last executing test programs: 3.292648401s ago: executing program 4 (id=1785): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x84, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=@deltaction={0x10c, 0x31, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4ae}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000080}, 0x50) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c000c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.040607291s ago: executing program 4 (id=1788): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) write$tun(r0, &(0x7f0000004c40)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x44, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x6a4d, 0x2}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r4, 0x7f}, 0x8) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) 2.717675469s ago: executing program 4 (id=1793): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x50, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x20040040) (async) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x50, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x20040040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @rose, @remote, @rose, @default, @rose, @remote, @null]}, &(0x7f0000000180)=0x48) (async) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@rose, @rose, @remote, @rose, @default, @rose, @remote, @null]}, &(0x7f0000000180)=0x48) sendto$ax25(r2, &(0x7f00000001c0)="721263774839687e7066c36ceba3bbc549e77746603c6c3e00b62179dc58d7720ace11f12a3b75c9bf25358a2c072021670d49953da4d2823b61ee092a5488da5f16304fd7cf0b7fc64f95202f2c50dc7f58677001603836ba17", 0x5a, 0x40004, &(0x7f00000004c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0100001000130726bd700001000000000000002930fa9e0000ff00e0000002ac1414130000000000000000000000004e220003000000030a0000003afdff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0200000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000fcffffffffffffff0000000000000000fffffffffffffffff8ffffffffffffff0e000000000000000200000029bd7000000000000200010028000000000000004c001200726663343534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.150318273s ago: executing program 4 (id=1802): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5, 0x1cf1cd988231dbb, 0x1, 0x8, 0xc, 0xffff}, 0x20) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 64) ioctl(r0, 0x8b32, &(0x7f0000000040)) (async, rerun: 64) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) close(0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003f0007012cbd700008000000017c00000400f9800c00018008000300", @ANYRES32=r2, @ANYBLOB="040002"], 0x28}, 0x1, 0x0, 0x0, 0xe044}, 0x2000c000) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00000000000000000000b5b6d5b6e0169e9ded00"/53, @ANYRES32=0x0], 0x30}], 0x1, 0x0) (async, rerun: 64) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) (rerun: 64) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000380)={'nat\x00', 0x0, 0x0, 0x0, [0xe, 0x12, 0x7, 0x0, 0x332, 0x2]}, &(0x7f0000000280)=0xfffffffffffffe4b) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00010000d2c1138d6f949a1b0c"], 0x24}}, 0x0) (async, rerun: 32) r6 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$MRT_FLUSH(r6, 0x0, 0xd0, &(0x7f0000000600), 0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x28) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b000000000000000000e1bd0000000000000000000003000000"], 0x40}}, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYRESOCT=r7, @ANYRESDEC=r9, @ANYBLOB="08006d00f000000008e26a0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) 1.773129341s ago: executing program 4 (id=1807): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x4, 0x223, 0xfffa, 0x7, 0x20, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x7ae, 0xbfd0, 0x0, 0x8, 0x80000000}}, &(0x7f0000000100)=0xb0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r9, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008040) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x604, r9, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c8, 0x11d, 0x0, 0x1, [{0x23c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdf}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x9d, 0xff, 0xca65, 0x3ff, 0x7dac, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x1, 0x1, 0x7e, 0x0, 0x4, 0x1b, 0x24, 0x6c, 0x3, 0xc, 0x9, 0x1, 0x9, 0x2, 0x24, 0x48, 0x5, 0x0, 0x9, 0x1b, 0x18, 0x5d]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x30, 0xb, 0x3, 0x24, 0x24, 0x3, 0x44, 0xc, 0x30, 0x30, 0x18, 0x4, 0x1, 0x1b, 0x5, 0x18, 0x36, 0xb, 0x60, 0x5, 0x16]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x1, 0x18, 0x4, 0x10, 0x1b, 0x30, 0xb, 0x18, 0x1, 0xc, 0x4, 0x2, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0xa}, {0x7, 0x8}, {0x5, 0x6}, {0x2, 0x8}, {0x2, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0xa}, {0x5, 0x4}, {0x5}, {0x5, 0x2}, {0x2, 0x7}, {0x2, 0x1}, {0x5, 0xa}, {0x5, 0x3}, {0x3, 0x5}, {0x6, 0x6}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x4, 0x2}, {0x6, 0x7}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x1}, {0x1, 0x3}, {0x3, 0x2}, {0x3, 0x2}, {0x6, 0x4}, {0x2, 0x6}, {0x1, 0x6}, {0x4, 0x7}, {0x1, 0xa}, {0x6, 0x4}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0x7}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x9}, {0x0, 0x1d}, {0x1, 0x1b}, {0x0, 0x7}, {0x1, 0x1}, {0x2, 0x5}, {0x3, 0x4}, {0x5, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x8}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x4}, {0x3}, {0x3, 0x4}, {0x5, 0x1}, {0x4, 0x2}, {0x3}, {0x0, 0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x7}, {0x2}, {0x2, 0x5}, {0x2}, {0x0, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x6}, {0x6, 0x1}, {0x6, 0x1}, {0x3, 0x7}, {0x2, 0x9}, {0x4, 0xa}, {0x2, 0x5}, {0x5, 0x5}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x1b, 0x0, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x4, 0x12, 0xc, 0x3, 0x1b, 0x36, 0x1, 0x5, 0x2, 0x18, 0x30, 0x18, 0x2]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x7}, {0x1, 0x9}, {0x0, 0x5}, {0x5, 0x5}, {0x2, 0x3}, {0x5, 0x3}, {0x2, 0xa}, {0x3, 0x1}, {0x5, 0x5}, {0x7, 0x2}, {0x6, 0x3}, {0x5}, {0x6, 0x6}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x5, 0x8}, {0x5, 0x6}, {0x3, 0xa}, {0x5, 0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0x9}, {0x1, 0x5}, {0x1, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x37, 0x844, 0x7, 0xb7, 0x40, 0x800, 0xffff, 0x7]}}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x2}, {0x4, 0x4}, {0x7, 0xa}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0x9}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0xa}, {0x3, 0x5}, {0x1, 0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x4, 0xa}, {0x7, 0x2}, {0x7, 0x5}, {0x6, 0x7}, {0x2, 0x7}, {0x5, 0x5}, {0x4, 0x5}, {0x0, 0x8}, {0x7, 0x8}, {0x1, 0x4}, {0x5, 0x9}, {0x2, 0x8}, {0x7, 0x7}, {0x2, 0x7}, {0x7, 0x6}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x2}, {0x3, 0x2}, {0x2}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x2, 0x5}, {0x6, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0x9}, {0x4, 0x7}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x6}, {0x1}, {0x7, 0x9}, {0x4, 0x1}, {0x1, 0x9}, {0x4, 0xa}, {0x7, 0x3}, {0x2, 0xa}, {0x0, 0x3}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0xa}, {0x3, 0x2}, {0x6, 0x6}, {0x0, 0x1}, {0x4, 0x8}, {}, {0x5, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x6, 0xa}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4975, 0x3, 0x53d, 0x11, 0x7, 0xdf, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x3}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xda}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x354, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x100, 0x7, 0xa299, 0xeab, 0x2, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x7, 0xe, 0xa15, 0x2, 0x8fa, 0x200]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2d8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x12, 0x6c, 0x30, 0x2, 0x60, 0x4, 0x16, 0x48, 0x0, 0x24, 0x6c, 0x48, 0xc, 0x12, 0x18, 0x24]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0xc, 0x1b, 0x1, 0x60, 0x1, 0x24, 0x2, 0x3, 0x2, 0x4, 0x36, 0x4, 0x30, 0x6c, 0x48, 0x16, 0x4, 0x4, 0x2, 0x48, 0x48, 0x16, 0x36, 0x17, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0x1}, {0x0, 0xa}, {0x3, 0x9}, {0x2, 0x6}, {0x0, 0x6}, {0x2, 0x7}, {0x1, 0x6}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x8}, {0x6, 0x3}, {0x1, 0xa}, {0x2, 0xa}, {0x2, 0xa}, {0x6}, {0x3, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x8}, {0x6, 0x4}, {0x0, 0x6}, {0x7, 0x3}, {0x4, 0x3}, {0x3}, {0x0, 0x9}, {0x5, 0x7}, {0x6, 0x5}, {0x0, 0x9}, {0x7, 0x6}, {0x1, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x6, 0x9}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0x2}, {0x5, 0x6}, {0x6}, {0x3, 0x4}, {0x4, 0x2}, {0x2, 0x3}, {0x5, 0x5}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x3}, {0x4, 0x5}, {0x2, 0x19}, {0x4, 0x8}, {0x7, 0x8}, {0x1, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x6, 0x1}, {0x5, 0x9}, {0x7, 0xa}, {0x6, 0x3}, {0x7, 0x4}, {0x3, 0x8}, {0x7, 0x3}, {0x6, 0x5}, {0x2}, {0x1, 0xa}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x7}, {0x4, 0x3}, {0x7}, {0x7, 0x5}, {0x4, 0x3}, {0x7, 0x9}, {0x2, 0x7}, {0x2}, {0x5, 0x4}, {0x4, 0x3}, {0x1, 0x5}, {0x4}, {0x2, 0x8}, {0x2, 0x2}]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfb, 0x0, 0x40, 0x4, 0x7, 0x10, 0xe, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x7325, 0x6b, 0xfff, 0xfc2d, 0x6]}}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x4, 0x2, 0x8, 0x2, 0x5, 0xd, 0xffff]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x9}, {0x7, 0x3}, {0x6, 0x2}, {0x3, 0x1}, {0x1, 0x4}, {0x3, 0x6}, {0x6, 0x1}, {0x4}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x3}, {0x6, 0x8}, {0x2, 0x3}, {0x3, 0x9}, {0x1}, {0x5, 0x5}, {0x3, 0x5}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x7}, {0x5, 0x4}, {0x1, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x7, 0x7}, {0x5, 0x5}, {0x0, 0x6}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x4, 0xa}, {0x0, 0x8}, {0x2, 0x2}, {0x7, 0x1}, {0x3, 0x9}, {0x5, 0x8}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x3}, {0x3, 0x7}, {0x7, 0x9}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x1}, {0x4, 0x2}, {0x3, 0x3}, {0x6, 0x9}, {0x3, 0xa}, {0x0, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x1, 0x5}, {0x5, 0x3}, {0x6, 0x6}, {0x7, 0x9}, {0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xfff, 0x8, 0xa654, 0x0, 0x3, 0x7fff, 0xbbb]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x6c, 0x12, 0x16, 0x6, 0x6c, 0x30, 0xb, 0x4b, 0x7b, 0x48, 0x16, 0x2, 0x48, 0x6, 0xc, 0x1, 0x60, 0x0, 0x24]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x48, 0x24, 0x18, 0x1, 0xb, 0x3, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x0, 0x1, 0x0, 0x2, 0x2, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x618a, 0x8, 0x4, 0xe6, 0x9, 0xa2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x1, 0xe003, 0x6, 0x0, 0x10, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x8}, {0x5, 0x2}, {0x5}, {0x1, 0x4}, {0x7, 0x9}, {0x1, 0x6}, {0x4, 0x6}, {0x7, 0x5}, {0x0, 0x5}, {0x2}, {0x0, 0x2}, {0x3, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x8}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0xa}, {0x6, 0x9}, {0x1, 0x4}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x5}, {0x4, 0x9}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x2, 0xa}, {0x0, 0x1}, {0x4, 0x6}, {0x2, 0x6}, {0x2, 0x4}, {0x0, 0xa}, {0x1}, {0x3, 0x9}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x6, 0x3}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x8}, {0x3, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0x3}, {0x3, 0x3}, {0x4, 0x1}, {0x6, 0x8}, {0x7, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0xfffd, 0x6, 0xc, 0x7f, 0x8, 0x1]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4341, 0x4014, 0xd00, 0x7, 0xfffa, 0xfffc, 0x1, 0xd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x351, 0x8, 0x2e, 0x10, 0xfc3b, 0x1000, 0x2]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x1b, 0x30, 0xb, 0x6, 0x1b, 0x3, 0x12, 0x95, 0x6c, 0xb, 0x5, 0x6c, 0x0, 0x12, 0x12, 0x6, 0x60bc464849094cee, 0x6]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x24, 0x16, 0x9, 0xc, 0xc, 0x48, 0xc, 0x9, 0x12, 0x9, 0x1b, 0x24, 0x18, 0xc, 0x30, 0x2, 0x54, 0x24, 0x1b, 0x48, 0x6c, 0x0, 0x48, 0x6, 0x1b, 0x3, 0x6b, 0x24, 0x3, 0x48]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x27}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x604}, 0x1, 0x0, 0x0, 0x5}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r12, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64], 0x1c}}, 0x0) 1.771941679s ago: executing program 1 (id=1808): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xe, 0x0, &(0x7f0000000300)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r7}]}, 0x1c}}, 0x0) recvmsg$can_bcm(r5, &(0x7f00000009c0)={&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000008c0)=""/255, 0xff}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2}, 0x40000002) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}, {&(0x7f0000000580)={0x308, 0x39, 0x4, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0xb3, 0x0, 0x0, @uid=r7}, @nested={0x137, 0xb6, 0x0, 0x1, [@generic="00fade590686e3d760b53fe659e0740b76f69fc9a10681ce36f2ad0baa31d9991abe40a8b7cb86d4ef411177e8bd3effff1f9ff45ff09e5ff6a613102689", @nested={0x4, 0xa5}, @generic="824810", @generic="af8e7b9bc2a45c7e6ce341294b4153a38c0e39aef210cc1dd36ef29c145ea498f7fb80dcaf600219f23362845217a8599c630fe9f76d01705658c794cc19acb1b8174eac94b3867802d5466d94194817b9cb46111dab30b7ff2d70933fe67e7584c21e828ef3731c179e2516618ae6c62f16974c394e0009b66b425933f5f35398a35f7f984efe2f9ec95b38d26fcf274cd6d1e2711d89ba2c185a7937fe2defc4bf75e626eba7f7600ddf1b121e7a0cd6865a653a915109a33ef8b7f56dbf5dd2cb963e59ee4b695c5622dd85a9a83ac0f07269b77b4eb3cca887f6b6b3a7b7fce8b03eb1c0", @typed={0x8, 0xb4, 0x0, 0x0, @fd=r4}]}, @nested={0x14e, 0x18, 0x0, 0x1, [@typed={0x8, 0x59, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0xec}, @nested={0x4, 0xeb}, @typed={0x9, 0x2f, 0x0, 0x0, @str='TIPC\x00'}, @typed={0x8, 0x5e, 0x0, 0x0, @fd=r2}, @generic="d5ec51324cb4fab4b08777d64c4d77e48569c5266c2d95539927708268e4ab06bb6c55e573f5830bca7599d4cb2b3338b317827972558cf83bffcac60196e7cb3aa1fe00d823fe9855f323ad42a796870f04c085a03171f34f607d94557775bb8d718074fb27a86d4a97a2", @nested={0x4, 0xe4}, @generic="34d713a684bd7bc05323f8cba805f0404952ed13e0933938ba2470b13d5b0b70dc083b9c272c40a3ec62db61f5c301df39c27b1be2ea4abf50e0c3acbf0dcf2413342208d0161a6aafb0d54a12fd7c0c2e3d4805ef7d9e206845cabd538702dda79aa2bf3e5c5c797bc7c08cb2d1e13fb7c77ecdad7cbf6cd6050fd11aeff3e80c7c00f61f27091d08aae0efba75a420249f7bbf9b3e177cefd37a5df0b59a5f15f3720ff1d363f24d074fb86fe8f62636a9305af57724"]}, @generic="27a3c1701ab07b8c3552a54be5fec56c3451d862d9b0f904e93b91f9c594a43caa4a0e0a7159d75a1cff12d907f3344aba0b082cc4a57323a6728c9ff1083b0e27e3cf59c109867fee8e238b9b0595b6ff4bb4", @typed={0x4, 0x12a}, @typed={0x10, 0x134, 0x0, 0x0, @binary="825847adeaacbab0e76cbb47"}]}, 0x308}, {&(0x7f0000000c00)={0x330, 0x3d, 0x4, 0x70bd28, 0x25dfdbfb, "", [@nested={0x15d, 0x144, 0x0, 0x1, [@typed={0xc, 0x86, 0x0, 0x0, @u64=0xa8c}, @generic="405988dd2768052f8d5222104a4aafafc7cde2b09c6c3cc9ffbd3e7cf357df846640c00908744f1204db3251d0b78638bdc6da66cae284c2c1397690981b7978e2e31ae9b5c2453531a40f2a9e8dc27d1c4b96c1cbc126c85e20cda33852912363bdb9d76c2b4ba164d9d58cc3467a8e59ed31c1e457", @generic="e086c53846358887e4e17b8a94a85079de13c87112e68b47d89d7ca424ec3cbe3306119cfdf1918ef2fe167bd0630b172f26c53104b97ac4178f7c362650680c71e3835da147ce36706d00ec9d246067472267e1b76f8480aaba554c963a231413765799015b155b4ff04f7cbe131d1b16e274e1a07310d1a713a5a1c4d85c352c73a120e73c60ab726c9eca08b52c857a30fb8bfc64b33a4138c19fa383e819d71272f10df66ebd96f1f5e4bf740de01a27ed2dc8a2f282e24cee", @nested={0x4, 0xf0}, @typed={0x8, 0x116, 0x0, 0x0, @pid=r6}, @typed={0x4, 0x3a}, @typed={0x8, 0xec, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x57}]}, @nested={0x160, 0x4f, 0x0, 0x1, [@generic="1825bbee9ec79d6eee10", @generic="b3eb990e9755a0787211d951f79bc35dc6dfcb60f02bc967f452c1208bc6a9f6250e259aee90feab840b84bd8b50d69288417999c592114706da", @generic="eaf37dab63791316551cba11a23601f39f961215a704be1ca00b09a3e2470f0a5ecc34ac2a31f74e734a3a3bf80474b77d2a5d6c2ecbb44cb5b56fdd6ce7ec42680fc3d6ed07d76f48468b72fb82dfa2eee3c0a8d83c9c627d", @nested={0x4, 0x11f}, @generic="c2f26c7b769e7226b9eadcd58281719a06c6db4e2f46d3f416d0e785d2a24a39b5631d45d4015b30e05e26aa4fc0d10f7a95b7032de3312d2d9da88c5910e552c6faefc313cd267ce67660311e5a1729391928ea1bae6bee4601e1888b67bfda6af02042d6c80c7cd371b78649ac64cfbd1dfe993fb412a388bf261b80b6378c3bcd2d41cadf8566055502e357d00af1ae61b98b0ad0bd03c0d95d766abd032e6ee28a2619a346d43f753a5549e01e380391db", @typed={0x8, 0x51, 0x0, 0x0, @u32}]}, @nested={0x5f, 0x14b, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @u32=0x2e}, @generic="6eaa6b5a9ee9531ce1fd033e109827b95b769b38251175ba6f07a66501d883d3e98b1e2899ee17be596219964e42214c7950334c557e2ad2d058c90a29bd9442eebc9e7df45747f369264f1bbd9b44a5908387"]}]}, 0x330}, {&(0x7f0000000340)={0x16c, 0x3a, 0x400, 0x70bd29, 0x25dfdbff, "", [@nested={0x3b, 0xb4, 0x0, 0x1, [@nested={0x4, 0x82}, @typed={0x8, 0x123, 0x0, 0x0, @fd=r5}, @generic="e5d4572df85e2d207722adaa978f3ec3097098f62f9e8660585f06d75ede9d4502654bdb8083e2bf1d0caa"]}, @nested={0x120, 0xfb, 0x0, 0x1, [@nested={0x4, 0x130}, @generic="75aeab58e7a175fae93340bdb9fe9f71d696f81c4a606230dc08b3ec90d4a24673f44962b81cf78bc02eb3962e98f3e7a459a88b647dfdd4eb47bb781019e61457445966803e1a6d207f183c3b529033cfd14633c65a209d63ce3c84bf86c419f76d022ec010b93d6b6d3adf1ca0f83095048a344810787736e9e14ce7f7f4fa38a723ad93b676aaf9afa68e28e5fdbdfcfb1a293881003131d51eabcd96b8a2463a624aa54a688b71001c957ef61d48f696cd5788a37713b0edd919015b2d888cfb64c540073b4a084130c98e60b1", @nested={0x4, 0x142}, @generic="6aa2b75046c8bf7a814a2286c9cde347e4eed743405e4daf3d4f81f1a28487ab260072d154273491d71543a1d80b332de95e78bb0701ea7885", @typed={0x4, 0x5a}, @typed={0x4, 0x49}, @generic, @typed={0x4, 0x6d}]}]}, 0x16c}], 0x4}, 0x0) socket$kcm(0x1e, 0x1, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xe, 0x0, &(0x7f0000000300)) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000bc0)=0xc) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r7}]}, 0x1c}}, 0x0) (async) recvmsg$can_bcm(r5, &(0x7f00000009c0)={&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000008c0)=""/255, 0xff}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2}, 0x40000002) (async) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}, {&(0x7f0000000580)={0x308, 0x39, 0x4, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0xb3, 0x0, 0x0, @uid=r7}, @nested={0x137, 0xb6, 0x0, 0x1, [@generic="00fade590686e3d760b53fe659e0740b76f69fc9a10681ce36f2ad0baa31d9991abe40a8b7cb86d4ef411177e8bd3effff1f9ff45ff09e5ff6a613102689", @nested={0x4, 0xa5}, @generic="824810", @generic="af8e7b9bc2a45c7e6ce341294b4153a38c0e39aef210cc1dd36ef29c145ea498f7fb80dcaf600219f23362845217a8599c630fe9f76d01705658c794cc19acb1b8174eac94b3867802d5466d94194817b9cb46111dab30b7ff2d70933fe67e7584c21e828ef3731c179e2516618ae6c62f16974c394e0009b66b425933f5f35398a35f7f984efe2f9ec95b38d26fcf274cd6d1e2711d89ba2c185a7937fe2defc4bf75e626eba7f7600ddf1b121e7a0cd6865a653a915109a33ef8b7f56dbf5dd2cb963e59ee4b695c5622dd85a9a83ac0f07269b77b4eb3cca887f6b6b3a7b7fce8b03eb1c0", @typed={0x8, 0xb4, 0x0, 0x0, @fd=r4}]}, @nested={0x14e, 0x18, 0x0, 0x1, [@typed={0x8, 0x59, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0xec}, @nested={0x4, 0xeb}, @typed={0x9, 0x2f, 0x0, 0x0, @str='TIPC\x00'}, @typed={0x8, 0x5e, 0x0, 0x0, @fd=r2}, @generic="d5ec51324cb4fab4b08777d64c4d77e48569c5266c2d95539927708268e4ab06bb6c55e573f5830bca7599d4cb2b3338b317827972558cf83bffcac60196e7cb3aa1fe00d823fe9855f323ad42a796870f04c085a03171f34f607d94557775bb8d718074fb27a86d4a97a2", @nested={0x4, 0xe4}, @generic="34d713a684bd7bc05323f8cba805f0404952ed13e0933938ba2470b13d5b0b70dc083b9c272c40a3ec62db61f5c301df39c27b1be2ea4abf50e0c3acbf0dcf2413342208d0161a6aafb0d54a12fd7c0c2e3d4805ef7d9e206845cabd538702dda79aa2bf3e5c5c797bc7c08cb2d1e13fb7c77ecdad7cbf6cd6050fd11aeff3e80c7c00f61f27091d08aae0efba75a420249f7bbf9b3e177cefd37a5df0b59a5f15f3720ff1d363f24d074fb86fe8f62636a9305af57724"]}, @generic="27a3c1701ab07b8c3552a54be5fec56c3451d862d9b0f904e93b91f9c594a43caa4a0e0a7159d75a1cff12d907f3344aba0b082cc4a57323a6728c9ff1083b0e27e3cf59c109867fee8e238b9b0595b6ff4bb4", @typed={0x4, 0x12a}, @typed={0x10, 0x134, 0x0, 0x0, @binary="825847adeaacbab0e76cbb47"}]}, 0x308}, {&(0x7f0000000c00)={0x330, 0x3d, 0x4, 0x70bd28, 0x25dfdbfb, "", [@nested={0x15d, 0x144, 0x0, 0x1, [@typed={0xc, 0x86, 0x0, 0x0, @u64=0xa8c}, @generic="405988dd2768052f8d5222104a4aafafc7cde2b09c6c3cc9ffbd3e7cf357df846640c00908744f1204db3251d0b78638bdc6da66cae284c2c1397690981b7978e2e31ae9b5c2453531a40f2a9e8dc27d1c4b96c1cbc126c85e20cda33852912363bdb9d76c2b4ba164d9d58cc3467a8e59ed31c1e457", @generic="e086c53846358887e4e17b8a94a85079de13c87112e68b47d89d7ca424ec3cbe3306119cfdf1918ef2fe167bd0630b172f26c53104b97ac4178f7c362650680c71e3835da147ce36706d00ec9d246067472267e1b76f8480aaba554c963a231413765799015b155b4ff04f7cbe131d1b16e274e1a07310d1a713a5a1c4d85c352c73a120e73c60ab726c9eca08b52c857a30fb8bfc64b33a4138c19fa383e819d71272f10df66ebd96f1f5e4bf740de01a27ed2dc8a2f282e24cee", @nested={0x4, 0xf0}, @typed={0x8, 0x116, 0x0, 0x0, @pid=r6}, @typed={0x4, 0x3a}, @typed={0x8, 0xec, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x57}]}, @nested={0x160, 0x4f, 0x0, 0x1, [@generic="1825bbee9ec79d6eee10", @generic="b3eb990e9755a0787211d951f79bc35dc6dfcb60f02bc967f452c1208bc6a9f6250e259aee90feab840b84bd8b50d69288417999c592114706da", @generic="eaf37dab63791316551cba11a23601f39f961215a704be1ca00b09a3e2470f0a5ecc34ac2a31f74e734a3a3bf80474b77d2a5d6c2ecbb44cb5b56fdd6ce7ec42680fc3d6ed07d76f48468b72fb82dfa2eee3c0a8d83c9c627d", @nested={0x4, 0x11f}, @generic="c2f26c7b769e7226b9eadcd58281719a06c6db4e2f46d3f416d0e785d2a24a39b5631d45d4015b30e05e26aa4fc0d10f7a95b7032de3312d2d9da88c5910e552c6faefc313cd267ce67660311e5a1729391928ea1bae6bee4601e1888b67bfda6af02042d6c80c7cd371b78649ac64cfbd1dfe993fb412a388bf261b80b6378c3bcd2d41cadf8566055502e357d00af1ae61b98b0ad0bd03c0d95d766abd032e6ee28a2619a346d43f753a5549e01e380391db", @typed={0x8, 0x51, 0x0, 0x0, @u32}]}, @nested={0x5f, 0x14b, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @u32=0x2e}, @generic="6eaa6b5a9ee9531ce1fd033e109827b95b769b38251175ba6f07a66501d883d3e98b1e2899ee17be596219964e42214c7950334c557e2ad2d058c90a29bd9442eebc9e7df45747f369264f1bbd9b44a5908387"]}]}, 0x330}, {&(0x7f0000000340)={0x16c, 0x3a, 0x400, 0x70bd29, 0x25dfdbff, "", [@nested={0x3b, 0xb4, 0x0, 0x1, [@nested={0x4, 0x82}, @typed={0x8, 0x123, 0x0, 0x0, @fd=r5}, @generic="e5d4572df85e2d207722adaa978f3ec3097098f62f9e8660585f06d75ede9d4502654bdb8083e2bf1d0caa"]}, @nested={0x120, 0xfb, 0x0, 0x1, [@nested={0x4, 0x130}, @generic="75aeab58e7a175fae93340bdb9fe9f71d696f81c4a606230dc08b3ec90d4a24673f44962b81cf78bc02eb3962e98f3e7a459a88b647dfdd4eb47bb781019e61457445966803e1a6d207f183c3b529033cfd14633c65a209d63ce3c84bf86c419f76d022ec010b93d6b6d3adf1ca0f83095048a344810787736e9e14ce7f7f4fa38a723ad93b676aaf9afa68e28e5fdbdfcfb1a293881003131d51eabcd96b8a2463a624aa54a688b71001c957ef61d48f696cd5788a37713b0edd919015b2d888cfb64c540073b4a084130c98e60b1", @nested={0x4, 0x142}, @generic="6aa2b75046c8bf7a814a2286c9cde347e4eed743405e4daf3d4f81f1a28487ab260072d154273491d71543a1d80b332de95e78bb0701ea7885", @typed={0x4, 0x5a}, @typed={0x4, 0x49}, @generic, @typed={0x4, 0x6d}]}]}, 0x16c}], 0x4}, 0x0) (async) 1.541991808s ago: executing program 1 (id=1811): syz_emit_ethernet(0x165, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "0d5515", 0x127, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}, @srh={0x0, 0x6, 0x4, 0x3, 0xf7, 0x30, 0xffff, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x73, 0x2, 0x4, 0x1, 0x0, 0x10, 0x6, [@remote]}], {{}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7, 0x1, 0x1, 0x2, 0x2, 0x4}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x8, 0x2, 0x0, 0x1, 0x2, 0x5a}, 0x2, {0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "1e35af1e23be8ca949ecc3e35f2b432e67ea54d9fbc3a0a828edb7ea026f21cfd787f8a484821011a6e0e79a88c5438b8e62271dfef316e4589039f55dee30103f311fa4858f0bdc0b35bd04ffd43b3071727c665980235357f6ad86917654ec53d1c0c749b6df7e3dc0e8d817da167bb333d1"}}}}}}}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000006c0)=[{{0x4}, {0x3, 0x1, 0x1, 0x1}}], 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00d32a355f038263bdee000000000000000000d389cac48d9508799a16229e8e2a5883d14fb1", @ANYRES32=0x0, @ANYBLOB="7b530000005f0300140012800b00010067656e65766500000400028008001f0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x6, 0xffff}, {0xb, 0xc}, {0xffff, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c004}, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x83], 0x0, [0x8, 0x4, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc22d, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}]}}]}, 0x8c}}, 0x0) syz_emit_ethernet(0x165, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "0d5515", 0x127, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}, @srh={0x0, 0x6, 0x4, 0x3, 0xf7, 0x30, 0xffff, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x73, 0x2, 0x4, 0x1, 0x0, 0x10, 0x6, [@remote]}], {{}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7, 0x1, 0x1, 0x2, 0x2, 0x4}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x8, 0x2, 0x0, 0x1, 0x2, 0x5a}, 0x2, {0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "1e35af1e23be8ca949ecc3e35f2b432e67ea54d9fbc3a0a828edb7ea026f21cfd787f8a484821011a6e0e79a88c5438b8e62271dfef316e4589039f55dee30103f311fa4858f0bdc0b35bd04ffd43b3071727c665980235357f6ad86917654ec53d1c0c749b6df7e3dc0e8d817da167bb333d1"}}}}}}}, 0x0) (async) socket$inet(0x10, 0x3, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) bind$can_raw(r1, &(0x7f0000000040), 0x10) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000006c0)=[{{0x4}, {0x3, 0x1, 0x1, 0x1}}], 0x8) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00d32a355f038263bdee000000000000000000d389cac48d9508799a16229e8e2a5883d14fb1", @ANYRES32=0x0, @ANYBLOB="7b530000005f0300140012800b00010067656e65766500000400028008001f0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x6, 0xffff}, {0xb, 0xc}, {0xffff, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c004}, 0x40) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x83], 0x0, [0x8, 0x4, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc22d, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}]}}]}, 0x8c}}, 0x0) (async) 1.311356903s ago: executing program 1 (id=1814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400000000fedbdf25000074008fb185eab207a00c5f10989c5f10dd46cee354eebcbbb20ced84752fd72243a98aa5c8d7cfc27f01e42f924b68bdc730569cda58f9", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012800b00010062726964676500001400028005001900020000000500170000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4804}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400000000fedbdf25000074008fb185eab207a00c5f10989c5f10dd46cee354eebcbbb20ced84752fd72243a98aa5c8d7cfc27f01e42f924b68bdc730569cda58f9", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012800b00010062726964676500001400028005001900020000000500170000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4804}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1.141833568s ago: executing program 4 (id=1816): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xa) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000040)=0x6, 0x4) 1.066674711s ago: executing program 0 (id=1818): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="04"], 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x8004) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="04"], 0x10) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x8004) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r2, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) (async) 1.060405666s ago: executing program 1 (id=1819): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000f4ffffff00"/28], 0x50) (async) select(0xe, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r4}, 0x14) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xee01}, {@in6=@remote, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@proto={0x5, 0x19, 0x2b}]}, 0x100}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xe}, 0x94) (async) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000080)=0x5, 0x4) 921.839679ms ago: executing program 1 (id=1820): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095", @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r4, 0x0, 0xd1, &(0x7f0000000140)=0xfffffffb, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x3, 0x0, 0x80000000, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r6, r3, 0x36, 0x10, 0x0, @void, @value=r3, @void, @void, r5}, 0x20) 921.526608ms ago: executing program 3 (id=1821): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="030000000470f27c9d0637814900010000000000448b6f7eb1ccb2e448a7f6da94d2df02dfb870bad892c894f4b470f4ef4ed643229670547cfa90350b7b70955254bd9038085929d61c947b4b858866fb854199816ee85f9618dfdb017c79c7608b715e16000000008023afba662f0a36a88eed80400b701698d3e9a213b741942b3c0a22", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000004e800000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfe, &(0x7f00000004c0)=""/254}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400e78d7a4daa6620822e9f64ec0000", @ANYRES16=r4, @ANYBLOB="cf0427bd7000ffdbdf251200000008000300", @ANYRES16=r1, @ANYBLOB="0a00060008021100040100000c0081000500010081"], 0x34}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) 906.282158ms ago: executing program 2 (id=1822): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x8}, 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r8, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f00000000c0)=[{0x0, 0x1, {0x2, 0x0, 0x2}, {0x0, 0xf0}, 0xfd, 0xff}, {0x1, 0x1, {0x2, 0xf0, 0x4}, {0x1, 0xff, 0x2}, 0x0, 0xff}, {0x2, 0x3, {0xec9a6aca48c2b86, 0xf0, 0x2}, {0x2, 0x1, 0x2}, 0xfd, 0xfc}, {0x1, 0x3, {0x1, 0x0, 0x4}, {0x2}, 0xfd}], 0x80) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e25, 0xb3, @loopback, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0) getsockopt$MRT6(r1, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0xfffffffffffffdfe) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32], 0x54}}, 0x4000041) 876.853567ms ago: executing program 0 (id=1823): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xa0c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x401, 0x7d}}}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x2cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x6}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0xa}, {0x7, 0x1}, {0x3, 0x7}, {0x4, 0x8}, {0x6}, {0x0, 0x5}, {0x0, 0x8}, {0x4, 0x2}, {0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0x1}, {0x0, 0x5}, {0x4, 0x1}, {0x4, 0x7}, {0x0, 0x4}, {0x3, 0x7}, {0x2, 0x1}, {0x6, 0x1}, {0x5, 0xa}, {0x5, 0xa}, {0x7, 0x8}, {0x1, 0x6}, {0x2, 0x2}, {0x5, 0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0x9}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0xa}, {}, {0x2, 0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x1, 0x8}, {0x3, 0x4}, {0x0, 0x6}, {0x5, 0x8}, {0x0, 0x7}, {0x6, 0x3}, {0x1, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x4, 0xa}, {0x6, 0x7}, {0x2, 0xa}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0x3}, {0x1, 0xa}, {0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfff, 0x3, 0x1, 0x1, 0x0, 0x4, 0xfc]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0x5}, {}, {0x7, 0x4}, {0x0, 0x3}, {0x4, 0x8}, {0x7, 0x7}, {0x7, 0x9}, {0x1}, {0x0, 0xa}, {0x5, 0x4}, {0x5, 0x9}, {0x4, 0x7}, {0x5}, {0x5, 0x3}, {0x3, 0xa}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0xa}, {0x7, 0xa}, {0x1, 0x4}, {0x3, 0xa}, {0x6, 0x1}, {0x5, 0x4}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x9}, {0x5, 0x3}, {0x7, 0x1}, {0x7}, {0x4, 0x2}, {0x5, 0x1}, {0x7, 0x1}, {0x6, 0x4}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x5}, {0x2, 0x8}, {0x4, 0xa}, {0x3}, {0x0, 0xa}, {0x4, 0x4}, {0x3, 0x8}, {0x2, 0x9}, {0x7, 0xa}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x9}, {0x7, 0x8}, {0x7, 0x2}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x7, 0x7}, {0x2, 0xa}, {0x6}, {0x3, 0xa}, {0x0, 0x1}, {0x7, 0xa}, {0x1, 0x1}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x0, 0x2, 0x872, 0x5, 0xcd78, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x24, 0x18, 0x1, 0x12, 0x6c, 0xb, 0x1b, 0x4, 0x18, 0x36, 0x60, 0x24, 0x9, 0x12, 0x6a, 0x30, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x1000, 0x3, 0x1, 0x9, 0xfff9, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x4, 0x9, 0x6, 0x58, 0x6, 0xa]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x400, 0x4, 0x40, 0x2, 0x9, 0x919c, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x39a, 0x3, 0x3, 0xfc01, 0x0, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x64, 0xb, 0x16, 0x12, 0x24]}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x101, 0x9, 0x7fff, 0x4b, 0x1, 0x14af, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x18, 0x6c, 0x5, 0x3, 0x5, 0x35, 0xb, 0x4, 0x1, 0x5, 0x1, 0x36, 0x24, 0x6c, 0x3, 0x2, 0x1, 0x48, 0x1, 0x5]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x5, 0x7}, {0x2, 0x5}, {0x6, 0x1}, {0x0, 0x4}, {0x6}, {0x6, 0x8}, {0x4, 0x3}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x2}, {0x3, 0x3}, {0x5, 0x7}, {0x5, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x1}, {0x1, 0x3}, {0x4, 0x8}, {0x0, 0x2}, {0x4, 0x3}, {0x3, 0x9}, {}, {0x4, 0x3}, {0x6, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {0x3, 0x1}, {0x0, 0x6}, {0x1, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x8}, {0x3, 0x7}, {0x4, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x1}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x3}, {0x7, 0x2}, {}, {}, {0x7, 0x6}, {}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x8}, {0x5}, {0x0, 0x3}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x1}, {0x2, 0x2}, {0x7, 0x9}, {0x6}, {0x3, 0x6}, {0x0, 0x3}, {0x3, 0x9}, {0x3, 0x4}, {0x2, 0xa}, {0x5, 0x9}, {0x5, 0x3}, {0x3, 0x7}, {0x3, 0x2}, {0x1, 0x9}, {0x2, 0x3}, {0x0, 0x3}, {0x3, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x4}, {0x1, 0x6}, {0x2, 0x4}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0x6}, {0x6, 0x9}, {0x3, 0x6}, {0x4, 0x7}, {0x7, 0x2}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x5}, {0x5, 0x8}, {0x1}, {0x5, 0x1}, {0x5, 0x2}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x4a, 0x48, 0x60, 0x6c, 0x6, 0x36, 0x3, 0x2, 0xc, 0x48, 0x48, 0xc, 0x3, 0x1, 0xc, 0x16, 0x3, 0x16, 0x18, 0x3, 0x5]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x48, 0xa15c1957068bbe03, 0x60, 0x16, 0x60, 0x4, 0x30, 0x1b, 0x16, 0x12, 0x48, 0x4, 0x18, 0x3, 0x6, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x6, 0x3f, 0x0, 0x6, 0x5, 0x100, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x3, 0x4, 0x6, 0x4, 0xd0, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x4}, {0x0, 0x7}, {0x6}, {0x4, 0x3}, {0x2, 0x9}, {0x0, 0x8}, {0x5, 0x3}, {0x4, 0x9}, {0x5, 0x4}, {0x3, 0x8}, {0x1, 0x4}, {0x7, 0x5}, {0x3, 0xa}, {0x3, 0x7}, {0x7, 0x9}, {}, {0x7, 0x2}, {0x4, 0x8}, {0x0, 0xa}, {0x5}, {0x3, 0x2}, {0x7, 0x2}, {0x0, 0x1e}, {0x4, 0x3}, {0x2, 0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x6, 0x7}, {0x1, 0x6}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x1}, {0x5, 0x6}, {0x5, 0x2}, {0x0, 0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x1, 0x81, 0x1d35, 0x8, 0x7, 0x8]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x4, 0x60, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x30, 0x24, 0x48, 0x9, 0x1, 0x9, 0x12, 0xc, 0x48, 0x6, 0x3, 0x12, 0x2, 0x2, 0x4, 0x12, 0x2, 0x1, 0x9, 0x5, 0x59, 0x16, 0x3, 0x9, 0x24, 0x7e, 0x48, 0x9, 0x4, 0x48]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x3}, {0x4, 0x8}, {0x1, 0x4}, {0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x7}, {0x7, 0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x2}, {0x2, 0x4}, {0x5, 0x4}, {0x4, 0x6}, {0x1, 0x9}, {0x7, 0x4}, {0x1, 0x5}, {0x7}, {0x0, 0x4}, {0x1, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x134, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf1, 0x5, 0xfff, 0x56f7, 0x1, 0x3, 0x200, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0xb, 0x30, 0x36, 0x1, 0x12, 0x4, 0x1, 0xc]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7fff, 0x6, 0x8, 0x9, 0x7f, 0x8, 0x1c2]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x9, 0x36, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff5, 0x800, 0x5, 0x7, 0x3, 0xff, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7f, 0x0, 0x1, 0xd33, 0x9, 0x9, 0x3f]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x48, 0x36, 0x2, 0x60, 0x4, 0x3, 0x16, 0x9, 0x48, 0x6c, 0x5, 0x24, 0x6c, 0xc, 0x1, 0x2, 0x4, 0x12, 0x4, 0x30, 0x30, 0x24, 0x4, 0x2, 0x4, 0xb, 0xc, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x1b, 0x6c, 0x16, 0x36, 0xb, 0x36, 0x6c, 0x6c, 0x72, 0x2, 0x16, 0x5, 0x12, 0xc, 0x36, 0x36, 0x6c, 0x6c, 0x0, 0x1, 0x16, 0x2, 0x3, 0x3, 0x18, 0x36, 0x29, 0x2]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x4}, {0x6}, {0x5, 0x6}, {0x2}, {0x3, 0x6}, {0x2, 0x3}, {0x1, 0x1}, {0x1}, {0x5, 0x2}, {0x2, 0x8}, {0x1, 0x7}, {0x3, 0x5}, {0x1, 0x1}, {0x2, 0xa}, {0x3, 0x6}, {0x6, 0x3}, {0x2, 0x2}, {0x4, 0x2}, {0x4, 0x1}, {0x4, 0x9}, {0x3, 0x6}, {0x7, 0x9}, {0x6, 0x5}, {0x2, 0x2}, {0x6}, {0x4, 0x5}, {0x0, 0xa}, {0x6}, {0x1, 0x9}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0x4}, {0x5, 0xa}, {0x4}, {0x1, 0x9}, {0x7, 0x6}, {0x6, 0x8}, {0x0, 0x5}, {0x2, 0x7}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x3}, {0x4, 0x8}, {0x4}, {0x1, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x9}, {0x6, 0x7}, {0x7, 0x4}, {0x5, 0x7}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0x7}, {0x4, 0x9}, {0x7, 0x9}, {0x1, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xa, 0x4c5, 0x2, 0xd, 0xe0bb, 0x1, 0x8001]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x36, 0xb9be792aeeb8374c, 0x9, 0x24, 0x6c, 0x4]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0x5, 0x6c, 0x4, 0x3, 0x6c, 0x60, 0x30]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x899e, 0x81, 0x6, 0x2, 0xfffe, 0x10, 0x6, 0xfffb]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x0, 0x5, 0x9, 0x3, 0x1b, 0x12, 0x16, 0x24, 0x5, 0x1b, 0x0, 0x1b, 0xc, 0x6c, 0x1, 0x5, 0x1b, 0xc, 0x9, 0x12, 0x9, 0x36, 0x1b, 0x1, 0xc, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x679c, 0x8000, 0x6, 0x7, 0x7, 0x4b2, 0x8]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0x5}, {0x0, 0x7}, {0x2, 0x1}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x3, 0x2}, {0x1, 0x5}, {0x7, 0x6}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0x2}, {0x7}, {0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x8}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x8}, {0x5, 0x3}, {0x3}, {0x4, 0xa}, {0x1, 0x7}, {0x7, 0x8}, {0x0, 0x9}, {0x2}, {0x7, 0x6}, {0x4, 0xa}, {0x4}, {0x7, 0x5}, {0x1, 0x3}, {0x4, 0x5}, {0x4, 0x8}, {0x6, 0x5}, {0x6, 0x6}, {0x7, 0x5}, {0x0, 0x14}, {0x0, 0xa}, {0x7, 0xa}, {0x0, 0x9}, {0x6, 0x4}, {0x5, 0x5}, {0x0, 0x4}, {0x4, 0x8}, {0x2, 0x2}, {0x1, 0x1}, {0x2, 0x2}, {0x0, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xf, 0x6a53, 0x4, 0x4, 0x8000, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xc, 0x9, 0x1, 0x3, 0x2, 0x8000, 0x7f]}}]}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x4}, {0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x2, 0x7}, {0x5, 0x2}, {0x7}, {0x6, 0x9}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x2}, {0x7, 0x2}, {0x0, 0x1}, {}, {0x5}, {0x2, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0x7}, {0x4}, {0x5}, {0x5, 0xa}, {0x4, 0xa}, {0x1, 0x2}, {0x3, 0xa}, {0x4, 0x5}, {0x4, 0x9}, {0x6, 0x1}, {0x2, 0x9}, {0x1}, {0x0, 0xa}, {0x5, 0xa}, {0x6, 0x5}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x5, 0x2, 0x10, 0xb7, 0x695b, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x4}, {0x0, 0x4}, {0x3, 0x7}, {0x1, 0x7}, {0x6, 0x5}, {0x2, 0x3}, {0x3, 0x7}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x4, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x1}, {0x0, 0x4}, {0x7, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x4, 0x81, 0xafcd, 0x7fff, 0x7, 0x1000, 0xf651]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x9, 0x6, 0x154c, 0xfffc, 0x10, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x3, 0x2, 0x3, 0x6c, 0x4, 0x18, 0xb, 0x60, 0x48, 0x5]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x6, 0x1, 0x3d, 0x1b, 0x6c, 0x24, 0x30, 0x12, 0x60, 0x9, 0x12, 0x60, 0x9]}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0x3}, {0x1, 0x7}, {0x2, 0x1}, {0x5, 0x6}, {0x0, 0x3}, {0x3}, {0x3, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x4}, {0x0, 0xa}, {0x3, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x5}, {0x3, 0x3}, {0x0, 0x9}, {0x7, 0x9}, {0x3}, {0x1, 0x8}, {0x3, 0x6}, {0x5, 0x2}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x6, 0x7}, {0x0, 0x3}, {0x3, 0x8}, {0x2, 0x6}, {0x0, 0x6}, {0x6}, {0x6}, {}, {0x7, 0x3}, {0x4}, {0x0, 0x2}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x7}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {}, {0x4, 0x5}, {0x2, 0x8}, {0x0, 0x9}, {0x7, 0x4}, {0x0, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x3}, {0x4, 0x2}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x13}, {}, {}, {0x1, 0x3}, {0x0, 0x3}, {0x1}, {0x5, 0x9}, {0x0, 0x9}, {0x0, 0x9}, {0x7, 0x9}, {0x6, 0x7}, {0x1, 0x5}, {0x6, 0x1}, {0x2}, {0x6, 0x4}, {0x0, 0x3}, {0x7, 0x4}, {0x7}, {0x2}, {0x0, 0xa}, {0x6, 0xa}, {0x7, 0x6}, {0x5}, {0x1, 0x5}, {0x0, 0xa}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xfff, 0x1, 0x7, 0x2, 0x8, 0x3d42]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x4, 0x18, 0x17, 0x3, 0x4, 0x2, 0x18, 0xb5d9bd265342b7f3, 0x30, 0x2, 0x3, 0x3, 0x6, 0x4, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x2, 0x6c, 0x2, 0x9, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x466, 0x7, 0x7, 0x2, 0x8, 0xfff, 0x7f, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x240, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x5, 0x1}, {0x3, 0x1}, {0x4, 0x8}, {0x6, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x7, 0x2}, {0x4, 0x8}, {0x0, 0x6}, {0x1, 0x4}, {0x7, 0x9}, {0x6, 0x3}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x6}, {0x6, 0x5}, {0x7, 0x5}, {0x7, 0x3}, {0x4, 0x5}, {0x7, 0x3}, {0x6, 0x3}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0x8}, {0x6, 0x7}, {0x4, 0x7}, {0x1, 0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0x2}, {0x6, 0xa}, {0x2, 0x8}, {0x1}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1, 0x1b, 0xb, 0x6, 0xb, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x0, 0x9, 0x2, 0x93, 0x9, 0xaf2]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0xa}, {0x5, 0xa}, {0x4, 0x1}, {0x5, 0xa}, {0x5, 0x2}, {0x7}, {0x2, 0x5}, {0x7, 0x3}, {0x0, 0x5}, {0x6, 0x3}, {0x7, 0x5}, {0x3, 0x6}, {0x4, 0xa}, {0x7, 0x8}, {0x4, 0x7}, {0x0, 0x1}, {0x7, 0x7}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x6}, {0x3, 0x1}, {}, {0x4, 0x9}, {0x7, 0x3}, {0x2, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0x3}, {0x4}, {0x6, 0x3}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x800, 0x1, 0x8, 0x6, 0x7, 0x4, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0xb, 0x6c, 0x60, 0x18, 0x48, 0x4, 0x1b, 0x1, 0x4, 0xc, 0xb, 0x4e, 0x1, 0x48, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7ff, 0x7fff, 0x9, 0x8, 0x50, 0x0, 0x100]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x0, 0xfff, 0x2, 0x8, 0x81, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x4, 0x3, 0xfff4, 0x4, 0x0, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x3ff, 0x5b, 0xff, 0xf001, 0x4, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x4, 0x4, 0x5af2, 0x7, 0x3c1, 0x7fff]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x7}, {0x5, 0x7}, {0x2, 0x8}, {}, {0x5, 0x6}, {0x3, 0x8}, {0x6, 0x7}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x3}, {0x7, 0x4}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x5}, {0x3}, {0x2, 0x9}, {0x7, 0x4}, {0x2, 0x4}, {0x3, 0x5}, {0x5}, {0x4, 0x8}, {0x4, 0x9}, {0x4, 0x9}, {0x6, 0x7}, {0x5, 0x3}, {0x6, 0x3}, {0x5, 0x7}, {0x1, 0x7}, {0x4, 0x3}, {0x5, 0x7}, {0x5, 0x4}, {0x2, 0x4}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x6}, {0x1}, {0x7, 0x3}, {0x2, 0x8}, {0x5, 0x5}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0xd0, 0x7ff, 0x8, 0x7, 0x8, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x9, 0x654, 0xf, 0x2, 0x7, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1000, 0x1, 0x6938, 0x6, 0x4eed, 0x1000, 0xef6]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xb0aa, 0xf, 0x10, 0x800, 0x4, 0x8, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x271, 0x8, 0x200, 0x8, 0x8, 0xf8, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x3, 0x7, 0x4e4, 0x8, 0x9, 0x4, 0xc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x246, 0x8, 0xc4, 0xa0, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}]}, 0xa0c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab00000000000000003200000008001701"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c1000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 805.78606ms ago: executing program 3 (id=1824): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="61023300a0300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="7a0af8ff7525736cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e2e3b8f2d0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f00000003c0)=0x80000001, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x160, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x710, 0x34}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x134, 0x84, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8001}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7ff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7f}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xb4b}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xf}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x7, 0x1, @random="f9fa2a"}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="231985f8f240"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xc}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x10001}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="b99c49acebb7"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8001}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xab}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4060}, 0x4000000) 777.288329ms ago: executing program 0 (id=1825): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bind$llc(0xffffffffffffffff, &(0x7f0000000680)={0x1a, 0x28, 0xac, 0x4, 0x3, 0x4, @multicast}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x7f, r1}, 0x38) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x3c}}, 0x0) write$cgroup_pid(r2, &(0x7f0000000180)=r4, 0x12) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 765.638175ms ago: executing program 2 (id=1826): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 641.816445ms ago: executing program 1 (id=1827): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x80, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x200, 0x1, 0x0, r1}, &(0x7f00000000c0)=0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x6, 0xbee2, 0x3}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={r1, 0x5, 0x1, 0x7ff, 0xe4d2, 0x9}, &(0x7f0000000180)=0x14) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0xfffffffe}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={r4, 0x200}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0)={r5, 0x3f4}, 0x8) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000300)={0x5, {{0xa, 0x4e22, 0x0, @loopback}}}, 0x88) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000003c0), &(0x7f0000000400)=0x4) close(r6) bind$netrom(r3, &(0x7f0000000440)={{0x3, @bcast, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000500)={0x1d, r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e20, 0x200, @empty, 0x5}}, 0x6, 0x1ff}, &(0x7f0000000600)=0x90) connect$inet6(r8, &(0x7f0000000640)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x473b0633}, 0x1c) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r11, 0x84, 0x0, &(0x7f0000000680)={r10, 0xc794, 0x7, 0x9}, &(0x7f00000006c0)=0x10) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000700)={0x10, 0x6, 0xf, 0x9}) recvfrom(r0, &(0x7f0000000740)=""/21, 0x15, 0x2040, &(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x1, 0x2, 0x1}}, 0x80) getsockopt$rose(r3, 0x104, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r12 = accept4$packet(r3, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14, 0x80800) getsockname$packet(r12, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000940)=0x14) socket$netlink(0x10, 0x3, 0x7) socket$inet6(0xa, 0x6, 0xffff0000) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0x2, 0x0) 640.071006ms ago: executing program 3 (id=1828): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="af", 0x1, 0x1840, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) ppoll(&(0x7f0000000000)=[{r3, 0x408a}], 0x1, &(0x7f0000000100), 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000070a01040000000000000000240000000900020073797a3200000000090001007379"], 0x2c}}, 0x0) r4 = openat$cgroup_devices(r1, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/150, 0x96}, {&(0x7f0000000140)="0f227b27f1d3", 0x6}], 0x2, 0x0, 0x0, 0x84}, 0x8084) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r6) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r7, 0x80047453, 0x0) write$cgroup_devices(r4, &(0x7f0000000180)=ANY=[@ANYBLOB=' w'], 0x8) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x5, 0x1f, 0x0, &(0x7f0000000100)="66d4492a0a1b30e6f5d85a6d99", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x20}, 0x50) 617.204504ms ago: executing program 2 (id=1829): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x91}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x2a, 0x0, 0x0, 0x800001}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000101840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff050000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10}, 0x90) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xbb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 526.592863ms ago: executing program 0 (id=1830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$unix(r2, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f00000008"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x3c}}, 0x0) 385.758658ms ago: executing program 2 (id=1831): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 385.487909ms ago: executing program 3 (id=1832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) recvmmsg(r2, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x2c, r4, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$unix(r1, &(0x7f0000000140)={&(0x7f0000000300)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x96, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14}}], 0x18}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x4b, 0x7, 0x1ff, "fac16a590b17"}}) 292.873307ms ago: executing program 2 (id=1833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRESHEX, @ANYRES16=r0, @ANYRES32=r1, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x800) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000240)={0xc029}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2507000000080001000500000008000300", @ANYRES32=r6, @ANYBLOB="0c009900020000005d000000140004006e6574706369300000000000000000000400cc00080005000b00000005005300000000000400cc000400cc00"], 0x60}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000800) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000000)={0x2b, 0x1}) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x1, @vifc_lcl_ifindex=r4, @local}, 0x10) 242.245387ms ago: executing program 3 (id=1834): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b96167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd00"/222]}]}, 0x114}], 0x1}, 0x80) 97.551638ms ago: executing program 0 (id=1835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, r3}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 94.676486ms ago: executing program 2 (id=1836): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x6048080}, 0x800c1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x300}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000044}, 0x24000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}}, 0x4004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r5, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x28000, 0x7a}}}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PMK={0x10, 0xfe, "3a73ddd99001b8259d3ed738"}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_FILS_KEK={0xf, 0xf2, "95b973c8797397e3fa3601"}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x20000001) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xd460af2f0ca956ab}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x120, r8, 0x10, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000940)={r0, 0x770, 0x6, 0x9}) ioctl$PPPIOCGIDLE32(r10, 0x8008743f, &(0x7f0000000980)) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r11, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1a}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x20000054) setsockopt$packet_int(r10, 0x107, 0x7, &(0x7f0000000b00)=0x6, 0x4) sendmsg$AUDIT_SET(r10, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, 0x3e9, 0x400, 0x70bd2b, 0x25dfdbff, {0x7c, 0x0, 0x2, 0x0, 0xffffffff, 0x4, 0x80000001, 0x0, 0x0, 0xffffffff, 0x7f}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0xc000000) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r5, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x18}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, r12, 0x100, 0x70bd28, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000f80)={r0, r10}) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x6c, r13, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8eeec5b2d80856f1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c000}, 0x800) setsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f00000011c0)={0x0, 0x2, 0x9, 0x3, 0x5, 0x8001}, 0x14) 91.715004ms ago: executing program 3 (id=1837): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800dd8d000020000000000002000000000000060000060006001500010000001800168014000100000000000000010000001000000011"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r2, 0x11e, 0x17, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xff03, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r3, 0x0, 0x3, 0x3}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 0s ago: executing program 0 (id=1838): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x33, @loopback, 0x4e21, 0x3, 'lblc\x00', 0x8, 0x401, 0x16}, 0x2c) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) kernel console output (not intermixed with test programs): 96k [ 85.479934][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.485781][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.488730][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.502115][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.502115][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.502735][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.510646][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.517501][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.530565][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.539967][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.548286][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.559138][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.566950][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.578979][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.587246][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.614512][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.623000][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.631083][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.639152][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.647282][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.683212][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.705208][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.721189][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.730894][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.742263][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.185079][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 86.341348][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 86.421682][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.429189][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.438396][ T5826] bridge_slave_0: entered allmulticast mode [ 86.446054][ T5826] bridge_slave_0: entered promiscuous mode [ 86.476575][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 86.492667][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.499911][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.507081][ T5826] bridge_slave_1: entered allmulticast mode [ 86.514696][ T5826] bridge_slave_1: entered promiscuous mode [ 86.554179][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 86.671173][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.731962][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.827430][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.834996][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.843224][ T5832] bridge_slave_0: entered allmulticast mode [ 86.851819][ T5832] bridge_slave_0: entered promiscuous mode [ 86.867725][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 86.916371][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.924815][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.932502][ T5832] bridge_slave_1: entered allmulticast mode [ 86.941014][ T5832] bridge_slave_1: entered promiscuous mode [ 86.989378][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.996544][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.005462][ T5839] bridge_slave_0: entered allmulticast mode [ 87.013520][ T5839] bridge_slave_0: entered promiscuous mode [ 87.024675][ T5826] team0: Port device team_slave_0 added [ 87.067324][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.074694][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.082196][ T5827] bridge_slave_0: entered allmulticast mode [ 87.089709][ T5827] bridge_slave_0: entered promiscuous mode [ 87.096973][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.104642][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.112034][ T5839] bridge_slave_1: entered allmulticast mode [ 87.119157][ T5839] bridge_slave_1: entered promiscuous mode [ 87.141329][ T5826] team0: Port device team_slave_1 added [ 87.165134][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.174535][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.182045][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.189241][ T5827] bridge_slave_1: entered allmulticast mode [ 87.197273][ T5827] bridge_slave_1: entered promiscuous mode [ 87.235892][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.272636][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.326154][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.352756][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.359839][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.385796][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.406224][ T5832] team0: Port device team_slave_0 added [ 87.415013][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.437523][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.444639][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.470796][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.495078][ T5832] team0: Port device team_slave_1 added [ 87.503344][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.514018][ T5839] team0: Port device team_slave_0 added [ 87.559924][ T5830] Bluetooth: hci1: command tx timeout [ 87.568517][ T5839] team0: Port device team_slave_1 added [ 87.589017][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.596689][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.604203][ T5843] bridge_slave_0: entered allmulticast mode [ 87.611398][ T5843] bridge_slave_0: entered promiscuous mode [ 87.639938][ T5830] Bluetooth: hci2: command tx timeout [ 87.639945][ T5835] Bluetooth: hci0: command tx timeout [ 87.687147][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.694550][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.701947][ T5843] bridge_slave_1: entered allmulticast mode [ 87.709158][ T5843] bridge_slave_1: entered promiscuous mode [ 87.716605][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.723725][ T5830] Bluetooth: hci3: command tx timeout [ 87.730174][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.756380][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.769142][ T5827] team0: Port device team_slave_0 added [ 87.775909][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.782967][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.799740][ T5830] Bluetooth: hci4: command tx timeout [ 87.809439][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.848379][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.855437][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.882297][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.895144][ T5827] team0: Port device team_slave_1 added [ 87.902123][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.909083][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.935453][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.951707][ T5826] hsr_slave_0: entered promiscuous mode [ 87.958135][ T5826] hsr_slave_1: entered promiscuous mode [ 87.985985][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.020437][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.043485][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.050733][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.076761][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.136435][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.143841][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.170135][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.235488][ T5832] hsr_slave_0: entered promiscuous mode [ 88.242112][ T5832] hsr_slave_1: entered promiscuous mode [ 88.248201][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 88.254068][ T5832] Cannot create hsr debugfs directory [ 88.265306][ T5839] hsr_slave_0: entered promiscuous mode [ 88.271902][ T5839] hsr_slave_1: entered promiscuous mode [ 88.278080][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 88.284189][ T5839] Cannot create hsr debugfs directory [ 88.309467][ T5843] team0: Port device team_slave_0 added [ 88.357398][ T5843] team0: Port device team_slave_1 added [ 88.412578][ T5827] hsr_slave_0: entered promiscuous mode [ 88.418921][ T5827] hsr_slave_1: entered promiscuous mode [ 88.425770][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 88.432139][ T5827] Cannot create hsr debugfs directory [ 88.501424][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.508398][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.534438][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.588661][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.595903][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.622601][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.882614][ T5843] hsr_slave_0: entered promiscuous mode [ 88.888933][ T5843] hsr_slave_1: entered promiscuous mode [ 88.895328][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 88.901354][ T5843] Cannot create hsr debugfs directory [ 89.043619][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.056187][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.072930][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.097084][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.176852][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.187602][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.217242][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.237772][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.316719][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.360081][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.371817][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.403828][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.486750][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.498202][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.517432][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.528229][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.589437][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.618336][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.641458][ T5830] Bluetooth: hci1: command tx timeout [ 89.674887][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.695527][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.710872][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.719686][ T5830] Bluetooth: hci2: command tx timeout [ 89.722345][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.731877][ T5830] Bluetooth: hci0: command tx timeout [ 89.746758][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.757490][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.764772][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.774958][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.800470][ T5830] Bluetooth: hci3: command tx timeout [ 89.819233][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.826429][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.839312][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.846476][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.874495][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.879705][ T5830] Bluetooth: hci4: command tx timeout [ 89.881710][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.989162][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.033622][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.064956][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.105902][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.113109][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.167317][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.183184][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.190431][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.310701][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.317982][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.340227][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.347408][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.488131][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.524304][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.593858][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.693541][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.724035][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.731350][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.741925][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.749048][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.763838][ T5839] veth0_vlan: entered promiscuous mode [ 90.788618][ T5839] veth1_vlan: entered promiscuous mode [ 90.884685][ T5826] veth0_vlan: entered promiscuous mode [ 90.895788][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.951760][ T5839] veth0_macvtap: entered promiscuous mode [ 90.962971][ T5839] veth1_macvtap: entered promiscuous mode [ 90.971218][ T5826] veth1_vlan: entered promiscuous mode [ 90.986906][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.055543][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.103546][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.137028][ T3033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.154376][ T5826] veth0_macvtap: entered promiscuous mode [ 91.174469][ T3033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.184810][ T3033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.201439][ T5826] veth1_macvtap: entered promiscuous mode [ 91.216876][ T3033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.246846][ T5827] veth0_vlan: entered promiscuous mode [ 91.311437][ T5827] veth1_vlan: entered promiscuous mode [ 91.361170][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.392260][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.406458][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.513501][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.522789][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.533553][ T5827] veth0_macvtap: entered promiscuous mode [ 91.546646][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.558003][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.568618][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.578787][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.615473][ T5827] veth1_macvtap: entered promiscuous mode [ 91.672955][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.702379][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.711183][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.715860][ T5843] veth0_vlan: entered promiscuous mode [ 91.724204][ T5830] Bluetooth: hci1: command tx timeout [ 91.729091][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.741997][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.758003][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.770024][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.800005][ T5830] Bluetooth: hci0: command tx timeout [ 91.800801][ T5835] Bluetooth: hci2: command tx timeout [ 91.822462][ T985] cfg80211: failed to load regulatory.db [ 91.831412][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.842948][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.858630][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.878808][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.887078][ T5835] Bluetooth: hci3: command tx timeout [ 91.888246][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.900774][ T5843] veth1_vlan: entered promiscuous mode [ 91.908854][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.959717][ T5835] Bluetooth: hci4: command tx timeout [ 92.008437][ T5832] veth0_vlan: entered promiscuous mode [ 92.052064][ T5832] veth1_vlan: entered promiscuous mode [ 92.076352][ T5944] Zero length message leads to an empty skb [ 92.132215][ T5843] veth0_macvtap: entered promiscuous mode [ 92.146563][ T5944] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 92.165554][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.189460][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.206830][ T5843] veth1_macvtap: entered promiscuous mode [ 92.207971][ T5944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.288865][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.290255][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.305446][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.312364][ T5832] veth0_macvtap: entered promiscuous mode [ 92.351407][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.363938][ T5832] veth1_macvtap: entered promiscuous mode [ 92.402364][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.436845][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.472161][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.484654][ T5950] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.512277][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.583421][ T5950] netlink: 'syz.0.7': attribute type 4 has an invalid length. [ 92.591296][ T5950] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7'. [ 92.635920][ T5956] delete_channel: no stack [ 92.654580][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.733511][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.964680][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.975371][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.985720][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.995131][ T2993] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.081665][ T5964] sctp: [Deprecated]: syz.3.9 (pid 5964) Use of int in maxseg socket option. [ 93.081665][ T5964] Use struct sctp_assoc_value instead [ 93.174062][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.203299][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.252607][ T5968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.328255][ T5972] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 93.418546][ T5972] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 93.423504][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 93.443055][ T5972] bond1 (unregistering): Released all slaves [ 93.497749][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.506850][ T5976] netlink: 'syz.1.12': attribute type 10 has an invalid length. [ 93.515437][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.528786][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.541422][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.732818][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.770720][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.800277][ T5835] Bluetooth: hci1: command tx timeout [ 93.830232][ T5988] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15'. [ 93.841557][ T5991] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16'. [ 93.881160][ T5835] Bluetooth: hci2: command tx timeout [ 93.882648][ T5830] Bluetooth: hci0: command tx timeout [ 93.905172][ T5989] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15'. [ 93.949116][ T5995] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17'. [ 93.960744][ T5830] Bluetooth: hci3: command tx timeout [ 94.044678][ T5830] Bluetooth: hci4: command tx timeout [ 94.181904][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 94.312012][ T6009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20'. [ 94.464607][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 94.731749][ T6033] netlink: 'syz.0.26': attribute type 1 has an invalid length. [ 94.769112][ T6033] netlink: 'syz.0.26': attribute type 4 has an invalid length. [ 95.066434][ T6046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.087875][ T6049] bridge0: port 3(syz_tun) entered blocking state [ 95.109718][ T6054] netlink: 'syz.0.32': attribute type 10 has an invalid length. [ 95.149950][ T6049] bridge0: port 3(syz_tun) entered disabled state [ 95.174916][ T6058] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 95.191193][ T6049] syz_tun: entered allmulticast mode [ 95.199101][ T6049] syz_tun: entered promiscuous mode [ 95.227275][ T6049] bridge0: port 3(syz_tun) entered blocking state [ 95.234027][ T6049] bridge0: port 3(syz_tun) entered forwarding state [ 95.294193][ T6054] bridge0: port 3(syz_tun) entered disabled state [ 95.301171][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.309358][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.344996][ T6054] bridge0: port 3(syz_tun) entered blocking state [ 95.351666][ T6054] bridge0: port 3(syz_tun) entered forwarding state [ 95.359078][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.366302][ T6054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.373864][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.381136][ T6054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.418396][ T6054] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 95.464155][ T6058] veth3: entered promiscuous mode [ 95.476018][ T6067] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 95.506817][ T6060] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 95.715940][ T6073] Bluetooth: MGMT ver 1.23 [ 95.737477][ T6073] Bluetooth: hci0: invalid length 39, exp 2 for type 1 [ 95.769098][ T6076] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.086695][ T6086] netlink: 'syz.4.41': attribute type 1 has an invalid length. [ 96.174392][ T6060] infiniband syz1: set active [ 96.177300][ T6076] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.181618][ T6060] infiniband syz1: added syz_tun [ 96.198920][ T6060] syz1: rxe_create_cq: returned err = -12 [ 96.208265][ T6060] infiniband syz1: Couldn't create ib_mad CQ [ 96.217301][ T6060] infiniband syz1: Couldn't open port 1 [ 96.247352][ T6067] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.257672][ T6076] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.290716][ T6060] RDS/IB: syz1: added [ 96.311602][ T6060] smc: adding ib device syz1 with port count 1 [ 96.325912][ T6060] smc: ib device syz1 port 1 has no pnetid [ 96.335514][ T6086] veth5: entered promiscuous mode [ 96.391862][ T6093] raw_sendmsg: syz.1.43 forgot to set AF_INET. Fix it! [ 96.407608][ T6076] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.659658][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.832407][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.870809][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.910724][ T6108] netlink: 'syz.1.48': attribute type 21 has an invalid length. [ 96.958811][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.983663][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.995961][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.008562][ T6109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.040000][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.052015][ T6112] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 97.260495][ T6119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.279731][ T6118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.351103][ T6122] __nla_validate_parse: 7 callbacks suppressed [ 97.351120][ T6122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.53'. [ 97.451568][ T6127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'. [ 97.570862][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.582396][ T6113] veth5: entered promiscuous mode [ 97.711827][ T6116] 8021q: VLANs not supported on wg1 [ 97.913464][ T6143] netlink: 236 bytes leftover after parsing attributes in process `syz.1.57'. [ 98.047783][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 98.062031][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'. [ 98.212022][ T6155] !: renamed from dummy0 (while UP) [ 99.326445][ T6183] netlink: 256 bytes leftover after parsing attributes in process `syz.4.68'. [ 99.628056][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 99.774840][ T6200] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 99.866144][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.73'. [ 100.241647][ T6219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.288672][ T6235] ªªªªªª: renamed from vlan0 (while UP) [ 100.509147][ T6241] IPv6: NLM_F_REPLACE set, but no existing node found! [ 100.692591][ T6246] warning: `syz.0.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.713884][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.725309][ T6246] netlink: 'syz.0.84': attribute type 1 has an invalid length. [ 100.843466][ T6258] netlink: 'syz.4.87': attribute type 10 has an invalid length. [ 100.962106][ T6261] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 101.578052][ T6256] gretap1: entered promiscuous mode [ 101.604404][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.622248][ T6258] bridge_slave_1: left allmulticast mode [ 101.627947][ T6258] bridge_slave_1: left promiscuous mode [ 101.635523][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.725416][ T6258] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 101.750184][ T6259] macvlan2: entered promiscuous mode [ 101.755653][ T6259] macvlan2: entered allmulticast mode [ 101.824631][ T6266] netlink: 128 bytes leftover after parsing attributes in process `syz.3.89'. [ 101.835104][ T6266] netlink: 128 bytes leftover after parsing attributes in process `syz.3.89'. [ 102.247674][ T6287] nft_compat: unsupported protocol 0 [ 102.489584][ T6297] netlink: 576 bytes leftover after parsing attributes in process `syz.1.98'. [ 102.565807][ T6292] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.987820][ T6316] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 103.062324][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.102'. [ 103.166880][ T6322] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.530849][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 103.540173][ T6334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.571776][ T6334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.693265][ T6344] netlink: 'syz.4.113': attribute type 10 has an invalid length. [ 104.046484][ T6367] netlink: 44 bytes leftover after parsing attributes in process `syz.4.119'. [ 104.059775][ T6370] Bluetooth: MGMT ver 1.23 [ 104.083710][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 104.351334][ T6383] netlink: 'syz.1.122': attribute type 1 has an invalid length. [ 104.380620][ T6383] netlink: 'syz.1.122': attribute type 2 has an invalid length. [ 104.424147][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 104.514964][ T6370] netlink: set zone limit has 8 unknown bytes [ 104.526091][ T6392] netlink: 136 bytes leftover after parsing attributes in process `syz.0.123'. [ 104.535052][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 104.547262][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.121'. [ 104.622491][ T6396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.125'. [ 104.742440][ T6401] syz_tun: entered allmulticast mode [ 104.754829][ T6401] netlink: 'syz.2.126': attribute type 1 has an invalid length. [ 104.884724][ T6399] syz_tun: left allmulticast mode [ 104.941005][ T6409] openvswitch: netlink: Flow actions attr not present in new flow. [ 104.949580][ T6409] bridge_slave_1: left allmulticast mode [ 104.955352][ T6409] bridge_slave_1: left promiscuous mode [ 104.961864][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.972244][ T6409] bridge_slave_0: left allmulticast mode [ 104.978037][ T6409] bridge_slave_0: left promiscuous mode [ 104.984275][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.282289][ T6420] batadv0: mtu less than device minimum [ 105.821688][ T6451] veth0: entered promiscuous mode [ 105.856766][ T6453] Bluetooth: hci0: service_discovery: expected 4 bytes, got 70 bytes [ 105.873332][ T6449] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 105.926637][ T6449] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.979769][ T6448] veth0: left promiscuous mode [ 106.122436][ T5835] Bluetooth: hci2: command 0x0401 tx timeout [ 106.128630][ T5830] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 106.191136][ T6470] IPv6: sit1: Disabled Multicast RS [ 106.197603][ T6470] sit1: entered allmulticast mode [ 107.305077][ T6519] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 107.563333][ T6529] __nla_validate_parse: 8 callbacks suppressed [ 107.563352][ T6529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.165'. [ 107.680910][ T6531] netlink: 'syz.3.165': attribute type 1 has an invalid length. [ 107.688953][ T6531] netlink: 228 bytes leftover after parsing attributes in process `syz.3.165'. [ 108.104644][ T6546] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 108.766000][ T5907] IPVS: starting estimator thread 0... [ 108.884358][ T6567] IPVS: using max 26 ests per chain, 62400 per kthread [ 109.076693][ T6570] netlink: 'syz.2.171': attribute type 3 has an invalid length. [ 109.086646][ T6570] netlink: 224 bytes leftover after parsing attributes in process `syz.2.171'. [ 109.385037][ T6572] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.172'. [ 109.395114][ T6572] openvswitch: netlink: Key type 30 is not supported [ 109.603325][ T6569] netlink: 'syz.2.171': attribute type 3 has an invalid length. [ 109.626537][ T6569] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.171'. [ 109.835264][ T6587] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 109.984431][ T6587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.718142][ T30] audit: type=1107 audit(1760640565.090:2): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 111.104266][ T6629] netlink: 40 bytes leftover after parsing attributes in process `syz.3.186'. [ 111.621528][ T6641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.638915][ T6643] netlink: 'syz.3.191': attribute type 10 has an invalid length. [ 111.910975][ T6652] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 112.355940][ T6670] bridge: RTM_NEWNEIGH with invalid ether address [ 112.656394][ T6471] Set syz1 is full, maxelem 65536 reached [ 112.929844][ T6683] tipc: Started in network mode [ 112.946831][ T6683] tipc: Node identity 8e83ed3434cf, cluster identity 4711 [ 112.991335][ T6683] tipc: Enabled bearer , priority 0 [ 113.023512][ T6685] syzkaller0: entered promiscuous mode [ 113.029069][ T6685] syzkaller0: entered allmulticast mode [ 113.063816][ T6691] Unsupported ieee802154 address type: 0 [ 113.113051][ T6689] vlan2: entered promiscuous mode [ 113.140418][ T6689] bond0: entered promiscuous mode [ 113.150549][ T6689] bond_slave_0: entered promiscuous mode [ 113.160797][ T6697] Unsupported ieee802154 address type: 0 [ 113.192921][ T6689] bond_slave_1: entered promiscuous mode [ 113.303280][ T6685] tipc: Resetting bearer [ 113.332723][ T6680] tipc: Resetting bearer [ 113.370063][ T6680] tipc: Disabling bearer [ 113.718688][ T6722] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 113.802156][ T6730] netlink: 'syz.2.218': attribute type 1 has an invalid length. [ 113.981714][ T6743] netlink: 'syz.4.222': attribute type 16 has an invalid length. [ 114.023933][ T6743] netlink: 'syz.4.222': attribute type 17 has an invalid length. [ 114.118414][ T6743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.824795][ T6788] netlink: 48 bytes leftover after parsing attributes in process `syz.4.235'. [ 114.913423][ T6790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.236'. [ 115.404595][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 115.459707][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'. [ 115.775335][ T6824] netlink: 'syz.3.246': attribute type 10 has an invalid length. [ 115.809772][ T6825] netlink: 'syz.3.246': attribute type 10 has an invalid length. [ 115.950328][ T6834] batman_adv: batadv0: Adding interface: dummy0 [ 116.014099][ T6834] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.126139][ T6834] batman_adv: batadv0: Interface activated: dummy0 [ 116.320011][ T6853] lo: entered promiscuous mode [ 116.331418][ T6853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.478754][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'. [ 116.524786][ T6855] syzkaller0: entered promiscuous mode [ 116.532588][ T6855] syzkaller0: entered allmulticast mode [ 116.629692][ T6864] netlink: 'syz.0.259': attribute type 8 has an invalid length. [ 116.705602][ T6864] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 116.766005][ T6871] netlink: 104 bytes leftover after parsing attributes in process `syz.1.261'. [ 117.332885][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 117.955209][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 117.988128][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 118.040654][ T6888] bridge0: port 3(syz_tun) entered disabled state [ 118.060295][ T6895] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 118.093629][ T6888] syz_tun (unregistering): left allmulticast mode [ 118.119585][ T6888] syz_tun (unregistering): left promiscuous mode [ 118.138029][ T6888] bridge0: port 3(syz_tun) entered disabled state [ 118.178713][ T12] smc: removing ib device syz1 [ 118.365503][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 118.406822][ T981] syz1: Port: 1 Link DOWN [ 118.444687][ T6895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.481046][ T6909] bond1: (slave gretap1): making interface the new active one [ 118.493347][ T6909] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 118.625586][ T24] IPVS: starting estimator thread 0... [ 118.730542][ T6926] IPVS: using max 26 ests per chain, 62400 per kthread [ 119.958375][ T6964] __nla_validate_parse: 3 callbacks suppressed [ 119.958395][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 120.075424][ T6981] netlink: 'syz.4.283': attribute type 3 has an invalid length. [ 120.086778][ T6981] netlink: 'syz.4.283': attribute type 3 has an invalid length. [ 120.145269][ T6981] netlink: 'syz.4.283': attribute type 3 has an invalid length. [ 120.175696][ T6981] netlink: 'syz.4.283': attribute type 3 has an invalid length. [ 120.211433][ T6981] netlink: 'syz.4.283': attribute type 3 has an invalid length. [ 120.277008][ T6981] netlink: 'syz.4.283': attribute type 3 has an invalid length. [ 120.306713][ T6981] netlink: 'syz.4.283': attribute type 3 has an invalid length. [ 120.365239][ T6981] netlink: 'syz.4.283': attribute type 3 has an invalid length. [ 120.409494][ T6981] netlink: 'syz.4.283': attribute type 3 has an invalid length. [ 120.417260][ T6981] netlink: 'syz.4.283': attribute type 3 has an invalid length. [ 120.506314][ T6996] netlink: 96 bytes leftover after parsing attributes in process `syz.3.287'. [ 120.739570][ T7006] tipc: Started in network mode [ 120.769486][ T7006] tipc: Node identity da4100dc7355, cluster identity 4711 [ 120.776799][ T7006] tipc: Enabled bearer , priority 0 [ 120.806234][ T7007] netlink: 244 bytes leftover after parsing attributes in process `syz.4.289'. [ 120.806783][ T7012] syzkaller0: entered promiscuous mode [ 120.825057][ T7012] syzkaller0: entered allmulticast mode [ 120.855530][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 120.932918][ T2993] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.933080][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 120.957154][ T2993] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.970504][ T2993] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.031692][ T7012] tipc: Resetting bearer [ 121.162781][ T7004] tipc: Resetting bearer [ 121.221363][ T7024] netlink: 332 bytes leftover after parsing attributes in process `syz.4.292'. [ 121.256278][ T7004] tipc: Disabling bearer [ 121.399996][ T7031] tipc: Enabling of bearer rejected, failed to enable media [ 121.666626][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 122.099028][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 122.143887][ T7060] tipc: Started in network mode [ 122.148869][ T7060] tipc: Node identity , cluster identity 4711 [ 122.155847][ T7060] tipc: Failed to obtain node identity [ 122.161904][ T7060] tipc: Enabling of bearer rejected, failed to enable media [ 122.181305][ T7067] team0: Port device dummy0 added [ 122.281588][ T7072] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 122.325070][ T7072] team0: Failed to send options change via netlink (err -105) [ 122.338881][ T7072] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 122.362165][ T7072] team0: Port device dummy0 removed [ 122.380418][ T7072] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 122.650120][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.308'. [ 122.959937][ T7109] netlink: 140 bytes leftover after parsing attributes in process `syz.2.313'. [ 123.030162][ T7112] netlink: 'syz.3.315': attribute type 11 has an invalid length. [ 123.392306][ T7126] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 123.461335][ T7126] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 123.519969][ T7129] gretap1: entered promiscuous mode [ 123.529894][ T7129] bond1: (slave gretap1): making interface the new active one [ 123.538774][ T7129] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 123.561896][ T7130] macvlan2: entered promiscuous mode [ 123.567349][ T7130] macvlan2: entered allmulticast mode [ 123.574189][ T7130] bond1: entered promiscuous mode [ 123.580760][ T7130] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.594849][ T7130] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 123.609800][ T7130] bond1: left promiscuous mode [ 123.913469][ T7158] openvswitch: netlink: Message has 4 unknown bytes. [ 124.483355][ T7190] syz.0.337: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 124.520475][ T7190] CPU: 1 UID: 0 PID: 7190 Comm: syz.0.337 Not tainted syzkaller #0 PREEMPT(full) [ 124.520505][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.520526][ T7190] Call Trace: [ 124.520535][ T7190] [ 124.520545][ T7190] dump_stack_lvl+0x189/0x250 [ 124.520584][ T7190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.520607][ T7190] ? __pfx__printk+0x10/0x10 [ 124.520629][ T7190] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 124.520660][ T7190] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 124.520711][ T7190] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 124.520742][ T7190] warn_alloc+0x214/0x310 [ 124.520773][ T7190] ? stack_depot_save_flags+0x40/0x860 [ 124.520802][ T7190] ? __pfx_warn_alloc+0x10/0x10 [ 124.520833][ T7190] ? kasan_save_track+0x3e/0x80 [ 124.520859][ T7190] ? __kasan_kmalloc+0x93/0xb0 [ 124.520889][ T7190] ? xsk_setsockopt+0x4dc/0x8d0 [ 124.520908][ T7190] ? do_sock_setsockopt+0x17c/0x1b0 [ 124.520928][ T7190] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 124.520949][ T7190] ? do_syscall_64+0xfa/0xfa0 [ 124.520972][ T7190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.521002][ T7190] __vmalloc_node_range_noprof+0x125/0x12d0 [ 124.521061][ T7190] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 124.521093][ T7190] ? __kasan_kmalloc+0x93/0xb0 [ 124.521128][ T7190] vmalloc_user_noprof+0xad/0xf0 [ 124.521156][ T7190] ? xskq_create+0xbf/0x170 [ 124.521178][ T7190] xskq_create+0xbf/0x170 [ 124.521203][ T7190] xsk_init_queue+0xb0/0x110 [ 124.521226][ T7190] xsk_setsockopt+0x4dc/0x8d0 [ 124.521246][ T7190] ? __pfx_xsk_setsockopt+0x10/0x10 [ 124.521270][ T7190] ? __pfx_aa_sk_perm+0x10/0x10 [ 124.521298][ T7190] ? aa_sock_opt_perm+0xff/0x1b0 [ 124.521328][ T7190] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 124.521346][ T7190] ? __pfx_xsk_setsockopt+0x10/0x10 [ 124.521367][ T7190] do_sock_setsockopt+0x17c/0x1b0 [ 124.521410][ T7190] __x64_sys_setsockopt+0x13f/0x1b0 [ 124.521440][ T7190] do_syscall_64+0xfa/0xfa0 [ 124.521467][ T7190] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.521493][ T7190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.521514][ T7190] ? clear_bhb_loop+0x60/0xb0 [ 124.521540][ T7190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.521561][ T7190] RIP: 0033:0x7f6474b8eec9 [ 124.521589][ T7190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.521609][ T7190] RSP: 002b:00007f6475942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.521632][ T7190] RAX: ffffffffffffffda RBX: 00007f6474de5fa0 RCX: 00007f6474b8eec9 [ 124.521648][ T7190] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 124.521660][ T7190] RBP: 00007f6474c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 124.521686][ T7190] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.521699][ T7190] R13: 00007f6474de6038 R14: 00007f6474de5fa0 R15: 00007fff3f3018e8 [ 124.521733][ T7190] [ 124.817773][ T7190] Mem-Info: [ 124.905851][ T7190] active_anon:5718 inactive_anon:0 isolated_anon:0 [ 124.905851][ T7190] active_file:2629 inactive_file:39885 isolated_file:0 [ 124.905851][ T7190] unevictable:768 dirty:58 writeback:0 [ 124.905851][ T7190] slab_reclaimable:10446 slab_unreclaimable:97473 [ 124.905851][ T7190] mapped:29105 shmem:1356 pagetables:1211 [ 124.905851][ T7190] sec_pagetables:0 bounce:0 [ 124.905851][ T7190] kernel_misc_reclaimable:0 [ 124.905851][ T7190] free:1332563 free_pcp:16370 free_cma:0 [ 124.956121][ T7190] Node 0 active_anon:22872kB inactive_anon:0kB active_file:10516kB inactive_file:159332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116420kB dirty:228kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11964kB pagetables:4788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 124.972528][ T7199] pim6reg1: entered promiscuous mode [ 124.992931][ T7190] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 125.025118][ T7190] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.055575][ T7190] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 125.061461][ T7190] Node 0 DMA32 free:1423488kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22872kB inactive_anon:0kB active_file:10516kB inactive_file:159332kB unevictable:1536kB writepending:228kB zspages:0kB present:3129332kB managed:2561668kB mlocked:0kB bounce:0kB free_pcp:44148kB local_pcp:24176kB free_cma:0kB [ 125.102697][ T7190] lowmem_reserve[]: 0 0 1 1 1 [ 125.107486][ T7190] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.159769][ T7199] pim6reg1: entered allmulticast mode [ 125.177198][ T7208] __nla_validate_parse: 6 callbacks suppressed [ 125.177217][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.342'. [ 125.203465][ T7190] lowmem_reserve[]: 0 0 0 0 0 [ 125.208261][ T7190] Node 1 Normal free:3891404kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20836kB local_pcp:10724kB free_cma:0kB [ 125.260090][ T7190] lowmem_reserve[]: 0 0 0 0 0 [ 125.264997][ T7190] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 125.278183][ T7190] Node 0 DMA32: 1340*4kB (UME) 232*8kB (UME) 38*16kB (UM) 64*32kB (UME) 55*64kB (UME) 21*128kB (UM) 42*256kB (UM) 28*512kB (UME) 16*1024kB (UME) 15*2048kB (UM) 326*4096kB (UM) = 1423568kB [ 125.312453][ T7190] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 125.417645][ T7200] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 125.429718][ T7190] Node 1 Normal: 217*4kB (UME) 49*8kB (UME) 42*16kB (UME) 76*32kB (UME) 21*64kB (UME) 7*128kB (UME) 3*256kB (UM) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3891404kB [ 125.448679][ T7190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.460349][ T7190] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.530316][ T7190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.554577][ T7190] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.565446][ T7190] 45966 total pagecache pages [ 125.575187][ T7190] 0 pages in swap cache [ 125.589511][ T7190] Free swap = 124996kB [ 125.593727][ T7190] Total swap = 124996kB [ 125.608147][ T7190] 2097051 pages RAM [ 125.618290][ T7190] 0 pages HighMem/MovableOnly [ 125.630840][ T7190] 424544 pages reserved [ 125.635069][ T7190] 0 pages cma reserved [ 125.655656][ T7200] bond2 (unregistering): Released all slaves [ 125.728256][ T7218] validate_nla: 48 callbacks suppressed [ 125.728273][ T7218] netlink: 'syz.2.345': attribute type 29 has an invalid length. [ 125.980598][ T7241] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.350'. [ 126.005849][ T7242] syzkaller0: entered promiscuous mode [ 126.012921][ T7242] syzkaller0: entered allmulticast mode [ 126.025036][ T7241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.064475][ T7242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.180904][ T7250] netlink: 10 bytes leftover after parsing attributes in process `syz.0.353'. [ 126.281573][ T7256] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 126.529547][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 126.668823][ T7273] netlink: 52 bytes leftover after parsing attributes in process `syz.4.361'. [ 126.685039][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.361'. [ 126.694164][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.361'. [ 126.711790][ T7273] bridge0: port 2(vlan0) entered blocking state [ 126.718339][ T7273] bridge0: port 2(vlan0) entered disabled state [ 126.725914][ T7273] vlan0: entered allmulticast mode [ 126.734764][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 126.745228][ T7273] bridge0: entered allmulticast mode [ 126.757562][ T7273] vlan0: left allmulticast mode [ 126.763452][ T7273] bridge0: left allmulticast mode [ 126.787225][ T7277] bridge_slave_1: left allmulticast mode [ 126.794845][ T7277] bridge_slave_1: left promiscuous mode [ 126.802436][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.838802][ T7277] bridge_slave_0: left allmulticast mode [ 126.841450][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 126.856070][ T7277] bridge_slave_0: left promiscuous mode [ 126.875405][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.052522][ T7278] netlink: 'syz.2.362': attribute type 12 has an invalid length. [ 127.335807][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.369'. [ 127.427409][ T7310] tipc: Enabling of bearer rejected, failed to enable media [ 128.089557][ T7356] sctp: [Deprecated]: syz.0.380 (pid 7356) Use of int in max_burst socket option deprecated. [ 128.089557][ T7356] Use struct sctp_assoc_value instead [ 128.106859][ T7357] sctp: [Deprecated]: syz.0.380 (pid 7357) Use of int in max_burst socket option deprecated. [ 128.106859][ T7357] Use struct sctp_assoc_value instead [ 128.145629][ T7359] block nbd4: not configured, cannot reconfigure [ 128.216483][ T7359] bond2: option all_slaves_active: invalid value (64) [ 128.225903][ T7359] bond2 (unregistering): Released all slaves [ 129.078850][ T7402] 8021q: VLANs not supported on ip_vti0 [ 129.196574][ T7412] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 129.270687][ T7416] xt_socket: unknown flags 0x50 [ 129.432496][ T7421] Bluetooth: hci0: unsupported parameter 33553 [ 129.448970][ T7421] Bluetooth: hci0: invalid length 5, exp 2 for type 8 [ 129.699192][ T7433] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 129.729102][ T7437] netlink: 'syz.0.409': attribute type 11 has an invalid length. [ 129.756903][ T7437] netlink: 'syz.0.409': attribute type 5 has an invalid length. [ 129.883235][ T7445] netlink: 'syz.0.411': attribute type 1 has an invalid length. [ 129.958058][ T7445] bond2 (unregistering): Released all slaves [ 130.066173][ T7461] trusted_key: syz.3.414 sent an empty control message without MSG_MORE. [ 130.104663][ T7455] ip6tnl1: entered promiscuous mode [ 130.117123][ T7455] ip6tnl1: entered allmulticast mode [ 130.174120][ T7418] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 130.240876][ T7468] netlink: 'syz.1.415': attribute type 1 has an invalid length. [ 130.347230][ T7474] __nla_validate_parse: 12 callbacks suppressed [ 130.347252][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 130.449640][ T7480] x_tables: duplicate underflow at hook 1 [ 130.567454][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 130.656607][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 130.666547][ T7496] netlink: 'syz.4.424': attribute type 11 has an invalid length. [ 130.671405][ T7468] gretap1: entered promiscuous mode [ 130.679846][ T7468] gretap1: entered allmulticast mode [ 130.704297][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.714998][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.746063][ T37] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.770885][ T37] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.965524][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 131.201382][ T7525] netlink: 56 bytes leftover after parsing attributes in process `syz.1.434'. [ 131.241403][ T7529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.435'. [ 131.254991][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'. [ 131.267426][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'. [ 131.399922][ T5830] Bluetooth: hci1: command 0x0401 tx timeout [ 131.581179][ T7548] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 131.589125][ T7548] netlink: 224 bytes leftover after parsing attributes in process `syz.4.441'. [ 131.598220][ T7548] nbd: couldn't find device at index 1048576 [ 131.607162][ T7548] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 131.625057][ T7550] netlink: 44 bytes leftover after parsing attributes in process `syz.2.440'. [ 131.634998][ T7550] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 131.767960][ T7554] tipc: Started in network mode [ 131.773205][ T7554] tipc: Node identity ba70f1e7e55, cluster identity 4711 [ 131.783400][ T7554] tipc: Enabled bearer , priority 0 [ 131.790634][ T7555] tipc: Enabling of bearer rejected, already enabled [ 131.801103][ T7554] syzkaller0: entered promiscuous mode [ 131.807411][ T7554] syzkaller0: entered allmulticast mode [ 131.819712][ T7557] IPVS: ip_vs_edit_dest(): server weight less than zero [ 131.872010][ T7555] tipc: Resetting bearer [ 131.901086][ T7553] tipc: Resetting bearer [ 131.926450][ T7553] tipc: Disabling bearer [ 131.945455][ T7560] ip6gretap0: entered promiscuous mode [ 132.304771][ T7576] bond2: ARP target 1.0.0.0 is already present [ 132.311341][ T7576] bond2: option arp_ip_target: invalid value (1) [ 132.323131][ T7576] bond2 (unregistering): Released all slaves [ 132.466955][ T7589] ipt_rpfilter: unknown options [ 132.765075][ T7594] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.766150][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.782604][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.167897][ T7610] syzkaller0: entered promiscuous mode [ 133.174380][ T7610] syzkaller0: entered allmulticast mode [ 133.847179][ T7641] netlink: 'syz.0.471': attribute type 11 has an invalid length. [ 133.896178][ T7641] netlink: 'syz.0.471': attribute type 11 has an invalid length. [ 133.906514][ T7647] xt_TCPMSS: Only works on TCP SYN packets [ 133.980647][ T5830] Bluetooth: hci4: link tx timeout [ 133.986104][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.121705][ T5835] Bluetooth: hci4: link tx timeout [ 134.126966][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.135043][ T5835] Bluetooth: hci4: link tx timeout [ 134.141243][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.688895][ T7692] netlink: 'syz.2.484': attribute type 1 has an invalid length. [ 134.968356][ T7709] bridge_slave_1: left allmulticast mode [ 134.995216][ T7709] bridge_slave_1: left promiscuous mode [ 135.019902][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.072872][ T7709] bridge_slave_0: left allmulticast mode [ 135.090007][ T7709] bridge_slave_0: left promiscuous mode [ 135.096015][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.768678][ T7758] __nla_validate_parse: 18 callbacks suppressed [ 135.768698][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 135.822832][ T7763] netlink: 44 bytes leftover after parsing attributes in process `syz.2.500'. [ 135.848647][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 135.880957][ T7763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.500'. [ 136.041294][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 136.066244][ T7764] bridge3: port 1(bond2) entered blocking state [ 136.075130][ T7764] bridge3: port 1(bond2) entered disabled state [ 136.082315][ T7764] bond2: entered allmulticast mode [ 136.102637][ T7764] bond2: entered promiscuous mode [ 136.113197][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 136.258636][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 136.439162][ T7795] batman_adv: batadv0: Adding interface: dummy0 [ 136.459368][ T7795] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.473864][ T7799] netlink: 68 bytes leftover after parsing attributes in process `syz.4.511'. [ 136.498236][ T7795] batman_adv: batadv0: Interface activated: dummy0 [ 136.722602][ T7815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.516'. [ 136.853155][ T7828] tipc: Started in network mode [ 136.874623][ T7828] tipc: Node identity 563800fdb351, cluster identity 4711 [ 136.887221][ T7828] tipc: Enabled bearer , priority 0 [ 136.914001][ T7828] syzkaller0: entered promiscuous mode [ 136.944468][ T7828] syzkaller0: entered allmulticast mode [ 136.956838][ T7836] netlink: 'syz.1.520': attribute type 29 has an invalid length. [ 136.968086][ T7836] netlink: 'syz.1.520': attribute type 29 has an invalid length. [ 136.985571][ T7836] nft_compat: unsupported protocol 0 [ 136.997709][ T7828] tipc: Resetting bearer [ 137.007056][ T7836] netlink: 500 bytes leftover after parsing attributes in process `syz.1.520'. [ 137.029052][ T7825] tipc: Resetting bearer [ 137.052512][ T7825] tipc: Disabling bearer [ 137.292761][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'. [ 137.394813][ T7855] Driver unsupported XDP return value 0 on prog (id 98) dev N/A, expect packet loss! [ 137.408195][ T7853] lo: left promiscuous mode [ 137.414393][ T7853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.446972][ T7857] tipc: Enabling of bearer rejected, failed to enable media [ 137.877905][ T7869] netlink: 'syz.0.534': attribute type 1 has an invalid length. [ 138.228541][ T7877] tipc: Enabled bearer , priority 0 [ 138.280070][ T7877] syzkaller0: entered promiscuous mode [ 138.285615][ T7877] syzkaller0: entered allmulticast mode [ 138.359333][ C0] syzkaller0: tun_net_xmit 90 [ 138.393418][ T7887] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.419413][ T7887] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 138.460338][ T7877] tipc: Resetting bearer [ 138.467164][ C0] syzkaller0: tun_net_xmit 90 [ 138.472062][ C0] syzkaller0: tun_net_xmit 90 [ 138.554258][ T7874] tipc: Resetting bearer [ 138.572236][ T7887] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.598145][ T7887] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 138.646750][ T7887] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.658251][ T7874] tipc: Disabling bearer [ 138.666568][ T7887] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 138.724066][ T7887] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 138.748752][ T7887] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 138.928268][ T7887] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 138.951506][ T7887] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 139.162146][ T7940] block nbd0: not configured, cannot reconfigure [ 140.077013][ T7989] sctp: [Deprecated]: syz.0.559 (pid 7989) Use of int in max_burst socket option. [ 140.077013][ T7989] Use struct sctp_assoc_value instead [ 140.635224][ T8022] openvswitch: netlink: Message has 4 unknown bytes. [ 141.353035][ T8065] tipc: Enabled bearer , priority 0 [ 141.360223][ T8066] tipc: Enabling of bearer rejected, already enabled [ 141.413369][ T8065] syzkaller0: entered promiscuous mode [ 141.418899][ T8065] syzkaller0: entered allmulticast mode [ 141.442870][ T8065] tipc: Resetting bearer [ 141.450387][ T8064] tipc: Resetting bearer [ 141.570116][ T8080] rdma_op ffff8880217a91f0 conn xmit_rdma 0000000000000000 [ 141.671055][ T8085] __nla_validate_parse: 9 callbacks suppressed [ 141.671074][ T8085] netlink: 236 bytes leftover after parsing attributes in process `syz.0.583'. [ 142.432986][ T981] tipc: Node number set to 2836660444 [ 142.830162][ T8064] tipc: Disabling bearer [ 142.844728][ T8080] netlink: 80 bytes leftover after parsing attributes in process `syz.3.586'. [ 143.063337][ T8096] netlink: zone id is out of range [ 143.068516][ T8096] netlink: zone id is out of range [ 143.079823][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 143.101970][ T8096] netlink: zone id is out of range [ 143.107940][ T8096] netlink: zone id is out of range [ 143.114397][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.588'. [ 143.128505][ T8096] netlink: zone id is out of range [ 143.155403][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 143.175639][ T8096] netlink: zone id is out of range [ 143.182036][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.588'. [ 143.225798][ T8096] netlink: zone id is out of range [ 143.249386][ T8096] netlink: zone id is out of range [ 143.309370][ T8096] netlink: zone id is out of range [ 143.432214][ T8115] netlink: 104 bytes leftover after parsing attributes in process `syz.4.594'. [ 143.714882][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.598'. [ 144.311687][ T8169] ip6t_srh: unknown srh match flags 5F28 [ 144.464035][ T8175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.607'. [ 144.599467][ T8179] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 144.628079][ T8177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.608'. [ 144.831547][ T8194] tipc: Enabled bearer , priority 0 [ 144.838928][ T8194] geneve1: entered promiscuous mode [ 144.849807][ T8194] geneve1: entered allmulticast mode [ 144.991221][ T8194] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 145.015937][ T8208] tipc: Resetting bearer [ 145.891598][ T981] tipc: Node number set to 1595994599 [ 146.406782][ T8193] tipc: Disabling bearer [ 146.721146][ T8254] syzkaller1: entered promiscuous mode [ 146.734652][ T8254] syzkaller1: entered allmulticast mode [ 146.956969][ T8267] tipc: Can't bind to reserved service type 0 [ 147.115179][ T8272] __nla_validate_parse: 3 callbacks suppressed [ 147.115200][ T8272] netlink: 108 bytes leftover after parsing attributes in process `syz.0.629'. [ 147.178163][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 147.197915][ T8272] netlink: 108 bytes leftover after parsing attributes in process `syz.0.629'. [ 147.224245][ T8283] netlink: 'syz.3.631': attribute type 2 has an invalid length. [ 147.246244][ T8272] netlink: 84 bytes leftover after parsing attributes in process `syz.0.629'. [ 147.275927][ T8275] team0: Device vti0 is of different type [ 147.339591][ T8278] gtp0: entered promiscuous mode [ 147.351210][ T8278] gtp0: entered allmulticast mode [ 147.647090][ T8311] team_slave_0: entered promiscuous mode [ 147.653106][ T8311] team_slave_1: entered promiscuous mode [ 147.693058][ T8311] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.773812][ T8311] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 149.003888][ T8384] x_tables: duplicate underflow at hook 2 [ 149.258699][ T8397] netlink: 32 bytes leftover after parsing attributes in process `syz.2.659'. [ 149.321921][ T8397] netlink: 32 bytes leftover after parsing attributes in process `syz.2.659'. [ 149.616943][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 149.702174][ T8413] veth0_macvtap: left promiscuous mode [ 149.795326][ T8422] dvmrp0: entered allmulticast mode [ 149.806298][ T8423] dvmrp0: left allmulticast mode [ 150.091757][ T8431] syzkaller0: entered promiscuous mode [ 150.097448][ T8431] syzkaller0: entered allmulticast mode [ 150.592886][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.681'. [ 150.603036][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.681'. [ 150.715595][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 151.128520][ T8509] netlink: 'syz.4.692': attribute type 7 has an invalid length. [ 151.853654][ T8559] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 151.872154][ T8561] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 4, id = 0 [ 151.908593][ T8559] netlink: 'syz.1.708': attribute type 11 has an invalid length. [ 152.401614][ T8600] tipc: Started in network mode [ 152.406826][ T8600] tipc: Node identity d61c98f94063, cluster identity 4711 [ 152.418659][ T8600] tipc: Enabled bearer , priority 0 [ 152.437390][ T8600] tipc: Resetting bearer [ 152.447624][ T8602] net_ratelimit: 17 callbacks suppressed [ 152.447644][ T8602] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 152.491506][ T8597] tipc: Disabling bearer [ 152.500539][ T8602] netlink: 'syz.4.721': attribute type 1 has an invalid length. [ 152.523651][ T8602] __nla_validate_parse: 9 callbacks suppressed [ 152.523712][ T8602] netlink: 220 bytes leftover after parsing attributes in process `syz.4.721'. [ 152.629820][ T8611] netlink: 'syz.1.724': attribute type 8 has an invalid length. [ 152.642985][ T8610] netlink: 'syz.1.724': attribute type 8 has an invalid length. [ 152.743224][ T8608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.774536][ T8608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.818076][ T8620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 152.893114][ T8608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.903830][ T8608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.052564][ T8608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.064230][ T8608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.154854][ T8639] netlink: 236 bytes leftover after parsing attributes in process `syz.0.731'. [ 153.225301][ T8608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.289449][ T8608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.590252][ T8650] "syz.1.734" (8650) uses obsolete ecb(arc4) skcipher [ 153.715156][ T37] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.734508][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.767904][ T37] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.784725][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.838629][ T1164] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.852585][ T1164] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.930526][ T37] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.938761][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.432686][ T8669] netlink: 14 bytes leftover after parsing attributes in process `syz.1.739'. [ 154.885394][ T8669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.907579][ T8669] bond_slave_0: left promiscuous mode [ 154.921626][ T8669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.942398][ T8669] bond_slave_1: left promiscuous mode [ 154.958994][ T8669] bond0 (unregistering): Released all slaves [ 155.071547][ T8695] macvtap1: entered allmulticast mode [ 155.077000][ T8695] veth0_macvtap: entered allmulticast mode [ 155.088547][ T8696] netlink: 'syz.4.743': attribute type 10 has an invalid length. [ 155.098435][ T8696] bond0: (slave ÿ): Opening slave failed [ 155.245245][ T8699] netlink: 'syz.0.747': attribute type 3 has an invalid length. [ 155.253820][ T8701] netlink: 277 bytes leftover after parsing attributes in process `syz.2.748'. [ 155.728843][ T8725] netlink: 100 bytes leftover after parsing attributes in process `syz.1.755'. [ 155.861707][ T8739] syzkaller0: create flow: hash 2566323901 index 2 [ 155.984775][ T8746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.761'. [ 156.015398][ T8746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.761'. [ 156.059392][ T8744] syzkaller0: delete flow: hash 2566323901 index 2 [ 156.074248][ T6972] syzkaller0: tun_net_xmit 76 [ 156.111984][ T6972] syzkaller0: tun_net_xmit 48 [ 156.117308][ T981] syzkaller0: tun_net_xmit 76 [ 156.227365][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 156.239062][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 157.572511][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 157.620503][ T8794] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 157.646001][ T8795] ip6tnl1: entered promiscuous mode [ 157.652201][ T8795] ip6tnl1: entered allmulticast mode [ 157.792886][ T8794] bond2 (unregistering): Released all slaves [ 158.022073][ T8808] sctp: [Deprecated]: syz.0.779 (pid 8808) Use of int in max_burst socket option deprecated. [ 158.022073][ T8808] Use struct sctp_assoc_value instead [ 158.238762][ T8824] netlink: 284 bytes leftover after parsing attributes in process `syz.3.782'. [ 158.333041][ T8821] netlink: 284 bytes leftover after parsing attributes in process `syz.3.782'. [ 158.823794][ T8862] netlink: 'syz.0.792': attribute type 10 has an invalid length. [ 158.973049][ T8872] xt_policy: output policy not valid in PREROUTING and INPUT [ 159.011261][ T8876] netlink: 'syz.3.794': attribute type 10 has an invalid length. [ 159.128191][ T8876] bond0: (slave wlan1): Opening slave failed [ 159.618483][ T8900] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 159.648485][ T8902] netlink: 'syz.2.805': attribute type 1 has an invalid length. [ 159.656966][ T8900] bond2: entered promiscuous mode [ 159.663145][ T8900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.938918][ T8914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.060430][ T8920] netlink: 'syz.3.810': attribute type 1 has an invalid length. [ 160.068295][ T8920] netlink: 'syz.3.810': attribute type 10 has an invalid length. [ 160.099421][ T8918] veth0_virt_wifi: renamed from ipvlan1 [ 160.140672][ T8920] netlink: 236 bytes leftover after parsing attributes in process `syz.3.810'. [ 160.190913][ T8924] netlink: 176 bytes leftover after parsing attributes in process `syz.1.811'. [ 160.281313][ T8924] syzkaller0: entered promiscuous mode [ 160.286912][ T8924] syzkaller0: entered allmulticast mode [ 160.554396][ T8944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.817'. [ 160.577171][ T8945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.817'. [ 160.772065][ T8956] netlink: 'syz.2.819': attribute type 1 has an invalid length. [ 161.157279][ T8976] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 161.271099][ T8976] bond3: option all_slaves_active: invalid value (222) [ 161.280854][ T8976] bond3 (unregistering): Released all slaves [ 161.315442][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'. [ 161.434173][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.829'. [ 161.452857][ T8991] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 161.800942][ T9012] netlink: zone id is out of range [ 161.821434][ T9012] netlink: del zone limit has 4 unknown bytes [ 161.953720][ T9019] netlink: 76 bytes leftover after parsing attributes in process `syz.3.837'. [ 162.780803][ T9065] __nla_validate_parse: 3 callbacks suppressed [ 162.780822][ T9065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.850'. [ 162.821632][ T9065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.850'. [ 162.845010][ T9066] tipc: Enabling of bearer rejected, media not registered [ 162.963064][ T9071] netlink: 'syz.0.850': attribute type 25 has an invalid length. [ 163.207421][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 163.235583][ T9091] netlink: 'syz.4.856': attribute type 12 has an invalid length. [ 163.246493][ T9091] netlink: 132 bytes leftover after parsing attributes in process `syz.4.856'. [ 163.287204][ T9087] openvswitch: netlink: Flow actions attr not present in new flow. [ 163.472878][ T9100] netlink: 'syz.4.857': attribute type 1 has an invalid length. [ 163.485825][ T5830] Bluetooth: hci0: command tx timeout [ 163.550481][ T9100] netlink: 224 bytes leftover after parsing attributes in process `syz.4.857'. [ 163.617860][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 163.650444][ T9107] netlink: 48 bytes leftover after parsing attributes in process `syz.4.857'. [ 163.707063][ T9100] netlink: 48 bytes leftover after parsing attributes in process `syz.4.857'. [ 163.964011][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.861'. [ 164.162360][ T9133] netlink: 'syz.4.866': attribute type 13 has an invalid length. [ 164.184430][ T9132] netlink: 576 bytes leftover after parsing attributes in process `syz.3.864'. [ 164.422569][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.433627][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.479354][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.504078][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.601469][ T9159] syz.2.871 (9159) used greatest stack depth: 15096 bytes left [ 164.861513][ T9168] block nbd0: server does not support multiple connections per device. [ 164.883566][ T9168] block nbd0: shutting down sockets [ 164.910123][ T9167] openvswitch: netlink: IP tunnel dst address not specified [ 164.948894][ T9172] netlink: 'syz.0.880': attribute type 33 has an invalid length. [ 164.982735][ T9167] netlink: 'syz.4.878': attribute type 21 has an invalid length. [ 165.053502][ T9181] bond3: entered promiscuous mode [ 165.246735][ T9191] dvmrp0: entered allmulticast mode [ 165.257339][ T9191] dvmrp0: left allmulticast mode [ 165.585588][ T9204] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 165.971023][ T9238] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 166.323975][ T9261] netlink: 'syz.0.908': attribute type 1 has an invalid length. [ 166.338485][ T9262] netlink: 'syz.0.908': attribute type 1 has an invalid length. [ 166.557229][ T9281] netlink: 'syz.3.913': attribute type 10 has an invalid length. [ 166.581679][ T9281] bond0: (slave wlan1): Opening slave failed [ 166.705174][ T9293] netlink: 'syz.2.912': attribute type 10 has an invalid length. [ 166.732719][ T9293] !: entered promiscuous mode [ 166.746741][ T9293] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 166.766403][ T9297] hsr0 speed is unknown, defaulting to 1000 [ 166.780731][ T9297] hsr0 speed is unknown, defaulting to 1000 [ 166.788335][ T9297] hsr0 speed is unknown, defaulting to 1000 [ 166.805702][ T9297] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 166.880617][ T9297] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 166.935735][ T9301] macvtap2: entered promiscuous mode [ 166.941538][ T9301] vlan0: entered promiscuous mode [ 166.947203][ T9301] macvtap2: entered allmulticast mode [ 166.953960][ T9301] vlan0: entered allmulticast mode [ 166.963133][ T9301] veth0_vlan: entered allmulticast mode [ 166.973008][ T9297] hsr0 speed is unknown, defaulting to 1000 [ 166.984779][ T9297] hsr0 speed is unknown, defaulting to 1000 [ 166.994639][ T9297] hsr0 speed is unknown, defaulting to 1000 [ 167.005717][ T9297] hsr0 speed is unknown, defaulting to 1000 [ 167.014516][ T9297] hsr0 speed is unknown, defaulting to 1000 [ 167.863613][ T9355] __nla_validate_parse: 12 callbacks suppressed [ 167.863635][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.935'. [ 167.968126][ T9366] netlink: 204 bytes leftover after parsing attributes in process `syz.0.939'. [ 168.118519][ T9380] netlink: 100 bytes leftover after parsing attributes in process `syz.2.940'. [ 168.361030][ T9397] tipc: Enabled bearer , priority 0 [ 168.433871][ T9397] syzkaller0: entered promiscuous mode [ 168.447231][ T9397] syzkaller0: entered allmulticast mode [ 168.454254][ T9397] tipc: Resetting bearer [ 168.480330][ T9396] tipc: Resetting bearer [ 168.548663][ T9409] netlink: 96 bytes leftover after parsing attributes in process `syz.3.952'. [ 169.021639][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'. [ 169.460670][ T24] tipc: Node number set to 3848863997 [ 169.778968][ T9396] tipc: Disabling bearer [ 169.978187][ T9445] vlan4: entered allmulticast mode [ 169.984499][ T9445] bridge_slave_0: entered allmulticast mode [ 170.047913][ T9446] bond0: Unable to set down delay as MII monitoring is disabled [ 170.061631][ T9446] bond0 (unregistering): Released all slaves [ 170.077144][ T9441] netlink: 104 bytes leftover after parsing attributes in process `syz.3.958'. [ 170.447043][ T9473] ip6gre0: Master is either lo or non-ether device [ 170.566680][ T5892] IPVS: starting estimator thread 0... [ 170.595313][ T9478] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 170.659619][ T9479] IPVS: using max 31 ests per chain, 74400 per kthread [ 170.885796][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.972'. [ 171.092423][ T9503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.975'. [ 171.295010][ T9516] sctp: [Deprecated]: syz.2.977 (pid 9516) Use of int in max_burst socket option deprecated. [ 171.295010][ T9516] Use struct sctp_assoc_value instead [ 171.311717][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'. [ 171.323382][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 171.415194][ T9516] dvmrp0: entered allmulticast mode [ 171.449742][ T9517] dvmrp0: left allmulticast mode [ 171.502793][ T9531] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 172.127290][ T9573] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 172.287773][ T9573] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.406556][ T9587] netlink: 'syz.4.1000': attribute type 10 has an invalid length. [ 172.491909][ T9596] Bluetooth: MGMT ver 1.23 [ 173.092224][ T9640] __nla_validate_parse: 7 callbacks suppressed [ 173.092243][ T9640] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1011'. [ 173.287269][ T9644] netlink: 'syz.4.1012': attribute type 10 has an invalid length. [ 173.310781][ T9644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1012'. [ 173.656896][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 173.667987][ T9644] team0: Port device geneve0 added [ 173.748998][ T3033] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.768990][ T9663] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1018'. [ 173.782322][ T3033] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.819507][ T3033] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.828273][ T3033] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.929363][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1022'. [ 174.050376][ T9685] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 174.060360][ T8855] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.086837][ T8855] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.133776][ T8855] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.175428][ T8855] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.528703][ T9718] netlink: 'syz.0.1028': attribute type 1 has an invalid length. [ 174.537128][ T9718] netlink: 'syz.0.1028': attribute type 1 has an invalid length. [ 175.268860][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1038'. [ 175.330672][ T9763] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 175.469806][ T9771] Bluetooth: MGMT ver 1.23 [ 175.496008][ T9769] tipc: Enabling of bearer rejected, failed to enable media [ 175.872565][ T9801] team_slave_0: left promiscuous mode [ 175.918782][ T9801] team0: Port device team_slave_0 removed [ 175.967247][ T9801] team_slave_1: left promiscuous mode [ 175.992012][ T9801] team0: Port device team_slave_1 removed [ 176.027607][ T9801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.041780][ T9801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.053884][ T9801] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 176.080981][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 176.090215][ T9789] bond_slave_0: mtu less than device minimum [ 176.147391][ T9803] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 176.266668][ T9815] netlink: 'syz.0.1053': attribute type 4 has an invalid length. [ 176.760171][ T9849] netlink: 'syz.4.1062': attribute type 21 has an invalid length. [ 176.879995][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 177.065704][ T9862] netlink: 'syz.3.1065': attribute type 15 has an invalid length. [ 177.128307][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1064'. [ 177.144143][ T9837] IPVS: persistence engine module ip_vs_pe_À not found [ 177.353270][ T9881] netlink: 'syz.1.1067': attribute type 6 has an invalid length. [ 177.367192][ T9881] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 177.377455][ T9881] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1067'. [ 177.687587][ T5493] veth1_vlan: left promiscuous mode [ 177.744489][ T9901] netlink: 'syz.1.1073': attribute type 14 has an invalid length. [ 177.940330][ T9910] x_tables: duplicate underflow at hook 3 [ 178.198364][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1081'. [ 178.261388][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 178.285003][ T9932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1084'. [ 178.309665][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 178.332336][ T9932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1084'. [ 178.363968][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 178.386535][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 178.532604][ T9947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1088'. [ 179.290737][ T9990] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 179.307519][ T9997] netlink: 'syz.4.1101': attribute type 2 has an invalid length. [ 179.322824][ T9990] bond0: option packets_per_slave: allowed values 0 - 65535 [ 179.356268][ T9990] bond0 (unregistering): Released all slaves [ 179.372251][ T9997] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.1101'. [ 179.386303][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 179.445138][T10005] netlink: 'syz.2.1100': attribute type 1 has an invalid length. [ 179.492955][ T9989] hsr0 speed is unknown, defaulting to 1000 [ 180.726230][T10074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.078718][T10098] nbd: must specify an index to disconnect [ 181.441622][T10109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.790399][T10124] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.809169][T10124] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.953529][T10124] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.970130][T10124] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.136173][T10124] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.162090][T10124] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.303936][T10124] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.314035][T10161] netlink: 'syz.0.1136': attribute type 6 has an invalid length. [ 182.324807][T10124] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.363264][T10163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.507120][ T6972] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.531912][ T6972] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.593835][ T6972] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.615313][ T6972] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.696863][ T3033] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.706305][ T3033] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.732173][T10187] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 182.774828][T10187] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 182.803646][ T3033] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.835234][ T3033] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.959091][T10199] team0: Device vti0 is of different type [ 183.378728][T10229] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 183.473139][T10235] __nla_validate_parse: 14 callbacks suppressed [ 183.473158][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'. [ 184.341896][T10275] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1162'. [ 184.352216][T10275] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1162'. [ 184.361774][T10275] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1162'. [ 184.390717][T10275] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1162'. [ 184.409652][T10275] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1162'. [ 184.456764][T10275] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1162'. [ 184.478461][T10292] sock: sock_timestamping_bind_phc: sock not bind to device [ 184.487075][T10275] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1162'. [ 184.538990][T10275] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1162'. [ 184.562851][T10275] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1162'. [ 184.842759][T10314] bond3: invalid ARP target 0.0.0.0 specified for addition [ 184.850564][T10314] bond3: option arp_ip_target: invalid value (0) [ 184.860382][T10314] bond3 (unregistering): Released all slaves [ 184.917350][T10311] syzkaller0: entered promiscuous mode [ 184.937437][T10311] syzkaller0: entered allmulticast mode [ 185.307489][T10343] gretap0: entered promiscuous mode [ 185.372389][T10350] 0ªî{X¹¦: renamed from gretap0 [ 185.415509][T10350] 0ªî{X¹¦: left promiscuous mode [ 185.443022][T10350] 0ªî{X¹¦: entered allmulticast mode [ 185.483815][T10350] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 185.977290][T10389] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.102252][T10389] syzkaller1: entered promiscuous mode [ 186.107922][T10389] syzkaller1: entered allmulticast mode [ 186.122987][T10389] netlink: 'syz.4.1196': attribute type 1 has an invalid length. [ 186.301964][ T981] IPVS: starting estimator thread 0... [ 186.320801][T10415] IPv6: sit3: Disabled Multicast RS [ 186.327724][T10415] sit3: entered allmulticast mode [ 186.335461][T10418] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 186.373325][T10419] IPVS: rr: FWM 3 0x00000003 - no destination available [ 186.412279][T10417] IPVS: using max 28 ests per chain, 67200 per kthread [ 186.477443][T10424] netlink: 'syz.1.1206': attribute type 32 has an invalid length. [ 186.534184][T10424] bond0: option coupled_control: invalid value (27) [ 186.543706][T10424] bond0 (unregistering): Released all slaves [ 186.705858][T10434] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 186.715028][T10434] tipc: Enabled bearer , priority 10 [ 187.164981][T10462] tipc: Enabled bearer , priority 0 [ 187.185209][T10467] syzkaller0: entered promiscuous mode [ 187.233930][T10467] syzkaller0: entered allmulticast mode [ 187.309060][T10462] tipc: Resetting bearer [ 187.356811][T10462] tipc: Disabling bearer [ 187.363903][T10484] netlink: 'syz.4.1224': attribute type 39 has an invalid length. [ 187.608681][T10496] veth1_macvtap: left promiscuous mode [ 187.616796][T10496] macsec0: entered allmulticast mode [ 187.802974][T10502] sctp: [Deprecated]: syz.1.1231 (pid 10502) Use of int in maxseg socket option. [ 187.802974][T10502] Use struct sctp_assoc_value instead [ 187.840427][ T5894] tipc: Node number set to 2524944633 [ 187.899467][T10510] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 188.044876][T10520] IPv6: sit3: Disabled Multicast RS [ 188.079630][T10520] sit3: entered allmulticast mode [ 188.375728][T10537] net veth1_virt_wifi .: renamed from virt_wifi0 [ 188.666669][T10555] __nla_validate_parse: 36 callbacks suppressed [ 188.666689][T10555] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1249'. [ 188.878148][T10565] netlink: 'syz.1.1252': attribute type 1 has an invalid length. [ 188.889028][T10568] Unknown options in mask b7f2 [ 188.901006][T10565] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1252'. [ 188.921039][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1253'. [ 189.144409][T10580] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1257'. [ 189.284427][T10586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1258'. [ 189.426714][T10586] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1258'. [ 189.460261][T10600] netlink: 'syz.0.1262': attribute type 8 has an invalid length. [ 189.962849][ T5830] Bluetooth: hci0: command tx timeout [ 190.045377][T10635] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 190.054382][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1271'. [ 190.054407][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'. [ 190.054434][T10641] netlink: 'syz.2.1271': attribute type 20 has an invalid length. [ 190.075480][ T8855] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.112104][ T8855] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.150538][ T8855] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.180303][ T8855] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.487635][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'. [ 190.490529][T10664] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 191.112161][T10707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.179451][T10707] veth0: entered promiscuous mode [ 191.234981][T10706] veth0: left promiscuous mode [ 191.274771][T10718] pimreg: entered allmulticast mode [ 191.372234][T10724] netlink: 'syz.1.1300': attribute type 11 has an invalid length. [ 191.771063][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1305'. [ 191.875043][T10750] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 192.957124][T10807] syzkaller1: entered promiscuous mode [ 192.963148][T10807] syzkaller1: entered allmulticast mode [ 193.295037][T10805] vlan0 (unregistering): left allmulticast mode [ 193.303531][T10805] veth0_vlan (unregistering): left allmulticast mode [ 193.310953][T10805] vlan0 (unregistering): left promiscuous mode [ 193.684148][T10809] tipc: Enabled bearer , priority 0 [ 193.697315][T10811] nicvf0: entered promiscuous mode [ 193.703858][T10811] nicvf0: entered allmulticast mode [ 193.816194][T10815] syzkaller1: entered promiscuous mode [ 193.823277][T10815] syzkaller1: entered allmulticast mode [ 193.901465][T10811] tipc: Disabling bearer [ 194.210426][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.219114][ T1301] aoe: packet could not be sent on veth0_virt_wifi. consider increasing tx_queue_len [ 194.269064][T10851] hsr0 speed is unknown, defaulting to 1000 [ 194.417224][T10857] __nla_validate_parse: 1 callbacks suppressed [ 194.417243][T10857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1335'. [ 194.965137][T10878] vlan0: entered allmulticast mode [ 194.972449][T10878] bond0: entered allmulticast mode [ 194.977615][T10878] bond_slave_0: entered allmulticast mode [ 194.984024][T10878] bond_slave_1: entered allmulticast mode [ 194.991230][T10878] dummy0: entered allmulticast mode [ 195.141815][T10886] netlink: 'syz.2.1341': attribute type 1 has an invalid length. [ 195.424447][T10901] netlink: 'syz.3.1347': attribute type 1 has an invalid length. [ 195.440061][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 195.558557][T10901] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.667007][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'. [ 195.850603][T10922] netlink: 'syz.4.1350': attribute type 3 has an invalid length. [ 195.890148][T10922] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1350'. [ 195.910721][T10932] netlink: 'syz.1.1353': attribute type 1 has an invalid length. [ 195.926278][T10937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1351'. [ 195.939809][T10932] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1353'. [ 195.956383][T10937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1351'. [ 195.984470][T10932] No such timeout policy "syz1" [ 196.040938][T10937] gretap0: entered promiscuous mode [ 196.072983][T10937] gretap0: entered allmulticast mode [ 196.639605][T10974] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1366'. [ 196.773912][T10979] vlan1: entered allmulticast mode [ 196.798945][T10979] veth0_vlan: entered allmulticast mode [ 196.825865][T10979] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1367'. [ 196.868253][T10979] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1367'. [ 197.021158][T10991] IPVS: rr: FWM 3 0x00000003 - no destination available [ 197.664564][T11028] block nbd0: not configured, cannot reconfigure [ 198.448881][T11078] lo: entered promiscuous mode [ 198.473196][T11078] tunl0: entered promiscuous mode [ 198.498208][T11078] gre0: entered promiscuous mode [ 198.550198][T11078] 0ªî{X¹¦: entered promiscuous mode [ 198.565873][T11078] 0ªî{X¹¦: left allmulticast mode [ 198.603750][T11078] erspan0: entered promiscuous mode [ 198.648183][T11078] ip_vti0: entered promiscuous mode [ 199.435177][T11135] bond6: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 199.450932][T11135] bond6: entered promiscuous mode [ 199.456252][T11135] bond6: entered allmulticast mode [ 199.465312][T11135] 8021q: adding VLAN 0 to HW filter on device bond6 [ 199.539008][T11143] netlink: 'syz.1.1417': attribute type 13 has an invalid length. [ 199.547593][T11143] __nla_validate_parse: 9 callbacks suppressed [ 199.547612][T11143] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1417'. [ 199.642327][T11152] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1421'. [ 199.854666][T11165] netlink: 'syz.3.1426': attribute type 12 has an invalid length. [ 199.864565][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 199.873619][T11163] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1426'. [ 199.884419][T11163] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1426'. [ 199.964267][T11172] netlink: 'syz.4.1428': attribute type 1 has an invalid length. [ 200.014177][T11172] netlink: 'syz.4.1428': attribute type 12 has an invalid length. [ 200.033397][T11172] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1428'. [ 200.335579][T11200] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1435'. [ 200.558550][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 200.741088][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 200.794029][T11219] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1443'. [ 201.053786][T11240] team0: Device wireguard1 is of different type [ 201.752613][T11279] bond5 (unregistering): Released all slaves [ 201.845033][T11293] xt_TPROXY: Can be used only with -p tcp or -p udp [ 201.854298][T11293] Unsupported ieee802154 address type: 0 [ 202.433312][T11338] x_tables: duplicate underflow at hook 1 [ 202.567634][T11350] Bluetooth: hci0: invalid len left 70, exp >= 131 [ 202.954985][T11372] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 202.967776][T11372] bond0: option packets_per_slave: allowed values 0 - 65535 [ 202.978593][T11372] bond0 (unregistering): Released all slaves [ 203.235000][T11383] syz.3.1485 (11383) used obsolete PPPIOCDETACH ioctl [ 203.366958][T11396] lo speed is unknown, defaulting to 1000 [ 203.402838][T11397] siw: device registration error -23 [ 203.414175][T11396] lo speed is unknown, defaulting to 1000 [ 203.431892][T11396] lo speed is unknown, defaulting to 1000 [ 203.511222][T11396] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 203.583733][T11410] syzkaller0: entered promiscuous mode [ 203.596570][T11410] syzkaller0: entered allmulticast mode [ 203.606300][T11396] lo speed is unknown, defaulting to 1000 [ 203.622997][T11396] lo speed is unknown, defaulting to 1000 [ 203.632046][T11396] lo speed is unknown, defaulting to 1000 [ 203.671362][T11396] lo speed is unknown, defaulting to 1000 [ 203.680326][T11396] lo speed is unknown, defaulting to 1000 [ 203.768788][T11415] veth5: entered promiscuous mode [ 203.812569][T11422] syzkaller0: entered promiscuous mode [ 203.825176][T11422] syzkaller0: entered allmulticast mode [ 204.579072][T11456] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 204.670278][T11461] __nla_validate_parse: 26 callbacks suppressed [ 204.670296][T11461] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1512'. [ 205.423618][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'. [ 205.465337][T11501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1521'. [ 205.477935][T11501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1521'. [ 205.504806][T11501] sctp: [Deprecated]: syz.4.1521 (pid 11501) Use of int in maxseg socket option. [ 205.504806][T11501] Use struct sctp_assoc_value instead [ 205.567762][T11505] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1522'. [ 205.601526][T11505] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1522'. [ 205.647732][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'. [ 205.686422][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'. [ 205.891565][T11520] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1529'. [ 205.943467][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 206.191715][T11538] netlink: 'syz.4.1533': attribute type 2 has an invalid length. [ 206.317645][T11544] tipc: Enabled bearer , priority 0 [ 206.355991][T11544] geneve2: entered promiscuous mode [ 206.364415][T11544] geneve2: entered allmulticast mode [ 206.375649][ T6972] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 206.385462][ T6972] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 206.454903][T11544] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.471248][T11544] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.500514][ T6972] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 206.510334][T11556] syzkaller0: entered promiscuous mode [ 206.515841][T11556] syzkaller0: entered allmulticast mode [ 206.540344][T11561] netlink: 'syz.1.1541': attribute type 12 has an invalid length. [ 206.548917][T11556] tipc: Resetting bearer [ 207.113860][T11543] tipc: Resetting bearer [ 207.136145][T11543] tipc: Disabling bearer [ 207.147875][T11594] netlink: 'syz.4.1550': attribute type 1 has an invalid length. [ 207.195066][T11594] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.238140][T11598] netlink: 'syz.2.1552': attribute type 1 has an invalid length. [ 207.251624][T11598] x_tables: duplicate underflow at hook 4 [ 207.278548][T11594] veth7: entered promiscuous mode [ 207.860074][T11638] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 208.060933][T11544] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.075733][T11544] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.099317][T11544] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 208.248217][T11544] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.279572][T11544] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.298387][T11544] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 208.351722][T11659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.377971][ T5907] lo speed is unknown, defaulting to 1000 [ 208.393911][ T5907] syz2: Port: 1 Link ACTIVE [ 208.425613][T11544] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.457751][T11544] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.490461][T11544] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 208.513379][T11663] tunl0: entered promiscuous mode [ 208.524565][T11663] netlink: 'syz.3.1570': attribute type 3 has an invalid length. [ 208.524808][T11669] sctp: [Deprecated]: syz.1.1572 (pid 11669) Use of int in maxseg socket option. [ 208.524808][T11669] Use struct sctp_assoc_value instead [ 208.637896][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.647662][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 208.665322][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 208.704085][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.712773][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 208.721783][ T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 208.763457][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.782234][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 208.799534][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 208.850707][ T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.861485][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 208.884510][ T37] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.071266][T11694] netlink: 'syz.2.1579': attribute type 12 has an invalid length. [ 209.394491][T11718] bond1: entered promiscuous mode [ 209.417673][T11724] sctp: [Deprecated]: syz.0.1586 (pid 11724) Use of int in maxseg socket option. [ 209.417673][T11724] Use struct sctp_assoc_value instead [ 209.418728][T11718] bond1: entered allmulticast mode [ 209.533984][T11718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.551084][T11728] nft_compat: unsupported protocol 0 [ 209.743601][T11731] netem: change failed [ 209.944644][T11741] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.027058][T11744] __nla_validate_parse: 18 callbacks suppressed [ 210.027077][T11744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1590'. [ 210.223767][T11746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.231130][ T30] audit: type=1800 audit(1760640664.620:3): pid=11752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1595" name="memory.events" dev="tmpfs" ino=1735 res=0 errno=0 [ 210.288551][T11754] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1595'. [ 210.468034][T11756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1597'. [ 210.541097][T11758] syzkaller1: entered promiscuous mode [ 210.546711][T11758] syzkaller1: entered allmulticast mode [ 210.592180][T11758] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 211.352277][T11794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.359565][T11794] IPv6: NLM_F_CREATE should be set when creating new route [ 211.366825][T11794] IPv6: NLM_F_CREATE should be set when creating new route [ 211.374177][T11794] IPv6: NLM_F_CREATE should be set when creating new route [ 211.376712][T11798] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.1606'. [ 211.763827][T11824] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.1616'. [ 211.795430][T11831] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1617'. [ 211.837653][T11831] netlink: 'syz.3.1617': attribute type 11 has an invalid length. [ 211.890812][T11831] netlink: 'syz.3.1617': attribute type 11 has an invalid length. [ 211.898687][T11831] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1617'. [ 212.068214][T11845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1620'. [ 212.375333][T11871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.644898][T11889] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1631'. [ 212.732744][T11894] tipc: Enabled bearer , priority 0 [ 212.740500][T11894] syzkaller0: entered promiscuous mode [ 212.746009][T11894] syzkaller0: entered allmulticast mode [ 212.753349][T11898] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 212.766307][T11894] tipc: Resetting bearer [ 212.776864][T11892] tipc: Resetting bearer [ 212.838170][T11892] tipc: Disabling bearer [ 212.900677][T11901] syzkaller1: entered promiscuous mode [ 212.916427][T11901] syzkaller1: entered allmulticast mode [ 212.956908][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1638'. [ 212.976632][T11911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.020984][T11909] hsr0 speed is unknown, defaulting to 1000 [ 213.028895][T11909] lo speed is unknown, defaulting to 1000 [ 213.134148][T11912] tipc: Enabling of bearer rejected, failed to enable media [ 213.148604][T11919] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 213.349809][T11933] netlink: 'syz.4.1646': attribute type 1 has an invalid length. [ 213.470767][T11940] netlink: 'syz.2.1647': attribute type 37 has an invalid length. [ 214.224398][T11989] sctp: [Deprecated]: syz.1.1660 (pid 11989) Use of int in max_burst socket option. [ 214.224398][T11989] Use struct sctp_assoc_value instead [ 214.601098][T12012] netlink: 'syz.4.1668': attribute type 15 has an invalid length. [ 214.678007][T12017] netlink: 'syz.0.1669': attribute type 1 has an invalid length. [ 214.854614][T12020] tipc: Enabled bearer , priority 0 [ 214.862730][T12020] syzkaller0: entered promiscuous mode [ 214.868443][T12020] syzkaller0: entered allmulticast mode [ 214.910541][T12020] tipc: Resetting bearer [ 214.974132][T12019] tipc: Resetting bearer [ 214.991428][T12019] tipc: Disabling bearer [ 215.000848][T12030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.208170][T12040] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 215.230460][T12043] netlink: 'syz.4.1678': attribute type 12 has an invalid length. [ 215.268494][T12043] netlink: 'syz.4.1678': attribute type 29 has an invalid length. [ 215.277650][T12043] __nla_validate_parse: 16 callbacks suppressed [ 215.277666][T12043] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1678'. [ 215.303308][T12043] netlink: 'syz.4.1678': attribute type 1 has an invalid length. [ 215.318012][T12043] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1678'. [ 215.387611][T12056] tipc: Enabled bearer , priority 10 [ 215.510451][T12064] syzkaller1: entered promiscuous mode [ 215.515980][T12064] syzkaller1: entered allmulticast mode [ 215.583620][T12067] netlink: 'syz.3.1686': attribute type 29 has an invalid length. [ 215.594091][T12067] netlink: 'syz.3.1686': attribute type 29 has an invalid length. [ 215.603782][T12067] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1686'. [ 215.686637][T12071] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 215.733970][T12075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1689'. [ 215.763204][T12075] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1689'. [ 215.779385][T12077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1689'. [ 215.811448][T12077] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1689'. [ 215.953474][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1693'. [ 216.003676][T12089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1693'. [ 216.047963][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 216.164273][T12108] netlink: 'syz.0.1698': attribute type 24 has an invalid length. [ 216.523896][T12133] openvswitch: netlink: Flow key attr not present in new flow. [ 216.555666][T12133] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 216.617265][T12137] IPv6: sit1: Disabled Multicast RS [ 216.623774][T12137] sit1: entered allmulticast mode [ 216.660232][T12138] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 216.674114][T12138] bond3 (unregistering): Released all slaves [ 217.382587][T12174] syzkaller0: entered promiscuous mode [ 217.404874][T12174] syzkaller0: entered allmulticast mode [ 217.768484][T12202] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 218.270572][T12233] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 218.290635][T12234] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 218.632819][T12249] veth0: entered promiscuous mode [ 218.640589][T12251] veth0: left promiscuous mode [ 218.703780][T12260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.711111][T12260] IPv6: NLM_F_CREATE should be set when creating new route [ 218.797162][T12267] sit0: entered promiscuous mode [ 218.873303][T12267] validate_nla: 6 callbacks suppressed [ 218.873325][T12267] netlink: 'syz.4.1746': attribute type 1 has an invalid length. [ 218.898491][T12274] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 219.038569][T12282] openvswitch: netlink: IP tunnel dst address not specified [ 219.237882][T12297] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 219.247299][T12294] tipc: Enabled bearer , priority 0 [ 219.269754][T12294] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 219.277284][T12294] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 219.297379][T12294] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 219.373099][T12294] tipc: Resetting bearer [ 219.493991][T12312] netlink: 'syz.4.1766': attribute type 29 has an invalid length. [ 220.099177][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.106894][T12344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.166949][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.184344][T12344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.210806][T12344] batman_adv: batadv0: Interface deactivated: dummy0 [ 220.217548][T12344] batman_adv: batadv0: Removing interface: dummy0 [ 220.813538][T12384] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 221.053760][T12396] __nla_validate_parse: 26 callbacks suppressed [ 221.053779][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 221.110372][T12396] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1783'. [ 221.124514][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 221.456897][T12420] x_tables: duplicate underflow at hook 2 [ 221.500986][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 221.514874][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1794'. [ 221.538678][T12420] netlink: 'syz.2.1794': attribute type 12 has an invalid length. [ 221.568782][T12420] netlink: 'syz.2.1794': attribute type 11 has an invalid length. [ 221.986859][T12448] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 222.103916][T12465] Cannot find del_set index 49151 as target [ 222.306609][T12469] tipc: Enabled bearer , priority 0 [ 222.360374][T12469] syzkaller0: entered promiscuous mode [ 222.372063][T12472] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1806'. [ 222.395814][T12469] syzkaller0: entered allmulticast mode [ 222.420352][T12476] netlink: 'syz.1.1808': attribute type 1 has an invalid length. [ 222.428490][T12476] netlink: 352 bytes leftover after parsing attributes in process `syz.1.1808'. [ 222.443045][T12469] veth0_to_team: entered promiscuous mode [ 222.448894][T12469] veth0_to_team: entered allmulticast mode [ 222.476684][T12469] tipc: Resetting bearer [ 222.495712][T12468] tipc: Resetting bearer [ 222.521928][T12468] tipc: Disabling bearer [ 222.812077][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 222.869729][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1814'. [ 222.880011][T12510] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1814'. [ 222.930283][T12509] tipc: Enabled bearer , priority 0 [ 222.964305][T12517] netlink: 'syz.2.1817': attribute type 1 has an invalid length. [ 222.989969][T12509] tipc: Disabling bearer [ 223.057843][T12516] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.070476][T12516] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.095546][T12517] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 223.246189][T12516] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.289463][T12516] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.387473][T12549] veth7: entered allmulticast mode [ 223.492327][T12516] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.524632][T12516] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.581797][T12561] syzkaller0: entered promiscuous mode [ 223.587646][T12561] syzkaller0: entered allmulticast mode [ 223.851913][T12575] netlink: 'syz.3.1834': attribute type 1 has an invalid length. [ 223.877279][ T3033] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.887892][ T3033] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.927178][ T8855] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.935937][ T8855] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.960226][ T8855] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.968594][ T8855] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.996679][ T8855] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.011605][ T8855] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.027881][T12519] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.059532][T12519] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.087173][T12586] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20001 [ 224.096661][ T8855] ================================================================== [ 224.104787][ T8855] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 224.112366][ T8855] Read of size 8 at addr ffff88814c21d0b0 by task kworker/u8:10/8855 [ 224.120451][ T8855] [ 224.122793][ T8855] CPU: 0 UID: 0 PID: 8855 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 224.122813][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.122825][ T8855] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 224.122860][ T8855] Call Trace: [ 224.122867][ T8855] [ 224.122875][ T8855] dump_stack_lvl+0x189/0x250 [ 224.122893][ T8855] ? __kasan_check_byte+0x12/0x40 [ 224.122922][ T8855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.122938][ T8855] ? lock_release+0x4b/0x3e0 [ 224.122958][ T8855] ? __virt_addr_valid+0x4a5/0x5c0 [ 224.122983][ T8855] print_report+0xca/0x240 [ 224.123003][ T8855] ? __mutex_lock+0x147/0x1350 [ 224.123024][ T8855] kasan_report+0x118/0x150 [ 224.123037][ T8855] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 224.123057][ T8855] ? __mutex_lock+0x147/0x1350 [ 224.123082][ T8855] __mutex_lock+0x147/0x1350 [ 224.123104][ T8855] ? __mutex_lock+0x5bb/0x1350 [ 224.123127][ T8855] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 224.123148][ T8855] ? __pfx___mutex_lock+0x10/0x10 [ 224.123172][ T8855] ? __lock_acquire+0xab9/0xd20 [ 224.123192][ T8855] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 224.123220][ T8855] ? process_scheduled_works+0x9ef/0x17b0 [ 224.123237][ T8855] ? process_scheduled_works+0x9ef/0x17b0 [ 224.123255][ T8855] process_scheduled_works+0xae1/0x17b0 [ 224.123285][ T8855] ? __pfx_process_scheduled_works+0x10/0x10 [ 224.123309][ T8855] worker_thread+0x8a0/0xda0 [ 224.123328][ T8855] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 224.123351][ T8855] ? __kthread_parkme+0x7b/0x200 [ 224.123374][ T8855] kthread+0x711/0x8a0 [ 224.123397][ T8855] ? __pfx_worker_thread+0x10/0x10 [ 224.123414][ T8855] ? __pfx_kthread+0x10/0x10 [ 224.123436][ T8855] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.123454][ T8855] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.123473][ T8855] ? __pfx_kthread+0x10/0x10 [ 224.123494][ T8855] ret_from_fork+0x4bc/0x870 [ 224.123512][ T8855] ? __pfx_ret_from_fork+0x10/0x10 [ 224.123532][ T8855] ? __switch_to_asm+0x39/0x70 [ 224.123551][ T8855] ? __switch_to_asm+0x33/0x70 [ 224.123569][ T8855] ? __pfx_kthread+0x10/0x10 [ 224.123591][ T8855] ret_from_fork_asm+0x1a/0x30 [ 224.123618][ T8855] [ 224.123624][ T8855] [ 224.337996][ T8855] Allocated by task 12516: [ 224.342409][ T8855] kasan_save_track+0x3e/0x80 [ 224.347100][ T8855] __kasan_kmalloc+0x93/0xb0 [ 224.351704][ T8855] __kmalloc_noprof+0x411/0x7f0 [ 224.356562][ T8855] udp_tunnel_nic_netdevice_event+0x4c3/0x1810 [ 224.362727][ T8855] notifier_call_chain+0x1b6/0x3e0 [ 224.367840][ T8855] register_netdevice+0x1608/0x1ae0 [ 224.373036][ T8855] nsim_create+0xae8/0xf10 [ 224.377451][ T8855] __nsim_dev_port_add+0x6b6/0xb10 [ 224.382587][ T8855] nsim_dev_port_add_all+0x37/0xf0 [ 224.387696][ T8855] nsim_dev_reload_up+0x451/0x780 [ 224.392764][ T8855] devlink_reload+0x4ec/0x8d0 [ 224.397457][ T8855] devlink_nl_reload_doit+0xb35/0xd50 [ 224.402822][ T8855] genl_family_rcv_msg_doit+0x215/0x300 [ 224.408378][ T8855] genl_rcv_msg+0x60e/0x790 [ 224.412882][ T8855] netlink_rcv_skb+0x208/0x470 [ 224.417670][ T8855] genl_rcv+0x28/0x40 [ 224.421662][ T8855] netlink_unicast+0x82c/0x9e0 [ 224.426452][ T8855] netlink_sendmsg+0x805/0xb30 [ 224.431213][ T8855] __sock_sendmsg+0x219/0x270 [ 224.435900][ T8855] ____sys_sendmsg+0x505/0x830 [ 224.440689][ T8855] ___sys_sendmsg+0x21f/0x2a0 [ 224.445378][ T8855] __x64_sys_sendmsg+0x19b/0x260 [ 224.450315][ T8855] do_syscall_64+0xfa/0xfa0 [ 224.454851][ T8855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.460745][ T8855] [ 224.463082][ T8855] Freed by task 12519: [ 224.467144][ T8855] kasan_save_track+0x3e/0x80 [ 224.471833][ T8855] __kasan_save_free_info+0x46/0x50 [ 224.477029][ T8855] __kasan_slab_free+0x5c/0x80 [ 224.481799][ T8855] kfree+0x19a/0x6d0 [ 224.485696][ T8855] udp_tunnel_nic_netdevice_event+0x11ab/0x1810 [ 224.491945][ T8855] notifier_call_chain+0x1b6/0x3e0 [ 224.497056][ T8855] unregister_netdevice_many_notify+0x1860/0x2390 [ 224.503474][ T8855] unregister_netdevice_queue+0x33c/0x380 [ 224.509200][ T8855] nsim_destroy+0x1dd/0x670 [ 224.513713][ T8855] __nsim_dev_port_del+0x14d/0x1b0 [ 224.518823][ T8855] nsim_dev_reload_destroy+0x288/0x490 [ 224.524283][ T8855] nsim_dev_reload_down+0x8a/0xc0 [ 224.529313][ T8855] devlink_reload+0x1b3/0x8d0 [ 224.534000][ T8855] devlink_nl_reload_doit+0xb35/0xd50 [ 224.539372][ T8855] genl_family_rcv_msg_doit+0x215/0x300 [ 224.544916][ T8855] genl_rcv_msg+0x60e/0x790 [ 224.549419][ T8855] netlink_rcv_skb+0x208/0x470 [ 224.554183][ T8855] genl_rcv+0x28/0x40 [ 224.558166][ T8855] netlink_unicast+0x82c/0x9e0 [ 224.562942][ T8855] netlink_sendmsg+0x805/0xb30 [ 224.567706][ T8855] __sock_sendmsg+0x219/0x270 [ 224.572393][ T8855] ____sys_sendmsg+0x505/0x830 [ 224.577160][ T8855] ___sys_sendmsg+0x21f/0x2a0 [ 224.581846][ T8855] __x64_sys_sendmsg+0x19b/0x260 [ 224.586791][ T8855] do_syscall_64+0xfa/0xfa0 [ 224.591302][ T8855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.597191][ T8855] [ 224.599511][ T8855] Last potentially related work creation: [ 224.605274][ T8855] kasan_save_stack+0x3e/0x60 [ 224.609967][ T8855] kasan_record_aux_stack+0xbd/0xd0 [ 224.615183][ T8855] insert_work+0x3d/0x330 [ 224.619508][ T8855] __queue_work+0xbaf/0xfb0 [ 224.624022][ T8855] queue_work_on+0x181/0x270 [ 224.628613][ T8855] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 224.634248][ T8855] udp_tunnel_push_rx_port+0x17d/0x200 [ 224.639703][ T8855] geneve_offload_rx_ports+0xd7/0x160 [ 224.645079][ T8855] geneve_netdevice_event+0x6a/0x80 [ 224.650293][ T8855] notifier_call_chain+0x1b6/0x3e0 [ 224.655409][ T8855] call_netdevice_notifiers+0x88/0xc0 [ 224.660792][ T8855] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 224.666982][ T8855] notifier_call_chain+0x1b6/0x3e0 [ 224.672100][ T8855] register_netdevice+0x1608/0x1ae0 [ 224.677304][ T8855] nsim_create+0xae8/0xf10 [ 224.681730][ T8855] __nsim_dev_port_add+0x6b6/0xb10 [ 224.686849][ T8855] nsim_dev_port_add_all+0x37/0xf0 [ 224.691975][ T8855] nsim_dev_reload_up+0x451/0x780 [ 224.697006][ T8855] devlink_reload+0x4ec/0x8d0 [ 224.701683][ T8855] devlink_nl_reload_doit+0xb35/0xd50 [ 224.707054][ T8855] genl_family_rcv_msg_doit+0x215/0x300 [ 224.712603][ T8855] genl_rcv_msg+0x60e/0x790 [ 224.717113][ T8855] netlink_rcv_skb+0x208/0x470 [ 224.721877][ T8855] genl_rcv+0x28/0x40 [ 224.725862][ T8855] netlink_unicast+0x82c/0x9e0 [ 224.730651][ T8855] netlink_sendmsg+0x805/0xb30 [ 224.735415][ T8855] __sock_sendmsg+0x219/0x270 [ 224.740099][ T8855] ____sys_sendmsg+0x505/0x830 [ 224.744867][ T8855] ___sys_sendmsg+0x21f/0x2a0 [ 224.749554][ T8855] __x64_sys_sendmsg+0x19b/0x260 [ 224.754494][ T8855] do_syscall_64+0xfa/0xfa0 [ 224.759018][ T8855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.764910][ T8855] [ 224.767233][ T8855] Second to last potentially related work creation: [ 224.773816][ T8855] kasan_save_stack+0x3e/0x60 [ 224.778520][ T8855] kasan_record_aux_stack+0xbd/0xd0 [ 224.783719][ T8855] insert_work+0x3d/0x330 [ 224.788045][ T8855] __queue_work+0xcd2/0xfb0 [ 224.792550][ T8855] queue_work_on+0x181/0x270 [ 224.797142][ T8855] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 224.802772][ T8855] udp_tunnel_push_rx_port+0x17d/0x200 [ 224.808227][ T8855] vxlan_offload_rx_ports+0x139/0x200 [ 224.813601][ T8855] vxlan_netdevice_event+0x111/0x470 [ 224.818887][ T8855] notifier_call_chain+0x1b6/0x3e0 [ 224.824000][ T8855] call_netdevice_notifiers+0x88/0xc0 [ 224.829377][ T8855] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 224.835542][ T8855] notifier_call_chain+0x1b6/0x3e0 [ 224.840659][ T8855] register_netdevice+0x1608/0x1ae0 [ 224.845862][ T8855] nsim_create+0xae8/0xf10 [ 224.850280][ T8855] __nsim_dev_port_add+0x6b6/0xb10 [ 224.855392][ T8855] nsim_dev_port_add_all+0x37/0xf0 [ 224.860501][ T8855] nsim_dev_reload_up+0x451/0x780 [ 224.865533][ T8855] devlink_reload+0x4ec/0x8d0 [ 224.870215][ T8855] devlink_nl_reload_doit+0xb35/0xd50 [ 224.875624][ T8855] genl_family_rcv_msg_doit+0x215/0x300 [ 224.881199][ T8855] genl_rcv_msg+0x60e/0x790 [ 224.885720][ T8855] netlink_rcv_skb+0x208/0x470 [ 224.890502][ T8855] genl_rcv+0x28/0x40 [ 224.894505][ T8855] netlink_unicast+0x82c/0x9e0 [ 224.899284][ T8855] netlink_sendmsg+0x805/0xb30 [ 224.904054][ T8855] __sock_sendmsg+0x219/0x270 [ 224.908741][ T8855] ____sys_sendmsg+0x505/0x830 [ 224.913507][ T8855] ___sys_sendmsg+0x21f/0x2a0 [ 224.918205][ T8855] __x64_sys_sendmsg+0x19b/0x260 [ 224.923361][ T8855] do_syscall_64+0xfa/0xfa0 [ 224.927903][ T8855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.933825][ T8855] [ 224.936174][ T8855] The buggy address belongs to the object at ffff88814c21d000 [ 224.936174][ T8855] which belongs to the cache kmalloc-256 of size 256 [ 224.950333][ T8855] The buggy address is located 176 bytes inside of [ 224.950333][ T8855] freed 256-byte region [ffff88814c21d000, ffff88814c21d100) [ 224.964131][ T8855] [ 224.966458][ T8855] The buggy address belongs to the physical page: [ 224.972870][ T8855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14c21c [ 224.981737][ T8855] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 224.990235][ T8855] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 224.998297][ T8855] page_type: f5(slab) [ 225.002279][ T8855] raw: 057ff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 225.010868][ T8855] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 225.019470][ T8855] head: 057ff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 225.028139][ T8855] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 225.036807][ T8855] head: 057ff00000000001 ffffea0005308701 00000000ffffffff 00000000ffffffff [ 225.045484][ T8855] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 225.054151][ T8855] page dumped because: kasan: bad access detected [ 225.060573][ T8855] page_owner tracks the page as allocated [ 225.066288][ T8855] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 25897343713, free_ts 0 [ 225.086011][ T8855] post_alloc_hook+0x240/0x2a0 [ 225.090887][ T8855] get_page_from_freelist+0x2365/0x2440 [ 225.096435][ T8855] __alloc_frozen_pages_noprof+0x181/0x370 [ 225.102242][ T8855] alloc_pages_mpol+0x232/0x4a0 [ 225.107101][ T8855] allocate_slab+0x96/0x3a0 [ 225.111613][ T8855] ___slab_alloc+0xe94/0x18a0 [ 225.116293][ T8855] __slab_alloc+0x65/0x100 [ 225.120707][ T8855] __kmalloc_node_track_caller_noprof+0x5c7/0x800 [ 225.127154][ T8855] krealloc_node_align_noprof+0x140/0x390 [ 225.132894][ T8855] add_sysfs_param+0xd4/0xa30 [ 225.137572][ T8855] kernel_add_sysfs_param+0x7f/0xe0 [ 225.142773][ T8855] param_sysfs_builtin+0x18a/0x230 [ 225.147885][ T8855] param_sysfs_builtin_init+0x23/0x30 [ 225.153258][ T8855] do_one_initcall+0x233/0x820 [ 225.158022][ T8855] do_initcall_level+0x104/0x190 [ 225.163058][ T8855] do_initcalls+0x59/0xa0 [ 225.167397][ T8855] page_owner free stack trace missing [ 225.172763][ T8855] [ 225.175091][ T8855] Memory state around the buggy address: [ 225.180755][ T8855] ffff88814c21cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 225.188815][ T8855] ffff88814c21d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.196886][ T8855] >ffff88814c21d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.204946][ T8855] ^ [ 225.210578][ T8855] ffff88814c21d100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 225.218640][ T8855] ffff88814c21d180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 225.226701][ T8855] ================================================================== [ 225.257861][ T8855] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 225.265112][ T8855] CPU: 1 UID: 0 PID: 8855 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 225.274701][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 225.284790][ T8855] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 225.292125][ T8855] Call Trace: [ 225.295517][ T8855] [ 225.298502][ T8855] dump_stack_lvl+0x99/0x250 [ 225.303141][ T8855] ? __asan_memcpy+0x40/0x70 [ 225.307770][ T8855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.313002][ T8855] ? __pfx__printk+0x10/0x10 [ 225.317610][ T8855] vpanic+0x237/0x6d0 [ 225.321605][ T8855] ? __pfx_vpanic+0x10/0x10 [ 225.326121][ T8855] ? preempt_schedule+0xae/0xc0 [ 225.330975][ T8855] ? __pfx_preempt_schedule+0x10/0x10 [ 225.336353][ T8855] panic+0xb9/0xc0 [ 225.340085][ T8855] ? __pfx_panic+0x10/0x10 [ 225.344514][ T8855] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 225.350416][ T8855] ? __mutex_lock+0x147/0x1350 [ 225.355187][ T8855] check_panic_on_warn+0x89/0xb0 [ 225.360144][ T8855] ? __mutex_lock+0x147/0x1350 [ 225.364922][ T8855] end_report+0x78/0x160 [ 225.369184][ T8855] kasan_report+0x129/0x150 [ 225.373693][ T8855] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 225.379603][ T8855] ? __mutex_lock+0x147/0x1350 [ 225.384375][ T8855] __mutex_lock+0x147/0x1350 [ 225.388974][ T8855] ? __mutex_lock+0x5bb/0x1350 [ 225.393746][ T8855] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 225.400026][ T8855] ? __pfx___mutex_lock+0x10/0x10 [ 225.405058][ T8855] ? __lock_acquire+0xab9/0xd20 [ 225.409919][ T8855] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 225.415995][ T8855] ? process_scheduled_works+0x9ef/0x17b0 [ 225.421717][ T8855] ? process_scheduled_works+0x9ef/0x17b0 [ 225.427455][ T8855] process_scheduled_works+0xae1/0x17b0 [ 225.433015][ T8855] ? __pfx_process_scheduled_works+0x10/0x10 [ 225.439005][ T8855] worker_thread+0x8a0/0xda0 [ 225.443597][ T8855] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 225.449933][ T8855] ? __kthread_parkme+0x7b/0x200 [ 225.454892][ T8855] kthread+0x711/0x8a0 [ 225.458968][ T8855] ? __pfx_worker_thread+0x10/0x10 [ 225.464097][ T8855] ? __pfx_kthread+0x10/0x10 [ 225.468696][ T8855] ? _raw_spin_unlock_irq+0x23/0x50 [ 225.473917][ T8855] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.479122][ T8855] ? __pfx_kthread+0x10/0x10 [ 225.483712][ T8855] ret_from_fork+0x4bc/0x870 [ 225.488305][ T8855] ? __pfx_ret_from_fork+0x10/0x10 [ 225.493422][ T8855] ? __switch_to_asm+0x39/0x70 [ 225.498189][ T8855] ? __switch_to_asm+0x33/0x70 [ 225.502961][ T8855] ? __pfx_kthread+0x10/0x10 [ 225.507558][ T8855] ret_from_fork_asm+0x1a/0x30 [ 225.512336][ T8855] [ 225.515524][ T8855] Kernel Offset: disabled [ 225.519855][ T8855] Rebooting in 86400 seconds..