last executing test programs: 2.747301802s ago: executing program 4 (id=4389): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x50}}, 0x0) 2.597430091s ago: executing program 4 (id=4393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000340)={{r2, &(0x7f0000000000)='\xcf#\xf9-\x00', 0x0, &(0x7f00000000c0)={@_ha_fsid={[0x80, 0x40]}, {0x9, 0x9, 0x0, 0x80000000}}, 0x7, &(0x7f0000000200), &(0x7f0000000280)=0x80000001}, {[0x80000001, 0x508, 0x0, 0xfffffff2]}, 0xb74c, 0x2f, &(0x7f00000002c0)=""/47}) setsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f00000003c0)=0x7f, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x4, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x1, 0xf, 0xfffffffe, 0xd5bd}]}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@deltaction={0x13c, 0x31, 0x800, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x3ffd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 2.50045108s ago: executing program 0 (id=4395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="e7782abfaaf10300000082000000ff1d0300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x10) 2.278490766s ago: executing program 0 (id=4399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) getpeername$llc(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(r3, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x48}}, 0x0) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newlink={0x248, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_VF_PORTS={0x1ec, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xcc}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb6}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3a50a12998791893e8e498c7f9fd7bb4"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa6}, @IFLA_PORT_PROFILE={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xe0}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xfd}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "90c2ec2d497e5611239eab88b5115dc3"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "853afdcceccb3dabe03a7d0fa9aea005"}, @IFLA_PORT_VF={0x8, 0x1, 0x80}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0edceffa04c902dc6e5ef42876a0e744"}, @IFLA_PORT_PROFILE={0x8, 0x2, '\xe9&%\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7044e9bb189c35c2bcfbd53d009d660a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d2351b96f776d91a3adb69d15e904383"}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "fa471314387de4f000bac1ff5c90ddb7"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e35753c241bcefb60e7dac7c0748f406"}, @IFLA_PORT_VF={0x8, 0x1, 0xb2}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_PROFILE={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @IFLA_PORT_VF={0x8, 0x1, 0x24f}, @IFLA_PORT_VF={0x8, 0x1, 0x35}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "f711f35f389c3d5662c72c549d7bd6d0"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "34a56eb89a53a384743ff9c3f85f4b38"}, @IFLA_PORT_PROFILE={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8df3321b2067c347df29591d908a6181"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x14}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6055b644fe0151a101f822b9fe858b94"}]}]}]}, 0x248}}, 0x0) 2.277199079s ago: executing program 4 (id=4400): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="190200040706010800080000000000000a0000040500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$nl_route(r0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000280)=0x4, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r6, 0x0, 0x5, &(0x7f0000001740)={@local, @private, 0x0, "50195b9ae2d280a88343baee300eb695f9a491328803d89ff721bbc0b17cce26"}, 0x3c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)={0x3c, r8, 0x1, 0x1, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x3c}}, 0x0) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r11, &(0x7f0000007000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.251475286s ago: executing program 1 (id=4401): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x40, 0x2, 0xfd, 0xa, 0x9, 0x2768}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000001700030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c000140000000000000000014000000110001"], 0xa4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) 2.023226158s ago: executing program 1 (id=4404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x89b1, &(0x7f0000000040)={'wlan1\x00', 0x8000003}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES8=r0], 0xd8}, 0x1, 0x0, 0x0, 0x131e284dd61db437}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069106b0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000280)="be18e5def848a23f338b612fa87b49d5598bf59ecaeeab4f63b077cdac5f6baba8b342f649a5467b81545961a081f46038a05f1d154bbca7059f415cda526ca7385b9c3af9fc061b105d2a09545a043201c957fee9b5d66445dfadc4feca2d74e39e52dc151aa9e77bd850293551da5ae8683ca27a59731960a6540de13ce4258d9919e7b78ff56020e113cfa80f251992d03705fd04ac70f1d7ecc169adc997ddfd15444894363442deeccae6500d825fb5544cb83df0d137891603d6034b41498f585f2804474a38cc49ae478d926fc02300fb", 0xd4, 0x80c1, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) 1.993651028s ago: executing program 3 (id=4405): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000000)="b6", 0x1}], 0x1, 0x0, 0x0, 0x8008001}, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x5, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x3d) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x15, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x6c) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'vxcan1\x00', 0x2}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="100429bd7000ffcbdf2539000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8800) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x34, r9, 0x201, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x20040080) ioctl$BTRFS_IOC_QGROUP_CREATE(r7, 0x4010942a, &(0x7f0000000180)={0x0, 0x5}) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xe, &(0x7f0000000700)=ANY=[@ANYRESHEX=r5, @ANYRES16=r8, @ANYRESHEX=r4, @ANYBLOB="8f4e81d9fb1e163122a639c41eeab5a69748eacc3e9d826516930af6cfd8c019cd2609af295c867d3f29a01c29403c4cf101dcf2bb6ed99cbabaddba2584668d2c1e07eb904ec8d9bf19c403d47308cb4c8dc097689c2bdfb115d832c608a3d93d87795bb5", @ANYRES16=r7, @ANYRES32=r8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r11, 0x2000000, 0xfe7f, 0x22, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.956056s ago: executing program 1 (id=4406): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x7, 0x100000000, 0x100000000000000, 0x1, 0xfdb1, 0xc, 0x288100000400000b, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x3}, [{{0x254, 0x1, {{0x0, 0x8}, 0x6, 0x7, 0xff, 0x8, 0x18, 'syz0\x00', "86bca39346212f86291651efda89f97eae0791a8937518b16a2af4d30592156d", "8a75bdacf9205e94b1affc4118e64c993c59ca1f8ac4bbb9fd263d6a7335d3e8", [{0x4, 0x8, {0xc14503c25b476f23, 0x3}}, {0x85, 0xd6, {0x1, 0x7}}, {0x3, 0x6, {0x3, 0x3}}, {0x40, 0x1, {0x2, 0x9}}, {0x1a9b, 0x4, {0x2, 0x4000000}}, {0xff, 0x6, {0x3, 0x6}}, {0xe7cd, 0x0, {0x2, 0x100}}, {0x2, 0x1, {0x3, 0x1000}}, {0x3, 0x3, {0x3, 0x401}}, {0xb5, 0x4, {0x0, 0x5}}, {0x8001, 0x80, {0x3, 0x3}}, {0x5, 0x0, {0x1}}, {0x0, 0x5, {0x1, 0x7f}}, {0x9, 0x7932, {0x1, 0x6}}, {0x1f8, 0x4, {0x1, 0x40}}, {0x7, 0x7, {0x1, 0x8001}}, {0x1, 0xead, {0x3, 0x7}}, {0x1, 0xfdf1, {0x2, 0x5}}, {0x9, 0x3, {0x1, 0x6}}, {0x1, 0xfff8, {0x1, 0xc68c}}, {0x4, 0x0, {0x3, 0xd9a}}, {0x7f, 0x6, {0x1, 0x9}}, {0x40, 0x3, {0x0, 0x8}}, {0x2, 0x4, {0x3, 0x3}}, {0xf3a2, 0x3f, {0x1, 0x7}}, {0x6, 0x7, {0x3, 0x4}}, {0x140, 0x45df, {0x0, 0x8}}, {0x5, 0xa, {0x0, 0x3}}, {0x40, 0x4, {0x2, 0x9}}, {0x0, 0xc5b, {0x1, 0x5}}, {0xd, 0x81d3, {0x2, 0xffffffc8}}, {0x7, 0xb0a, {0x1, 0x4}}, {0x0, 0x3, {0x0, 0x7}}, {0x1, 0x8, {0x2, 0x9}}, {0x0, 0x315, {0x3, 0x10}}, {0x8, 0x7, {0x2, 0x2}}, {0x7, 0x1, {0x3, 0x10000}}, {0xe4, 0x6, {0x1, 0x2}}, {0xffff, 0x7, {0xe8d95239bae06a34, 0x5}}, {0x6, 0x3, {0x1, 0x2821}}]}}}]}, 0x268}}, 0x840) 1.568688875s ago: executing program 3 (id=4407): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfa068fc268af028d, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000540)='syz_tun\x00', 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000038000480140001800c0001006e6f747261636b000400028020000180070001006374000014000280080001400000000a080002400000009c"], 0x8c}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x145, &(0x7f0000000580)={@broadcast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "0600f0", 0x10f, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@routing={0x33, 0xa, 0x2, 0x0, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @remote}, @private0, @dev={0xfe, 0x80, '\x00', 0x32}, @loopback]}, @fragment={0x87, 0x0, 0xfc, 0x0, 0x0, 0x8, 0x64}, @srh={0x3c, 0x2, 0x4, 0x1, 0x3, 0x48, 0xe6, [@mcast1]}, @srh={0x62, 0x8, 0x4, 0x4, 0xde, 0x8, 0x8e, [@private1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}], {{0x4e24, 0x4e20, 0x4, 0x1, 0xe, 0x0, 0x0, 0x2, 0x7, "b3c947", 0x40, "4a6bab"}, "b871c3e61fb085e7a24ce75ac58ecfbf1d0d5d561c121ba88cb982df68abc3ce0a6933efd80c64ac278d28dbb417b15730d0f192bcd3e8b748b82e8bc436e0"}}}}}}, &(0x7f0000000700)={0x1, 0x2, [0x879, 0x3a6, 0xd59, 0x108]}) syz_emit_ethernet(0x89, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}, {"82ebda855245fe0be9f4b9b1cb000226a26d3212b299f2559358e7d3250baab7780c7202b5338a85b38957d350cbaa9fd6ba263e3c484853cd0ba1929fad160f05173f39ab44cebdcdc568cc1c31139106e327"}}}}}}, 0x0) 1.485799536s ago: executing program 3 (id=4409): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000ac0)="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", 0x142}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}, {&(0x7f0000000400)="4e7a07f1000072a18f5aeccdc5dc00f73efb180500000000003156d3cd23fc62f00200fa06bfdff537bbbc8008073b6fb95dbb8a020c3254ccc989ece65bc2fea5c3f40334caae90b77f18471d592a0218df693cad9622d58fb45ddc3aefa48586b5e7681817f464806d63258d7a3a84fe2adc2f74f517577b6fb0d30675cbb982eb74b6dec55c30bbc13ff0815be54a3b2f26814fe334442742a6fc", 0x9c}, {&(0x7f0000000740)="2fe0a9fb32a9ec1cf80a24101dc3149d266573139337b2bc213584afe53c47486cecec245fd862c00c2a6b04a5502e9a3668f63354ab799896fd1cfb40dae208a96a2cfa73547516b3f2ae13a064d47d7854327d287303bdd43311e3ca2396a67096591bdf3a04ac9a96f470c1fef5ee41182a62d86e13941a82b674ddbcf41c00cf8aeb16f487c326b8d3990cdd4661d5a2b1d4aab5a1a208b084dd054ad4808c5a5f253a9fbe292b61aa1b645f9a76557f890b346a81d224452fa0b2849a5cd319f49ed3a7cd936198e145adade4564328acc97add224dc2c6d5699d130857d616e1ca3f77025b6fd5c60b1397a3fb6764ff5dcfe07d274c1e64a6bfac0e92a9def084", 0x104}, {&(0x7f00000004c0)="4876fd042ddc03f26a980afd3d89aa9ed7446d2e48b6bb09206d815076afefb5e19cc454b2785ce84f854d7448a9c59c0b74d449fa953f99a1328768fadf5cdea137f9e2a45025d57d3c7725b481d9b41894aaeb53ed196466d096caea3995ce2ce1d88d6899627d4d20557a7af8e40e72ef4e30aeeb32cada16d97c7578ac0becb3db1dd9f6ff7c99c417d0c0e89dfb4090603da3d2ee31b241bef2d425944dac503d5b059ffca2617434884963268d28e82abf30c60efb0d0b9b4b8d6d4235a6bd894e5d838c3e", 0xc8}, {&(0x7f0000000300)="45517f75389c1a4f4a598559c9f6e1c74f26795b51b0f3ccca50177b6b9dcd929476a4353f73effe07a58bf426f9a373c2ef50885ec19f71085e41e4ab44e4e381b649cd7f1de3e0681fefd882d95f23e6b970bae5c45ca156aa", 0x5a}], 0x7, &(0x7f00000005c0)=ANY=[], 0xfffffc88}, 0x1) setsockopt$sock_attach_bpf(r5, 0x1, 0x14, &(0x7f00000001c0), 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x6, 0x3, 0x7, 0x3}]}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x2000000, 0x0, @void, @value=0x0}, 0x20) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0xba, 0xce02cd}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0xffffffff, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000100), 0x2, 0x0) sendfile(r10, r10, 0x0, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37bc21cfdc8180c7d09c35d130d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6e19946b18a45333df51d78f735999aadfcda64488160c4ae6ba9dcef0c144e3de7be7fdc1ead6a425ff6128fab1517630c1d9507e0685488a57f85298b4e4382842c0730"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000005c0)=ANY=[@ANYRES32=r12, @ANYRES32=r12, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="da1367e6c0962d28a6eeee887f277dc7dd64f2822a20ced22966f64e70c296f9b4488c7871d516f83f38c076e57e", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r11, r12, 0x2f, 0x8, 0x4}, 0x20) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a80)="2a73ed35", 0x4}, {&(0x7f0000000040)="f04b18e1208a0f307157cdff3d599a46b17c19", 0x13}, {&(0x7f00000000c0)="c90450c8411c4d8de11221bfaed05b44af9f5985ec096647fb6e00ab8364aa46aa3bf480ea1f187500c6579c1002b38ddaa903b91c83f2e4f42dba4850d5f85dfa99dae7a18526c1eef23388b40588edcf70c2b200ce4236973029bc846b549bed28", 0x62}, {&(0x7f0000000180)="7383ebe861115aaf8b64ed16044918d1b7e5c9d1dadffde5aab990a75c22a3259ca9c84db5fa9cf14c462a4c4d062115c6991487b89684989bbe2e9542e90bd50d500f1572879d711e6e926e7884a8dac32b3deabbdd1ab59085ea8fb1fdde8838ec18922eb9fd79f4eec161b7fae107d600080f041bb09c377cef51e4580f33bc9010008f43417805c5e1cc549b696b1ac1fb7fe7f58adbbb33313a26855de97b35aa65ba23383b8d8e9ae4cbaabe9ad188276240dcdb5da61cb6d4da4a0bb5c139d442388312a837b8a43e7e31e1fbbb2f57a7bee45c69208fa6d215614878626fd9bb053643728decdd4bfc12962ace063c638ec6", 0xf6}], 0x4}}], 0x1, 0x0) 1.33652074s ago: executing program 3 (id=4410): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000020900010073797a30000000000900020073797a3100000000140003800800014000000000080002400000000038000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0xc0}, 0x1, 0x0, 0x0, 0x20002010}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000100000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000f"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000bdc900007100008d000000006d04cae2fd95e1f6000000950000000015574c00"/48], &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.233118978s ago: executing program 0 (id=4411): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$sock(r1, &(0x7f0000002080)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x4ca, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc, 0x1}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000340)="24bacd77850c8b0ef0a839d65b2fef265682cd33299124ac8763b661668a3b7ba48cd8ee0f28bbedfbf7f8d1650cfa88c46bd739dfc77f853b1b1d7d96b3a2bf351e163871c5828e94541670d4501c8437f64ab3d9f01c1278f65e4cb0bb58c487eabec1fab54a81c051ce9ddc10460692b970f399d5a5e8f5e861a71b997a7ba2bb2ec4428f06c1c0c3d271c595c3e09e3ae75dcc72bfed5dc219060a28872c3cc8adb7a21065d092b77a4e9e0d165ce53615898ad25fae1b9a2c9902e70b136edb8306", 0xc4}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="a25f09059a64dcbae1f2533cb0ef1abe1a83cbb4b285c3bb7d0deeda881d9e21a7a77d91e3be4b50a0993a10ae7bd33df0387b28248d", 0x36}], 0x3, &(0x7f0000001f80)=[@timestamping={{0x14, 0x1, 0x25, 0x548}}, @mark={{0x14, 0x1, 0x24, 0x7f}}, @mark={{0x14, 0x1, 0x24, 0x48}}, @mark={{0x14, 0x1, 0x24, 0x3e}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xe8}}, @txtime={{0x18, 0x1, 0x3d, 0x600000000000000}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0xf0}, 0x4090) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00Ox', @ANYRES16=r2, @ANYRES16=r1, @ANYRES16=r1, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005", @ANYBLOB="01eed4efb799496f10682b7b40ce26a94e5f39820b35437f2e8d2aa301914aeb29fb20382f68fa7ab5"], 0x4c}}, 0x4040810) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x1b, &(0x7f00000008c0)="01b4945c76f43bf9e6e466072364b370a2e1ac03", 0x14) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030f00000000000000ec33"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r5, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000ec0), 0x4) sendmsg$inet(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x30000001) 1.213689194s ago: executing program 2 (id=4412): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.025019295s ago: executing program 2 (id=4413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b41300002c0007012bbd7000ffdbdf25047c0000080001800400dd809813038014008400000000000000000000000000000000017f1303"], 0x13b4}}, 0xc010) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 1.021842311s ago: executing program 0 (id=4414): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1c, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x193, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x10001, @remote, 0x7}, @in6={0xa, 0x4e21, 0x5, @empty}]}, &(0x7f00000000c0)=0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x25, 0x19, @void}, 0x10) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x0, 0xa62, 0x5}, &(0x7f0000000140)=0x10) 997.829746ms ago: executing program 3 (id=4415): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x7, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @rand_addr=0x64010101}}}}) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x1}, 0x10) (async) close(0x3) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x8000) (async) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7b146efb440002bf1944112930d9e937cc8576fe30377372dd94", 0x42}], 0x1}, 0x4000000) r9 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 901.844443ms ago: executing program 1 (id=4416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r8, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x7d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c0c5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 889.863325ms ago: executing program 2 (id=4417): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x10002, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x70}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bind$can_raw(r5, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) close(r5) 798.599883ms ago: executing program 0 (id=4418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) sendmsg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000000)="ff45679b012420893ba2a1fd1ee01ebc00000000a1a037b8f6bf96abd096b48908b61cb527072453f698f34d", 0xfffffc63}], 0x1}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000080)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x20000040) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000000)=0x9, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) sendmmsg$inet6(r4, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, 0x0}}], 0x1, 0x0) 779.203038ms ago: executing program 4 (id=4419): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x226, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000002) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001040)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001000)={&(0x7f00000001c0)={0xe38, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x7, 0x2, 0x40, 0x9, 0xc77, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe99, 0xc87, 0x0, 0xd, 0x2, 0x9, 0x8, 0x6]}}]}, @NL80211_BAND_6GHZ={0xf8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x6, 0x6000, 0x4, 0x3, 0x6, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x2, 0xa}, {0x6, 0x4}, {0x3, 0x9}, {0x1, 0xa}, {0x2, 0x1}, {0x2, 0x8}, {0x6, 0x1}, {0x3, 0x5}, {0x5, 0x9}, {0x1, 0x5}, {0x3, 0x3}, {0x3, 0x5}, {0x5, 0x9}, {0x1, 0x6}, {0x4, 0x9}, {0x5, 0x1}, {0x5, 0xa}, {0x7, 0x9}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x2}, {}, {0x6, 0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x1, 0x19}, {0x2, 0x1}, {0x4, 0x9}, {0x0, 0x8}, {0x7, 0x7}, {0x2, 0x2}, {0x2, 0x6}, {0x7, 0x8}, {0x0, 0x5}, {0x2, 0x4}, {0x7, 0x7}, {0x0, 0x4}, {0x6, 0x3}, {0x3, 0x5}, {0x1, 0x2}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x2}, {0x2, 0x7}, {0x5, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x3, 0x5}, {0x2, 0x5}, {0x3}, {0x4, 0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0x1}, {0x6, 0xa}, {0x1, 0xa}, {0x3, 0x1}, {0x1, 0x4}, {0x7, 0x5}, {0x7, 0x7}, {0x6, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x36, 0x5, 0x2, 0x6, 0x7, 0x0, 0x200, 0xc]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x2}, {0x1, 0x6}, {0x2, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x4, 0x5}, {0x7, 0x8}, {0x4, 0xa}, {0x6, 0x7}, {0x7, 0x2}, {0x5, 0x6}, {0x7, 0x7}, {}, {0x2, 0x6}, {0x2, 0xa}, {0x7, 0x2}, {0x3, 0x3}, {0x1, 0x8}, {0x5, 0x2}, {0x3, 0x9}, {0x7, 0x7}, {0x0, 0x9}, {0x5, 0x5}, {0x1, 0xa}, {0x6, 0x9}, {0x1, 0x4}, {0x4, 0x4}, {0x2, 0x2}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x4, 0x6}, {0x4, 0x6}, {0x5, 0x6}, {0x5, 0x3}, {0x7, 0x1}, {0x4, 0x3}, {0x4, 0x7}, {0x1}, {0x3, 0x9}, {0x6, 0x5}, {0x5, 0x6}, {0x2, 0x4}, {0x4, 0x8}, {0x6, 0x2}, {0x4, 0x4}, {0x3, 0x8}, {0x4, 0x8}, {0x0, 0x8}, {0x7, 0x8}, {0x3, 0x7}, {0x7}, {0x6, 0x4}, {0x2, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3, 0x7}, {0x6}, {0x5, 0x3}, {0x4}, {0x1, 0x2}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x9}, {0x7, 0x6}, {0x0, 0x2}, {0x3, 0x1}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0xa}, {0x3, 0x9}, {0x2, 0x2}, {0x6, 0x1}, {0x7, 0x9}, {0x0, 0x1}, {0x0, 0x4}, {0x4, 0x7}, {0x2, 0xa}, {0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x6}, {0x1, 0x5}, {0x1, 0xa}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0x6}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0xa}, {0x3}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x0, 0x3}, {0x3}, {0x0, 0x4}, {0x6, 0x1}, {0x3, 0x1}, {0x5}, {0x7, 0x4}, {0x3, 0x8}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x1}, {0x1, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x1, 0x4, 0x1, 0x4f, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x4}, {0x5, 0x1}, {0x5, 0x8}, {0x3, 0xa}, {0x5, 0x4}, {0x2, 0xa}, {0x7, 0x9}, {0x2, 0x9}, {0x4, 0x7}, {0x4, 0xa}, {0x7, 0x1}, {0x7, 0x6}, {0x7, 0x7}, {0x4, 0x4}, {0x6, 0x8}, {0x2, 0x9}, {0x1, 0x6}, {0x0, 0x1}, {0x5, 0x5}, {0x1, 0x9}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x2, 0xa}, {0x3}, {0x4}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x6, 0x1}, {0x3, 0xa}, {0x3, 0x6}, {0x2, 0x9}, {0x6, 0x6}, {0x6, 0x2}, {0x3, 0x2}]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x1}, {0x4, 0x4}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0x2}, {0x6, 0x3}, {0x5, 0x9}, {0x5, 0x7}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0x2}, {0x1, 0xa}, {0x1, 0x2}, {0x7}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x1, 0x5}, {0x5}, {0x0, 0xa}, {0x3, 0xa}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x591f, 0x3, 0x7ff, 0xfffa, 0x8d, 0xb6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3b, 0x3ff, 0x9, 0xffff, 0x3c, 0xe6, 0x6, 0x7fff]}}]}]}, @NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0xa}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x6, 0x1}, {0x6, 0x3}, {}, {0x7, 0x6}, {}]}]}]}, @NL80211_ATTR_TX_RATES={0x2c4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0xff, 0x10, 0x2, 0x9, 0x0, 0x8]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x4, 0xb, 0x16, 0x2, 0x16, 0x4, 0x2, 0x9, 0x60, 0x60, 0x1, 0xb, 0x30, 0x3, 0x60, 0x6, 0x36, 0x12, 0x6c, 0x3, 0x1b, 0x1, 0x60, 0x1, 0x18, 0x48, 0x29, 0x4, 0x24, 0x36]}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0x6}, {0x4, 0x2}, {0x4, 0x6}, {0x3, 0x6}, {0x4, 0x7}, {0x0, 0x5}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7, 0x0, 0x65a6, 0x5, 0x7ac, 0x6, 0xb]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x9}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x4, 0x5}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x9}, {0x4, 0x2}, {0x2, 0x6}, {0x5, 0x2}, {0x3, 0x5}, {0x5, 0x7}, {0x7, 0x8}, {0x3, 0x2}, {0x6, 0x2}, {0x1}, {0x0, 0x7}, {0x6, 0x8}, {0x4, 0x3}, {0x3, 0x9}, {0x1}, {0x0, 0x8}, {0x7, 0x8}, {0x3, 0x7}, {0x1, 0x4}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x1}, {0x2, 0x7}, {0x6, 0x3}, {0x6, 0x8}, {0x1, 0xa}, {0x4, 0x7}, {0x0, 0x4}, {0x4}, {0x1, 0x5}, {0x6, 0x7}, {0x7, 0x3}, {0x0, 0x1}, {0x2, 0x5}, {0x0, 0x6}, {0x6, 0xa}, {0x6, 0x9}, {0x2, 0x9}, {0x7, 0x6}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xea, 0xb, 0x9, 0x0, 0xf, 0x7, 0x3, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7ff, 0x7, 0x7ff, 0x1, 0x60, 0x63c, 0x1]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x1, 0x9, 0xfff8, 0x7, 0xd8, 0x1]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x30, 0x36, 0x16, 0x2, 0x5, 0x24, 0xb, 0x16, 0x16, 0x48, 0x2, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0xa}, {0x7}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x6, 0x1, 0x8400, 0x3, 0x6, 0x3067]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x5, 0x9}, {0x4, 0x3}, {0x7, 0x9}, {0x5, 0x7}, {0x3, 0x1}, {0x3, 0x5}, {}, {0x6, 0x5}, {0x6, 0x3}, {0x0, 0x4}, {0x4, 0x1}, {0x1, 0x5}, {0x7, 0x8}, {0x4, 0x4}, {0x6, 0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x4, 0x5}, {0x2, 0x7}, {0x2, 0x9}, {0x5, 0x6}, {0x4, 0x7}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x3, 0x1, 0x6c, 0x9, 0x18, 0x36, 0x60, 0x1, 0x1b, 0x3f, 0x60, 0x36, 0x9, 0x24, 0xc, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0xf5, 0xb, 0x5, 0x60, 0x12, 0x1, 0x48, 0x6c, 0x18, 0x30, 0xb, 0x36, 0x24, 0xb, 0x60, 0x3, 0x60, 0x3, 0x4, 0x18, 0x24, 0x2, 0x0, 0x1b, 0x16]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x8}, {0x6, 0x6}, {0x5, 0x3}, {0x1, 0xa}, {0x7, 0x1}, {0x2, 0x8}, {0x6, 0x1}, {0x0, 0x7}, {0x3, 0xa}, {0x6, 0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x3}, {0x1, 0x5}, {0x1, 0x9}, {0x5, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x6, 0x8}, {0x4, 0x1}, {0x1, 0x9}, {0x4, 0xa}, {0x2}, {0x2, 0x3}, {0x0, 0x8}, {0x1, 0x7}, {0x7, 0x6}, {0x6, 0xa}, {0x5, 0x3}, {0x5, 0x3}, {0x5, 0x5}, {0x4, 0x8}, {0x7}, {0x6, 0x8}, {0x0, 0xa}, {0x7, 0xa}, {0x7, 0xa}, {0x1, 0x2}, {0x7, 0xa}, {0x3, 0x4}, {0x7, 0x7}, {0x2, 0x7}, {0x6, 0x3}, {0x6, 0x6}, {0x1, 0x5}, {0x3, 0x2}, {0x6, 0x8}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x8}, {0x3, 0x6}, {0x3, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x6, 0xa}, {0x3, 0x9}, {0x0, 0x4}, {0x5}, {0x5, 0xa}, {0x1, 0x6}, {0x0, 0x6}, {}, {0x6, 0x9}, {0x4, 0x7}, {0x4, 0x3}, {0x0, 0x6}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x7}, {0x3, 0x4}, {0x7, 0x5}, {0x1, 0xa}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0x5}, {0x0, 0x6}, {0x2, 0x2}, {0x1, 0x2}, {0x0, 0x2}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x3, 0x8, 0x7fff, 0xed, 0x8, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x5}, {0x1, 0x5}, {0x1, 0x9}, {0x7, 0x8}, {0x2, 0x4}, {0x0, 0xa}, {0x6, 0x6}, {0x7}, {0x1, 0x7}, {0x2, 0x9}, {0x0, 0x4}, {0x7, 0x3}, {0x7}, {0x3}, {0x5, 0x7}, {0x5, 0x7}, {0x2, 0x7}, {0x2}, {0x5, 0x1}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0x6}, {0x7, 0x1}, {0x5, 0x3}, {0x1, 0x4}, {0x7, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x24, 0x6, 0x41, 0x48, 0x0, 0x16, 0x29, 0x36, 0x24, 0x14cdfa57c5ccb38d, 0x12, 0x37]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x9, 0x8, 0x9, 0x82, 0xbe, 0x5, 0xfffc]}}]}]}, @NL80211_ATTR_TX_RATES={0x3f8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0x7}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0xa}, {0x6, 0xa}, {0x6}, {0x1, 0x2}, {0x2, 0x9}, {0x7, 0x2}, {0x5, 0x5}, {0x6, 0x5}, {0x4, 0x1}, {0x1}, {0x7, 0x2}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x2, 0x4}, {0x3, 0xa}, {0x7, 0x8}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x3, 0xb, 0x6c, 0xc, 0x6, 0x12, 0x16, 0xb, 0x48, 0x64, 0x6, 0x6c, 0xb, 0xc, 0x4, 0x60, 0x16, 0x2, 0x1b, 0x4, 0x3, 0x18]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x5}, {0x2, 0x1}, {0x6, 0x7}, {0x6, 0x9}, {0x1, 0x3}, {0x4, 0x8}, {0x0, 0xa}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0x6}, {0x2, 0x8}, {0x4, 0xa}, {0x2, 0x4}, {0x3, 0x1}, {0x4, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0x7}, {0x3, 0x7}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x1, 0x3}, {0x4, 0x5}, {0x0, 0x8}, {0x2, 0x5}, {0x5, 0x8}, {0x0, 0x8}, {0x4, 0x7}, {0x7, 0x3}, {0x6, 0x5}, {0x6}, {0x6, 0xa}, {}, {0x7, 0x4}, {0x1, 0x2}, {0x3, 0x7}, {0x1}, {0x3}, {0x4, 0x3}, {0x4, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x3, 0x8}, {0x5, 0x4}, {0x4, 0x4}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd28a, 0x7, 0xefdf, 0x1, 0xfff7, 0x67e, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x2, 0x9, 0x60, 0x30, 0x9, 0x12, 0x5, 0x30, 0xc, 0x0, 0x5, 0x48, 0x60, 0x12, 0x18, 0x5, 0xc, 0x30, 0x9, 0xc, 0xb908936f6d9c8de5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0x101, 0x0, 0x9, 0x400, 0x9, 0xd]}}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x2, 0x9}, {0x5, 0x8}, {0x7, 0x7}, {0x1, 0x5}, {0x7, 0x6}, {0x1, 0x3}, {0x7, 0x4}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x3, 0x6}, {0x4, 0x2}, {0x1, 0x7}, {0x5, 0x1}, {0x4, 0x2}, {0x6, 0x4}, {0x3, 0xa}, {0x7, 0x2}, {0x3, 0x6}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x3}, {0x0, 0x2}, {0x4, 0x6}, {0x6, 0x8}, {0x2, 0xa}, {0x4, 0x9}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x3}, {0x5, 0x4}, {0x6, 0x6}, {0x7, 0x3}, {0x6, 0x8}, {0x7, 0x1}, {0x1, 0x7}, {0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x7}, {0x1, 0x9}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a, 0x7f, 0x7, 0x0, 0xb, 0xd, 0x6, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9, 0x7, 0x401, 0x200, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x16, 0x74, 0x24, 0x16, 0xb, 0x6c, 0x12, 0x12, 0x1, 0x58, 0x18, 0x6bedb02716be2bb1, 0xb, 0x60, 0x36, 0x48, 0x7a, 0x30, 0x6c]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x2}, {0x0, 0x5}, {0x4, 0x5}, {0x2, 0x3}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0x4}, {0x6, 0x7}, {0x7}, {0x0, 0xa}, {0x1, 0x2}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0x1}, {0x3, 0x6}, {0x3, 0x6}, {0x6, 0x6}, {0x1, 0x7}, {0x6}, {0x3}, {0x2, 0x4}, {0x7, 0x9}, {0x7, 0xa}, {0x2}, {0x0, 0x8}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x9}, {0x0, 0x3}, {0x2, 0x2}, {0x6, 0x7}, {0x5, 0x1}, {0x7, 0x1}, {0x7, 0x9}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0x7}, {0x6, 0x7}, {0x1}, {0x3, 0xa}, {0x5, 0x9}, {0x5, 0x8}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x3}, {0x6}, {0x1, 0x5}, {0x6, 0x8}, {0x6, 0x3}, {0x0, 0x8}, {0x6, 0x6}, {0x2, 0x5}, {0x7}, {0x0, 0x5}, {0x4, 0x8}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfff9, 0x4c, 0x4, 0xc6bc, 0xc0, 0x7, 0x800]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x3, 0x4, 0x16, 0x1, 0x60, 0x6, 0x48, 0x18, 0x12, 0x24, 0x1b, 0x16, 0x4, 0x30, 0x1b, 0x2, 0x3, 0x1, 0x5, 0x30, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x7519, 0x0, 0xb, 0x7, 0x4, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x728d, 0x0, 0x2, 0x6, 0x39e6, 0x5, 0x747]}}]}, @NL80211_BAND_60GHZ={0x108, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0xa}, {0x6, 0x8}, {0x7}, {0x3}, {0x0, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x1, 0x9}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x6}, {0x5, 0x9}, {0x4, 0x1}, {0x4, 0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x3, 0x4}, {0x5, 0x1}, {0x7, 0x9}, {0x3, 0x1}, {0x7, 0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x5, 0x1}, {0x7, 0x7}, {0x3, 0x7}, {0x1, 0x4}, {0x0, 0x8}, {0x5, 0x6}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0x3}, {0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x1f, 0x9bf, 0x8, 0x29, 0x5, 0x2, 0xffff]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0x4}, {0x5, 0x2}, {0x5, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x5, 0x2}, {0x5, 0x5}, {0x2, 0x5}, {0x4, 0xa}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x3}, {0x2, 0xa}, {0x3, 0xa}, {0x5, 0x6}, {0x2, 0x1}, {0x7, 0xa}, {0x5, 0x5}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x9}, {0x5}, {0x2, 0x9}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0x9}, {0x4, 0xa}, {0x5, 0x9}, {0x3, 0xa}, {0x3, 0x1}, {0x3, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0xa}, {0x0, 0x2}, {0x6, 0x2}, {0x5, 0x1}, {0x6, 0x6}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x1}, {0x2, 0xa}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x1}, {0x0, 0x7}, {0x5, 0x9}, {0x5, 0x2}, {0x7, 0x5}, {0x2, 0x5}, {0x3, 0x2}, {0x7, 0x1}, {0x4, 0x7}, {0x0, 0x8}, {0x3, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x7f, 0x800, 0x9, 0x9bd, 0xfff8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x9, 0x9, 0xadd5aa892ec327e4, 0x60, 0x1, 0x30, 0x6c, 0x36, 0x24, 0x60, 0x1b, 0x91, 0x18, 0x0, 0x36, 0x16, 0x1, 0x60]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x1}, {0x1, 0x1}, {0x3, 0x9}, {0x7}, {0x5, 0x9}, {0x3, 0x6}, {0x7}, {0x5, 0x4}, {0x3}, {0x5, 0x1}, {0x1, 0x9}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x6, 0x4}, {0x4, 0x7}, {0x7, 0x3}, {0x6, 0x7}, {0x3, 0x4}, {0x0, 0x9}, {0x7, 0x2}, {0x6, 0xa}, {0x7, 0x8}, {0x0, 0x5}, {}, {0x2, 0x3}, {0x1, 0x2}, {0x7, 0x9}, {0x6, 0x2}, {0x2}, {0x1, 0x7}, {0x4, 0x2}, {0x7, 0x1d}, {0x6, 0xa}, {0x4, 0x4}, {0x7, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0x1}, {0x3, 0x9}, {0x7, 0x4}, {0x2, 0x6}, {0x6, 0x6}, {0x6}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0x8}, {0x7, 0x6}, {0x1, 0x8}, {0x3}, {0x6, 0xa}, {0x5}, {0x3, 0x2}, {0x6, 0x4}, {0x6, 0x3}, {0x1, 0x5}, {0x2, 0x9}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0x6}, {0x3, 0x7}, {0x3, 0x9}, {0x7, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x6, 0x3}, {0x3, 0xa}, {0x3, 0x2}, {0x6, 0x7}, {0x4, 0x6}, {0x6, 0x5}, {0x3, 0x1}, {0x6}]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xffc1, 0x2, 0x974, 0x0, 0x5, 0x9, 0xa00]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8001, 0xf, 0x2384, 0xfffa, 0x9, 0x6, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x101, 0x8f, 0x0, 0x5, 0xffff, 0x516, 0x7953]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x5, 0x1, 0x1b, 0x1d, 0x30, 0x1b, 0x36, 0xb, 0x45, 0x36, 0x12, 0x6, 0x6c, 0x36, 0x60, 0x4, 0x60, 0xb6cc9269b28c638c, 0x24, 0x2, 0x4, 0x12, 0x48, 0x2, 0x5, 0x48, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf8, 0x2, 0x4, 0xd700, 0x1684, 0xfffe, 0x101]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x9}, {0x2, 0x5}, {}, {0x2, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x1, 0x7}, {0x5, 0x9}, {0x7}, {0x6, 0x8}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x5, 0x6bad, 0x4, 0xaea, 0xd, 0x3, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x264, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x8, 0xac42, 0x7, 0x2, 0x80, 0xb991, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x24, 0x18, 0x6, 0x48, 0x30, 0x48, 0x36, 0x5, 0x48, 0x2, 0x13, 0x1a, 0x48, 0x36, 0x47, 0x1b, 0x0, 0x4, 0x36, 0x18, 0x4, 0x18, 0x18, 0x16, 0x0, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xbe27, 0x6, 0xa00, 0x6b43, 0x34f4, 0x2, 0x6]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x6}, {0x0, 0x5}, {0x0, 0x3}, {}, {0x7, 0x5}, {0x2, 0x7}, {0x1, 0xa}, {0x5, 0x7}, {0x6, 0x1}, {0x7, 0x6}, {0x5, 0x7}, {0x7, 0x4}, {0x3, 0x1}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0x8}, {0x4, 0x9}, {0x6, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x9}, {0x6, 0x8}, {0x6, 0x6}, {0x5, 0x4}, {0x2, 0xa}, {0x6, 0x4}, {0x4, 0x9}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0x3}, {0x5, 0x9}, {0x7, 0x5}, {0x7, 0x9}, {0x5, 0x5}, {0x5, 0x4}, {0x7, 0x5}, {0x3, 0x6}, {0x0, 0x2}, {0x3, 0x8}, {0x3, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe03f, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3, 0xfa0]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x4, 0x4, 0xc, 0xb3f, 0x8, 0xc]}}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x80, 0x6, 0x9, 0x5, 0x6, 0x6, 0x1]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x18, 0x6, 0x18, 0x6f, 0x60, 0xb, 0x24, 0x2, 0x60, 0x60, 0x6, 0x69, 0x30, 0x66, 0x2, 0x58af52a9963e3bf, 0x5, 0x6, 0x4, 0x48, 0xf, 0x1b, 0x4d, 0x48, 0x6, 0x5, 0x4, 0x3, 0x4, 0x60]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x9, 0x2, 0x0, 0x24, 0x30, 0x16, 0x9, 0xc, 0x1, 0x5, 0x1, 0x4, 0x1b, 0x6c, 0xc, 0x6c, 0x60, 0x6, 0x1b, 0x36, 0x1, 0x5, 0x6c, 0x52, 0x36]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0xb, 0x19, 0x5]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x48, 0x6, 0x4, 0x30, 0x16, 0x6, 0x2, 0x60, 0x5, 0x60, 0x12, 0x16, 0x60, 0x16, 0x18, 0xc, 0x18, 0x18, 0x49, 0x3, 0x60, 0xb, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x4, 0x2}, {0x6}, {0x0, 0x7}, {0x2}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x3}, {0x1, 0x7}, {0x2, 0x1}]}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x4, 0x60, 0xee, 0x2, 0xb, 0x3, 0x70, 0x48, 0x1, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff01, 0x7, 0x0, 0x2, 0xfffb, 0x2, 0x2, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1b, 0x6, 0x8, 0x1, 0x5, 0x0, 0x7, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0x4}, {0x3}, {0x3, 0xa}, {0x0, 0x4}, {}, {0x7, 0x1}, {0x1, 0x6}, {0x3, 0x6}, {0x0, 0x8}, {0x0, 0x2}, {0x3, 0x8}, {0x3, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x4, 0xa}, {0x3, 0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x3, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x1}, {0x7}, {0x5, 0x1}, {0x3, 0xa}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x7, 0x6}, {0x7, 0x9}, {0x3, 0x9}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x6}, {0x2, 0x3}, {0x4, 0x4}, {0x5, 0x6}, {0x5}, {0x1, 0x5}, {0x1, 0x5}, {0x5, 0x9}, {0x3, 0xa}, {0x4, 0x1}, {0x3, 0x9}, {0x3}, {0x4}, {0x2, 0x4}, {0x5, 0x3}, {0x7, 0xa}, {0x4, 0x7}, {0x4, 0x9}, {0x1, 0x7}, {0x7, 0x6}, {0x3, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x30, 0x0]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x30, 0x2, 0x2, 0x18, 0x2, 0x2, 0x18, 0x60, 0x4, 0x60, 0x1b, 0x6, 0x6c, 0xc, 0x6, 0xc, 0x3, 0xc, 0x1, 0x48, 0x24, 0x16, 0x36, 0x6]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x36, 0xc, 0x18, 0x4, 0x24, 0x6c, 0x48, 0xb, 0x9, 0x3, 0x30, 0x18, 0x6, 0x12, 0x5, 0x5, 0x5, 0x24, 0x1, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x2dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x4}, {0x6, 0x4}, {0x1, 0x9}, {0x3, 0x9}, {0x7, 0x1}, {}, {0x7, 0x5}, {0x6, 0x1}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x7, 0x6}, {0x4, 0x6}, {0x4, 0x7}, {0x7, 0x3}, {0x0, 0x7}, {0x7, 0xa}, {0x7, 0x2}, {0x3}, {0x3}, {0x4, 0x6}, {0x1, 0x2}, {0x5, 0x6}, {0x2, 0x1}, {0x7, 0x1}, {}, {0x0, 0x7}, {0x5, 0x9}, {0x5, 0xa}, {0x3, 0x1}, {0x0, 0x3}, {0x1}, {0x2, 0x5}, {0x3, 0x7}, {0x5, 0x7}, {0x4, 0xa}, {0x5, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x0, 0x7}, {0x4, 0x3}, {0x1, 0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x3}, {0x3, 0x2}, {}, {0x0, 0x2}, {0x2, 0x4}, {0x5, 0x9}, {0x2, 0x9}, {0x5, 0x5}, {0x0, 0x7}, {0x3, 0x5}, {0x3, 0x9}, {0x6, 0x1}, {0x7, 0xa}, {0x3}, {0x1, 0x8}, {0x2, 0xa}, {0x1, 0x9}, {0x6, 0x8}, {0x3, 0x4}, {0x3, 0x7}, {0x0, 0x4}, {0x1, 0x5}, {0x2, 0x5}, {0x1, 0x2}, {0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x6, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x7, 0x9}, {0x5, 0x8}, {0x7, 0x5}, {0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x4, 0x3}, {0x5, 0x2}, {0x4, 0x9}, {0x6, 0x2}, {0x4}, {0x4, 0x2}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x6}, {0x1, 0x3}, {0x5, 0x7}, {0x6, 0xa}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x5}, {0x4, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x4}, {0x1, 0x4}, {0x0, 0x9}, {0x6, 0x8}, {0x3, 0xa}, {0x1, 0x6}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x6}, {0x1, 0x8}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x6}, {0x4, 0x6}, {0x7, 0x2}, {0x4, 0x6}, {0x2, 0x8}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x9}, {0x2, 0x9}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0xa}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x9, 0x50, 0x6, 0x3a, 0x0, 0x24, 0x3, 0x6, 0x1b, 0x17, 0x34, 0x6, 0xc, 0xd671b9fd05e712ef, 0x16, 0x30, 0x9, 0x6c, 0x6, 0x18, 0x16, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xb7, 0x3ff, 0x3, 0x1, 0x40, 0x81, 0x1]}}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0xb7d23620f2ded7d8, 0x30, 0xb, 0x16, 0x2]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0xb, 0x0, 0x4, 0x1b, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x4, 0x6000, 0x9, 0x0, 0x97c, 0xfff, 0x755]}}]}, @NL80211_BAND_5GHZ={0xf0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x81eb, 0x9, 0xa8d4, 0x5, 0xfff, 0x9]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x5}, {0x2}, {0x3, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x8}, {0x6, 0x1}, {0x7, 0x9}, {0x3, 0x2}, {0x3, 0x3}, {0x3, 0x6}, {}, {0x0, 0x4}, {0x2, 0x1}, {0x2, 0x6}, {0x3, 0x4}, {0x3}, {0x1, 0x2}, {0x4, 0x5}, {0x4, 0x6}, {0x5, 0x7}, {0x7, 0x9}, {0x4, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x1, 0x55d8, 0x8, 0x40, 0x3, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x5}, {0x3, 0x5}, {0x6, 0x1}, {}, {}, {0x3, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x1, 0x4}, {0x5, 0x7}, {0x3, 0x4}, {0x1, 0x6}, {0x2, 0x1}, {0x3, 0xa}, {0x7, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x4, 0x9}, {0x4}, {}, {0x6}, {0x6, 0x2}, {0x5, 0x2}, {0x1, 0x3}, {0x4, 0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x4}, {0x5}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x9}, {0x4, 0x7}, {0x5}, {0x3, 0x9}, {0x1, 0x7}, {0x6, 0x5}, {0x2, 0x3}, {0x4, 0x1}, {0x2, 0x8}, {0x0, 0x8}, {0x4}, {0x5, 0x8}, {0x3, 0xa}, {0x3}, {0x4}, {0x0, 0x8}, {0x6, 0x8}, {0x5, 0x1}, {0x4, 0x2}, {0x5, 0x9}, {0x2, 0x5}, {0x5, 0x9}, {0x0, 0x4}, {}, {0x6, 0x8}, {0x5, 0x2}, {0x3, 0x5}, {0x5, 0x5}, {0x4, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x9}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0x2}, {0x7, 0x7}, {0x4}, {0x1, 0x8}, {0x4, 0x5}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x9}, {0x7, 0x6}, {0x5, 0x4}, {0x5, 0xa}, {0x6, 0x3}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x8}, {0x1}, {0x1, 0x4}, {0x4, 0x5}, {0x0, 0x8}, {0x2, 0x2}, {0x7, 0x8}, {0x0, 0x2}, {0x2, 0x4}, {0x1, 0x9}, {0x2, 0x2}, {0x2, 0x3}, {0x4, 0x8}, {0x3, 0x8}, {0x0, 0x7}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x1}, {0x4, 0x4}, {0x5, 0x1}, {0x6, 0x3}, {0x0, 0x1}, {0x2, 0x4}, {0x3, 0x2}, {0x3}, {0x7}, {0x4, 0x2}, {0x4, 0x5}, {0x3, 0x9}, {0x4, 0x9}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0xa}, {0x3, 0x7}, {0x0, 0x3}, {0x7, 0x9}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x9}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0x7}, {0x4, 0xa}, {0x7, 0x6}, {0x1, 0x1}, {0x1, 0x8}]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7f, 0x1, 0xfff6, 0x2, 0x7fff, 0x9, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x4, 0x8000, 0x3, 0xa6, 0x0, 0x7f0a]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x1, 0xc, 0x1, 0x4, 0x51, 0x30, 0xb, 0x1b, 0x60, 0x5, 0xb, 0x48, 0x18, 0x1, 0x16, 0x18, 0x5, 0x60, 0x60, 0xc, 0x9, 0x48, 0x12]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5c, 0x9, 0x30, 0x48, 0xe22f25a233f63f2, 0x3, 0x6c, 0x1, 0x60, 0x6c, 0x12, 0xc, 0x6c, 0x12, 0x60, 0x1b, 0x0]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x5, 0x4, 0x9, 0xb, 0xc, 0x30, 0x5, 0x5, 0x9, 0x4d, 0x5, 0xc, 0xc, 0x13, 0x1, 0xc, 0x6]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0x36, 0x48, 0xb, 0x4, 0x5, 0x6, 0x30, 0x1b, 0x14, 0x0, 0x24, 0x30]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x3}, {0x1, 0x9}, {0x4, 0x7}, {0x6, 0x3}, {0x1, 0x6}, {0x4, 0x9}, {0x7, 0x3}, {0x5, 0x7}, {0x6, 0xa}, {0x7, 0xa}, {}, {0x1}, {0x4, 0xa}, {0x4, 0x2}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0xe38}, 0x1, 0x0, 0x0, 0x8000}, 0x40084) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000010c0), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4000000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r4, 0x10, 0x70bd2b, 0x0, {}, [""]}, 0x1c}}, 0x4040004) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001340)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000001480)={r0, &(0x7f0000001380)='!\'\xa8\xfa\x00', 0x400000, &(0x7f00000013c0)={@_ha_fsid={[0x200, 0xa]}, {0xfff, 0x8, 0xd53, 0x10000}}, 0x702, &(0x7f0000001400), &(0x7f0000001440)=0x6}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xec, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) (async) socket$unix(0x1, 0x1, 0x0) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000016c0), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r8, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x25}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4044080}, 0x8011) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@bloom_filter={0x1e, 0x3, 0x9, 0x800, 0x400, r7, 0x5, '\x00', r5, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x7}, 0x50) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), r0) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0xa4, r9, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x632}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0) (async, rerun: 32) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000001ac0)) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001c00), r11) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001c80)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x24}}, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001dc0), r7) sendmsg$ETHTOOL_MSG_WOL_SET(r13, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x48, r14, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_SOPASS={0x17, 0x3, "f20af3b95f60ee8e4ed2ae5e30af2b35bb27c6"}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000001f00)={'filter\x00', 0x0, [0x1, 0x400, 0x5, 0x2, 0xaa]}, &(0x7f0000001f80)=0x54) 710.225369ms ago: executing program 3 (id=4420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@empty, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socket(0x80000000000000a, 0x2, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) (async) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRESOCT=0x0], 0x7c}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x8) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, &(0x7f0000000740)={0x0, @bcast, @bpq0, 0x0, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9acf, 0x7, [@null, @bcast, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) (async) ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, &(0x7f0000000740)={0x0, @bcast, @bpq0, 0x0, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9acf, 0x7, [@null, @bcast, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000080000000002000000300004802c0001800b0001006e756d67656e00001c0002800800024000000000080001400000001b0800034000f4f9c7543a33e7802000d826cbc050e1bc26e3b6c5e700000900020073797a3200000000140000001100010000000000000000000000000a5d6a5aea61e1c329c7243bed8f744eb017b45a96f070d015b3c4374f98745cd4611cba8cdaec5725398ce4bfc588121a92b01fa5839b7a7a37c20311aa89b54d60f3baccddd64bd6681124919b968bdf6a60da429dc841463dd214abb53b066315ace5b2d2e60f25eaeca3989ffe0cf3dd5173b1afc43d2992f356e283141fcd85612a0b5393239e352d494197838c299a0f4be091f6024abb1035599d03f43ce96886bb5e0000cb76292e7238cac64d67ef968f80d305a461b534a4ec07c0b9f401da2ee8604ef0ead67deb0febb1c169671bb2dc4f9dce8f02b01c575e89122cafaad53fe4e0d04af150097fd77c16ec21373d41fcdc5c70e5d6e7cc9a"], 0x84}, 0x1, 0x0, 0x0, 0x40044}, 0x80) 514.803786ms ago: executing program 2 (id=4421): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @remote, 0x743}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e21, 0x0, @empty, 0x5}, @in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x78) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x94, "4ef378ef1db0854de75921524008e84e1eab542f2efd05a65f57df83a3393431f0f1e198754233c2bd3ede823f6310205c38337e2e68fe5d1a76fdfc3681cc477932d98b6b655a2bc2246c2e3116e78f0ec873db632e5f50b966e6ffec069397de2c13db58ddd05cf0ab095262331f57c06a5f8b052013f84a7193845ad0a8d89aeec60dfd8431ca156a17879ed5e3f189be7416"}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180)={r2, 0xcc, "cf0468b7a33ac00612fb427a50923489e288a17ceacd268bee4b6df08adeb5eb2957e0fc88c092aa7c7b0d4932c60faa42a59c7a44897d3b147d08c8925c81ac7794f135762f3314252ce04aa4823169e0a8edaa4f0331676f0539d7da4c088236dacaa70f702ee7f92f530a9834fd5462695f67faff6ccb0a63435bfd7f9e0f7b5eb350761675dcefaaa385c21729e8d231b1d795d7dc23b9208f2b185242e756fb798179f5d8cad623a52ec11def2961884e405dc58f2ab3e9b55268274c2dd7aea98a4450b566cfdd2ebc"}, &(0x7f0000000280)=0xd4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x4, &(0x7f00000002c0)=""/4, &(0x7f0000000300)=0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={r3, 0x3, 0x6, 0x7f}, 0x10) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @remote}, 0x80, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)='ip6_vti0\x00', 0x300, 0xa, 0x1}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000440), &(0x7f0000000480)=0x4) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, @broadcast}]}) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20000001) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000840)={0x0, 0x0, "0f49870e11806f9659e2a2238e96081f"}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000008c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000881}, 0x40080c0) r16 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r16, 0x89f3, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0x8000, 0x80, 0x0, 0x10001, {{0x9, 0x4, 0x1, 0x28, 0x24, 0x64, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@generic={0x88, 0x10, "ddb669c2d9dae73bfde940c947a7"}]}}}}}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000b00)={r2, 0x80a4}, 0x8) r17 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000c80)={{r17, &(0x7f0000000b40)='}.\x00', 0x10000, &(0x7f0000000b80)={@_ha_fsid={[0x5, 0x1000]}, {0xfff, 0x1ff, 0x5, 0xe}}, 0x7, &(0x7f0000000bc0), &(0x7f0000000c00)=0x2800000}, {[0xc7, 0x8, 0x0, 0xd0e7]}, 0x1, 0x3, &(0x7f0000000c40)=""/3}) 445.287673ms ago: executing program 4 (id=4422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0x801c581f, 0x30000002000005c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @alu={0x7, 0x0, 0xb, 0x0, 0x7, 0x50, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 325.368615ms ago: executing program 4 (id=4423): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000003800)={&(0x7f0000000240)={0xa, 0x4e21, 0xb, @loopback, 0xfffffffa}, 0x1c, &(0x7f00000036c0)=[{&(0x7f0000000640)="fde1065815af430fd7701f7931f443d813e153b2c93f2efc9c87dfa0299aa4f8821a065b6574cbd5aac3401ebd8653ffcf69449b4c4d99a20e50bf23cb569a420dc3db0a8b96c8e66994499e609df7fad0bcc816206e95f2638046505c7cab2812f03ca2b605cb571a3a823f8fb48d201f293c4e0b61f199df650107d9c089f8118a9be2aab11a2c06c9268abacc0f461c630b", 0x93}, {&(0x7f0000000700)="2e024305da53d78354f88c09a0ed3daa124ae52500e467fdc1199911b2907e2a0f6d05e5fcd3389f32835305e48e28f10257437946fe23986305adb30a9bba9902f9e19358a18e17a8e39cfa6ffcfa49fbfb952e90d5e662ae098eaacf2af6885d543ef3f109d2bf6fe2b5ac0cf2783864905f35ea98ce51530e3e2cf87ccbb293faaa56a35d4b3601972d2bb23327ca67b20b51d5f338e14ea7313584dde62d23da1e5d1d8a148d440abf4f0618424c396adf22f344697c67a46cb392122af5b5d353b27b5d64de0ffe1109658adf1132ae9fe637160072bc78af3d6434683eb3b8a681d9136a26", 0xe8}, {&(0x7f0000003480)="544b69db173efe1bc7b3dc7ac2b2c8dfd56dcb3a2b42cf0cc9da4f7b5931471139704aabd4fa100f1e4a02ea316c59350b7e66700f808a1c15b887f41000d90c85c925116ab5e98935aec8e7e00824e6a8964f17cc7750b79766a19b641168b492dae3e10b1d3fddd636a2e7d97f23e1defd4b145bb38f8b3ff75fc44cc9776966cd3c8ecfcd1cb36a93b87df363f425e489cb61589f18d35c9cdd38719ddef9f35fb66cf36f6e1f63b112de4455b1b7f4ed464b1d3b5f261c248efc40bc852e34a01c9dd66a4b836d6cc09ab59f71f66890dca4de2ddee3a36c99765a0f6586720ba8c16e048d44732cad52a8b723e065", 0xf1}, {&(0x7f0000003580)="0d0ecf357e8660b0a56a3e93b699c9a833135d7ce6a0969abd26864635f098b674ba4d4fdbea7e331505bf8cbadff9620211ac6355673aec72540104d94f90b941c65e91556fa77e955a7e4a72ae356b3c669ac59f54483b81311f0348d3d5870204954f8b3d888970d91aaf818a400031f87d1ade21206daaaa2ecbbff261cb100d6144b8290d253bd10b2d81cc3af626a598b48b245e5d866563891cf64c679d3cd201b03dcb57b077b7fa0973b2bc64afe2921a5bbf769b774a91048f19506fec510277043f298628", 0xca}, {&(0x7f0000003680)="f0e78f4719d08eb7f10bf0ab4a4a30fd5e97a5fa2aa83f74773e7f0a97541e025b0915086e8d13", 0x27}], 0x5, &(0x7f0000003740)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x3b, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x3}, @generic={0x3, 0x21, "0a71bf41fe4c9c74179380f7cc0e31ba9971b423dec7e5d64c4d32e5efde9a6f42"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}], 0x90}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001bc0)={'gretap0\x00', &(0x7f0000001b40)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x7fffffff, {{0x18, 0x4, 0x3, 0x38, 0x60, 0x65, 0x0, 0x10, 0x2b, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x0, [0x9]}, @rr={0x7, 0x1b, 0x5c, [@broadcast, @loopback, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @ssrr={0x89, 0x27, 0x52, [@rand_addr=0x64010100, @private=0xa010102, @private=0xa010100, @local, @broadcast, @empty, @loopback, @private=0xa010102, @multicast2]}, @noop]}}}}}) sendmmsg$inet(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="96a45df23a1a7f0323f249d39cc5923223b206a99251905777bae9f94494cc7e47f772e8e9475a5073e388e3b02645d55828ceef18d700ab8c88ee965699ce8405fe21a9ebab965557ca2749d6f68e3e82544a433cb7184abf1abf96b79381781772bbb29d392188cbbd6b103a354615055cb51b50cde0a8d9a76ed940aadf0de3ee81001ffe694b0c99d73669f776cb2bbf37942bb933ef", 0x98}], 0x1, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @rand_addr=0x64010101}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@rr={0x7, 0x7, 0xfe, [@rand_addr=0x8]}, @ssrr={0x89, 0x7, 0x72, [@multicast1]}, @rr={0x7, 0x2b, 0x64, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @empty, @multicast2, @rand_addr=0x64010101, @broadcast, @local, @loopback, @rand_addr=0x64010100]}, @rr={0x7, 0x13, 0x5, [@dev={0xac, 0x14, 0x14, 0x35}, @remote, @broadcast, @loopback]}, @ssrr={0x89, 0xb, 0xba, [@broadcast, @multicast2]}]}}}], 0xa0}}, {{&(0x7f0000000500)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000000580)="ac3f19a9cd5abab27f1a50d29543dede9f04a836e7e96eef1475e75af1fa022a6f6e2822b5a2920be2ab537263aafb1c266f30e485931279cb36dca0f33c68c3f7a4b5f536ab3ca386d02c4d7189428930ab8fa584ea10883df4a16ca81761b2465e", 0x62}, {&(0x7f0000000600)="dc6f6509d8f155c59a4b", 0xa}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="e2429bf904f751f1aecb66b4570f34cf48511e3c4444dc34679b77d39be6d7db0698886f8f987eab507ff97860594dcc730a560784e830ce49751ccfaeade35bafe0105e952c9bb61f5c0b2c029ff9e895c29fe8c9e6e7a0c3721f8023928832d1420131df662f1693b7b92ebaee61a21221d6989b98ce", 0x77}], 0x4, &(0x7f0000001c00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x58, 0x1, 0x0, [{@multicast1, 0x7fff}, {@local, 0x40}, {@multicast2, 0x100}, {@loopback, 0x2}, {@multicast2, 0x2}, {@multicast2, 0x10000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_addr={0x44, 0xc, 0x81, 0x1, 0x3, [{@private=0xa010102, 0x6}]}]}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x83, [@remote, @multicast1, @private=0xa010102, @remote, @broadcast, @empty, @multicast2]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x38, [@multicast2]}, @noop, @noop]}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@noop, @cipso={0x86, 0x19, 0x1, [{0x5, 0x5, "1074c7"}, {0x5, 0x3, '|'}, {0x0, 0x8, "c2b0d3f1edc0"}, {0x1, 0x3, "8a"}]}, @generic={0x44, 0xe, "195f26d5ffea3ec2a31cdf61"}, @timestamp={0x44, 0xc, 0x10, 0x0, 0x0, [0x0, 0x58]}, @generic={0x88, 0xd, "e3b9928fd472ddfdb19604"}, @rr={0x7, 0x1f, 0x9b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x50, 0x3, 0x2, [{@multicast2, 0x6}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8b}]}, @lsrr={0x83, 0x23, 0xa, [@loopback, @broadcast, @private=0xa010101, @local, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @noop]}}}], 0x1d0}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001e00)="1bf8ba4c87ae5c73a3132808ec3e06b3651f49c45bc1db22755a120a9ddcdd3cddaa5de330a66dc4a2e02f9aa9486174754cd3a863d4497baf0353e7bac6a94f736fc718b892dead3ae2dc66c21ce1ead36482d3b37af168c60e7d84ac446741774a9d475f4ba0e495a8ddab3222e2f4941723d780476012d49320", 0x7b}, {&(0x7f0000001e80)="25e8162e4be74254a97e814975fac21f5ff2c8f48ecb403bef036f694516183b6fad1c998423e9bddacf88bd8a0634fd5532f2f9aefcfe515da607334871bbaf531736107af40175", 0x48}, {&(0x7f0000001f00)="3df59741e016d02a86121f2c9d4c7dddb438f297f2f423214878e552eb377bf8187298081f1699d09281cbfcb8d799c4af38a2f83d2b2fe3c5027b71c21a4285b9a6dd09baf3cd85ed2ff4ea0caf40273fc80a6940a9300d891e1d552d623396695fdf99c63ac8ea2201497860a0297577c77624eed12a43d4cdbedc95f30fcc7214d2f8111b592d036ed314cf91bd7dd13b6f732446ca702901727e493411ac58daf204549bc5de6a8b59d8dca21fb7", 0xb0}, {&(0x7f0000001fc0)="364396a95e380576cb3815dd8bbbd16ab703f8f9d904ef7d004c16653959d3d589a498187c8c9ba72a6611eeeead2be933f89d5eb3a31d708491d2d61090b97db22ffa790cb713128bc4ac6bacf5eb4d2aee8137d1c8a04f66df72d3cdb51d591892058073b4fab2db07a852c7b71b643fbbf75d9c63371d0ecd6de73107de70a1c5da7fb7fe70cade172c5bd10a0b3658cec3ef705eef713d031d433b4f0271bf06a3575e25830518527898c59f4d9c6def269c8c38ef1f23c56634a29d151edbe1ddf956aa882ecea828697f31492cc16d054ece5a48614cdd6fc0f6f580845a1d8d3752e750f581704335d1a5", 0xee}, {&(0x7f00000020c0)="7ad8ace9baed5d335a6baa6bbe6378cfe29079703c4ebb0045a14400e755a33797b70cf631e1694a15b3c5e1dfa28b3160536c68a11ca710def9504715bf96f26a8f6c7dff604e211bcfd8fd6c32d72d9a3a14a950eb7cbc2576677eed3ceb9f94248e91308f945aecd780ffcc4b2d9550d798651cb0e2a3105df41c43afdf787785ce74017f3beecb0b17bb0dce349faf6914f7208721dbe99df6a4bb0d126ef6f8cc7866fa6f1b3cbd338f19", 0xad}, {&(0x7f0000002180)="abe5f900eb52f0e75f3ace8031e64351d6d7cede7044afa365cf554dfe91e48e621248e5051d410a5a405e4c14351e3df27bae8cd77684e7a641ed18b7d44169ed9ce814d0d6b923671ff47a9cd3893e4dea122481dc3a0231b16b7599b0436857aae53508d8428b968e0113cb9efc3f09aa7a9c7185c61ca16f17bbc75d799109c2fae0c4f0befe3e248037f5b29a9c4dba8170d7743177a19b7722838433bb383500967f72df98562c7b30d85e362cc960187f35aac3595e442d2278dc722f363e82c796a75acd6fc9623bd03702318e49b09c5599b02fb975964df01939841190015b0fa8", 0xe6}], 0x6, &(0x7f0000002300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002340)="875d39bf42687005848c788534c8a769287b66a6b667e3b6c2a03ab9cf5a3308839d8afed657564a83d92320b64bb7960d6962d1a086c0aeac1d232c0e784171662a85d6e4177132acfda1549c130112f724ed2c0f2cdc0c47034213bc41aa5b447c0d9290e1a54938a887f58c7ac9770ac2351e328ef3371e2427fb08f2ca309f29ea79de1c03002524a0536e440aee4804f41fe69757905529253d9b6eff1a76b8790cb72a840c69c0cdf5a2", 0xad}, {&(0x7f0000002400)="1dfcab32ad94e51eba83dda6390400983994512d18bc43d054cdf1ab09fba24414771b130ae64234b3a900f2708134aa42de5b686384fbb252b8fda98e280abdab0d860ba3137e0d01bc5ecac570d8b766f7be249b6751b76da3914d3129153e9bc349d95466f701361321d271", 0x6d}, {&(0x7f0000002480)="3673a8fcf68d0049d27283deca2d4e4f4b337d03765b25ca4c031411ebc16272a3db9e0180099ab8cf333efe16ab6fe52d743df3cddce4e998a66dbd915a46902b73ebd4d8f526dcf89af42973f70f2b8c2abf5f6967b083b97d572a5a5cd017759ca7c48144d6d83c3b66325549511745d447276c59cb90d89ba987f9b03223a51c465d0d827f6b612be349a4bb6279b74941b75aa23da88e46fbcf2654254c06cd401389587a", 0xa7}, {&(0x7f0000002540)="c6683dc8051364d7919037c337df41da930d4c79125e0c72f0ac1ccce122f8a467fe3095026ca0f478f8b51d066b8ac6ea744b2aa02d4030414244d813148c749bf620f2ec098fc42eeaeefb80d0ec1867ebab755738b67835780f92e9be98dd6eee423b6e84776d76d98b403d9c9e6c23b29840c39c40646c0114065d81daf5adb511a5bb28599adccb3e8e2652cc603ff2", 0x92}, {&(0x7f0000002600)="f6426733805b3ee26976112ca28639c46f0b9219a13bbbabe97d3354c483a6ff92c8162996b6bfb2335cdd9d0e7611f2dd80d86d474b41f382f55f6875ab96bbb742caab2b3fdd8b778e7af0459afbc229479349568ae98fc7", 0x59}, {&(0x7f0000002680)="a08a4f16a7f5c4dcd199ffeb7551163b884af0cb300e3cec73a17d8f983f4e8dce5b08f8a43d4e516fad3bc45d04e12e025157675b630192d743745d364b1e", 0x3f}, {&(0x7f00000026c0)="30b078241a003022392a6f2c57bc8c2f2297bd2aeb63efd629f7ce98691bd5fa208b259de0f246a731ccd59eddc370e64eba6cafd18b405e51c79d6898cfde7077e6b063d2d6d95e86f290559b15b2dba2fd6eaac770101593135f3d38bf7326ea5d211f18bf78338f4593f5", 0x6c}], 0x7}}, {{&(0x7f00000027c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002800)="adcee0fae3b48e0f2e3b047e5c00111ef1d2f64bc545199ff2dc8afe3670ef88d0d98496b81edaee51e6f9c2b6345e7e211a7be82b80be790824c7241efb3881a0e18cee9c3367214bb1c6886163cdb297997ba2d1b52345384a82a5f2a84095e41a0741ccb6006db87856cbd3a681e318ac1f3e798476bdc878cc9cf8ad6928b2837b0d78aa5e9f5ac3e0be612e6786becfa967c266d25bd25fe2b8b527", 0x9e}, {&(0x7f00000028c0)="556e9e8b6bfeed4750441e615ed2589d0034effd2e712a0adf110eaf32ea10e9f9adc7dfa07ea80d3f74bf41cf97007372e386a5dbcb8bf764f27d563f1061dc7bd03d9feb09b4e928a7a0d4d92edf6512f3ede64d03ad74b35f32ab5c4959e672f9ca6def04501ad011d9f5eb8626d91c535768598d1a4f6cd8a3eb7fb2aa5eb46e36b032472ea54f5d64f3e426012e8b01de3095ea187c7738c622f6260a537a10be4f5f0019b7eb8d3d364a9dbebb64509880b5d4a3ddf79a43bbb5285158962c43b8fa4bda05eb7edf828fb7b7a7d6f788193afe4cafabfb4c2b3c1b2c79", 0xe0}, {&(0x7f00000029c0)="0924b0b69b54ef5a16e9f3032375adc2a0c100e989e98b4f62a1cef2d6d4779f2c9f376c5abdd533cef1af71d3ac867dda78dea06ad6e8846cef2d2d6196a5713e4f9d1e65ce3c16efdd343c67515411c87178c21c6a76c0de22d3043023eb08a0a6", 0x62}, {&(0x7f0000002a40)="21d41ed412cc3f837439fa2802dbdfdee0f73f09efae2900f03890ced894aadf4088fd106fcd30a8a1dea99cf92f63a2e16d7972c5caf69dc0cdb62a3e32eba042fc2d3e01318d4d5b2319fd20425cc1b8ae9b9db3574deb8cad21f6ef0d1da7c20a2e24d06742cb6770ca4b90e7e76cf8030ad41ae84b8c9b5f344c0fc502dfe176f643cdd419234fe2f289d2993db690e9b550711887902c6cb0a6f3284f32a86eb28089ba3c46f5bc8ee2c79db8da62790d564e6b94e5b0644af508e24b9a4f71ecb32f", 0xc5}, {&(0x7f0000002b40)="5176485450e570b6dd62c7dc0f86938bdaed5334dbe59719c0a2bc2bedd245d980d51ef6b40d6696326a35c45906e7c0e25eccbb2711d286fc29d8ef45a891d4da8bae6e7301dd4da8da8945fcf5ad95f213c46527ef222f22fe589ddc474c2935e036bf3f029f8af04e382ffb7fb7295668bd4a1aa13ca317a1ae4909c53d6981467292f5ca295092bf536d", 0x8c}], 0x5}}, {{&(0x7f0000002c80)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002cc0)="93bd5fde79936ff99d82d006f5b68b6e2a4db5c532ddba4fe102b77dd1f9f55a40c267e0f2c78dd929156fb7856176f57732ce92859224d0003f8d14f4dd9977724713920a9d45900ca5c76b6f90a8a7930eb757b40ceee2e155a3689faf58f40c26f83648e500caabbf4335922da2db80acfdb8952f43a02aea5b34bce55794c62e698362078d32279443150dcdf8461a4b193ce2de43a66aa8ba868c811fb85c2a5c6ea5fe8dbb109abb114c8b79bd387f654b79b74da6df5b9b23dca97bf46dc8591b70ee3d44c75af9", 0xcb}], 0x1}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e00)="e3cfa61e855c5e686dc6073e166437e7087d67302fc2dcbda71ad77fd01c0ef6615589e7189ee38f4b24b194653a8ee6834218c1c5e0e6b20c7ca7627223f593ae986f476c03a47cc259040526599fd3ee946fced6e9b383e324f743bfbf50dd8234971d05c0c5ca586ce5c462a883c48ef1ab83b2662dc1f73caf9190f0c45dd3c0b3008d53aeb367d29a93610fe95f762721ff9cd5ca4d4da77373c9413f99c1586a94f4c6cd8a", 0xa8}, {&(0x7f0000002ec0)="d6fa76f5a4fbdfab1e02dddee17a45e90c56701b575ad63309fab682593db1c78e56b2836041d5cbc4a5e15f", 0x2c}, {&(0x7f0000002f00)="94e3cf8a4c42dac1b89b077007abea2dfeffbbcc24c4d0dc94ce0732179539fdebb9b80287f9a2466ea4c922dbe01b9bd4d259", 0x33}, {&(0x7f0000002f40)="29b8ee9dd393c2f59ad8fccb971c4bf8ca664a2358419462bad0f2c6c579aee3d0ed03f85a1a7c313725aef6905ae724d897077ee8b50215d50bd4453fba701fc98fce2e876fa22e6d11913300a611c8295752b9e97826579a85d2414d84fdba5ec9a72a12cfe9155d17bf5313c4b78ce128b4b08a8792b22a50bf245d24ae243c4d5422f92ad57eba5d8826028b5d9f25a805db4f7ed781cb1ea168cd0904a77ab41ff86e1edb3c42261aa2cc71a9c3378171cfef021c6cf56f228384c9b72fe96474789a065b49c5ac416f35eac13ab7f5e1b9a7873603aeaae2edd7dcb1457822a6", 0xe3}], 0x4, &(0x7f0000003080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@generic={0x7, 0xb, "72caf5e2424d7f30f1"}, @timestamp_addr={0x44, 0x14, 0xb7, 0x1, 0xe, [{@empty, 0x5}, {@private=0xa010102, 0x91}]}, @cipso={0x86, 0x45, 0x1, [{0x7, 0x12, "132f4aa4509f3a76175414ce29ebfe23"}, {0x7, 0x10, "0ffb2d7d761c11496253ee70ad54"}, {0x6, 0xc, "a797388d19469188817b"}, {0x0, 0x11, "5e5b7a5f0fe8b1c0c8f65f353a0eac"}]}, @timestamp_prespec={0x44, 0x34, 0x3c, 0x3, 0x1, [{@empty, 0x1ff}, {@local, 0x1}, {@private=0xa010101, 0x45d}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x10000}, {@local, 0x8}, {@empty, 0x7fffffff}]}, @timestamp={0x44, 0x8, 0x5e, 0x0, 0x4, [0xc9]}, @timestamp_prespec={0x44, 0xc, 0xf9, 0x3, 0x2, [{@multicast2, 0x4}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0xe0, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x17}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x6}, {@remote, 0x7}, {@broadcast, 0xe1}, {@multicast1, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010100, 0x8}, {@rand_addr=0x64010101, 0x9}, {@private=0xa010102, 0x7}, {@loopback, 0x401}]}, @ssrr={0x89, 0x1b, 0xc3, [@remote, @multicast2, @rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback]}, @generic={0x88, 0xd, "93860fa90318f3ebb87281"}, @timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x3, [{@broadcast, 0x503}, {@empty, 0x4a}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x32}, 0xc}, {@broadcast, 0x2}]}, @generic={0x44, 0x6, "6d63d844"}, @generic={0xe, 0x11, "df67b443fc67f39fa34c8aebb432bd"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x208}}], 0x7, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfe00}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/111, 0x6f}], 0x1, &(0x7f00000003c0)=""/47, 0x2f}, 0x3}], 0x1, 0x22, 0x0) 265.110799ms ago: executing program 1 (id=4424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x24}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd28210081000000000000002e2d3a799000000000000104004e20004db0"], 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x20000108, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a5058240c34f786574f25447e6392f58000082a7"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @sk_skb=0x5, 0xffffffffffffffff, 0x6}, 0x94) 152.460933ms ago: executing program 2 (id=4425): sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xc8, 0x0, 0x300, 0x70bdad, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9a}, {0x6, 0x11, 0x8bac}, {0x8, 0x13, 0x7f}, {0x5, 0x14, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x11}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x101}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7ffd}, {0x8, 0x13, 0xb}, {0x5}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) r0 = socket$kcm(0x2, 0x5, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000050a05000000000000000000020000060c00024000000000000000020b00070066696c74657200000c000240000000000000000108000b40000000040900010073797a30000000000900010073797a300000000020000000080a05000000000000000000020000000900010073797a30"], 0x1ce0}}, 0x40000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_rxfh={0x47, 0x1, 0x14, 0x6, 0x4, "043a07", 0x7, [0x7]}}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000012c0)='#', 0x1}], 0x1}, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 151.701072ms ago: executing program 0 (id=4426): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, &(0x7f0000000100)=@hci, &(0x7f00000002c0)=0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101940, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'dummy0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) recvmmsg(r2, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)={@cgroup=r5, r5, 0x7, 0xce2d3afaee448c72, 0x4}, 0x20) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="074198785c0000ff800000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x7, 0xffffffffffffffff, 0x6, 0x4}, 0x26}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x404889d}, 0xc0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) 106.48814ms ago: executing program 1 (id=4427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000140), 0x0, 0x20080058) r2 = socket(0x840000000002, 0x3, 0xff) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @empty, 0x5}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r5, 0x1, 0x0, 0x40000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x51}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c095}, 0x0) r6 = socket(0x10, 0x3, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a006da800000000000000001c6f"], 0x24}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000080)={0x1, 0xce, 0x8000, 0x7, 0x10003, 0x5aa8, 0x0, 0x8, r8}, &(0x7f0000000140)=0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRES64=0x0], 0x104}}, 0x0) 0s ago: executing program 2 (id=4428): r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000000)=@proc, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e24, 0x9, @remote, 0x30000000}, 0x1c) kernel console output (not intermixed with test programs): rror on dev nbd1, logical block 3, async page read [ 316.466584][T15676] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.492563][T15676] Buffer I/O error on dev nbd1, logical block 0, async page read [ 316.511512][T15676] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.545443][T15676] Buffer I/O error on dev nbd1, logical block 1, async page read [ 316.554263][T15676] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.602166][T15676] Buffer I/O error on dev nbd1, logical block 2, async page read [ 316.611095][T15676] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.625340][T15676] Buffer I/O error on dev nbd1, logical block 3, async page read [ 316.638727][T15676] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.651165][T15676] Buffer I/O error on dev nbd1, logical block 0, async page read [ 316.660665][T15676] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 316.673480][T16104] __nla_validate_parse: 8 callbacks suppressed [ 316.673500][T16104] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.2837'. [ 316.676736][T16110] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.2837'. [ 316.680102][T16104] netlink: Unknown conntrack attr (type=2304, max=9) [ 316.724147][T15676] Buffer I/O error on dev nbd1, logical block 1, async page read [ 316.763459][T15676] ldm_validate_partition_table(): Disk read failed. [ 316.771068][T15676] Dev nbd1: unable to read RDB block 0 [ 316.837004][T15676] nbd1: unable to read partition table [ 316.843559][T16110] netlink: Unknown conntrack attr (type=2304, max=9) [ 316.894475][T15676] ldm_validate_partition_table(): Disk read failed. [ 316.901786][T15676] Dev nbd1: unable to read RDB block 0 [ 316.973313][T15676] nbd1: unable to read partition table [ 317.046505][T16128] geneve1: Caught tx_queue_len zero misconfig [ 317.137451][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2845'. [ 317.199678][T16134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2845'. [ 317.341661][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.456529][T16155] netlink: 'syz.1.2853': attribute type 3 has an invalid length. [ 317.465067][T16155] netlink: 'syz.1.2853': attribute type 3 has an invalid length. [ 317.476641][T16157] netlink: 'syz.1.2853': attribute type 1 has an invalid length. [ 317.494051][T16155] netlink: 'syz.1.2853': attribute type 1 has an invalid length. [ 317.676146][T16174] netlink: 'syz.3.2856': attribute type 4 has an invalid length. [ 317.700097][T16174] netlink: 'syz.3.2856': attribute type 4 has an invalid length. [ 317.802775][T16181] netlink: 'syz.1.2859': attribute type 1 has an invalid length. [ 317.831365][T16181] netlink: 'syz.1.2859': attribute type 2 has an invalid length. [ 317.875706][T16181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2859'. [ 317.987919][T16200] sctp: [Deprecated]: syz.2.2860 (pid 16200) Use of int in maxseg socket option. [ 317.987919][T16200] Use struct sctp_assoc_value instead [ 318.065862][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'. [ 318.225413][ T30] audit: type=1107 audit(1776112241.498:7): pid=16219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='jBU`b#+ΆXoKA[:' [ 318.245040][T16217] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2866'. [ 318.411847][T16223] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2871'. [ 318.507106][T16230] IPv6: NLM_F_CREATE should be specified when creating new route [ 318.524789][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 318.703415][T16241] openvswitch: netlink: Missing valid actions attribute. [ 318.726705][T16241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.831842][T16243] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2877'. [ 319.200931][T16252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.213922][T16252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.227018][T16252] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 319.254778][T16252] bond0 (unregistering): Released all slaves [ 319.343228][T12971] smc: removing ib device sy1 [ 321.195020][T16277] bond0 (unregistering): Released all slaves [ 321.610693][T16236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.746827][T16293] bond13: option miimon: invalid value (18446744073709551585) [ 321.797138][T16293] bond13: option miimon: allowed values 0 - 2147483647 [ 321.834527][T16293] bond13 (unregistering): Released all slaves [ 322.500153][T16341] __nla_validate_parse: 5 callbacks suppressed [ 322.500177][T16341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2904'. [ 322.581600][T16342] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 322.589197][T16342] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 322.597771][T16345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2904'. [ 322.713455][T16351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2907'. [ 322.737583][T16354] validate_nla: 2 callbacks suppressed [ 322.737606][T16354] netlink: 'syz.3.2908': attribute type 1 has an invalid length. [ 322.764929][T16351] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2907'. [ 322.862131][T16354] 8021q: adding VLAN 0 to HW filter on device bond13 [ 322.885122][T16355] bond13: (slave gretap2): making interface the new active one [ 322.914781][T16355] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 322.970147][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2912'. [ 323.054090][T16367] bridge9: port 1(veth13) entered blocking state [ 323.067474][T16367] bridge9: port 1(veth13) entered disabled state [ 323.075652][T16367] veth13: entered allmulticast mode [ 323.083911][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 323.096979][T16371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2914'. [ 323.104828][T16367] veth13: entered promiscuous mode [ 323.109422][T16371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2914'. [ 323.168340][T16372] bridge9: port 2(veth15) entered blocking state [ 323.175530][T16372] bridge9: port 2(veth15) entered disabled state [ 323.183363][T16372] veth15: entered allmulticast mode [ 323.191324][T16372] veth15: entered promiscuous mode [ 323.266052][T16373] bond9: Invalid ad_actor_system MAC address. [ 323.272411][T16373] bond9: option ad_actor_system: invalid value (1) [ 323.285124][T16373] bond9 (unregistering): Released all slaves [ 323.329013][T16371] gretap0: entered promiscuous mode [ 323.346209][T16371] gretap0: left promiscuous mode [ 323.372137][T16381] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2915'. [ 323.789079][T16406] 8021q: VLANs not supported on caif0 [ 323.801699][T16407] 8021q: VLANs not supported on caif0 [ 324.086678][T16422] x_tables: duplicate underflow at hook 1 [ 324.192059][T16425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2929'. [ 324.342391][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 324.360908][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 324.385009][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 324.396379][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 324.410228][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 324.456135][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 324.468482][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 324.476615][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 324.488800][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 324.519913][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 324.928580][T16451] netlink: 'syz.1.2935': attribute type 1 has an invalid length. [ 325.035483][T16451] 8021q: adding VLAN 0 to HW filter on device bond12 [ 325.144227][T16457] bond12: (slave veth7): Enslaving as an active interface with a down link [ 325.170822][T16451] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 325.307079][ T1100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.348760][ T1100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.372417][ T1100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 325.459928][T16451] bond12: (slave veth9): Enslaving as an active interface with a down link [ 325.480852][T16473] netlink: 'syz.2.2938': attribute type 2 has an invalid length. [ 325.558681][ T1100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.583354][ T1100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.613456][ T1100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 325.720107][T16492] netlink: 'syz.3.2943': attribute type 2 has an invalid length. [ 325.759948][ T1100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.784119][ T1100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.812442][ T1100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 325.864253][T16429] chnl_net:caif_netlink_parms(): no params data found [ 325.925708][ T1100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.952647][ T1100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.977928][ T1100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 326.190138][T16429] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.199147][T16429] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.206886][T16429] bridge_slave_0: entered allmulticast mode [ 326.215320][T16429] bridge_slave_0: entered promiscuous mode [ 326.257098][T16429] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.274547][T16429] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.286328][T16429] bridge_slave_1: entered allmulticast mode [ 326.295294][T16429] bridge_slave_1: entered promiscuous mode [ 326.420019][T16429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.489199][T16429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.539578][ T1100] bridge_slave_1: left allmulticast mode [ 326.546673][ T1100] bridge_slave_1: left promiscuous mode [ 326.555273][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.575574][ T1100] bridge_slave_0: left allmulticast mode [ 326.581395][ T1100] bridge_slave_0: left promiscuous mode [ 326.588723][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.614778][ T5831] Bluetooth: hci5: command tx timeout [ 326.905925][ T1100] bond4 (unregistering): (slave geneve3): Releasing active interface [ 327.308445][ T1100] bond7 (unregistering): (slave bridge8): Releasing backup interface [ 327.318884][ T1100] bond7 (unregistering): (slave bridge8): the permanent HWaddr of slave - 56:be:7f:27:b0:a5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 327.367714][ T1100] bond7 (unregistering): (slave bridge9): Releasing backup interface [ 327.429618][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.441192][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.452114][ T1100] bond0 (unregistering): Released all slaves [ 327.465996][ T1100] bond1 (unregistering): Released all slaves [ 327.480997][ T1100] bond2 (unregistering): Released all slaves [ 327.504568][ T1100] bond3 (unregistering): (slave lo): Releasing backup interface [ 327.519310][ T1100] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 327.536442][ T1100] bond3 (unregistering): Released all slaves [ 327.556797][ T1100] bond4 (unregistering): Released all slaves [ 327.571477][ T1100] bond5 (unregistering): Released all slaves [ 327.589424][ T1100] bond6 (unregistering): Released all slaves [ 327.614705][ T1100] bond7 (unregistering): Released all slaves [ 327.632716][ T1100] bond8 (unregistering): Released all slaves [ 327.663522][T16429] team0: Port device team_slave_0 added [ 327.671960][T16429] team0: Port device team_slave_1 added [ 327.712038][T16429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.720305][T16429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.752337][T16429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.769366][T16429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.779330][T16429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.811948][T16429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.849223][ T1100] tipc: Disabling bearer [ 327.861575][ T1100] tipc: Left network mode [ 327.930047][T16429] hsr_slave_0: entered promiscuous mode [ 327.944280][T16429] hsr_slave_1: entered promiscuous mode [ 327.951223][T16429] debugfs: 'hsr0' already exists in 'hsr' [ 327.961508][T16429] Cannot create hsr debugfs directory [ 328.000467][ T1100] IPVS: stopping backup sync thread 14226 ... [ 328.113355][T16469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.710988][ T5831] Bluetooth: hci5: command tx timeout [ 328.717769][T16552] __nla_validate_parse: 7 callbacks suppressed [ 328.717789][T16552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2956'. [ 329.114756][T16568] xt_hashlimit: size too large, truncated to 1048576 [ 329.612080][ T1100] hsr_slave_0: left promiscuous mode [ 329.652829][ T1100] hsr_slave_1: left promiscuous mode [ 329.696473][ T1100] vlan0: left allmulticast mode [ 329.722775][ T1100] veth0_vlan: left allmulticast mode [ 329.740725][ T1100] vlan0: left promiscuous mode [ 329.773188][ T1100] veth1_macvtap: left promiscuous mode [ 329.781263][ T1100] veth0_macvtap: left promiscuous mode [ 329.809998][ T1100] veth1_vlan: left promiscuous mode [ 329.823568][ T1100] veth0_vlan: left promiscuous mode [ 329.876755][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 330.098071][ T1100] pim6reg527 (unregistering): left allmulticast mode [ 330.154000][T16614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2970'. [ 330.772894][ T5831] Bluetooth: hci5: command tx timeout [ 331.248170][T16621] vlan4: entered allmulticast mode [ 331.256717][T16621] bond0: entered allmulticast mode [ 331.262081][T16621] geneve2: entered allmulticast mode [ 331.280691][T16621] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2973'. [ 331.518864][T16429] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.581820][T16429] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.599416][T16632] tipc: Enabling of bearer rejected, already enabled [ 331.619754][T16429] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.655042][T16429] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.699855][T16429] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.779234][T16429] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.815308][T16429] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.864653][T16429] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.888847][ T1100] IPVS: stop unused estimator thread 0... [ 332.072317][T16665] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 332.113050][T16665] bond4 (unregistering): Released all slaves [ 332.154270][T16667] syzkaller0: entered promiscuous mode [ 332.170025][T16667] syzkaller0: entered allmulticast mode [ 332.486210][T16690] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2988'. [ 332.539969][T16429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.576072][T16429] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.590774][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.600170][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.645479][T16695] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2990'. [ 332.697623][T12973] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.706170][T12973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.855000][ T5831] Bluetooth: hci5: command tx timeout [ 333.043958][T16723] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2992'. [ 333.380561][T16429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.676135][T16706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.691543][T16429] veth0_vlan: entered promiscuous mode [ 333.726771][T16429] veth1_vlan: entered promiscuous mode [ 333.790614][T16429] veth0_macvtap: entered promiscuous mode [ 333.835038][T16738] netlink: 'syz.2.2995': attribute type 1 has an invalid length. [ 333.850246][T16429] veth1_macvtap: entered promiscuous mode [ 333.867140][T16738] netlink: 'syz.2.2995': attribute type 3 has an invalid length. [ 333.896754][T16738] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2995'. [ 333.921975][T16741] xt_hashlimit: size too large, truncated to 1048576 [ 333.936640][T16738] NCSI netlink: No device for ifindex 813332851 [ 333.955378][T16429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.957737][T16738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.992008][T16429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.014517][T16747] sctp: [Deprecated]: syz.1.2997 (pid 16747) Use of int in maxseg socket option. [ 334.014517][T16747] Use struct sctp_assoc_value instead [ 334.036544][T16743] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 334.045776][T16743] team0: Device macvlan4 is already an upper device of the team interface [ 334.112299][ T1100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.166551][ T1100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.194819][T16756] netlink: 'syz.2.2999': attribute type 1 has an invalid length. [ 334.229038][ T1100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.242182][ T1100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.400542][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.417810][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.475821][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.486034][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.526885][T16763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3003'. [ 334.656469][T16769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2926'. [ 334.752627][T16774] netlink: 'syz.3.3004': attribute type 62 has an invalid length. [ 334.831372][T16778] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 334.866569][T16779] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 334.894046][T16779] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 334.902308][T16778] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 334.914894][T16779] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 334.948944][T16778] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 335.108288][T16791] netlink: 752 bytes leftover after parsing attributes in process `syz.3.3012'. [ 335.130927][T16789] team0 (unregistering): Port device team_slave_0 removed [ 335.142223][T16789] team0 (unregistering): Port device team_slave_1 removed [ 335.153687][T16789] team0 (unregistering): Port device bond4 removed [ 335.174695][T16789] team0 (unregistering): Port device bridge3 removed [ 335.222838][T16789] team0 (unregistering): Port device batadv0 removed [ 335.269004][T16798] syzkaller0: Caught tx_queue_len zero misconfig [ 335.310550][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.320944][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.340884][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.352318][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.362221][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.893017][T16826] s5: renamed from vlan1 [ 335.974786][T16829] team0: Port device dummy0 added [ 336.024770][T16829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3021'. [ 336.038046][T16803] chnl_net:caif_netlink_parms(): no params data found [ 336.090099][T16836] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3023'. [ 336.135360][T16836] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3023'. [ 336.183615][T16841] sock: sock_set_timeout: `syz.4.3026' (pid 16841) tries to set negative timeout [ 336.218874][T16839] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 336.244294][T16839] bond0 (unregistering): Released all slaves [ 336.283422][T16847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3027'. [ 336.387773][T16803] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.395234][T16803] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.403014][T16803] bridge_slave_0: entered allmulticast mode [ 336.411782][T16803] bridge_slave_0: entered promiscuous mode [ 336.421543][T16803] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.428902][T16803] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.436438][T16803] bridge_slave_1: entered allmulticast mode [ 336.445080][T16803] bridge_slave_1: entered promiscuous mode [ 336.494923][T16803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.512895][T16803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.571817][T16803] team0: Port device team_slave_0 added [ 336.584913][T16860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3029'. [ 336.600870][T16803] team0: Port device team_slave_1 added [ 336.606902][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3029'. [ 336.755107][T16803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.762243][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.809308][T16803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.823437][T16803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.830440][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.859955][T16803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.012824][T16886] tipc: Enabling of bearer rejected, already enabled [ 337.049930][T16803] hsr_slave_0: entered promiscuous mode [ 337.062065][T16803] hsr_slave_1: entered promiscuous mode [ 337.069053][T16803] debugfs: 'hsr0' already exists in 'hsr' [ 337.075503][T16803] Cannot create hsr debugfs directory [ 337.128586][T16887] bond14: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 337.154331][T16887] bond14 (unregistering): Released all slaves [ 337.212326][T16888] bond14: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 337.229680][T16888] bond14 (unregistering): Released all slaves [ 337.340054][T16899] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.356681][T16899] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.366931][T16899] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 337.423336][ T5831] Bluetooth: hci0: command tx timeout [ 337.472175][T16899] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.493554][T16899] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.510853][T16899] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 337.618048][T16899] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.628941][T16899] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.639986][T16899] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 337.673204][T16915] openvswitch: netlink: Flow key attr not present in new flow. [ 337.729587][T16899] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.742166][T16899] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.759777][T16899] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 337.850420][T16915] vxcan1 speed is unknown, defaulting to 1000 [ 337.869095][T16915] vxcan1 speed is unknown, defaulting to 1000 [ 337.877530][T16915] vxcan1 speed is unknown, defaulting to 1000 [ 337.970867][ T37] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.986907][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 338.017143][ T37] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 338.032056][ T37] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.044611][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 338.055704][ T37] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 338.080556][ T37] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.093358][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 338.101830][ T37] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 338.168383][ T37] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.187146][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 338.204926][ T37] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 338.391448][T16915] infiniband syz2: set active [ 338.404580][T16915] infiniband syz2: added vxcan1 [ 338.521338][ T58] bond2 (unregistering): (slave gretap1): Releasing active interface [ 338.594019][T16915] RDS/IB: syz2: added [ 338.598250][T16915] smc: adding ib device syz2 with port count 1 [ 338.619084][T16933] NCSI netlink: No device for ifindex 813332851 [ 338.647821][T16915] smc: ib device syz2 port 1 has no pnetid [ 338.706550][ T58] tipc: Disabling bearer [ 338.841483][ T58] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 338.907235][ T58] bond0 (unregistering): Released all slaves [ 338.923682][ T58] bond1 (unregistering): Released all slaves [ 338.939279][ T58] bond2 (unregistering): Released all slaves [ 338.960416][ T58] bond3 (unregistering): Released all slaves [ 339.005747][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 339.036910][T12367] vxcan1 speed is unknown, defaulting to 1000 [ 339.050588][T16915] vxcan1 speed is unknown, defaulting to 1000 [ 339.162431][ T58] tipc: Left network mode [ 339.344138][T16951] __nla_validate_parse: 5 callbacks suppressed [ 339.344159][T16951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3053'. [ 339.492871][ T5831] Bluetooth: hci0: command tx timeout [ 339.644983][T16959] bond13: entered promiscuous mode [ 339.650169][T16959] bond13: entered allmulticast mode [ 339.696234][T16959] 8021q: adding VLAN 0 to HW filter on device bond13 [ 339.755879][T16915] vxcan1 speed is unknown, defaulting to 1000 [ 339.922277][T16971] validate_nla: 11 callbacks suppressed [ 339.922299][T16971] netlink: 'syz.2.3059': attribute type 2 has an invalid length. [ 339.964279][T16975] netlink: 'syz.1.3058': attribute type 1 has an invalid length. [ 339.983735][T16971] netlink: 'syz.2.3059': attribute type 1 has an invalid length. [ 340.003314][T16975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.014029][T16972] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3057'. [ 340.338547][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3060'. [ 340.394391][T16987] team0: left allmulticast mode [ 340.426281][T16993] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3062'. [ 340.452805][T16987] team_slave_0: left allmulticast mode [ 340.458536][T16987] team_slave_1: left allmulticast mode [ 340.476951][T16987] bridge1: left allmulticast mode [ 340.493487][T16987] team0: left promiscuous mode [ 340.503600][T16987] team_slave_0: left promiscuous mode [ 340.522851][T16987] team_slave_1: left promiscuous mode [ 340.535621][T16987] bridge1: left promiscuous mode [ 340.541081][T16987] bridge0: port 3(team0) entered disabled state [ 340.564712][T16997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.574623][T16987] bridge_slave_1: left allmulticast mode [ 340.580331][T16987] bridge_slave_1: left promiscuous mode [ 340.591122][T16987] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.615205][T16987] bridge_slave_0: left allmulticast mode [ 340.621103][T16987] bridge_slave_0: left promiscuous mode [ 340.646313][T16987] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.702237][T17001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3063'. [ 340.725824][T16915] vxcan1 speed is unknown, defaulting to 1000 [ 340.837072][T16803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 340.870076][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.968126][T16803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 340.980185][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.030696][T16803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.054715][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.063741][T16803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.079971][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 341.223000][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3065'. [ 341.251994][T16915] vxcan1 speed is unknown, defaulting to 1000 [ 341.271343][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3065'. [ 341.302646][T17014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3065'. [ 341.350554][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3065'. [ 341.364175][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3065'. [ 341.531139][T16803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.573640][ T5831] Bluetooth: hci0: command tx timeout [ 341.621235][T16803] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.629114][T17026] netlink: 'syz.1.3069': attribute type 10 has an invalid length. [ 341.640212][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.647549][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.696445][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.703810][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.031655][T16915] vxcan1 speed is unknown, defaulting to 1000 [ 342.480932][T16803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.648848][T16803] veth0_vlan: entered promiscuous mode [ 342.715610][T16803] veth1_vlan: entered promiscuous mode [ 342.817701][T16803] veth0_macvtap: entered promiscuous mode [ 342.827284][T16915] vxcan1 speed is unknown, defaulting to 1000 [ 342.846947][T16803] veth1_macvtap: entered promiscuous mode [ 342.967851][T16803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.990484][T16803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.066923][T12973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.104365][T12974] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.127311][T12974] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.205496][T12974] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.233228][T17116] netlink: 'syz.3.3089': attribute type 1 has an invalid length. [ 343.311734][T17107] xt_ecn: cannot match TCP bits for non-tcp packets [ 343.513600][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.531237][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.631677][T17125] syzkaller1: entered promiscuous mode [ 343.648754][T17129] IPVS: length: 8 != 1152 [ 343.651621][T17125] syzkaller1: entered allmulticast mode [ 343.659720][ T5831] Bluetooth: hci0: command tx timeout [ 343.681836][T12973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.696571][T12973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.992096][ T58] hsr_slave_0: left promiscuous mode [ 344.001005][ T58] hsr_slave_1: left promiscuous mode [ 344.071431][ T58] pim6reg (unregistering): left allmulticast mode [ 344.275037][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.289463][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.302328][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.311759][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.320045][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.560425][T17153] netlink: 'syz.2.3098': attribute type 83 has an invalid length. [ 344.693111][T17141] __nla_validate_parse: 5 callbacks suppressed [ 344.693134][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 344.723329][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 344.734021][T17142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3095'. [ 344.745158][T17141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3095'. [ 344.875350][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 344.894885][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 344.920497][T17147] vxcan1 speed is unknown, defaulting to 1000 [ 344.942361][T17142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3095'. [ 344.942966][T17141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3095'. [ 345.382420][ T58] IPVS: stop unused estimator thread 0... [ 345.818397][T17201] netlink: 'syz.2.3115': attribute type 1 has an invalid length. [ 345.895544][T17201] 8021q: adding VLAN 0 to HW filter on device bond16 [ 345.954610][T17205] bond16: (slave veth19): Enslaving as an active interface with a down link [ 346.043679][T17212] netlink: 'syz.1.3117': attribute type 1 has an invalid length. [ 346.099080][T17212] 8021q: adding VLAN 0 to HW filter on device bond14 [ 346.159624][T17215] bond14: (slave geneve4): making interface the new active one [ 346.169540][T17215] bond14: (slave geneve4): Enslaving as an active interface with an up link [ 346.187917][T17201] macvlan3: entered promiscuous mode [ 346.212999][T17201] macvlan3: entered allmulticast mode [ 346.221971][T17201] bond16: entered promiscuous mode [ 346.228924][T17201] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 346.236957][T17201] bond16: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 346.265712][T17201] bond16: left promiscuous mode [ 346.311578][T17224] netlink: 'syz.1.3120': attribute type 1 has an invalid length. [ 346.327027][T12973] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.337043][T12973] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.369879][T17224] 8021q: adding VLAN 0 to HW filter on device bond15 [ 346.382713][ T5831] Bluetooth: hci1: command tx timeout [ 346.389646][T12973] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.398145][T12973] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.458655][T17225] vlan5: entered promiscuous mode [ 346.471006][T17225] bond15: entered promiscuous mode [ 346.483734][T17225] vlan5: entered allmulticast mode [ 346.489104][T17225] bond15: entered allmulticast mode [ 346.527496][T17147] chnl_net:caif_netlink_parms(): no params data found [ 346.797393][T17147] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.806106][T17147] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.813616][T17147] bridge_slave_0: entered allmulticast mode [ 346.821990][T17147] bridge_slave_0: entered promiscuous mode [ 346.831376][T17147] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.838894][T17147] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.851203][T17147] bridge_slave_1: entered allmulticast mode [ 346.904647][T17147] bridge_slave_1: entered promiscuous mode [ 346.996179][T17147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.027977][T17147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.121296][T17147] team0: Port device team_slave_0 added [ 347.132750][T17147] team0: Port device team_slave_1 added [ 347.168707][T17147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.205117][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.236453][T17147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.278855][T17147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.286247][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.336002][T17147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.420800][T17147] hsr_slave_0: entered promiscuous mode [ 347.445294][T17147] hsr_slave_1: entered promiscuous mode [ 347.462175][T17147] debugfs: 'hsr0' already exists in 'hsr' [ 347.472609][T17147] Cannot create hsr debugfs directory [ 347.658279][T17282] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 347.804700][T17296] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3144'. [ 347.838074][T17296] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3144'. [ 347.995323][T17304] bridge0: port 3(gretap0) entered blocking state [ 348.001963][T17304] bridge0: port 3(gretap0) entered disabled state [ 348.009189][T17304] gretap0: entered allmulticast mode [ 348.020227][T17304] gretap0: entered promiscuous mode [ 348.029830][T17304] bridge0: port 3(gretap0) entered blocking state [ 348.036691][T17304] bridge0: port 3(gretap0) entered forwarding state [ 348.063257][T17312] netlink: 'syz.2.3148': attribute type 1 has an invalid length. [ 348.115987][T17316] netlink: zone id is out of range [ 348.121242][T17316] netlink: zone id is out of range [ 348.130985][T17316] netlink: zone id is out of range [ 348.139754][T17316] netlink: zone id is out of range [ 348.155506][T17316] netlink: zone id is out of range [ 348.170975][T17312] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 348.199552][T17316] netlink: zone id is out of range [ 348.215455][T17316] netlink: zone id is out of range [ 348.220762][T17316] netlink: zone id is out of range [ 348.235008][T17316] netlink: zone id is out of range [ 348.240507][T17316] netlink: zone id is out of range [ 348.452581][ T5831] Bluetooth: hci1: command tx timeout [ 348.564211][T17147] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.598927][T17147] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 348.613394][T17147] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 348.639215][T17147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 348.648547][T17147] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.676559][T17147] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 348.685270][T17147] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.698390][T17147] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 348.833265][T17350] tipc: Started in network mode [ 348.844625][T17350] tipc: Node identity , cluster identity 4711 [ 348.850900][T17350] tipc: Failed to set node id, please configure manually [ 348.859688][T17350] tipc: Enabling of bearer rejected, failed to enable media [ 348.912211][T17147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.959918][T17147] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.994573][T12973] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.001917][T12973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.045265][T12972] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.052548][T12972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.315468][T17375] netem: change failed [ 349.327929][T17375] netem: change failed [ 349.557355][T17147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.647523][T17147] veth0_vlan: entered promiscuous mode [ 349.680694][T17147] veth1_vlan: entered promiscuous mode [ 349.742112][T17394] __nla_validate_parse: 4 callbacks suppressed [ 349.742134][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3169'. [ 349.760938][T17147] veth0_macvtap: entered promiscuous mode [ 349.768705][T17400] netlink: 'syz.0.3171': attribute type 1 has an invalid length. [ 349.826644][T17147] veth1_macvtap: entered promiscuous mode [ 349.876852][T17147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.900175][T17147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.952573][ T1160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.984564][ T1160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.020617][ T1160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.057643][ T1160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.322048][T17422] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3179'. [ 350.352225][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3178'. [ 350.453445][T17434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3180'. [ 350.502987][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.524667][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.533666][ T5831] Bluetooth: hci1: command tx timeout [ 350.597897][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.608270][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.830843][T17451] vcan0: tx address claim with different name [ 350.859975][T17452] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3187'. [ 350.907584][T17452] netlink: 7076 bytes leftover after parsing attributes in process `syz.4.3187'. [ 350.957983][T17457] Bluetooth: MGMT ver 1.23 [ 351.032092][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'. [ 351.081492][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'. [ 351.220379][T17467] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3193'. [ 351.257479][T17469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3192'. [ 351.328239][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.340080][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.349937][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.366542][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.375349][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.504333][T17475] ieee802154 phy1 wpan1: encryption failed: -90 [ 351.512040][T17483] netlink: 'syz.3.3196': attribute type 10 has an invalid length. [ 351.522298][T17475] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 351.538573][T17480] tc_dump_action: action bad kind [ 351.555189][T17471] vxcan1 speed is unknown, defaulting to 1000 [ 351.808593][ T1160] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.938319][T17498] ipvlan5: entered allmulticast mode [ 351.959614][T17498] batman_adv: batadv0: Adding interface: ipvlan5 [ 351.979338][T17498] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.009119][T17498] batman_adv: batadv0: Interface activated: ipvlan5 [ 352.034273][ T1160] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.100208][ T1160] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.208049][ T1160] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.549108][T17525] xt_connbytes: Forcing CT accounting to be enabled [ 352.612700][ T5831] Bluetooth: hci1: command tx timeout [ 352.689314][T17528] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 352.701692][T17525] xt_CT: No such helper "netbios-ns" [ 352.789412][ T1160] bond8: left allmulticast mode [ 352.806530][T17536] netlink: 'syz.4.3213': attribute type 4 has an invalid length. [ 352.808409][T17537] netlink: 'syz.4.3213': attribute type 4 has an invalid length. [ 352.821137][ T1160] bond8: left promiscuous mode [ 352.844714][ T1160] bridge2: port 1(bond8) entered disabled state [ 352.901111][ T1160] bond11: left allmulticast mode [ 352.918534][ T1160] bond11: left promiscuous mode [ 352.925541][ T1160] bridge4: port 1(bond11) entered disabled state [ 353.027466][ T1160] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 353.165333][ T1160] bond10 (unregistering): (slave vti0): Releasing backup interface [ 353.191005][ T1160] vti0 (unregistering): left promiscuous mode [ 353.287759][ T1160] bond14 (unregistering): (slave geneve4): Releasing active interface [ 353.317498][ T1160] bond0 (unregistering): (slave geneve2): Releasing active interface [ 353.326548][ T1160] bond0 (unregistering): (slave geneve2): the permanent HWaddr of slave - 9a:9f:a9:15:0c:04 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 353.346700][ T1160] geneve2 (unregistering): left allmulticast mode [ 353.357403][ T1160] bond0 (unregistering): (slave bond_slave_1): making interface the new active one [ 353.367439][ T1160] bond_slave_1: entered allmulticast mode [ 353.406480][ T1160] team0: Port device bridge1 removed [ 353.412764][ T5831] Bluetooth: hci3: command tx timeout [ 353.506612][ T1160] bond9 (unregistering): (slave bridge3): Releasing active interface [ 353.732887][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing active interface [ 353.741485][ T1160] bond_slave_1: left allmulticast mode [ 353.748310][ T1160] bond0 (unregistering): Released all slaves [ 353.767837][ T1160] bond1 (unregistering): Released all slaves [ 353.782245][ T1160] bond2 (unregistering): Released all slaves [ 353.798380][ T1160] bond3 (unregistering): Released all slaves [ 353.820043][ T1160] bond4 (unregistering): Released all slaves [ 353.846840][ T1160] bond5 (unregistering): (slave lo): Releasing backup interface [ 353.855871][ T1160] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 353.867551][ T1160] bond5 (unregistering): Released all slaves [ 353.882982][ T1160] bond6 (unregistering): Released all slaves [ 353.899299][ T1160] bond7 (unregistering): Released all slaves [ 353.916941][ T1160] bond8 (unregistering): Released all slaves [ 353.937446][ T1160] bond9 (unregistering): Released all slaves [ 353.952428][ T1160] bond10 (unregistering): Released all slaves [ 353.968113][ T1160] bond11 (unregistering): Released all slaves [ 353.987607][ T1160] bond12 (unregistering): (slave veth7): Releasing active interface [ 354.000070][ T1160] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 354.013537][ T1160] bond12 (unregistering): (slave veth9): Releasing active interface [ 354.024315][ T1160] bond12 (unregistering): Released all slaves [ 354.040099][ T1160] bond13 (unregistering): Released all slaves [ 354.056027][ T1160] bond14 (unregistering): Released all slaves [ 354.078987][ T1160] bond15 (unregistering): Released all slaves [ 354.138187][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 354.264303][T17471] chnl_net:caif_netlink_parms(): no params data found [ 354.306239][ T1160] : left promiscuous mode [ 354.407640][ T1160] tipc: Disabling bearer [ 354.427544][ T1160] tipc: Left network mode [ 354.796283][T17471] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.809392][T17471] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.820517][T17471] bridge_slave_0: entered allmulticast mode [ 354.829523][T17471] bridge_slave_0: entered promiscuous mode [ 354.867707][T17597] batadv0: entered promiscuous mode [ 354.892579][T17597] macsec1: entered promiscuous mode [ 354.899373][T17597] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 354.950423][T17597] batadv0: left promiscuous mode [ 355.044241][T17471] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.058979][T17471] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.067466][T17471] bridge_slave_1: entered allmulticast mode [ 355.075765][T17471] bridge_slave_1: entered promiscuous mode [ 355.272259][T17471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.295337][T17471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.492766][ T5831] Bluetooth: hci3: command tx timeout [ 355.600363][T17471] team0: Port device team_slave_0 added [ 355.670322][T17471] team0: Port device team_slave_1 added [ 355.679705][T17627] __nla_validate_parse: 7 callbacks suppressed [ 355.679726][T17627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3228'. [ 355.809906][T17471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.819471][T17471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.853076][T17471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.950595][T17471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.966032][T17471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.995236][T17471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.071277][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 356.212196][T17649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3232'. [ 356.270555][T17656] ieee802154 phy1 wpan1: encryption failed: -22 [ 356.288303][T17471] hsr_slave_0: entered promiscuous mode [ 356.297982][T17471] hsr_slave_1: entered promiscuous mode [ 356.328937][T17471] debugfs: 'hsr0' already exists in 'hsr' [ 356.337315][T17471] Cannot create hsr debugfs directory [ 356.463158][T17655] bridge1: entered promiscuous mode [ 356.468678][T17655] bridge1: entered allmulticast mode [ 356.702676][ T1160] hsr_slave_0: left promiscuous mode [ 356.711331][ T1160] hsr_slave_1: left promiscuous mode [ 356.725582][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.744083][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.774048][ T1160] batman_adv: batadv0: Removing interface: ipvlan3 [ 356.784960][ T1160] batman_adv: batadv0: Interface deactivated: ipvlan5 [ 356.798119][ T1160] batman_adv: batadv0: Removing interface: ipvlan5 [ 357.486208][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 357.502305][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 357.573047][ T5831] Bluetooth: hci3: command tx timeout [ 357.774683][T17701] vxcan1 speed is unknown, defaulting to 1000 [ 358.462175][ T1160] IPVS: stop unused estimator thread 0... [ 358.734268][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3249'. [ 358.759476][T17739] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3249'. [ 358.865492][T17739] syzkaller0: entered promiscuous mode [ 358.876310][T17739] syzkaller0: entered allmulticast mode [ 359.234649][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3254'. [ 359.259429][T17754] net_ratelimit: 48 callbacks suppressed [ 359.259447][T17754] openvswitch: netlink: Unknown nsh attribute 0 [ 359.368854][T17471] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.413499][T17471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.421711][T17471] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.462559][T17764] xt_l2tp: v2 doesn't support IP mode [ 359.483694][T17471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.502045][T17471] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.541138][T17471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.571413][T17471] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.628777][T17471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.655632][ T5831] Bluetooth: hci3: command tx timeout [ 359.747624][T17774] tipc: Enabling of bearer rejected, failed to enable media [ 359.950768][T17471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.991667][T17790] netlink: 'syz.2.3262': attribute type 4 has an invalid length. [ 360.031623][T17471] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.227946][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.235184][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.396931][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.404202][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.709490][T17829] syzkaller0: entered promiscuous mode [ 360.729459][T17829] syzkaller0: entered allmulticast mode [ 360.743989][T17829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.752693][T17829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.856593][T17838] nbd: couldn't find a device at index 1048580 [ 361.156494][T17851] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 361.187317][T17850] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3275'. [ 361.271717][T17851] bond3 (unregistering): Released all slaves [ 361.628187][T17471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.840265][T17879] Cannot find del_set index 1 as target [ 361.876985][T17471] veth0_vlan: entered promiscuous mode [ 361.923926][T17471] veth1_vlan: entered promiscuous mode [ 362.045419][T17471] veth0_macvtap: entered promiscuous mode [ 362.085778][T17471] veth1_macvtap: entered promiscuous mode [ 362.221328][T17471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.270841][T17471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.289944][T17907] netlink: 'syz.0.3286': attribute type 4 has an invalid length. [ 362.336544][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3286'. [ 362.347992][ T1100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.364837][ T1100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.412321][ T1100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.442728][ T1100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.583384][T17918] netlink: 'syz.3.3289': attribute type 2 has an invalid length. [ 362.592911][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'. [ 362.611105][T12971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.626636][T12971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.731123][T17920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3288'. [ 362.751990][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.760982][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.475320][T17957] netlink: 'syz.0.3297': attribute type 11 has an invalid length. [ 363.515537][T17957] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3297'. [ 363.579854][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.593649][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.602917][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.612856][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.621298][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.831260][T17961] vxcan1 speed is unknown, defaulting to 1000 [ 363.909482][T17975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.033032][T17981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3304'. [ 364.407872][T17994] netlink: 'syz.1.3307': attribute type 30 has an invalid length. [ 364.541059][T17994] bond1: option arp_missed_max: invalid value (0) [ 364.584139][T17994] bond1: option arp_missed_max: allowed values 1 - 255 [ 364.599274][T18005] netlink: 'syz.0.3310': attribute type 1 has an invalid length. [ 364.627379][T17994] bond1 (unregistering): Released all slaves [ 364.651254][T18011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3310'. [ 365.099234][T18005] 8021q: adding VLAN 0 to HW filter on device bond3 [ 365.157020][T18013] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 365.216353][T18013] bond3: (slave batadv1): making interface the new active one [ 365.228821][T18013] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 365.559083][T18044] ieee802154 phy1 wpan1: encryption failed: -22 [ 365.618485][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3314'. [ 365.642618][T18044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3314'. [ 365.656053][ T5831] Bluetooth: hci2: command tx timeout [ 365.741487][T18038] team0: Port device dummy0 removed [ 365.759036][T18038] batman_adv: batadv0: Adding interface: dummy0 [ 365.777594][T18038] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.841265][T18038] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 365.882583][T12971] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.891568][T12971] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.930834][T17961] chnl_net:caif_netlink_parms(): no params data found [ 366.007562][T12971] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.078922][T12971] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.151386][T18061] netlink: 'syz.1.3318': attribute type 2 has an invalid length. [ 366.439974][T18073] netlink: 'syz.1.3320': attribute type 1 has an invalid length. [ 366.448138][T18073] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3320'. [ 366.485490][T18077] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3321'. [ 366.522966][T18077] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3321'. [ 366.523524][T17961] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.568255][T17961] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.592781][T17961] bridge_slave_0: entered allmulticast mode [ 366.615833][T17961] bridge_slave_0: entered promiscuous mode [ 366.645737][T17961] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.654130][T17961] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.661556][T17961] bridge_slave_1: entered allmulticast mode [ 366.669745][T17961] bridge_slave_1: entered promiscuous mode [ 366.748142][T17961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.765074][T17961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.833021][T18088] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.870043][T18088] bridge_slave_0 (unregistering): left allmulticast mode [ 366.878778][T18093] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3325'. [ 366.922698][T18088] bridge_slave_0 (unregistering): left promiscuous mode [ 366.931116][T18088] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.192964][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3324'. [ 367.225350][T17961] team0: Port device team_slave_0 added [ 367.242209][T17961] team0: Port device team_slave_1 added [ 367.341410][T17961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.357864][T17961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.414669][T17961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.509770][T17961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.525975][T17961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.604868][T17961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.741494][ T5831] Bluetooth: hci2: command tx timeout [ 367.770305][T17961] hsr_slave_0: entered promiscuous mode [ 367.781054][T17961] hsr_slave_1: entered promiscuous mode [ 367.788307][T17961] debugfs: 'hsr0' already exists in 'hsr' [ 367.794474][T17961] Cannot create hsr debugfs directory [ 367.831961][T18113] sctp: [Deprecated]: syz.1.3328 (pid 18113) Use of int in maxseg socket option. [ 367.831961][T18113] Use struct sctp_assoc_value instead [ 368.121728][T17961] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.166026][T17961] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 368.203367][T17961] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 368.280505][T18128] netlink: 'syz.4.3332': attribute type 29 has an invalid length. [ 368.818325][T18127] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.826278][T18127] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.919021][T18143] netlink: 'syz.1.3335': attribute type 1 has an invalid length. [ 368.982973][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3335'. [ 369.044706][T18147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3335'. [ 369.290423][T18127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.418371][T18127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.813448][ T5831] Bluetooth: hci2: command tx timeout [ 369.931347][T17961] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.943428][T17961] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 369.955001][T17961] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.071099][T13185] vxcan1 speed is unknown, defaulting to 1000 [ 370.101209][T13185] syz2: Port: 1 Link DOWN [ 370.141606][T18157] netlink: 'syz.0.3338': attribute type 10 has an invalid length. [ 370.162554][ T58] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.171764][ T58] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.197081][T17961] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.237450][T17961] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 370.262912][T17961] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.314734][T13193] vxcan1 speed is unknown, defaulting to 1000 [ 370.338512][T18157] team0: Device vxcan1 is of different type [ 370.351077][T17961] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.366620][T17961] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 370.380314][T18168] netlink: 'syz.1.3339': attribute type 1 has an invalid length. [ 370.388596][T17961] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.410638][ T58] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.419906][ T58] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.569864][T18166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3339'. [ 370.681392][T17961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 370.692866][T17961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 370.700709][T17961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 370.715511][T17961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.724643][T17961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 370.734925][T17961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.745205][T17961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 370.755780][T17961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.835196][T17961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.860986][T17961] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.876472][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.883733][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.899166][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.906844][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.113927][T17961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.166004][T17961] veth0_vlan: entered promiscuous mode [ 371.179741][T17961] veth1_vlan: entered promiscuous mode [ 371.211094][T17961] veth0_macvtap: entered promiscuous mode [ 371.221325][T17961] veth1_macvtap: entered promiscuous mode [ 371.243112][T17961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.260689][T17961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.275951][ T1160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.286258][ T1160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.296799][ T1160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.306370][ T1160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.381666][T12971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.396837][T12971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.428321][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.438977][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.893159][ T5831] Bluetooth: hci2: command tx timeout [ 378.776554][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 424.386958][T18245] netlink: 'syz.3.3345': attribute type 1 has an invalid length. [ 424.411687][T18236] netlink: 'syz.3.3345': attribute type 1 has an invalid length. [ 424.431056][T18247] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3347'. [ 424.621434][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3352'. [ 424.666217][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3352'. [ 424.675893][T18260] netlink: 'syz.0.3352': attribute type 3 has an invalid length. [ 424.810050][T18270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3356'. [ 425.441977][T18314] netlink: 'syz.4.3369': attribute type 1 has an invalid length. [ 425.480973][T18314] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3369'. [ 425.605479][T18321] 8021q: VLANs not supported on ip6tnl0 [ 425.654595][T18324] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3373'. [ 425.673562][T18324] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3373'. [ 426.152004][T18344] syzkaller0: entered promiscuous mode [ 426.170596][T18344] syzkaller0: entered allmulticast mode [ 426.181600][T18347] IPVS: Unknown mcast interface: vcan0 [ 426.188145][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 426.242738][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 426.304359][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 426.463337][T18337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.478683][ T5831] Bluetooth: hci3: link tx timeout [ 426.489989][ T5831] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 426.512842][ T5831] Bluetooth: hci3: link tx timeout [ 426.518490][ T5831] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 428.527125][T18382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.554139][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 428.780177][T18394] netlink: 'syz.1.3396': attribute type 3 has an invalid length. [ 428.833155][T18394] netlink: 'syz.1.3396': attribute type 3 has an invalid length. [ 429.597486][T18430] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3403'. [ 429.625532][T18452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3408'. [ 429.643126][T18452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3408'. [ 429.814180][T18454] syzkaller1: entered promiscuous mode [ 429.833055][T18454] syzkaller1: entered allmulticast mode [ 429.861607][T18454] netlink: 'syz.3.3409': attribute type 13 has an invalid length. [ 429.888210][T18454] netlink: 'syz.3.3409': attribute type 58 has an invalid length. [ 429.891548][T18459] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 429.940720][T18454] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3409'. [ 429.966165][T18459] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 429.976346][T18459] gretap1: entered promiscuous mode [ 429.992963][T18459] gretap1: entered allmulticast mode [ 430.095990][T18475] team0: Cannot enslave team device to itself [ 430.106362][T18470] vxcan1 speed is unknown, defaulting to 1000 [ 430.311862][T18481] vlan2: entered allmulticast mode [ 430.327371][T18481] bond0: entered allmulticast mode [ 430.346311][T18481] bond_slave_0: entered allmulticast mode [ 430.362703][T18481] bond_slave_1: entered allmulticast mode [ 430.451252][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3417'. [ 430.614103][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 430.654186][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'. [ 430.724927][T18498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3421'. [ 430.911080][T18511] netlink: 'syz.2.3422': attribute type 1 has an invalid length. [ 430.962567][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3422'. [ 431.063738][T18511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.187479][T18514] bond2: Unable to set up delay as MII monitoring is disabled [ 431.238039][T18514] bond2 (unregistering): Released all slaves [ 431.274384][T18528] openvswitch: netlink: Key type 100 is out of range max 32 [ 431.377986][T18528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3427'. [ 431.807112][T18540] : entered promiscuous mode [ 432.397221][T18577] netlink: 'syz.2.3437': attribute type 1 has an invalid length. [ 432.456721][T18577] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3437'. [ 432.475088][T18584] netlink: 'syz.2.3437': attribute type 1 has an invalid length. [ 432.655710][T18591] xt_cgroup: invalid path, errno=-2 [ 432.683066][T18591] netlink: 'syz.1.3440': attribute type 39 has an invalid length. [ 432.685432][T18592] netlink: 'syz.1.3440': attribute type 39 has an invalid length. [ 432.811966][T18601] rdma_op ffff88806506b9f0 conn xmit_rdma 0000000000000000 [ 432.821075][T18601] unsupported nlmsg_type 40 [ 432.826847][T18601] netlink: 'syz.4.3443': attribute type 1 has an invalid length. [ 432.880889][T18601] bond1: entered promiscuous mode [ 432.886943][T18601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.947286][T18603] bond1: (slave bridge2): making interface the new active one [ 432.955435][T18603] bridge2: entered promiscuous mode [ 432.962175][T18603] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 432.988893][T18601] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 433.063317][T18601] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 433.214581][T18610] netlink: 'syz.0.3444': attribute type 33 has an invalid length. [ 433.525504][T18638] netlink: 'syz.2.3449': attribute type 16 has an invalid length. [ 433.744266][T18638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.949013][T18648] IPv6: sit1: Disabled Multicast RS [ 433.978546][T18660] sctp: [Deprecated]: syz.4.3455 (pid 18660) Use of int in max_burst socket option. [ 433.978546][T18660] Use struct sctp_assoc_value instead [ 434.009022][T18649] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 434.094661][T18662] netdevsim netdevsim0: Direct firmware load for .. @ failed with error -2 [ 434.113884][T18662] netdevsim netdevsim0: Falling back to sysfs fallback for: .. @ [ 434.338030][T18671] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 434.356281][T18676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.245348][T18732] syzkaller0: entered promiscuous mode [ 435.278399][T18732] syzkaller0: entered allmulticast mode [ 435.311574][T18732] tc action pedit offset -2147483648 out of bounds [ 435.318789][T18732] tc action pedit offset -2147483648 out of bounds [ 435.325472][T18732] tc action pedit offset -2147483648 out of bounds [ 435.332192][T18732] tc action pedit offset -2147483648 out of bounds [ 435.338795][T18732] tc action pedit offset -2147483648 out of bounds [ 435.345397][T18732] tc action pedit offset -2147483648 out of bounds [ 435.352214][T18732] tc action pedit offset -2147483648 out of bounds [ 435.359021][T18732] tc action pedit offset -2147483648 out of bounds [ 435.365624][T18732] tc action pedit offset -2147483648 out of bounds [ 435.372340][T18732] tc action pedit offset -2147483648 out of bounds [ 435.378985][T18732] 0: reclassify loop, rule prio 0, protocol 800 [ 436.544305][T18792] tipc: Started in network mode [ 436.549263][T18792] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 436.572795][T18792] tipc: Enabled bearer , priority 10 [ 436.630900][T18794] __nla_validate_parse: 6 callbacks suppressed [ 436.630932][T18794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3487'. [ 436.726999][T18799] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3488'. [ 436.739670][T18794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3487'. [ 436.773875][T18802] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3488'. [ 436.835738][T18802] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3488'. [ 437.146158][T18816] nbd: must specify a device to reconfigure [ 437.382950][T18815] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 437.583156][T18827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3494'. [ 437.609973][T18827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3494'. [ 437.611447][T18831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3495'. [ 437.706147][ T5889] tipc: Node number set to 10136234 [ 440.215753][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.412918][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 467.899225][T10790] Bluetooth: hci1: command 0x0406 tx timeout [ 467.905948][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 498.926029][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3496'. [ 498.950342][T18870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3500'. [ 498.981047][T18869] bridge0: port 3(gretap0) entered disabled state [ 499.036506][T18869] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.045880][T18869] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.090331][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'. [ 499.202166][T18869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.218778][T18869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.255172][T13193] IPVS: starting estimator thread 0... [ 499.307226][T18892] IPVS: sh: FWM 3 0x00000003 - no destination available [ 499.368376][T18891] IPVS: using max 39 ests per chain, 93600 per kthread [ 499.423297][T18890] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 499.458471][T18890] bond2 (unregistering): Released all slaves [ 499.506354][ T1086] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.533208][ T1086] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.544839][ T1086] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.571776][ T1086] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.653930][T18910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3508'. [ 499.680986][T18913] validate_nla: 3 callbacks suppressed [ 499.681006][T18913] netlink: 'syz.1.3505': attribute type 21 has an invalid length. [ 499.697674][T18913] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3505'. [ 499.795238][T18924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.854615][T18923] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 500.082188][T18936] pim6reg1: entered promiscuous mode [ 500.116137][T18936] pim6reg1: entered allmulticast mode [ 500.308225][T18949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3517'. [ 500.317961][T18948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3517'. [ 500.405272][T18952] netlink: 'syz.2.3518': attribute type 2 has an invalid length. [ 500.659758][T18962] netlink: 'syz.2.3521': attribute type 4 has an invalid length. [ 500.886650][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3524'. [ 501.659594][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.482129][T18901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.705350][T18981] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3531'. [ 502.743345][T18981] syzkaller0: entered promiscuous mode [ 502.748934][T18981] syzkaller0: entered allmulticast mode [ 502.785774][T18987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3530'. [ 503.074626][T19007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.114019][T18998] sock: sock_timestamping_bind_phc: sock not bind to device [ 503.156250][T19003] bond1: invalid ARP target 0.0.0.0 specified for addition [ 503.182873][T19003] bond1: option arp_ip_target: invalid value (0) [ 503.213818][T19003] bond1 (unregistering): Released all slaves [ 503.243269][T19016] netlink: 'syz.1.3535': attribute type 21 has an invalid length. [ 503.447537][T19024] netlink: 'syz.1.3540': attribute type 7 has an invalid length. [ 504.386662][T19063] netlink: 'syz.2.3551': attribute type 1 has an invalid length. [ 504.614843][T19068] __nla_validate_parse: 7 callbacks suppressed [ 504.614866][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3552'. [ 504.744501][T19074] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3556'. [ 504.960884][T19083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3557'. [ 505.107076][T19089] syzkaller1: entered promiscuous mode [ 505.119690][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3560'. [ 505.123271][T19089] syzkaller1: entered allmulticast mode [ 505.186135][T19094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3561'. [ 505.205253][T19094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3561'. [ 505.338036][T19091] bond2: entered promiscuous mode [ 505.344674][T19091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 505.365000][T19094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'. [ 505.421888][T19105] netlink: 'syz.4.3565': attribute type 5 has an invalid length. [ 505.430357][T19105] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3565'. [ 505.442117][T19106] netlink: 'syz.4.3565': attribute type 5 has an invalid length. [ 505.451708][T19106] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3565'. [ 505.488319][T19109] netlink: 'syz.3.3564': attribute type 1 has an invalid length. [ 505.579108][T19109] netlink: 'syz.3.3564': attribute type 1 has an invalid length. [ 505.612092][T19115] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 505.623551][T19115] bond1: (slave vcan1): Error -95 calling set_mac_address [ 505.640945][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3568'. [ 505.711163][T19124] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.156334][T19151] batman_adv: batadv0: Adding interface: dummy0 [ 506.172713][T19151] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.207546][T19151] batman_adv: batadv0: Interface activated: dummy0 [ 506.226198][T19158] batadv0: mtu less than device minimum [ 506.233487][T19158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 506.245523][T19158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 506.257668][T19158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 506.269555][T19158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 506.281243][T19158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 506.293330][T19158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 506.305039][T19158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 506.316683][T19158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 506.328520][T19158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 506.369678][T19156] syzkaller0: entered promiscuous mode [ 506.386771][T19156] syzkaller0: entered allmulticast mode [ 506.394621][T19151] netlink: 'syz.1.3576': attribute type 11 has an invalid length. [ 506.403676][T19151] netlink: 'syz.1.3576': attribute type 4 has an invalid length. [ 506.680817][T19172] gre2: entered promiscuous mode [ 506.686837][T19172] gre2: entered allmulticast mode [ 506.696823][T19174] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 506.975095][T19184] bond3 (unregistering): Released all slaves [ 507.203278][T19201] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 507.213524][T19203] netlink: 'syz.3.3592': attribute type 1 has an invalid length. [ 507.256056][T19203] netlink: 'syz.3.3592': attribute type 1 has an invalid length. [ 507.281721][T19203] netlink: 'syz.3.3592': attribute type 8 has an invalid length. [ 507.371686][T19210] syzkaller0: entered promiscuous mode [ 507.377535][T19210] syzkaller0: entered allmulticast mode [ 508.109696][T19274] netlink: 'syz.1.3613': attribute type 1 has an invalid length. [ 508.183411][T19279] Bluetooth: MGMT ver 1.23 [ 508.189303][T19274] bond3: entered promiscuous mode [ 508.203027][T19274] 8021q: adding VLAN 0 to HW filter on device bond3 [ 508.241278][T19285] xt_HMARK: proto mask must be zero with L3 mode [ 508.307502][T19275] bond3: (slave bridge1): making interface the new active one [ 508.348778][T19275] bridge1: entered promiscuous mode [ 508.374346][T19275] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 508.400537][T19243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.444385][T19282] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 508.499194][T19282] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 508.742525][T19298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.160350][T19354] netlink: 'syz.0.3635': attribute type 63 has an invalid length. [ 509.649040][T19385] __nla_validate_parse: 18 callbacks suppressed [ 509.649063][T19385] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3645'. [ 509.675889][T19387] syzkaller0: entered promiscuous mode [ 509.691466][T19387] syzkaller0: entered allmulticast mode [ 509.731695][T19394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3648'. [ 509.803656][T19395] syzkaller0: entered promiscuous mode [ 509.817322][T19395] syzkaller0: entered allmulticast mode [ 510.426074][T19417] syzkaller0: entered promiscuous mode [ 510.442783][T19417] syzkaller0: entered allmulticast mode [ 510.521662][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3652'. [ 510.557536][T19420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3653'. [ 510.568336][T19421] validate_nla: 2 callbacks suppressed [ 510.568357][T19421] netlink: 'syz.0.3652': attribute type 10 has an invalid length. [ 510.582829][T19421] veth0_vlan: left promiscuous mode [ 510.598210][T19420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3653'. [ 510.611206][T19426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3655'. [ 510.615239][T19421] veth0_vlan: entered promiscuous mode [ 510.626717][T19427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3656'. [ 510.645290][T19426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3655'. [ 510.684418][T19421] team0: Device veth0_vlan failed to register rx_handler [ 510.786066][T19426] gretap1: entered promiscuous mode [ 510.792539][T19426] gretap1: entered allmulticast mode [ 510.888678][T19441] : entered promiscuous mode [ 510.921916][T19426] xt_hashlimit: size too large, truncated to 1048576 [ 510.983009][T19447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3659'. [ 511.005450][T19448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3660'. [ 511.226340][T19455] veth4: entered allmulticast mode [ 511.288477][T19455] veth5: entered promiscuous mode [ 511.311751][T19465] xt_hashlimit: size too large, truncated to 1048576 [ 511.317671][T19455] veth5: entered allmulticast mode [ 511.565963][T19476] netlink: 'syz.4.3669': attribute type 1 has an invalid length. [ 511.587264][T19477] net_ratelimit: 12 callbacks suppressed [ 511.587281][T19477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.865543][T19495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 511.940455][T19505] netlink: 'syz.4.3673': attribute type 4 has an invalid length. [ 511.948817][T19505] netlink: 'syz.4.3673': attribute type 1 has an invalid length. [ 512.133583][T19510] syzkaller0: entered promiscuous mode [ 512.139233][T19510] syzkaller0: entered allmulticast mode [ 514.216639][T19528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.249535][T19529] veth1_macvtap: left promiscuous mode [ 514.261116][T19529] macsec0: entered promiscuous mode [ 514.266790][T19529] macsec0: entered allmulticast mode [ 514.306658][T19529] veth1_macvtap: entered promiscuous mode [ 514.321842][T19529] veth1_macvtap: entered allmulticast mode [ 514.328810][T19529] macsec0: left promiscuous mode [ 514.335555][T19529] macsec0: left allmulticast mode [ 514.340848][T19529] veth1_macvtap: left allmulticast mode [ 514.391447][T19533] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 514.417234][T19533] bond4 (unregistering): Released all slaves [ 514.914043][T19566] __nla_validate_parse: 3 callbacks suppressed [ 514.914069][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3691'. [ 514.976424][T19571] netlink: 212352 bytes leftover after parsing attributes in process `syz.0.3691'. [ 514.996211][ T37] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.006041][T19569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3693'. [ 515.021798][ T37] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.059866][ T37] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.070293][T19577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3695'. [ 515.080354][ T37] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.320088][T19595] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3701'. [ 515.329998][T19595] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 515.619887][T19613] macvtap1: entered promiscuous mode [ 515.627516][T13186] IPVS: starting estimator thread 0... [ 515.633988][T19613] macvtap1: entered allmulticast mode [ 515.639520][T19613] veth1_vlan: entered allmulticast mode [ 515.646962][T19618] IPVS: ip_vs_edit_dest(): server weight less than zero [ 515.659275][T19618] IPVS: ip_vs_edit_dest(): server weight less than zero [ 515.670747][T19612] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3705'. [ 515.705294][T19613] macvtap2: entered promiscuous mode [ 515.724904][T19613] macvtap2: entered allmulticast mode [ 515.752310][T19620] IPVS: using max 28 ests per chain, 67200 per kthread [ 516.060264][T19643] syzkaller0: entered promiscuous mode [ 516.076315][T19643] syzkaller0: entered allmulticast mode [ 516.097187][T19643] x_tables: duplicate underflow at hook 1 [ 516.158754][T19650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3719'. [ 516.200390][T19654] netlink: 'syz.3.3717': attribute type 1 has an invalid length. [ 516.212317][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3718'. [ 516.286698][T19662] netlink: 'syz.4.3721': attribute type 1 has an invalid length. [ 516.307961][T19653] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 516.318529][T19653] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 516.364717][T19662] bond3: entered promiscuous mode [ 516.370547][T19662] 8021q: adding VLAN 0 to HW filter on device bond3 [ 516.464523][T19665] ipvlan2: entered allmulticast mode [ 516.470266][T19665] bond3: entered allmulticast mode [ 516.527046][T19662] bond3: (slave bridge3): making interface the new active one [ 516.536918][T19662] bridge3: entered promiscuous mode [ 516.543587][T19662] bridge3: entered allmulticast mode [ 516.553617][T19662] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 516.637745][T19673] syzkaller0: entered promiscuous mode [ 516.659198][T19673] syzkaller0: entered allmulticast mode [ 516.821450][T19694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.860193][T19697] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20002 [ 516.956374][T19699] Bluetooth: MGMT ver 1.23 [ 516.994940][T19704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3732'. [ 517.040308][T19710] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 517.840024][T19747] Can't find ip_set type bitmap:ip [ 518.322172][T19777] netlink: 'syz.1.3754': attribute type 24 has an invalid length. [ 518.454230][T19788] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 518.473477][T19793] IPv6: NLM_F_CREATE should be specified when creating new route [ 518.760798][T19807] netlink: 'syz.4.3762': attribute type 9 has an invalid length. [ 519.021668][T19813] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3764'. [ 519.321339][T19833] tipc: Started in network mode [ 519.369187][T19833] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 519.444998][T19833] tipc: Enabling of bearer rejected, failed to enable media [ 519.629608][T19794] lec:lec_atm_close: lec0: Shut down! [ 520.067787][T19864] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 520.086337][T19864] netlink: 'syz.2.3772': attribute type 1 has an invalid length. [ 520.183667][T19870] netlink: 'syz.1.3773': attribute type 1 has an invalid length. [ 520.216800][T19864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.475115][T19887] __nla_validate_parse: 3 callbacks suppressed [ 520.475139][T19887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3775'. [ 520.494180][T19886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3776'. [ 520.553312][T13186] lec:lec_start_xmit: lec0:No lecd attached [ 520.598385][T19891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3777'. [ 521.557797][T19938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3783'. [ 521.570229][T19938] block nbd3: Unsupported socket: should be TCP or UNIX. [ 521.598347][T19941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3782'. [ 521.626258][T19941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3782'. [ 521.746146][T19947] netlink: 211792 bytes leftover after parsing attributes in process `syz.0.3782'. [ 521.985617][T19959] netlink: 'syz.3.3788': attribute type 1 has an invalid length. [ 522.113580][T19959] bond3: entered promiscuous mode [ 522.119328][T19959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 522.140131][T19959] netlink: 'syz.3.3788': attribute type 10 has an invalid length. [ 522.276111][T19973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3791'. [ 522.285865][T19973] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3791'. [ 522.315423][T19976] bond0: Error: Cannot enslave bond to itself. [ 522.528669][T19988] IPv6: NLM_F_CREATE should be specified when creating new route [ 522.598957][T19988] pim6reg1: entered promiscuous mode [ 522.621619][T19988] pim6reg1: entered allmulticast mode [ 522.683720][T19996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3798'. [ 522.903878][T20016] netlink: 'syz.0.3800': attribute type 32 has an invalid length. [ 523.603968][T20030] syzkaller0: entered promiscuous mode [ 523.609484][T20030] syzkaller0: entered allmulticast mode [ 525.654965][T19997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.820890][T20036] netlink: 'syz.1.3806': attribute type 24 has an invalid length. [ 525.896988][T20048] syz.2.3807 (20048) used obsolete PPPIOCDETACH ioctl [ 525.988214][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3807'. [ 525.997637][T20051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3810'. [ 526.085660][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3812'. [ 526.224593][T20068] Cannot find add_set index 1 as target [ 526.270397][T20076] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3817'. [ 526.340900][T20081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.508866][T20084] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 526.541340][T20084] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 526.564246][T20084] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 526.589240][T20084] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 526.612529][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6060 ms [ 526.621507][ C1] lec:lec_tx_timeout: lec0 [ 526.626704][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 526.647523][T20101] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3821'. [ 526.650486][T20100] netlink: 'syz.4.3822': attribute type 1 has an invalid length. [ 526.669342][T20084] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 526.679029][T20084] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 526.764343][T20084] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 526.782154][T20084] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 526.860882][T20084] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 526.904833][T20084] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 527.028390][T20116] netlink: 'syz.3.3826': attribute type 2 has an invalid length. [ 527.053671][T20116] netlink: 'syz.3.3826': attribute type 5 has an invalid length. [ 527.068563][T20119] xt_hashlimit: size too large, truncated to 1048576 [ 527.087694][T20115] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3825'. [ 527.361003][T20134] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20002 [ 527.578736][T20138] erspan0: entered promiscuous mode [ 527.651705][T20130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.739164][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3833'. [ 527.781778][T20144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3833'. [ 527.793485][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3833'. [ 527.936313][T20155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.089610][T20169] netlink: 'syz.4.3839': attribute type 1 has an invalid length. [ 528.255558][T20177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3843'. [ 528.309287][T20181] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.317446][T20181] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.335556][T20175] ieee802154 phy1 wpan1: encryption failed: -22 [ 528.408791][T20177] ipvlan3: entered allmulticast mode [ 528.437469][T20177] syz_tun: entered allmulticast mode [ 528.995259][T20228] vlan0: entered allmulticast mode [ 529.001859][T20228] erspan0: entered allmulticast mode [ 529.255278][T20236] ipvlan3: entered allmulticast mode [ 529.634246][T20252] delete_channel: no stack [ 529.914507][T20270] syzkaller0: entered promiscuous mode [ 529.921297][T20270] syzkaller0: entered allmulticast mode [ 529.977928][T20270] netlink: 'syz.1.3868': attribute type 24 has an invalid length. [ 530.651999][T20307] openvswitch: netlink: IP tunnel dst address not specified [ 530.939073][T20321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.075493][T20327] netlink: 'syz.3.3885': attribute type 1 has an invalid length. [ 531.083835][T20327] __nla_validate_parse: 8 callbacks suppressed [ 531.083854][T20327] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3885'. [ 531.129732][T20334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3888'. [ 531.210168][T20338] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3886'. [ 531.258433][T20340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3889'. [ 531.295690][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3889'. [ 531.324781][T20340] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3889'. [ 531.378242][T20339] delete_channel: no stack [ 531.423457][T20348] netlink: 'syz.1.3892': attribute type 11 has an invalid length. [ 531.431752][T20348] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3892'. [ 531.692971][T20364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3895'. [ 531.776611][T12381] IPVS: starting estimator thread 0... [ 531.883042][T20373] IPVS: using max 28 ests per chain, 67200 per kthread [ 531.917117][T20377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3900'. [ 531.928352][T20380] netlink: 'syz.0.3901': attribute type 13 has an invalid length. [ 532.199096][T20399] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3905'. [ 532.254111][T20399] xt_policy: neither incoming nor outgoing policy selected [ 532.373228][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 532.381636][ C1] lec:lec_tx_timeout: lec0 [ 532.387107][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 532.546180][T20419] netlink: 'syz.1.3909': attribute type 10 has an invalid length. [ 532.658335][T20419] batman_adv: batadv0: Adding interface: netdevsim0 [ 532.700091][T20419] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.755893][T20419] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 532.842960][T20433] chnl_net:caif_netlink_parms(): no params data found [ 532.953502][T20438] netlink: 'syz.3.3913': attribute type 10 has an invalid length. [ 533.364744][T20460] openvswitch: netlink: Flow actions attr not present in new flow. [ 533.860385][T20488] syzkaller1: entered promiscuous mode [ 533.895638][T20488] syzkaller1: entered allmulticast mode [ 538.132479][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 538.140799][ C1] lec:lec_tx_timeout: lec0 [ 538.145922][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 543.152823][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 543.161090][ C1] lec:lec_tx_timeout: lec0 [ 543.165880][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 548.172472][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 548.180645][ C1] lec:lec_tx_timeout: lec0 [ 548.185349][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 553.192741][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 553.200890][ C1] lec:lec_tx_timeout: lec0 [ 553.205711][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 558.212664][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 558.220722][ C1] lec:lec_tx_timeout: lec0 [ 558.225398][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 563.096335][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.232504][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 563.240653][ C1] lec:lec_tx_timeout: lec0 [ 563.245407][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 569.492565][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6250 ms [ 569.500649][ C1] lec:lec_tx_timeout: lec0 [ 569.505435][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 575.252548][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 575.260644][ C1] lec:lec_tx_timeout: lec0 [ 575.265583][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 581.012455][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 581.020731][ C1] lec:lec_tx_timeout: lec0 [ 581.025933][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 586.052674][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 586.060841][ C1] lec:lec_tx_timeout: lec0 [ 586.065762][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 591.072496][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 591.080540][ C1] lec:lec_tx_timeout: lec0 [ 591.085212][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 593.204107][T20533] __nla_validate_parse: 10 callbacks suppressed [ 593.204130][T20533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3933'. [ 593.225053][T20536] syzkaller0: entered promiscuous mode [ 593.252625][T20536] syzkaller0: entered allmulticast mode [ 593.260754][T20533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3933'. [ 593.271322][T20533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3933'. [ 593.284483][T20533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3933'. [ 593.301302][T20533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3933'. [ 593.346254][T20542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3937'. [ 593.360025][T20533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3933'. [ 593.386871][T20533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3933'. [ 593.431556][T20533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3933'. [ 593.474163][T20533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3933'. [ 593.784853][T20576] gtp0: entered promiscuous mode [ 593.790059][T20576] gtp0: entered allmulticast mode [ 593.847055][T20579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 593.936812][T20578] pim6reg: entered allmulticast mode [ 593.985358][T20587] netlink: 'syz.3.3952': attribute type 29 has an invalid length. [ 594.097684][T20591] bond5: entered promiscuous mode [ 594.260750][T20606] veth0: entered promiscuous mode [ 594.269432][T20605] veth0: left promiscuous mode [ 594.887713][T20641] bond6: option all_slaves_active: invalid value (222) [ 594.980449][T20641] bond6 (unregistering): Released all slaves [ 595.371251][T20673] netlink: 'syz.2.3975': attribute type 5 has an invalid length. [ 595.443514][T20673] netlink: 'syz.2.3975': attribute type 5 has an invalid length. [ 595.455803][ T37] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.486215][ T37] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.513888][ T37] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.544813][ T37] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.634930][T20683] netlink: 'syz.2.3979': attribute type 1 has an invalid length. [ 595.726221][T20692] netlink: 'syz.3.3981': attribute type 2 has an invalid length. [ 595.788668][T20696] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 595.863805][T20696] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 595.876991][T20703] block nbd3: Unsupported socket: should be TCP or UNIX. [ 595.906210][T20703] tipc: Failed to remove unknown binding: 66,0,0/10136234:707923320/707923321 [ 595.922821][T20703] tipc: Failed to remove unknown binding: 66,0,0/10136234:707923320/707923321 [ 596.091860][T20685] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 596.092643][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 596.111025][ C1] lec:lec_tx_timeout: lec0 [ 596.116567][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 596.142264][T20685] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 596.152645][T20714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.857242][T20746] delete_channel: no stack [ 596.958605][T20750] netlink: 'syz.3.4000': attribute type 4 has an invalid length. [ 596.969665][T20750] tipc: Enabling of bearer rejected, failed to enable media [ 597.021301][T20761] x_tables: duplicate underflow at hook 1 [ 597.033020][T20761] x_tables: duplicate underflow at hook 1 [ 597.056314][T20761] x_tables: duplicate underflow at hook 1 [ 597.064393][T20761] x_tables: duplicate underflow at hook 1 [ 597.070940][T20761] x_tables: duplicate underflow at hook 1 [ 597.077842][T20761] x_tables: duplicate underflow at hook 1 [ 597.449319][T20790] macvlan0: entered promiscuous mode [ 597.471019][T20788] vxcan1 speed is unknown, defaulting to 1000 [ 598.139191][T20827] netlink: 'syz.2.4024': attribute type 1 has an invalid length. [ 598.287175][T20827] 8021q: adding VLAN 0 to HW filter on device bond4 [ 598.611141][T20853] __nla_validate_parse: 81 callbacks suppressed [ 598.611165][T20853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4031'. [ 598.627906][T20853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4031'. [ 598.637678][T20853] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4031'. [ 598.665206][T20853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4031'. [ 598.675442][T20853] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4031'. [ 598.756081][T20853] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.775946][T20861] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 598.792252][T20861] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4033'. [ 598.812692][T20865] netlink: 'syz.2.4031': attribute type 16 has an invalid length. [ 598.820698][T20865] netlink: 'syz.2.4031': attribute type 17 has an invalid length. [ 598.899130][T20870] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4031'. [ 598.979055][T20873] netlink: 'syz.3.4035': attribute type 1 has an invalid length. [ 598.987597][T20865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 599.008841][T20873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4035'. [ 599.580744][T20905] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4045'. [ 599.606163][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4046'. [ 599.741939][T20919] netlink: 'syz.4.4049': attribute type 2 has an invalid length. [ 599.763800][T20921] netlink: 'syz.2.4050': attribute type 1 has an invalid length. [ 600.040325][T20938] vlan2: entered promiscuous mode [ 600.069748][T20938] bridge0: entered promiscuous mode [ 600.090627][T20942] nbd: must specify at least one socket [ 600.174764][T20939] bond5: option xmit_hash_policy: invalid value (64) [ 600.212269][T20939] bond5 (unregistering): Released all slaves [ 601.132397][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 601.140710][ C1] lec:lec_tx_timeout: lec0 [ 601.145907][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 604.867040][T21069] __nla_validate_parse: 9 callbacks suppressed [ 604.867075][T21069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4094'. [ 605.019927][ T1100] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.032073][ T1100] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.043082][T12381] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.269341][T21095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4104'. [ 605.282746][ T5889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.599067][T21115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4108'. [ 605.617857][T21115] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4108'. [ 606.052682][ T5889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 606.152417][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 606.160602][ C1] lec:lec_tx_timeout: lec0 [ 606.165625][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 606.300248][T21148] netlink: 'syz.4.4119': attribute type 10 has an invalid length. [ 606.309878][T21150] xt_policy: output policy not valid in PREROUTING and INPUT [ 606.412726][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4121'. [ 606.580608][T21167] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4125'. [ 606.863396][T21178] tipc: Disabling bearer [ 606.900494][T21175] syzkaller1: entered promiscuous mode [ 606.906236][T21175] syzkaller1: entered allmulticast mode [ 606.989135][T21186] syzkaller0: entered promiscuous mode [ 607.002946][T21186] syzkaller0: entered allmulticast mode [ 607.133543][T21192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4132'. [ 607.569799][T21223] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4141'. [ 607.599263][T21223] netlink: 'syz.0.4141': attribute type 39 has an invalid length. [ 607.614019][T21223] hsr_slave_1 (unregistering): left promiscuous mode [ 607.743812][T21229] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 607.916320][T21236] syzkaller1: entered promiscuous mode [ 607.932998][T21236] syzkaller1: entered allmulticast mode [ 607.961452][T21243] netlink: 146872 bytes leftover after parsing attributes in process `syz.4.4148'. [ 607.985261][T21243] netlink: 'syz.4.4148': attribute type 33 has an invalid length. [ 608.025868][T21246] bond6: (slave erspan0): Device is not bonding slave [ 608.033216][T21246] bond6: option active_slave: invalid value (erspan0) [ 608.045638][T21246] bond6 (unregistering): Released all slaves [ 608.104703][ T30] audit: type=1107 audit(1776112531.378:8): pid=21251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='*ɾܟbD6wE:1sA Ɓ& GuPZF}:!,Ṥe [ 608.104703][ T30] ˰:%KȢ,sY=b%,%#&4T`BO6$s/] tF/kQ^̀r~,#N$G9䋛bn}`!^(r8Yv:U^T;I#E8EZX>pNDq5' [ 608.179924][ T30] audit: type=1107 audit(1776112531.448:9): pid=21251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='*ɾܟbD6wE:1sA Ɓ& GuPZF}:!,Ṥe [ 608.179924][ T30] ˰:%KȢ,sY=b%,%#&4T`BO6$s/] tF/kQ^̀r~,#N$G9䋛bn}`!^(r8Yv:U^T;I#E8EZX>pNDq5' [ 608.217234][T21253] smc: net device team0 applied user defined pnetid SYZ2 [ 608.234087][T21250] smc: net device team0 erased user defined pnetid SYZ2 [ 608.346095][T21263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4153'. [ 608.772555][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 608.845908][T21298] netlink: 'syz.3.4166': attribute type 10 has an invalid length. [ 608.890318][T21298] team0: Device vxcan1 is of different type [ 608.994884][T21307] xt_hashlimit: size too large, truncated to 1048576 [ 609.134149][T21313] netlink: 'syz.4.4171': attribute type 1 has an invalid length. [ 609.166704][T21318] ip6t_REJECT: ECHOREPLY is not supported [ 609.279232][T21323] openvswitch: netlink: IP tunnel dst address not specified [ 609.867900][T21365] sctp: [Deprecated]: syz.1.4192 (pid 21365) Use of int in max_burst socket option. [ 609.867900][T21365] Use struct sctp_assoc_value instead [ 610.125313][T21379] __nla_validate_parse: 9 callbacks suppressed [ 610.125337][T21379] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4196'. [ 610.143899][T21379] Unknown options in mask b7f2 [ 610.259168][T21386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4197'. [ 610.278653][T21386] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4197'. [ 610.578516][T21408] netlink: 'syz.1.4203': attribute type 8 has an invalid length. [ 610.665181][T21411] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4205'. [ 610.685930][T21411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4205'. [ 610.971687][T21427] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4211'. [ 611.172936][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 611.181906][ C1] lec:lec_tx_timeout: lec0 [ 611.187495][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 611.270866][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4216'. [ 611.346921][T21447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.811429][T21477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4226'. [ 612.156636][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4234'. [ 612.166520][T21494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4233'. [ 612.185196][T21494] macvlan0: entered allmulticast mode [ 612.191412][T21494] hsr0: entered allmulticast mode [ 612.213248][T21494] hsr_slave_0: entered allmulticast mode [ 612.219246][T21494] hsr_slave_1: entered allmulticast mode [ 612.287499][T21496] netlink: 'syz.3.4232': attribute type 1 has an invalid length. [ 612.294070][T21498] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 612.397301][T21506] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 612.767715][T21535] bridge5: entered promiscuous mode [ 612.812883][T21535] bridge5: entered allmulticast mode [ 612.874734][T21541] xt_hashlimit: size too large, truncated to 1048576 [ 613.089877][T21559] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 613.399669][T21579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.690674][T21602] netlink: 'syz.3.4264': attribute type 4 has an invalid length. [ 614.199174][T21634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.415604][T21640] veth5: entered promiscuous mode [ 614.633188][T21662] gretap2: entered promiscuous mode [ 614.640153][T21662] batman_adv: batadv0: Adding interface: gretap2 [ 614.647399][T21662] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 614.668207][T21662] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 614.736351][T21667] netlink: 'syz.1.4283': attribute type 3 has an invalid length. [ 614.744706][T21667] netlink: 'syz.1.4283': attribute type 3 has an invalid length. [ 615.379546][T21710] netlink: 'syz.4.4296': attribute type 16 has an invalid length. [ 615.461154][T21721] netlink: 'syz.4.4297': attribute type 10 has an invalid length. [ 615.474561][T21721] __nla_validate_parse: 24 callbacks suppressed [ 615.474584][T21721] netlink: 396 bytes leftover after parsing attributes in process `syz.4.4297'. [ 615.776897][T21739] netlink: 'syz.3.4304': attribute type 2 has an invalid length. [ 615.797771][T21739] v: entered promiscuous mode [ 615.804375][T21740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4303'. [ 615.809694][T21739] netlink: 'syz.3.4304': attribute type 2 has an invalid length. [ 615.919603][T21748] netlink: 516 bytes leftover after parsing attributes in process `syz.1.4305'. [ 615.939807][T21747] netlink: 516 bytes leftover after parsing attributes in process `syz.1.4305'. [ 616.103317][T21755] team0 (unregistering): Port device team_slave_0 removed [ 616.139624][T21755] team0 (unregistering): Port device team_slave_1 removed [ 616.202556][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 616.212543][ C1] lec:lec_tx_timeout: lec0 [ 616.217505][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 616.223555][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 616.318153][T21760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4311'. [ 616.588182][T21774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.600706][T21774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4313'. [ 616.634865][T21774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4313'. [ 616.673357][T21774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4313'. [ 616.939467][T21791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4320'. [ 616.950152][T21795] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4321'. [ 617.217511][T21813] tipc: Enabling of bearer rejected, failed to enable media [ 617.245180][T21815] netlink: 'syz.0.4328': attribute type 1 has an invalid length. [ 617.418822][T21823] openvswitch: netlink: IP tunnel dst address not specified [ 618.680440][T21909] sctp: [Deprecated]: syz.1.4359 (pid 21909) Use of int in max_burst socket option deprecated. [ 618.680440][T21909] Use struct sctp_assoc_value instead [ 618.768531][T21914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 619.009155][T21930] netlink: 'syz.1.4366': attribute type 1 has an invalid length. [ 619.066302][T21930] 8021q: adding VLAN 0 to HW filter on device bond6 [ 619.511725][T21960] syzkaller0: entered promiscuous mode [ 619.517834][T21960] syzkaller0: entered allmulticast mode [ 619.577322][T21963] 8021q: VLANs not supported on ip_vti0 [ 619.747841][T21975] netlink: 'syz.2.4380': attribute type 10 has an invalid length. [ 619.817396][T21977] netlink: 'syz.3.4379': attribute type 32 has an invalid length. [ 619.881880][T21977] bond4: option coupled_control: invalid value (18) [ 619.900507][T21977] bond4 (unregistering): Released all slaves [ 620.037082][T21993] netlink: 'syz.4.4385': attribute type 2 has an invalid length. [ 620.053495][T21991] xt_SECMARK: invalid mode: 9 [ 620.080513][T21993] netlink: 'syz.4.4385': attribute type 178 has an invalid length. [ 620.581260][T22027] __nla_validate_parse: 78 callbacks suppressed [ 620.581285][T22027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4398'. [ 620.659591][T22027] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 620.676746][T22027] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4398'. [ 620.795030][T22039] can: request_module (can-proto-0) failed. [ 620.886501][T22045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4403'. [ 620.953743][T22045] hsr_slave_1 (unregistering): left promiscuous mode [ 621.232413][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 621.240594][ C1] lec:lec_tx_timeout: lec0 [ 621.245858][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 621.323022][T22062] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4407'. [ 621.543048][T22069] netlink: 'syz.3.4410': attribute type 3 has an invalid length. [ 621.552074][T22069] netlink: 'syz.3.4410': attribute type 1 has an invalid length. [ 621.560949][T22069] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4410'. [ 621.592237][T22069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4410'. [ 621.917253][T22080] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4414'. [ 621.975777][T22085] netlink: 'syz.3.4415': attribute type 1 has an invalid length. [ 622.056300][T22084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4415'. [ 622.092218][T22085] 8021q: adding VLAN 0 to HW filter on device bond4 [ 622.168794][T22088] tipc: Enabled bearer , priority 0 [ 622.181980][T22088] syzkaller0: entered promiscuous mode [ 622.187758][T22088] syzkaller0: entered allmulticast mode [ 622.244494][T22097] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 622.351945][T22110] tipc: Resetting bearer [ 622.449923][T22087] tipc: Resetting bearer [ 622.497435][T22087] tipc: Disabling bearer [ 622.723368][ T37] tipc: Subscription rejected, illegal request [ 622.887072][T22103] ================================================================== [ 622.896036][T22103] BUG: KASAN: slab-use-after-free in nr_neigh_put+0x21/0x170 [ 622.904633][T22103] Write of size 4 at addr ffff888028dc0ebc by task syz.3.4420/22103 [ 622.912752][T22103] [ 622.915525][T22103] CPU: 1 UID: 0 PID: 22103 Comm: syz.3.4420 Not tainted syzkaller #0 PREEMPT(full) [ 622.915556][T22103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 622.915575][T22103] Call Trace: [ 622.915590][T22103] [ 622.915599][T22103] dump_stack_lvl+0xe8/0x150 [ 622.915696][T22103] print_report+0xba/0x230 [ 622.915728][T22103] ? nr_neigh_put+0x21/0x170 [ 622.915759][T22103] kasan_report+0x117/0x150 [ 622.915814][T22103] ? nr_neigh_put+0x21/0x170 [ 622.915851][T22103] kasan_check_range+0x264/0x2c0 [ 622.915881][T22103] nr_neigh_put+0x21/0x170 [ 622.915914][T22103] nr_del_neigh+0x25a/0x2d0 [ 622.915946][T22103] nr_rt_ioctl+0xd62/0xf90 [ 622.915982][T22103] ? kasan_quarantine_put+0xbb/0x1f0 [ 622.916006][T22103] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 622.916044][T22103] ? apparmor_capable+0x126/0x170 [ 622.916163][T22103] ? capable+0x88/0xe0 [ 622.916212][T22103] ? nr_ioctl+0x1b1/0x3b0 [ 622.916239][T22103] sock_do_ioctl+0x101/0x320 [ 622.916325][T22103] ? __pfx_sock_do_ioctl+0x10/0x10 [ 622.916344][T22103] ? do_futex+0x395/0x420 [ 622.916393][T22103] sock_ioctl+0x5c6/0x7f0 [ 622.916449][T22103] ? __pfx_sock_ioctl+0x10/0x10 [ 622.916482][T22103] ? __fget_files+0x2a/0x420 [ 622.916515][T22103] ? __fget_files+0x3a0/0x420 [ 622.916532][T22103] ? __fget_files+0x2a/0x420 [ 622.916551][T22103] ? bpf_lsm_file_ioctl+0x9/0x20 [ 622.916601][T22103] ? __pfx_sock_ioctl+0x10/0x10 [ 622.916631][T22103] __se_sys_ioctl+0xfc/0x170 [ 622.916664][T22103] do_syscall_64+0x14d/0xf80 [ 622.916771][T22103] ? trace_irq_disable+0x3b/0x150 [ 622.916795][T22103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.916837][T22103] ? clear_bhb_loop+0x40/0x90 [ 622.916861][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.916888][T22103] RIP: 0033:0x7f5a8e59c819 [ 622.916908][T22103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.916927][T22103] RSP: 002b:00007f5a8f3c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.916949][T22103] RAX: ffffffffffffffda RBX: 00007f5a8e815fa0 RCX: 00007f5a8e59c819 [ 622.916966][T22103] RDX: 0000200000000740 RSI: 000000000000890c RDI: 000000000000000b [ 622.916980][T22103] RBP: 00007f5a8e632c91 R08: 0000000000000000 R09: 0000000000000000 [ 622.916993][T22103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.917006][T22103] R13: 00007f5a8e816038 R14: 00007f5a8e815fa0 R15: 00007fff4f4442c8 [ 622.917032][T22103] [ 622.917040][T22103] [ 623.180552][T22103] Allocated by task 20448: [ 623.185004][T22103] kasan_save_track+0x3e/0x80 [ 623.189712][T22103] __kasan_kmalloc+0x93/0xb0 [ 623.194332][T22103] __kmalloc_cache_noprof+0x31c/0x660 [ 623.199760][T22103] nr_add_neigh+0x104/0x520 [ 623.204383][T22103] nr_rt_ioctl+0xdf9/0xf90 [ 623.209038][T22103] sock_do_ioctl+0x101/0x320 [ 623.213687][T22103] sock_ioctl+0x5c6/0x7f0 [ 623.218500][T22103] __se_sys_ioctl+0xfc/0x170 [ 623.223128][T22103] do_syscall_64+0x14d/0xf80 [ 623.227742][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.233660][T22103] [ 623.236005][T22103] Freed by task 22103: [ 623.240143][T22103] kasan_save_track+0x3e/0x80 [ 623.245044][T22103] kasan_save_free_info+0x46/0x50 [ 623.250379][T22103] __kasan_slab_free+0x5c/0x80 [ 623.255348][T22103] kfree+0x1c1/0x630 [ 623.259269][T22103] nr_del_neigh+0x246/0x2d0 [ 623.263898][T22103] nr_rt_ioctl+0xd62/0xf90 [ 623.268429][T22103] sock_do_ioctl+0x101/0x320 [ 623.273059][T22103] sock_ioctl+0x5c6/0x7f0 [ 623.277439][T22103] __se_sys_ioctl+0xfc/0x170 [ 623.282377][T22103] do_syscall_64+0x14d/0xf80 [ 623.287641][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.294522][T22103] [ 623.297297][T22103] The buggy address belongs to the object at ffff888028dc0e80 [ 623.297297][T22103] which belongs to the cache kmalloc-64 of size 64 [ 623.312608][T22103] The buggy address is located 60 bytes inside of [ 623.312608][T22103] freed 64-byte region [ffff888028dc0e80, ffff888028dc0ec0) [ 623.328625][T22103] [ 623.331053][T22103] The buggy address belongs to the physical page: [ 623.337928][T22103] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28dc0 [ 623.347088][T22103] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 623.354588][T22103] page_type: f5(slab) [ 623.359559][T22103] raw: 00fff00000000000 ffff88813fea78c0 dead000000000100 dead000000000122 [ 623.368317][T22103] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 623.377694][T22103] page dumped because: kasan: bad access detected [ 623.384343][T22103] page_owner tracks the page as allocated [ 623.390447][T22103] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 36, tgid 36 (kworker/u8:2), ts 8945898703, free_ts 8878260428 [ 623.410783][T22103] post_alloc_hook+0x231/0x280 [ 623.415976][T22103] get_page_from_freelist+0x24dc/0x2580 [ 623.421917][T22103] __alloc_frozen_pages_noprof+0x18d/0x380 [ 623.428009][T22103] allocate_slab+0x77/0x660 [ 623.432596][T22103] refill_objects+0x331/0x3c0 [ 623.437501][T22103] __pcs_replace_empty_main+0x2e6/0x730 [ 623.443087][T22103] __kmalloc_noprof+0x474/0x760 [ 623.448243][T22103] security_task_alloc+0x4d/0x330 [ 623.453956][T22103] copy_process+0x16df/0x3cd0 [ 623.459560][T22103] kernel_clone+0x248/0x8e0 [ 623.464361][T22103] user_mode_thread+0x110/0x180 [ 623.469261][T22103] call_usermodehelper_exec_work+0x5c/0x230 [ 623.475358][T22103] process_scheduled_works+0xb6e/0x18c0 [ 623.480935][T22103] worker_thread+0xa53/0xfc0 [ 623.485697][T22103] kthread+0x388/0x470 [ 623.489845][T22103] ret_from_fork+0x51e/0xb90 [ 623.494493][T22103] page last free pid 849 tgid 849 stack trace: [ 623.500880][T22103] __free_frozen_pages+0xc2b/0xdb0 [ 623.506129][T22103] vfree+0x25a/0x400 [ 623.510140][T22103] delayed_vfree_work+0x55/0x80 [ 623.515134][T22103] process_scheduled_works+0xb6e/0x18c0 [ 623.520929][T22103] worker_thread+0xa53/0xfc0 [ 623.525575][T22103] kthread+0x388/0x470 [ 623.529704][T22103] ret_from_fork+0x51e/0xb90 [ 623.534335][T22103] ret_from_fork_asm+0x1a/0x30 [ 623.539151][T22103] [ 623.541544][T22103] Memory state around the buggy address: [ 623.547198][T22103] ffff888028dc0d80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 623.555717][T22103] ffff888028dc0e00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 623.564149][T22103] >ffff888028dc0e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 623.573810][T22103] ^ [ 623.579777][T22103] ffff888028dc0f00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 623.588583][T22103] ffff888028dc0f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 623.599594][T22103] ================================================================== [ 623.632203][T22103] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 623.640020][T22103] CPU: 1 UID: 0 PID: 22103 Comm: syz.3.4420 Not tainted syzkaller #0 PREEMPT(full) [ 623.649808][T22103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 623.661409][T22103] Call Trace: [ 623.665004][T22103] [ 623.668533][T22103] vpanic+0x56c/0xa60 [ 623.672577][T22103] ? __pfx_vpanic+0x10/0x10 [ 623.677662][T22103] panic+0xc5/0xd0 [ 623.681617][T22103] ? __pfx_panic+0x10/0x10 [ 623.686623][T22103] ? preempt_schedule_thunk+0x16/0x30 [ 623.692505][T22103] ? nr_neigh_put+0x21/0x170 [ 623.697420][T22103] ? preempt_schedule_thunk+0x16/0x30 [ 623.702980][T22103] ? nr_neigh_put+0x21/0x170 [ 623.707625][T22103] check_panic_on_warn+0x89/0xb0 [ 623.712634][T22103] ? nr_neigh_put+0x21/0x170 [ 623.717479][T22103] end_report+0x73/0x180 [ 623.721871][T22103] ? nr_neigh_put+0x21/0x170 [ 623.726618][T22103] kasan_report+0x128/0x150 [ 623.731204][T22103] ? nr_neigh_put+0x21/0x170 [ 623.736031][T22103] kasan_check_range+0x264/0x2c0 [ 623.741292][T22103] nr_neigh_put+0x21/0x170 [ 623.745760][T22103] nr_del_neigh+0x25a/0x2d0 [ 623.750307][T22103] nr_rt_ioctl+0xd62/0xf90 [ 623.754865][T22103] ? kasan_quarantine_put+0xbb/0x1f0 [ 623.760789][T22103] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 623.765898][T22103] ? apparmor_capable+0x126/0x170 [ 623.771492][T22103] ? capable+0x88/0xe0 [ 623.775623][T22103] ? nr_ioctl+0x1b1/0x3b0 [ 623.779989][T22103] sock_do_ioctl+0x101/0x320 [ 623.784702][T22103] ? __pfx_sock_do_ioctl+0x10/0x10 [ 623.790023][T22103] ? do_futex+0x395/0x420 [ 623.794592][T22103] sock_ioctl+0x5c6/0x7f0 [ 623.799248][T22103] ? __pfx_sock_ioctl+0x10/0x10 [ 623.804332][T22103] ? __fget_files+0x2a/0x420 [ 623.809665][T22103] ? __fget_files+0x3a0/0x420 [ 623.814447][T22103] ? __fget_files+0x2a/0x420 [ 623.819253][T22103] ? bpf_lsm_file_ioctl+0x9/0x20 [ 623.824248][T22103] ? __pfx_sock_ioctl+0x10/0x10 [ 623.829339][T22103] __se_sys_ioctl+0xfc/0x170 [ 623.834148][T22103] do_syscall_64+0x14d/0xf80 [ 623.838883][T22103] ? trace_irq_disable+0x3b/0x150 [ 623.843933][T22103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.850317][T22103] ? clear_bhb_loop+0x40/0x90 [ 623.855216][T22103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.861605][T22103] RIP: 0033:0x7f5a8e59c819 [ 623.866054][T22103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.886654][T22103] RSP: 002b:00007f5a8f3c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.896087][T22103] RAX: ffffffffffffffda RBX: 00007f5a8e815fa0 RCX: 00007f5a8e59c819 [ 623.904311][T22103] RDX: 0000200000000740 RSI: 000000000000890c RDI: 000000000000000b [ 623.913430][T22103] RBP: 00007f5a8e632c91 R08: 0000000000000000 R09: 0000000000000000 [ 623.921727][T22103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.930350][T22103] R13: 00007f5a8e816038 R14: 00007f5a8e815fa0 R15: 00007fff4f4442c8 [ 623.938677][T22103] [ 623.942443][T22103] Kernel Offset: disabled [ 623.946963][T22103] Rebooting in 86400 seconds..