last executing test programs: 23.199891854s ago: executing program 0 (id=9714): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r7, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000180)='\'', 0x1}, {&(0x7f0000000280)="3b9ca6193b47dccfb6d8300f60b5142457595e", 0x13}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) 22.950832959s ago: executing program 0 (id=9716): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x5c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @beacon={{{}, {0x9}, @broadcast}, 0x0, @default, 0x4001, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x9, 0x7e, 0x7}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x2, 0xb0, 0x5}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x800) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="84000940080211000001ffffffffffff062000608a0075a83666fac5412900505e0091f98fac860ab745"], 0x2a) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000140)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x5c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @beacon={{{}, {0x9}, @broadcast}, 0x0, @default, 0x4001, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x9, 0x7e, 0x7}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x2, 0xb0, 0x5}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x800) (async) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async) syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="84000940080211000001ffffffffffff062000608a0075a83666fac5412900505e0091f98fac860ab745"], 0x2a) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000140)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080) (async) 20.711871528s ago: executing program 0 (id=9718): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xd0d4, 0x50}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004002}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x101}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x2000) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, 0x1, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x200}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x27fa5c991c2bbcb5}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x200000, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000ffff27bd7000fadbdf0d254e9591b48954088e5a98b49370de53add62d2a4888f35d8e0d4bbcb535641d9a90f06683665785697a", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e00000000180002800c0002001a00000017000000060001000100000008000500", @ANYRES32=r4, @ANYBLOB], 0x50}}, 0x8048802) 20.499120213s ago: executing program 0 (id=9723): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000280)={0x9, @remote}, &(0x7f00000002c0)=0x12, 0x800) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000340)={0x57, "1976af13e45b376c6802e4b6ce8db13093c6b59372b8cb209c8a69268425035b3112236b74cb88566d59a0f7f43826721db22420dc1e817e8310229e4ec4145fc43318793ab33cbfd478fcb6d06d3c9933d5a275aa973e61587757681b2c5d33969175b0f53353231073889c0e83435ce8dccf77efb68e9af6e781a9fe842d59"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, 0x0, 0x0) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=@mpls_newroute={0x148, 0x18, 0x8, 0x70bd25, 0x25dfdbfc, {0x1c, 0x80, 0x10, 0x80, 0x0, 0x1, 0xfd, 0x6, 0x3300}, [@RTA_NEWDST={0x84, 0x13, [{0xc}, {0x5, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3c}, {0x5cf2}, {0x5}, {0xd, 0x0, 0x1}, {0x4}, {0x3, 0x0, 0x1}, {0x5}, {0x7fff}, {0xe3323, 0x0, 0x1}, {0x5}, {0x8000, 0x0, 0x1}, {}, {0x8000, 0x0, 0x1}, {0xd, 0x0, 0x1}, {0xffff0}, {0x8000, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7d41}, {}, {0x4}, {0xb}, {0x2, 0x0, 0x1}, {0xfce, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x9}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0xa, 0x2, r7}}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x31, 0x80, r3}}, @RTA_NEWDST={0x84, 0x13, [{0x9, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0xa}, {0x8, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7}, {0x8, 0x0, 0x1}, {}, {0x7fff}, {}, {0x401}, {0x81}, {0x8, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x3}, {0x9}, {0x9}, {0x81, 0x0, 0x1}, {0xb}, {0x5}, {0x5}, {0x3, 0x0, 0x1}, {0x52}, {0x200}, {0x6}, {0x5, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5a7, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xc, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x10, 0x80, r1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x24004c84) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 20.019283609s ago: executing program 0 (id=9729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000280)={@private1, @private=0xa010100, 0x14, 0x1f}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000100070000000900020073797a32000000000000078008ff7f000000000000000500020000000500040000000000110003cf243ba6003de69d742c6e657400000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 19.847840208s ago: executing program 0 (id=9732): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000600)={{0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x200000, &(0x7f0000000180)={@_ha_fsid={[0x7f]}, {0xf, 0x7, 0x1, 0x9}}, 0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=0x6}, 0x3, &(0x7f0000000580)=[{0x1, 0x7275464c, &(0x7f0000000240)='\'.+\x00', &(0x7f0000000280)="bb5a89fd76a2e8ac73d242464f05a8d7a7c2e858dbb4bc927eddb38855fe7e36ac366e5bf151c6759106cadab942a259548f839f11cc6e633dd642c3a25d1284e597bc023ad816844e89301f1ff150d057c2ea83d96ebcce158708928b9f4aad665d21c8ec433d84b91f496a18f2603bc30a8f029fff9c13fcdd26bcac8278f434", 0x81, 0xa}, {0x2, 0x1, &(0x7f0000000340)='+)*-@@^*\x00', &(0x7f0000000380)="6d7100fcc9272d840b52c1e04b79588685246f3085c395b7757bbf5b14b9fdf637ebfb31eed2a9b0f9c2162a37a3883dd462abd7ab6f3ade74079223c4f1745e740546c9b725fc5c3d905687d8da954f6a648c3d0bc0953d39cee5a00c9e593f748beba666b4e264277a44676cf957d8579bc66e72a13940746213bf4806483b6aa694232cd2163cd8756227d05053b644e874e8c17f1d4922b57350fd29585869cdc96066a256e3d9567b103fedbc4667ce916f83f81e91205d9e469e160bcf9cc5", 0xc2, 0x28}, {0x2, 0xfff, &(0x7f0000000480)='\x00', &(0x7f00000004c0)="56986b33cd5773670897d1268b1b2ed03c426d87092bb7c8fbad14a5b2f7e96db4eeb226e2b433aed4552c138c27d782a6336e371959563fe4c1777d566a5cb84af30d1540fe6069e778f59ecabfa36ee7f4100dfde15c47b6165e12a827801074405ab77100d8db779ae197daea0eb58cbc4df17bc3f9aff14d90bf8bae3b9f3aa82ba5ec610fea59675e511b5607e4dece47", 0x93, 0x12}]}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000280)=0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffe00}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x47c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) 4.841420493s ago: executing program 32 (id=9732): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000600)={{0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x200000, &(0x7f0000000180)={@_ha_fsid={[0x7f]}, {0xf, 0x7, 0x1, 0x9}}, 0x80000000, &(0x7f00000001c0), &(0x7f0000000200)=0x6}, 0x3, &(0x7f0000000580)=[{0x1, 0x7275464c, &(0x7f0000000240)='\'.+\x00', &(0x7f0000000280)="bb5a89fd76a2e8ac73d242464f05a8d7a7c2e858dbb4bc927eddb38855fe7e36ac366e5bf151c6759106cadab942a259548f839f11cc6e633dd642c3a25d1284e597bc023ad816844e89301f1ff150d057c2ea83d96ebcce158708928b9f4aad665d21c8ec433d84b91f496a18f2603bc30a8f029fff9c13fcdd26bcac8278f434", 0x81, 0xa}, {0x2, 0x1, &(0x7f0000000340)='+)*-@@^*\x00', &(0x7f0000000380)="6d7100fcc9272d840b52c1e04b79588685246f3085c395b7757bbf5b14b9fdf637ebfb31eed2a9b0f9c2162a37a3883dd462abd7ab6f3ade74079223c4f1745e740546c9b725fc5c3d905687d8da954f6a648c3d0bc0953d39cee5a00c9e593f748beba666b4e264277a44676cf957d8579bc66e72a13940746213bf4806483b6aa694232cd2163cd8756227d05053b644e874e8c17f1d4922b57350fd29585869cdc96066a256e3d9567b103fedbc4667ce916f83f81e91205d9e469e160bcf9cc5", 0xc2, 0x28}, {0x2, 0xfff, &(0x7f0000000480)='\x00', &(0x7f00000004c0)="56986b33cd5773670897d1268b1b2ed03c426d87092bb7c8fbad14a5b2f7e96db4eeb226e2b433aed4552c138c27d782a6336e371959563fe4c1777d566a5cb84af30d1540fe6069e778f59ecabfa36ee7f4100dfde15c47b6165e12a827801074405ab77100d8db779ae197daea0eb58cbc4df17bc3f9aff14d90bf8bae3b9f3aa82ba5ec610fea59675e511b5607e4dece47", 0x93, 0x12}]}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000280)=0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffe00}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x47c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) 3.127584388s ago: executing program 2 (id=10003): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e41", 0x28}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e41", 0x28}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000240)=""/123, 0x7b}], 0x1) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'veth0_to_bridge\x00', @link_local}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.072073151s ago: executing program 2 (id=10017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0x400, 0x70bd27, 0x25dfdc01, {0x2, 0x80, 0x20, 0xff, 0x7, 0x0, 0x0, 0x4, 0x10}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x44051) 2.050457884s ago: executing program 2 (id=10018): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0], 0xfe33) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) (async) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000000)={0x28, 0x25, 0x1, 0x70bd25, 0x25dfdbfc, {0x2}, [@typed={0xc, 0x10a, 0x0, 0x0, @u64}, @typed={0x8, 0x3, 0x0, 0x0, @binary='3\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x3800c957}, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1.348021319s ago: executing program 3 (id=10027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x150, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x120, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xd4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3a}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000ff000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x2, r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xfffffffffffffc82, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x8}}, 0x10) 1.347753588s ago: executing program 4 (id=10028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'wg2\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000001c0), 0x12) (async) write$cgroup_int(r2, &(0x7f00000001c0), 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) poll(&(0x7f0000000040)=[{r0, 0x3480}, {r0, 0x2000}, {r3, 0x400}], 0x3, 0x3) (async) poll(&(0x7f0000000040)=[{r0, 0x3480}, {r0, 0x2000}, {r3, 0x400}], 0x3, 0x3) 1.102965434s ago: executing program 2 (id=10031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000280)={0x954, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x26, 0x30, 0x1, 0x0, 0x6, 0x18, 0x2, 0x24, 0x18]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1}, {}, {0x5, 0x3}, {0x6, 0x6}, {0x7, 0xa}, {0x0, 0xa}, {0x4, 0x1}, {0x3, 0xa}, {0x5, 0x8}, {0x2, 0x7}, {0x7, 0x4}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x4, 0x6}, {0x0, 0x7}, {0x6, 0x2}, {0x1, 0x6}, {0x1, 0x3}, {0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x3, 0x4}, {0x6, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x5, 0x6}, {0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x2}, {0x4, 0x5}, {0x6}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0x7}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x6}, {0x4, 0x1}, {0x3, 0x2}, {0x7}, {}, {0x4, 0x7}, {0x4, 0x3}, {0x3, 0x5}, {0x0, 0x4}, {0x0, 0x9}, {0x5, 0xa}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x5}, {0x5, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfed, 0xe, 0x8, 0x5, 0x9, 0x1, 0x0, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x5, 0xfff, 0x9, 0xbf9, 0x4, 0x8, 0x73]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0xa}, {0x3, 0xa}, {0x2, 0x3}, {0x2, 0x3}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x6}, {0x6, 0x1}, {0x5, 0x9}, {0x5, 0xa}, {0x7, 0x5}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0x6}, {0x6, 0x7}, {0x5, 0x3}, {0x7, 0x1}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x1}, {0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x0, 0x5}, {0x7, 0x4}, {0x2, 0x6}, {0x7, 0xa}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x6}, {0x7, 0x7}, {0x5, 0x7}, {0x6, 0x6}, {0x0, 0x3}, {0x4, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x7, 0x10}, {0x7, 0x5}, {0x7, 0x7}, {}, {0x1, 0x7}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x1}, {0x0, 0xa}, {0x4, 0x4}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x5}, {0x5, 0xa}, {0x1, 0x8}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x5}, {0x1, 0xa}, {0x6, 0x4}, {0x3, 0x7}, {0x7, 0x7}, {0x1}, {0x6, 0x3}, {0x7, 0x2}, {0x3, 0x8}, {0x5, 0x4}, {0x0, 0x3}, {0x6, 0x2}, {}, {0x7, 0x4}, {0x7, 0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x6}, {0x2, 0x2}, {0x3, 0xa}, {0x0, 0x5}, {0x4}, {0x2, 0x4}, {}, {0x7, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x3, 0xa}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xd, 0x8d, 0x9, 0x10, 0xd494, 0xcc, 0x7ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0xfc, 0x101, 0x2, 0x0, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0xd6, 0x5c, 0x4, 0x17a9, 0x1, 0x19]}}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x4, 0x3f00, 0x8, 0x5, 0x4a88, 0x1000, 0x2bbf]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ef7, 0x1ff, 0x1000, 0xff55, 0x2, 0x6, 0x9, 0x56]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x3ff, 0xe, 0x8, 0x7, 0x5, 0x5, 0x1]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x1, 0x9, 0x9, 0x18, 0xdd043c5d2139e12f, 0x2, 0x18, 0x12, 0x66, 0x9, 0x12, 0x6c, 0x5, 0x13, 0x7d, 0x48, 0x16, 0x2, 0x16]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x16, 0x9, 0x16, 0x62, 0x12, 0x9, 0xc, 0xc, 0x9, 0x6c, 0x18, 0x5e, 0x69, 0x16, 0x6c, 0x0, 0x16, 0x48, 0x3, 0x5, 0xb, 0x36, 0x36, 0x3]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x36, 0x48, 0x18, 0x24, 0x60, 0x3, 0x2f, 0x30, 0x1, 0x4, 0x2, 0x36, 0x60, 0x60, 0x6c, 0x4fa8f2c143769fcd, 0x60, 0x1b, 0x60, 0x4, 0x4, 0x7d, 0x6c, 0x30, 0x60, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x0, 0x16, 0x6c, 0x24, 0x24, 0x2, 0xc, 0x9, 0x1, 0x24, 0x3, 0x1b, 0x30, 0x6, 0x30, 0x24, 0x36, 0x5, 0x36, 0x2, 0x4, 0x4, 0x60, 0x16, 0x6c, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfff6, 0x3af7, 0x0, 0x5083, 0x4, 0xe450, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x3, 0x2, 0x4, 0x8, 0x1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x9, 0x7, 0x9, 0x3, 0x100, 0x7]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7, 0x9}, {0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x2}, {0x5, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x7}, {0x4, 0x9}, {0x2, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x1, 0x9}, {0x1}, {0x6, 0x9}, {0x3, 0x1}, {0x2, 0x7}, {0x4, 0xa}, {0x7, 0x3}, {0x0, 0x8}, {0x3, 0xa}, {}, {0x6, 0x2}, {0x3, 0x5}, {0x1}, {0x1, 0x7}, {0x5, 0x3}, {0x7, 0x9}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0x4}, {0x7, 0x5}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x7}, {0x5, 0x6}, {0x4, 0x9}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0x1}, {0x5, 0x5}, {0x3, 0x9}, {0x6, 0x1}, {0x4, 0x8}, {0x3, 0xa}, {0x1, 0x4}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x5}, {0x4, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x9}, {0x3, 0x3}, {0x6, 0x7}, {0x7}, {0x3}, {0x0, 0x7}, {0x5, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x9}, {0x5, 0x5}, {0x2, 0x2}, {0x4, 0x5}, {0x1, 0x7}, {}, {0x4, 0x6}, {0x3}, {0x4, 0x7}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x2}, {0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x3, 0x5}, {0x3, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7ff, 0x9, 0x7fff, 0x60, 0x5, 0x9794, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x90, 0x499, 0x101, 0x0, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x47615676b2dc3a2d, 0x5, 0x6c, 0x22, 0x2, 0x9, 0x60, 0x30, 0x18, 0x1, 0x1, 0x1b, 0x6c, 0x6, 0x16, 0x9, 0x4, 0x1, 0x5, 0x60, 0x64, 0x30, 0x60, 0x2, 0x16, 0x6c, 0x6, 0x64, 0x1]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3d, 0x36, 0x6c, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x50b, 0x61, 0x6, 0x0, 0x6, 0x100, 0x94, 0xd1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xfff7, 0x544b, 0x2, 0x1, 0x9, 0x5, 0x400]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x8}, {0x6, 0xa}, {0x3, 0x3}, {0x2, 0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x7, 0x8}, {0x1, 0x1}, {0x7, 0x7}, {0x0, 0x5}, {0x4}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x8}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x5, 0xa}, {0x2, 0x1}, {0x6, 0x4}, {0x5, 0x6}, {0x7, 0x9}, {0x2, 0x3}, {0x6, 0x7}, {0x1, 0x1}, {0x6}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x7}, {0x0, 0x5}, {0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x7, 0x7}, {0x1, 0x1}, {0x1, 0x7}, {0x6, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x8}, {0x4, 0x8}, {0x5, 0x5}, {0x6, 0x5}, {0x3, 0x7}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x6}, {0x5}, {0x4, 0x5}, {0x3, 0x1}, {0x3, 0x6}, {0x4, 0x4}, {0x3, 0x5}, {0x3, 0x2}, {0x4, 0x9}, {}, {0x0, 0x1}, {0x5, 0xa}, {0x7, 0x6}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x3, 0x9}, {0x4, 0x5}, {0x2, 0x8}, {0x0, 0x6}, {}, {0x7, 0x7}, {0x5, 0x7}, {0x1}, {0x2, 0x4}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x10, 0x16, 0x2ba250c41c22ad90, 0x36, 0x5, 0x6c, 0x60, 0x60, 0x9, 0x4, 0x9, 0xc, 0x1, 0x16, 0x5, 0x19, 0x6, 0x5, 0x16, 0x4e, 0x16, 0x9, 0x36, 0x18, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0xe, 0x6, 0x8, 0x7, 0xfffe, 0x7e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x9, 0x81, 0x4, 0x0, 0x1, 0x962, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x8, 0x2, 0x7, 0x4, 0xff6d, 0x3ff, 0x4]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x36, 0x1, 0x16, 0x36, 0x5, 0x1b, 0xc, 0x9]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x5, 0x7}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x7, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x3, 0x8}, {0x6, 0xa}, {0x3, 0x2}, {0x5, 0x9}, {0x4, 0x1}, {0x2, 0x9}, {0x6, 0xa}, {0x6, 0x1}, {0x7, 0x1}, {0x4, 0xa}, {0x6, 0x9}, {0x4, 0x7}, {0x5, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x2d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1c, 0x5, 0xfff8, 0x2794, 0x1, 0x0, 0x8]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x2, 0x2}, {0x6, 0x5}, {0x6, 0x6}, {0x5, 0x6}, {0x7}, {0x1, 0x4}, {0x0, 0x5}, {0x7, 0x6}, {0x0, 0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x5}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x6}, {0x3, 0x2}, {0x6, 0x6}, {0x7}, {0x6, 0x3}, {0x5, 0x4}, {0x2, 0x4}, {0x3, 0xa}, {0x4, 0x8}, {0x1, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x2, 0x5}, {0x1, 0x5}, {0x4, 0x3}, {0x4, 0xa}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x7, 0x6}, {0x1, 0x8}, {0x6, 0x2}, {0x6, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x2, 0x60, 0x5, 0x9, 0x12, 0x5, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x2, 0x2, 0x3ff, 0x6, 0x6, 0x1]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x5}, {0x0, 0x2}, {0x3, 0x6}, {0x3, 0x2}, {0x7, 0x2}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x5, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x6, 0x3}, {0x3, 0x6}, {0x2, 0x1}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x2}, {0x0, 0x8}, {}, {0x0, 0x6}, {0x0, 0x9}, {0x7}, {0x6, 0x6}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0x3}, {0x4, 0x5}, {0x7, 0x5}, {0x6, 0x8}, {0x2}, {0x3}, {0x3}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x3, 0x9}, {0x6, 0x8}, {0x5, 0x8}, {0x2, 0x2}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x2, 0xa}, {0x7, 0x4}, {0x7, 0x3}, {0x7, 0x1}, {0x3, 0xa}, {0x5, 0x1}, {0x3, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x7}, {0x6}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x9, 0x24, 0x24, 0xc, 0x6, 0x2, 0x1b, 0x1, 0xc2bb45544b5cf4ad, 0x9, 0xc, 0x3, 0x12, 0x30, 0x6, 0x18, 0x18, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x7fff, 0x9, 0x80, 0x3, 0x100, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x5, 0xd, 0x4, 0x1, 0x1, 0xb1b6]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0xb, 0xb, 0x5, 0x4, 0x3, 0xd]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0x6}, {0x7, 0x3}, {0x4, 0x4}, {0x4, 0x7}, {0x1, 0x6}, {0x3, 0x2}, {0x1, 0x1}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0x3}, {0x1, 0x9}, {0x6}, {0x6, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x2, 0x7}, {0x4, 0x8}, {0x3, 0x5}, {0x4, 0x3}, {0x7, 0x5}, {0x6, 0x2}, {0x3, 0x9}, {0x5, 0x7}, {0x0, 0x7}, {0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x7, 0x1}, {0x7, 0xa}, {0x5}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0x8}, {0x5, 0x5}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x7}, {0x4, 0x4}, {0x4, 0x4}, {0x7, 0x8}, {0x2, 0x2}, {0x0, 0x8}, {0x6, 0x3}, {0x5, 0xa}, {0x6, 0x9}, {0x7, 0x3}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x8}, {0x0, 0x9}, {0x3, 0x5}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0xa}, {0x2, 0x2}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x54a, 0xfff9, 0x6, 0x8, 0x6, 0x2, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1, 0x2, 0x9]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x5, 0xfff7, 0x3, 0x0, 0xffff, 0x3]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x4}, {0x6, 0x1}, {0x0, 0x2}, {0x7, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x6}, {0x7, 0x2}, {0x6, 0x1}, {0x6, 0x5}, {0x4, 0x6}, {0x2, 0x2}, {0x4, 0x6}, {0x2, 0x9}, {0x1, 0x7}, {0x2, 0x9}, {0x7, 0x5}, {0x5, 0x2}, {0x6, 0x6}, {}, {0x6}, {0x2, 0x5}, {0x0, 0x3}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0x9}, {0x5, 0x4}, {0x5}, {0x5, 0x3}, {0x6, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x5, 0x1}, {0x5, 0x3}, {0x0, 0xa}, {0x2, 0x5}, {0x2, 0x6}, {0x0, 0x8}, {0x7, 0x8}, {0x0, 0x1}, {0x0, 0x2}, {0x6, 0x7}, {0x6, 0x8}, {0x6, 0x6}, {0x7, 0x5}, {0x6, 0x2}, {0x6, 0x6}, {0x0, 0xa}, {0x6}, {0x2, 0x8}, {0x1, 0x2}, {0x7, 0x2}, {0x1, 0x9}, {0x5, 0x6}, {0x4}, {0x0, 0x5}, {0x4, 0x5}, {0x4, 0x9}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x1}, {0x0, 0x2}, {0x4}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x1b02, 0x101, 0x1, 0x9, 0x5, 0x3]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6}, {0x6, 0x5}, {0x1, 0x1}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x4}, {0x4, 0x6}, {0x7, 0x6}, {0x1}, {0x5, 0x3}, {0x2, 0x4}, {0x3, 0xa}, {0x7, 0x2}, {0x5, 0x6}, {0x5}, {0x6, 0x7}, {0x6, 0x4}, {0x7, 0xa}, {0x1, 0x8}, {0x4, 0x6}, {0x2, 0x2}, {0x1, 0x6}, {0x4}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x6, 0x4}, {0x6}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x7}, {0x3, 0x2}, {0x2, 0x8}, {0x2, 0x3}, {0x3, 0x9}, {0x6, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x8}, {0x3, 0x1}, {0x3, 0xa}, {0x5, 0x5}, {0x1, 0x4}, {0x0, 0x8}, {0x2, 0xa}, {0x7}, {0x0, 0x3}, {0x6, 0xa}, {0x4, 0x9}, {0x6, 0x2}, {0x5, 0x1c}, {0x4, 0x1}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0xa}, {0x1, 0x7}, {0x6, 0x8}, {0x0, 0x4}, {0x7}, {0x5, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x3}, {0x6, 0x4}, {0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x1}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0xfff7, 0x1, 0x9, 0x7, 0x7ff, 0x84a, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1d1, 0x1ff, 0x4, 0x400, 0x4, 0x7, 0x9]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0xa, 0xffff, 0x8, 0x8, 0x693, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfc5, 0x8, 0x0, 0x7, 0x2, 0x81, 0x24]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x7}, {0x7}, {0x4, 0x8}, {0x6, 0x8}, {0x7, 0x9}, {0x3, 0x1}, {0x0, 0x4}, {0x3, 0x1}, {0x2, 0x7}, {0x4, 0x3}, {0x4, 0x8}, {0x5, 0x3}, {0x2, 0x7}, {0x1, 0x3}, {0x3, 0x8}, {0x2}, {0x3, 0x1}, {0x5, 0x4}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x4}, {0x1, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x5, 0x9}, {0x0, 0x6}, {0x1, 0x7}, {0x3, 0x4}, {0x6, 0x5}, {0x3, 0x6}, {0x3, 0x8}, {0x0, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x8}, {0x5, 0x3}, {0x1, 0x3}, {0x6}, {0x4, 0x8}, {0x6, 0x6}, {0x0, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff4, 0x1, 0x401, 0x8, 0x6, 0x8, 0x7, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x9c, 0x26, 0xfb, 0xfff, 0xfff5, 0x1]}}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x63, 0x4, 0x4, 0x2, 0x422]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x2, 0xfff7, 0xfff9, 0xfd14, 0x5, 0x1ee]}}]}]}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfff7, 0x8, 0x5, 0x5, 0x7, 0x7, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0xc5d, 0xab44, 0x9793, 0xca, 0x2, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x15, 0x4, 0x9, 0x8, 0x1, 0x4, 0x1, 0x6]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x2, 0x8}, {0x2, 0x7}, {0x4, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x7}, {0x4, 0x1}, {0x5}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x4}, {0x4, 0x8}, {0x0, 0x5}, {0x6, 0x2}, {0x6, 0x6}, {}, {0x0, 0x6}, {0x6, 0x1}, {0x2}, {0x4, 0x6}, {0x0, 0x6}, {}, {0x1, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7ff, 0xc, 0x9e, 0x5, 0x5, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x954}, 0x1, 0x0, 0x0, 0x1}, 0x20004810) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1.071965203s ago: executing program 4 (id=10032): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@generic="67bbbc10906193881b0947b47e9001d770"]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c881) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}}}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCSFLAGS(r9, 0x40047459, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 979.842957ms ago: executing program 3 (id=10033): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) getsockopt$bt_hci(r2, 0x84, 0x70, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth0_to_team\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300d00001800090000000000000000001c140000fe00000100000000040012000000f1b9a80000000668a0328c49d2ee"], 0x30}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002640), r9) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002680)={0x0, @dev, @local}, &(0x7f00000026c0)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r12, &(0x7f00000027c0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0xddcc0ce07d362af6}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x80, r13, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r11, @ANYBLOB="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"], 0x184}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000001dc0)={{r1, &(0x7f0000000300)='syzkaller1\x00', 0x80, &(0x7f0000000340)={@align=0x9, {0x264, 0xeb67, 0x6, 0x4}}, 0x5, &(0x7f0000000380), &(0x7f0000000440)=0x4}, 0x5, &(0x7f0000001d00)=[{0x3, 0x2, &(0x7f0000000480)='syzkaller\x00', &(0x7f00000005c0)="1de6ba81182ae967df5bc8842cd79275b4d9ef4e510b7ea110f93b113168f79d4da4ec6d172c8573f0cc3c135bb97d232e0fa7f42465136641ad67e65d3fd6f12c267cbad52b0135e38377927649f4c4c353658ae435d212f7b96e36146c526fcdd728cec0e1abf53c63a3ba5cf8d12cf3ede1c4e971fd07ce9e40fa276fa76718d1fea3c6685c8361722257f39fe610b00a4fff8ba20799f6072e085bf601d211d8db11eab42effbaf054a6cc2524865a95ba6b1ed476384f1f168172a91227372a4434960608d2b074d6fae01a93ab3178", 0xd2, 0x10}, {0x2, 0x7f, &(0x7f00000006c0)='/dev/net/tun\x00', &(0x7f0000000700)="55a4ac5de0b1373f2214f8a1b8353c4dc8133c4e585fdf2ac07cdb6193db076588523b26991df4c49dfbe22320c2cb804d611c1f7c04da7190dfe080b6f0fa7004fb7830680285dbb92b3fd1de97117be97822e8741f808525b8ee7f02dbac2e03693f452bc3c2", 0x67, 0x22}, {0x1, 0x1, &(0x7f0000000780)='NLBL_CIPSOv4\x00', &(0x7f0000000c00)="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", 0x1000}, {0x2, 0x0, &(0x7f0000001c00)='veth0_to_team\x00', &(0x7f0000001c40)="118bd0c50888ce249b62038c949127fb5ffcdc2571e93770", 0x18, 0x2}, {0x2, 0x4, &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)="263b851318b48e9a3de9661babe2d64189280095f83180acbe3c494a167588d58524c6a2c6bcb9c94778ed840f03383c58c6db3157a87b1166da51d1c046", 0x3e, 0xa}]}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r17, 0x84, 0x16, &(0x7f0000001e40)=ANY=[@ANYBLOB], 0x6) clock_gettime(0x4, &(0x7f00000001c0)) write$tun(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd"], 0xfdef) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002880)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRESDEC=r2, @ANYRESOCT=r16, @ANYRES32=r1, @ANYRESHEX=r15, @ANYRES32=r3], 0x48}}, 0x20000000) 949.58334ms ago: executing program 1 (id=10034): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x2b, 0x0, "37ddfa1f1047a0a2be08f9683d9cfc56da791df0d11b215ea51282432449decea58c0afa4c3ec4bcd97121f3cfd07cfd0b2b742475102f6aae7d06a87b36734a8de7a7eb274221db71e0066e94e7de16"}, 0xd8) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) (async) sendmmsg$inet(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="3df974a52f545d667dfab50813087f4e5a87aa92ad82dfd62ed1b7a13725fea22328aa6b73c48d2a4479f182c0b862d25d942d0516516fe079dcccaa1ff72329a7f69982fee7293e8fe49262", 0x4c}], 0x1}}], 0x1, 0x24040014) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r1) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x81, @loopback, 0xfffffffa}}, 0x8, 0x0, 0x7, 0x9, 0x1}, &(0x7f0000000140)=0x98) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000200)=0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(r6) (async) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040000}, 0x4000000) (async) connect$unix(r6, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000b80)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000000f80)={0x2, 0x6, @start={r7, 0x1, "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", "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"}, [0x4, 0x80, 0x100008001, 0x8, 0x800, 0x8, 0xbf3f, 0x1000, 0x3, 0x2, 0x7, 0x5, 0x80, 0x2, 0x9, 0x8, 0x2, 0x4, 0x9, 0xc, 0x8000, 0x1, 0x7, 0x3, 0x8000000000000001, 0x0, 0x400, 0x5, 0x2, 0x7, 0x3, 0xfffffffffffff800, 0xd, 0x2, 0x0, 0x758, 0x18000000, 0x5, 0x0, 0x7f, 0x9e0, 0x6, 0x3, 0x1, 0x9, 0x401, 0x1, 0x4, 0x4, 0x8, 0x7fffffffffffffff, 0x0, 0xd, 0x7, 0x1, 0x0, 0x1fe000, 0x3, 0x8, 0x2, 0xfffffffffffffffa, 0x1, 0x6f1, 0x4]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001000)={{r0}, r5, 0x6, @unused=[0xade, 0x5, 0x7fff, 0x5], @devid=r7}) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000022000000000a6c000000060a0b160000000000000000020000084000048018000180080001006f7366000c00028008000140007470726f7879000014000280080001400000000208000340000000140900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/148], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 833.856331ms ago: executing program 2 (id=10035): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xa) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xa) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x1c, r2, 0xf01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0x6, 0x4) 831.353365ms ago: executing program 4 (id=10036): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000ac0)=0xb3, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000080)=0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006002000800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 748.068798ms ago: executing program 3 (id=10037): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r6, {0x7, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xfffffefb}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4040881) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0xa5dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xb}, {}, {0x6, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async, rerun: 64) r9 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet_sctp(r9, &(0x7f0000002ec0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}], 0x1, 0x8000) (async) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001300)=ANY=[@ANYBLOB="d6ae507af25801000000000000006dcf1f299d42616f176a39af0849b9e2b6eff26b59b25f", @ANYRES16=r12, @ANYBLOB="010026bd7000fedbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x668}, 0x1, 0x0, 0x0, 0x880}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0xfc30) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) (async) r13 = socket(0xa, 0x3, 0x3a) sendmsg$inet6(r13, &(0x7f0000000600)={&(0x7f0000000040)={0xa, 0x4e23, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="47c6202c6cd3abaffe9534da2b8882c793452cd5041f9a3cd602c8df6c1dcfd93ab1e1b3ceec6c5263f0038e829cee30315ea77fd39dae9c603d316959bb27cb2b5ee3522fcf1abd996a3f73ebd26d488f454d5b8aa72270f7685acc0df9de1c0314bd4701d432a82ff31a3d08985c046c3e39d35f76fe571660", 0x7a}, {&(0x7f0000000280)="d5faa6dccf7b434960f5e4081c046223dec740453e20c370734f4b51dab3ffb260dbcc8a55df1486f37ab9f364e317432b026440dd82b148dc6b23b7c19671ce1a826a38979563c52f5057133ec44913becaa276b492587384937dc1a5eaa42f00f0bfd106e98ed3a607a9fb21a09f09ad68743085824f45e2b20a365939b8eb80fe86a0dcaccd19a478e42664e7166915ded5f9c39991a31dcc348b187719e2209597eee1f26338a954a9c388d1009e1db26510bd9abd6a832df9f1a5b57f8422abacdaff4cf02fca37be73181b15f82e5e578835fb8d9946f97bdf0154d83a7c5f1603fd3ae0c196c31f3544df3b0aaf342359606c4ada8f9233", 0xfb}, {&(0x7f0000000380)="b532f55e7580a3f9d62d81a8e08bfe0a891008c0c5e418d8d2a03e323f1e2e4abdc50ae77c35870bfae9c5bf18d32396c9387c7037dce5115e70ebcd1981dee96482b86b4a862c11a08a57dc625225368afb68b4e611336ff124aad65a1fb28077cf5b6dd00bebbc8181452afcb290ed2b7a4c03dcfe601b8456f48f62a87454eadc2bf63af4d7dc749c4692b39c7a0a7c8b1e7caf5beda684471a", 0x9b}], 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="280000000000000029000000390000003b0200af00000000fe880000000000000000000000000001580000000000000029000000360000001108000000000000000100c2040000000007100000000302c0c60f040000000000000001080000000000000000c204c900000900010007100000000002d806000000000000000000140000000000000029000000080000004c38000000000000"], 0x98}, 0x20000090) 747.382552ms ago: executing program 1 (id=10038): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={0x0, @private, @multicast2}, &(0x7f0000000700)=0xc) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r7, 0x4) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0), 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r9, 0xc08ba000) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x1b, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfb9a, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000005c0)='GPL\x00', 0xfffffff9, 0x87, &(0x7f0000000600)=""/135, 0x40f00, 0x1b, '\x00', r4, @netfilter, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x4, 0xc, 0x7f, 0x8}, 0x10, r7, r8, 0x1, &(0x7f0000000840)=[r9, 0xffffffffffffffff, r10], &(0x7f0000000880)=[{0x3, 0x3, 0xa, 0x6}], 0x10, 0xcc8}, 0x94) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="10ab52ac434a5f2487a1e0f1bda554b4f102a9cf214359dfe4e3feaf1ff42f0713c9fe997f07c36e1aa409368dc032a6d471ba492b491dfd9207748c576e8666dd46ed6982a1727d5dd3ea8b5445aa5f3f76deaa8276199d72951a4b3415d6ea3c6d13b1e1cb5c16b212c37e1b00b31a19ea7d2f8409a4270b907d020000000000", @ANYRES16=r11, @ANYBLOB="3f9d00000000004e7d47a100000008000300", @ANYRES32=r12, @ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r13) sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x50) 744.357921ms ago: executing program 4 (id=10039): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="06000000396d8551832000000000000200000300"], 0x14}}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xf, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x0, r4, 0x3, r2}, 0x10) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x8, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x7, 0x12) 666.578505ms ago: executing program 2 (id=10040): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000740)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 615.054618ms ago: executing program 1 (id=10041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x50, 0x2, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2d, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @loopback}, &(0x7f00000000c0)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xd4, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xea, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0xb8, r2, 0x606, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9b}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2f}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc0d0}, 0x41) 532.257559ms ago: executing program 4 (id=10042): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x44}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x4e24, @loopback}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 531.854763ms ago: executing program 3 (id=10043): socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket(0x23, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x60}, 0x122) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0) 522.242721ms ago: executing program 1 (id=10044): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x30, 0x34}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x120, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xda, 0x7b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xe8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5a7f1d0}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x89}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x355}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6b18}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}]}, 0x120}, 0x1, 0x0, 0x0, 0x800}, 0x24004000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x840000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x160, r2, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xaba, 0x31}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_IE={0x10d, 0x2a, [@mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}, @tim={0x5, 0x10, {0x8, 0x74, 0xfe, "817914186ac850afa2c111f24f"}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b}}, @prep={0x83, 0x1f, {{}, 0x9, 0x0, @broadcast, 0x1, @void, 0x4, 0x1, @broadcast, 0x1}}, @fast_bss_trans={0x37, 0xa8, {0x7, 0x6, "75536d237c0cf22a6dd6dabdaaaf5c8f", "b04e7582afc3047d4ed2e6c49b71cc78bcfb07550f3f2fa66d74030c8c7d5382", "ca2ff199358222ad2de431486a9b26f3eb55361fbcfd4e5fa48e740e6b7a459f", [{0x2, 0x7, "88afd98dd591fe"}, {0x3, 0x1a, "ba04e59a6b6d83def7ccbae4f885a2615dd6400b85aacb2a2011"}, {0x2, 0x1b, "2f4828a2132a8ebbfcb1109ee499c7d0f859b1829fc67a3b159e7d"}, {0x1, 0x7, "da6888a7717f06"}, {0x3, 0x3, "9540b1"}, {0x3, 0x4, "5227ce14"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x5}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfffc}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}]}, 0x160}, 0x1, 0x0, 0x0, 0x1}, 0x4040081) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20040008}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan1\x00'}) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xfff, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48884}, 0x20040004) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r5, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x8000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r0) (async) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, r6, 0x568f1fbb8494941, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x42}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000dc0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xec, r8, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6be6, 0x7b}}}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x2, 0x4}, {0x4, 0x3}, {0xf7, 0x81}, {0x80, 0x2}, {0x7}, {0x1, 0x5}], "f5b612d5404f6ad7"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x8, 0x7}, {0x4, 0x2}, {0x38, 0x5}, {0x2, 0x1}, {0x6, 0x6}, {0x21, 0x2}, {0x1, 0x6}, {0x6, 0x4}, {0x2, 0x4}, {0xf8, 0x5}, {0x3, 0x4}, {0xbb, 0x3}, {0x1, 0x2}], "633cba4aa1dcee53"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x4, 0x5}, {0x5, 0x6}, {0xd, 0x4}, {0x3, 0x1}, {0x9, 0x7}, {0x40, 0x2}], "ca178ac3dc45e968"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x2, 0x2}, {0xb, 0x4}, {0x0, 0x5}, {0x3, 0x6}, {0x8, 0x2}, {0xb, 0x1}, {0x40, 0x4}, {0x81, 0x4}, {0x3, 0x6}], "9fd9040cdee9e2a5"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x1, 0x6}, {}, {0x4}, {0x1, 0x5}, {0x1}, {0xc, 0x6}, {0x81, 0x2}, {0x5, 0x4}, {0x2, 0x2}, {0x7, 0x6}, {0x40}, {0x6, 0x3}, {0x7, 0x3}, {0x20, 0x4}, {0x7, 0x3}, {0x0, 0x1}, {0x5, 0x7}], "51127d78da97b901"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xa, 0x4}, {0x9, 0x2}, {0x9, 0x7}, {0x10, 0x4}, {0x7, 0x5}, {0x1, 0x5}, {0x8, 0x1}], "4d8b7dd81af298c2"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000005}, 0xc040) (async) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000001000)="1be77c5f57454ea299defe373b8605dcbccb543afa5f48db67ee9613fe02b6c368cfac2ff77b7021e44f59d17ab9d908fa9183df0f76a9af241c6fb02a8a35eee9f59f68e474ab61bf2749aeb5ec2e8143213d37c7e854c2db4c12d57034f5b43f0539a3800ea3d1f2ea") sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f0000001080)=@isdn={0x22, 0x5, 0x88, 0x3, 0xd}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001100)="ac144aaadaae38e62c8b4cfa1321e4ae562121721ac29b6d695155bfd8ca74a49063116dacbab91bd64b8ddba5d2ac28d8f90bd93bee3c64d6d141e701973e64c821ce839ce1526e01e9a62982b7e7f684e7a1ca08a62766fea70a67f9df9ae3a4bd2198063d610e31ee9121ec0204e665e7c613f3ad", 0x76}, {&(0x7f0000001180)="7cefeb6fa18c09a694d887a21f95b713df7bdbd1174f552548be6496816d29a4", 0x20}, {&(0x7f00000011c0)="59cdffbb5381c0dbef7913519dd488fd1a8966eb4907504f07763921681f9cb0747a3a9126233d182ed7a355280bcb8029ed532a40d31189035afc8f94ea", 0x3e}, {&(0x7f0000001200)="f91e412c6b541e28951f6cd6c1c0f7373d1ac780a8c2c98e1050abf2b3e0220ae37458b826b528beaaec163b8bc4c95eadc50ec14558d685e1986060a352871e4f9a9b1cfdb299688214aeebe22cec79d9c0d6162a3a484be0f9061ff05014257b7a945066a8afb04260ff1ff7a9831b91322f23c7be6326981e7168fb7d9e4e797a4de15005e9c3dc3efd128695507e67adbb1b0f112849a3d43db26f9a1ea7ea92939d409579d54cb0c74d6d076cc4899325cb0ba389e671487a515e77501d9362c39046c40f76d764b371883fbd43018b026898c3f76f2c58b970880015916f59f97e73770b517b1fa43d50", 0xed}, {&(0x7f0000001300)="bac8dc2a042274", 0x7}], 0x5}}, {{&(0x7f00000013c0)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80, &(0x7f0000003900)=[{&(0x7f0000001440)="0611bff86496a97d696940267bc42598e16f286767459f06aee6c9eb9d1773f418463e94e75248067f8fd618df7064deabd86e595cc8fb90470188e90d572d46bad64d9f65dcf6082df36c8d06f9ee958acedb241e2591ec36d7bd88f6ad03d64c889f1aeb3007ef5f986237b2dd4bbe2c15209b97b9a3b61607de446d7199115e7e4bfdb5f590", 0x87}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="8eb7749dfd2bb316da4ba4f951454d041aafda127b118d109218695d1facbcf20dea19afee261c099e6fbb4a2b21737d4515a011c248540720ca5db11b79fafc1e62667086ca802889051617037967192d6cdbffc73368034147c0711be226242c59660ee4a8d6dee682dec10958479f7edb660b11e6bc929464e8b1bd6450b14e8bfb032c76da0d2279e69e76cee773a4292bd00ec2aa286cc307dea4e4f71e6c0dbe49d895", 0xa6}, {&(0x7f00000025c0)="678288377c188b597b448b4a6f32946277732f30b85e0b115c624c0b5728358197f357f2fc7e2021416e4d71ad70e82cd7ec469c30a76456b92258c0d8ee30d221c0889ec0c7fe44e538c3b5a5fe61c1543849bcdef7f11be65c74fc129194f431cf6bf72aeefa4b1f4260faf9dbb0a945672754d01607959e13baeb097f8b30a813e04f2b6ffc688b64b0495e6429a6a8d864352b37475b", 0x98}, {&(0x7f0000002680)="e2c69837923e1bda60381bcfbaef503d4ac7df520b5dc50e1f43b96655f10ff67a6d42078df1b20176f660af0b6c4b5bdc366c2fc7ad453a3e9864a958ab97685756139a3f437982632a07ba84aded17056f00863b668812fd76efa202d49eb3a85d6d1cb2fc68ed8c562d394e592d04b284b8be92f8a97c4ac8bcec9803a69eee7951691377b454f11bdbc475a9d4c76716c3ee252f19656ed934f2d6ccfd488e3b6b9567195883ca310903a6af49afce3bf70be075cb2c31e3b58e508433c576e1735c950f696900369ae095effbf86592220d658133af0930a696c65c6465e9605020fd5fefe913ff97d3a603992ea7f73567650a2544", 0xf8}, {&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000003780)="5bc428856bce5c7234821a2fe3d8a86d865a23d108c88ac5e2916fbf424bab4fef5590cde24cca0f455e7f92a06ef826c8d08515caae2a8fca8010277e81ed301786f2b6a82076de876cbfa0cba68b50c839dcdd670d49d70b459066d27fb3943bcf0f86a9c20b1b016eac544baf0654a5187ba51970c1ed3aa4610f2f2fe0ab", 0x80}, {&(0x7f0000003800)="e61a82e87c45a9b61e93e2bbac338e89cde5306c437ae2d92fba15732be13ef768a2ab9c7352b186431e7972fec60a11c91942fc4f1966044d4e23661ad606deecb609b2e92a3b0c3249936e6da88b0cd69648b2a02ed0ed4570fd410bdba540b86fe2574a820abdb2973232a8167fde27cb84d1dd40b7882e334dfe8e9ced427eeed83fe64f8b7fec21def6f89286bef5e88e652e562571feb30ecf54ff82e1abd57f1833e207c816f89645667e518584fd23f1f74ff89c7480c5c3c56603aaf49b95bc74075ae12952611b7c6d00d85cf2fc5319abe6cf11faf2cc179afa17e4f5ab2ebd6280844337b61093650d10e3bb2421", 0xf4}], 0x8, &(0x7f0000003980)=[{0x70, 0x112, 0x200, "51de63dbfc7515f7ab178bf9f656b2d7f449e888325bb60570913478fe2ce3bb5aba0ec9aaa9a6f079304d328e1ea5f8e81107b6b573733c1476dd2ca11f0a4b9b265927cc7c71607d3aecffd670b0e2f9300dc8cfc0ac68f56e93f1d2"}, {0x70, 0x1, 0x938, "19a231e61402b0644c6347fb5725dc0e68dba8bdb669bc5690c135024b3af61c51087e36f5497cc38f31109dc39854b2e73e2ea0fb83029eb65030e3d52c88573e61d7dddacad49f0548faca6898396a908729d863375a6d3392896ee6"}], 0xe0}}], 0x2, 0x40) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000003b00)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000003bc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d8, 0x320, 0x418, 0x418, 0x228, 0x320, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, &(0x7f0000003b40), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0x0, 0xff000000, 0x0, 0xffffffff], [0xffffffff, 0x0, 0xffffff00, 0xff], 'vlan1\x00', 'veth0_vlan\x00', {0xff}, {}, 0x2b, 0xa2, 0x5, 0xc}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x800, 0x90b, @ipv4=@empty, 0x4e21}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"1101", 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@rand_addr=0x64010100, 0x33, 0x37, 0xb}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x3}}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'veth1_vlan\x00', '\x00', {0xff}, {}, 0x2b, 0x0, 0x0, 0x46}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x2e}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @loopback, [0xffffff00, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0x0, 0xffffff00], 'pimreg0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x16, 0xec, 0x5, 0x50}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@local, 0x37, 0x0, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) (async) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000004340)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004300)={&(0x7f0000004240)={0x98, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x71}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "669608d32b631211639292f6ea790efe"}, @NL80211_ATTR_PMK={0x14, 0xfe, "be431d5c3b2e2d6956931b7cfe3ea89e"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "11b2a1f50fb315d896523a4e7cebb6f2"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ec5d92ad5737374ee28795c7bf87c02c"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "287738a1c75022ccaeff03a2ca807938"}]}, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004380)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route_sched(r7, &(0x7f00000045c0)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004580)={&(0x7f00000044c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {0xc, 0x10}, {0x8, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_RATE={0x6, 0x5, {0xa5, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffc01}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x9, 0x3, 0xe038, 0x0, 0x7, 0x8a, 0x1}}, {0x6, 0x2, [0x7]}}]}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8100}, 0x4000000) 450.898106ms ago: executing program 4 (id=10045): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'macvlan1\x00'}}, 0x1e) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004d0}, 0x4004000) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x2, 0x1, 0x0, 0x1}, 0x29, 0x2, 0x0, 0x0, "6d2ca1bae6b5d75500fd4575a1f60fb2850a1a9c1c1bef440ce14ac69f3d0f1cea2d40627286e555ffa062c96d113f5036b74dc20d86a912f009f109936e1b4b"}, 0x48}, 0x1, 0x0, 0x0, 0x4008086}, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf250ad800800c0002"], 0x114}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x480a0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r2, &(0x7f0000002540)={&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/198, 0xc6}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/223, 0xdf}], 0x4, &(0x7f0000002500)=""/7, 0x7}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', 0x4000}) r4 = socket$netlink(0x10, 0x3, 0x1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r5, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="c00a454032c830a8a9cc2c458c41d52948207f91e53f2395a5eed560ab4a5ba72abfb92b11cf80ae799703e8f50e76fff90e9e5559280de5f77bf045a3cfb859768d42cfce81ff312a571a462855686780326df59541c05b9e03501a740d59b1acd9e471f64811c77a844be8376666301732e07cd550b47faee1c80f439c39a028ed00ff17186e00ab8fc7fdf9f6ab4cefad352ab0903a6e42bac0edd70feb7933c43c7b3e7d9cc4890a6ea15e89fe25fc56c3ec4b2b"}], 0x41}}], 0x4000000000001e2, 0xc840) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000002940)={0x8, {{0xa, 0x4e21, 0x0, @empty, 0x7}}}, 0x88) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002740), r6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000002880)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x2c0500}, 0xc, &(0x7f0000002840)={&(0x7f0000002a00)={0xd8, r9, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9e}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x65}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000814}, 0x24000040) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r7, 0x0, 0x1) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000002b00)={0x7c, r8, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="3a9c52ce4551"}, @NL80211_ATTR_PMKID={0x14, 0x55, "78777ef461281aa490c8255911380260"}, @NL80211_ATTR_PMKID={0x14, 0x55, "4387d73cc81904f08e9442979f0ab7f4"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x52}, @NL80211_ATTR_PMKID={0x14, 0x55, "de0d4b3ed0dd8c2c6b9ba0928e6c10a1"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xc}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x47}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000840) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000026c0)={0xfffffffffffffffd, 0x0, &(0x7f0000002680)={&(0x7f00000028c0)=ANY=[@ANYBLOB="14000100edadc841ca24a84ceb1b9a81f8ed0cdb3e827173fa4c40932533c01b234f3a68745db1191bc2b1b253b340cc98cc723562fe1a9a5c6f8e4995b51566c3340000", @ANYRES16=r8, @ANYBLOB="00012cbd7000fcdbdf2536000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800) getpeername(r4, &(0x7f0000002580)=@in={0x2, 0x0, @dev}, &(0x7f0000002600)=0x80) 356.5653ms ago: executing program 1 (id=10046): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r1, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x26}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000190001000000000010000000e0000002000000000000000000000000fc00000000000000000000000000000100000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000001910be1a000000000000000000000000000000000000020008000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000100010000000008001f00010000008d815d9c3dc71339e8a5e6abfe9578750f0708c177f2d35c5e0d8ffc15342d20b1de5f456b69a556723586d0a179c86c491dd7110b13c266fcb8b0953f3ea4e0ef0abeeb8ee16352fc975bce"], 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x40) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b00"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a000000000000000000000003000600000000000200000000000000000000000000000002000100140000fbffffff0700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25030100800c0002"], 0x114}], 0x1}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000240)=""/246, &(0x7f0000000380)=0xf6) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 228.145386ms ago: executing program 1 (id=10047): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060086dd"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000180001000101000000000000"], 0x38}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000180001000101000000000000"], 0x38}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x178, 0x1f0, 0x1f0, 0x178, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x25}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, "f8b54bef56811d5a23a1093978539521d944884d917284e3021e0fe5400ac5774e467ac2cca185bac3d45955522fa784cec24fb8b15a3c0b5bbf6044ae73b3e2"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x1a4, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xfff1}}, [@TCA_STAB={0x180, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x65, 0x8001, 0xffff0000, 0x2, 0xfffffff9, 0x401, 0x7}}, {0x12, 0x2, [0x8b, 0xc2, 0xb, 0x30bb, 0x3, 0xb, 0x1]}}, {{0x1c, 0x1, {0x3, 0x97, 0x8, 0x2, 0x1, 0x5, 0x8, 0x9}}, {0x16, 0x2, [0x821, 0x8, 0x1, 0x0, 0x8000, 0x9, 0x6503, 0x3, 0x473f]}}, {{0x1c, 0x1, {0x1, 0x85, 0x3a6, 0x3, 0x2, 0x3, 0x9, 0x3}}, {0xa, 0x2, [0x2c8, 0x5, 0x3]}}, {{0x1c, 0x1, {0x6, 0x9d, 0xf, 0xd, 0x0, 0x200, 0x9, 0x3}}, {0xa, 0x2, [0x4, 0xe2, 0x1000]}}, {{0x1c, 0x1, {0x6, 0x2, 0x8001, 0x9, 0x1, 0x21, 0x5, 0x7}}, {0x12, 0x2, [0x3, 0x10, 0xc, 0x6, 0x8001, 0x9, 0x101]}}, {{0x1c, 0x1, {0x3, 0x10, 0x6, 0x40001, 0x1, 0x81, 0x2, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0xe, 0x8, 0x969c, 0x8000, 0x0, 0xbdaa, 0x9, 0x7}}, {0x12, 0x2, [0x8, 0x7, 0xffff, 0xf7d, 0x7, 0x4, 0x2]}}, {{0x1c, 0x1, {0x7, 0x3, 0x8, 0x1, 0x0, 0x1, 0x2, 0x2}}, {0x8, 0x2, [0x0, 0x1]}}, {{0x1c, 0x1, {0x3, 0x3, 0x2, 0x8, 0x2, 0x7f, 0xe2a7}}, {0x4}}]}]}, 0x1a4}}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 203.881735ms ago: executing program 3 (id=10048): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="150a00000000000061106400000000009500000000000000a3d25e68031b13ce8d1857f6d2489b7eb7cbf16499d501bfa032109c3d3c52f2fe862bb2"], &(0x7f0000000000)='GPL\x00'}, 0x90) 0s ago: executing program 3 (id=10049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf250300000008000100000000000c000600030000000000000008000100000000007c0007800c"], 0xd4}, 0x1, 0x0, 0x0, 0x4000010}, 0x2048000) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000000)=ANY=[@ANYRES32=r9], 0x8) socket$netlink(0x10, 0x3, 0x1) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff"], 0x50}}, 0x0) kernel console output (not intermixed with test programs): with an up link [ 653.941070][ T4642] netlink: 'syz.3.8762': attribute type 10 has an invalid length. [ 653.949487][ T4642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8762'. [ 653.949509][ T4633] tipc: Resetting bearer [ 653.971804][ T4633] tipc: Disabling bearer [ 653.981256][ T4644] gre0: entered promiscuous mode [ 653.987484][ T4644] gre0: entered allmulticast mode [ 653.994086][ T4642] dummy0: entered promiscuous mode [ 654.001531][ T4642] bond5: (slave dummy0): Removing an active aggregator [ 654.010204][ T4642] bond5: (slave dummy0): Releasing backup interface [ 654.094776][ T4653] netlink: 'syz.0.8765': attribute type 1 has an invalid length. [ 654.187366][ T4653] bond7: entered promiscuous mode [ 654.193252][ T4653] 8021q: adding VLAN 0 to HW filter on device bond7 [ 654.238150][ T4658] macvtap1: entered allmulticast mode [ 654.420195][ T4659] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.427644][ T4659] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.469241][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8769'. [ 654.608995][ T4659] dummy0: left promiscuous mode [ 655.093965][ T4659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.189786][ T4659] bond2: left promiscuous mode [ 655.194879][ T4659] bond2: left allmulticast mode [ 655.202146][ T4659] bond3: left promiscuous mode [ 655.207175][ T4659] veth0_to_bond: left promiscuous mode [ 655.212839][ T4659] bond3: left allmulticast mode [ 655.219715][ T4659] veth0_to_bond: left allmulticast mode [ 655.271493][ T4653] macvtap2: entered allmulticast mode [ 655.293538][ T4658] bond7: (slave bridge3): making interface the new active one [ 655.301841][ T4658] bridge3: entered promiscuous mode [ 655.310009][ T4658] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 655.321898][T26344] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.344878][T26344] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.373724][T26344] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.413615][T26344] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.479274][ T4687] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8773'. [ 655.521917][ T4682] ipt_rpfilter: unknown options [ 655.569899][ T5621] Bluetooth: hci3: command 0x041b tx timeout [ 655.692594][ T4693] netlink: 'syz.2.8779': attribute type 8 has an invalid length. [ 655.723296][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8779'. [ 655.777519][ T4693] veth1_to_team: entered promiscuous mode [ 655.804106][ T4693] gretap0: entered promiscuous mode [ 655.835767][ T4693] veth1_to_team: left promiscuous mode [ 655.856727][ T4693] gretap0: left promiscuous mode [ 656.005186][ T4722] netlink: 'syz.3.8782': attribute type 1 has an invalid length. [ 656.029491][ T4722] : renamed from dummy0 [ 656.265461][ T5823] IPVS: starting estimator thread 0... [ 656.386548][ T4741] IPVS: using max 48 ests per chain, 115200 per kthread [ 656.467616][ T4756] netlink: 'syz.2.8793': attribute type 5 has an invalid length. [ 656.483878][ T4756] netlink: 'syz.2.8793': attribute type 5 has an invalid length. [ 656.522697][ T4761] netlink: 'syz.4.8792': attribute type 1 has an invalid length. [ 656.581130][ T4761] netlink: 'syz.4.8792': attribute type 10 has an invalid length. [ 656.638471][ T4761] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.704082][ T4761] bond0: (slave team0): Enslaving as an active interface with an up link [ 656.838665][T11905] net_ratelimit: 42 callbacks suppressed [ 656.838684][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 656.845223][ T4773] netlink: 'syz.1.8795': attribute type 26 has an invalid length. [ 656.902882][ T4780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.931410][T28958] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 656.946005][T28958] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 656.976219][ T4786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.027778][T26344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 657.063766][ T4780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.147275][T28958] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 657.193748][ T4795] tipc: Enabling of bearer rejected, failed to enable media [ 657.205601][ T4780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.219914][ T4803] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 657.231066][ T4803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.318986][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 657.355070][ T4813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.497524][T26344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 657.964557][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.981205][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 657.992426][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 58889 - 0 [ 658.003101][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 3] type 2 family 0 port 20000 - 0 [ 658.039325][ T4820] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.064232][ T4820] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 658.075817][ T4820] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 58889 - 0 [ 658.098059][ T4820] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 658.132854][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.150843][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 658.162019][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 58889 - 0 [ 658.183366][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 3] type 2 family 0 port 20000 - 0 [ 658.192550][ T4863] xt_l2tp: v2 doesn't support IP mode [ 658.200022][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.226309][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 658.251610][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 58889 - 0 [ 658.294206][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 3] type 2 family 0 port 20000 - 0 [ 658.323730][ T4867] __nla_validate_parse: 10 callbacks suppressed [ 658.323760][ T4867] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8818'. [ 658.363870][ T4873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8820'. [ 658.375396][ T4867] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8818'. [ 658.388676][ T4873] block nbd6: Unsupported socket: should be TCP or UNIX. [ 658.397221][ T4876] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8821'. [ 658.477707][ T4879] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 658.613466][ T4885] 8021q: adding VLAN 0 to HW filter on device bond6 [ 658.632045][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8827'. [ 658.663260][ T4885] vlan2: entered promiscuous mode [ 658.681969][ T4885] bond6: entered promiscuous mode [ 658.688951][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8825'. [ 658.701446][ T4885] vlan2: entered allmulticast mode [ 658.708378][ T4885] bond6: entered allmulticast mode [ 658.818019][ T4901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8830'. [ 658.858022][ T4905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8833'. [ 659.496159][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 659.930085][ T4966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8845'. [ 660.126838][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 660.165318][ T4982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8849'. [ 660.451444][ T5004] validate_nla: 2 callbacks suppressed [ 660.451472][ T5004] netlink: 'syz.4.8855': attribute type 1 has an invalid length. [ 660.610752][ T5013] netlink: 'syz.0.8857': attribute type 4 has an invalid length. [ 660.647944][ T5018] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 660.665408][ T5023] bond0: (slave team0): Releasing backup interface [ 660.680067][ T5023] team0 (unregistering): left allmulticast mode [ 660.688563][ T5023] team_slave_0: left allmulticast mode [ 660.694753][ T5023] team_slave_1: left allmulticast mode [ 660.705314][ T5023] team0 (unregistering): Port device team_slave_0 removed [ 660.721642][ T5023] team0 (unregistering): Port device team_slave_1 removed [ 660.753616][ T5031] Cannot find set identified by id 0 to match [ 660.790628][ T5033] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 660.883362][ T5040] netlink: 'syz.4.8864': attribute type 12 has an invalid length. [ 660.905629][ T5040] netlink: 'syz.4.8864': attribute type 29 has an invalid length. [ 660.916069][ T5042] netlink: 'syz.0.8865': attribute type 3 has an invalid length. [ 661.153152][ T5060] syzkaller1: entered promiscuous mode [ 661.169454][ T5060] syzkaller1: entered allmulticast mode [ 661.324013][ T5070] x_tables: duplicate underflow at hook 1 [ 661.512824][T11905] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.555190][T11905] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.605337][T11905] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.632375][T11905] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.912488][ T5116] netlink: 'syz.4.8889': attribute type 25 has an invalid length. [ 661.926481][T11905] net_ratelimit: 49 callbacks suppressed [ 661.926502][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 662.048591][ T5003] block nbd5: Connection timed out, retrying (0/2 alive) [ 662.055715][ T5003] block nbd5: Connection timed out, retrying (0/2 alive) [ 662.064097][ T5003] block nbd5: Connection timed out, retrying (0/2 alive) [ 662.071659][ T5003] block nbd5: Connection timed out, retrying (0/2 alive) [ 662.079447][ T11] block nbd5: Dead connection, failed to find a fallback [ 662.087249][ T11] block nbd5: shutting down sockets [ 662.092463][ T11] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.101859][ T11] Buffer I/O error on dev nbd5, logical block 2, async page read [ 662.109796][ T11] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.119730][ T11] Buffer I/O error on dev nbd5, logical block 1, async page read [ 662.127911][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.137254][ T11] Buffer I/O error on dev nbd5, logical block 0, async page read [ 662.145045][ T11] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.155077][ T11] Buffer I/O error on dev nbd5, logical block 3, async page read [ 662.163180][T31898] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.191120][T31898] Buffer I/O error on dev nbd5, logical block 0, async page read [ 662.193695][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 662.209956][T31898] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.214515][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.247733][T31898] Buffer I/O error on dev nbd5, logical block 1, async page read [ 662.275850][T31898] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.308478][ T5131] syzkaller0: entered promiscuous mode [ 662.321517][ T5131] syzkaller0: entered allmulticast mode [ 662.334476][T31898] Buffer I/O error on dev nbd5, logical block 2, async page read [ 662.345714][ T5127] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 662.352508][T31898] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.381817][T31898] Buffer I/O error on dev nbd5, logical block 3, async page read [ 662.399771][T31898] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.414264][T31898] Buffer I/O error on dev nbd5, logical block 0, async page read [ 662.423706][T31898] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 662.443490][T31898] Buffer I/O error on dev nbd5, logical block 1, async page read [ 662.455518][T31898] ldm_validate_partition_table(): Disk read failed. [ 662.465682][T31898] Dev nbd5: unable to read RDB block 0 [ 662.473337][T31898] nbd5: unable to read partition table [ 662.488535][T31898] ldm_validate_partition_table(): Disk read failed. [ 662.508341][T31898] Dev nbd5: unable to read RDB block 0 [ 662.523071][T31898] nbd5: unable to read partition table [ 662.571074][ T5134] bridge0: port 4(gretap0) entered blocking state [ 662.584495][ T5134] bridge0: port 4(gretap0) entered disabled state [ 662.609057][ T5134] gretap0: entered allmulticast mode [ 662.618649][ T5134] gretap0: entered promiscuous mode [ 662.627433][ T5134] bridge0: port 4(gretap0) entered blocking state [ 662.634338][ T5134] bridge0: port 4(gretap0) entered forwarding state [ 662.708293][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 662.787211][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 662.802427][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.848175][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 662.986138][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 663.080792][ T5170] syzkaller0: entered promiscuous mode [ 663.092590][ T5170] syzkaller0: entered allmulticast mode [ 663.101334][ T5170] 0: reclassify loop, rule prio 0, protocol 800 [ 663.234469][ T5178] netlink: 'syz.2.8904': attribute type 1 has an invalid length. [ 665.960005][ T5161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.065203][ T5189] __nla_validate_parse: 24 callbacks suppressed [ 666.065234][ T5189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8907'. [ 666.145318][ T5195] team0: entered promiscuous mode [ 666.169949][ T5195] team_slave_0: entered promiscuous mode [ 666.253223][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8913'. [ 666.274997][ T5208] 8021q: VLANs not supported on ip_vti0 [ 666.342438][ T5208] netlink: 'syz.1.8914': attribute type 11 has an invalid length. [ 666.582494][ T5222] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8917'. [ 666.603923][ T5222] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8917'. [ 666.622657][ T5222] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8917'. [ 666.718318][ T5231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8917'. [ 666.739919][ T5231] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8917'. [ 666.769764][ T5231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8917'. [ 666.847808][ T5243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8922'. [ 666.863204][ T5249] macvlan0: entered promiscuous mode [ 666.947056][ T5251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8925'. [ 666.996098][ T13] net_ratelimit: 22 callbacks suppressed [ 666.996128][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 667.019068][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.019414][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 667.123171][ T5255] syzkaller0: entered promiscuous mode [ 667.143361][ T5255] syzkaller0: entered allmulticast mode [ 667.290002][ T5286] netlink: 'syz.0.8931': attribute type 1 has an invalid length. [ 667.299416][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 667.433503][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 667.467103][ T5292] netlink: 'syz.3.8934': attribute type 5 has an invalid length. [ 667.579420][T26344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 667.590946][ T81] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 667.607862][ T81] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.762517][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 667.804151][ T5311] vlan3: entered allmulticast mode [ 667.890500][ T5326] bridge10: entered promiscuous mode [ 667.909105][ T5326] bridge10: entered allmulticast mode [ 667.987486][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 668.196418][ T5351] SET target dimension over the limit! [ 668.203466][ T5351] x_tables: duplicate underflow at hook 1 [ 668.266960][ T5352] block nbd2: reconnected socket [ 668.309861][ T5621] block nbd2: Receive control failed (result -32) [ 668.665285][ T5386] netlink: 'syz.0.8955': attribute type 8 has an invalid length. [ 669.116783][ T13] bond0 (unregistering): Released all slaves [ 669.133324][ T13] bond1 (unregistering): Released all slaves [ 669.148358][ T13] bond2 (unregistering): Released all slaves [ 669.160526][ T13] bond3 (unregistering): Released all slaves [ 669.172773][ T13] bond4 (unregistering): Released all slaves [ 669.465729][ T13] tipc: Disabling bearer [ 669.494990][ T13] tipc: Left network mode [ 669.633665][ T5432] geneve0: entered promiscuous mode [ 669.863296][ T5420] xfrm0 speed is unknown, defaulting to 1000 [ 670.100042][ T5447] 8021q: adding VLAN 0 to HW filter on device bond8 [ 670.144513][ T5450] 8021q: adding VLAN 0 to HW filter on device bond9 [ 670.158937][ T5450] bond8: (slave bond9): Enslaving as an active interface with an up link [ 670.171721][ T5420] xfrm0 speed is unknown, defaulting to 1000 [ 670.198963][ T5420] lo speed is unknown, defaulting to 1000 [ 670.601333][ T5482] syz_tun (unregistering): left allmulticast mode [ 670.640546][ T5484] netlink: 'syz.1.8984': attribute type 11 has an invalid length. [ 670.648735][ T5484] netlink: 'syz.1.8984': attribute type 5 has an invalid length. [ 670.775542][ T5487] netlink: 'syz.0.8985': attribute type 10 has an invalid length. [ 670.844756][ T5487] team0: left promiscuous mode [ 670.850806][ T5487] team_slave_0: left promiscuous mode [ 670.860417][ T5487] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.869701][ T5487] bond0: (slave team0): Enslaving as an active interface with an up link [ 670.968630][ T5500] syzkaller0: entered promiscuous mode [ 670.974711][ T5500] syzkaller0: entered allmulticast mode [ 671.080329][ T5504] __nla_validate_parse: 19 callbacks suppressed [ 671.080360][ T5504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8990'. [ 671.147248][ T5505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8990'. [ 671.238798][ T13] vlan0: left promiscuous mode [ 671.279595][ T13] veth1_macvtap: left allmulticast mode [ 671.299757][ T13] veth1_macvtap: left promiscuous mode [ 671.321636][ T13] veth0_macvtap: left promiscuous mode [ 671.359679][ T13] veth1_vlan: left promiscuous mode [ 671.373237][ T13] veth0_vlan: left promiscuous mode [ 671.475705][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8995'. [ 672.055511][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9002'. [ 672.186908][ T13] net_ratelimit: 30 callbacks suppressed [ 672.186940][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 672.307253][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 672.321698][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 672.356746][T28958] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 672.409257][ T5573] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 672.453047][ T5578] nbd: couldn't find a device at index 0 [ 672.497265][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 672.499490][ T5578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9012'. [ 672.508079][ T5582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9014'. [ 672.525339][ T5578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.627536][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 672.636736][ T5590] No such timeout policy "syz1" [ 672.692404][ T5587] netlink: 'syz.0.9016': attribute type 24 has an invalid length. [ 672.749862][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 672.797037][ T5597] syzkaller0: entered promiscuous mode [ 672.829697][ T5597] syzkaller0: entered allmulticast mode [ 672.868299][ T81] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 672.994016][ T5620] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9024'. [ 673.357444][ T5649] netlink: 284 bytes leftover after parsing attributes in process `syz.1.9033'. [ 673.423459][ T5650] atomic_op ffff88806447d998 conn xmit_atomic 0000000000000000 [ 673.547997][ T5663] netlink: 'syz.2.9038': attribute type 1 has an invalid length. [ 673.605834][ T5671] netlink: 'syz.3.9040': attribute type 1 has an invalid length. [ 673.645027][ T5671] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9040'. [ 673.676704][ T5671] netlink: 658 bytes leftover after parsing attributes in process `syz.3.9040'. [ 673.743469][ T5680] netlink: 'syz.0.9044': attribute type 21 has an invalid length. [ 673.766586][ T5681] netlink: 'syz.0.9044': attribute type 21 has an invalid length. [ 673.919825][ T5692] netlink: 'syz.1.9046': attribute type 1 has an invalid length. [ 673.955696][T31752] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 673.963670][T31752] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 673.975112][T31752] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 673.994102][T31752] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 674.002931][T31752] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 674.096515][ T5693] bond14: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 674.137177][ T5693] bond14: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 674.153369][ T5693] bond14: (slave ip6gre2): making interface the new active one [ 674.171128][ T5693] bond14: (slave ip6gre2): Enslaving as an active interface with an up link [ 674.415393][ T5696] xfrm0 speed is unknown, defaulting to 1000 [ 674.501561][ T5696] xfrm0 speed is unknown, defaulting to 1000 [ 674.509699][ T5696] lo speed is unknown, defaulting to 1000 [ 674.680348][ T5696] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.687857][ T5696] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.695170][ T5696] bridge_slave_0: entered allmulticast mode [ 674.707799][ T5696] bridge_slave_0: entered promiscuous mode [ 674.718566][ T5696] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.725744][ T5696] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.733403][ T5696] bridge_slave_1: entered allmulticast mode [ 674.741276][ T5696] bridge_slave_1: entered promiscuous mode [ 674.766472][ T5696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.780299][ T5696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.807215][ T5696] team0: Port device team_slave_0 added [ 674.815240][ T5696] team0: Port device team_slave_1 added [ 674.837691][ T5696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.844682][ T5696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.872307][ T5696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.884585][ T5696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.892280][ T5696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.919793][ T5696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.962166][ T5696] hsr_slave_0: entered promiscuous mode [ 674.968941][ T5696] hsr_slave_1: entered promiscuous mode [ 674.975285][ T5696] debugfs: 'hsr0' already exists in 'hsr' [ 674.981977][ T5696] Cannot create hsr debugfs directory [ 675.068226][ T5696] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.078298][ T5696] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.088362][ T5696] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 675.139050][ T5696] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.149708][ T5696] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.160008][ T5696] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 675.230079][ T5696] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.240709][ T5696] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.251433][ T5696] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 675.283003][ T5696] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.293679][ T5696] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.303622][ T5696] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 675.383801][ T5696] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 675.394530][ T5696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 675.402403][ T5696] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 675.412586][ T5696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 675.420466][ T5696] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 675.429636][ T5696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 675.438599][ T5696] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 675.447546][ T5696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 675.486818][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 675.520351][ T5696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.539341][ T5696] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.550791][T28962] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.558241][T28962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.571355][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.578641][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.868408][ T5696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.909655][ T5696] veth0_vlan: entered promiscuous mode [ 675.921168][ T5696] veth1_vlan: entered promiscuous mode [ 675.947099][ T5696] veth0_macvtap: entered promiscuous mode [ 675.955834][ T5696] veth1_macvtap: entered promiscuous mode [ 675.974027][ T5696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.987560][ T5696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.000653][ T1105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.010035][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.020736][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.032991][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.046988][T31752] Bluetooth: hci5: command tx timeout [ 676.099319][T28962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.113568][T28962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.137198][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.145486][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.188523][ T5761] __nla_validate_parse: 3 callbacks suppressed [ 676.188546][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9043'. [ 677.286124][ T81] net_ratelimit: 50 callbacks suppressed [ 677.286172][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 677.426821][T28958] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 677.506103][T28958] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 677.521223][T28958] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 677.537065][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 677.646403][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 677.757105][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 677.866258][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 677.976986][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 678.049322][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 678.126414][T31752] Bluetooth: hci5: command tx timeout [ 680.206524][T31752] Bluetooth: hci5: command tx timeout [ 682.287739][T31752] Bluetooth: hci5: command tx timeout [ 682.378578][T11905] net_ratelimit: 57 callbacks suppressed [ 682.378611][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 682.496069][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 682.606791][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 682.656490][T11905] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 682.671274][T11905] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 682.716724][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 682.826113][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 682.936756][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 683.046162][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 683.156093][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 687.447319][ T1105] net_ratelimit: 56 callbacks suppressed [ 687.447351][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 687.566896][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 687.676044][T28958] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 687.786044][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 687.786842][T28958] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 687.809142][T28958] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 687.896725][T28958] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 688.006072][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 688.126171][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 688.236099][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 690.867165][T11905] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 690.903239][ T81] smc: removing ib device syz1 [ 690.915106][T11905] bond9 (unregistering): (slave vti0): Releasing backup interface [ 690.925471][ T81] smbdirect: ib_dev[syz1] removed [ 691.169119][T11905] .` (unregistering): Released all slaves [ 691.214657][T11905] bond0 (unregistering): Released all slaves [ 691.229512][T11905] bond1 (unregistering): Released all slaves [ 691.246692][T11905] bond3 (unregistering): Released all slaves [ 691.263112][T11905] bond2 (unregistering): Released all slaves [ 691.289957][T11905] bond4 (unregistering): Released all slaves [ 691.324117][T11905] bond5 (unregistering): (slave veth5): Releasing active interface [ 691.343414][T11905] bond5 (unregistering): (slave veth7): Releasing active interface [ 691.371558][T11905] bond5 (unregistering): Released all slaves [ 691.414095][T11905] bond6 (unregistering): Released all slaves [ 691.452242][T11905] bond7 (unregistering): Released all slaves [ 691.485604][T11905] bond8 (unregistering): Released all slaves [ 691.525427][T11905] bond9 (unregistering): Released all slaves [ 691.545964][T11905] bond10 (unregistering): Released all slaves [ 692.368402][T11905] tipc: Left network mode [ 692.386661][T11905] IPVS: stopping backup sync thread 19071 ... [ 692.486185][T28959] net_ratelimit: 49 callbacks suppressed [ 692.486206][T28959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 692.606529][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 692.806031][T28959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 692.917246][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 692.935996][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 692.951129][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 692.983404][T11905] IPVS: stop unused estimator thread 0... [ 693.026837][T28959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 693.136069][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 693.247266][T28959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 693.356001][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 695.672084][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9053'. [ 695.711980][ T5767] SET target dimension over the limit! [ 695.719711][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9054'. [ 695.769240][ T5777] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 695.771601][ T5786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9050'. [ 695.865608][ T5777] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 695.911756][ T5777] gretap1: entered promiscuous mode [ 695.937934][ T5777] gretap1: entered allmulticast mode [ 695.973574][ T5791] netlink: 'syz.2.9055': attribute type 1 has an invalid length. [ 696.205127][ T5810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9060'. [ 696.510441][ T5827] syzkaller0: entered promiscuous mode [ 696.533627][ T5827] syzkaller0: entered allmulticast mode [ 696.541171][ T5831] netlink: 'syz.3.9063': attribute type 1 has an invalid length. [ 696.597411][ T5827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9062'. [ 696.617280][ T5839] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 696.635267][ T5839] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 696.723303][ T5844] xt_TPROXY: Can be used only with -p tcp or -p udp [ 696.748629][ T5840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9065'. [ 696.961395][ T5858] netlink: 'syz.1.9069': attribute type 1 has an invalid length. [ 696.970766][ T5858] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9069'. [ 697.361358][ T5891] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.9077'. [ 697.449699][ T5891] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9077'. [ 697.450148][ T5895] netlink: 'syz.3.9079': attribute type 1 has an invalid length. [ 697.497603][ T5898] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9080'. [ 697.535041][ T5823] IPVS: starting estimator thread 0... [ 697.550655][T11905] net_ratelimit: 136 callbacks suppressed [ 697.550686][T11905] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 697.550715][ T5895] 8021q: adding VLAN 0 to HW filter on device bond9 [ 697.557303][T11905] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 697.577564][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 697.625955][ T5902] IPVS: using max 54 ests per chain, 129600 per kthread [ 697.694223][ T5899] bond9: (slave geneve2): making interface the new active one [ 697.709987][ T5899] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 697.725777][ T5898] vlan2: entered allmulticast mode [ 697.732319][ T5898] gretap0: entered allmulticast mode [ 697.750619][T11905] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.770736][T11905] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.815831][ T5912] syzkaller0: entered promiscuous mode [ 697.830285][ T5912] syzkaller0: entered allmulticast mode [ 697.853356][T11905] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.905600][ T5927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 697.918933][T11905] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.017358][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 698.176872][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.184078][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.199533][ T81] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 698.214418][ T81] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 698.268980][ T5930] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 698.317510][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 698.425988][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 698.443518][ T5958] syzkaller1: entered promiscuous mode [ 698.474151][ T5958] syzkaller1: entered allmulticast mode [ 698.487205][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.494346][ T5964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.507904][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.515022][ T5965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.586712][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 698.588839][ T5971] netlink: 'syz.1.9100': attribute type 1 has an invalid length. [ 698.602565][ T5971] netlink: 'syz.1.9100': attribute type 3 has an invalid length. [ 698.629625][ T5971] NCSI netlink: No device for ifindex 813332851 [ 698.677892][ T5971] Bluetooth: MGMT ver 1.23 [ 698.690674][ T5971] netlink: 'syz.1.9100': attribute type 1 has an invalid length. [ 698.797603][ T5971] 8021q: adding VLAN 0 to HW filter on device bond15 [ 698.845808][ T5971] netlink: 'syz.1.9100': attribute type 10 has an invalid length. [ 698.863058][ T5971] dummy0: entered promiscuous mode [ 698.872549][ T5971] bond10: (slave dummy0): Releasing active interface [ 699.681422][ T6042] tipc: Started in network mode [ 699.698090][ T6042] tipc: Node identity f682b6f7f92a, cluster identity 4711 [ 699.711990][ T6042] tipc: Enabled bearer , priority 0 [ 699.722477][ T6042] syzkaller0: entered promiscuous mode [ 699.729732][ T6042] syzkaller0: entered allmulticast mode [ 699.739202][ T6046] 8021q: VLANs not supported on lo [ 699.751697][ T6042] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 699.752209][ T6046] netlink: 'syz.1.9127': attribute type 1 has an invalid length. [ 699.915257][ T6042] tipc: Resetting bearer [ 699.944595][ T6041] tipc: Resetting bearer [ 699.963137][ T6041] tipc: Disabling bearer [ 699.977916][ T6057] ¾x9’: left allmulticast mode [ 699.984045][ T6057] ¾x9’: left promiscuous mode [ 699.993115][ T6057] bridge0: port 1(1¾x9’) entered disabled state [ 700.008132][ T6057] bridge_slave_1: left allmulticast mode [ 700.024345][ T6057] bridge_slave_1: left promiscuous mode [ 700.041419][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.110272][ T6057] bond5: (slave veth0_to_bond): Releasing active interface [ 700.144816][ T6057] bond0: (slave bond_slave_0): Releasing backup interface [ 700.178382][ T6057] bond_slave_0: left allmulticast mode [ 700.201840][ T6057] bond0: (slave bond_slave_1): Releasing backup interface [ 700.228799][ T6057] bond_slave_1: left allmulticast mode [ 700.403429][ T6082] netlink: 'syz.2.9138': attribute type 1 has an invalid length. [ 700.413353][ T6080] IPv6: NLM_F_CREATE should be specified when creating new route [ 700.742940][ T6091] __nla_validate_parse: 10 callbacks suppressed [ 700.742972][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9142'. [ 701.050554][ T6110] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 701.137483][T28959] bridge_slave_1: left allmulticast mode [ 701.163791][T28959] bridge_slave_1: left promiscuous mode [ 701.191340][T28959] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.245214][T28959] bridge_slave_0: left allmulticast mode [ 701.268350][T28959] bridge_slave_0: left promiscuous mode [ 701.294794][T28959] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.312063][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9152'. [ 701.387900][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9153'. [ 701.411007][T28959] pim6reg: left allmulticast mode [ 701.426695][T28959] dvmrp0: left allmulticast mode [ 701.440785][T28959] pimreg: left allmulticast mode [ 701.522214][T28959] bond13 (unregistering): (slave ip6gretap0): Releasing active interface [ 701.602019][T28959] erspan0 (unregistering): left promiscuous mode [ 701.629398][T28959] batman_adv: batadv0: Removing interface: gretap3 [ 701.689375][T28959] bond6 (unregistering): (slave geneve2): Releasing active interface [ 701.786674][T28959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.800232][T28959] bond0 (unregistering): (slave bond3): Releasing backup interface [ 701.811726][T28959] bond0 (unregistering): Released all slaves [ 701.827587][T28959] bond1 (unregistering): Released all slaves [ 701.843224][T28959] bond2 (unregistering): Released all slaves [ 701.861041][T28959] bond3 (unregistering): Released all slaves [ 701.875803][T28959] bond4 (unregistering): Released all slaves [ 701.899912][T28959] bond5 (unregistering): Released all slaves [ 701.924393][T28959] bond6 (unregistering): Released all slaves [ 701.942850][T28959] bond7 (unregistering): Released all slaves [ 701.967322][T28959] bond8 (unregistering): Released all slaves [ 701.995379][T28959] bond9 (unregistering): Released all slaves [ 702.022888][T28959] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 702.033880][T28959] bond10 (unregistering): Released all slaves [ 702.053564][T28959] bond11 (unregistering): Released all slaves [ 702.074546][T28959] bond12 (unregistering): Released all slaves [ 702.092933][T28959] bond13 (unregistering): Released all slaves [ 702.113329][T28959] bond14 (unregistering): Released all slaves [ 702.141719][T28959] bond15 (unregistering): Released all slaves [ 702.332621][T28959] tipc: Disabling bearer [ 702.373004][T28959] tipc: Disabling bearer [ 702.399545][T28959] tipc: Left network mode [ 702.431651][ T6147] vcan0: entered allmulticast mode [ 702.485372][T28959] IPVS: stopping backup sync thread 21202 ... [ 702.637974][ T13] net_ratelimit: 37 callbacks suppressed [ 702.637993][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 702.666160][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9165'. [ 702.850907][ T6174] ip6gre1: entered allmulticast mode [ 702.860712][T26344] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 702.875091][T26344] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 702.927157][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 703.096729][T28958] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 703.287987][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9175'. [ 703.348273][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 703.371838][ T6210] sctp: [Deprecated]: syz.2.9177 (pid 6210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 703.371838][ T6210] Use struct sctp_sack_info instead [ 703.467052][ T81] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 703.482828][ T81] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 703.531402][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 703.573729][ T6215] syzkaller0: entered promiscuous mode [ 703.593165][ T6215] syzkaller0: entered allmulticast mode [ 703.604990][ T6220] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9181'. [ 703.743924][T28959] team0: left promiscuous mode [ 703.762319][T28959] team_slave_0: left promiscuous mode [ 703.776714][T28959] team_slave_1: left promiscuous mode [ 703.800298][T28959] hsr_slave_0: left promiscuous mode [ 703.816553][T28959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.017151][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 704.145175][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9178'. [ 704.170253][T28959] team0 (unregistering): Port device team_slave_1 removed [ 704.199016][T28959] team0 (unregistering): Port device team_slave_0 removed [ 704.599004][ T6275] validate_nla: 1 callbacks suppressed [ 704.599022][ T6275] netlink: 'syz.0.9191': attribute type 1 has an invalid length. [ 704.612593][ T6275] netlink: 'syz.0.9191': attribute type 1 has an invalid length. [ 704.643272][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9188'. [ 704.678771][ T6267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 704.944612][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9196'. [ 704.975797][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9198'. [ 704.995050][ T6293] tipc: Started in network mode [ 705.017631][ T6293] tipc: Node identity 369061599da, cluster identity 4711 [ 705.043278][ T6293] tipc: Enabled bearer , priority 0 [ 705.058523][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.071695][ T6296] bridge_slave_1 (unregistering): left allmulticast mode [ 705.079796][ T6296] bridge_slave_1 (unregistering): left promiscuous mode [ 705.087622][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.111115][ T6302] vlan0: entered allmulticast mode [ 705.120355][ T6302] erspan0: entered allmulticast mode [ 705.194843][ T6309] syzkaller0: entered promiscuous mode [ 705.201295][ T6309] syzkaller0: entered allmulticast mode [ 705.209151][ T6309] tipc: Resetting bearer [ 705.229606][T28959] IPVS: stop unused estimator thread 0... [ 705.295331][ T6292] tipc: Resetting bearer [ 705.500386][ T6292] tipc: Disabling bearer [ 705.969353][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.032419][ T6373] tipc: Failed to remove unknown binding: 66,0,0/0:3203228072/3203228074 [ 706.079841][ T6373] tipc: Failed to remove unknown binding: 66,0,0/0:3203228072/3203228073 [ 706.106863][ T6373] tipc: Failed to remove unknown binding: 66,0,0/0:3203228072/3203228074 [ 706.142727][ T6379] syzkaller1: entered promiscuous mode [ 706.145160][ T6373] tipc: Failed to remove unknown binding: 66,0,0/0:3203228072/3203228073 [ 706.153139][ T6379] syzkaller1: entered allmulticast mode [ 706.206428][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 706.382721][ T6390] __nla_validate_parse: 3 callbacks suppressed [ 706.382739][ T6390] netlink: 212 bytes leftover after parsing attributes in process `syz.0.9219'. [ 706.473388][ T6390] netlink: 'syz.0.9219': attribute type 15 has an invalid length. [ 706.484968][ T6401] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9221'. [ 706.510066][ T6390] netlink: 'syz.0.9219': attribute type 1 has an invalid length. [ 706.562150][ T6390] nbd: must specify at least one socket [ 706.704596][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9226'. [ 706.722372][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9226'. [ 706.772495][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9226'. [ 706.805525][ T6421] netlink: 'syz.0.9228': attribute type 2 has an invalid length. [ 706.815011][ T6421] netlink: 'syz.0.9228': attribute type 2 has an invalid length. [ 706.831547][ T6419] sctp: [Deprecated]: syz.1.9227 (pid 6419) Use of int in max_burst socket option. [ 706.831547][ T6419] Use struct sctp_assoc_value instead [ 706.988867][ T6415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 707.054509][ T6418] bond1 (unregistering): Released all slaves [ 707.262356][ T6455] netlink: 788 bytes leftover after parsing attributes in process `syz.4.9237'. [ 707.313944][ T6439] team_slave_1: left promiscuous mode [ 707.435622][ T6439] geneve1: left allmulticast mode [ 707.457988][ T6439] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 707.487111][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 707.494245][ T6439] bridge1: left promiscuous mode [ 707.509563][ T6439] bridge1: left allmulticast mode [ 707.604734][ T6439] bond1: left promiscuous mode [ 707.610245][ T6439] bond1: left allmulticast mode [ 707.643890][ T6439] bond2: left promiscuous mode [ 707.651572][ T13] net_ratelimit: 32 callbacks suppressed [ 707.651590][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 707.672254][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 707.773078][ T6439] bond7: left promiscuous mode [ 707.782639][ T6439] bridge3: left promiscuous mode [ 707.794466][ T6439] macvtap1: left allmulticast mode [ 707.804941][ T6439] macvtap2: left allmulticast mode [ 707.830737][ T6443] IPv6: sit1: Disabled Multicast RS [ 707.844844][T11905] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.873711][T11905] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.901190][T11905] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 707.961199][T11905] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.979455][ T6482] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9241'. [ 708.017920][T11905] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.061794][T11905] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 708.094664][T11905] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.112594][ T6485] netlink: 'syz.1.9241': attribute type 39 has an invalid length. [ 708.122871][T11905] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.143184][T11905] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 708.156586][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 708.179413][ T6485] hsr_slave_0: left promiscuous mode [ 708.198835][ T6485] hsr_slave_1: left promiscuous mode [ 708.217723][T28959] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 708.232553][T28959] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 708.273310][T11905] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.295305][T11905] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.325973][T11905] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 708.347384][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 708.394133][ T6506] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 708.449994][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9242'. [ 708.516825][T28959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 708.636415][T28959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 708.729824][ T6532] IPv6: NLM_F_REPLACE set, but no existing node found! [ 708.782180][ T6538] bridge0: port 3(batadv1) entered blocking state [ 708.818273][ T6538] bridge0: port 3(batadv1) entered disabled state [ 708.877026][ T6538] batadv1: entered allmulticast mode [ 708.896259][T28958] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 708.911090][T28958] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 708.959236][ T6538] batadv1: entered promiscuous mode [ 709.189083][ T6560] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9256'. [ 709.268221][ T81] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 709.279435][ T81] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 709.324716][ T6571] netlink: 'syz.1.9260': attribute type 1 has an invalid length. [ 709.437386][ T6578] netlink: 'syz.3.9261': attribute type 11 has an invalid length. [ 709.641594][ T6593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9266'. [ 709.785819][ T6603] tipc: Enabled bearer , priority 0 [ 709.808496][ T6593] syzkaller0: entered promiscuous mode [ 709.820494][ T6593] syzkaller0: entered allmulticast mode [ 709.837849][ T6606] syzkaller0: entered promiscuous mode [ 709.843893][ T6606] syzkaller0: entered allmulticast mode [ 709.853465][ T6593] tipc: Resetting bearer [ 710.317686][ T6580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 710.336634][ T6580] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 710.353360][ T6592] tipc: Resetting bearer [ 710.402648][ T6592] tipc: Disabling bearer [ 710.440899][ T6580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 710.470882][ T6580] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 710.614360][ T6580] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 710.652430][ T6580] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 710.885459][ T6580] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 710.911411][ T6580] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 710.974717][ T6580] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 711.004539][ T6580] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 711.399024][ T6698] macsec1: entered promiscuous mode [ 711.537942][ T6702] tipc: Started in network mode [ 711.569439][ T6702] tipc: Node identity f6e78b2c64ee, cluster identity 4711 [ 711.598183][ T6702] tipc: Enabled bearer , priority 0 [ 711.620702][ T6702] syzkaller0: entered promiscuous mode [ 711.634903][ T6702] syzkaller0: entered allmulticast mode [ 711.660157][ T6708] netlink: 'syz.0.9298': attribute type 2 has an invalid length. [ 711.676296][ T6702] tipc: Resetting bearer [ 711.701427][ T6701] tipc: Resetting bearer [ 711.729949][ T6712] netlink: 'syz.2.9300': attribute type 11 has an invalid length. [ 711.741926][ T6701] tipc: Disabling bearer [ 711.743025][ T6712] __nla_validate_parse: 2 callbacks suppressed [ 711.743039][ T6712] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.9300'. [ 711.852274][ T6718] netlink: 'syz.0.9301': attribute type 3 has an invalid length. [ 711.994666][ T6734] IPVS: Error connecting to the multicast addr [ 712.031338][ T6731] IPVS: Error connecting to the multicast addr [ 712.739494][ T982] net_ratelimit: 39 callbacks suppressed [ 712.739512][ T982] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 712.827522][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9322'. [ 712.890576][T28959] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.927258][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 712.945583][T28959] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.974339][T28959] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.997927][T28959] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.051647][T28958] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 713.086545][T28958] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 713.101092][T28958] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 713.178017][ T6820] netlink: 'syz.1.9331': attribute type 19 has an invalid length. [ 713.203918][ T6818] syzkaller0: entered promiscuous mode [ 713.215599][ T6818] syzkaller0: entered allmulticast mode [ 713.226405][ T6814] syzkaller1: entered promiscuous mode [ 713.235323][ T6814] syzkaller1: entered allmulticast mode [ 713.288901][T28958] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 713.610889][T31752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 713.619235][T31752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 713.628335][T31752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 713.641345][T31752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 713.649749][T31752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 713.666759][ T982] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 713.682000][ T982] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 713.764291][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 713.774816][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 713.792100][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 713.811484][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 713.820836][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 713.956907][T26344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 714.062197][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9340'. [ 714.073465][ T6865] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9340'. [ 714.097740][T28958] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 714.333646][ T6882] netlink: 'syz.3.9345': attribute type 11 has an invalid length. [ 714.419341][ T6888] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9347'. [ 714.440705][ T6886] gtp0: entered promiscuous mode [ 714.481398][ T6886] gtp0: entered allmulticast mode [ 714.669424][ T6843] xfrm0 speed is unknown, defaulting to 1000 [ 714.711915][T26344] bridge_slave_1: left allmulticast mode [ 714.725661][T26344] bridge_slave_1: left promiscuous mode [ 714.745660][ T6903] netlink: 'syz.1.9351': attribute type 1 has an invalid length. [ 714.763006][T26344] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.781315][ T6903] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9351'. [ 714.800814][T26344] bridge_slave_0: left allmulticast mode [ 714.811496][T26344] bridge_slave_0: left promiscuous mode [ 714.822880][ T6903] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9351'. [ 714.832711][T26344] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.852791][T26344] dvmrp0: left allmulticast mode [ 714.919005][ T6904] netlink: 240 bytes leftover after parsing attributes in process `syz.4.9349'. [ 714.984950][T26344] bond4 (unregistering): (slave geneve2): Releasing active interface [ 715.031503][T26344] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 715.053230][T26344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.071926][T26344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.085593][T26344] bond0 (unregistering): (slave bond3): Releasing backup interface [ 715.097817][T26344] bond0 (unregistering): (slave team0): Releasing backup interface [ 715.111834][T26344] bond0 (unregistering): Released all slaves [ 715.124951][T26344] bond1 (unregistering): Released all slaves [ 715.144464][T26344] bond2 (unregistering): Released all slaves [ 715.168772][T26344] bond3 (unregistering): Released all slaves [ 715.185797][T26344] bond4 (unregistering): Released all slaves [ 715.204785][T26344] bond5 (unregistering): Released all slaves [ 715.235744][T26344] bond6 (unregistering): Released all slaves [ 715.276416][T26344] bond7 (unregistering): Released all slaves [ 715.292856][T26344] bond8 (unregistering): (slave bond9): Releasing backup interface [ 715.302920][T26344] bond8 (unregistering): Released all slaves [ 715.322428][T26344] bond9 (unregistering): Released all slaves [ 715.349160][ T6843] lo speed is unknown, defaulting to 1000 [ 715.380905][ T6910] bond16: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 715.392484][ T6910] bond16 (unregistering): Released all slaves [ 715.411439][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 715.458648][T26344] : left promiscuous mode [ 715.540779][T26344] tipc: Left network mode [ 715.610527][T26344] IPVS: stopping backup sync thread 32276 ... [ 715.725215][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9356'. [ 715.789112][ T6952] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 715.889121][T31752] Bluetooth: hci0: command tx timeout [ 716.151629][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.159992][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.169431][ T6843] bridge_slave_0: entered allmulticast mode [ 716.178146][ T6843] bridge_slave_0: entered promiscuous mode [ 716.248079][ T6984] netlink: 'syz.4.9364': attribute type 1 has an invalid length. [ 716.257719][ T6843] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.282708][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.299680][ T6984] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9364'. [ 716.325191][ T6843] bridge_slave_1: entered allmulticast mode [ 716.338949][ T6984] netlink: 'syz.4.9364': attribute type 1 has an invalid length. [ 716.363815][ T6843] bridge_slave_1: entered promiscuous mode [ 716.401544][ T6984] netlink: 'syz.4.9364': attribute type 8 has an invalid length. [ 716.423286][ T6991] netlink: 'syz.3.9366': attribute type 1 has an invalid length. [ 716.565702][ T6843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.641200][ T6843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.675252][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 716.881068][ T6843] team0: Port device team_slave_0 added [ 716.901747][T26344] hsr_slave_0: left promiscuous mode [ 716.917943][T26344] hsr_slave_1: left promiscuous mode [ 717.018721][ T7047] __nla_validate_parse: 5 callbacks suppressed [ 717.018739][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9377'. [ 717.038506][T26344] team0 (unregistering): Port device team_slave_0 removed [ 717.100345][ T6843] team0: Port device team_slave_1 added [ 717.208315][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.219228][ T7052] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.9380'. [ 717.244828][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.342732][ T6843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.390991][ T7062] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9382'. [ 717.421242][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.451305][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.538508][ T6843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.572147][ T7066] bridge0: entered allmulticast mode [ 717.607228][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9385'. [ 717.673267][ T7075] netlink: 'syz.2.9385': attribute type 39 has an invalid length. [ 717.693322][ T6843] hsr_slave_0: entered promiscuous mode [ 717.707700][ T6843] hsr_slave_1: entered promiscuous mode [ 717.738920][ T6843] debugfs: 'hsr0' already exists in 'hsr' [ 717.745749][ T6843] Cannot create hsr debugfs directory [ 717.753484][ T7075] hsr_slave_0: left promiscuous mode [ 717.767757][ T7075] hsr_slave_1: left promiscuous mode [ 717.791170][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9386'. [ 717.803060][T28959] net_ratelimit: 23 callbacks suppressed [ 717.803078][T28959] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 717.823712][T28959] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 717.906219][ T7086] bond16: entered promiscuous mode [ 717.911849][ T7086] bond16: entered allmulticast mode [ 717.914905][ T7081] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9388'. [ 717.918256][ T7086] 8021q: adding VLAN 0 to HW filter on device bond16 [ 717.946287][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 717.968029][T31752] Bluetooth: hci0: command tx timeout [ 718.015158][ T7087] syz.4.9388 (7087) used obsolete PPPIOCDETACH ioctl [ 718.028553][ T7087] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9388'. [ 718.058537][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 718.301831][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 718.361555][T26344] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 718.378295][T26344] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 718.403466][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 718.586001][T28958] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 718.658812][ T7124] netlink: 284 bytes leftover after parsing attributes in process `syz.1.9396'. [ 718.680110][ T7126] xfrm0 speed is unknown, defaulting to 1000 [ 718.721489][ T7126] lo speed is unknown, defaulting to 1000 [ 718.727532][T28959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 718.750190][ T7135] IPVS: length: 201 != 8 [ 718.879224][ T7143] xt_limit: Overflow, try lower: 604147548/4200216962 [ 718.934698][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 719.009553][ T7149] netlink: 'syz.2.9401': attribute type 12 has an invalid length. [ 719.039955][ T7149] netlink: 'syz.2.9401': attribute type 29 has an invalid length. [ 719.060536][ T7149] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9401'. [ 719.115791][ T6843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 719.162421][ T6843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.181082][ T6843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 719.194992][ T6843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.203355][ T6843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 719.215772][ T6843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.228887][ T6843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 719.247559][ T6843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 719.302374][ T7160] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 719.318329][ T7160] bond1 (unregistering): Released all slaves [ 719.318418][ T7164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9403'. [ 719.704097][ T6843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.735444][ T7190] netlink: 'syz.4.9407': attribute type 1 has an invalid length. [ 719.780256][ T6843] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.945282][ T7190] 8021q: adding VLAN 0 to HW filter on device bond1 [ 719.989321][T28958] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.996516][T28958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.029111][T28958] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.036271][T28958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.047734][T31752] Bluetooth: hci0: command tx timeout [ 720.362562][ T7244] netlink: 'syz.3.9418': attribute type 2 has an invalid length. [ 720.402721][ T7245] netlink: 'syz.3.9418': attribute type 2 has an invalid length. [ 720.752674][ T7275] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 721.460236][ T6843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.617606][ T6843] veth0_vlan: entered promiscuous mode [ 721.667907][ T6843] veth1_vlan: entered promiscuous mode [ 721.789409][ T6843] veth0_macvtap: entered promiscuous mode [ 721.872244][ T6843] veth1_macvtap: entered promiscuous mode [ 721.878288][ T7340] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 721.915329][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.947904][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.984611][T26344] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.004645][T26344] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.020398][T26344] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.038815][T26344] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.126739][T31752] Bluetooth: hci0: command tx timeout [ 722.167084][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.184784][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.235249][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.249594][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.256267][ T7363] __nla_validate_parse: 10 callbacks suppressed [ 722.256286][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9442'. [ 722.380959][ T7370] xt_hashlimit: size too large, truncated to 1048576 [ 722.385418][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9445'. [ 722.419611][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9445'. [ 722.521430][ T7381] netlink: 'syz.2.9447': attribute type 11 has an invalid length. [ 722.539344][ T7381] netlink: 'syz.2.9447': attribute type 11 has an invalid length. [ 722.548864][ T7381] netlink: 204 bytes leftover after parsing attributes in process `syz.2.9447'. [ 722.836186][T26344] net_ratelimit: 44 callbacks suppressed [ 722.836216][T26344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 722.885113][ T7398] siw: device registration error -23 [ 722.896178][ T7397] siw: device registration error -23 [ 722.980716][ T7411] netlink: 'syz.2.9455': attribute type 1 has an invalid length. [ 723.076708][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 723.091188][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 723.119430][ T7411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 723.199573][ T7423] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9458'. [ 723.221977][ T7400] netlink: 'syz.0.9453': attribute type 5 has an invalid length. [ 723.234973][ T7415] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 723.251189][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9453'. [ 723.270691][ T7423] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9458'. [ 723.280279][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 723.422626][ T7425] netlink: 'syz.3.9459': attribute type 16 has an invalid length. [ 723.431122][ T982] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 723.461698][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9461'. [ 723.469411][ T7425] IPv6: NLM_F_CREATE should be specified when creating new route [ 723.497474][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 723.504983][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 723.515257][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 723.526037][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 723.533648][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 723.540746][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 723.616866][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 723.631221][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 723.684372][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 723.751828][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9464'. [ 723.826924][ T982] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 723.871485][T11905] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.972654][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9465'. [ 724.044797][T11905] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.144405][T11905] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.259132][T11905] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.325403][ T7470] syzkaller1: entered promiscuous mode [ 724.345224][ T7470] syzkaller1: entered allmulticast mode [ 724.538219][ T7430] xfrm0 speed is unknown, defaulting to 1000 [ 724.554326][ T7430] lo speed is unknown, defaulting to 1000 [ 724.725277][T11905] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 724.737105][T11905] ip6gre1 (unregistering): left promiscuous mode [ 724.753265][T11905] bond14 (unregistering): (slave ip6gre2): Releasing backup interface [ 725.014961][T11905] bond9 (unregistering): (slave geneve4): Releasing active interface [ 725.067465][T11905] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 725.076629][T11905] bridge1 (unregistering): left promiscuous mode [ 725.103134][T11905] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 725.148664][T11905] bond0 (unregistering): Released all slaves [ 725.161139][T11905] bond1 (unregistering): Released all slaves [ 725.189716][T11905] bond2 (unregistering): Released all slaves [ 725.205370][T11905] bond3 (unregistering): Released all slaves [ 725.230939][T11905] bond4 (unregistering): Released all slaves [ 725.261921][T11905] bond5 (unregistering): (slave veth5): Releasing active interface [ 725.272107][T11905] bond5 (unregistering): Released all slaves [ 725.283913][T11905] bond6 (unregistering): Released all slaves [ 725.295749][T11905] bond7 (unregistering): Released all slaves [ 725.307463][T11905] bond8 (unregistering): Released all slaves [ 725.319041][T11905] bond9 (unregistering): Released all slaves [ 725.342636][T11905] bond10 (unregistering): (slave veth7): Releasing active interface [ 725.352061][T11905] bond10 (unregistering): Released all slaves [ 725.363674][T11905] bond11 (unregistering): Released all slaves [ 725.374928][T11905] bond12 (unregistering): Released all slaves [ 725.388229][T11905] bond13 (unregistering): Released all slaves [ 725.401299][T11905] bond14 (unregistering): Released all slaves [ 725.414527][T11905] bond15 (unregistering): Released all slaves [ 725.426793][T11905] bond16 (unregistering): Released all slaves [ 725.452486][ T7491] netlink: 'syz.2.9478': attribute type 1 has an invalid length. [ 725.477242][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 725.554872][T11905] tipc: Disabling bearer [ 725.566209][ T5621] Bluetooth: hci1: command tx timeout [ 725.572963][T11905] tipc: Left network mode [ 726.287655][ T7430] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.319200][ T7430] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.337409][ T7430] bridge_slave_0: entered allmulticast mode [ 726.359595][ T7430] bridge_slave_0: entered promiscuous mode [ 726.379230][ T7430] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.394469][ T7430] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.415571][ T7430] bridge_slave_1: entered allmulticast mode [ 726.431408][ T7430] bridge_slave_1: entered promiscuous mode [ 726.535799][ T7430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.579332][ T7430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.622834][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 726.645445][ T7590] xt_TCPMSS: Only works on TCP SYN packets [ 726.708281][ T7430] team0: Port device team_slave_0 added [ 726.732844][ T7430] team0: Port device team_slave_1 added [ 726.805047][ T7430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.829135][ T7430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.875266][ T7430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.918302][ T7430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.951251][ T7430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.003288][ T7430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.561953][ T13] smbdirect: ib_dev[syś2] removed [ 727.572413][ T7430] hsr_slave_0: entered promiscuous mode [ 727.611120][ T7430] hsr_slave_1: entered promiscuous mode [ 727.630293][ T7430] debugfs: 'hsr0' already exists in 'hsr' [ 727.647193][ T5621] Bluetooth: hci1: command tx timeout [ 727.658673][ T7430] Cannot create hsr debugfs directory [ 727.749211][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 727.789787][ T7663] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 727.803991][ T7663] bond10 (unregistering): Released all slaves [ 727.846155][ T7665] netlink: 'syz.4.9511': attribute type 1 has an invalid length. [ 727.854949][ T7665] __nla_validate_parse: 5 callbacks suppressed [ 727.854976][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9511'. [ 727.956772][T28958] net_ratelimit: 27 callbacks suppressed [ 727.956791][T28958] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 728.080355][T11905] IPVS: stop unused estimator thread 0... [ 728.179026][T28959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 728.191605][ T7685] netlink: 16046 bytes leftover after parsing attributes in process `syz.4.9516'. [ 728.318426][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 728.326310][T28959] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 728.341107][T28959] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 728.408107][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9522'. [ 728.454740][ T7703] team0 (unregistering): Port device team_slave_0 removed [ 728.508784][ T7703] team0 (unregistering): Port device team_slave_1 removed [ 728.618780][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9524'. [ 728.656708][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 728.744404][ T7716] netlink: set zone limit has 4 unknown bytes [ 728.816293][T28959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 728.864626][ T7727] xt_TPROXY: Can be used only with -p tcp or -p udp [ 728.874181][ T7696] netlink: 'syz.2.9520': attribute type 3 has an invalid length. [ 728.898135][T28959] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 728.913338][T28959] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 728.933332][ T7731] netlink: 'syz.0.9527': attribute type 21 has an invalid length. [ 728.955806][ T7731] IPv6: NLM_F_CREATE should be specified when creating new route [ 728.982983][ T7731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 728.990274][ T7731] IPv6: NLM_F_CREATE should be set when creating new route [ 728.997546][ T7731] IPv6: NLM_F_CREATE should be set when creating new route [ 729.004764][ T7731] IPv6: NLM_F_CREATE should be set when creating new route [ 729.098867][ T7430] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 729.152629][ T7430] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 729.204937][ T7430] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 729.232782][ T7430] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 729.271439][ T7738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9529'. [ 729.285384][ T7430] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 729.312424][ T7748] netlink: 'syz.0.9533': attribute type 39 has an invalid length. [ 729.325413][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9534'. [ 729.341018][ T7430] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 729.341472][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9529'. [ 729.438941][ T7738] 8021q: adding VLAN 0 to HW filter on device bond2 [ 729.478538][ T7430] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 729.499395][ T7430] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 729.706823][ T7430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.724814][ T7779] lo speed is unknown, defaulting to 1000 [ 729.730705][ T5621] Bluetooth: hci1: command tx timeout [ 729.769940][ T7789] macvtap0: entered allmulticast mode [ 729.778036][ T7789] veth0_macvtap: entered allmulticast mode [ 729.801393][ T7430] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.831289][ T7779] lo speed is unknown, defaulting to 1000 [ 729.861591][ T7779] lo speed is unknown, defaulting to 1000 [ 729.863225][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.875080][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.881675][ T7779] smbdirect: ib_dev[syś2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 729.935243][ T7779] smbdirect: ib_dev[syś2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 729.942398][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.954062][ T7779] smbdirect: ib_dev[syś2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 729.960214][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.985406][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9541'. [ 730.014393][ T7779] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 730.165417][ T7779] lo speed is unknown, defaulting to 1000 [ 730.173673][ T7779] lo speed is unknown, defaulting to 1000 [ 730.182210][ T7779] lo speed is unknown, defaulting to 1000 [ 730.190431][ T7779] lo speed is unknown, defaulting to 1000 [ 730.199443][ T7779] lo speed is unknown, defaulting to 1000 [ 730.208525][ T7779] lo speed is unknown, defaulting to 1000 [ 730.244829][ T7779] lo speed is unknown, defaulting to 1000 [ 730.273997][ T7779] lo speed is unknown, defaulting to 1000 [ 730.305150][ T7779] lo speed is unknown, defaulting to 1000 [ 730.333539][ T7779] lo speed is unknown, defaulting to 1000 [ 730.371734][ T7779] lo speed is unknown, defaulting to 1000 [ 730.648598][ T7837] netlink: 766 bytes leftover after parsing attributes in process `syz.2.9550'. [ 730.672400][ T7835] netlink: 'syz.4.9549': attribute type 28 has an invalid length. [ 730.695639][ T7837] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9550'. [ 730.713386][ T7834] netlink: 'syz.4.9549': attribute type 28 has an invalid length. [ 730.726317][ T7835] netlink: 'syz.4.9549': attribute type 3 has an invalid length. [ 730.759799][ T7834] netlink: 'syz.4.9549': attribute type 3 has an invalid length. [ 731.073355][ T7860] netlink: 'syz.2.9554': attribute type 2 has an invalid length. [ 731.262880][ T7430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.354114][ T7430] veth0_vlan: entered promiscuous mode [ 731.388036][ T7430] veth1_vlan: entered promiscuous mode [ 731.449277][ T7430] veth0_macvtap: entered promiscuous mode [ 731.460452][ T7430] veth1_macvtap: entered promiscuous mode [ 731.510042][ T7430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.567800][ T7430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.597011][ T7904] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 731.617400][ T1105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.632777][ T1105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.655068][ T1105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.668259][ T1105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.785620][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.800983][ T7922] bridge_slave_1 (unregistering): left allmulticast mode [ 731.811111][ T5621] Bluetooth: hci1: command tx timeout [ 731.812786][ T7922] bridge_slave_1 (unregistering): left promiscuous mode [ 731.853562][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.895586][ T7927] netlink: 'syz.3.9565': attribute type 1 has an invalid length. [ 731.963845][ T7927] 8021q: adding VLAN 0 to HW filter on device bond10 [ 731.975557][ T7933] bond3: (slave veth0_to_bond): Releasing active interface [ 731.994340][ T7933] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 732.027594][ T7927] 8021q: adding VLAN 0 to HW filter on device bond11 [ 732.037084][ T7927] bond10: (slave bond11): Enslaving as an active interface with a down link [ 732.255594][ T7947] sch_tbf: burst 1040 is lower than device syzkaller0 mtu (1514) ! [ 732.274802][ T7947] syzkaller0: entered promiscuous mode [ 732.288825][ T7947] syzkaller0: entered allmulticast mode [ 732.473631][ T7959] mac80211_hwsim hwsim96 ’: renamed from wlan1 [ 732.685269][ T7971] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 732.976053][T11905] net_ratelimit: 40 callbacks suppressed [ 732.976072][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 733.047047][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 733.061741][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 733.097496][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 733.206811][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 733.317597][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 733.426104][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 733.536476][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 733.586428][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 733.601575][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 734.301449][ T7884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.394988][T26344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.429915][T26344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.488261][T28958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.497876][T28958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.618829][ T8006] xt_addrtype: ipv6 does not support BROADCAST matching [ 734.632497][ T8008] __nla_validate_parse: 7 callbacks suppressed [ 734.632526][ T8008] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9579'. [ 734.656419][ T8008] netlink: 'syz.2.9579': attribute type 2 has an invalid length. [ 734.725615][ T8022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.841966][ T8034] netlink: 'syz.1.9583': attribute type 21 has an invalid length. [ 734.859902][ T8038] netlink: 'syz.0.9586': attribute type 13 has an invalid length. [ 734.923790][T11357] lo speed is unknown, defaulting to 1000 [ 734.930567][ T8034] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9583'. [ 735.004557][ T8038] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 735.004671][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9588'. [ 735.033741][ T8038] syzkaller0: entered promiscuous mode [ 735.078944][ T8040] syzkaller0: entered promiscuous mode [ 735.085042][ T8040] syzkaller0: entered allmulticast mode [ 735.104960][ T8040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9587'. [ 735.116657][ T8040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9587'. [ 735.127631][ T81] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.141470][ T8040] Bluetooth: MGMT ver 1.23 [ 735.146838][ T8048] tipc: Enabled bearer , priority 0 [ 735.155055][ T8046] tipc: Enabling of bearer rejected, already enabled [ 735.254474][ T8045] tipc: Disabling bearer [ 735.479114][ T8074] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9597'. [ 735.582228][ T8076] vlan2: entered allmulticast mode [ 735.619099][ T8076] bond0: entered allmulticast mode [ 735.640848][ T8076] bond_slave_0: entered allmulticast mode [ 735.677852][ T8076] bond_slave_1: entered allmulticast mode [ 735.714479][ T8095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9603'. [ 735.827113][ T8105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9605'. [ 735.861008][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9606'. [ 735.979771][ T8113] syzkaller0: entered promiscuous mode [ 735.992135][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9608'. [ 736.011331][ T8113] syzkaller0: entered allmulticast mode [ 736.292076][ T8134] bond1: option resend_igmp: invalid value (32767) [ 736.301161][ T8134] bond1: option resend_igmp: allowed values 0 - 255 [ 736.319963][ T8142] xt_l2tp: v2 doesn't support IP mode [ 736.326972][ T8142] netlink: 'syz.4.9616': attribute type 1 has an invalid length. [ 736.326980][ T8134] bond1 (unregistering): Released all slaves [ 736.387910][ T8144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.466531][ T8142] 8021q: adding VLAN 0 to HW filter on device bond3 [ 736.540830][ T8152] bond3: (slave geneve3): making interface the new active one [ 736.541174][ T8157] netlink: 'syz.0.9619': attribute type 1 has an invalid length. [ 736.556877][ T8152] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 736.615581][ T8154] bond1: (slave gretap1): making interface the new active one [ 736.640057][ T8154] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 736.926282][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 737.347578][ T8219] tipc: Started in network mode [ 737.353246][ T8219] tipc: Node identity aee154ec5df3, cluster identity 4711 [ 737.362494][ T8219] tipc: Enabled bearer , priority 0 [ 737.374320][ T8219] syzkaller0: entered promiscuous mode [ 737.380547][ T8219] syzkaller0: entered allmulticast mode [ 737.396768][ T8219] tipc: Resetting bearer [ 737.570698][ T8218] tipc: Resetting bearer [ 737.585207][ T8218] tipc: Disabling bearer [ 737.646982][ T8235] team0 (unregistering): Port device team_slave_0 removed [ 737.659238][ T8235] team0 (unregistering): Port device team_slave_1 removed [ 737.733748][ T8237] xt_hashlimit: size too large, truncated to 1048576 [ 737.753414][ T8231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.864385][ T8252] pim6reg1: entered promiscuous mode [ 737.871524][ T8252] pim6reg1: entered allmulticast mode [ 737.991868][ T81] net_ratelimit: 58 callbacks suppressed [ 737.991900][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 738.126788][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 738.147825][ T8269] tipc: Trying to set illegal importance in message [ 738.236474][ T982] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 738.244810][ T8279] syzkaller1: entered promiscuous mode [ 738.251436][ T982] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 738.274006][ T8279] syzkaller1: entered allmulticast mode [ 738.287532][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 738.402147][ T8287] vlan3: entered promiscuous mode [ 738.411109][ T8287] hsr0: entered promiscuous mode [ 738.421441][ T8287] vlan3: entered allmulticast mode [ 738.436378][ T8287] hsr0: entered allmulticast mode [ 738.441762][ T8287] hsr_slave_0: entered allmulticast mode [ 738.456206][ T8287] hsr_slave_1: entered allmulticast mode [ 738.526719][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.536018][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 738.666751][T28958] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 738.768334][T28958] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 738.782757][T28958] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 738.812964][ T8313] netlink: 'syz.0.9663': attribute type 1 has an invalid length. [ 738.824212][ T8313] netlink: 'syz.0.9663': attribute type 1 has an invalid length. [ 738.934431][ T8320] macsec1: entered promiscuous mode [ 739.228868][ T8343] syzkaller0: entered promiscuous mode [ 739.234939][ T8343] syzkaller0: entered allmulticast mode [ 739.685348][ T8374] __nla_validate_parse: 29 callbacks suppressed [ 739.685365][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9683'. [ 739.723683][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9686'. [ 739.784029][ T8374] syzkaller0: create flow: hash 1125734878 index 1 [ 739.796350][ T8374] syzkaller0: delete flow: hash 1125734878 index 1 [ 739.926401][ T8385] gretap0: entered promiscuous mode [ 739.931835][ T8385] vlan3: entered promiscuous mode [ 740.019540][ T7559] hid-generic 0005:4C4A:0440.0002: item fetching failed at offset 2/3 [ 740.045285][ T7559] hid-generic 0005:4C4A:0440.0002: probe with driver hid-generic failed with error -22 [ 740.112688][ T8400] netlink: 'syz.0.9692': attribute type 4 has an invalid length. [ 740.131087][ T8401] xt_hashlimit: size too large, truncated to 1048576 [ 740.284836][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9694'. [ 740.302407][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9694'. [ 740.342549][ T8420] syzkaller0: entered promiscuous mode [ 740.349893][ T8420] syzkaller0: entered allmulticast mode [ 740.366183][ T5621] Bluetooth: hci1: command tx timeout [ 740.701507][ T8430] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 742.746651][ T8379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.759767][ T8409] netlink: 'syz.4.9689': attribute type 1 has an invalid length. [ 742.786373][ T8409] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9689'. [ 742.863387][ T8435] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9700'. [ 743.004376][ T8439] netlink: 'syz.4.9701': attribute type 13 has an invalid length. [ 743.063959][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9703'. [ 743.089357][ T8457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9705'. [ 743.100238][ T8445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9702'. [ 743.206862][ T8463] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 743.215675][T28959] net_ratelimit: 74 callbacks suppressed [ 743.215696][T28959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 743.311327][ T8445] xfrm0 speed is unknown, defaulting to 1000 [ 743.339022][ T8445] lo speed is unknown, defaulting to 1000 [ 743.387584][ T982] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 743.402001][ T982] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 743.448997][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 743.586409][T28959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 743.716122][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 743.724830][ T8490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 743.726400][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.846058][T28959] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 743.976606][ T982] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 744.003765][ T8505] syzkaller0: entered promiscuous mode [ 744.010022][ T8505] syzkaller0: entered allmulticast mode [ 746.320574][ T8470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 746.493944][ T8518] sctp: [Deprecated]: syz.1.9717 (pid 8518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 746.493944][ T8518] Use struct sctp_sack_info instead [ 746.552236][ T8524] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9718'. [ 746.565699][ T8528] x_tables: duplicate underflow at hook 1 [ 746.601173][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9720'. [ 746.684883][ T8528] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9720'. [ 746.712613][ T8531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9722'. [ 746.726894][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9720'. [ 746.810629][ T8540] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.919872][ T8540] bridge_slave_0: left allmulticast mode [ 746.936348][ T8540] bridge_slave_0: left promiscuous mode [ 746.942454][ T8540] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.969622][ T8540] bond0: (slave bond_slave_0): Releasing backup interface [ 746.971522][ T8557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9728'. [ 746.993075][ T8540] bond0: (slave bond_slave_1): Releasing backup interface [ 747.009618][ T8540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.019599][ T8540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.027284][ T8559] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9728'. [ 747.041999][ T8540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.052058][ T8540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.069001][ T42] lo speed is unknown, defaulting to 1000 [ 747.076771][ T42] syś2: Port: 1 Link DOWN [ 747.098701][ T8532] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.161379][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9722'. [ 747.180290][ T8562] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9729'. [ 747.402368][ T8574] xt_hashlimit: size too large, truncated to 1048576 [ 747.475330][ T8585] netlink: 15914 bytes leftover after parsing attributes in process `syz.1.9730'. [ 747.567795][ T8565] 8021q: VLANs not supported on syzkaller1 [ 748.229950][ T13] net_ratelimit: 61 callbacks suppressed [ 748.229979][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 748.436118][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 748.575540][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 748.591590][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 748.606624][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 748.659031][ T81] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 748.746039][ T29] audit: type=1107 audit(1781962622.924:16): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 748.787195][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 748.926248][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.021319][T28962] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 749.136435][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 749.219105][ T81] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 749.363641][ T8711] IPv6: NLM_F_REPLACE set, but no existing node found! [ 749.419671][ T8715] macsec1: entered promiscuous mode [ 749.425007][ T8715] bridge0: entered promiscuous mode [ 749.431568][ T8715] macsec1: entered allmulticast mode [ 749.440424][ T8715] bridge0: entered allmulticast mode [ 749.447624][ T8715] bridge0: port 2(macsec1) entered blocking state [ 749.454344][ T8715] bridge0: port 2(macsec1) entered disabled state [ 749.464711][ T8715] bridge0: left allmulticast mode [ 749.491694][ T7558] bridge0: left promiscuous mode [ 750.030225][ T8745] netlink: 'syz.4.9785': attribute type 9 has an invalid length. [ 750.361416][ T8771] netlink: 'syz.3.9793': attribute type 21 has an invalid length. [ 750.482525][ T8784] netlink: 'syz.3.9797': attribute type 1 has an invalid length. [ 750.494162][ T8784] netlink: 'syz.3.9797': attribute type 1 has an invalid length. [ 750.568481][ T8789] veth0: entered promiscuous mode [ 750.576999][ T8786] veth0: left promiscuous mode [ 751.025395][ T8807] tipc: Enabled bearer , priority 11 [ 751.524522][ T8836] netlink: 'syz.1.9810': attribute type 1 has an invalid length. [ 751.607333][ T8836] netlink: 'syz.1.9810': attribute type 3 has an invalid length. [ 751.634391][ T8836] __nla_validate_parse: 22 callbacks suppressed [ 751.634408][ T8836] netlink: 172 bytes leftover after parsing attributes in process `syz.1.9810'. [ 751.641816][ T8845] netlink: 'syz.4.9814': attribute type 1 has an invalid length. [ 751.660307][ T8836] NCSI netlink: No device for ifindex 813332851 [ 751.716921][ T8845] bond4: entered promiscuous mode [ 751.722292][ T8845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 751.810149][ T8860] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 751.923456][ T8867] syzkaller0: entered promiscuous mode [ 751.932098][ T8867] syzkaller0: entered allmulticast mode [ 752.053242][ T8877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.137976][ T7558] tipc: Node number set to 4078064876 [ 752.722904][ T8925] team_slave_1: Caught tx_queue_len zero misconfig [ 752.757221][ T8927] IPVS: length: 8 != 1152 [ 752.923509][ T8934] netlink: 'syz.2.9839': attribute type 21 has an invalid length. [ 752.958234][ T8934] netlink: 'syz.2.9839': attribute type 22 has an invalid length. [ 752.979546][ T8934] netlink: 'syz.2.9839': attribute type 23 has an invalid length. [ 753.003065][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9839'. [ 753.029802][ T8934] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9839'. [ 753.050936][ T8942] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9840'. [ 753.080855][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9840'. [ 753.108398][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9840'. [ 753.142232][ T8950] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9842'. [ 753.218031][ T8952] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9843'. [ 753.237688][T26344] net_ratelimit: 55 callbacks suppressed [ 753.237716][T26344] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 753.259171][ T8950] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9842'. [ 753.338667][T26344] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 753.353366][T26344] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 753.368290][T28962] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 753.394009][ T8959] bridge0: port 2(veth1_virt_wifi) entered blocking state [ 753.417736][ T8959] bridge0: port 2(veth1_virt_wifi) entered disabled state [ 753.447427][ T8959] veth1_virt_wifi: entered allmulticast mode [ 753.484819][ T8959] veth1_virt_wifi: left allmulticast mode [ 753.518169][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 753.719399][ T8979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 753.766624][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 753.801520][ T8985] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 753.884404][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9857'. [ 753.906276][ T7559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.917337][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 753.925206][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 753.939978][ T1105] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 754.040384][ T9006] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 757.192816][ T9017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 757.289319][ T9059] validate_nla: 3 callbacks suppressed [ 757.289337][ T9059] netlink: 'syz.1.9876': attribute type 1 has an invalid length. [ 757.335776][ T9059] bond1: (slave geneve2): making interface the new active one [ 757.344501][ T9059] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 757.353649][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 757.366513][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 757.404599][ T9059] tipc: Resetting bearer [ 757.436985][ T9067] __nla_validate_parse: 4 callbacks suppressed [ 757.437013][ T9067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9876'. [ 757.495649][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 757.519462][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 757.544344][ T9067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 757.651840][ T9079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9880'. [ 758.276396][T28962] net_ratelimit: 65 callbacks suppressed [ 758.276417][T28962] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 758.293118][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.346167][ T9087] lo: entered allmulticast mode [ 758.351298][ T9087] lo: left allmulticast mode [ 758.398178][ T7558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.428668][ T1105] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 758.449465][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9884'. [ 758.494575][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.528034][T26344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.536545][ T81] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 758.551164][ T81] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 758.568239][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.573943][ T9099] netlink: 'syz.4.9885': attribute type 1 has an invalid length. [ 758.599049][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.610671][ T9099] netlink: 'syz.4.9885': attribute type 7 has an invalid length. [ 758.619632][ T9099] netlink: 'syz.4.9885': attribute type 8 has an invalid length. [ 758.628749][ T9099] netlink: 208 bytes leftover after parsing attributes in process `syz.4.9885'. [ 758.636043][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 758.643012][ T9099] NCSI netlink: No device for ifindex 65584 [ 758.656638][ T9101] netlink: 'syz.3.9887': attribute type 2 has an invalid length. [ 758.675571][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.687173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.747315][ T9099] bond5 (unregistering): Released all slaves [ 759.078610][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9894'. [ 759.108576][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9894'. [ 759.322229][ T9146] xt_l2tp: missing protocol rule (udp|l2tpip) [ 759.574347][ T9159] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 759.902733][ T9184] nbd: couldn't find a device at index 0 [ 759.971624][ T9184] netlink: 'syz.3.9911': attribute type 12 has an invalid length. [ 759.998913][ T9184] netlink: 'syz.3.9911': attribute type 29 has an invalid length. [ 760.012018][ T9184] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9911'. [ 760.021559][ T9184] netlink: 'syz.3.9911': attribute type 3 has an invalid length. [ 760.031461][ T9184] netlink: 'syz.3.9911': attribute type 2 has an invalid length. [ 760.041701][ T9184] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9911'. [ 760.123583][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9916'. [ 760.154782][ T9196] netlink: 'syz.3.9916': attribute type 1 has an invalid length. [ 760.220839][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9919'. [ 760.249048][ T9202] ip6gretap1: entered promiscuous mode [ 760.254729][ T9202] ip6gretap1: entered allmulticast mode [ 760.267297][ T9202] bond12: (slave ip6gretap1): making interface the new active one [ 760.276570][ T9202] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 760.285003][ T9202] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 760.296565][ T9202] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 760.348672][ T9210] veth9: entered promiscuous mode [ 760.603316][ T9222] 8021q: adding VLAN 0 to HW filter on device bond3 [ 760.868367][ T9251] pim6reg: entered allmulticast mode [ 760.886215][ T9253] pim6reg: left allmulticast mode [ 760.900933][ T9253] vcan0: left allmulticast mode [ 760.989615][ T9262] syzkaller0: entered promiscuous mode [ 760.997495][ T9262] syzkaller0: entered allmulticast mode [ 761.500284][ T9297] ipvlan2: entered allmulticast mode [ 761.505732][ T9297] batadv_slave_1: entered allmulticast mode [ 761.513932][ T9297] batman_adv: batadv0: Adding interface: ipvlan2 [ 761.520863][ T9297] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.550880][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.562145][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.576696][ T9297] batman_adv: batadv0: Interface activated: ipvlan2 [ 761.618088][ T9299] gretap2: entered promiscuous mode [ 761.627159][ T9299] gretap2: entered allmulticast mode [ 761.650364][ T9303] syzkaller0: entered promiscuous mode [ 761.656129][ T9303] syzkaller0: entered allmulticast mode [ 762.314435][ T9360] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 762.334816][ T9350] syzkaller0: entered promiscuous mode [ 762.351363][ T9350] syzkaller0: entered allmulticast mode [ 762.490072][T31752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 762.499440][T31752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 762.508179][T31752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 762.517564][T31752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 762.525818][T31752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 762.697220][ T9385] __nla_validate_parse: 10 callbacks suppressed [ 762.697238][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9979'. [ 762.716119][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9980'. [ 762.943520][ T9407] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9983'. [ 763.003052][ T9372] xfrm0 speed is unknown, defaulting to 1000 [ 763.015737][ T9372] lo speed is unknown, defaulting to 1000 [ 763.080422][ T9414] validate_nla: 3 callbacks suppressed [ 763.080441][ T9414] netlink: 'syz.4.9986': attribute type 10 has an invalid length. [ 763.296717][T11905] net_ratelimit: 92 callbacks suppressed [ 763.296745][T11905] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 763.322227][ T9433] netlink: 'syz.1.9989': attribute type 1 has an invalid length. [ 763.335107][ T9433] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9989'. [ 763.350447][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9989'. [ 763.381246][ T9439] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9993'. [ 763.394247][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9993'. [ 763.404697][ T9439] netlink: 31 bytes leftover after parsing attributes in process `syz.4.9993'. [ 763.419341][ T9439] netlink: 'syz.4.9993': attribute type 2 has an invalid length. [ 763.427524][ T9439] netlink: 31 bytes leftover after parsing attributes in process `syz.4.9993'. [ 763.450656][ T9439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9993'. [ 763.494957][ T9441] bond13: entered promiscuous mode [ 763.567138][ T9451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.568464][ T9449] lo: Caught tx_queue_len zero misconfig [ 763.582167][ T9449] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 763.592529][ T9441] syzkaller1: entered promiscuous mode [ 763.600030][ T9441] syzkaller1: entered allmulticast mode [ 763.624486][ T9372] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.633163][ T9372] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.640761][ T9372] bridge_slave_0: entered allmulticast mode [ 763.651545][ T9372] bridge_slave_0: entered promiscuous mode [ 763.675634][ T9372] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.686022][ T9372] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.694612][ T9458] atomic_op ffff888077c22998 conn xmit_atomic 0000000000000000 [ 763.707142][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 763.707768][ T9372] bridge_slave_1: entered allmulticast mode [ 763.722276][ T35] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 763.727679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.760545][ T9372] bridge_slave_1: entered promiscuous mode [ 763.786531][ T35] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 763.877367][ T9466] netlink: 'syz.2.10000': attribute type 1 has an invalid length. [ 763.890121][ T9372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.901429][ T9466] netlink: 'syz.2.10000': attribute type 2 has an invalid length. [ 763.915244][ T9372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.932227][ T9466] netlink: 'syz.2.10000': attribute type 1 has an invalid length. [ 763.966407][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.982156][ T9472] bridge_slave_0: invalid flags given to default FDB implementation [ 764.001687][ T9372] team0: Port device team_slave_0 added [ 764.018882][ T9372] team0: Port device team_slave_1 added [ 764.042455][ T9476] netlink: 'syz.3.10001': attribute type 1 has an invalid length. [ 764.099224][T11905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.175239][ T9372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.184283][ T9372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.247910][ T9372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.263589][ T9372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.274011][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 764.291014][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 764.327555][ T9372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.359273][ T9372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.606023][T31752] Bluetooth: hci2: command tx timeout [ 764.614929][ T9505] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 764.629599][ T9508] xt_socket: unknown flags 0x8 [ 764.697247][ T9372] hsr_slave_0: entered promiscuous mode [ 764.704850][ T9372] hsr_slave_1: entered promiscuous mode [ 764.716225][ T9372] debugfs: 'hsr0' already exists in 'hsr' [ 764.722455][ T9372] Cannot create hsr debugfs directory [ 765.082244][ T9372] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 765.104732][ T9372] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 765.134578][ T9372] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 765.148664][ T9372] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 765.183481][ T9530] netlink: 'syz.2.10018': attribute type 266 has an invalid length. [ 765.192239][ T9372] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 765.204830][ T9372] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 765.228148][ T9372] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 765.241559][ T9372] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 765.411713][ T9558] netlink: 'syz.1.10021': attribute type 3 has an invalid length. [ 765.434183][ T9372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.456662][ T9372] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.474496][T11905] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.481677][T11905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.515432][T11905] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.522620][T11905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.164677][ T9600] netlink: 'syz.2.10031': attribute type 12 has an invalid length. [ 766.380753][ T9372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.642588][ T9632] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.669497][ T9643] x_tables: duplicate underflow at hook 1 [ 766.686419][T31752] Bluetooth: hci2: command tx timeout [ 766.730739][ T9632] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.852095][ T9632] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.010052][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.044228][ T9663] xt_hashlimit: size too large, truncated to 1048576 [ 767.044372][T28962] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.101962][T28962] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.138097][T28962] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.159243][ T9633] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.169398][ T9672] nbd: couldn't find a device at index 0 [ 767.187408][T28962] ================================================================== [ 767.195638][T28962] BUG: KASAN: slab-use-after-free in __mutex_lock+0x154/0x1550 SYZFAIL: failed to recv rpc [ 767.203331][T28962] Read of size 8 at addr ffff8880765b04a8 by task kworker/u8:21/28962 [ 767.211587][T28962] [ 767.213996][T28962] CPU: 0 UID: 0 PID: 28962 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 767.214066][T28962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 767.214077][T28962] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 767.214157][T28962] Call Trace: [ 767.214164][T28962] [ 767.214171][T28962] dump_stack_lvl+0xe8/0x150 [ 767.214192][T28962] print_address_description+0x55/0x1e0 [ 767.214212][T28962] ? __mutex_lock+0x154/0x1550 [ 767.214232][T28962] print_report+0x58/0x70 [ 767.214243][T28962] kasan_report+0x117/0x150 [ 767.214264][T28962] ? rcu_is_watching+0x15/0xb0 [ 767.214279][T28962] ? __mutex_lock+0x154/0x1550 [ 767.214299][T28962] __mutex_lock+0x154/0x1550 [ 767.214317][T28962] ? __mutex_lock+0x5d4/0x1550 [ 767.214334][T28962] ? udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 767.214354][T28962] ? __pfx___mutex_lock+0x10/0x10 [ 767.214369][T28962] ? do_raw_spin_lock+0x12b/0x2f0 [ 767.214389][T28962] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 767.214402][T28962] ? pwq_dec_nr_in_flight+0xb93/0xf20 [ 767.214422][T28962] ? process_scheduled_works+0xa20/0x14e0 [ 767.214436][T28962] ? rcu_is_watching+0x15/0xb0 [ 767.214450][T28962] ? process_scheduled_works+0xa20/0x14e0 [ 767.214465][T28962] udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 767.214485][T28962] ? rcu_is_watching+0x15/0xb0 [ 767.214499][T28962] ? process_scheduled_works+0xa20/0x14e0 [ 767.214515][T28962] process_scheduled_works+0xa8e/0x14e0 [ 767.214538][T28962] ? __pfx_process_scheduled_works+0x10/0x10 [ 767.214555][T28962] ? do_raw_spin_lock+0x12b/0x2f0 [ 767.214570][T28962] ? assign_work+0x3cf/0x5d0 [ 767.214588][T28962] worker_thread+0xa47/0xfb0 [ 767.214613][T28962] kthread+0x388/0x470 [ 767.214625][T28962] ? __pfx_worker_thread+0x10/0x10 [ 767.214639][T28962] ? __pfx_kthread+0x10/0x10 [ 767.214653][T28962] ret_from_fork+0x514/0xb70 [ 767.214677][T28962] ? __pfx_ret_from_fork+0x10/0x10 [ 767.214690][T28962] ? __switch_to+0xc89/0x1420 [ 767.214708][T28962] ? __pfx_kthread+0x10/0x10 [ 767.214727][T28962] ret_from_fork_asm+0x1a/0x30 [ 767.214749][T28962] [ 767.214755][T28962] [ 767.417942][T28962] Allocated by task 9632: [ 767.422323][T28962] kasan_save_track+0x3e/0x80 [ 767.426997][T28962] __kasan_kmalloc+0x93/0xb0 [ 767.431591][T28962] __kmalloc_noprof+0x358/0x750 [ 767.436444][T28962] udp_tunnel_nic_netdevice_event+0x4e9/0x1850 [ 767.442599][T28962] notifier_call_chain+0x1a5/0x3d0 [ 767.447704][T28962] register_netdevice+0x18a4/0x1eb0 [ 767.452973][T28962] nsim_create+0xbd7/0x1140 [ 767.457498][T28962] __nsim_dev_port_add+0x7f8/0xcd0 [ 767.462600][T28962] nsim_dev_port_add_all+0x37/0xf0 [ 767.467701][T28962] nsim_dev_reload_up+0x4dd/0x880 [ 767.472765][T28962] devlink_reload+0x4b2/0x890 [ 767.477532][T28962] devlink_nl_reload_doit+0xa9c/0xc80 [ 767.482892][T28962] genl_family_rcv_msg_doit+0x233/0x340 [ 767.488428][T28962] genl_rcv_msg+0x614/0x7a0 [ 767.492930][T28962] netlink_rcv_skb+0x226/0x4a0 [ 767.497689][T28962] genl_rcv+0x28/0x40 [ 767.501667][T28962] netlink_unicast+0x7bb/0x940 [ 767.506424][T28962] netlink_sendmsg+0x813/0xb40 [ 767.511180][T28962] ____sys_sendmsg+0x9b9/0xa20 [ 767.515938][T28962] ___sys_sendmsg+0x2a5/0x360 [ 767.520606][T28962] __x64_sys_sendmsg+0x1b1/0x290 [ 767.525535][T28962] do_syscall_64+0x174/0x580 [ 767.530117][T28962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.536002][T28962] [ 767.538314][T28962] Freed by task 9633: [ 767.542342][T28962] kasan_save_track+0x3e/0x80 [ 767.547013][T28962] kasan_save_free_info+0x40/0x50 [ 767.552026][T28962] __kasan_slab_free+0x5c/0x80 [ 767.556779][T28962] kfree+0x1c5/0x640 [ 767.560667][T28962] udp_tunnel_nic_netdevice_event+0x1236/0x1850 [ 767.566952][T28962] notifier_call_chain+0x1a5/0x3d0 [ 767.572060][T28962] unregister_netdevice_many_notify+0x17de/0x2150 [ 767.578462][T28962] unregister_netdevice_queue+0x2f5/0x340 [ 767.584165][T28962] nsim_destroy+0x26d/0x800 [ 767.588657][T28962] __nsim_dev_port_del+0x14e/0x200 [ 767.593764][T28962] nsim_dev_reload_destroy+0x288/0x490 [ 767.599215][T28962] nsim_dev_reload_down+0x8a/0xc0 [ 767.604230][T28962] devlink_reload+0x1c5/0x890 [ 767.608901][T28962] devlink_nl_reload_doit+0xa9c/0xc80 [ 767.614260][T28962] genl_family_rcv_msg_doit+0x233/0x340 [ 767.619801][T28962] genl_rcv_msg+0x614/0x7a0 [ 767.624295][T28962] netlink_rcv_skb+0x226/0x4a0 [ 767.629052][T28962] genl_rcv+0x28/0x40 [ 767.633021][T28962] netlink_unicast+0x7bb/0x940 [ 767.637775][T28962] netlink_sendmsg+0x813/0xb40 [ 767.642534][T28962] ____sys_sendmsg+0x9b9/0xa20 [ 767.647295][T28962] ___sys_sendmsg+0x2a5/0x360 [ 767.651978][T28962] __x64_sys_sendmsg+0x1b1/0x290 [ 767.656916][T28962] do_syscall_64+0x174/0x580 [ 767.661503][T28962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.667382][T28962] [ 767.669694][T28962] Last potentially related work creation: [ 767.675419][T28962] kasan_save_stack+0x3e/0x60 [ 767.680096][T28962] kasan_record_aux_stack+0xbd/0xd0 [ 767.685287][T28962] insert_work+0x3d/0x330 [ 767.689607][T28962] __queue_work+0xb7c/0xff0 [ 767.694108][T28962] queue_work_on+0x106/0x1d0 [ 767.698689][T28962] __udp_tunnel_nic_add_port+0xba9/0xd90 [ 767.704326][T28962] udp_tunnel_push_rx_port+0x169/0x1f0 [ 767.709774][T28962] geneve_offload_rx_ports+0xc7/0x150 [ 767.715164][T28962] geneve_netdevice_event+0x6a/0x80 [ 767.720347][T28962] notifier_call_chain+0x1a5/0x3d0 [ 767.725453][T28962] call_netdevice_notifiers+0x90/0xd0 [ 767.730869][T28962] udp_tunnel_nic_netdevice_event+0xe33/0x1850 [ 767.737012][T28962] notifier_call_chain+0x1a5/0x3d0 [ 767.742119][T28962] register_netdevice+0x18a4/0x1eb0 [ 767.747310][T28962] nsim_create+0xbd7/0x1140 [ 767.751806][T28962] __nsim_dev_port_add+0x7f8/0xcd0 [ 767.756908][T28962] nsim_dev_port_add_all+0x37/0xf0 [ 767.762006][T28962] nsim_dev_reload_up+0x4dd/0x880 [ 767.767022][T28962] devlink_reload+0x4b2/0x890 [ 767.771688][T28962] devlink_nl_reload_doit+0xa9c/0xc80 [ 767.777050][T28962] genl_family_rcv_msg_doit+0x233/0x340 [ 767.782589][T28962] genl_rcv_msg+0x614/0x7a0 [ 767.787078][T28962] netlink_rcv_skb+0x226/0x4a0 [ 767.791830][T28962] genl_rcv+0x28/0x40 [ 767.795796][T28962] netlink_unicast+0x7bb/0x940 [ 767.800549][T28962] netlink_sendmsg+0x813/0xb40 [ 767.805299][T28962] ____sys_sendmsg+0x9b9/0xa20 [ 767.810056][T28962] ___sys_sendmsg+0x2a5/0x360 [ 767.814724][T28962] __x64_sys_sendmsg+0x1b1/0x290 [ 767.819648][T28962] do_syscall_64+0x174/0x580 [ 767.824234][T28962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.830124][T28962] [ 767.832444][T28962] Second to last potentially related work creation: [ 767.839080][T28962] kasan_save_stack+0x3e/0x60 [ 767.843757][T28962] kasan_record_aux_stack+0xbd/0xd0 [ 767.848948][T28962] insert_work+0x3d/0x330 [ 767.853265][T28962] __queue_work+0xcb6/0xff0 [ 767.857774][T28962] queue_work_on+0x106/0x1d0 [ 767.862351][T28962] __udp_tunnel_nic_add_port+0xba9/0xd90 [ 767.867975][T28962] udp_tunnel_push_rx_port+0x169/0x1f0 [ 767.873421][T28962] geneve_offload_rx_ports+0xc7/0x150 [ 767.878780][T28962] geneve_netdevice_event+0x6a/0x80 [ 767.883966][T28962] notifier_call_chain+0x1a5/0x3d0 [ 767.889066][T28962] call_netdevice_notifiers+0x90/0xd0 [ 767.894423][T28962] udp_tunnel_nic_netdevice_event+0xe33/0x1850 [ 767.900572][T28962] notifier_call_chain+0x1a5/0x3d0 [ 767.905675][T28962] register_netdevice+0x18a4/0x1eb0 [ 767.910864][T28962] nsim_create+0xbd7/0x1140 [ 767.915358][T28962] __nsim_dev_port_add+0x7f8/0xcd0 [ 767.920459][T28962] nsim_dev_port_add_all+0x37/0xf0 [ 767.925561][T28962] nsim_dev_reload_up+0x4dd/0x880 [ 767.930577][T28962] devlink_reload+0x4b2/0x890 [ 767.935247][T28962] devlink_nl_reload_doit+0xa9c/0xc80 [ 767.940793][T28962] genl_family_rcv_msg_doit+0x233/0x340 [ 767.946366][T28962] genl_rcv_msg+0x614/0x7a0 [ 767.950870][T28962] netlink_rcv_skb+0x226/0x4a0 [ 767.955629][T28962] genl_rcv+0x28/0x40 [ 767.959607][T28962] netlink_unicast+0x7bb/0x940 [ 767.964361][T28962] netlink_sendmsg+0x813/0xb40 [ 767.969118][T28962] ____sys_sendmsg+0x9b9/0xa20 [ 767.973875][T28962] ___sys_sendmsg+0x2a5/0x360 [ 767.978559][T28962] __x64_sys_sendmsg+0x1b1/0x290 [ 767.983531][T28962] do_syscall_64+0x174/0x580 [ 767.988137][T28962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.994018][T28962] [ 767.996327][T28962] The buggy address belongs to the object at ffff8880765b0400 [ 767.996327][T28962] which belongs to the cache kmalloc-256 of size 256 [ 768.010469][T28962] The buggy address is located 168 bytes inside of [ 768.010469][T28962] freed 256-byte region [ffff8880765b0400, ffff8880765b0500) [ 768.024255][T28962] [ 768.026567][T28962] The buggy address belongs to the physical page: [ 768.033039][T28962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x765b0 [ 768.041796][T28962] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 768.050280][T28962] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 768.057814][T28962] page_type: f5(slab) [ 768.061790][T28962] raw: 00fff00000000040 ffff88813fe1bb40 dead000000000100 dead000000000122 [ 768.070363][T28962] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 768.078937][T28962] head: 00fff00000000040 ffff88813fe1bb40 dead000000000100 dead000000000122 [ 768.087703][T28962] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 768.096377][T28962] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 768.105066][T28962] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 768.113732][T28962] page dumped because: kasan: bad access detected [ 768.120148][T28962] page_owner tracks the page as allocated [ 768.125858][T28962] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5618, tgid 5618 (syz-executor), ts 66103977107, free_ts 66075613204 [ 768.147218][T28962] post_alloc_hook+0x22d/0x280 [ 768.151990][T28962] get_page_from_freelist+0x24ae/0x2530 [ 768.157538][T28962] __alloc_frozen_pages_noprof+0x18d/0x380 [ 768.163344][T28962] allocate_slab+0x74/0x5d0 [ 768.167844][T28962] refill_objects+0x328/0x3c0 [ 768.172507][T28962] __pcs_replace_empty_main+0x2e0/0x6b0 [ 768.178040][T28962] __kmalloc_node_track_caller_noprof+0x565/0x7b0 [ 768.184445][T28962] kmemdup_array+0x3f/0x80 [ 768.188879][T28962] ebt_register_table+0xa41/0x1190 [ 768.194037][T28962] find_inlist_lock_noload+0x171/0x260 [ 768.199479][T28962] do_ebt_get_ctl+0x367/0x1f30 [ 768.204227][T28962] nf_getsockopt+0x26e/0x290 [ 768.208888][T28962] ip_getsockopt+0x19e/0x230 [ 768.213563][T28962] do_sock_getsockopt+0x51d/0x7e0 [ 768.218593][T28962] __x64_sys_getsockopt+0x1a4/0x240 [ 768.223785][T28962] do_syscall_64+0x174/0x580 [ 768.228380][T28962] page last free pid 5626 tgid 5626 stack trace: [ 768.234698][T28962] __free_frozen_pages+0xc0d/0xd20 [ 768.239854][T28962] __slab_free+0x274/0x2c0 [ 768.244312][T28962] qlist_free_all+0x99/0x100 [ 768.248917][T28962] kasan_quarantine_reduce+0x148/0x160 [ 768.254382][T28962] __kasan_slab_alloc+0x22/0x80 [ 768.259228][T28962] __kmalloc_noprof+0x312/0x750 [ 768.264068][T28962] tomoyo_realpath_from_path+0xef/0x640 [ 768.269603][T28962] tomoyo_path2_perm+0x2c5/0x760 [ 768.274550][T28962] tomoyo_path_rename+0x14e/0x1b0 [ 768.279580][T28962] security_path_rename+0x248/0x460 [ 768.284775][T28962] filename_renameat2+0x4ba/0x9a0 [ 768.289819][T28962] __se_sys_rename+0x55/0x2c0 [ 768.294488][T28962] do_syscall_64+0x174/0x580 [ 768.299069][T28962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.304953][T28962] [ 768.307266][T28962] Memory state around the buggy address: [ 768.312979][T28962] ffff8880765b0380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 768.321031][T28962] ffff8880765b0400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.329125][T28962] >ffff8880765b0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.337170][T28962] ^ [ 768.342528][T28962] ffff8880765b0500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 768.350582][T28962] ffff8880765b0580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 768.358632][T28962] ================================================================== [ 768.370019][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 768.468615][T11905] net_ratelimit: 1233 callbacks suppressed [ 768.468636][T11905] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 768.489098][T11905] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 768.545202][T28962] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 768.552455][T28962] CPU: 0 UID: 0 PID: 28962 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 768.562092][T28962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 768.572244][T28962] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 768.579556][T28962] Call Trace: [ 768.582842][T28962] [ 768.585778][T28962] vpanic+0x56c/0xa60 [ 768.589772][T28962] ? __pfx_vpanic+0x10/0x10 [ 768.594286][T28962] ? rcu_is_watching+0x15/0xb0 [ 768.599059][T28962] panic+0xc5/0xd0 [ 768.602789][T28962] ? __pfx_panic+0x10/0x10 [ 768.607212][T28962] ? preempt_schedule_thunk+0x16/0x40 [ 768.612597][T28962] ? __mutex_lock+0x154/0x1550 [ 768.617378][T28962] ? preempt_schedule_thunk+0x16/0x40 [ 768.622767][T28962] ? __mutex_lock+0x154/0x1550 [ 768.627551][T28962] check_panic_on_warn+0x89/0xb0 [ 768.632486][T28962] ? __mutex_lock+0x154/0x1550 [ 768.637243][T28962] end_report+0x73/0x170 [ 768.641483][T28962] ? __mutex_lock+0x154/0x1550 [ 768.646326][T28962] kasan_report+0x128/0x150 [ 768.650838][T28962] ? rcu_is_watching+0x15/0xb0 [ 768.655594][T28962] ? __mutex_lock+0x154/0x1550 [ 768.660354][T28962] __mutex_lock+0x154/0x1550 [ 768.664944][T28962] ? __mutex_lock+0x5d4/0x1550 [ 768.669702][T28962] ? udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 768.675940][T28962] ? __pfx___mutex_lock+0x10/0x10 [ 768.680963][T28962] ? do_raw_spin_lock+0x12b/0x2f0 [ 768.685985][T28962] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 768.691351][T28962] ? pwq_dec_nr_in_flight+0xb93/0xf20 [ 768.696716][T28962] ? process_scheduled_works+0xa20/0x14e0 [ 768.702453][T28962] ? rcu_is_watching+0x15/0xb0 [ 768.707213][T28962] ? process_scheduled_works+0xa20/0x14e0 [ 768.712926][T28962] udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 768.718992][T28962] ? rcu_is_watching+0x15/0xb0 [ 768.723751][T28962] ? process_scheduled_works+0xa20/0x14e0 [ 768.729462][T28962] process_scheduled_works+0xa8e/0x14e0 [ 768.735007][T28962] ? __pfx_process_scheduled_works+0x10/0x10 [ 768.740976][T28962] ? do_raw_spin_lock+0x12b/0x2f0 [ 768.745994][T28962] ? assign_work+0x3cf/0x5d0 [ 768.750575][T28962] worker_thread+0xa47/0xfb0 [ 768.755165][T28962] kthread+0x388/0x470 [ 768.759227][T28962] ? __pfx_worker_thread+0x10/0x10 [ 768.764334][T28962] ? __pfx_kthread+0x10/0x10 [ 768.768915][T28962] ret_from_fork+0x514/0xb70 [ 768.773494][T28962] ? __pfx_ret_from_fork+0x10/0x10 [ 768.778594][T28962] ? __switch_to+0xc89/0x1420 [ 768.783264][T28962] ? __pfx_kthread+0x10/0x10 [ 768.787957][T28962] ret_from_fork_asm+0x1a/0x30 [ 768.792718][T28962] [ 768.795882][T28962] Kernel Offset: disabled [ 768.800191][T28962] Rebooting in 86400 seconds..