0e00000800a100000200000800a0000300000004008e00a0043300009c0000080211000001080211000000505050505050a500000102010400ff0700060101010101012d1a00801601010000000000000f006a000f00000008000900000001dd2906e88da3e245914836ad701a8ff38b7429e4b62015e6aae79e2819b16dde5ad42c05a7dd45ecc4089fddd4e4cdc18de142cae59c57b9903b2120288d9fc4e5785df461c0a678cfad862816bd01d9c6b6134ec440a80af8178f798404f606bf87f0b6a20069a572e42d105eb35ac24d620fd2701ae72fe2bd3b5dfd89c0b05817f493cb158fd33b31f02a782d86ef07f15dc5350b1bcb8f7fa6737f88fab2378631ff3a48720c1cc6dfd6525312164701ae3a097e7a61ed086839c3bcb0b2539cbebbd2f275d6e0950949b464203df26d448d7c6a4b4219bafdc87e807932f242fefb3407eb69973bb90b9d3aa9d93037d3749e5f509e3e9f9ffc58feddbdfaaa44f7b561e3d3bed12cf39a29f5ec885ed20a461aba2088beafcaa2271e088cfdc0f503f4098441a31825ea9d6f2fca31aebe7564ba424d469868f7114c4a72e8f5198cd7a8a29c5279dc1892a08f3c1696326d502502703402c1226939a7a6be6edcfe78c23adb531c996a74f069858bca27041cb54f55d2b81772173c28888df1eb4f47db40a77fc55271865e13443df459ff129a03e228c53b70e687fc0fb63753e86f2bc042f1af8958596a6288e1468d58d3345b3adc736484dd43efdc720036596d6c742a92b8aec29769a61094f3362bd3b477809ca29c605005fff6282af74e34ac5898c90371c309f3a18328977ac7ddad4eea57b5322d098a738af8ddb5be95b1fa5f1d79d85360588053d18794670b4c9ea00cd2ec401e3023d3acc5505f8b7c6c43f63465d17084822ff3fc3d70b7673a220d7dfec0bc859f81c01c94585e877585d9eb53f50eba242d684297d2aee380aed8e30120437182a8de681bc040b264c076eb07205abd8c68557b269174a8b9aef0c66f1bceae714fd2c6b0a24d33239446f8b4e221c5e0478226706703cd4644abcace7bc0d3eab5c407853bb0c0e3018bf184354b3db8c12f6b78e8b0c438f8ddbc100c63f287b87285e3930e949fc1c79449297bd60b54be946bc8a8d2271b795e1baf5e3adbaa820a6605a4a2f9c9298c684162c52c3446c2ddb353cc1852fd23fb9024a0bd700a86e3a48d253caac848750a38ad9377cb1d1cc7feebbd1ccd2b2bef1e135246475d75fd149652052c10deae63bda03ef707691a8844eac3706757136f80b737df65d5ab7173d75cb6572ef790fa3ee011bbd3f7fe84ce83cfe273f0b9fe1ce2ca266a917f10734802d9eda9a2448deef9233c49ff41dddc0910ac577d826c4a84abd217c1de988e369fe6ff5d30c43681f2ef93cc8b8c5844ff540abbfad45ace13045646235c3d6a5db7d66a1d23152d88abe5c3a524f52b2bdb09ab95bfa72eb3c303e1d262e300b195982d198bd527d53865c7ab11d903bdd2b76dc15b9c99d412486d2599a2d7715fec5294dbbc1d0d482e69dd69b0b08877f7991915a3718320a5035570ac688684726b2e16433ee21d810189c12280a964e7abaec9d0398a91f190a36bdf6595d100b30688711b11ed7db138ef667c15dea58be8978c2bb4c2b352485c877a5af997971832febc13239500"/1994], 0x7d0}, 0x1, 0x0, 0x0, 0x8044}, 0x40094) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r8], 0x2c}}, 0x4000000) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) 1.259825567s ago: executing program 0 (id=1878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e21381283bf8a01be70deccac2c9bce8a8ea365f060b795c3238d7219c2d3020933c9c39c6d0cbc957ec3f682cac392c2a627a0c386f59681fdfd5ea467e2db933c4ae7a5aafaa8c86de5dfdc5ed01a788fc636bf7a8062bebeff23", 0x84}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b0001007461726765740000400002802c000300000000000455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff50000000000000000000000000800024000000000080001004c4544000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c001000041000100fcff070004000000030000008f014880040008"], 0x1c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.250374893s ago: executing program 2 (id=1879): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x30}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705b96d000000000000000088fb", 0xe}], 0x1}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) 1.140793879s ago: executing program 3 (id=1880): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x800, 0x70bd25, 0x25dfdbfd, {0x12}}, 0x14}}, 0x4000080) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2d, 0x25dfdbfc, {0x2, 0x20, 0x7b, 0xcb, r4}, [@IFA_FLAGS={0x8, 0x8, 0x30}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x105}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x800, 0x70bd25, 0x25dfdbfd, {0x12}}, 0x14}}, 0x4000080) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2d, 0x25dfdbfc, {0x2, 0x20, 0x7b, 0xcb, r4}, [@IFA_FLAGS={0x8, 0x8, 0x30}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x105}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) 1.112603269s ago: executing program 1 (id=1881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c001000041000100fcff070004000000030000008f014880040008"], 0x1c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x28, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x4040080) 1.065195042s ago: executing program 4 (id=1882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000600)="551aa18662c0b4814065677527104b9b8e30b41f80fef290f3a339d78b0571ad31420b77de6cc7708e52c450d82e4d21ed40576ef5310def7cb56c5a39dacc6131c658ab7e571b4326a2bb353c28a63b0065434b5781a752c70f2c54fb3b6c035e895797faf9647b2d87e56b85a783ac3d18fb21f2426ba64fc97126d6c438d77ad8c89d5fa0fabed8403d249612f2de60d42bf94fd7d858d4a6b1e144c8042da96577ae9266cbd73594f2", 0x5003, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r1, &(0x7f0000000380), &(0x7f00000004c0)=""/172}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x4020) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r5, &(0x7f0000000180)={0x27, @short}, 0x14) poll(&(0x7f0000000280)=[{r0, 0x82}], 0x1, 0xfffffffa) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc09323"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r7}, 0x8b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r7, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0x152, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0xa, 0x6, "0ba883", 0x11c, 0x6, 0xff, @rand_addr=' \x01\x00', @empty, {[@fragment={0x6c, 0x0, 0x0, 0x0, 0x0, 0x18, 0x67}, @fragment={0x89, 0x0, 0x3, 0x1, 0x0, 0x0, 0x68}, @routing={0x87, 0x10, 0x2, 0xf5, 0x0, [@mcast2, @local, @mcast1, @mcast2, @local, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback]}, @hopopts={0x62, 0x9, '\x00', [@hao={0xc9, 0x10, @mcast2}, @jumbo, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0x2, 0x8b69, 0xfffffffffffffffe, 0x7]}}, @enc_lim, @ra={0x5, 0x2, 0x4}]}, @hopopts={0x2, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x1}]}], @payload_conn={{{0x1c, 0x0, 0x1, 0x1, 0x1, 0x6, 0x2, 0x2, 0x6, 0x0, 0x2, 0xc, 0x4, 0x0, 0x4, 0x8001, 0x1, 0x4e20, 0x4e21}}, [0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 972.515942ms ago: executing program 2 (id=1883): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000000c0)='\x00e\xa9f\x9e\xbbT}\x15\x91H\x93sW\x94\b\xa2\xf0Es&\xc7\xf8\x8c\xc8\xb1&\x12\xebS\x98\xf3C]A\xf5$\x1e\xf5g|a\xc0\r\x00\x00', 0xff1e) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r2}) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002f00)=""/4082, 0xff2}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000100)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/234, 0xea}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000040)=""/187, 0xbb}, {&(0x7f0000000600)=""/190, 0xbe}, {&(0x7f0000000500)=""/132, 0x84}], 0x9}, 0x10102) 893.41301ms ago: executing program 0 (id=1884): mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xf7a32000) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0900807000fdffff9502c3b80c858b3b6697d2", @ANYRES32=0x0, @ANYBLOB="29000000000400001c00128009000100626f6e64000000000c00028008001f0004000000"], 0x3c}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f00000000c0)='bond\x00', 0x2080, &(0x7f0000000100)={@_ha_fsid={[0x200]}, {0x7, 0x7, 0x458, 0xb}}, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x2}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x84) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r9, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x4008040) 871.584549ms ago: executing program 3 (id=1885): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x542}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x11, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30d33, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 731.066827ms ago: executing program 2 (id=1886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a0b0400000000000000000200000008000a40000000010930000000000900020073797a3200000000140000001100010000000000000000000000000a000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x20040010) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) syz_emit_ethernet(0x9b, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa810044000800476d00890066000081069078ac1e0101ac1e01019404010044243733ac1414bb00000007e000000100000002ac1e0101000000096401010200000005830f49ac1e0101e0000001ac1414308211a2f45f6c2c47948839aa5645dad41a0000000000000000000000000000000000004e2300fc4d240000000300"/155], 0x0) recvmmsg(r1, &(0x7f0000003940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe90}}], 0x1, 0x41, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000042000100000000000000002003010000000000002600010000912233445566778899aabb0800560000140000000001170000010203040506070800000c0002000600060086dd00000c0003000800170004000000d73b3bedc1fba22666a74f00f39a61daf75b7041be21d5784781493cc5c13bf87f860f4b0b74a0b0b6635ea15af2cf8c6c516b6cbc1ce1b5f63376bbfcee0bef7853e503ebf4408fde64e381a1471c0518f0c7460dfa3e743c76db00eb848e5d"], 0x58}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000440)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e038e48b744a6cfb4579b500000000", @ANYRES16=0x0, @ANYBLOB="510626bd7000fbdbdf25010000000900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async, rerun: 32) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) (rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572406c000000060a010400000000000000010a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a32"], 0x15c}}, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={r10, 0xfffffffc}, 0x8) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) r11 = socket$l2tp6(0xa, 0x2, 0x73) close(r11) (async) socket$unix(0x1, 0x5, 0x0) 613.797317ms ago: executing program 1 (id=1887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='yeah', 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x11, r1, 0x180000000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x6a, '\x00', {0x0, 0x6, "ed906b", 0x8, 0x3a, 0xfe, @dev={0xfe, 0x80, '\x00', 0x31}, @dev={0xfe, 0x80, '\x00', 0x36}}}}}}}}, 0x0) sendmmsg$inet(r5, &(0x7f0000000340)=[{{&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4044800) readv(r5, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/90, 0x5a}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r4, 0xffffffffffffffff}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x8901, &(0x7f0000000040)={r8}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r10, r11, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x24fcd8a3}}], &(0x7f0000000540)='syzkaller\x00', 0x8, 0x0, 0x0, 0x100, 0x2, '\x00', r2, 0xc, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x5, 0x23ba, 0x401}, 0x10, 0x1076c, r10, 0x7, &(0x7f0000000680)=[r7, r7, r12, r4, r7, r4, r4, r7, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x4, 0x3, 0x4, 0x2}, {0x2, 0x5, 0x1000, 0x5}, {0x4, 0x1, 0xe}, {0x0, 0x3, 0x5, 0x1}, {0x4, 0x2, 0x689, 0xc}, {0x2, 0x2, 0x7, 0x4}, {0x4, 0x2, 0xd, 0xb}], 0x10, 0x2}, 0x94) sendmsg$inet(r8, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="df9fade491b9f8ae3bc28151225f86933f598f551a8e5b4f0b71b3d90888975322fc810495711596cad74490b64322ce0200000000000000ed63650fb1b65e817575e2e12d78415fe7f1ccf3e6433c927deed28c1977a1786a7f0a37e6872ccc26c36f5df779a4bccae4f3e4e8d5b8256ee07cf79b94ff9bf7ec422d32489ca4eab21ff4441280463b05bb93c3b406b6cec50ef98951e8b1e6e87bda1e8b4449fb0cd9d9e49ff6640286d7ce60c2d4e5779398961f2e858d6d37784d8197a783eeb6f869d18cbfb0dcdb23eb7871f9b338", 0xd1}], 0x1}, 0x24004011) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 408.163665ms ago: executing program 2 (id=1888): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1407, 0x1}, 0x10}}, 0x0) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xffffffff) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x4, 0x2, 0x2}, &(0x7f0000000040)=0x10) (async, rerun: 64) r3 = socket(0x40000000015, 0x5, 0x0) (async, rerun: 64) syz_emit_ethernet(0x8e, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x58, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d"}}}}}}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) splice(r4, 0x0, r5, &(0x7f0000000040), 0x8f5, 0x0) (async, rerun: 32) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 32) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffffc}, 0x1c) 282.231935ms ago: executing program 2 (id=1889): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x7, 0x7fffffff}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x10000}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6af01, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000b00)="13000000010203", 0x7}, {&(0x7f0000000040)="6327642f586b16", 0x7}], 0x2) 108.753058ms ago: executing program 4 (id=1890): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000000)=0xffffffe1, 0x4) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000080)=0x9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x9, 0x6, 0x47, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 36.125005ms ago: executing program 2 (id=1891): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYBLOB="719f7a3ade46500e5b8d51f993a2452c0000f980e9c67900ef0300082900000000dbdf2575516bf10000000000000000009feba2328470d30b7e734d0d0a77c8fd7276ed30292b206b48b797e9ab91f0fd27b7c029c400"/97], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x1b57529485109bbb) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0026452edb00020000000000000000000004000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000e01000700000000000000000000ffff0000000200000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) recvmsg(r10, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=""/4102, 0x1006}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x118, 0x18c, 0x203, 0x118, 0x19030000, 0x298, 0x2e0, 0x2e0, 0x298, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xf0, 0x118, 0x0, {0x1000000}, [@common=@unspec=@limit={{0x48}, {0x7a, 0x7f, 0x40, 0x8, 0xe6, 0x75800a43, 0xfffffffffffffff9}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x10, 0x2}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x8, 0x5, 0x9, 0x81, @private0, @mcast2, @loopback, [0x0, 0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 0x46}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6cb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x2c, r14, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0xfffffff5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x2c}}, 0x0) r16 = socket(0x1d, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r18, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "000000000000000000000500"}}}]}, 0x48}}, 0x0) 0s ago: executing program 3 (id=1892): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x4000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00'}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0xc207, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x97fe}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000440), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xa, 0x4e1e, 0x3, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): [1, 0] type 2 family 0 port 6081 - 0 [ 100.783079][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.791589][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.802390][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.804830][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.832821][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.873917][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.895031][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.914184][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.946785][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.985570][ T5639] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.030447][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.039004][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.175889][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.187219][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.196042][ T155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.294937][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.310567][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.393773][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.470632][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.478685][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.498627][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.532390][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.572566][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.596402][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.614021][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.691637][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.702358][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.711138][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.731023][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.831544][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.840265][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.902301][ T1113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.978313][ T155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.996469][ T155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.042783][ T155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.132658][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.315585][ T155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.607437][ T5850] erspan0: entered promiscuous mode [ 102.938433][ T5872] netlink: 'syz.4.17': attribute type 2 has an invalid length. [ 103.016776][ T5876] netlink: 'syz.2.19': attribute type 2 has an invalid length. [ 103.061053][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'. [ 103.235574][ T5885] Zero length message leads to an empty skb [ 103.698969][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 103.717894][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 103.740304][ T5910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.31'. [ 103.994280][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 104.285819][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.38'. [ 104.366537][ T5935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.393845][ T5926] bond1: entered promiscuous mode [ 104.410122][ T5926] bond1: entered allmulticast mode [ 104.443970][ T5926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.784195][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.45'. [ 104.819129][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 105.104480][ T5964] syz.3.47 uses obsolete (PF_INET,SOCK_PACKET) [ 105.178584][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 105.236898][ T5970] netlink: 176 bytes leftover after parsing attributes in process `syz.2.50'. [ 105.267166][ T5970] netlink: 'syz.2.50': attribute type 5 has an invalid length. [ 105.819509][ T6000] netlink: 'syz.1.60': attribute type 14 has an invalid length. [ 106.317467][ T6023] syzkaller0: entered promiscuous mode [ 106.341728][ T6023] syzkaller0: entered allmulticast mode [ 106.799205][ T5287] veth1_vlan: left promiscuous mode [ 127.767682][ T6106] netlink: 'syz.2.70': attribute type 1 has an invalid length. [ 127.956453][ T6122] hsr0: entered allmulticast mode [ 127.983235][ T6122] hsr_slave_0: entered allmulticast mode [ 128.001230][ T6122] hsr_slave_1: entered allmulticast mode [ 128.018342][ T6127] __nla_validate_parse: 1 callbacks suppressed [ 128.018360][ T6127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.75'. [ 128.034715][ T6127] netlink: 'syz.0.75': attribute type 7 has an invalid length. [ 128.054742][ T6127] netlink: 'syz.0.75': attribute type 8 has an invalid length. [ 128.065547][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 128.429269][ T6143] netlink: 260 bytes leftover after parsing attributes in process `syz.4.80'. [ 128.659730][ T6154] netlink: 256 bytes leftover after parsing attributes in process `syz.0.84'. [ 128.766602][ T6154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'. [ 129.312588][ T6186] netlink: 344 bytes leftover after parsing attributes in process `syz.3.91'. [ 129.329837][ T6187] netlink: 'syz.2.90': attribute type 3 has an invalid length. [ 129.380135][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.90'. [ 129.420355][ T6187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.90'. [ 129.493983][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 129.681560][ T6203] netlink: 'syz.4.96': attribute type 1 has an invalid length. [ 129.806524][ T6210] netlink: 'syz.0.98': attribute type 16 has an invalid length. [ 129.826081][ T6208] netlink: 27 bytes leftover after parsing attributes in process `syz.4.96'. [ 129.844780][ T6210] netlink: 'syz.0.98': attribute type 17 has an invalid length. [ 129.870259][ T6203] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 130.493975][ T6234] netlink: 'syz.1.105': attribute type 11 has an invalid length. [ 130.515607][ T6234] sctp: [Deprecated]: syz.1.105 (pid 6234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.515607][ T6234] Use struct sctp_sack_info instead [ 130.679218][ T6243] pim6reg527: entered allmulticast mode [ 131.039873][ T6257] vlan2: entered promiscuous mode [ 131.045320][ T6257] geneve1: entered promiscuous mode [ 131.050921][ T6257] vlan2: entered allmulticast mode [ 131.056643][ T6257] geneve1: entered allmulticast mode [ 131.220181][ T6265] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 131.242679][ T6265] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 131.274067][ T6268] netlink: 'syz.1.116': attribute type 29 has an invalid length. [ 131.289393][ T6265] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 131.360161][ T6265] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.430758][ T6265] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 131.672721][ T57] smbdirect: ib_dev[syz2] removed [ 131.787270][ T6300] netlink: 'syz.2.122': attribute type 8 has an invalid length. [ 132.119494][ T6312] netlink: 'syz.4.125': attribute type 1 has an invalid length. [ 132.248298][ T6312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.314480][ T6321] bond1: (slave gretap1): making interface the new active one [ 132.359320][ T6321] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 132.520994][ T6319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.830445][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.843734][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.029387][ T6346] __nla_validate_parse: 9 callbacks suppressed [ 133.029414][ T6346] netlink: 85 bytes leftover after parsing attributes in process `syz.4.133'. [ 133.184685][ T6360] sctp: [Deprecated]: syz.2.136 (pid 6360) Use of int in max_burst socket option deprecated. [ 133.184685][ T6360] Use struct sctp_assoc_value instead [ 133.335477][ T6360] netlink: 232 bytes leftover after parsing attributes in process `syz.2.136'. [ 133.599598][ T6376] tipc: Started in network mode [ 133.628429][ T6376] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 133.657178][ T6376] tipc: Enabled bearer , priority 10 [ 133.672848][ T6373] netlink: 'syz.0.139': attribute type 3 has an invalid length. [ 133.696441][ T6373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.139'. [ 133.727554][ T6380] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 133.861060][ T6385] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 133.902998][ T6385] netlink: 48 bytes leftover after parsing attributes in process `syz.4.145'. [ 133.979359][ T6396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.148'. [ 134.010131][ T6396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.148'. [ 134.276892][ T6404] syzkaller1: entered promiscuous mode [ 134.286848][ T6404] syzkaller1: entered allmulticast mode [ 134.324900][ T6404] netlink: 'syz.3.150': attribute type 21 has an invalid length. [ 134.351704][ T6404] netlink: 'syz.3.150': attribute type 21 has an invalid length. [ 134.385680][ T6404] netlink: 'syz.3.150': attribute type 21 has an invalid length. [ 134.568844][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.577569][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.773899][ T29] tipc: Node number set to 10136234 [ 134.857992][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 134.880295][ T6429] netlink: 2 bytes leftover after parsing attributes in process `syz.1.158'. [ 135.077438][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'. [ 135.194138][ T6441] xt_hashlimit: size too large, truncated to 1048576 [ 135.266719][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 135.586923][ T6461] sctp: [Deprecated]: syz.2.165 (pid 6461) Use of int in maxseg socket option. [ 135.586923][ T6461] Use struct sctp_assoc_value instead [ 135.838423][ T6465] trusted_key: syz.1.167 sent an empty control message without MSG_MORE. [ 137.125361][ T6503] netlink: 'syz.0.180': attribute type 1 has an invalid length. [ 137.290500][ T6503] bond1: entered promiscuous mode [ 137.318520][ T6503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.684343][ T6520] bridge_slave_0: left allmulticast mode [ 137.731711][ T6520] bridge_slave_0: left promiscuous mode [ 137.764339][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.029050][ T6520] bridge_slave_1: left allmulticast mode [ 138.045012][ T6520] bridge_slave_1: left promiscuous mode [ 138.060213][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.175893][ T6520] bond0: (slave bond_slave_0): Releasing backup interface [ 138.257283][ T6520] bond0: (slave bond_slave_1): Releasing backup interface [ 138.307050][ T6520] team0: Port device team_slave_0 removed [ 138.329783][ T6520] team0: Port device team_slave_1 removed [ 138.346890][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.356237][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.366121][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.375731][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.386221][ T6520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 138.578075][ T6530] syzkaller0: entered promiscuous mode [ 138.587099][ T6530] syzkaller0: entered allmulticast mode [ 138.600704][ T6533] netlink: 'syz.2.185': attribute type 20 has an invalid length. [ 138.618091][ T6533] __nla_validate_parse: 7 callbacks suppressed [ 138.618112][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 138.640585][ T6526] team0: Mode changed to "loadbalance" [ 139.127780][ T6543] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.148702][ T6452] Set syz1 is full, maxelem 65536 reached [ 141.314944][ T6533] netlink: 'syz.2.185': attribute type 20 has an invalid length. [ 141.322919][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 141.342324][ T1113] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.354846][ T1113] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.389238][ T6551] geneve2: entered promiscuous mode [ 141.548646][ T6563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.193'. [ 141.673390][ T155] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.742113][ T155] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.851050][ T6572] netlink: 256 bytes leftover after parsing attributes in process `syz.1.195'. [ 142.010353][ T6582] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 142.279487][ T6593] veth0: entered promiscuous mode [ 142.305926][ T6592] veth0: left promiscuous mode [ 142.335517][ T6596] openvswitch: netlink: Duplicate or invalid key (type 0). [ 142.365366][ T6599] openvswitch: netlink: Duplicate or invalid key (type 0). [ 142.400577][ T6603] Bluetooth: MGMT ver 1.23 [ 142.450582][ T6603] netlink: 'syz.0.206': attribute type 21 has an invalid length. [ 142.473019][ T6603] netlink: 132 bytes leftover after parsing attributes in process `syz.0.206'. [ 142.634165][ T6608] veth0: entered promiscuous mode [ 142.648012][ T6612] netlink: 32 bytes leftover after parsing attributes in process `syz.1.209'. [ 142.680252][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 142.725641][ T6606] veth0: left promiscuous mode [ 142.732287][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 142.762180][ T6616] netlink: 56 bytes leftover after parsing attributes in process `syz.2.210'. [ 142.894252][ T6623] netlink: 'syz.1.212': attribute type 1 has an invalid length. [ 143.337174][ T6649] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 143.577898][ T6655] syzkaller1: entered promiscuous mode [ 143.652608][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 143.684534][ T6655] syzkaller1: entered allmulticast mode [ 143.724339][ T6670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.223'. [ 144.067216][ T6674] macsec1: entered promiscuous mode [ 145.034095][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.044399][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.146791][ T6705] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 145.349845][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 145.364011][ T6726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.524649][ T6730] netlink: 277 bytes leftover after parsing attributes in process `syz.1.234'. [ 145.571617][ T6730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.234'. [ 146.010804][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 146.382896][ T6774] netlink: 244 bytes leftover after parsing attributes in process `syz.2.248'. [ 146.438161][ T6774] IPVS: length: 218 != 24 [ 146.578107][ T6786] netlink: 240 bytes leftover after parsing attributes in process `syz.4.247'. [ 146.598259][ T6787] netlink: 52 bytes leftover after parsing attributes in process `syz.0.250'. [ 146.622078][ T6788] netlink: 'syz.1.251': attribute type 2 has an invalid length. [ 146.651870][ T6787] netlink: 76 bytes leftover after parsing attributes in process `syz.0.250'. [ 146.670061][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.677485][ T6787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.730157][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.044403][ T6802] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 147.082340][ T6802] Cannot find map_set index 2 as target [ 147.314859][ T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.341884][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.413635][ T6814] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 147.418341][ T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.483612][ T57] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.666355][ T6825] openvswitch: netlink: Flow key attr not present in new flow. [ 147.888599][ T6832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.919712][ T6836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.958141][ T6835] tipc: Started in network mode [ 147.972518][ T6835] tipc: Node identity 2003, cluster identity 4711 [ 147.995265][ T6835] tipc: Node number set to 8195 [ 148.526136][ T6858] netlink: 'syz.3.268': attribute type 22 has an invalid length. [ 148.674146][ T6858] netlink: 'syz.3.268': attribute type 22 has an invalid length. [ 148.682507][ T57] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.712324][ T6858] __nla_validate_parse: 7 callbacks suppressed [ 148.712345][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 148.736389][ T57] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.805299][ T57] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.847723][ T57] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.915874][ T6876] netlink: 'syz.1.274': attribute type 1 has an invalid length. [ 149.197820][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 149.227928][ T6894] openvswitch: netlink: Message has 4 unknown bytes. [ 149.764361][ T6920] bond1: option lp_interval: invalid value (0) [ 149.773038][ T6920] bond1: option lp_interval: allowed values 1 - 2147483647 [ 149.802037][ T6920] bond1 (unregistering): Released all slaves [ 151.891283][ T6875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.120300][ T6958] netlink: 236 bytes leftover after parsing attributes in process `syz.4.285'. [ 152.335025][ T6964] veth1_macvtap: left promiscuous mode [ 152.416885][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 152.449358][ T6973] syzkaller0: entered promiscuous mode [ 152.478168][ T6973] syzkaller0: entered allmulticast mode [ 152.636963][ T6980] xt_TPROXY: Can be used only with -p tcp or -p udp [ 152.937610][ T6996] netlink: 32 bytes leftover after parsing attributes in process `syz.1.300'. [ 152.951702][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'. [ 152.987165][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 153.019972][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'. [ 153.066232][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 153.379722][ T7033] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 153.389032][ T7033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.307'. [ 153.523832][ T7035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.561197][ T7026] syzkaller1: entered promiscuous mode [ 153.572577][ T7026] syzkaller1: entered allmulticast mode [ 153.944387][ T7058] netlink: 'syz.3.314': attribute type 21 has an invalid length. [ 153.973482][ T7058] netlink: 'syz.3.314': attribute type 6 has an invalid length. [ 153.984522][ T7058] __nla_validate_parse: 5 callbacks suppressed [ 153.984539][ T7058] netlink: 132 bytes leftover after parsing attributes in process `syz.3.314'. [ 154.103255][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 154.172902][ T7066] netlink: 'syz.1.316': attribute type 29 has an invalid length. [ 154.210138][ T7069] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.318'. [ 154.306085][ T7062] team0: Port device team_slave_0 removed [ 154.356554][ T7069] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 154.375293][ T7069] 0ªX¹¦Dö»: entered allmulticast mode [ 154.487528][ T7078] veth1_to_bond: entered allmulticast mode [ 154.531144][ T7078] veth1_to_bond: left allmulticast mode [ 154.581658][ T7083] vlan3: entered promiscuous mode [ 154.593618][ T7083] bridge0: entered promiscuous mode [ 154.803215][ T7080] bond2: Unable to set up delay as MII monitoring is disabled [ 154.867894][ T7080] bond2 (unregistering): Released all slaves [ 155.494712][ T7121] netlink: 48 bytes leftover after parsing attributes in process `syz.3.333'. [ 155.716635][ T7126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.334'. [ 155.746872][ T7126] netlink: 44 bytes leftover after parsing attributes in process `syz.3.334'. [ 156.405352][ T7144] netlink: Unknown conntrack attr (type=12336, max=9) [ 156.416393][ T7144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.490174][ T7147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.861491][ T7097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.076456][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.341'. [ 158.086811][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.341'. [ 158.231134][ T7161] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.448809][ T7163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.343'. [ 158.546165][ T7179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.869814][ T7195] netlink: 72 bytes leftover after parsing attributes in process `syz.0.352'. [ 159.029244][ T7195] netlink: 'syz.0.352': attribute type 3 has an invalid length. [ 159.105938][ T7195] __nla_validate_parse: 2 callbacks suppressed [ 159.105958][ T7195] netlink: 72 bytes leftover after parsing attributes in process `syz.0.352'. [ 159.215443][ T7209] netlink: 220 bytes leftover after parsing attributes in process `syz.3.356'. [ 159.755427][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 160.243934][ T7233] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 160.307141][ T7233] bond2: (slave gretap1): making interface the new active one [ 160.315823][ T7233] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 160.673984][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 160.710650][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 160.751166][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 160.857068][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 160.918832][ T7272] netlink: 'syz.4.377': attribute type 1 has an invalid length. [ 161.274376][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.382'. [ 161.294315][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'. [ 161.321927][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 162.241081][ T7341] bond1 (unregistering): Released all slaves [ 162.393637][ T7354] netlink: 'syz.0.397': attribute type 10 has an invalid length. [ 162.432875][ T7354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.898256][ T7378] netlink: 'syz.1.406': attribute type 4 has an invalid length. [ 162.960805][ T7380] netlink: 'syz.1.406': attribute type 4 has an invalid length. [ 162.991698][ T7386] netlink: 'syz.1.406': attribute type 4 has an invalid length. [ 163.053173][ T7388] netlink: 'syz.0.407': attribute type 15 has an invalid length. [ 163.331588][ T7394] sctp: [Deprecated]: syz.2.410 (pid 7394) Use of int in maxseg socket option. [ 163.331588][ T7394] Use struct sctp_assoc_value instead [ 163.393854][ T7408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.402524][ T7408] IPv6: NLM_F_CREATE should be set when creating new route [ 163.409887][ T7408] IPv6: NLM_F_CREATE should be set when creating new route [ 163.443450][ T7409] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 163.457514][ T7399] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 163.481433][ T7399] syzkaller1: group set to 0 [ 163.735847][ T7409] bond2: (slave bridge1): making interface the new active one [ 163.767392][ T7409] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 163.999184][ T7429] lo: entered promiscuous mode [ 164.046843][ T7429] tunl0: entered promiscuous mode [ 164.115744][ T7429] gre0: entered promiscuous mode [ 164.242662][ T7429] gretap0: entered promiscuous mode [ 164.443750][ T7449] __nla_validate_parse: 10 callbacks suppressed [ 164.443772][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 164.463028][ T7429] erspan0: entered promiscuous mode [ 164.486535][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 164.508875][ T7429] ip_vti0: entered promiscuous mode [ 164.573953][ T7432] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 164.749674][ T7456] Bluetooth: MGMT ver 1.23 [ 164.766596][ T7458] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 164.906758][ T7467] x_tables: duplicate entry at hook 4 [ 164.939835][ T7465] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 164.983677][ T7465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.431'. [ 165.011934][ T7465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.431'. [ 165.145919][ T7465] geneve2: entered promiscuous mode [ 165.225660][ T7474] vlan2: entered allmulticast mode [ 165.236042][ T7474] bond0: entered allmulticast mode [ 165.252968][ T7476] syzkaller0: entered promiscuous mode [ 165.260392][ T7476] syzkaller0: entered allmulticast mode [ 165.297916][ T7479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.436'. [ 165.359688][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 165.371746][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 165.423047][ T7479] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 165.784985][ T7488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.438'. [ 166.023351][ T7495] syzkaller0: entered promiscuous mode [ 166.033482][ T7495] syzkaller0: entered allmulticast mode [ 166.096462][ T7501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.442'. [ 166.594114][ T7521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.448'. [ 166.754518][ T7527] netlink: 'syz.3.448': attribute type 58 has an invalid length. [ 166.944126][ T5632] block nbd0: Receive control failed (result -32) [ 167.410303][ T7557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.153119][ T7589] dvmrp8: entered allmulticast mode [ 168.181669][ T7593] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.404025][ T7595] netlink: 'syz.4.468': attribute type 5 has an invalid length. [ 168.688720][ T7601] netlink: 'syz.4.471': attribute type 10 has an invalid length. [ 168.764999][ T7601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.798526][ T7601] batadv0: entered allmulticast mode [ 168.832685][ T7601] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 169.081956][ T155] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.117459][ T155] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.160804][ T155] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.197645][ T155] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.548167][ T7638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.611428][ T7644] __nla_validate_parse: 7 callbacks suppressed [ 169.611447][ T7644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.482'. [ 169.960724][ T7660] xt_hashlimit: size too large, truncated to 1048576 [ 170.363750][ T7684] xt_SECMARK: invalid mode: 9 [ 170.400878][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.492'. [ 170.773514][ T7694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.813585][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.496'. [ 170.899578][ T7700] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 170.934236][ T7701] netlink: 256 bytes leftover after parsing attributes in process `syz.4.497'. [ 170.975217][ T7700] openvswitch: netlink: Missing valid actions attribute. [ 170.994511][ T7700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.059931][ T7703] tipc: Enabling of bearer rejected, failed to enable media [ 171.102382][ T7710] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 171.240668][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 171.328561][ T7721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.363487][ T7723] TCP: TCP_TX_DELAY enabled [ 171.379699][ T7717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.444081][ T7720] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 171.973239][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 172.044765][ T7746] netlink: 'syz.3.512': attribute type 1 has an invalid length. [ 172.277443][ T7746] bond2: entered promiscuous mode [ 172.316566][ T7746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.468634][ T7762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.520445][ T7769] netlink: 'syz.2.517': attribute type 2 has an invalid length. [ 172.736168][ T7778] netlink: 56 bytes leftover after parsing attributes in process `syz.2.521'. [ 172.788248][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 172.819211][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.522'. [ 172.884556][ T7778] bond3 (unregistering): Released all slaves [ 173.159599][ T7798] xt_ipcomp: unknown flags 1D [ 173.219735][ T7802] netlink: 112 bytes leftover after parsing attributes in process `syz.2.528'. [ 173.994216][ T7841] netlink: 'syz.2.539': attribute type 4 has an invalid length. [ 174.137404][ T7845] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 174.188970][ T7845] vlan2: left allmulticast mode [ 174.203895][ T7845] bond0: left allmulticast mode [ 174.209289][ T7845] batadv0: left allmulticast mode [ 174.652934][ T7875] __nla_validate_parse: 4 callbacks suppressed [ 174.652952][ T7875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.549'. [ 174.821693][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 175.089089][ T7893] FAULT_INJECTION: forcing a failure. [ 175.089089][ T7893] name failslab, interval 1, probability 0, space 0, times 1 [ 175.102037][ T7897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.552'. [ 175.111053][ T7897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.552'. [ 175.138161][ T7893] CPU: 0 UID: 0 PID: 7893 Comm: syz.3.553 Not tainted syzkaller #0 PREEMPT(full) [ 175.138189][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.138210][ T7893] Call Trace: [ 175.138218][ T7893] [ 175.138228][ T7893] dump_stack_lvl+0xe8/0x150 [ 175.138279][ T7893] should_fail_ex+0x40c/0x560 [ 175.138311][ T7893] should_failslab+0xa8/0x100 [ 175.138346][ T7893] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 175.138373][ T7893] ? local_lock_release+0x9c/0x160 [ 175.138395][ T7893] ? __alloc_skb+0x1d7/0x7a0 [ 175.138426][ T7893] ? __alloc_skb+0x1d7/0x7a0 [ 175.138454][ T7893] __alloc_skb+0x1d7/0x7a0 [ 175.138480][ T7893] netlink_sendmsg+0x5d4/0xb40 [ 175.138506][ T7893] ? aa_file_perm+0x18b/0x15f0 [ 175.138540][ T7893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.138570][ T7893] ? aa_sock_msg_perm+0xf1/0x1b0 [ 175.138600][ T7893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.138624][ T7893] sock_sendmsg_nosec+0x13a/0x180 [ 175.138657][ T7893] sock_write_iter+0x2de/0x3e0 [ 175.138695][ T7893] ? __pfx_sock_write_iter+0x10/0x10 [ 175.138750][ T7893] do_iter_readv_writev+0x612/0x8c0 [ 175.138777][ T7893] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 175.138803][ T7893] ? bpf_lsm_file_permission+0x9/0x20 [ 175.138828][ T7893] ? security_file_permission+0x75/0x260 [ 175.138860][ T7893] ? rw_verify_area+0x203/0x4c0 [ 175.138885][ T7893] vfs_writev+0x343/0x990 [ 175.138921][ T7893] ? __pfx_vfs_writev+0x10/0x10 [ 175.138963][ T7893] ? __fget_files+0x2a/0x420 [ 175.138996][ T7893] ? __fget_files+0x3a2/0x420 [ 175.139024][ T7893] ? __fget_files+0x2a/0x420 [ 175.139062][ T7893] do_writev+0x154/0x2e0 [ 175.139091][ T7893] ? __pfx_do_writev+0x10/0x10 [ 175.139127][ T7893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.139150][ T7893] do_syscall_64+0x174/0x580 [ 175.139176][ T7893] ? trace_irq_disable+0x3b/0x140 [ 175.139204][ T7893] ? clear_bhb_loop+0x40/0x90 [ 175.139230][ T7893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.139251][ T7893] RIP: 0033:0x7f625ef9e0d9 [ 175.139277][ T7893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.139295][ T7893] RSP: 002b:00007f625fe41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 175.139321][ T7893] RAX: ffffffffffffffda RBX: 00007f625f225fa0 RCX: 00007f625ef9e0d9 [ 175.139337][ T7893] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004 [ 175.139350][ T7893] RBP: 00007f625fe41090 R08: 0000000000000000 R09: 0000000000000000 [ 175.139363][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.139375][ T7893] R13: 00007f625f226038 R14: 00007f625f225fa0 R15: 00007ffc7c786998 [ 175.139409][ T7893] [ 175.732658][ T7920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.561'. [ 176.178478][ T7943] openvswitch: netlink: Duplicate or invalid key (type 0). [ 176.392784][ T7952] netlink: 220 bytes leftover after parsing attributes in process `syz.4.570'. [ 176.423722][ T7954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 176.433668][ T7952] netlink: 164 bytes leftover after parsing attributes in process `syz.4.570'. [ 176.474654][ T7956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.571'. [ 176.486427][ T7958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.515224][ T7960] netlink: 'syz.4.570': attribute type 7 has an invalid length. [ 176.536812][ T7960] netlink: 'syz.4.570': attribute type 7 has an invalid length. [ 176.558445][ T7960] bond0: Error: CAN devices cannot be enslaved [ 176.648221][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 176.724328][ T7966] netlink: 'syz.1.574': attribute type 14 has an invalid length. [ 176.736231][ T7966] netlink: 'syz.1.574': attribute type 13 has an invalid length. [ 176.748530][ T7927] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 177.071227][ T7984] netlink: 'syz.0.580': attribute type 4 has an invalid length. [ 177.229009][ T7994] FAULT_INJECTION: forcing a failure. [ 177.229009][ T7994] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 177.296667][ T7994] CPU: 0 UID: 0 PID: 7994 Comm: syz.1.582 Not tainted syzkaller #0 PREEMPT(full) [ 177.296698][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.296710][ T7994] Call Trace: [ 177.296718][ T7994] [ 177.296727][ T7994] dump_stack_lvl+0xe8/0x150 [ 177.296764][ T7994] should_fail_ex+0x40c/0x560 [ 177.296798][ T7994] _copy_from_iter+0x1d3/0x1660 [ 177.296827][ T7994] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 177.296855][ T7994] ? rcu_is_watching+0x15/0xb0 [ 177.296876][ T7994] ? trace_kmem_cache_alloc+0x29/0xe0 [ 177.296905][ T7994] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 177.296932][ T7994] ? __pfx__copy_from_iter+0x10/0x10 [ 177.296961][ T7994] ? __alloc_skb+0x276/0x7a0 [ 177.296979][ T7994] ? __alloc_skb+0x276/0x7a0 [ 177.297005][ T7994] ? netlink_sendmsg+0x650/0xb40 [ 177.297030][ T7994] ? skb_put+0x112/0x210 [ 177.297055][ T7994] netlink_sendmsg+0x6c0/0xb40 [ 177.297080][ T7994] ? aa_file_perm+0x18b/0x15f0 [ 177.297114][ T7994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.297144][ T7994] ? aa_sock_msg_perm+0xf1/0x1b0 [ 177.297174][ T7994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.297198][ T7994] sock_sendmsg_nosec+0x13a/0x180 [ 177.297232][ T7994] sock_write_iter+0x2de/0x3e0 [ 177.297261][ T7994] ? __pfx_sock_write_iter+0x10/0x10 [ 177.297309][ T7994] do_iter_readv_writev+0x612/0x8c0 [ 177.297337][ T7994] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 177.297365][ T7994] ? bpf_lsm_file_permission+0x9/0x20 [ 177.297397][ T7994] ? security_file_permission+0x75/0x260 [ 177.297429][ T7994] ? rw_verify_area+0x203/0x4c0 [ 177.297454][ T7994] vfs_writev+0x343/0x990 [ 177.297490][ T7994] ? __pfx_vfs_writev+0x10/0x10 [ 177.297533][ T7994] ? __fget_files+0x2a/0x420 [ 177.297567][ T7994] ? __fget_files+0x3a2/0x420 [ 177.297595][ T7994] ? __fget_files+0x2a/0x420 [ 177.297633][ T7994] do_writev+0x154/0x2e0 [ 177.297677][ T7994] ? __pfx_do_writev+0x10/0x10 [ 177.297711][ T7994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.297735][ T7994] do_syscall_64+0x174/0x580 [ 177.297760][ T7994] ? trace_irq_disable+0x3b/0x140 [ 177.297788][ T7994] ? clear_bhb_loop+0x40/0x90 [ 177.297813][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.297834][ T7994] RIP: 0033:0x7fdb7559e0d9 [ 177.297853][ T7994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.297871][ T7994] RSP: 002b:00007fdb764a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 177.297894][ T7994] RAX: ffffffffffffffda RBX: 00007fdb75826090 RCX: 00007fdb7559e0d9 [ 177.297909][ T7994] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004 [ 177.297923][ T7994] RBP: 00007fdb764a1090 R08: 0000000000000000 R09: 0000000000000000 [ 177.297936][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.297949][ T7994] R13: 00007fdb75826128 R14: 00007fdb75826090 R15: 00007ffd4304e1d8 [ 177.297983][ T7994] [ 177.870773][ T8010] syz.4.588: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 177.922719][ T8014] netlink: 'syz.1.589': attribute type 3 has an invalid length. [ 177.982391][ T8010] CPU: 0 UID: 0 PID: 8010 Comm: syz.4.588 Not tainted syzkaller #0 PREEMPT(full) [ 177.982422][ T8010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.982436][ T8010] Call Trace: [ 177.982445][ T8010] [ 177.982455][ T8010] dump_stack_lvl+0xe8/0x150 [ 177.982496][ T8010] warn_alloc+0x24c/0x270 [ 177.982528][ T8010] ? stack_depot_save_flags+0x33/0x800 [ 177.982561][ T8010] ? __pfx_warn_alloc+0x10/0x10 [ 177.982593][ T8010] ? kasan_save_track+0x3e/0x80 [ 177.982620][ T8010] ? __kasan_kmalloc+0x93/0xb0 [ 177.982651][ T8010] ? xsk_setsockopt+0x52a/0x960 [ 177.982674][ T8010] ? do_sock_setsockopt+0x17c/0x1b0 [ 177.982696][ T8010] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 177.982718][ T8010] ? do_syscall_64+0x174/0x580 [ 177.982742][ T8010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.982774][ T8010] __vmalloc_node_range_noprof+0x12c/0x1730 [ 177.982835][ T8010] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.982868][ T8010] ? __kasan_kmalloc+0x93/0xb0 [ 177.982900][ T8010] ? __kmalloc_cache_noprof+0x32d/0x660 [ 177.982929][ T8010] ? __kmalloc_cache_noprof+0x150/0x660 [ 177.982960][ T8010] vmalloc_user_noprof+0xad/0xe0 [ 177.982988][ T8010] ? xskq_create+0xbf/0x170 [ 177.983011][ T8010] xskq_create+0xbf/0x170 [ 177.983038][ T8010] xsk_init_queue+0x8a/0xe0 [ 177.983062][ T8010] xsk_setsockopt+0x52a/0x960 [ 177.983088][ T8010] ? __fget_files+0x2a/0x420 [ 177.983121][ T8010] ? __pfx_xsk_setsockopt+0x10/0x10 [ 177.983142][ T8010] ? __pfx_aa_sk_perm+0x10/0x10 [ 177.983179][ T8010] ? aa_sock_opt_perm+0xff/0x1a0 [ 177.983207][ T8010] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 177.983231][ T8010] ? __pfx_xsk_setsockopt+0x10/0x10 [ 177.983254][ T8010] do_sock_setsockopt+0x17c/0x1b0 [ 177.983284][ T8010] __x64_sys_setsockopt+0x13d/0x1b0 [ 177.983310][ T8010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.983358][ T8010] do_syscall_64+0x174/0x580 [ 177.983384][ T8010] ? trace_irq_disable+0x3b/0x140 [ 177.983414][ T8010] ? clear_bhb_loop+0x40/0x90 [ 177.983442][ T8010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.983464][ T8010] RIP: 0033:0x7f1572f9e0d9 [ 177.983485][ T8010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.983504][ T8010] RSP: 002b:00007f1573e03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.983527][ T8010] RAX: ffffffffffffffda RBX: 00007f1573226090 RCX: 00007f1572f9e0d9 [ 177.983543][ T8010] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 177.983557][ T8010] RBP: 00007f1573035024 R08: 0000000000000004 R09: 0000000000000000 [ 177.983571][ T8010] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.983585][ T8010] R13: 00007f1573226128 R14: 00007f1573226090 R15: 00007ffdbe41fbd8 [ 177.983621][ T8010] [ 177.986014][ T8010] Mem-Info: [ 178.021951][ T5632] Bluetooth: hci0: command 0x0c20 tx timeout [ 178.301569][ T8010] active_anon:5626 inactive_anon:0 isolated_anon:0 [ 178.301569][ T8010] active_file:0 inactive_file:42548 isolated_file:0 [ 178.301569][ T8010] unevictable:768 dirty:70 writeback:0 [ 178.301569][ T8010] slab_reclaimable:10301 slab_unreclaimable:97533 [ 178.301569][ T8010] mapped:29138 shmem:1290 pagetables:1277 [ 178.301569][ T8010] sec_pagetables:0 bounce:0 [ 178.301569][ T8010] kernel_misc_reclaimable:0 [ 178.301569][ T8010] free:1333710 free_pcp:9608 free_cma:0 [ 178.502976][ T5632] Bluetooth: hci4: command tx timeout [ 178.617468][ T8010] Node 0 active_anon:22304kB inactive_anon:0kB active_file:0kB inactive_file:169992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116552kB dirty:280kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12376kB pagetables:4872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 178.700800][ T8010] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 178.735064][ T8032] bond3: option resend_igmp: invalid value (32767) [ 178.742606][ T8032] bond3: option resend_igmp: allowed values 0 - 255 [ 178.758286][ T8032] bond3 (unregistering): Released all slaves [ 178.769515][ T8010] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.802131][ T8010] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 178.812337][ T8010] Node 0 DMA32 free:1382644kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22604kB inactive_anon:0kB active_file:0kB inactive_file:169992kB unevictable:1536kB writepending:280kB zspages:0kB present:3129332kB managed:2548532kB mlocked:0kB bounce:0kB free_pcp:39624kB local_pcp:20428kB free_cma:0kB [ 178.868854][ T8010] lowmem_reserve[]: 0 0 0 0 0 [ 178.875235][ T8010] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.920976][ T8010] lowmem_reserve[]: 0 0 0 0 0 [ 178.926721][ T8010] Node 1 Normal free:3935932kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.979163][ T8010] lowmem_reserve[]: 0 0 0 0 0 [ 179.030661][ T8010] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 179.067337][ T8010] Node 0 DMA32: 1468*4kB (UME) 910*8kB (UME) 330*16kB (UM) 150*32kB (UME) 81*64kB (UME) 68*128kB (UME) 32*256kB (UM) 14*512kB (UM) 7*1024kB (UM) 6*2048kB (ME) 320*4096kB (UM) = 1382656kB [ 179.097114][ T8010] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 179.109008][ T8010] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 11*16kB (UM) 9*32kB (UM) 11*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3935932kB [ 179.177934][ T8010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.204546][ T8010] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.224979][ T8010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.248452][ T8010] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.273215][ T8049] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 179.289498][ T8010] 43834 total pagecache pages [ 179.316020][ T8010] 0 pages in swap cache [ 179.335740][ T8010] Free swap = 124996kB [ 179.353115][ T8010] Total swap = 124996kB [ 179.361325][ T8054] netlink: 'syz.1.601': attribute type 13 has an invalid length. [ 179.380566][ T8010] 2097051 pages RAM [ 179.388944][ T8010] 0 pages HighMem/MovableOnly [ 179.407076][ T8054] veth1_macvtap: left promiscuous mode [ 179.413111][ T8010] 428239 pages reserved [ 179.434224][ T8054] macsec0: entered allmulticast mode [ 179.438178][ T8010] 0 pages cma reserved [ 180.498525][ T8090] Cannot find add_set index 4 as target [ 181.167082][ T8116] __nla_validate_parse: 8 callbacks suppressed [ 181.167104][ T8116] netlink: 40 bytes leftover after parsing attributes in process `syz.4.622'. [ 181.530793][ T8128] netlink: 52 bytes leftover after parsing attributes in process `syz.4.626'. [ 181.590590][ T8130] netlink: 60 bytes leftover after parsing attributes in process `syz.2.627'. [ 181.615846][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 181.783450][ T8135] ipvlan2: entered allmulticast mode [ 181.814741][ T8135] batadv_slave_1: entered allmulticast mode [ 181.854453][ T8135] batman_adv: batadv0: Adding interface: ipvlan2 [ 181.885316][ T8135] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.958161][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.971209][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.982349][ T8135] batman_adv: batadv0: Interface activated: ipvlan2 [ 182.050979][ T8148] v: renamed from veth0_vlan (while UP) [ 182.219711][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 182.437390][ T8180] netlink: 'syz.1.637': attribute type 10 has an invalid length. [ 182.544978][ T8180] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.584326][ T8180] bond0: (slave team0): Enslaving as an active interface with an up link [ 182.659611][ T8188] Bluetooth: MGMT ver 1.23 [ 182.705179][ T8189] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 182.730500][ T8196] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 182.777585][ T8188] Bluetooth: hci1: too big key_count value 32778 [ 182.985615][ T8212] netlink: 216 bytes leftover after parsing attributes in process `syz.1.644'. [ 182.996008][ T8196] bond4: entered promiscuous mode [ 183.013867][ T8196] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.037553][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 183.095642][ T8200] macvtap1: entered allmulticast mode [ 183.198013][ T8203] macvtap2: entered allmulticast mode [ 183.280712][ T8211] bond4: (slave bridge3): making interface the new active one [ 183.298734][ T8211] bridge3: entered promiscuous mode [ 183.327518][ T8211] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 183.567747][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 183.587713][ T8231] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 183.613565][ T8232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.650'. [ 183.699640][ T8241] netlink: 132 bytes leftover after parsing attributes in process `syz.3.654'. [ 183.916830][ T8250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.999429][ T8257] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.008587][ T8258] syzkaller0: entered promiscuous mode [ 184.023104][ T8258] syzkaller0: entered allmulticast mode [ 184.235083][ T8264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.277074][ T8272] bond3: (slave batadv2): Opening slave failed [ 184.621392][ T8283] netlink: 'syz.3.664': attribute type 4 has an invalid length. [ 184.700972][ T8250] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 185.409011][ T8327] xt_hashlimit: size too large, truncated to 1048576 [ 185.748050][ T8342] geneve2: entered promiscuous mode [ 186.022497][ T5637] Bluetooth: hci0: command 0x0c20 tx timeout [ 186.058235][ T5635] block nbd1: Receive control failed (result -32) [ 186.067744][ T5632] block nbd1: Receive control failed (result -32) [ 186.082096][ T8355] 8021q: VLANs not supported on lo [ 186.281192][ T8359] netlink: 'syz.2.691': attribute type 1 has an invalid length. [ 186.297160][ T8361] __nla_validate_parse: 3 callbacks suppressed [ 186.297178][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 186.716427][ T8380] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 186.771204][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 186.814824][ T8386] netlink: 52 bytes leftover after parsing attributes in process `syz.2.696'. [ 187.068453][ T8397] tc_dump_action: action bad kind [ 187.107027][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 187.161022][ T8401] netlink: 'syz.1.702': attribute type 1 has an invalid length. [ 187.180057][ T8398] gtp0: entered promiscuous mode [ 187.186183][ T8401] netlink: 5120 bytes leftover after parsing attributes in process `syz.1.702'. [ 187.195617][ T8398] gtp0: entered allmulticast mode [ 187.215487][ T8402] netlink: 44 bytes leftover after parsing attributes in process `syz.3.701'. [ 187.347240][ T8407] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 187.417154][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.703'. [ 187.469298][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 187.532887][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 187.580211][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 188.455818][ T8446] tipc: New replicast peer: 127.0.0.2 [ 188.509100][ T8446] tipc: Enabled bearer , priority 10 [ 188.621079][ T8456] netlink: 'syz.2.716': attribute type 8 has an invalid length. [ 188.935071][ T8468] ip6t_srh: unknown srh match flags 4000 [ 188.965547][ T8468] netlink: 'syz.0.720': attribute type 9 has an invalid length. [ 189.250759][ T8481] netlink: 'syz.3.721': attribute type 2 has an invalid length. [ 189.985741][ T30] audit: type=1800 audit(1785952703.419:2): pid=8501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.729" name=680B20 dev="tmpfs" ino=760 res=0 errno=0 [ 190.684193][ T8534] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 190.701445][ T8537] gretap2: entered promiscuous mode [ 190.713005][ T8537] gretap2: entered allmulticast mode [ 190.810845][ T8543] netlink: 'syz.2.739': attribute type 7 has an invalid length. [ 190.830872][ T8543] netlink: 'syz.2.739': attribute type 8 has an invalid length. [ 190.866270][ T8543] netlink: 'syz.2.739': attribute type 3 has an invalid length. [ 190.898099][ T8534] hsr_slave_1 (unregistering): left promiscuous mode [ 191.365333][ T8571] __nla_validate_parse: 13 callbacks suppressed [ 191.365355][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.746'. [ 191.521557][ T8575] netlink: 208 bytes leftover after parsing attributes in process `syz.1.747'. [ 191.574632][ T8575] macvlan0: entered promiscuous mode [ 191.849882][ T8596] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 191.865751][ T29] IPVS: starting estimator thread 0... [ 191.949651][ T8606] netlink: 32 bytes leftover after parsing attributes in process `syz.0.756'. [ 191.973268][ T8599] IPVS: using max 27 ests per chain, 64800 per kthread [ 192.337498][ T8620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.761'. [ 192.751178][ T8637] bridge1: entered allmulticast mode [ 192.796042][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 193.473990][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.773'. [ 193.495154][ T8671] netlink: 'syz.4.773': attribute type 7 has an invalid length. [ 193.525473][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.772'. [ 193.537856][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.4.773'. [ 193.617990][ T8681] openvswitch: netlink: IP tunnel dst address not specified [ 193.797983][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 193.850854][ T8687] netlink: 88 bytes leftover after parsing attributes in process `syz.3.776'. [ 193.900393][ T8691] warning: `syz.0.778' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 194.063536][ T8700] netlink: 'syz.3.779': attribute type 1 has an invalid length. [ 194.154148][ T8700] Cannot find del_set index 4 as target [ 194.189126][ T5729] IPVS: starting estimator thread 0... [ 194.195275][ T8703] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.265905][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.276297][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.301317][ T8705] IPVS: using max 29 ests per chain, 69600 per kthread [ 194.338175][ T8708] 8021q: VLANs not supported on ip_vti0 [ 194.369197][ T8708] sctp: [Deprecated]: syz.2.781 (pid 8708) Use of int in max_burst socket option deprecated. [ 194.369197][ T8708] Use struct sctp_assoc_value instead [ 194.626184][ T8718] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 194.682674][ T8720] netlink: 'syz.3.786': attribute type 1 has an invalid length. [ 194.730554][ T8725] openvswitch: netlink: Duplicate or invalid key (type 0). [ 194.763025][ T8720] nbd1: detected capacity change from 0 to 127 [ 194.808672][ T8725] netlink: 'syz.4.788': attribute type 11 has an invalid length. [ 194.846406][ T25] block nbd1: Dead connection, failed to find a fallback [ 194.857530][ T25] block nbd1: shutting down sockets [ 194.864668][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.877114][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 194.888959][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 194.899020][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 194.908449][ T25] Buffer I/O error on dev nbd1, logical block 2, async page read [ 194.917026][ T25] Buffer I/O error on dev nbd1, logical block 3, async page read [ 194.932106][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.944012][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 194.954286][ T1605] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.964987][ T1605] Buffer I/O error on dev nbd1, logical block 1, async page read [ 194.973688][ T1605] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.983910][ T1605] Buffer I/O error on dev nbd1, logical block 2, async page read [ 194.992661][ T1605] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.002491][ T1605] Buffer I/O error on dev nbd1, logical block 3, async page read [ 195.010540][ T1605] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.020243][ T1605] Buffer I/O error on dev nbd1, logical block 0, async page read [ 195.030154][ T1605] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 195.042117][ T1605] Buffer I/O error on dev nbd1, logical block 1, async page read [ 195.053146][ T1605] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 195.063946][ T1605] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 195.077055][ T6282] ldm_validate_partition_table(): Disk read failed. [ 195.092470][ T6282] Dev nbd1: unable to read RDB block 0 [ 195.126103][ T6282] nbd1: unable to read partition table [ 195.196642][ T6282] ldm_validate_partition_table(): Disk read failed. [ 195.205146][ T6282] Dev nbd1: unable to read RDB block 0 [ 195.217523][ T6282] nbd1: unable to read partition table [ 195.437600][ T8741] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 195.492017][ T8745] syzkaller0: entered promiscuous mode [ 195.508443][ T8745] syzkaller0: entered allmulticast mode [ 195.655076][ T155] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.690359][ T155] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.702677][ T5729] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.831567][ T8759] netlink: 'syz.3.797': attribute type 3 has an invalid length. [ 195.852933][ T6349] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.059023][ T8763] netlink: 'syz.0.799': attribute type 2 has an invalid length. [ 196.114390][ T8770] netlink: 'syz.1.790': attribute type 2 has an invalid length. [ 196.130737][ T8766] netlink: 'syz.4.801': attribute type 4 has an invalid length. [ 196.163494][ T8733] netlink: 'syz.1.790': attribute type 2 has an invalid length. [ 196.426534][ T6349] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.573436][ T8790] __nla_validate_parse: 13 callbacks suppressed [ 196.573466][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'. [ 196.631545][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'. [ 196.917576][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 197.017594][ T8812] netlink: 'syz.3.811': attribute type 15 has an invalid length. [ 197.077383][ T8814] netlink: Unknown nat attribute (0) [ 197.086129][ T8814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.276597][ T8786] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 197.338505][ T8824] syzkaller1: entered promiscuous mode [ 197.345489][ T8824] syzkaller1: entered allmulticast mode [ 197.391057][ T8825] syzkaller0: entered promiscuous mode [ 197.397766][ T8825] syzkaller0: entered allmulticast mode [ 197.829670][ T8840] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 197.840066][ T8840] syzkaller1: linktype set to 823 [ 198.058720][ T8850] netlink: 140 bytes leftover after parsing attributes in process `syz.0.828'. [ 198.168995][ T8854] netlink: 'syz.0.829': attribute type 1 has an invalid length. [ 198.238633][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.827'. [ 198.287001][ T8854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.332664][ T8860] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 198.348171][ T8860] bond3: entered allmulticast mode [ 198.391561][ T8848] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 198.400550][ T8848] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 198.426113][ T8865] netlink: 72 bytes leftover after parsing attributes in process `syz.2.830'. [ 198.463548][ T8856] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 198.481512][ T8856] syzkaller1: group set to 0 [ 198.620645][ T8871] netlink: 236 bytes leftover after parsing attributes in process `syz.4.833'. [ 198.662674][ T8869] netlink: 'syz.1.832': attribute type 2 has an invalid length. [ 198.877446][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 198.888028][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'. [ 198.895109][ T8880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.837'. [ 199.119454][ T8891] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 199.542134][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.849246][ T8925] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 200.319319][ T8946] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 200.410203][ T8920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.432642][ T8920] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 200.579825][ T8920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.604779][ T8920] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 200.673744][ T8920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.708435][ T8920] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 200.774780][ T8920] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 200.791012][ T8920] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 201.568847][ T9022] validate_nla: 3 callbacks suppressed [ 201.568865][ T9022] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 201.983662][ T9032] netlink: 'syz.1.865': attribute type 4 has an invalid length. [ 202.080701][ T9045] __nla_validate_parse: 5 callbacks suppressed [ 202.080724][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 202.375672][ T9055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.869'. [ 202.523974][ T9064] netlink: 'syz.1.871': attribute type 2 has an invalid length. [ 202.659151][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.872'. [ 202.689073][ T9075] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 202.758016][ T9079] netlink: 112 bytes leftover after parsing attributes in process `syz.2.874'. [ 202.770294][ T9077] xt_hashlimit: size too large, truncated to 1048576 [ 203.038239][ T9090] netlink: 'syz.3.876': attribute type 30 has an invalid length. [ 203.065216][ T9075] bond4: entered promiscuous mode [ 203.082300][ T9075] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.170470][ T9085] vlan3: entered allmulticast mode [ 203.189448][ T9085] bond4: entered allmulticast mode [ 203.220730][ T9091] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 203.376861][ T9093] bond4: (slave bridge1): making interface the new active one [ 203.412377][ T9093] bridge1: entered promiscuous mode [ 203.419199][ T9093] bridge1: entered allmulticast mode [ 203.427087][ T9093] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 203.555532][ T9090] netlink: 'syz.3.876': attribute type 30 has an invalid length. [ 203.608335][ T9117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.728084][ T9123] netlink: 76 bytes leftover after parsing attributes in process `syz.4.883'. [ 203.769754][ T9090] netlink: 'syz.3.876': attribute type 30 has an invalid length. [ 203.805045][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 204.174360][ T9133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.886'. [ 204.209635][ T9137] netlink: 'syz.1.889': attribute type 1 has an invalid length. [ 204.409781][ T9137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.440045][ T9150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.892'. [ 204.449223][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 204.482542][ T9150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.892'. [ 204.494402][ T9141] bridge: RTM_NEWNEIGH with invalid ether address [ 204.665925][ T9145] bond3: (slave veth5): Enslaving as an active interface with a down link [ 204.753573][ T9146] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 204.808132][ T9146] bond3: (slave batadv1): making interface the new active one [ 204.821436][ T9146] batadv1: entered promiscuous mode [ 204.830122][ T9146] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 205.188938][ T9176] xt_CT: No such helper "pptp" [ 205.486292][ T9137] bond3: (slave veth7): Enslaving as an active interface with a down link [ 206.000031][ T9200] bond5 (unregistering): Released all slaves [ 207.702009][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.993200][ T9301] __nla_validate_parse: 4 callbacks suppressed [ 207.993224][ T9301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.920'. [ 208.091164][ T9301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.920'. [ 208.841375][ T9323] syzkaller0: entered promiscuous mode [ 208.847215][ T9323] syzkaller0: entered allmulticast mode [ 209.245376][ T9359] openvswitch: netlink: Multiple metadata blocks provided [ 209.428506][ T9364] set match dimension is over the limit! [ 209.637973][ T9376] netlink: 'syz.3.939': attribute type 10 has an invalid length. [ 209.673871][ T9377] netlink: 104 bytes leftover after parsing attributes in process `syz.2.938'. [ 209.714788][ T9377] netlink: 72 bytes leftover after parsing attributes in process `syz.2.938'. [ 211.676335][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.929'. [ 211.689755][ T9376] bond1: (slave dummy0): Releasing backup interface [ 211.717388][ T9376] team0: Port device dummy0 added [ 211.863272][ T9387] netlink: 148 bytes leftover after parsing attributes in process `syz.2.942'. [ 211.973562][ T9394] xt_CT: No such helper "snmp" [ 212.008066][ T9391] xt_CT: No such helper "snmp" [ 212.018014][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 212.064052][ T9400] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 212.270306][ T9415] netlink: 'syz.2.947': attribute type 32 has an invalid length. [ 212.301823][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 212.395261][ T9415] bond6: option coupled_control: invalid value (192) [ 212.415765][ T9415] bond6 (unregistering): Released all slaves [ 212.574853][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 212.816031][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'. [ 212.933192][ T9435] xfrm1: entered allmulticast mode [ 213.017515][ T9442] netlink: 'syz.2.958': attribute type 39 has an invalid length. [ 213.490176][ T9452] __nla_validate_parse: 2 callbacks suppressed [ 213.490197][ T9452] netlink: 2 bytes leftover after parsing attributes in process `syz.1.961'. [ 213.903367][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.968'. [ 213.910403][ T9484] IPv6: NLM_F_REPLACE set, but no existing node found! [ 214.667801][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.980'. [ 214.913076][ T9535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.986'. [ 214.987193][ T9001] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.012294][ T9001] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.020108][ T6348] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.149659][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 215.163606][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 215.220518][ T9545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.990'. [ 215.232852][ T6348] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.248643][ T9545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.990'. [ 215.404587][ T6348] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.759111][ T9572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.998'. [ 215.881259][ T9576] netlink: 516 bytes leftover after parsing attributes in process `syz.0.999'. [ 215.965944][ T8997] batadv1: left promiscuous mode [ 216.021664][ T9583] netlink: 'syz.2.1001': attribute type 1 has an invalid length. [ 217.263143][ T9611] netlink: 'syz.0.1010': attribute type 5 has an invalid length. [ 217.298589][ T9611] netlink: 'syz.0.1010': attribute type 9 has an invalid length. [ 217.400176][ T9617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.906944][ T9632] lo: entered promiscuous mode [ 217.927355][ T9632] tunl0: entered promiscuous mode [ 217.967332][ T9632] gre0: entered promiscuous mode [ 217.988256][ T9640] netlink: 'syz.1.1020': attribute type 4 has an invalid length. [ 218.045815][ T9632] 0ªX¹¦Dö»: entered promiscuous mode [ 218.072445][ T9632] 0ªX¹¦Dö»: left allmulticast mode [ 218.119110][ T9632] erspan0: entered promiscuous mode [ 218.150361][ T9632] ip_vti0: entered promiscuous mode [ 218.286958][ T9632] ip6_vti0: entered promiscuous mode [ 218.311358][ T9632] sit0: entered promiscuous mode [ 218.343791][ T9632] ip6tnl0: entered promiscuous mode [ 218.378154][ T9632] ip6gre0: entered promiscuous mode [ 218.416155][ T9632] ip6gretap0: entered promiscuous mode [ 218.440740][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.448638][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.460057][ T9632] bridge0: entered promiscuous mode [ 218.474820][ T9632] vcan0: entered promiscuous mode [ 218.499440][ T9632] bond0: entered promiscuous mode [ 218.513602][ T9632] bond_slave_0: entered promiscuous mode [ 218.526451][ T9632] bond_slave_1: entered promiscuous mode [ 218.594432][ T9632] team0: entered promiscuous mode [ 218.626139][ T9632] team_slave_0: entered promiscuous mode [ 218.655059][ T9632] team_slave_1: entered promiscuous mode [ 218.779568][ T9632] dummy0: entered promiscuous mode [ 218.878153][ T9632] nlmon0: entered promiscuous mode [ 218.901992][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.946555][ T9632] batadv0: entered promiscuous mode [ 218.990270][ T9632] vxcan0: entered promiscuous mode [ 219.045987][ T9632] vxcan1: entered promiscuous mode [ 219.063818][ T9632] veth0: entered promiscuous mode [ 219.087163][ T9632] veth1: entered promiscuous mode [ 219.124515][ T9632] wg0: entered promiscuous mode [ 219.159981][ T9632] wg2: entered promiscuous mode [ 219.187389][ T9632] veth0_to_bridge: entered promiscuous mode [ 219.247496][ T9632] veth1_to_bridge: entered promiscuous mode [ 219.309454][ T9632] veth0_to_bond: entered promiscuous mode [ 219.368853][ T9632] veth1_to_bond: entered promiscuous mode [ 219.420846][ T9632] veth0_to_team: entered promiscuous mode [ 219.475223][ T9632] veth1_to_team: entered promiscuous mode [ 219.544822][ T9632] veth0_to_batadv: entered promiscuous mode [ 219.575129][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.591064][ T9632] batadv_slave_0: entered promiscuous mode [ 219.621492][ T9632] veth1_to_batadv: entered promiscuous mode [ 219.660615][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.676467][ T9632] batadv_slave_1: entered promiscuous mode [ 219.707525][ T9632] xfrm0: entered promiscuous mode [ 219.744957][ T9632] veth0_to_hsr: entered promiscuous mode [ 219.808640][ T9632] veth1_to_hsr: entered promiscuous mode [ 219.877666][ T9632] hsr0: entered promiscuous mode [ 219.905077][ T9632] veth1_virt_wifi: entered promiscuous mode [ 219.942419][ T9632] veth0_virt_wifi: entered promiscuous mode [ 219.990768][ T9632] virt_wifi0: entered promiscuous mode [ 220.058252][ T9632] vlan0: entered promiscuous mode [ 220.095797][ T9632] vlan1: entered promiscuous mode [ 220.129558][ T9632] macvlan0: entered promiscuous mode [ 220.142980][ T9632] macvlan1: entered promiscuous mode [ 220.165992][ T9632] ipvlan0: entered promiscuous mode [ 220.183495][ T9632] ipvlan1: entered promiscuous mode [ 220.205120][ T9632] macvtap0: entered promiscuous mode [ 220.231342][ T9632] macsec0: entered promiscuous mode [ 220.312851][ T9632] geneve0: entered promiscuous mode [ 220.331347][ T9632] geneve1: entered promiscuous mode [ 220.344296][ T9632] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 220.366000][ T9632] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 220.391510][ T9632] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 220.403162][ T9632] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 220.411168][ T9632] bond1: left allmulticast mode [ 220.418084][ T9632] vlan2: entered promiscuous mode [ 220.424391][ T9632] pim6reg527: entered promiscuous mode [ 220.453128][ T9632] sit1: entered promiscuous mode [ 220.459307][ T9632] syztnl1: entered promiscuous mode [ 220.465789][ T9632] @: entered promiscuous mode [ 220.475018][ T9632] bridge1: entered promiscuous mode [ 220.484425][ T9632] bridge2: entered promiscuous mode [ 220.489848][ T9632] mac80211_hwsim hwsim9 pim6reg0: entered promiscuous mode [ 220.497626][ T9632] ip6_vti1: entered promiscuous mode [ 220.505635][ T9632] sit2: entered promiscuous mode [ 220.550087][ T9632] bond2: entered promiscuous mode [ 220.565534][ T9632] bond3: entered promiscuous mode [ 220.579310][ T9632] macvtap1: entered promiscuous mode [ 220.593913][ T9632] macvtap1: left allmulticast mode [ 220.606753][ T9632] macvtap2: entered promiscuous mode [ 220.619723][ T9632] macvtap2: left allmulticast mode [ 220.636157][ T9632] syztnl2: entered promiscuous mode [ 220.641514][ T9632] bond5: entered promiscuous mode [ 220.659980][ T9632] gtp0: left allmulticast mode [ 220.676709][ T9632] geneve2: entered promiscuous mode [ 220.682908][ T9632] ip6gre1: entered promiscuous mode [ 220.688538][ T9632] ip6gre2: entered promiscuous mode [ 220.695639][ T9632] bridge4: entered promiscuous mode [ 220.823049][ T8995] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.857791][ T8995] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.894153][ T8995] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.931183][ T8995] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.970318][ T8995] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.006546][ T8995] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.027416][ T8995] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.061436][ T8995] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.262828][ T9691] __nla_validate_parse: 4 callbacks suppressed [ 221.262847][ T9691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1030'. [ 221.365139][ T9681] bond6: entered promiscuous mode [ 221.390722][ T9681] bond6: entered allmulticast mode [ 221.407478][ T9699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1030'. [ 221.427099][ T9681] 8021q: adding VLAN 0 to HW filter on device bond6 [ 221.515022][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1031'. [ 221.597456][ T9696] bridge2: entered promiscuous mode [ 221.906788][ T9713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1033'. [ 222.253908][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1039'. [ 222.420901][ T9738] hsr_slave_1 (unregistering): left promiscuous mode [ 222.564025][ T9751] netlink: 'syz.2.1040': attribute type 4 has an invalid length. [ 222.822752][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 222.918953][ T9772] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1049'. [ 222.943697][ T9767] netlink: 'syz.0.1047': attribute type 8 has an invalid length. [ 223.009298][ T9773] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1049'. [ 223.081122][ T9775] netlink: 'syz.2.1050': attribute type 1 has an invalid length. [ 223.121959][ T9777] ip_tables: iptables: counters copy to user failed while replacing table [ 223.134607][ T9775] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1050'. [ 223.149659][ T9775] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1050'. [ 223.353692][ T9784] netlink: 'syz.3.1054': attribute type 2 has an invalid length. [ 223.455576][ T9787] netlink: 'syz.2.1056': attribute type 64 has an invalid length. [ 223.514034][ T9653] IPVS: starting estimator thread 0... [ 223.612460][ T9792] IPVS: using max 26 ests per chain, 62400 per kthread [ 223.645069][ T9793] 8021q: VLANs not supported on gre0 [ 223.716314][ T9805] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 223.732090][ T9800] netlink: 'syz.3.1059': attribute type 4 has an invalid length. [ 223.925135][ T9815] netlink: 'syz.4.1064': attribute type 17 has an invalid length. [ 223.952866][ T9815] gretap0: entered promiscuous mode [ 223.972152][ T9815] gretap0: left promiscuous mode [ 224.328026][ T9833] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 224.341951][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.557725][ T9842] syz_tun: entered promiscuous mode [ 225.100593][ T9864] netlink: 'syz.1.1076': attribute type 4 has an invalid length. [ 225.128915][ T9865] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 225.300063][ T9871] netlink: 'syz.1.1079': attribute type 1 has an invalid length. [ 225.618814][ T9871] bridge4: entered promiscuous mode [ 225.635815][ T9871] bond4: (slave bridge4): making interface the new active one [ 225.644923][ T9871] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 225.720698][ T9882] bridge5: entered allmulticast mode [ 225.975925][ T9878] xt_nat: multiple ranges no longer supported [ 226.182999][ T9905] ip6gre2: entered promiscuous mode [ 226.205910][ T9905] ip6gre2: entered allmulticast mode [ 226.394633][ T9907] vlan2: entered promiscuous mode [ 226.414392][ T9907] bridge0: entered promiscuous mode [ 226.545898][ T9911] netlink: 'syz.1.1089': attribute type 4 has an invalid length. [ 226.593083][ T9919] __nla_validate_parse: 7 callbacks suppressed [ 226.593104][ T9919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1092'. [ 226.647863][ T9921] openvswitch: netlink: Flow actions attr not present in new flow. [ 226.684896][ T9919] team0: entered allmulticast mode [ 226.705720][ T9919] team_slave_0: entered allmulticast mode [ 226.734215][ T9919] team_slave_1: entered allmulticast mode [ 226.760373][ T9919] bridge0: port 3(team0) entered blocking state [ 226.767925][ T9919] bridge0: port 3(team0) entered disabled state [ 226.796195][ T9936] SET target dimension over the limit! [ 226.901981][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.186355][ T9955] nbd: socks must be embedded in a SOCK_ITEM attr [ 227.201289][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 227.225513][ T9949] bond6: Unable to set up delay as MII monitoring is disabled [ 227.266777][ T9949] bond6 (unregistering): Released all slaves [ 227.529755][ T9955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.578536][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1099'. [ 227.628983][ T9946] syzkaller0: entered promiscuous mode [ 227.634765][ T9946] syzkaller0: entered allmulticast mode [ 227.744413][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1104'. [ 227.754529][ T9984] nbd: must specify a size in bytes for the device [ 228.210115][ T9996] validate_nla: 1 callbacks suppressed [ 228.210136][ T9996] netlink: 'syz.2.1106': attribute type 4 has an invalid length. [ 229.578750][T10001] netlink: 'syz.0.1107': attribute type 4 has an invalid length. [ 229.609635][T10000] netlink: 'syz.0.1107': attribute type 4 has an invalid length. [ 229.633346][T10000] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1107'. [ 229.637957][T10001] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1107'. [ 229.768465][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1110'. [ 229.778199][T10015] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1110'. [ 229.821267][T10000] .`: renamed from bond0 [ 229.965527][ T30] audit: type=1804 audit(1785952743.399:3): pid=10020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1112" name="/newroot/245/cgroup.controllers" dev="tmpfs" ino=1265 res=1 errno=0 [ 229.993877][ T30] audit: type=1800 audit(1785952743.409:4): pid=10020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1112" name="cgroup.controllers" dev="tmpfs" ino=1265 res=0 errno=0 [ 230.569318][T10044] netlink: 'syz.4.1120': attribute type 4 has an invalid length. [ 230.650891][T10050] netlink: 'syz.1.1122': attribute type 1 has an invalid length. [ 230.695121][T10050] 8021q: adding VLAN 0 to HW filter on device bond6 [ 230.715584][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 230.764945][T10050] bond6: (slave geneve2): making interface the new active one [ 230.807656][T10050] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 230.921005][T10057] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 230.957336][T10057] bond5 (unregistering): Released all slaves [ 231.080606][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 231.537523][T10087] xt_connbytes: Forcing CT accounting to be enabled [ 231.556687][T10087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.726016][T10098] netlink: 'syz.3.1133': attribute type 83 has an invalid length. [ 231.769866][ T30] audit: type=1804 audit(1785952745.209:5): pid=10099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1133" name="/newroot/220/cgroup.controllers" dev="tmpfs" ino=1146 res=1 errno=0 [ 231.854285][ T30] audit: type=1800 audit(1785952745.209:6): pid=10099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1133" name="cgroup.controllers" dev="tmpfs" ino=1146 res=0 errno=0 [ 232.289756][T10122] netlink: 'syz.4.1139': attribute type 10 has an invalid length. [ 232.339799][T10116] __nla_validate_parse: 2 callbacks suppressed [ 232.339823][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'. [ 232.340746][T10119] netlink: 'syz.4.1139': attribute type 10 has an invalid length. [ 232.376685][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1136'. [ 232.480346][T10122] team0: Port device dummy0 added [ 232.522750][T10119] team0: Port device dummy0 removed [ 233.140674][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1146'. [ 233.195760][T10157] Cannot find add_set index 0 as target [ 233.210821][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'. [ 233.325563][T10155] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 233.686872][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 233.714165][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'. [ 233.734764][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 233.738333][T10178] netlink: 'syz.3.1153': attribute type 10 has an invalid length. [ 233.745880][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 233.764761][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 233.774298][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 233.967418][T10189] IPVS: set_ctl: invalid protocol: 137 10.1.1.2:20003 [ 233.970187][T10188] netlink: 'syz.1.1156': attribute type 1 has an invalid length. [ 234.140067][T10193] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 234.276010][T10201] veth11: entered promiscuous mode [ 234.305338][T10201] bond7: (slave veth11): Enslaving as a backup interface with a down link [ 234.666989][T10223] netlink: 'syz.4.1164': attribute type 4 has an invalid length. [ 235.664747][T10284] netlink: 'syz.0.1184': attribute type 4 has an invalid length. [ 235.886526][T10293] netlink: 'syz.3.1187': attribute type 83 has an invalid length. [ 236.618549][T10332] netlink: 'syz.0.1197': attribute type 5 has an invalid length. [ 236.918274][T10356] netlink: 'syz.2.1200': attribute type 4 has an invalid length. [ 236.930072][T10354] block nbd0: Unsupported socket: should be TCP or UNIX. [ 237.098214][T10364] sctp: [Deprecated]: syz.4.1204 (pid 10364) Use of int in max_burst socket option deprecated. [ 237.098214][T10364] Use struct sctp_assoc_value instead [ 237.432345][T10380] netlink: 'syz.4.1210': attribute type 3 has an invalid length. [ 237.516345][T10385] bond5: Removing last ns target with arp_interval on [ 237.656790][T10393] __nla_validate_parse: 72 callbacks suppressed [ 237.656812][T10393] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1213'. [ 238.086742][T10409] netlink: 'syz.4.1218': attribute type 4 has an invalid length. [ 238.495687][T10433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1226'. [ 238.980109][T10457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.990723][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1226'. [ 239.012358][T10460] netlink: 'syz.1.1234': attribute type 33 has an invalid length. [ 239.195342][T10460] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 239.242158][T10480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1235'. [ 239.253818][T10480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1235'. [ 239.442377][T10460] bond9 (unregistering): Released all slaves [ 239.747953][T10486] netlink: 'syz.1.1237': attribute type 4 has an invalid length. [ 239.798941][T10488] netlink: 'syz.2.1238': attribute type 1 has an invalid length. [ 239.897271][T10492] netlink: 'syz.2.1238': attribute type 4 has an invalid length. [ 240.088392][T10496] netlink: 'syz.3.1241': attribute type 19 has an invalid length. [ 240.104480][T10499] netlink: 'syz.1.1240': attribute type 2 has an invalid length. [ 240.117323][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 240.127381][T10499] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1240'. [ 240.139326][T10496] netlink: 'syz.3.1241': attribute type 19 has an invalid length. [ 240.149560][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 240.300575][T10503] netlink: 'syz.2.1243': attribute type 4 has an invalid length. [ 240.355502][T10503] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1243'. [ 240.473219][T10509] wg0 speed is unknown, defaulting to 1000 [ 240.506491][T10509] wg0 speed is unknown, defaulting to 1000 [ 240.545748][T10509] wg0 speed is unknown, defaulting to 1000 [ 240.591514][T10509] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 240.648418][T10509] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 240.690674][T10509] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 240.707150][T10521] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1249'. [ 240.753732][T10509] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 240.912961][T10509] wg0 speed is unknown, defaulting to 1000 [ 240.945099][T10509] wg0 speed is unknown, defaulting to 1000 [ 240.978219][T10538] netlink: 'syz.0.1250': attribute type 4 has an invalid length. [ 241.018242][T10509] wg0 speed is unknown, defaulting to 1000 [ 241.041617][T10509] wg0 speed is unknown, defaulting to 1000 [ 241.079338][T10509] wg0 speed is unknown, defaulting to 1000 [ 241.186500][T10544] netlink: 'syz.3.1253': attribute type 4 has an invalid length. [ 241.550379][T10557] xt_hashlimit: size too large, truncated to 1048576 [ 242.261993][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.349629][T10590] wg0 speed is unknown, defaulting to 1000 [ 242.921635][T10628] __nla_validate_parse: 4 callbacks suppressed [ 242.921653][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'. [ 242.968377][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1274'. [ 243.404394][T10648] xt_hashlimit: size too large, truncated to 1048576 [ 243.417192][T10649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1282'. [ 243.510575][T10651] bridge6: entered allmulticast mode [ 244.104383][T10675] ip6gre3: entered promiscuous mode [ 244.121061][T10675] ip6gre3: entered allmulticast mode [ 244.231610][T10683] validate_nla: 2 callbacks suppressed [ 244.231630][T10683] netlink: 'syz.4.1293': attribute type 3 has an invalid length. [ 244.339010][T10659] ip_tables: iptables: counters copy to user failed while replacing table [ 244.586370][T10695] netlink: 'syz.3.1296': attribute type 4 has an invalid length. [ 244.604155][T10697] netlink: 'syz.4.1297': attribute type 1 has an invalid length. [ 244.689355][T10697] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.719580][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 244.734985][T10702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1298'. [ 244.756925][T10701] bond5: (slave veth5): Enslaving as an active interface with a down link [ 244.758756][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 244.801533][T10704] netlink: 'syz.0.1299': attribute type 5 has an invalid length. [ 244.828368][T10705] xt_hashlimit: size too large, truncated to 1048576 [ 244.841929][T10702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1298'. [ 244.860001][T10697] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 244.883930][T10697] bond5: (slave batadv2): making interface the new active one [ 244.900299][T10697] batadv2: entered promiscuous mode [ 244.920855][T10697] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 245.068825][T10701] bond5: (slave veth7): Enslaving as an active interface with a down link [ 245.193485][T10702] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.204948][T10718] netlink: 'syz.0.1302': attribute type 2 has an invalid length. [ 245.224061][T10720] netlink: 'syz.0.1302': attribute type 2 has an invalid length. [ 245.249425][T10702] bridge_slave_0 (unregistering): left allmulticast mode [ 245.282599][T10702] bridge_slave_0 (unregistering): left promiscuous mode [ 245.290236][T10702] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.962652][T10759] netlink: 'syz.4.1311': attribute type 4 has an invalid length. [ 246.351108][T10774] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1319'. [ 246.373869][T10773] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1319'. [ 246.624248][T10787] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 246.777544][T10798] netlink: 'syz.4.1326': attribute type 4 has an invalid length. [ 247.055739][T10816] openvswitch: netlink: Duplicate or invalid key (type 0). [ 247.231151][T10823] vcan1: entered promiscuous mode [ 247.236771][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1336'. [ 247.260897][T10823] vcan1: entered allmulticast mode [ 247.373038][T10834] netlink: 'syz.2.1339': attribute type 4 has an invalid length. [ 247.606642][T10847] netlink: 'syz.1.1340': attribute type 1 has an invalid length. [ 247.869779][T10863] NCSI netlink: No device for ifindex 813332851 [ 248.088862][T10876] gretap0: refused to change device tx_queue_len [ 248.099580][T10876] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 248.328452][T10881] syzkaller1: entered promiscuous mode [ 248.336328][T10881] syzkaller1: entered allmulticast mode [ 248.346282][T10882] __nla_validate_parse: 2 callbacks suppressed [ 248.346298][T10882] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1349'. [ 248.366338][T10881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.229305][T10928] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 [ 249.248024][T10929] validate_nla: 6 callbacks suppressed [ 249.248044][T10929] netlink: 'syz.1.1365': attribute type 1 has an invalid length. [ 249.319347][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031d7d400: rx timeout, send abort [ 249.373200][T10929] 8021q: adding VLAN 0 to HW filter on device bond10 [ 249.465259][T10929] bond10: (slave geneve3): making interface the new active one [ 249.478648][T10929] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 249.819607][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031d7ec00: rx timeout, send abort [ 249.829898][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031d7d400: abort rx timeout. Force session deactivation [ 249.875659][ T5750] IPVS: starting estimator thread 0... [ 249.972672][T10961] IPVS: using max 28 ests per chain, 67200 per kthread [ 250.093682][T10970] netlink: 'syz.3.1377': attribute type 4 has an invalid length. [ 250.328023][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031d7ec00: abort rx timeout. Force session deactivation [ 250.457067][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'. [ 250.472742][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'. [ 250.510081][T10994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1382'. [ 250.684469][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 250.705728][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'. [ 250.873791][T11012] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1389'. [ 250.901553][T11013] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1389'. [ 250.936568][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'. [ 250.951943][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 251.172705][T11024] unsupported nlmsg_type 40 [ 251.208872][T11018] tipc: Failed to obtain node identity [ 251.232232][T11018] tipc: Enabling of bearer rejected, failed to enable media [ 251.313709][T11032] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.678998][T11055] sock: sock_timestamping_bind_phc: sock not bind to device [ 251.688346][T11055] sctp: [Deprecated]: syz.3.1403 (pid 11055) Use of int in maxseg socket option. [ 251.688346][T11055] Use struct sctp_assoc_value instead [ 251.735212][T11046] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 252.344666][T11098] netlink: 'syz.0.1414': attribute type 21 has an invalid length. [ 252.822659][T11112] netlink: 'syz.4.1419': attribute type 28 has an invalid length. [ 252.878351][T11112] netlink: 'syz.4.1419': attribute type 3 has an invalid length. [ 253.361938][T11137] __nla_validate_parse: 11 callbacks suppressed [ 253.361968][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1421'. [ 253.464983][T11148] netlink: 'syz.0.1425': attribute type 1 has an invalid length. [ 253.917708][T11148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.009691][T11166] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1429'. [ 254.177408][T11170] netlink: 'syz.2.1428': attribute type 4 has an invalid length. [ 254.246026][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.040435][T11205] xt_cgroup: xt_cgroup: no path or classid specified [ 255.072446][T11207] veth1_to_bond: entered allmulticast mode [ 255.186629][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 255.465259][T11207] veth1_to_bond (unregistering): left allmulticast mode [ 255.556641][T11207] .`: (slave bond_slave_1): Releasing backup interface [ 255.627612][T11221] gretap0: entered promiscuous mode [ 255.658323][T11223] netlink: 'syz.2.1444': attribute type 4 has an invalid length. [ 255.698566][T11221] vlan5: entered promiscuous mode [ 255.707327][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.716670][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.888764][T11231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.944790][T11226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1443'. [ 256.129137][ T8993] batadv2: left promiscuous mode [ 256.270835][T11238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1448'. [ 256.340842][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'. [ 256.415106][T11240] No such timeout policy "syz0" [ 256.440118][T11247] raw_sendmsg: syz.3.1446 forgot to set AF_INET. Fix it! [ 256.692309][T11260] netlink: 'syz.2.1451': attribute type 1 has an invalid length. [ 256.992205][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 257.777734][T11294] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1459'. [ 257.883233][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'. [ 257.926311][T11282] can: request_module (can-proto-4) failed. [ 258.029187][T11300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'. [ 258.492842][T11312] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1464'. [ 258.706362][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1466'. [ 261.817366][T11337] netlink: 'syz.1.1474': attribute type 1 has an invalid length. [ 261.854579][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 261.867359][T11337] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1474'. [ 261.882288][T11337] netlink: 'syz.1.1474': attribute type 2 has an invalid length. [ 261.982670][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'. [ 262.430845][T11364] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.438576][T11358] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 262.474536][T11353] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 262.825159][T11377] netlink: 'syz.2.1486': attribute type 39 has an invalid length. [ 262.957697][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'. [ 263.146248][T11389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1489'. [ 263.174300][T11388] netlink: 'syz.2.1490': attribute type 1 has an invalid length. [ 263.481011][T11396] bond0: (slave team0): Releasing backup interface [ 263.528249][T11402] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1495'. [ 263.647342][T11396] bridge_slave_1: left allmulticast mode [ 263.663015][T11396] bridge_slave_1: left promiscuous mode [ 263.684682][T11396] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.748181][T11396] bond0: (slave bond_slave_0): Releasing backup interface [ 263.861477][T11396] bond0: (slave bond_slave_1): Releasing backup interface [ 264.053812][T11396] team0: Port device team_slave_1 removed [ 264.084801][T11396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.118241][T11396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.134171][T11396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.141993][T11396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.151571][T11396] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 264.216058][T11401] team0: Mode changed to "loadbalance" [ 264.273518][T11405] dvmrp16: entered allmulticast mode [ 264.554621][T11421] h: entered promiscuous mode [ 264.940904][T11436] syzkaller0: entered promiscuous mode [ 264.971574][T11436] syzkaller0: entered allmulticast mode [ 265.209000][T11446] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1506'. [ 265.445007][T11454] bridge0: port 1(vlan5) entered blocking state [ 265.463380][T11454] bridge0: port 1(vlan5) entered disabled state [ 265.507335][T11454] vlan5: entered allmulticast mode [ 265.558652][T11454] macvtap0: entered allmulticast mode [ 265.582914][T11454] veth0_macvtap: entered allmulticast mode [ 265.620798][T11454] vlan5: entered promiscuous mode [ 265.641953][T11454] macvtap0: entered promiscuous mode [ 266.451146][T11489] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1520'. [ 266.506339][T11489] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1520'. [ 266.554421][T11491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.597385][T11493] xt_hashlimit: size too large, truncated to 1048576 [ 266.614966][T11491] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1521'. [ 266.690868][T11491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1521'. [ 266.835454][T11491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.930119][T11507] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 266.956053][T11491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.026058][T11508] xt_CONNSECMARK: invalid mode: 0 [ 267.094791][T11507] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 267.118032][T11507] gretap2: entered promiscuous mode [ 267.133759][T11507] gretap2: entered allmulticast mode [ 267.368857][T11523] bond7: Unable to set down delay as MII monitoring is disabled [ 267.513027][T11523] bond7 (unregistering): Released all slaves [ 267.882079][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 268.110853][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 268.166917][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 268.246118][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1535'. [ 268.534588][T11556] Cannot find add_set index 2 as target [ 268.593125][T11557] __nla_validate_parse: 1 callbacks suppressed [ 268.593147][T11557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1540'. [ 268.847084][T11567] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1542'. [ 268.880940][T11567] netlink: 'syz.3.1542': attribute type 1 has an invalid length. [ 268.899674][T11567] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1542'. [ 268.920615][T11567] netlink: 'syz.3.1542': attribute type 1 has an invalid length. [ 269.219601][T11571] netlink: 'syz.0.1543': attribute type 2 has an invalid length. [ 269.257231][T11571] netlink: 'syz.0.1543': attribute type 2 has an invalid length. [ 269.654543][T11581] netlink: 'syz.0.1546': attribute type 1 has an invalid length. [ 269.677381][T11590] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1549'. [ 269.718349][T11581] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1546'. [ 269.979603][T11597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1550'. [ 270.026074][T11597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1550'. [ 270.117091][T11602] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1552'. [ 270.578765][T11619] netlink: 'syz.1.1554': attribute type 83 has an invalid length. [ 270.796319][T11626] Unknown options in mask 4 [ 270.897501][T11627] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 270.933936][T11627] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 270.967604][T11627] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 271.755863][T11649] netlink: 'syz.3.1564': attribute type 4 has an invalid length. [ 272.683914][T11669] netlink: 'syz.4.1570': attribute type 2 has an invalid length. [ 272.733599][T11669] netlink: 'syz.4.1570': attribute type 2 has an invalid length. [ 272.768098][T11669] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.1570'. [ 272.982197][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 273.184100][T11689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1574'. [ 273.798118][T11697] syzkaller0: entered promiscuous mode [ 273.813251][T11700] __nla_validate_parse: 1 callbacks suppressed [ 273.813272][T11700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1578'. [ 273.833641][T11697] syzkaller0: entered allmulticast mode [ 274.509084][T11719] netlink: 'syz.1.1581': attribute type 4 has an invalid length. [ 275.189464][T11733] syzkaller1: entered promiscuous mode [ 275.209687][T11733] syzkaller1: entered allmulticast mode [ 275.336003][T11744] x_tables: duplicate entry at hook 1 [ 275.355375][T11746] netlink: 'syz.2.1591': attribute type 7 has an invalid length. [ 275.406879][T11746] netlink: 'syz.2.1591': attribute type 7 has an invalid length. [ 275.741644][T11756] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 276.046054][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1594'. [ 276.089455][ T30] audit: type=1804 audit(1785952789.529:7): pid=11761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1595" name="/newroot/325/cgroup.controllers" dev="tmpfs" ino=1669 res=1 errno=0 [ 276.163191][ T30] audit: type=1800 audit(1785952789.529:8): pid=11761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1595" name="cgroup.controllers" dev="tmpfs" ino=1669 res=0 errno=0 [ 276.305565][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1594'. [ 276.377409][T11763] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1594'. [ 276.477996][T11775] netlink: 'syz.0.1597': attribute type 4 has an invalid length. [ 276.533597][T11763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1594'. [ 276.647356][T11780] netlink: 'syz.3.1598': attribute type 21 has an invalid length. [ 276.712753][T11762] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.725281][T11782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.895407][T11767] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.941269][T11767] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 276.994447][T11767] bond7: (slave vti0): Error -95 calling set_mac_address [ 278.479928][T11832] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1611'. [ 278.567642][T11832] netlink: 'syz.1.1611': attribute type 3 has an invalid length. [ 278.632354][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1611'. [ 279.232162][T11858] netlink: 'syz.2.1616': attribute type 4 has an invalid length. [ 279.377106][T11861] macvlan0: entered promiscuous mode [ 279.445597][T11861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1619'. [ 279.528592][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 279.788987][T11879] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.887094][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 279.960122][T11879] netlink: 'syz.4.1626': attribute type 10 has an invalid length. [ 279.988921][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1626'. [ 280.058985][T11885] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1628'. [ 280.078008][T11887] mac80211_hwsim hwsim9 pim6reg0: left promiscuous mode [ 280.110787][T11885] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1628'. [ 280.255120][T11889] netlink: 'syz.4.1630': attribute type 5 has an invalid length. [ 280.301095][T11891] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 280.394691][T11893] ip6gre0: Master is either lo or non-ether device [ 280.617837][T11903] netlink: 'syz.4.1633': attribute type 4 has an invalid length. [ 280.999267][T11917] xt_cluster: node mask cannot exceed total number of nodes [ 281.689165][T11928] 8021q: adding VLAN 0 to HW filter on device bond8 [ 281.758558][T11935] macvtap1: entered promiscuous mode [ 281.800685][T11935] macvtap1: entered allmulticast mode [ 281.828179][T11935] veth1_to_bridge: entered promiscuous mode [ 281.838721][T11935] veth1_to_bridge: entered allmulticast mode [ 281.852462][T11935] team0: Device macvtap1 failed to register rx_handler [ 281.869525][T11922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1638'. [ 281.880982][T11935] veth1_to_bridge: left allmulticast mode [ 281.913452][T11935] veth1_to_bridge: left promiscuous mode [ 281.923095][T11922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1638'. [ 282.038308][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1647'. [ 282.196799][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1645'. [ 282.245701][T11922] team0: entered promiscuous mode [ 282.250813][T11922] team_slave_0: entered promiscuous mode [ 282.285438][T11922] team_slave_1: entered promiscuous mode [ 282.327008][T11922] dummy0: entered promiscuous mode [ 282.437118][T11922] bond0: entered promiscuous mode [ 282.463986][T11922] bond_slave_0: entered promiscuous mode [ 282.483645][T11922] bond_slave_1: entered promiscuous mode [ 282.506733][T11922] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 282.715242][T11958] bond11: entered promiscuous mode [ 282.756653][T11958] 8021q: adding VLAN 0 to HW filter on device bond11 [ 282.932656][T11973] xt_hashlimit: size too large, truncated to 1048576 [ 283.010844][T11975] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 283.129327][T11975] 0ªX¹¦Dö»: entered allmulticast mode [ 283.356720][T11987] netlink: 'syz.0.1655': attribute type 4 has an invalid length. [ 283.868623][T12004] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 283.931112][T12007] netlink: 'syz.0.1662': attribute type 18 has an invalid length. [ 283.969767][T12007] netlink: 'syz.0.1662': attribute type 18 has an invalid length. [ 284.406887][T12020] bond6 (unregistering): Released all slaves [ 284.594476][T12030] __nla_validate_parse: 6 callbacks suppressed [ 284.594497][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'. [ 284.751831][T12035] netlink: 'syz.1.1670': attribute type 8 has an invalid length. [ 284.897796][T12042] netlink: 'syz.0.1669': attribute type 4 has an invalid length. [ 285.306231][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1678'. [ 285.397487][T12056] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1678'. [ 285.663730][T12069] block nbd1: reconnected socket [ 285.695383][T12076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1679'. [ 285.699912][T12069] block nbd1: reconnected socket [ 285.837611][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 285.874963][ T5635] block nbd1: Receive control failed (result -32) [ 285.883128][ T5632] block nbd1: Receive control failed (result -32) [ 286.095587][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1682'. [ 286.150136][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1683'. [ 286.198068][T12088] openvswitch: netlink: Duplicate or invalid key (type 0). [ 286.266242][T12093] x_tables: unsorted underflow at hook 1 [ 286.344660][T12096] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 286.354069][ T29] IPVS: starting estimator thread 0... [ 286.418664][T12100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1687'. [ 286.452507][T12099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1687'. [ 286.472006][T12097] IPVS: using max 24 ests per chain, 57600 per kthread [ 286.647591][T12108] netlink: 'syz.4.1688': attribute type 4 has an invalid length. [ 287.200060][T12126] xt_hashlimit: size too large, truncated to 1048576 [ 287.267919][T12132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1696'. [ 287.370021][T12136] bond12: option mode: invalid value (222) [ 287.411284][T12136] bond12 (unregistering): Released all slaves [ 287.656551][T12144] netlink: 'syz.2.1694': attribute type 2 has an invalid length. [ 287.672330][T12144] netlink: 'syz.2.1694': attribute type 2 has an invalid length. [ 288.081461][T12159] tipc: Enabling of bearer rejected, failed to enable media [ 288.352961][ T30] audit: type=1800 audit(1785952801.789:9): pid=12173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1703" name="memory.events" dev="tmpfs" ino=1843 res=0 errno=0 [ 288.656574][T12185] netlink: 'syz.3.1705': attribute type 4 has an invalid length. [ 289.172625][T12201] sctp: [Deprecated]: syz.0.1712 (pid 12201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.172625][T12201] Use struct sctp_sack_info instead [ 289.198172][T12196] IPv6: NLM_F_REPLACE set, but no existing node found! [ 289.243306][T12205] IPv6: NLM_F_REPLACE set, but no existing node found! [ 289.734706][T12219] syzkaller0: entered promiscuous mode [ 289.764306][T12219] syzkaller0: entered allmulticast mode [ 289.959570][T12231] __nla_validate_parse: 4 callbacks suppressed [ 289.959591][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 290.073970][T12232] netlink: 'syz.0.1721': attribute type 4 has an invalid length. [ 290.268779][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 291.017459][T12272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1731'. [ 291.494169][T12270] veth3: entered promiscuous mode [ 291.853223][T12295] netlink: 'syz.0.1735': attribute type 4 has an invalid length. [ 291.966666][T12289] bond6: option fail_over_mac: invalid value (16) [ 292.087152][T12289] bond6 (unregistering): Released all slaves [ 292.146975][T12307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'. [ 292.491379][T12316] pimreg3: entered allmulticast mode [ 292.549967][T12321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1745'. [ 292.571205][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'. [ 292.593156][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1747'. [ 292.615371][T12321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1745'. [ 292.707967][T12322] veth3: entered allmulticast mode [ 292.820909][T12330] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1749'. [ 292.846522][T12329] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1749'. [ 293.808683][T12369] netlink: 'syz.1.1757': attribute type 4 has an invalid length. [ 294.328316][T12374] "syz.3.1760" (12374) uses obsolete ecb(arc4) skcipher [ 294.495527][T12396] netlink: 'syz.0.1764': attribute type 9 has an invalid length. [ 294.749708][T12407] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 294.856897][T12413] netlink: 'syz.1.1771': attribute type 1 has an invalid length. [ 295.120231][T12413] 8021q: adding VLAN 0 to HW filter on device bond12 [ 295.141111][T12422] __nla_validate_parse: 2 callbacks suppressed [ 295.141134][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1759'. [ 295.246135][T12415] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 295.430792][T12440] netlink: 'syz.3.1773': attribute type 4 has an invalid length. [ 295.557336][T12448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1775'. [ 295.568598][T12447] netlink: 'syz.0.1774': attribute type 1 has an invalid length. [ 295.706135][T12443] only policy match revision 0 supported [ 295.706160][T12443] unable to load match [ 296.088062][T12460] netlink: 'syz.3.1777': attribute type 1 has an invalid length. [ 296.346907][T12460] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.421554][T12467] netlink: 'syz.4.1779': attribute type 11 has an invalid length. [ 296.507390][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'. [ 296.579815][T12473] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1780'. [ 296.669788][T12473] netlink: 'syz.1.1780': attribute type 16 has an invalid length. [ 296.731999][T12473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1780'. [ 297.758755][T12507] netlink: 'syz.3.1787': attribute type 4 has an invalid length. [ 297.977175][T12512] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1790'. [ 298.002516][T12512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1790'. [ 298.264943][T12521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 298.272324][T12521] IPv6: NLM_F_CREATE should be set when creating new route [ 298.279694][T12521] IPv6: NLM_F_CREATE should be set when creating new route [ 298.459695][T12525] geneve3: entered promiscuous mode [ 299.061879][T12541] IPv6: addrconf: prefix option has invalid lifetime [ 299.326696][T12547] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1799'. [ 299.487851][T12555] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1801'. [ 299.598098][T12547] nbd: must specify a device to reconfigure [ 299.607309][T12546] xt_CT: No such helper "snmp" [ 299.637456][T12555] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1801'. [ 300.036767][T12574] IPVS: set_ctl: invalid protocol: 33 172.30.1.3:20004 [ 300.186061][T12576] macvlan0: left promiscuous mode [ 300.307594][T12576] netlink: 'syz.4.1806': attribute type 1 has an invalid length. [ 300.335912][T12576] netlink: 'syz.4.1806': attribute type 2 has an invalid length. [ 300.458067][T12587] netlink: 'syz.3.1808': attribute type 3 has an invalid length. [ 300.529983][T12587] netlink: 'syz.3.1808': attribute type 3 has an invalid length. [ 300.600382][T12597] netlink: 'syz.0.1810': attribute type 3 has an invalid length. [ 300.658197][T12597] __nla_validate_parse: 1 callbacks suppressed [ 300.658219][T12597] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1810'. [ 301.522286][T12622] netlink: 'syz.1.1816': attribute type 1 has an invalid length. [ 301.554545][ T30] audit: type=1800 audit(1785952814.999:10): pid=12633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1819" name="memory.events" dev="tmpfs" ino=1806 res=0 errno=0 [ 301.568560][T12622] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1816'. [ 301.649823][ T30] audit: type=1804 audit(1785952815.029:11): pid=12633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1819" name="/newroot/351/memory.events" dev="tmpfs" ino=1806 res=1 errno=0 [ 302.121400][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1821'. [ 302.433827][T12650] erspan0: entered promiscuous mode [ 302.830742][T12674] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 302.931118][T12674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.999416][T12676] xt_hashlimit: size too large, truncated to 1048576 [ 303.370596][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 303.426229][T12692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1831'. [ 303.485920][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1832'. [ 303.546764][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 303.645750][T12695] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1832'. [ 304.050021][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1836'. [ 304.299009][T12712] 8021q: adding VLAN 0 to HW filter on device bond13 [ 304.376522][T12719] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 304.917321][T12744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1843'. [ 305.040339][T12748] team0: Port device gtp1 added [ 305.331970][T12757] netlink: 'syz.3.1846': attribute type 6 has an invalid length. [ 305.694143][T12767] bond14: option lp_interval: invalid value (0) [ 305.700623][T12767] bond14: option lp_interval: allowed values 1 - 2147483647 [ 305.718435][T12767] bond14 (unregistering): Released all slaves [ 305.780317][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1850'. [ 306.163379][T12781] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1853'. [ 306.173884][T12777] netlink: 'syz.0.1851': attribute type 4 has an invalid length. [ 306.221162][T12786] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1853'. [ 306.473512][T12790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.508636][T12790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.569656][T12790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.628893][T12790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.688864][T12790] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 306.718613][T12796] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1856'. [ 306.747227][T12790] batman_adv: batadv0: Removing interface: ipvlan2 [ 306.908167][T12795] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 307.108708][T12813] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 307.146292][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 307.222608][T12815] netlink: 'syz.0.1859': attribute type 29 has an invalid length. [ 307.241846][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 307.609496][T12828] netlink: 'syz.2.1861': attribute type 23 has an invalid length. [ 307.890899][T12831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1863'. [ 308.789476][T12860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1873'. [ 308.822945][T12860] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 309.041078][T12867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1875'. [ 309.208888][T12865] syz.2.1876 (12865) used greatest stack depth: 16736 bytes left [ 309.430235][T12877] netlink: 420 bytes leftover after parsing attributes in process `syz.0.1878'. [ 309.938852][T12902] openvswitch: netlink: Duplicate or invalid key (type 0). [ 310.638021][T12926] veth1_macvtap: left promiscuous mode [ 310.679069][T12925] [ 310.681476][T12925] ====================================================== [ 310.688568][T12925] WARNING: possible circular locking dependency detected [ 310.695632][T12925] syzkaller #0 Not tainted [ 310.700071][T12925] ------------------------------------------------------ [ 310.707112][T12925] syz.2.1891/12925 is trying to acquire lock: [ 310.713207][T12925] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 310.723812][T12925] [ 310.723812][T12925] but task is already holding lock: [ 310.731737][T12925] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 310.741397][T12925] [ 310.741397][T12925] which lock already depends on the new lock. [ 310.741397][T12925] [ 310.751847][T12925] [ 310.751847][T12925] the existing dependency chain (in reverse order) is: [ 310.760883][T12925] [ 310.760883][T12925] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 310.768902][T12925] down_write+0x96/0x200 [ 310.773692][T12925] kernfs_add_one+0x41/0x5e0 [ 310.778832][T12925] kernfs_create_dir_ns+0x1a1/0x230 [ 310.784599][T12925] internal_create_group+0x440/0x1180 [ 310.790529][T12925] cpuhp_invoke_callback+0x434/0x810 [ 310.796475][T12925] cpuhp_issue_call+0x3f0/0x750 [ 310.801872][T12925] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 310.808482][T12925] __cpuhp_setup_state+0x3f/0x60 [ 310.813980][T12925] do_one_initcall+0x250/0x870 [ 310.819293][T12925] do_initcall_level+0x10a/0x1a0 [ 310.824777][T12925] do_initcalls+0x59/0xa0 [ 310.829649][T12925] kernel_init_freeable+0x29d/0x3e0 [ 310.835404][T12925] kernel_init+0x1d/0x1d0 [ 310.840288][T12925] ret_from_fork+0x514/0xb70 [ 310.845428][T12925] ret_from_fork_asm+0x1a/0x30 [ 310.850764][T12925] [ 310.850764][T12925] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 310.858619][T12925] [ 310.858619][T12925] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 310.866368][T12925] cpus_read_lock+0x42/0x160 [ 310.871503][T12925] static_key_slow_inc+0x12/0x30 [ 310.876989][T12925] nbd_genl_reconfigure+0x1301/0x1e80 [ 310.882897][T12925] genl_family_rcv_msg_doit+0x233/0x340 [ 310.888994][T12925] genl_rcv_msg+0x614/0x7a0 [ 310.894045][T12925] netlink_rcv_skb+0x226/0x4a0 [ 310.899373][T12925] genl_rcv+0x28/0x40 [ 310.903904][T12925] netlink_unicast+0x7bb/0x940 [ 310.909212][T12925] netlink_sendmsg+0x813/0xb40 [ 310.914516][T12925] sock_sendmsg_nosec+0x13a/0x180 [ 310.920090][T12925] ____sys_sendmsg+0x54e/0x850 [ 310.925394][T12925] ___sys_sendmsg+0x2a5/0x360 [ 310.930612][T12925] __x64_sys_sendmsg+0x1b1/0x290 [ 310.936088][T12925] do_syscall_64+0x174/0x580 [ 310.941221][T12925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.947653][T12925] [ 310.947653][T12925] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 310.955412][T12925] __mutex_lock+0x19d/0x1550 [ 310.960553][T12925] nbd_queue_rq+0x373/0x1150 [ 310.965685][T12925] blk_mq_dispatch_rq_list+0x499/0x1990 [ 310.971772][T12925] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 310.978653][T12925] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 310.985177][T12925] blk_mq_run_work_fn+0x16c/0x300 [ 310.990778][T12925] process_scheduled_works+0xa8e/0x14e0 [ 310.996874][T12925] worker_thread+0xa47/0xfb0 [ 311.002001][T12925] kthread+0x388/0x470 [ 311.006634][T12925] ret_from_fork+0x514/0xb70 [ 311.011775][T12925] ret_from_fork_asm+0x1a/0x30 [ 311.017163][T12925] [ 311.017163][T12925] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 311.024398][T12925] __mutex_lock+0x19d/0x1550 [ 311.029537][T12925] nbd_queue_rq+0xc1/0x1150 [ 311.034578][T12925] blk_mq_dispatch_rq_list+0x499/0x1990 [ 311.040674][T12925] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 311.047553][T12925] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 311.054080][T12925] blk_mq_run_work_fn+0x16c/0x300 [ 311.059641][T12925] process_scheduled_works+0xa8e/0x14e0 [ 311.065727][T12925] worker_thread+0xa47/0xfb0 [ 311.070865][T12925] kthread+0x388/0x470 [ 311.075483][T12925] ret_from_fork+0x514/0xb70 [ 311.080645][T12925] ret_from_fork_asm+0x1a/0x30 [ 311.085951][T12925] [ 311.085951][T12925] -> #4 (set->srcu){.+.+}-{0:0}: [ 311.093105][T12925] __synchronize_srcu+0xc9/0x2f0 [ 311.098595][T12925] elevator_switch+0x1e8/0x7b0 [ 311.103903][T12925] elevator_change+0x2fa/0x480 [ 311.109248][T12925] elevator_set_default+0x375/0x440 [ 311.114991][T12925] blk_register_queue+0x3f3/0x4e0 [ 311.120558][T12925] __add_disk+0x6cb/0xe30 [ 311.125510][T12925] add_disk_fwnode+0x100/0x3a0 [ 311.130811][T12925] nbd_dev_add+0x733/0xb60 [ 311.135774][T12925] nbd_init+0x15f/0x1e0 [ 311.140469][T12925] do_one_initcall+0x250/0x870 [ 311.145779][T12925] do_initcall_level+0x10a/0x1a0 [ 311.151260][T12925] do_initcalls+0x59/0xa0 [ 311.156130][T12925] kernel_init_freeable+0x29d/0x3e0 [ 311.161873][T12925] kernel_init+0x1d/0x1d0 [ 311.166756][T12925] ret_from_fork+0x514/0xb70 [ 311.171903][T12925] ret_from_fork_asm+0x1a/0x30 [ 311.177199][T12925] [ 311.177199][T12925] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 311.185036][T12925] __mutex_lock+0x19d/0x1550 [ 311.190169][T12925] elevator_change+0x1af/0x480 [ 311.195477][T12925] elevator_set_none+0xb5/0x140 [ 311.200961][T12925] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 311.207305][T12925] nbd_start_device+0x189/0xb30 [ 311.212696][T12925] nbd_genl_connect+0x1597/0x1c10 [ 311.218263][T12925] genl_family_rcv_msg_doit+0x233/0x340 [ 311.224360][T12925] genl_rcv_msg+0x614/0x7a0 [ 311.229408][T12925] netlink_rcv_skb+0x226/0x4a0 [ 311.234799][T12925] genl_rcv+0x28/0x40 [ 311.239325][T12925] netlink_unicast+0x7bb/0x940 [ 311.244637][T12925] netlink_sendmsg+0x813/0xb40 [ 311.249943][T12925] sock_sendmsg_nosec+0x13a/0x180 [ 311.255517][T12925] ____sys_sendmsg+0x54e/0x850 [ 311.260907][T12925] ___sys_sendmsg+0x2a5/0x360 [ 311.266122][T12925] __x64_sys_sendmsg+0x1b1/0x290 [ 311.271608][T12925] do_syscall_64+0x174/0x580 [ 311.276770][T12925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.283227][T12925] [ 311.283227][T12925] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 311.291868][T12925] blk_alloc_queue+0x544/0x690 [ 311.297204][T12925] __blk_mq_alloc_disk+0x194/0x390 [ 311.302992][T12925] nbd_dev_add+0x494/0xb60 [ 311.307966][T12925] nbd_init+0x15f/0x1e0 [ 311.312669][T12925] do_one_initcall+0x250/0x870 [ 311.317984][T12925] do_initcall_level+0x10a/0x1a0 [ 311.323468][T12925] do_initcalls+0x59/0xa0 [ 311.328345][T12925] kernel_init_freeable+0x29d/0x3e0 [ 311.334097][T12925] kernel_init+0x1d/0x1d0 [ 311.338981][T12925] ret_from_fork+0x514/0xb70 [ 311.344126][T12925] ret_from_fork_asm+0x1a/0x30 [ 311.349438][T12925] [ 311.349438][T12925] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 311.356678][T12925] fs_reclaim_acquire+0x71/0x100 [ 311.362178][T12925] kmem_cache_alloc_noprof+0x64/0x5f0 [ 311.368106][T12925] __kernfs_iattrs+0xdd/0x380 [ 311.373340][T12925] kernfs_iop_setattr+0xe6/0x3f0 [ 311.378832][T12925] notify_change+0xbba/0xea0 [ 311.383970][T12925] do_truncate+0x1c2/0x250 [ 311.388932][T12925] path_openat+0x2fed/0x3830 [ 311.394086][T12925] do_file_open+0x23e/0x4a0 [ 311.399187][T12925] do_sys_openat2+0x115/0x200 [ 311.404496][T12925] __x64_sys_openat+0x138/0x170 [ 311.409893][T12925] do_syscall_64+0x174/0x580 [ 311.415040][T12925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.421519][T12925] [ 311.421519][T12925] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 311.430059][T12925] __lock_acquire+0x1520/0x2cf0 [ 311.435453][T12925] lock_acquire+0x106/0x350 [ 311.440499][T12925] down_write+0x96/0x200 [ 311.445282][T12925] kernfs_link_sibling+0x4c7/0x5a0 [ 311.450940][T12925] kernfs_add_one+0x1d2/0x5e0 [ 311.456170][T12925] __kernfs_create_file+0x22b/0x2e0 [ 311.461916][T12925] sysfs_add_file_mode_ns+0x237/0x300 [ 311.467829][T12925] sysfs_create_file_ns+0x12b/0x1b0 [ 311.473569][T12925] idletimer_tg_checkentry+0x41a/0xa70 [ 311.479573][T12925] xt_check_target+0x619/0xca0 [ 311.484883][T12925] translate_table+0x1821/0x2040 [ 311.490390][T12925] do_ip6t_set_ctl+0xa5c/0xe30 [ 311.495711][T12925] nf_setsockopt+0x26f/0x290 [ 311.500849][T12925] do_sock_setsockopt+0x17c/0x1b0 [ 311.506441][T12925] __x64_sys_setsockopt+0x13d/0x1b0 [ 311.512172][T12925] do_syscall_64+0x174/0x580 [ 311.517303][T12925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.523729][T12925] [ 311.523729][T12925] other info that might help us debug this: [ 311.523729][T12925] [ 311.533969][T12925] Chain exists of: [ 311.533969][T12925] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 311.533969][T12925] [ 311.548513][T12925] Possible unsafe locking scenario: [ 311.548513][T12925] [ 311.555982][T12925] CPU0 CPU1 [ 311.561446][T12925] ---- ---- [ 311.566823][T12925] lock(&root->kernfs_rwsem); [ 311.571607][T12925] lock(cpuhp_state_mutex); [ 311.578819][T12925] lock(&root->kernfs_rwsem); [ 311.586127][T12925] lock(&root->kernfs_iattr_rwsem); [ 311.591429][T12925] [ 311.591429][T12925] *** DEADLOCK *** [ 311.591429][T12925] [ 311.599583][T12925] 2 locks held by syz.2.1891/12925: [ 311.604804][T12925] #0: ffffffff900db200 (list_mutex){+.+.}-{4:4}, at: idletimer_tg_checkentry+0x70/0xa70 [ 311.614675][T12925] #1: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 311.624544][T12925] [ 311.624544][T12925] stack backtrace: [ 311.630453][T12925] CPU: 1 UID: 0 PID: 12925 Comm: syz.2.1891 Not tainted syzkaller #0 PREEMPT(full) [ 311.630474][T12925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.630499][T12925] Call Trace: [ 311.630509][T12925] [ 311.630518][T12925] dump_stack_lvl+0xe8/0x150 [ 311.630547][T12925] print_circular_bug+0x2e1/0x300 [ 311.630568][T12925] check_noncircular+0x12e/0x150 [ 311.630589][T12925] __lock_acquire+0x1520/0x2cf0 [ 311.630619][T12925] ? __lock_acquire+0x683/0x2cf0 [ 311.630652][T12925] ? kernfs_link_sibling+0x4c7/0x5a0 [ 311.630678][T12925] lock_acquire+0x106/0x350 [ 311.630702][T12925] ? kernfs_link_sibling+0x4c7/0x5a0 [ 311.630736][T12925] down_write+0x96/0x200 [ 311.630759][T12925] ? kernfs_link_sibling+0x4c7/0x5a0 [ 311.630786][T12925] ? __pfx_down_write+0x10/0x10 [ 311.630808][T12925] ? kernfs_root+0x1c/0x230 [ 311.630833][T12925] ? kernfs_root+0x1c/0x230 [ 311.630856][T12925] ? kernfs_root+0x1c/0x230 [ 311.630881][T12925] ? kernfs_root+0x1ea/0x230 [ 311.630906][T12925] kernfs_link_sibling+0x4c7/0x5a0 [ 311.630938][T12925] kernfs_add_one+0x1d2/0x5e0 [ 311.630967][T12925] __kernfs_create_file+0x22b/0x2e0 [ 311.630988][T12925] sysfs_add_file_mode_ns+0x237/0x300 [ 311.631013][T12925] sysfs_create_file_ns+0x12b/0x1b0 [ 311.631035][T12925] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 311.631057][T12925] ? __asan_memcpy+0x40/0x70 [ 311.631081][T12925] idletimer_tg_checkentry+0x41a/0xa70 [ 311.631107][T12925] xt_check_target+0x619/0xca0 [ 311.631146][T12925] ? __pfx_xt_check_target+0x10/0x10 [ 311.631174][T12925] ? pcpu_alloc_noprof+0x1036/0x1900 [ 311.631200][T12925] ? xt_find_target+0x20f/0x260 [ 311.631229][T12925] translate_table+0x1821/0x2040 [ 311.631264][T12925] ? __pfx_translate_table+0x10/0x10 [ 311.631286][T12925] ? __might_fault+0xaf/0x130 [ 311.631307][T12925] ? __might_fault+0xaf/0x130 [ 311.631336][T12925] ? _copy_from_user+0x94/0xb0 [ 311.631355][T12925] do_ip6t_set_ctl+0xa5c/0xe30 [ 311.631383][T12925] ? rcu_is_watching+0x15/0xb0 [ 311.631399][T12925] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 311.631430][T12925] ? __mutex_unlock_slowpath+0x731/0x900 [ 311.631453][T12925] ? aa_sk_perm+0x6d5/0x900 [ 311.631471][T12925] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.631495][T12925] ? __pfx_aa_sk_perm+0x10/0x10 [ 311.631515][T12925] nf_setsockopt+0x26f/0x290 [ 311.631543][T12925] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 311.631571][T12925] do_sock_setsockopt+0x17c/0x1b0 [ 311.631593][T12925] __x64_sys_setsockopt+0x13d/0x1b0 [ 311.631612][T12925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.631633][T12925] do_syscall_64+0x174/0x580 [ 311.631654][T12925] ? trace_irq_disable+0x3b/0x140 [ 311.631677][T12925] ? clear_bhb_loop+0x40/0x90 [ 311.631697][T12925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.631719][T12925] RIP: 0033:0x7f81c599e0d9 [ 311.631739][T12925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.631758][T12925] RSP: 002b:00007f81c68da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 311.631778][T12925] RAX: ffffffffffffffda RBX: 00007f81c5c25fa0 RCX: 00007f81c599e0d9 [ 311.631794][T12925] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 311.631807][T12925] RBP: 00007f81c5a35024 R08: 00000000000003c8 R09: 0000000000000000 [ 311.631822][T12925] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 311.631837][T12925] R13: 00007f81c5c26038 R14: 00007f81c5c25fa0 R15: 00007ffe0dccb0e8 [ 311.631864][T12925] [ 312.227704][T12925] can: request_module (can-proto-0) failed. [ 317.143176][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.150773][ T1317] ieee802154 phy1 wpan1: encryption failed: -22