last executing test programs: 4.527071132s ago: executing program 4 (id=6359): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000d0300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000a00", @ANYRES32=r2, @ANYBLOB="00bb8ed6d89a2f44549c282d1f9181c5157c09120c3be440bf7ba3d5242a1cc53ad863833efe07df2ad21cd2e59983647832afafb5bae34cc39efcb4fb8ca28610618560fcd2889b925ecc1e111c50c35abe03b462738f15fd02b5a21c8b9b296a592b4f226b84a4193d95ac4e12c9205143ba1de05a85bf0e352ef01cc44575ab8b3e0c5be73e41bedbc81eeb043d34481e13936ba0436ded555d60c55df1a2589a9be2e82a1f19ae5fdd4cf96fd1c6dacbe63b169f2a0fc096add0d953edeb310ff47bd83419c5787e417ebf0eb00f7752dd6cf9c423e9a5c531cbf7794e21d1187fdac7e31c6dea852ae04fa0e42a8c272c"], 0x30}}, 0x4000080) 4.356084167s ago: executing program 4 (id=6362): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f7, &(0x7f0000003200)={'ip6gre0\x00', 0x0}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c000280080018"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r2 = socket$netlink(0x10, 0x3, 0x4) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x244, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x61}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x80, 0x84, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xf}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xffffff95}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2020000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffff}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}]}]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xc8, 0x84, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xffffffa8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x10001}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x400}]}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xffffff6f}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}]}, @NL80211_ATTR_IE={0xd1, 0x2a, [@chsw_timing={0x68, 0x4, {0x8, 0x6}}, @perr={0x84, 0xa1, {0x5, 0x9, [{{0x0, 0x1}, @broadcast, 0x6, @value, 0x40}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x581}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x19}, {{}, @device_a, 0x9b, @void, 0x28}, {{0x0, 0x1}, @device_a, 0x204c, @value=@broadcast, 0x1f}, {{0x0, 0x1}, @broadcast, 0x6, @value, 0x3f}, {{}, @device_a, 0x80, @void, 0xc}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x2e}, {{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0xc}]}}, @prep={0x83, 0x1f, {{}, 0xcb, 0x1, @device_b, 0x2, @void, 0x4, 0x9, @device_a, 0xc7b}}, @dsss={0x3, 0x1, 0x45}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x78}]}, 0x244}, 0x1, 0x0, 0x0, 0x24040080}, 0x44c0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x400, 0x70bd2b, 0x25dfdbfe, {0x2, 0x10, 0x30, 0xfd, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000844}, 0x4084004) (async) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendfile(r6, r6, 0x0, 0x4) (async) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 4.258897583s ago: executing program 4 (id=6364): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x80, 0x1000000, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000029000b0027bd70000040000002"], 0x1c}}, 0x4040080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001a80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000c40)={0xdc8, r2, 0x101, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x3}, {0x5, 0x9}, {0x6, 0x5}, {0x3, 0x7}, {0x5, 0x8}, {0x0, 0x3}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x1, 0x8}, {0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0x2}, {}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0x5}, {0x2}, {0x4, 0x4}, {0x2, 0x7}, {0x5, 0x9}, {0x6, 0x5}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x4}, {0x4, 0x1}, {0x7, 0x3}, {0x7}, {0x6, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x7, 0x4}, {0x4, 0x2}, {0x5, 0x5}, {0x7, 0x5}, {0x1, 0xa}, {0x0, 0x6}, {0x5, 0x5}, {0x7, 0x4}, {0x6, 0xa}, {0x5, 0x7}, {0x0, 0x6}, {0x6, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x0, 0x7}, {0x6, 0x5}, {0x4, 0x6}, {0x5, 0x3}, {0x0, 0x2}, {0x4}, {0x0, 0x2}, {}, {0x3, 0x4}, {0x3, 0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x8}, {0x7, 0x1}, {0x5, 0x4}, {0x1}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x101, 0x6, 0x8, 0x1, 0xfff7, 0x3, 0x7]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x6, 0x5, 0xd, 0x16, 0x36, 0x30, 0xfa5021bebff93091, 0xc, 0x12, 0x2, 0x4, 0x3, 0xb, 0x18, 0x24, 0x0, 0x36, 0x2, 0xb, 0x16, 0x2, 0x6c, 0x16, 0x16, 0x48, 0x3d, 0x18]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfff7, 0x19, 0x43, 0x4, 0x4, 0xee, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8000, 0x2, 0x200, 0x0, 0xa814, 0x3, 0x4de5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x77, 0xd8, 0x7, 0x318, 0xdee1, 0x1, 0x8, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x5}, {0x6, 0x2}, {0x0, 0x3}, {0x5}, {0x4, 0x2}, {0x5, 0x4}, {0x2, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x4, 0x1}, {0x2, 0x6}, {0x5, 0xa}, {0x7, 0x7}, {0x4, 0x9}, {0x3, 0xa}, {0x4, 0x2}, {0x4, 0x8}, {0x4, 0xa}, {0x0, 0x3}, {0x3, 0x1}, {0x1, 0x9}, {0x1, 0x5}, {0x7, 0x6}, {0x3}, {0x3, 0x2}, {0x0, 0x3}, {0x6}, {0x0, 0x5}, {0x7, 0x7}, {0x5, 0x5}, {0x3, 0x5}, {0x2, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x5}, {0x6, 0x5}, {0x1, 0x5}, {0x5, 0xa}, {0x7, 0x7}, {0x7, 0x3}, {0x4, 0xa}, {0x7, 0x4}, {0x2, 0x6}, {0x1, 0x8}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x1, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x7}, {0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x0, 0x3}, {0x7}, {0x4, 0x2}, {0x2, 0x9}, {0x2, 0x3}, {0x2, 0x4}, {0x5, 0x5}, {0x1, 0x3}, {0x4, 0x2}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0xa}, {0x4, 0x9}, {0x5, 0x9}, {0x0, 0x4}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x3, 0x9, 0x1, 0x1ff, 0x3]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x2}, {0x6, 0x1}, {0x5, 0x7}, {0x4, 0x8}, {0x7, 0x9}, {0x4, 0x7}, {0x4, 0x7}, {0x5}, {0x0, 0x6}, {0x5, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x4, 0x3}, {0x1, 0x2}, {0x4, 0x4}, {0x7, 0x3}, {0x2}, {0x1, 0x8}, {0x1, 0x8}, {0x6, 0x4}, {0x0, 0x1}, {0x5}, {0x6, 0x9}, {0x7, 0x1}, {0x2, 0x2}, {0x7, 0x3}, {0x6, 0x2}, {0x7, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x6, 0x4}, {0x3, 0x1}, {0x1, 0x8}, {0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x3, 0x8}, {0x0, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x0, 0x60, 0x26, 0x1, 0x1b, 0xc, 0x18, 0x1, 0x2, 0x30, 0x1b, 0x4, 0x60, 0x3, 0x3, 0x21, 0x16, 0x6c, 0x5, 0x16, 0x9, 0x1, 0x36]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb34, 0x8, 0xb, 0x6, 0x800, 0x5, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1c, 0x94b6, 0x9, 0x2, 0x6, 0xfff, 0x4, 0x4000]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x1, 0xff, 0x4, 0x5, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x401, 0x1, 0xe1, 0x3, 0xa, 0xff71]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xbb9d, 0x10, 0xb, 0x2000, 0x0, 0x1000, 0x8]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x16, 0x9, 0x1, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0xe9, 0xb803, 0xffff, 0xfff, 0x1ff, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x7fff, 0x8013, 0x69, 0xac, 0x0, 0x925, 0xb57]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0xa43c, 0x9, 0x6, 0x80, 0x0, 0x5]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x2}, {0x6, 0x4}, {0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x1}, {0x3, 0x4}, {0x3, 0xa}, {0x3, 0x2}, {0x1, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x12, 0x1, 0x3, 0x1, 0x6c, 0x48, 0x44, 0x6, 0x6, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x5, 0x2}, {0x7, 0x3}, {0x4, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x5, 0x2}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x60e, 0x6, 0x1, 0x2, 0xf, 0x2, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x942, 0x3, 0x3, 0xd9ef, 0x0, 0x2, 0xfa3, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x8000, 0x9, 0x7f, 0x6, 0x3, 0x8]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x7}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {0x0, 0x2}, {0x6}, {0x6, 0x7}, {0x0, 0x5}, {0x5}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6, 0x2, 0x60, 0x3, 0x16, 0x6c, 0x6c, 0x16, 0x3, 0x2, 0x1b, 0x4, 0xc, 0x0, 0x5, 0x1, 0x3, 0x9, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x5, 0xbe85, 0x9, 0x8, 0x8, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2e, 0xffff, 0xad, 0x3, 0x9a, 0x0, 0xfff, 0x6]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x1, 0x9, 0x6c, 0x48, 0x69, 0x1b, 0x6, 0x60, 0x60, 0x1, 0x36, 0xc, 0x36, 0xb, 0x12, 0x0, 0x6c, 0x6, 0x3, 0x1b, 0x3, 0x30, 0x4, 0x12, 0x1, 0x6c, 0x0, 0x48, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x398, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x909, 0x3, 0x5, 0x2, 0x8000, 0x8, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x2, 0x0, 0x6, 0x6a00, 0x2, 0x6, 0xc36]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x7ff, 0x3, 0xb21, 0x3c, 0x8000, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7f, 0x0, 0x3, 0x3, 0x7, 0xbf, 0x1ff]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5029, 0x4, 0x9, 0x21, 0xc000, 0x80, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x9}, {0x5, 0x3}, {0x3, 0x6}, {0x6, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x0, 0xa, 0x9d7, 0x4, 0x1, 0x1000]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x7}, {0x7, 0x3}, {0x1, 0x3}, {0x2, 0x8}, {0x6, 0x6}, {0x7, 0x9}, {0x6, 0x7}, {0x1}, {}, {0x6, 0x8}, {0x6, 0xa}, {0x1, 0x2}, {0x5, 0x4}, {0x7, 0x7}, {0x6, 0x2}, {0x7, 0x3}, {0x5, 0xa}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x4}, {0x1, 0x8}, {0x1, 0x4}, {0x5, 0x6}, {0x2, 0xa}, {0x3, 0x9}, {0x5, 0x8}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x9, 0x7fff, 0x4, 0x3, 0x8, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x1}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x3}, {0x0, 0x9}, {0x4, 0x5}, {0x5, 0x4}, {0x4, 0x5}, {0x0, 0x1}, {0x6, 0x1}, {0x3}, {0x7, 0x2}, {0x4, 0x5}, {0x1, 0x9}, {0x0, 0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x2}, {0x4, 0x2}, {0x7, 0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x3, 0x2}, {0x1, 0x6}, {0x2, 0x5}, {0x7, 0x2}, {0x7, 0x7}, {0x7, 0xa}, {0x6, 0x5}, {0x1, 0xa}, {0x0, 0x4}, {0x5, 0x9}, {0x3, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x24, 0x1f, 0x1, 0x0, 0x48, 0x2, 0x26, 0x18, 0x48, 0x60, 0x30, 0xc, 0x6, 0x60, 0x18, 0x9, 0x3, 0x6c, 0x60, 0x2, 0x1, 0x6, 0x16, 0x1b]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xfffa, 0x1, 0xf84, 0x8a50, 0x9, 0xf, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x3, 0x3, 0x8, 0x1ff, 0x81, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0xfffe, 0x4, 0xaeb, 0xddc, 0xad, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0xa}, {0x7, 0x8}, {0x6, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x4, 0xa}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x3}, {0x4, 0xa}, {0x5, 0x4}, {0x1, 0x3}, {0x4, 0x6}, {0x2, 0x6}, {0x3, 0x3}, {0x0, 0x8}, {0x6, 0x9}, {0x1}, {0x1, 0x3}, {0x6, 0x9}, {0x3, 0xa}, {0x2, 0x8}, {0x3, 0x4}, {0x5, 0x8}, {0x2, 0x6}, {0x5, 0x2}, {0x2}, {0x1}, {0x6, 0xa}, {0x4, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x2, 0x9}, {0x6, 0x2}, {0x6, 0xa}, {0x6, 0x9}, {0x1, 0x8}, {0x0, 0x1}, {0x5}, {0x3}, {0x2, 0x6}, {0x7, 0x4}, {0x2, 0x4}]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xd65, 0x1, 0x2, 0xce, 0x1, 0x7, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7ff, 0x0, 0x4, 0x8, 0x4, 0xc, 0xff]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x36, 0x30, 0x30, 0x48, 0x9, 0x6, 0x5, 0x1, 0xc, 0x3a, 0x18, 0x4, 0x2, 0x1, 0xb, 0x36, 0x6c, 0x1d, 0x36, 0x16, 0x12, 0x3, 0x3, 0xc, 0x36]}]}, @NL80211_BAND_2GHZ={0xfc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x12, 0x18, 0xc512b5cd5cea097e, 0x3d, 0x1, 0x5, 0x2, 0x16, 0x36, 0x6d, 0x1a, 0x3, 0x24, 0x9, 0x18, 0x1, 0x2, 0xcf, 0x4, 0x3, 0x0, 0xc, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x9, 0x7fff, 0x7, 0x1, 0xa66f, 0x6, 0x3ff]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4}, {0x2, 0x3}, {0x7}, {0x4, 0x4}, {0x5, 0x3}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x7}, {0x3, 0x9}, {0x7, 0x8}, {0x0, 0x3}, {0x5, 0x7}, {0x4, 0x8}, {0x2, 0x7}, {0x4, 0x6}, {0x7}, {0x7, 0x3}, {0x3, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x0, 0x8}, {0x5, 0x3}, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x48, 0x9, 0x36, 0x24, 0x2, 0x48, 0x7f, 0x5, 0x60, 0x18, 0x3, 0x1, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0xa}, {0x6, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x4, 0x4}, {}, {0x6, 0x8}, {0x5}, {0x2, 0x9}, {0x7, 0x6}, {0x7, 0xa}, {0x0, 0x1}, {0x6, 0x4}, {0x0, 0x6}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x1}, {0x5, 0x3}, {}, {0x3}, {0x4, 0x3}, {0x6, 0x1}, {0x2, 0x5}, {0x4, 0x4}, {0x6, 0xa}, {0x4}, {0x2, 0x7}, {0x7, 0x6}, {0x5, 0xa}, {0x0, 0x2}, {0x1, 0xa}, {0x3, 0x5}, {0x3, 0x1}, {0x1, 0x6}, {0x0, 0xa}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x6}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x6, 0x4}, {0x1, 0x4}, {0x3, 0x9}, {0x0, 0xa}, {0x1, 0x8}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x7}, {0x7}, {0x7, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x366b, 0x8, 0xe1b, 0x8, 0x4, 0x7, 0x9, 0xf000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x7, 0x7, 0xce, 0x5, 0x8, 0x6, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0xc, 0x16, 0x2, 0x1b, 0x24, 0x1, 0x3, 0x36, 0x36, 0x30, 0x6c, 0xb, 0x1b, 0xb, 0x5, 0xb, 0xb, 0x1, 0x48, 0x12, 0x1, 0x60, 0x16]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x9, 0x8001, 0x1400, 0xf8f, 0x800, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x24, 0x60, 0xb, 0x9, 0x6, 0x2, 0x16, 0x30, 0x6, 0xc, 0x4, 0x9, 0x0, 0x1, 0x6c, 0x12, 0x7c, 0x43, 0x0, 0x6, 0xb, 0x5, 0x6, 0x3, 0x36, 0x3, 0x18, 0x1c]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x3}, {0x0, 0x5}, {0x5, 0xa}, {0x3, 0x1}, {0x4, 0x4}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0xa}, {0x2, 0x4}, {0x4, 0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x2, 0x4}, {0x4, 0x5}, {0x4, 0x6}, {0x0, 0x3}, {0x7, 0xa}, {0x6, 0x6}, {0x1}, {0x4, 0x8}, {0x7, 0x9}, {0x6, 0x6}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x4}, {0x1, 0xa}, {0x3, 0x5}, {0x4, 0x9}, {0x3, 0x9}, {0x4}, {0x4, 0x4}, {0x7, 0x2}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x2}, {0x1, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0x4, 0x6, 0x24, 0x18, 0x60]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x5}, {0x3, 0x1}, {0x1, 0x8}, {0x4}, {0x4, 0x1}, {0x3, 0x7}, {0x1}, {0x2, 0x1}, {0x1, 0x5}, {0x1, 0x4}, {0x6}, {0x1, 0x2}, {0x7, 0x5}, {0x5, 0x6}, {0x0, 0x6}, {0x5, 0x6}, {0x6, 0x6}, {}, {0x2, 0x5}, {0x6, 0x9}, {0x5}, {0x7, 0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xffc0, 0x8, 0xdc, 0x1, 0x6, 0xe6d, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0x6}, {0x0, 0x6}, {0x4, 0x4}, {0x2, 0x9}, {0x0, 0x6}, {0x1, 0xa}, {0x4, 0x5}, {0x7, 0x9}, {0x4, 0x9}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x5}, {0x0, 0x8}, {0x3, 0xa}, {0x3, 0x7}, {0x0, 0x4}, {0x4, 0x5}, {0x0, 0x8}, {0x6, 0x2}, {0x7, 0xa}, {0x3, 0x3}, {0x7, 0x8}, {0x7, 0xa}, {0x5, 0x6}, {0x6}, {0x7, 0x3}, {0x1}, {0x2, 0x8}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x0, 0x6, 0x333, 0x7ff, 0x7, 0xa2d5, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x200, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x4, 0x2f, 0x9, 0x5, 0x1b, 0x4, 0x21, 0x17, 0x6, 0xe70d43caf2ebc370, 0x2, 0x18, 0x60, 0x18, 0x36, 0x1, 0x48, 0xb, 0x24, 0xc]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x1, 0x24, 0xb, 0x4, 0x18, 0x12, 0x1b, 0x60, 0x6]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x12, 0x30, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x4}, {0x1, 0x9}, {0x6, 0x1}, {0x4, 0x6}, {0x5, 0x9}, {0x4, 0x2}, {0x7, 0xa}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0x9}, {0x5, 0x3}, {0x3}, {0x1, 0x2}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x1}, {0x7, 0x4}, {0x3, 0xa}, {0x4, 0x8}, {0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x5, 0x9}, {0x5, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x9}, {0x2, 0x8}, {0x1, 0xa}, {0x4, 0xa}, {0x2, 0x3}, {0x5, 0x7}, {0x3, 0x4}, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0x8}, {0x6, 0x7}, {0x6, 0x2}, {0x2, 0x3}, {0x2, 0x2}, {0x2}, {0x4}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x7, 0x7}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x2}, {0x3, 0x8}, {0x2, 0x1}, {0x5, 0x4}, {0x6, 0x2}, {0x0, 0x3}, {0x0, 0x4}, {0x7, 0x2}, {0x2, 0x4}, {0x7, 0x2}, {0x1}, {0x6, 0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x5, 0x9}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8000, 0xdd4, 0x9, 0x0, 0xfff3, 0x2, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x1, 0x3, 0x6, 0x4, 0xf, 0x4, 0x3]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x6, 0x48, 0x60, 0x24, 0x5, 0x18, 0x18, 0x2, 0xc, 0x1b, 0x1b, 0x6, 0x1b, 0x6c, 0x3, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x697, 0x3ff, 0x0, 0x1, 0x9, 0x1ff, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x0, 0x1, 0x8, 0x4, 0x6, 0x35c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x9, 0x401, 0x1, 0x4, 0x4, 0x9ab, 0xd]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x5, 0x8, 0xffff, 0x6, 0x7f, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6c, 0xb, 0x5, 0x0, 0x12, 0x6c, 0x5, 0x12, 0x12, 0x36, 0x5, 0x2, 0x24, 0x17, 0x1b, 0x6c, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xee, 0x5, 0x10, 0x1, 0xbb0, 0x6, 0x96cf, 0xfff9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x18, 0x4, 0x0, 0x30, 0x2, 0x4, 0x30, 0x48, 0x4, 0x9, 0x3, 0x12, 0x2, 0xc]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0xa}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x1}, {0x6}, {0x6, 0x3}, {0x4, 0xa}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x4}, {0x5, 0x4}, {0x1, 0x1}, {0x6, 0x6}, {0x5, 0x6}, {0x4, 0x4}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x8}, {0x5, 0x5}, {0x7, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x298, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x2, 0x9, 0x1, 0x4, 0xf92b]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x2}, {0x0, 0xa}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x8}, {0x7, 0x7}, {0x0, 0x7}, {0x5, 0x5}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0x3}, {0x1, 0x1}, {0x1, 0x7}, {0x2}, {0x7, 0x1}, {0x2, 0x4}, {0x1, 0x1}, {0x3, 0x6}, {0x4, 0x1}, {0x6, 0x8}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x9}, {0x4, 0x6}, {0x1, 0x6}, {0x2, 0x8}, {0x7, 0x1}, {0x4, 0x7}, {0x1, 0x4}, {0x2, 0x3}, {0x3, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x2, 0x9}, {0x3, 0x8}, {0x3, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd6, 0x400, 0x9, 0x3, 0x4, 0xfff7, 0x1, 0x12]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0xa}, {0x1, 0x8}, {0x0, 0x9}, {0x6}, {0x4, 0x2}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0xa}, {0x5, 0x9}, {0x4, 0x4}, {0x0, 0x5}, {0x5, 0x5}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0xa}, {0x5, 0x2}, {0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x3, 0x8}, {0x4, 0x9}, {0x1, 0x1}, {0x4, 0x8}, {0x0, 0x4}, {0x1, 0x9}, {0x4, 0xa}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x5}, {0x6}, {0x5, 0x8}, {0x2, 0x7}, {0x6, 0x8}, {0x5, 0x5}, {0x7, 0x6}, {0x3, 0x1}, {0x3, 0x6}, {0x7, 0x6}, {0x6, 0x2}, {0x6, 0x8}, {0x6, 0x7}, {0x3, 0x2}, {0x3, 0x2}, {0x6, 0x1}, {0x1, 0xa}, {0x4, 0x2}, {0x7}, {0x6, 0x5}, {0x7, 0x9}, {0x3, 0x9}, {0x1, 0x5}, {0x2, 0x5}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0x3}, {0x4, 0xa}, {0x1}, {0x1, 0x4}, {0x3, 0x2}, {0x6, 0x6}, {0x7, 0x8}, {0x6, 0x4}, {0x7, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x2, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0xa8b, 0x9, 0x40, 0x34, 0x100, 0x8]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x7}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x30, 0x0, 0x1b, 0x4]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x3, 0x6}, {0x0, 0x2}, {0x1}, {0x5, 0x7}, {0x7, 0x4}, {0x5, 0x5}, {0x3, 0x2}, {0x5, 0x9}, {0x6, 0x4}, {0x4, 0x4}, {0x3, 0x3}, {0x2, 0xa}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x73e, 0x9, 0xbe24, 0x94a, 0xfac7, 0x0, 0xfffc]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x3, 0xe, 0x8, 0x5, 0x4, 0xe0a4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x0, 0x4, 0x1, 0x9800, 0x6, 0x4, 0xbb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x1}, {0x1, 0x2}, {0x5}, {0x2, 0x2}, {0x6, 0x5}, {0x4, 0x3}, {0x5, 0x1}, {0x3, 0x5}, {0x4, 0x5}, {0x6, 0x2}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5, 0x65]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x2, 0x2fc, 0x1, 0xab, 0x3, 0xfff7]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x7}, {0x1, 0x5}, {0x7, 0x8}, {0x5, 0xa}, {0x1}, {0x3, 0x6}, {0x6, 0x9}, {0x4, 0xa}, {0x4}, {0x4, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x8}, {0x7, 0x6}, {0x2, 0x3}, {0x7, 0x2}, {0x1, 0x2}, {0x1, 0xa}, {0x2, 0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x3, 0x1}, {0x5}, {0x6, 0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0x6}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0x6}, {0x6, 0x4}, {0x5, 0x4}, {0x5, 0x2}, {0x2, 0x3}, {0x0, 0x2}, {0x1, 0x1}, {0x6}, {0x0, 0x9}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0x6}, {0x3, 0x2}, {0x2, 0x8}, {0x7, 0xa}, {0x7, 0x3}, {0x2, 0x2}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x4}, {0x3, 0x2}, {0x2, 0x6}, {0x2, 0x4}, {0x5, 0x8}, {0x2, 0x6}, {0x2}, {0x7, 0x6}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9c, 0x3, 0xb83, 0x7dfe, 0xd, 0x7, 0xc2, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x9, 0x0, 0x684e, 0x2, 0xb2, 0x9, 0xcdf0]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xf0ff, 0x400, 0x9, 0x598, 0x8, 0x9]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2fdc, 0x6e, 0x5, 0x101, 0x6, 0x0, 0x8, 0x2ca]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x3, 0x5, 0x0, 0x7, 0x995a, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x4, 0x48, 0x6, 0x36, 0x1, 0x18, 0x36, 0x60, 0x33, 0x1b, 0x5, 0x9, 0x0, 0x60, 0x6c, 0xb, 0x5, 0x5, 0x5, 0x27, 0x24, 0x1b, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x1, 0x1, 0x12, 0x12, 0x48, 0x36, 0x12, 0x30, 0x9, 0x1b, 0x59, 0x60, 0x48, 0x1b, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0xa}, {0x0, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x7, 0x6}, {0x6, 0xa}, {0x5, 0x2}, {0x3, 0x3}, {0x3, 0x8}, {0x0, 0x2}, {0x2, 0x8}, {0x1}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0x2}, {0x3, 0x7}, {0x2, 0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc00, 0x9, 0x2, 0x3, 0x7, 0x9, 0x1, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x1, 0x9, 0x7, 0x8, 0x2, 0xe78f, 0x180]}}]}]}]}, 0xdc8}, 0x1, 0x0, 0x0, 0x8000}, 0xc040) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newrule={0x24, 0x20, 0x601, 0x70bd2c, 0x25dfdbfb, {0x2, 0x10, 0x14, 0x4, 0x7, 0x0, 0x0, 0x3, 0x2}, [@FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001000ffff2bbd7000bbdbcf84ecc34600", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003013000000014000700fc02000000000800000000000000000014000600fcae8cf6066b8225512da630cd5f4044f4fb447068864aa1ce6d0056f24c454e6e574c8be72d1ba179d214e6c0469aa8d32cd52e51fcdb7b0afb6b01e13cdabb31bacf9c4ea6957919bc723be601facf4feb66c84df0be2326c771f540bdeb6f88a422c7"], 0x68}, 0x1, 0x20000, 0x0, 0x804}, 0x9080) 4.122465534s ago: executing program 4 (id=6367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x20000400) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x533480ca8ac3b6c0) (async) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, 0x0, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010000a20000000020a01010000000000000000020000010900010073797a30000000001400010000000000000000000500000a00"/72], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x240040c0) 3.882448153s ago: executing program 4 (id=6370): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x2, 0x4, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x85, 0x0, 0x103, 0x401, 0x5, 0x0, 0x8, [0x5, 0x9]}}) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000009, 0x100010, r1, 0xcd9cf000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 3.113688719s ago: executing program 1 (id=6378): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x110, 0x3ed, 0x8, 0x70bd27, 0x25dfdbfb, "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", ["", ""]}, 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4447ece2648b538e4fd2ec328f06d1cf0000001000370400"/35, @ANYRES32=r3, @ANYBLOB="1100030000000000240012800900010069706970000000001400028008000200640101020500090089000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2.895652138s ago: executing program 1 (id=6380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) (async, rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x125080, 0x0) (async) close(r1) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'veth1_to_bridge\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}) 2.734323875s ago: executing program 1 (id=6382): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="20a0", 0x2}], 0x1) (async) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="20a0", 0x2}], 0x1) r3 = socket(0x1e, 0x805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x3f, 0x2}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x84, 0x0, 0x4, 0x0, 0x5, 0x50, 0x1}}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) 2.567242968s ago: executing program 1 (id=6384): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r3) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090127bd7000ffdbdf250600000008000e003c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x44880}, 0x48000) r5 = socket(0x1d, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) getpeername$packet(r5, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x2a, 0x0, 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf25070000000800010000000000726797a5bfd100000000b9b0b98e465ab9421349203c1cedfcff7086fa6504fa1e4bc24733aed613097ab3"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x26000000) 2.42971787s ago: executing program 2 (id=6386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x18, &(0x7f0000000000)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xdf, &(0x7f0000000100)=""/223, 0x1f00, 0x99, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xa, 0x7f}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f00000002c0)=[{0x2, 0x5, 0x6, 0xe}, {0x2, 0x5, 0x3}, {0x2, 0x3, 0x10, 0x2}, {0x2, 0x1, 0xa, 0x4}, {0x3, 0x3, 0xa}], 0x10, 0x1}, 0x94) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000440)={0x0, 0x9, 0x10, &(0x7f0000000400)=""/16}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000480)={{0x2, 0x4e22, @multicast1}, {0x1, @multicast}, 0x5a, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 'gretap0\x00'}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000500)={r1, 0xdea, 0x4, "b3e74a08f01ddc4ea147b3978e4d23b8de47b8654421785deb9a7db0af9642be4740bf404f1c1fdb0a12b8ca60e18d01e10d"}) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000540)='ns/mnt\x00') setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000580)=0x10001, 0x4) getpeername(r1, &(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000640)=0x80) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000dc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000740)={0x600, r5, 0x8, 0x70bd2c, 0x30000, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x90, 0x80, [@channel_switch={0x25, 0x3, {0x0, 0x80, 0x1}}, @random={0x2, 0x44, "32bb2b30a065529e9687715aa69e95fbce37fc504db9ebedf7b0fa6e95df923b189d7eeaaa6863ae50cea629cfee266de620ec56e567c13fb8abdd1b8c773ef93fedd336"}, @random_vendor={0xdd, 0xa, "c1b0b372a27375b85311"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x0, @device_a, 0x3c0, @value=@device_b, 0x6, 0xffffff7f, @device_a, 0x5}}, @chsw_timing={0x68, 0x4, {0x9, 0x8}}, @peer_mgmt={0x75, 0x6, {0x0, 0xd, @void, @val=0x11, @void}}]}, @NL80211_ATTR_PROBE_RESP={0x249, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x20, 0x80, [@link_id={0x65, 0x12, {@random="dfe3459f49ad"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_IE={0x258, 0x2a, [@mesh_chsw={0x76, 0x6, {0x5, 0x0, 0xe, 0x8000}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x6, @default_ap_ssid}, @preq={0x82, 0x67, {{0x0, 0x0, 0x1}, 0x10, 0x0, 0x6, @device_a, 0x9, @void, 0x2, 0x7, 0x7, [{{}, @device_a, 0x200}, {{0x1, 0x0, 0x1}, @device_a, 0x12}, {{0x0, 0x0, 0x1}, @broadcast, 0x10}, {{0x1}, @broadcast, 0x5}, {{0x0, 0x0, 0x1}, @device_a, 0x350e}, {{0x1, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @device_a, 0xd}]}}, @random_vendor={0xdd, 0x79, "552d6011c984659c043c68080798ac584dfd4323e7d90510cfba37e03790c0c838d69bd427f9423d7bb82e013c27f26ca8fa331b3a5a169874b98cff731ee9fec47e15dfcba828adc560ba4f876eb1b648059768693d661e1f0f822b76555abdb1de386459ff76a46888aa1ebbeef6fd0d72e61398b4f33d45"}, @random_vendor={0xdd, 0xed, "f3625841665cb82bd09c2caf63b7d40f10c6ff16323bb604700d508e910f6cae12e3d2cd9367abb5121e4ea695bf7797da2b7740c0e2a9eac181a082184c0505637a468404f4b9f73dc3f54fb8aeb6ba07be526d6cc635390337fec43ee5ec2ff4d02db9f2ed055ed38fe048b7c141d27505571dc90bbf778b5d3d592e704d281d5fa96205c8b907c24339ae83085fe32291a1b21d88b473ef11aeb09a3df6e5fc102ae98d04fa9449175fe38c90b0794868462f98518c3ffd4fe5b59a0e598bedd7b094a2e809f9eb66c9ff3dee0d03ae18a12b6078f26315541d33cf8e67f68d75e930cdc19d5d0be60c8d1b"}, @fast_bss_trans={0x37, 0x67, {0xe, 0x2, "6e78157fc25ad88614c4300011a94877", "8e9f7b5bef8ac419a2eb0eed81f31ad73b8087cd5e0cf74223090cf0fec87417", "fdd1cf96925788fac2ee840ee0b7262abdcce94d7d58122490ef6ee00ae48e29", [{0x2, 0x4, "409b3488"}, {0x1, 0xd, "a016ddbe429a2a489f3201c5a7"}]}}]}, @NL80211_ATTR_IE={0x7c, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @peer_mgmt={0x75, 0x14, {0x0, 0x8, @void, @void, @val="c58022497160c2aca6ba8490dfb0516b"}}, @random={0x4, 0x58, "5746d8cd8bf54221a91b881ca2953b28a606ac0cb69f1b733fc011d4b52d946636e3cb4051e957fffcc185afe0926ece8b714277c8b1595a9cd895ffa2e5c2e773f1a877621cb6c6c5fcde6d99171de213ca06dca579ea30"}]}]}, 0x600}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000e00)={'bridge_slave_1\x00', {0x2, 0x4e24, @private=0xfffffffe}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000001080)={&(0x7f0000000e40), 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x180, r8, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0x180}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40800) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000010c0)={0x0, 'vxcan1\x00', 0x4}, 0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001100)={0x0, 0x8}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001180)={r9, 0x4}, &(0x7f00000011c0)=0x8) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000001200), 0x8) connect$caif(r11, &(0x7f0000001240)=@dgm={0x25, 0x1, 0x7}, 0x18) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000001280)={'lo\x00', {0x2, 0x0, @loopback}}) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000001300), r7) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, r12, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000001400)={'vlan0\x00', 0x200}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r11, 0x84, 0x1c, &(0x7f0000001440), &(0x7f0000001480)=0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000014c0)=0x0) sendmsg$nfc_llcp(r3, &(0x7f0000001800)={&(0x7f0000001500)={0x27, r13, 0x0, 0x3, 0x1, 0x7, "a3a2364329748588e2e5acec6a68bc95d715bb537adb46a66df92f963a4e0903c6a333933be413f9340b64a793b71c1de580bb69df81cc325795724589b669", 0x13}, 0x60, &(0x7f00000016c0)=[{&(0x7f0000001580)="ed72a64b45843c709a7c24ccc6954cdbb4106f153b523a1818b49e91e3f92f7fa521ab8911ae2b0132f1b99d2e67ae0c68f39aac0de406302224e0592591213208f14a7e3b279a587e0c9a2a80e57632ba59864478bc4b5fb54fc7d82189fa45bff5e248dfcc28537d3943c48dec62478006b9a44b0516e1bfbdf22f5596496ee023fc1d5fd879b09feba193bdfd76965602d71edb0747bcf558a4983ccdf57abfd997ce95ffb757e6cc7dfd4d5503cea2ff0bcb84fd3c3a63beea", 0xbb}, {&(0x7f0000001640)="17f4bf602d7663102a7d484330b808e0ce210ac07bd7244f04415307b1eb0bbe533fda3423d1d8a7900bab3bf8e33bf221f01b19bbd5af9d598e98ef644b914d41b828601a3e7e2dd7947590db6d2fbfcd420f23958fa7a00111306b76da34c70cd3d78ca17585465d73913312944ea9b555", 0x72}], 0x2, &(0x7f0000001700)={0xd8, 0x1, 0x9, "d9f96ffa6e2e05bee8b68f37fe2404eae4d4e9a2f2bc847215ff64ab3f51ef44885f778defcc61730058690c04fc4e341e71fabd60add7a089537a8f7440604fcef214d49ca0bc5ec5499ec460244bf191f58f6ee90e73b631c6c7c54b86151094c8e2f0d6e447f46036900c55483a908694346fd5a911f6e1b212c98b617af2ced324236f978ff0fc98b0c6ca0909881b2fe8d3abba008e06957eb374d7d4b74e76c66df0b048d501c2dcac3d7fea9a331e50b4dcb2f815d40c1ea17e6616180b57ee"}, 0xd8, 0x200008c4}, 0x4044801) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001840)={0x4, 0x7, 0x2, 0x6, 0x27, 0xff, 0x9670, 0x3, r10}, &(0x7f0000001880)=0x20) 2.348834326s ago: executing program 1 (id=6387): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 32) r0 = socket(0x14, 0x2, 0x4) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x400461f1, 0x0) (async) getpeername$l2tp6(r0, 0x0, &(0x7f0000000180)) (async) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x3fd, @empty, 0x3}, 0x1c) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) 2.318707965s ago: executing program 2 (id=6388): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r1, 0x1, 0x400, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2c8e3c9c, @local, 0x3ff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000108000840000000011400000001b6000000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000480)={@rand_addr, @multicast1, 0x0}, &(0x7f00000004c0)=0xc) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa4, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x2e, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8040}, 0x800) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="260a00000000000061117c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 2.228221754s ago: executing program 3 (id=6390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@deltaction={0x104, 0x31, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x38ef}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="100000faffffff00280012800b000100620002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x1, 0x10, 0x1c4}]}, 0x10) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.092349818s ago: executing program 2 (id=6391): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)="1a00000002000000", 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f00050400000000da5a15e113"], 0x114}], 0x1, 0x0, 0x0, 0x881}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x300}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r10, 0x2) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x2, {{@in=@multicast1, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x9, &(0x7f0000000200)=0x4, 0x4) sendto$inet6(r11, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) socket(0x1, 0x803, 0x0) 2.089682303s ago: executing program 3 (id=6392): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000e00000000000000008500000053000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f00000009c0), &(0x7f0000000a00)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000400000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.966587921s ago: executing program 3 (id=6393): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000001240)=0x4000000000000200, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="142800001000010000000000000000000000000a20000000000a01b32a69910000000000010000000900010073797a300000000058000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140000000000900010073797a30000000001c0008800c00024000000000000000000c0001400000000000000000140000001000010000000000000000000000000a"], 0xa0}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x23, &(0x7f0000000040)="1875008e80d51858", 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r7 = socket(0x29, 0xa, 0xffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f0000000000)='\xe3]%@]%-:@-\x00', 0xb) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x38, r11, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x1d, 0xfc, "4ebd8f9f7a9c5f1ca962abeb4beeca64d5b31959889dea0953"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'gretap0\x00', r4, 0x40, 0x10, 0x5, 0x6, {{0x22, 0x4, 0x3, 0x1d, 0x88, 0x68, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0xc, 0xff, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x1}]}, @generic={0x86, 0x6, "13e0d1fd"}, @lsrr={0x83, 0x1f, 0x49, [@loopback, @dev={0xac, 0x14, 0x14, 0x16}, @remote, @empty, @private=0xa010101, @multicast1, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x3c, 0x13, 0x3, 0x3, [{@remote, 0x8}, {@loopback, 0x100}, {@multicast1, 0x81}, {@multicast2}, {@multicast1, 0x7}, {@broadcast}, {@broadcast, 0x3c}]}, @ra={0x94, 0x4}, @end, @end]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r10, @ANYBLOB="10002bbd7000fcdbdf25150000000c00018008000100", @ANYRES32=r4, @ANYBLOB="28000180140002006772657461703000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="20000180080003000200000014000200766574683100000000000000000000001400018008000100", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r12, @ANYBLOB="1800018014000200697036746e6c300000000000000000008800018008000300020000001400020074756e6c300000000000000000000000080003000200000014000200626f6e645f736c6176655f3100000000140002006e69637666300000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000200000014000200766c616e30000000000000000000000014000200"/48], 0x11c}, 0x1, 0x0, 0x0, 0x44}, 0x40001) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x50) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r13, r14, 0x5}, 0x10) 1.763892802s ago: executing program 3 (id=6394): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x3a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x2004}) epoll_pwait(r4, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) pwrite64(r0, &(0x7f0000000180)="979b71379a2e3ea4a21f3966b0956824adf4ecbd74586c184a2ae25a2a201a8126ca8295e8bf037d740d991b6547effc79e199f939f499444d52013e6477d3e62e094054addfbf2645332a26f6c637349f0b08498ba8229707a5c6f29f2935215d655fcef2c636acbecb4868cfeecd84a1a29b03bf38f26e5c6de605576e852baca69e6fc7e4d93d3fc6c2c5ca2b3d4f1e2ab93265cff9181e9c0d1e697e", 0x9e, 0xd9c) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f0000000240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800009, 0x8, 0x5, 0x3, 0x6, "f272050000000000000065c45c1ea6e5520f9d6e67bf091dd4fb0508caf4d4e175627da5194cd4e99beb88bd95eb4eb4a0b771a857aa7c204efd5775d17b6d9d4cb3ac9cdf092bed9aa3dfe679dd0d55dc545922a9b05f25cf9acac6ef5d72c55f96a84960689a7428b7abc71b4e7720e8e4ed1c80c4f2e818a385b9a3334f14"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x3c, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x14, 0x1a, 0x0, 0x1, [@nested={0x10, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0xb5}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x144, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @tfcpad={0x8, 0x24, 0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000300)={{r6, &(0x7f0000000040)='freezer.state\x00', 0x20080, &(0x7f0000000080)={@_ha_fsid={[0x0, 0xfffffffa]}, {0x8, 0x5, 0xc767, 0x6}}, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x2}, {[0xffffffff, 0x7f, 0x0, 0x19]}, 0x2, 0x3c, &(0x7f0000000140)=""/60}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r12, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x1411, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000801}, 0x48000) 1.582358086s ago: executing program 2 (id=6396): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) write$cgroup_devices(r3, &(0x7f0000000000)={'a', ' *:* ', 'm\x00'}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.443003984s ago: executing program 2 (id=6398): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='{-\'.\x00', 0x480000, &(0x7f0000000080)={@_ha_fsid={[0x80000000, 0x3]}, {0xfff7, 0x9, 0x6, 0x200}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0xb}) sendto$inet(r4, &(0x7f00000001c0)="455a86256c6bbe80a1662c5a1233edfbc0d5cb8ab4bc84f65cf1fc98a49ed56952b5f9f296ef3dd00fa7d78214c483d1f5d6eedee1a11f69a64c9cc35e9532e0a7cb961202c51c5fd935731fde122db9b141451550b968a26a131ff54c8cb8fb661ce70cda8aa7df435694c5c888e29d2c9c1a1076be9248d6eb2b5df43cee443f310fb1cbe3b6741ed140aed58924be14c803f4361fafcae1410b3506c5b8506bf991bd57bc003dd6018d31fe606cb3879f20e5e5a3f1c0a1658b0727b0729b1058d9b137f4fff37a55", 0xca, 0x20000000, &(0x7f00000002c0)={0x2, 0x4e23, @remote}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x6a8, 0x478, 0x1b0, 0x0, 0x1b0, 0x478, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, [], [0xc5a2f505a334aa82, 0xffffffff]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x800, 0xdd2, 0x401, 0x0, 0xb, 0x3a5f2568, 0xcc, 0x2]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@remote, 0x0, 0x37}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@unspec=@rateest={{0x68}, {'team_slave_1\x00', 'virt_wifi0\x00', 0x30, 0x3, 0x5, 0x1ff, 0x400, 0x2, {0xf666}, {0x4000000000000}}}]}, @HL={0x28, 'HL\x00', 0x0, {0xfe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(r4, &(0x7f0000000300)={[{0x2b, 'blkio'}, {0x2b, 'pids'}, {0x2d, 'memory'}]}, 0x15) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027db700000000000040000000c00180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000440)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xbc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}], &(0x7f0000000540)='syzkaller\x00', 0xa098, 0x4f, &(0x7f0000000580)=""/79, 0x41100, 0x10, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x3, 0xd, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000680)=[r0, r0], &(0x7f00000006c0)=[{0x0, 0x1, 0x1, 0xc}, {0x2, 0x3, 0xf, 0xc}, {0x3, 0x4, 0x7, 0x1}, {0x1, 0x5, 0x1}, {0x1, 0x2, 0x7}, {0x4, 0x5, 0x10, 0x5}], 0x10, 0xffffff7f}, 0x94) close(r0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'ipvlan0\x00'}) 983.984766ms ago: executing program 2 (id=6400): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500030000000c001680080001"], 0x38}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000700)={0x3d8, 0x1, 0x3, 0x307, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_PAYLOAD={0xf3, 0xa, "0ed74f0b2b333546c6b95077c023d0daa1118dda1399601db982abd409e7b2b78e85430310c75904094b76c20ace4fc7cfa3ee8baa1ed256b37d96d244fd90472097debbef6a6757f2c09f3f2a1e8695ede9b59455df113416f620559e2422c7808265e9d26c302290f9083ddc8a3621f40b15e9e9fff765401042321afaa34d69d0f305b85b3b20d8a5866204857bf63d3ab0a1e837cdfde18876f03a79f4521e7c9d07f4556faca1756725b31754f41fb50f8e2221c3a7680c010216a05c97a717bcdac390fbe3fc81c324c5fce1b93f85dc730606acee3dcc4a6ccd3c80c80d097b3d18e3b6086fa32eee163473"}, @NFQA_VLAN={0x4c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfc4b}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x10}}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xf}]}, @NFQA_EXP={0x264, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0x23c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x36}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_EXPECT_NAT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x4000004}, 0x8) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000328bd7000fddbdf25010000000000000002410000001000348264703a73797a3000000000", @ANYRES64=r0, @ANYRESDEC=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x4, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) write$cgroup_devices(r6, &(0x7f0000000000)={'a', ' *:* ', 'm\x00'}, 0x8) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="1133020031880000280012800b0001006d61637365630000180002800c0004000400000100c28000210005000200000008000500", @ANYRES32=r3, @ANYRES32=r3, @ANYRESDEC=r3], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) 983.620083ms ago: executing program 0 (id=6401): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x20}, 0x1a}, 0x1, 0x0, 0x0, 0x4004004}, 0x5) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x48010) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) 591.508316ms ago: executing program 0 (id=6402): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r3, 0xff}, 0x8) r4 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, 0x0, 0x0) bind$inet6(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r9, 0x2, &(0x7f0000000100)=0x6) setsockopt$sock_int(r8, 0x1, 0xf, 0x0, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6(0xa, 0x2, 0x0) 353.631917ms ago: executing program 0 (id=6403): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000e00000000000000008500000053000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f00000009c0), &(0x7f0000000a00)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000410000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 192.025479ms ago: executing program 0 (id=6404): socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000001180)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@fragment={0x11, 0x0, 0xff, 0x0, 0x0, 0x4, 0x67}, @dstopts={0x32, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) r1 = socket(0x1d, 0x2, 0x6) getsockname$packet(r1, 0x0, &(0x7f00000006c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x2000800) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl2\x00', r9, 0x40, 0x20, 0x7e0a, 0x5, {{0x1b, 0x4, 0x1, 0x22, 0x6c, 0x64, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @broadcast, {[@cipso={0x86, 0x13, 0x2, [{0x6, 0xd, "301cf6221ea54281af9a8c"}]}, @timestamp={0x44, 0x10, 0x87, 0x0, 0x4, [0x1ff, 0x10001, 0x1]}, @generic={0x44, 0x5, "d9c3be"}, @generic={0x44, 0xc, "c7bda421611235e2f57b"}, @ssrr={0x89, 0x17, 0x87, [@private=0xa010100, @local, @multicast2, @multicast2, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xef, 0x3, 0x0, [{@remote, 0x9}]}]}}}}}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async, rerun: 64) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) (async, rerun: 64) write(r2, &(0x7f0000000080)="0b000300010001", 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{}, {0x6}]}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f8ffff"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) 191.679375ms ago: executing program 3 (id=6405): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x9, @mcast2={0xff, 0x3}, 0x80}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) (async) r4 = gettid() sendmsg$nl_generic(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000500)={0x40c, 0x1d, 0x400, 0x70bd2c, 0x25dfdbff, {0x4}, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@private2}, @nested={0x71, 0x13b, 0x0, 0x1, [@generic="cc8da28ab6970d03f1430bb61883213dcffcd47becdfa728d6f82afcd1e169ffb6dcd62c9dc3cf63a345dd00a83ce86665bbe8640a5439a88232cf399e91eb60c5", @typed={0x8, 0x29, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x38}, @nested={0x4, 0xa6}, @typed={0x8, 0x8c, 0x0, 0x0, @u32=0x8}, @typed={0x14, 0x24, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x218, 0x11c, 0x0, 0x1, [@typed={0x8, 0xf8, 0x0, 0x0, @uid=r3}, @typed={0x4, 0x6}, @generic="f54cca270f2e60c52c0fdbe9456892bb4bb6941b25d0ad80d1be5bb037a6048dafda4f7625845dfc6df5faa27951c289a924edfda65bf5195ba188a50b810ec62c990c9fe2a04f8f24077349156cab0e471878619589c63b53a33f2304f1472bbebeaa94983a95fb1adabba2f319ea16cbde7cad05aee70bfb02b38a067fbc277f27fa40578e63c32f7b1e2e9a933dd67de22c43b9475f4a65b0f56c50fcc9213f2798b0a0b0a2d9978520eb2a3630553c2810ec1ce759adb2befbf9d6231b421c4cc58289450675ab2f8fe955889d5a30e4526099201c9a8917bcc82d10974d", @generic="25199b6954af94078322a6b1dbc8a5150974d4be18fb63b1178d0caea1d83597be31ef5ca1d6ec0127eb5855925dfcf71b4102f8884138011458a67b66c5bdeba50101cbcc9eff6babfa2858104430ae6daa6b9b653b31648f62e47cda482bb183e6e1fbf2b109f0678694403acfe443402da82b99b9c1953f724903fe7832a7b45c4aad4d56e4bde0b431e48e027e5a863255a22701e163ec0e2e00f637357288", @generic="db976855c1d132dcc98bd9f208fe81aca2c0a7bceabc3c1df46e8be61e86c5fe77ce87edc5692478b601e64f6fa9cbad73ba0184d7c70162cd180b8bb332f9e802ea9a2461b4be88269755f547b5587fa5079690555e8735621f8f5d59442aa5b52de40b2eca5ddde674634689c4c15fbad762da3c118810cbbfdcba8fce09", @nested={0x4, 0xf0}, @nested={0x4, 0x82}]}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0x75, 0x0, 0x0, @pid=r4}, @generic="d042a71149af9098e29e5d3eda94cf743686990c536f8e6d58a894aadb", @typed={0x8, 0xa2, 0x0, 0x0, @u32=0xf}, @nested={0x100, 0xaa, 0x0, 0x1, [@generic="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"]}, @typed={0x4, 0xb7}, @nested={0x18, 0x14b, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x14f}, @nested={0x4, 0x10c}, @nested={0x4, 0xec}]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x2000c000}, 0xc001) (async) sendto$inet6(r0, &(0x7f0000000040)="92ff0000", 0x4, 0x800, 0x0, 0x0) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000140)={0x5e, 0x0, 0xa, 0x400000b, 0x36, 0x81}) 173.641036ms ago: executing program 4 (id=6406): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}, @remote, @local, 0xf, 0x42ed, 0x200, 0x100, 0xe, 0x10201, r2}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 148.990799ms ago: executing program 1 (id=6407): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x1a8, 0x0, 0x1a8, 0x90, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x400a00, 0xa000000, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0xff}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x4c}}, 0x44004) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x6001}, 0x40400c0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000)={0x77359400}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x1a8, 0x0, 0x1a8, 0x90, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) (async) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r3) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x400a00, 0xa000000, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0xff}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x4c}}, 0x44004) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x6001}, 0x40400c0) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000)={0x77359400}, 0x10) (async) 80.27692ms ago: executing program 0 (id=6408): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @typedef={0x4}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x4e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 79.866394ms ago: executing program 3 (id=6409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x8, 0x0, [{0xe1170df307341ec5, 0x2}]}]}}}}}}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') syz_emit_ethernet(0x2f, &(0x7f0000000000)={@remote, @local, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x1, 0x1}}, {@arp={0x806, @generic={0x312, 0x6006, 0x6, 0x5, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, "db5ebb4953", @remote}}}}, &(0x7f0000000080)={0x1, 0x2, [0xcc3, 0x7e2, 0x4a9, 0x7b2]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0x7f, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) close(r7) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff3cd4b8bf", 0xfff2}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 0s ago: executing program 0 (id=6410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "3f25378bcaaee148996b36d592161073a2"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x88dd895beaa99965, 0x12, r0, 0xe352a000) kernel console output (not intermixed with test programs): [ 495.995394][T22514] xt_limit: Overflow, try lower: 604147548/4200216962 [ 496.165334][T22529] ip6t_srh: unknown srh invflags 4000 [ 496.418525][T22548] bond7: Removing last arp target with arp_interval on [ 496.607489][T22572] netlink: 'syz.3.4779': attribute type 1 has an invalid length. [ 496.648740][T22572] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 496.659968][T22572] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 496.673924][T22572] bond8: (slave ip6gre1): making interface the new active one [ 496.682071][T22572] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 496.774298][T22581] netlink: 'syz.3.4780': attribute type 4 has an invalid length. [ 497.016994][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 497.024015][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 497.235072][T22609] syzkaller0: entered allmulticast mode [ 497.298988][T22556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.311427][T22607] syzkaller0: left allmulticast mode [ 497.522743][T22624] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 497.547711][T22624] netlink: 'syz.1.4792': attribute type 24 has an invalid length. [ 497.689874][T22635] tunl0: entered promiscuous mode [ 497.695102][T22635] netlink: 'syz.0.4795': attribute type 3 has an invalid length. [ 497.765103][T22641] netlink: 'syz.4.4799': attribute type 1 has an invalid length. [ 497.810075][T22641] bond5: entered promiscuous mode [ 497.816667][T22641] 8021q: adding VLAN 0 to HW filter on device bond5 [ 497.975322][T22641] 8021q: adding VLAN 0 to HW filter on device bond5 [ 497.996289][T22641] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 498.012300][T22641] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 498.027905][T22641] bond5: (slave ip6gre1): making interface the new active one [ 498.035755][T22641] ip6gre1: entered promiscuous mode [ 498.046593][T22641] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 498.057087][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 498.764242][T22702] netlink: 'syz.1.4814': attribute type 10 has an invalid length. [ 499.097053][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 499.705331][T22758] netlink: 'syz.2.4826': attribute type 1 has an invalid length. [ 500.147197][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 500.315035][T22803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.504165][T22819] xt_hashlimit: size too large, truncated to 1048576 [ 500.515627][T22822] __nla_validate_parse: 21 callbacks suppressed [ 500.515645][T22822] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4845'. [ 500.644673][T22824] syzkaller0: entered allmulticast mode [ 501.177010][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 501.186800][T22867] netlink: 4116 bytes leftover after parsing attributes in process `syz.0.4858'. [ 501.238998][T22869] netdevsim netdevsim3: Direct firmware load for .. @ failed with error -2 [ 501.328261][T22869] netdevsim netdevsim3: Falling back to sysfs fallback for: .. @ [ 501.368466][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4862'. [ 501.425319][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.434121][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 501.459111][T22881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.525300][ T7705] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.552396][ T7705] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.566677][T22897] macvlan0: left allmulticast mode [ 501.666034][ T7705] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.834939][ T7705] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.878157][T22916] syzkaller0: entered promiscuous mode [ 501.883779][T22916] syzkaller0: entered allmulticast mode [ 501.919775][T22916] syzkaller1: entered promiscuous mode [ 501.925281][T22916] syzkaller1: entered allmulticast mode [ 501.971135][T22916] netlink: 'syz.0.4868': attribute type 1 has an invalid length. [ 502.100344][T22916] bond8: entered promiscuous mode [ 502.145673][T22916] 8021q: adding VLAN 0 to HW filter on device bond8 [ 502.217342][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 502.459716][T22944] lo speed is unknown, defaulting to 1000 [ 502.516815][T22958] syzkaller0: entered promiscuous mode [ 502.554709][T22958] syzkaller0: entered allmulticast mode [ 502.605609][T22960] netlink: 'syz.1.4876': attribute type 1 has an invalid length. [ 502.752142][T22960] bond8: (slave gretap1): making interface the new active one [ 502.779259][T22960] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 502.971542][T22983] batadv_slave_0: entered promiscuous mode [ 503.006295][T22981] batadv_slave_0: left promiscuous mode [ 503.257100][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 503.544868][T23024] netlink: 'syz.1.4886': attribute type 1 has an invalid length. [ 503.633676][T23029] netlink: 'syz.3.4887': attribute type 83 has an invalid length. [ 504.301635][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 504.653605][T23036] netlink: 'syz.1.4889': attribute type 1 has an invalid length. [ 504.671862][T23036] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.4889'. [ 505.346979][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 505.493469][T23009] lo speed is unknown, defaulting to 1000 [ 505.544974][T23039] netlink: 'syz.0.4891': attribute type 10 has an invalid length. [ 505.614474][T23039] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 505.776700][T23061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4896'. [ 505.787802][T23061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4896'. [ 505.836846][T23063] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4898'. [ 505.916655][T23073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4897'. [ 505.949972][T23073] hsr_slave_0: left promiscuous mode [ 505.982556][T23073] hsr_slave_1: left promiscuous mode [ 506.129132][T23083] netlink: 'syz.0.4903': attribute type 1 has an invalid length. [ 506.173816][T23083] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4903'. [ 506.193358][T23086] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 506.373469][T23096] lo speed is unknown, defaulting to 1000 [ 506.387519][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 506.394065][T23104] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4909'. [ 506.459767][T23104] netlink: 320 bytes leftover after parsing attributes in process `syz.0.4909'. [ 506.712876][T23127] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 506.752692][T23124] syzkaller0: entered promiscuous mode [ 506.761758][T23124] syzkaller0: entered allmulticast mode [ 506.776940][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 506.777860][T23129] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4915'. [ 506.784995][ C1] lec:lec_tx_timeout: lec0 [ 506.796883][T23131] netlink: 'syz.2.4917': attribute type 1 has an invalid length. [ 506.844752][T23139] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4915'. [ 507.272198][T23158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4921'. [ 507.427021][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 508.467001][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 508.858855][T23178] lo speed is unknown, defaulting to 1000 [ 508.927229][T23182] netlink: 'syz.4.4931': attribute type 1 has an invalid length. [ 509.083891][T23189] syzkaller1: entered promiscuous mode [ 509.093244][T23189] syzkaller1: entered allmulticast mode [ 509.166069][T23189] IPVS: persistence engine module ip_vs_pe_Â not found [ 509.454183][T23208] netlink: 'syz.3.4940': attribute type 178 has an invalid length. [ 509.497001][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 509.657832][T23230] : renamed from hsr0 (while UP) [ 509.805044][T23242] openvswitch: netlink: Flow actions attr not present in new flow. [ 509.885781][T23249] xt_hashlimit: size too large, truncated to 1048576 [ 510.429255][T23298] netlink: 'syz.0.4968': attribute type 8 has an invalid length. [ 510.493766][T23298] bond0: entered promiscuous mode [ 510.532282][T23298] geneve2: entered promiscuous mode [ 510.546972][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 510.558573][T23298] bond0: left promiscuous mode [ 510.571836][T23298] geneve2: left promiscuous mode [ 510.792053][T23321] netlink: 'syz.2.4976': attribute type 12 has an invalid length. [ 510.810149][T23317] syzkaller0: entered promiscuous mode [ 510.823020][T23317] syzkaller0: entered allmulticast mode [ 511.015990][T23340] tunl0: left promiscuous mode [ 511.047692][T23340] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 511.130240][T23286] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 511.136563][T23286] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 511.292166][T23286] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 511.307926][T23286] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 511.408939][T23286] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 511.423117][T23286] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 511.460262][T23286] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 511.481374][T23286] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 511.538881][T23286] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 511.552681][T23286] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 511.587056][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 511.850793][T23380] __nla_validate_parse: 17 callbacks suppressed [ 511.850811][T23380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4986'. [ 511.866324][T23380] netlink: 'syz.0.4986': attribute type 26 has an invalid length. [ 511.877051][T23380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4986'. [ 511.928146][T23380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4986'. [ 511.967602][T23380] netlink: 'syz.0.4986': attribute type 26 has an invalid length. [ 511.993592][T23380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4986'. [ 512.093207][T23400] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4989'. [ 512.184432][T23416] netlink: 'syz.1.4993': attribute type 62 has an invalid length. [ 512.616975][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 512.801185][T23438] syzkaller1: entered promiscuous mode [ 512.807019][T23438] syzkaller1: entered allmulticast mode [ 513.131855][T23471] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 513.273601][T23475] netlink: 'syz.1.5004': attribute type 1 has an invalid length. [ 513.331464][T23480] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 513.379148][T23475] 8021q: adding VLAN 0 to HW filter on device bond9 [ 513.441020][T23483] bond9: (slave veth7): Enslaving as an active interface with a down link [ 513.468933][T23487] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 513.476151][T23487] bond9: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 513.657236][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 513.924257][T23507] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 513.995233][T23507] bond6 (unregistering): Released all slaves [ 514.190870][T23527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5014'. [ 514.224213][T23527] netlink: 'syz.0.5014': attribute type 7 has an invalid length. [ 514.245048][T23527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5014'. [ 514.397263][T23542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5017'. [ 514.560723][T23552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5019'. [ 514.697136][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 515.131650][T23566] syzkaller0: entered promiscuous mode [ 515.149017][T23566] syzkaller0: entered allmulticast mode [ 515.331272][T23580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5025'. [ 515.533263][T23597] tipc: Started in network mode [ 515.537813][T23594] netlink: 'syz.1.5027': attribute type 6 has an invalid length. [ 515.538508][T23597] tipc: Node identity 2aed7df4d7ab, cluster identity 4711 [ 515.548968][T23594] netlink: 'syz.1.5027': attribute type 5 has an invalid length. [ 515.567727][T23597] tipc: Enabled bearer , priority 0 [ 515.579724][T23599] netlink: 'syz.4.5029': attribute type 1 has an invalid length. [ 515.737082][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.270526][T23655] syzkaller0: entered promiscuous mode [ 516.287937][T23655] syzkaller0: entered allmulticast mode [ 516.707688][ T10] tipc: Node number set to 4249255412 [ 516.789161][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 516.855416][T23710] GUP no longer grows the stack in syz.3.5056 (23710): 200000003000-20000000a000 (200000001000) [ 516.883758][T23710] CPU: 1 UID: 0 PID: 23710 Comm: syz.3.5056 Not tainted syzkaller #0 PREEMPT(full) [ 516.883783][T23710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 516.883793][T23710] Call Trace: [ 516.883800][T23710] [ 516.883809][T23710] dump_stack_lvl+0xe8/0x150 [ 516.883838][T23710] __get_user_pages+0x2453/0x29d0 [ 516.883866][T23710] ? __lock_acquire+0x6b5/0x2cf0 [ 516.883907][T23710] ? __gup_longterm_locked+0xc4e/0x1630 [ 516.883933][T23710] ? down_read_killable+0x1bb/0x340 [ 516.883964][T23710] __gup_longterm_locked+0xdcf/0x1630 [ 516.884014][T23710] gup_fast_fallback+0x1d82/0x22e0 [ 516.884071][T23710] ? __pfx_gup_fast_fallback+0x10/0x10 [ 516.884117][T23710] ? is_valid_gup_args+0x11f/0x200 [ 516.884145][T23710] ? get_user_pages_fast+0x4d/0xb0 [ 516.884172][T23710] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 516.884201][T23710] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 516.884224][T23710] iov_iter_get_pages2+0x5e/0xa0 [ 516.884247][T23710] __se_sys_vmsplice+0x7b3/0x1490 [ 516.884284][T23710] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 516.884304][T23710] ? __pfx_futex_wake+0x10/0x10 [ 516.884393][T23710] do_syscall_64+0x14d/0xf80 [ 516.884415][T23710] ? trace_irq_disable+0x3b/0x150 [ 516.884430][T23710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.884447][T23710] ? clear_bhb_loop+0x40/0x90 [ 516.884469][T23710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.884486][T23710] RIP: 0033:0x7f5a2e79c819 [ 516.884503][T23710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.884518][T23710] RSP: 002b:00007f5a2f62c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 516.884537][T23710] RAX: ffffffffffffffda RBX: 00007f5a2ea15fa0 RCX: 00007f5a2e79c819 [ 516.884550][T23710] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 516.884560][T23710] RBP: 00007f5a2e832c91 R08: 0000000000000000 R09: 0000000000000000 [ 516.884622][T23710] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 516.884632][T23710] R13: 00007f5a2ea16038 R14: 00007f5a2ea15fa0 R15: 00007ffcaa746e18 [ 516.884662][T23710] [ 516.897518][T23712] __nla_validate_parse: 7 callbacks suppressed [ 516.897535][T23712] netlink: 996 bytes leftover after parsing attributes in process `syz.2.5054'. [ 517.589798][T23741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5062'. [ 517.817109][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 517.860297][T23757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5067'. [ 517.966684][T23771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5071'. [ 518.023044][T23771] vlan0: entered allmulticast mode [ 518.043684][T23771] bridge7: entered allmulticast mode [ 518.067970][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5070'. [ 518.088720][T23780] bridge7: port 1(erspan0) entered blocking state [ 518.095373][T23780] bridge7: port 1(erspan0) entered disabled state [ 518.102417][T23780] erspan0: entered allmulticast mode [ 518.110487][T23780] erspan0: entered promiscuous mode [ 518.116775][T23780] bridge7: port 1(erspan0) entered blocking state [ 518.123378][T23780] bridge7: port 1(erspan0) entered forwarding state [ 518.147111][T23779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5073'. [ 518.192195][T23779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5073'. [ 518.428509][T23808] 8021q: VLANs not supported on ip6_vti0 [ 518.542442][T23814] netlink: 'syz.0.5080': attribute type 2 has an invalid length. [ 518.559429][T23818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5081'. [ 518.581034][T23814] !: entered promiscuous mode [ 518.588547][T23820] netlink: 'syz.3.5082': attribute type 15 has an invalid length. [ 518.610144][T23821] netlink: 'syz.0.5080': attribute type 2 has an invalid length. [ 518.620420][T23820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5082'. [ 518.639567][T23821] !: left promiscuous mode [ 518.698043][T23826] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 518.850602][T14136] lec:lec_start_xmit: lec0:No lecd attached [ 518.857175][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 518.879407][T23840] netlink: 'syz.0.5088': attribute type 1 has an invalid length. [ 518.888744][T23839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5086'. [ 518.951485][T23840] 8021q: adding VLAN 0 to HW filter on device bond9 [ 518.977854][T23839] : entered promiscuous mode [ 518.994392][T23842] pimreg: left allmulticast mode [ 518.995657][T23850] openvswitch: netlink: Missing key (keys=40, expected=100) [ 519.040618][T23840] bond9: (slave bridge0): making interface the new active one [ 519.052330][T23840] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 519.312371][T23873] openvswitch: netlink: Missing key (keys=40, expected=100) [ 519.729969][T23888] Unsupported ieee802154 address type: 0 [ 519.882110][T23903] Cannot find add_set index 2 as target [ 519.888385][T23892] syzkaller0: entered promiscuous mode [ 519.897119][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.904368][T23892] syzkaller0: entered allmulticast mode [ 520.947239][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 520.956247][T23971] netlink: 'syz.3.5123': attribute type 3 has an invalid length. [ 520.979511][T23970] netlink: 'syz.3.5123': attribute type 3 has an invalid length. [ 521.419789][T23996] netlink: 'syz.0.5131': attribute type 10 has an invalid length. [ 521.534409][T24001] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 521.896757][T24013] netlink: 'syz.1.5136': attribute type 1 has an invalid length. [ 521.910517][T24013] netlink: 'syz.1.5136': attribute type 1 has an invalid length. [ 521.977076][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 522.036304][T24020] netlink: 'syz.1.5137': attribute type 2 has an invalid length. [ 522.054957][T24018] __nla_validate_parse: 48 callbacks suppressed [ 522.054975][T24018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5138'. [ 522.079186][T24018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5138'. [ 522.529145][T24045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5145'. [ 522.564199][T24054] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.5148'. [ 522.840834][T24068] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5154'. [ 522.876274][T24068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'. [ 522.896032][T24069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5153'. [ 522.921410][T24068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5154'. [ 523.017112][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 523.536060][T24091] macvtap0: entered promiscuous mode [ 523.542916][T24091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5162'. [ 523.651856][T24091] macvtap0 (unregistering): left promiscuous mode [ 523.856936][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 523.865019][ C1] lec:lec_tx_timeout: lec0 [ 524.030278][T24134] netlink: zone id is out of range [ 524.039152][T24134] netlink: zone id is out of range [ 524.044383][T24134] netlink: zone id is out of range [ 524.051352][T24134] netlink: zone id is out of range [ 524.056630][T24134] netlink: zone id is out of range [ 524.062075][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 524.075485][T24134] netlink: zone id is out of range [ 524.081110][T24134] netlink: zone id is out of range [ 524.086355][T24134] netlink: set zone limit has 4 unknown bytes [ 524.634193][T24184] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5189'. [ 524.636692][T24177] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 524.845242][T24191] lo speed is unknown, defaulting to 1000 [ 525.097485][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 525.133725][T24216] validate_nla: 2 callbacks suppressed [ 525.133740][T24216] netlink: 'syz.3.5200': attribute type 1 has an invalid length. [ 525.193706][T24216] 8021q: adding VLAN 0 to HW filter on device bond10 [ 525.305053][T24210] bond10: (slave veth3): Enslaving as an active interface with a down link [ 525.592565][T24248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.675629][T24252] bridge0: entered promiscuous mode [ 525.682003][T24252] bridge0: entered allmulticast mode [ 525.747552][T24258] netlink: 'syz.3.5217': attribute type 10 has an invalid length. [ 525.756433][T24258] bond0: (slave wlan1): Opening slave failed [ 525.764361][T24257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.871807][T24264] netlink: 'syz.4.5220': attribute type 3 has an invalid length. [ 525.914324][T24266] netlink: 'syz.4.5221': attribute type 1 has an invalid length. [ 525.936121][T24266] bond6: entered promiscuous mode [ 525.941694][T24266] 8021q: adding VLAN 0 to HW filter on device bond6 [ 526.473518][T24295] sctp: [Deprecated]: syz.0.5231 (pid 24295) Use of struct sctp_assoc_value in delayed_ack socket option. [ 526.473518][T24295] Use struct sctp_sack_info instead [ 526.511005][T24295] netlink: 'syz.0.5231': attribute type 2 has an invalid length. [ 526.892100][T24327] macvtap1: entered allmulticast mode [ 527.400715][T24360] netlink: 'syz.3.5251': attribute type 1 has an invalid length. [ 527.410089][T24360] __nla_validate_parse: 10 callbacks suppressed [ 527.410106][T24360] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5251'. [ 527.536743][T24367] netlink: 'syz.3.5253': attribute type 17 has an invalid length. [ 527.566987][T24367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5253'. [ 527.575896][T24367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5253'. [ 527.621067][T24367] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.5253'. [ 527.661407][T24367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5253'. [ 527.673534][T24367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5253'. [ 527.683002][T24367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5253'. [ 527.692023][T24367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5253'. [ 527.875506][T24384] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5261'. [ 527.974253][T24391] netlink: 'syz.0.5264': attribute type 1 has an invalid length. [ 528.074169][T24402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5268'. [ 528.123646][T24391] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 528.212069][T24391] netlink: 'syz.0.5264': attribute type 1 has an invalid length. [ 528.238722][T24410] vlan4: entered promiscuous mode [ 528.243987][T24410] vlan4: entered allmulticast mode [ 528.251293][T24410] hsr_slave_1: entered allmulticast mode [ 528.434082][T24417] : entered promiscuous mode [ 528.551398][T24431] netlink: 'syz.2.5275': attribute type 1 has an invalid length. [ 528.671572][T24443] wg1 speed is unknown, defaulting to 1000 [ 528.677682][T24443] wg1 speed is unknown, defaulting to 1000 [ 528.684276][T24443] wg1 speed is unknown, defaulting to 1000 [ 528.710113][T24443] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 528.761389][T24443] wg1 speed is unknown, defaulting to 1000 [ 528.829342][T24443] wg1 speed is unknown, defaulting to 1000 [ 528.840003][T24443] wg1 speed is unknown, defaulting to 1000 [ 528.879388][T24443] wg1 speed is unknown, defaulting to 1000 [ 528.899682][T24443] wg1 speed is unknown, defaulting to 1000 [ 528.930471][T24443] wg1 speed is unknown, defaulting to 1000 [ 528.942590][T24443] wg1 speed is unknown, defaulting to 1000 [ 529.000232][T24461] nbd: socks must be embedded in a SOCK_ITEM attr [ 529.048976][T24467] net_ratelimit: 8 callbacks suppressed [ 529.048994][T24467] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 529.257117][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 529.856169][T24526] veth0_vlan: left promiscuous mode [ 529.862603][T24526] veth0_vlan: entered promiscuous mode [ 529.869868][T24526] team0: Device veth0_vlan failed to register rx_handler [ 529.896112][T24527] syzkaller1: entered promiscuous mode [ 529.916788][T24527] syzkaller1: entered allmulticast mode [ 530.228144][T24544] team1: entered promiscuous mode [ 530.235948][T24544] team1: entered allmulticast mode [ 530.257029][T24551] lo: entered allmulticast mode [ 530.268327][T24551] tunl0: entered allmulticast mode [ 530.275464][T24551] gre0: entered allmulticast mode [ 530.284959][T24551] gretap0: entered allmulticast mode [ 530.294934][T24551] bridge7: port 1(erspan0) entered disabled state [ 530.301977][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 530.310040][T24551] ip_vti0: entered allmulticast mode [ 530.317603][T24551] ip6_vti0: entered allmulticast mode [ 530.324751][T24551] sit0: left promiscuous mode [ 530.329710][T24551] sit0: entered allmulticast mode [ 530.335253][T24551] ip6tnl0: entered allmulticast mode [ 530.342878][T24551] ip6gre0: entered allmulticast mode [ 530.351364][T24551] syz_tun: entered allmulticast mode [ 530.361780][T24551] ip6gretap0: entered allmulticast mode [ 530.369443][T24551] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.376855][T24551] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.384890][T24551] bridge0: entered allmulticast mode [ 530.394951][T24551] vcan0: entered allmulticast mode [ 530.401320][T24551] bond0: entered allmulticast mode [ 530.406481][T24551] bond_slave_0: entered allmulticast mode [ 530.412888][T24551] bond_slave_1: entered allmulticast mode [ 530.420908][T24551] team0: entered allmulticast mode [ 530.426122][T24551] team_slave_0: entered allmulticast mode [ 530.431955][T24551] team_slave_1: entered allmulticast mode [ 530.441173][T24551] dummy0: entered allmulticast mode [ 530.449439][T24551] nlmon0: entered allmulticast mode [ 530.455936][T24551] caif0: entered allmulticast mode [ 530.462385][T24551] batadv0: entered allmulticast mode [ 530.471433][T24551] vxcan0: entered allmulticast mode [ 530.478295][T24551] vxcan1: entered allmulticast mode [ 530.484407][T24551] veth0: entered allmulticast mode [ 530.491397][T24551] veth1: entered allmulticast mode [ 530.501668][T24551] wg0: entered allmulticast mode [ 530.509056][T24551] wg1: entered allmulticast mode [ 530.515907][T24551] wg2: entered allmulticast mode [ 530.524418][T24551] veth0_to_bridge: entered allmulticast mode [ 530.533951][T24551] veth1_to_bridge: entered allmulticast mode [ 530.543946][T24551] veth0_to_bond: entered allmulticast mode [ 530.552421][T24551] veth1_to_bond: entered allmulticast mode [ 530.560870][T24551] veth0_to_team: entered allmulticast mode [ 530.570083][T24551] veth1_to_team: entered allmulticast mode [ 530.581344][T24551] veth1_to_batadv: entered allmulticast mode [ 530.589191][T24551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.596598][T24551] batadv_slave_1: entered allmulticast mode [ 530.605142][T24551] xfrm0: entered allmulticast mode [ 530.612478][T24551] veth0_to_hsr: entered allmulticast mode [ 530.624080][T24551] hsr_slave_0: entered allmulticast mode [ 530.631933][T24551] veth1_to_hsr: entered allmulticast mode [ 530.639692][T24551] hsr_slave_1: entered allmulticast mode [ 530.647540][T24551] hsr0: entered allmulticast mode [ 530.654304][T24551] veth1_virt_wifi: entered allmulticast mode [ 530.662904][T24551] veth0_virt_wifi: entered allmulticast mode [ 530.670921][T24551] virt_wifi0: entered allmulticast mode [ 530.676716][T24551] veth1_macvtap: entered allmulticast mode [ 530.684574][T24551] veth0_macvtap: entered allmulticast mode [ 530.693943][T24551] macvtap0: entered allmulticast mode [ 530.699712][T24551] macsec0: entered allmulticast mode [ 530.708102][T24551] geneve0: entered allmulticast mode [ 530.715532][T24551] geneve1: entered allmulticast mode [ 530.723140][T24551] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 530.733859][T24551] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 530.743887][T24551] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 530.755280][T24551] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 530.764624][T24551] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 530.772020][T24551] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 530.779682][T24551] vlan2: left promiscuous mode [ 530.784502][T24551] bridge0: left promiscuous mode [ 530.789709][T24551] vlan2: entered allmulticast mode [ 530.794994][T24551] veth2: entered allmulticast mode [ 530.800379][T24551] veth3: entered allmulticast mode [ 530.806466][T24551] bridge1: entered allmulticast mode [ 530.812073][T24551] bond1: entered allmulticast mode [ 530.817785][T24551] bridge2: entered allmulticast mode [ 530.824539][T24551] vti0: entered allmulticast mode [ 530.829861][T24551] veth4: entered allmulticast mode [ 530.835133][T24551] veth5: entered allmulticast mode [ 530.840655][T24551] vti1: entered allmulticast mode [ 530.847124][T24551] ip6gretap1: entered allmulticast mode [ 530.853342][T24551] veth6: entered allmulticast mode [ 530.860298][T24551] veth7: entered allmulticast mode [ 530.866062][T24551] bridge3: entered allmulticast mode [ 530.873340][T24551] vlan3: entered allmulticast mode [ 530.878707][T24551] ip6tnl1: entered allmulticast mode [ 530.887292][T24551] bridge4: entered allmulticast mode [ 530.898094][T24551] virt_wifi0.0: entered allmulticast mode [ 530.903957][T24551] ip6tnl2: entered allmulticast mode [ 530.910642][T24551] geneve2: left promiscuous mode [ 530.920551][T24551] gretap1: left promiscuous mode [ 530.928824][T24551] bridge5: entered allmulticast mode [ 530.937661][T24551] bond3: entered allmulticast mode [ 530.943047][T24551] bridge6: entered allmulticast mode [ 530.952727][T24551] veth8: entered allmulticast mode [ 530.958631][T24551] veth9: entered allmulticast mode [ 530.982165][T24551] vxlan0: entered allmulticast mode [ 530.990963][T24551] ip6gretap2: entered allmulticast mode [ 530.999259][T24551] veth10: entered allmulticast mode [ 531.004785][T24551] veth11: entered allmulticast mode [ 531.010705][T24551] mac80211_hwsim hwsim56 wlan2: entered allmulticast mode [ 531.019988][T24551] macvlan3: entered allmulticast mode [ 531.025699][T24551] macvlan4: entered allmulticast mode [ 531.035726][T24551] bridge8: entered allmulticast mode [ 531.041760][T24551] ipip0: entered allmulticast mode [ 531.051667][T24551] sit1: entered allmulticast mode [ 531.167603][ T59] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.176642][ T59] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.191438][ T59] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 531.217015][ T59] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.228930][T24574] nbd: must specify a size in bytes for the device [ 531.241974][ T59] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.259522][ T59] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 531.279290][ T59] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.294366][ T59] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.317763][ T59] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 531.338312][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.380782][ T59] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.407473][ T59] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.416390][ T59] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 531.557092][ T49] tipc: Subscription rejected, illegal request [ 531.957268][T24631] tipc: Trying to set illegal importance in message [ 532.291013][T24661] ¾x9ÿ: renamed from bridge_slave_0 [ 532.377217][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 532.696764][T24690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.801197][T24694] __nla_validate_parse: 24 callbacks suppressed [ 532.801218][T24694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5359'. [ 533.189967][T24707] team0: Device gtp1 is up. Set it down before adding it as a team port [ 533.226507][T24709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5364'. [ 533.260225][T24710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.276660][T24709] validate_nla: 3 callbacks suppressed [ 533.276676][T24709] netlink: 'syz.3.5364': attribute type 1 has an invalid length. [ 533.336705][T24714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5366'. [ 533.417325][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 533.505069][ T5937] IPVS: starting estimator thread 0... [ 533.563592][T24739] delete_channel: no stack [ 533.597029][T24734] IPVS: using max 41 ests per chain, 98400 per kthread [ 534.002602][T24772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5382'. [ 534.041387][T24776] netlink: 264 bytes leftover after parsing attributes in process `syz.4.5384'. [ 534.209776][T24794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5388'. [ 534.242275][T24794] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 534.342954][T24802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5388'. [ 534.348153][T24803] netlink: 'syz.0.5390': attribute type 21 has an invalid length. [ 534.373306][T24803] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.405442][T24805] syz_tun: left allmulticast mode [ 534.434650][T24805] syz_tun: left promiscuous mode [ 534.455081][T24805] bridge0: port 1(syz_tun) entered disabled state [ 534.461962][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 534.520953][T24805] bond0: (slave bridge0): Releasing backup interface [ 534.594698][T24805] bond2: (slave bridge1): Releasing backup interface [ 534.611203][T24805] bridge1: left promiscuous mode [ 534.640156][T24805] team0: Port device bridge2 removed [ 534.652046][T24805] bond4: (slave bridge4): Releasing backup interface [ 534.669874][T24805] bond5: (slave geneve2): Releasing active interface [ 534.699377][T24805] bond8: (slave gretap1): Releasing active interface [ 534.720930][T24805] bond9: (slave veth7): Releasing active interface [ 534.740767][T24811] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5391'. [ 534.755998][T24811] tipc: Enabling of bearer rejected, failed to enable media [ 534.884819][T24838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5397'. [ 534.896146][T24838] bridge_slave_1: left promiscuous mode [ 534.902692][T24838] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.912314][T24838] bridge_slave_0: left promiscuous mode [ 534.920526][T24838] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.963870][T24843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5396'. [ 534.972736][T24846] tipc: Failed to remove unknown binding: 66,0,0/0:1716238880/1716238882 [ 534.982000][T24846] tipc: Failed to remove unknown binding: 66,0,0/0:1716238880/1716238881 [ 534.991093][T24845] tipc: Failed to remove unknown binding: 66,0,0/0:1716238880/1716238882 [ 534.999820][T24820] syzkaller0: entered promiscuous mode [ 535.000170][T24827] netlink: 'syz.0.5394': attribute type 10 has an invalid length. [ 535.005319][T24820] syzkaller0: entered allmulticast mode [ 535.014620][T24845] tipc: Failed to remove unknown binding: 66,0,0/0:1716238880/1716238881 [ 535.039496][T24845] tipc: Failed to remove unknown binding: 66,0,0/0:1716238880/1716238882 [ 535.049077][T24845] tipc: Failed to remove unknown binding: 66,0,0/0:1716238880/1716238881 [ 535.217860][T24859] : renamed from bond0 [ 535.498393][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 535.528775][T24870] tipc: Enabling of bearer rejected, failed to enable media [ 535.748411][T24881] syzkaller0: entered promiscuous mode [ 535.754042][T24881] syzkaller0: entered allmulticast mode [ 535.865228][T24884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.441489][T24942] xt_hashlimit: size too large, truncated to 1048576 [ 536.528656][T24951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.537152][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 536.563883][T24951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.440456][T24960] mpoa:mpoad_close: () going down [ 537.587318][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 537.815890][T25002] team0 (unregistering): Port device team_slave_0 removed [ 537.907274][T25002] team0 (unregistering): Port device team_slave_1 removed [ 537.916200][T25002] bond3: left allmulticast mode [ 537.921610][T25002] bond3: left promiscuous mode [ 537.948967][T25002] team0 (unregistering): Port device macvlan2 removed [ 537.967193][T25002] team0 (unregistering): Port device bond4 removed [ 538.134309][T25030] tap0: tun_chr_ioctl cmd 1074025673 [ 538.262426][T25028] __nla_validate_parse: 5 callbacks suppressed [ 538.262446][T25028] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5447'. [ 538.356238][T25028] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5447'. [ 538.396544][T25050] syzkaller1: entered promiscuous mode [ 538.406098][T25050] syzkaller1: entered allmulticast mode [ 538.493902][T25028] bond0 (unregistering): Released all slaves [ 538.617030][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 538.712342][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5456'. [ 538.727487][T25078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5456'. [ 538.748268][T25077] wireguard0: entered promiscuous mode [ 538.753860][T25077] wireguard0: entered allmulticast mode [ 538.786706][T25084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5458'. [ 538.804731][T25077] team0: Port device wireguard0 added [ 538.831657][T25078] geneve2: entered promiscuous mode [ 538.866615][T25078] geneve2: entered allmulticast mode [ 538.970688][T25093] netlink: 'syz.1.5460': attribute type 1 has an invalid length. [ 538.984759][T25090] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 538.995386][T25093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.009171][T25090] bond7 (unregistering): Released all slaves [ 539.302356][T25117] netlink: 300 bytes leftover after parsing attributes in process `syz.3.5465'. [ 539.409560][T25122] syzkaller1: entered promiscuous mode [ 539.415070][T25122] syzkaller1: entered allmulticast mode [ 539.493492][T25129] tls_set_device_offload_rx: netdev not found [ 539.657034][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 539.853765][T25152] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 539.900119][T25158] syzkaller0: entered promiscuous mode [ 539.905733][T25158] syzkaller0: entered allmulticast mode [ 540.141600][T25175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5483'. [ 540.154045][T25175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5483'. [ 540.684102][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5492'. [ 540.697121][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 540.735226][T25215] : entered promiscuous mode [ 540.770936][T25222] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5492'. [ 540.827847][T25221] lo speed is unknown, defaulting to 1000 [ 540.835396][T25221] wg1 speed is unknown, defaulting to 1000 [ 540.923222][T25226] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 540.971475][T25226] bond7: (slave lo): Enslaving as an active interface with an up link [ 540.981141][T25226] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 541.051468][T25244] netlink: 'syz.2.5500': attribute type 2 has an invalid length. [ 541.060065][T25244] netlink: 'syz.2.5500': attribute type 1 has an invalid length. [ 541.447106][T25249] netlink: 'syz.4.5501': attribute type 3 has an invalid length. [ 541.628265][T25267] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 541.637980][T25263] syzkaller0: entered promiscuous mode [ 541.643488][T25263] syzkaller0: entered allmulticast mode [ 541.737579][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 541.920912][T25290] netlink: 'syz.3.5510': attribute type 1 has an invalid length. [ 542.013088][T25296] bond11: entered promiscuous mode [ 542.019266][T25296] bond11: entered allmulticast mode [ 542.045455][T25296] 8021q: adding VLAN 0 to HW filter on device bond11 [ 542.090436][T25276] bridge6: entered promiscuous mode [ 542.095908][T25276] bridge6: entered allmulticast mode [ 542.103362][T25276] bond11: (slave bridge6): Enslaving as a backup interface with an up link [ 542.118822][ T7705] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 542.167088][T25276] bridge7: entered promiscuous mode [ 542.185863][T25276] bridge7: entered allmulticast mode [ 542.198248][T25276] bond11: (slave bridge7): Enslaving as a backup interface with a down link [ 542.208247][T25306] netlink: 'syz.0.5516': attribute type 10 has an invalid length. [ 542.223570][T25301] netlink: 'syz.0.5516': attribute type 10 has an invalid length. [ 542.243831][T25301] team0: Port device H added [ 542.257497][ T7705] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 542.425932][T25321] bond7: option mode: unable to set because the bond device has slaves [ 542.472273][T25321] macvtap2: entered promiscuous mode [ 542.487274][T25321] macvtap2: entered allmulticast mode [ 542.777101][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 542.934585][T25359] Bluetooth: MGMT ver 1.23 [ 543.003596][T25363] xt_hashlimit: size too large, truncated to 1048576 [ 543.123314][T25369] netlink: 'syz.3.5537': attribute type 2 has an invalid length. [ 543.328565][T25381] tipc: Started in network mode [ 543.345036][T25381] tipc: Node identity 1e3e2f250912, cluster identity 4711 [ 543.363104][T25381] tipc: Enabled bearer , priority 0 [ 543.465429][T25393] __nla_validate_parse: 9 callbacks suppressed [ 543.465446][T25393] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5545'. [ 543.482143][T25385] syzkaller0: entered promiscuous mode [ 543.482167][T25385] syzkaller0: entered allmulticast mode [ 543.482660][T25385] tipc: Resetting bearer [ 543.504186][T25392] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 543.513100][T25392] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5546'. [ 543.555673][T25380] tipc: Resetting bearer [ 543.723935][T25411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5552'. [ 543.821383][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 544.860126][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 545.124560][T25380] tipc: Disabling bearer [ 545.157410][ T7945] tipc: Node number set to 388771621 [ 545.269143][T25425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5556'. [ 545.440822][T25439] geneve3: entered promiscuous mode [ 545.446076][T25439] geneve3: entered allmulticast mode [ 545.470089][ T35] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 545.482150][ T35] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 545.489267][T25442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5560'. [ 545.500521][ T35] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 545.521633][ T35] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 545.638664][T25465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5564'. [ 545.692213][T25463] bond8: option all_slaves_active: invalid value (222) [ 545.701836][T25463] bond8 (unregistering): Released all slaves [ 545.750145][T25468] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5565'. [ 545.760000][T25465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5564'. [ 545.780124][T25468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.801270][T25474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5566'. [ 545.907194][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 546.013454][T25486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5569'. [ 546.389850][T25534] pim6reg: entered allmulticast mode [ 546.738548][T25561] syzkaller0: entered promiscuous mode [ 546.758282][T25561] syzkaller0: entered allmulticast mode [ 546.937062][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 547.796771][T25645] bond0: invalid ARP target 0.0.0.0 specified for addition [ 547.825000][T25645] bond0: option arp_ip_target: invalid value (0) [ 547.841297][T25645] bond0 (unregistering): Released all slaves [ 547.876749][T25639] lo: left allmulticast mode [ 547.903910][T25639] tunl0: left allmulticast mode [ 547.909137][T25639] gre0: left allmulticast mode [ 547.914333][T25639] gretap0: left allmulticast mode [ 547.932862][T25639] ip_vti0: left allmulticast mode [ 547.968362][T25639] ip6_vti0: left allmulticast mode [ 547.973675][T25639] sit0: left allmulticast mode [ 547.978922][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 547.986522][T25639] ip6tnl0: left allmulticast mode [ 547.992107][T25639] ip6gre0: left allmulticast mode [ 547.997426][T25639] syz_tun: left allmulticast mode [ 548.002944][T25639] ip6gretap0: left allmulticast mode [ 548.012954][T25639] vcan0: left allmulticast mode [ 548.019102][T25639] : left allmulticast mode [ 548.023942][T25639] team0: left allmulticast mode [ 548.029406][T25639] dummy0: left allmulticast mode [ 548.035904][T25639] nlmon0: left allmulticast mode [ 548.041430][T25639] caif0: left allmulticast mode [ 548.046569][T25639] batadv0: left allmulticast mode [ 548.052160][T25639] vxcan0: left allmulticast mode [ 548.059706][T25639] vxcan1: left allmulticast mode [ 548.064879][T25639] veth0: left allmulticast mode [ 548.072450][T25639] veth1: left allmulticast mode [ 548.078119][T25639] wg0: left allmulticast mode [ 548.083392][T25639] wg1: left allmulticast mode [ 548.088702][T25639] wg2: left allmulticast mode [ 548.093705][T25639] veth0_to_bridge: left allmulticast mode [ 548.099985][T25639] bridge_slave_0: left allmulticast mode [ 548.106262][T25639] veth1_to_bridge: left allmulticast mode [ 548.112551][T25639] bridge_slave_1: left allmulticast mode [ 548.118702][T25639] veth0_to_bond: left allmulticast mode [ 548.124468][T25639] bond_slave_0: left allmulticast mode [ 548.130506][T25639] veth1_to_bond: left allmulticast mode [ 548.136280][T25639] bond_slave_1: left allmulticast mode [ 548.144879][T25639] veth0_to_team: left allmulticast mode [ 548.154910][T25639] team_slave_0: left allmulticast mode [ 548.161020][T25639] veth1_to_team: left allmulticast mode [ 548.167352][T25639] team_slave_1: left allmulticast mode [ 548.173087][T25639] veth1_to_batadv: left allmulticast mode [ 548.179519][T25639] batadv_slave_1: left allmulticast mode [ 548.185622][T25639] xfrm0: left allmulticast mode [ 548.191272][T25639] veth0_to_hsr: left allmulticast mode [ 548.204090][T25639] veth1_to_hsr: left allmulticast mode [ 548.210114][T25639] hsr0: left allmulticast mode [ 548.215027][T25639] hsr_slave_0: left allmulticast mode [ 548.220762][T25639] hsr_slave_1: left allmulticast mode [ 548.226390][T25639] veth1_virt_wifi: left allmulticast mode [ 548.232792][T25639] veth0_virt_wifi: left allmulticast mode [ 548.245876][T25639] veth0_macvtap: left allmulticast mode [ 548.258216][T25639] macvtap0: left allmulticast mode [ 548.263676][T25639] macsec0: left allmulticast mode [ 548.269325][T25639] geneve0: left allmulticast mode [ 548.274631][T25639] geneve1: left allmulticast mode [ 548.280397][T25639] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 548.288341][T25639] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 548.296021][T25639] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 548.309589][T25639] netdevsim netdevsim2 netdevsim3: left allmulticast mode [ 548.317316][T25639] mac80211_hwsim hwsim38 wlan0: left allmulticast mode [ 548.324516][T25639] mac80211_hwsim hwsim39 wlan1: left allmulticast mode [ 548.332074][T25639] veth2: left allmulticast mode [ 548.337740][T25639] veth3: left allmulticast mode [ 548.342949][T25639] bridge1: left allmulticast mode [ 548.351002][T25639] bond1: left allmulticast mode [ 548.356174][T25639] bridge2: left allmulticast mode [ 548.361970][T25639] vti0: left allmulticast mode [ 548.367251][T25639] veth4: left allmulticast mode [ 548.372395][T25639] veth5: left allmulticast mode [ 548.377802][T25639] vti1: left allmulticast mode [ 548.382881][T25639] bond2: left allmulticast mode [ 548.390457][T25639] ip6gretap1: left allmulticast mode [ 548.396021][T25639] veth6: left allmulticast mode [ 548.403537][T25639] veth7: left allmulticast mode [ 548.411724][T25639] bridge3: left allmulticast mode [ 548.417307][T25639] vlan3: left allmulticast mode [ 548.422232][T25639] veth1_macvtap: left allmulticast mode [ 548.428666][T25639] ip6tnl1: left allmulticast mode [ 548.433878][T25639] bridge4: left allmulticast mode [ 548.439136][T25639] virt_wifi0.0: left allmulticast mode [ 548.444682][T25639] virt_wifi0: left allmulticast mode [ 548.450435][T25639] ip6tnl2: left allmulticast mode [ 548.455584][T25639] geneve2: left allmulticast mode [ 548.460905][T25639] gretap1: left allmulticast mode [ 548.466058][T25639] bridge5: left allmulticast mode [ 548.471318][T25639] bond3: left allmulticast mode [ 548.476288][T25639] bridge6: left allmulticast mode [ 548.481802][T25639] veth8: left allmulticast mode [ 548.486737][T25639] veth9: left allmulticast mode [ 548.491919][T25639] vxlan0: left allmulticast mode [ 548.497016][T25639] ip6gretap2: left allmulticast mode [ 548.502398][T25639] veth10: left allmulticast mode [ 548.507741][T25639] veth11: left allmulticast mode [ 548.512793][T25639] mac80211_hwsim hwsim56 wlan2: left allmulticast mode [ 548.519902][T25639] macvlan3: left allmulticast mode [ 548.525109][T25639] macvlan4: left allmulticast mode [ 548.530486][T25639] vlan0: left allmulticast mode [ 548.535339][T25639] bridge7: left allmulticast mode [ 548.540932][T25639] bridge8: left allmulticast mode [ 548.546025][T25639] ipip0: left allmulticast mode [ 548.551055][T25639] sit1: left allmulticast mode [ 548.786389][T25683] __nla_validate_parse: 10 callbacks suppressed [ 548.786409][T25683] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5620'. [ 548.804692][T25685] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 548.875182][T25694] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20003 [ 549.027040][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 549.105102][T25711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.158961][T25719] netem: change failed [ 549.175576][T25719] netlink: 'syz.0.5634': attribute type 3 has an invalid length. [ 549.212829][T25723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5636'. [ 549.227689][T25722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5636'. [ 549.359803][T25736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5641'. [ 549.576481][T25754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5648'. [ 549.588143][T25758] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.5649'. [ 549.595624][T25754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5648'. [ 549.605821][T25758] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 549.618267][T25754] netlink: 'syz.4.5648': attribute type 1 has an invalid length. [ 549.691121][T25760] netlink: 'syz.0.5651': attribute type 10 has an invalid length. [ 549.743662][T25763] syzkaller0: entered allmulticast mode [ 549.754655][T25764] netlink: 'syz.3.5653': attribute type 1 has an invalid length. [ 549.825621][T25764] 8021q: adding VLAN 0 to HW filter on device bond12 [ 549.948231][T25772] bond12: (slave gretap2): making interface the new active one [ 549.958832][T25772] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 550.057457][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 550.189204][T25803] netlink: 'syz.3.5664': attribute type 2 has an invalid length. [ 550.308086][T25810] bond0: entered promiscuous mode [ 550.360913][T25823] sctp: [Deprecated]: syz.1.5671 (pid 25823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.360913][T25823] Use struct sctp_sack_info instead [ 550.777888][T25834] lo speed is unknown, defaulting to 1000 [ 550.785379][T25834] wg1 speed is unknown, defaulting to 1000 [ 550.874671][T25847] netlink: 'syz.4.5681': attribute type 18 has an invalid length. [ 550.904736][T25845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5679'. [ 550.941930][T25521] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.973123][T25521] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.988006][T25521] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.016129][T25521] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.097296][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 551.426552][T25863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5686'. [ 551.436247][T25863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5686'. [ 551.451545][T25863] netlink: 'syz.4.5686': attribute type 12 has an invalid length. [ 551.470067][T25863] netlink: 'syz.4.5686': attribute type 11 has an invalid length. [ 551.560250][T25882] bridge0: mtu less than device minimum [ 552.147034][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 552.181152][T25913] netlink: 'syz.4.5698': attribute type 3 has an invalid length. [ 552.221414][T25913] netlink: 'syz.4.5698': attribute type 1 has an invalid length. [ 552.260275][T25913] NCSI netlink: No device for ifindex 813332851 [ 552.899587][T25962] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 553.177026][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 553.840901][T26047] __nla_validate_parse: 7 callbacks suppressed [ 553.840920][T26047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5734'. [ 553.869527][T26041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5733'. [ 554.177568][T26062] validate_nla: 7 callbacks suppressed [ 554.177587][T26062] netlink: 'syz.1.5739': attribute type 3 has an invalid length. [ 554.191941][T26062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5739'. [ 554.217160][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 554.270042][T26062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.445467][T26069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5740'. [ 554.519323][T26075] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20003 [ 554.686813][T26081] openvswitch: netlink: Flow actions attr not present in new flow. [ 554.695488][T26087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5747'. [ 554.912021][T26107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5752'. [ 554.990390][T26115] ip6t_srh: unknown srh match flags 5F28 [ 555.009396][T26107] bond13: entered promiscuous mode [ 555.014926][T26107] 8021q: adding VLAN 0 to HW filter on device bond13 [ 555.044753][T26115] macvlan3: entered promiscuous mode [ 555.084570][T26115] macvlan3: entered allmulticast mode [ 555.119410][T26122] netlink: 'syz.0.5755': attribute type 1 has an invalid length. [ 555.129425][T26115] bond13: (slave macvlan3): Opening slave failed [ 555.160235][T26122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5755'. [ 555.170974][T26101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5749'. [ 555.178577][T26122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5755'. [ 555.192963][T26126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5756'. [ 555.232694][T26126] netlink: 'syz.1.5756': attribute type 3 has an invalid length. [ 555.257028][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 555.382730][T26139] netlink: 'syz.2.5760': attribute type 6 has an invalid length. [ 555.499735][T26141] netlink: 'syz.1.5761': attribute type 1 has an invalid length. [ 555.704319][T26162] syzkaller0: entered promiscuous mode [ 555.726432][T26162] 0: reclassify loop, rule prio 0, protocol 800 [ 555.908801][T26171] IPVS: Error connecting to the multicast addr [ 556.161119][T26196] netdevsim netdevsim3: Direct firmware load for .. @ failed with error -2 [ 556.175271][T26196] netdevsim netdevsim3: Falling back to sysfs fallback for: .. @ [ 556.297978][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 556.701736][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 556.714214][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 556.722706][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 556.733504][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 556.744237][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 556.779096][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 556.786466][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 556.797285][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 556.805267][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 556.814177][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 556.927624][T26230] lo speed is unknown, defaulting to 1000 [ 556.971880][T26230] wg1 speed is unknown, defaulting to 1000 [ 557.163699][T26252] x_tables: duplicate underflow at hook 1 [ 557.187629][T26256] vlan1: entered promiscuous mode [ 557.192708][T26256] geneve1: entered promiscuous mode [ 557.198293][T26256] vlan1: entered allmulticast mode [ 557.203426][T26256] geneve1: entered allmulticast mode [ 557.337171][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 557.485643][T26230] chnl_net:caif_netlink_parms(): no params data found [ 557.517702][T26279] syzkaller0: entered promiscuous mode [ 557.523200][T26279] syzkaller0: entered allmulticast mode [ 557.609561][T25522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 557.623692][T25522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 557.635776][T25522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.647277][T25522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 557.688902][T26285] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 557.714330][T26285] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 557.803438][T25522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 557.814566][T25522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 557.825544][T25522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.836680][T25522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 557.861876][T26230] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.869262][T26230] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.876520][T26230] bridge_slave_0: entered allmulticast mode [ 557.883892][T26230] bridge_slave_0: entered promiscuous mode [ 557.945547][T25522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 557.957959][T25522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 557.989124][T25522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.008925][T25522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 558.025799][T26230] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.033698][T26230] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.042252][T26230] bridge_slave_1: entered allmulticast mode [ 558.051409][T26230] bridge_slave_1: entered promiscuous mode [ 558.069021][T26305] IPVS: Error joining to the multicast group [ 558.090248][T25522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 558.100803][T25522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 558.111509][T25522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.122720][T25522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 558.159853][T26305] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 558.251825][T26230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.297860][T26230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.377217][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 558.507961][T26230] team0: Port device team_slave_0 added [ 558.558181][T25521] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.566412][T25521] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.593832][T26230] team0: Port device team_slave_1 added [ 558.702440][ T122] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.717450][T25521] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.754794][T26340] netlink: 'syz.4.5818': attribute type 2 has an invalid length. [ 558.857096][ T5830] Bluetooth: hci1: command tx timeout [ 559.427181][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 559.520745][T25522] bond1 (unregistering): Released all slaves [ 559.533407][T25522] bond2 (unregistering): Released all slaves [ 559.545963][T25522] bond3 (unregistering): Released all slaves [ 559.565114][T25522] bond4 (unregistering): Released all slaves [ 559.590813][T25522] bond5 (unregistering): Released all slaves [ 559.620084][T25522] bond6 (unregistering): Released all slaves [ 559.638999][T25522] bond7 (unregistering): Released all slaves [ 559.659096][T25522] bond8 (unregistering): Released all slaves [ 559.676100][T25522] bond9 (unregistering): Released all slaves [ 559.692301][T25522] bond0 (unregistering): Released all slaves [ 559.708873][T26362] __nla_validate_parse: 12 callbacks suppressed [ 559.708890][T26362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5824'. [ 559.713124][T26230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.731542][T26230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.757569][T26230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.797733][T26230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.808269][T26230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.858370][T26230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.914165][T25522] : left promiscuous mode [ 559.963798][T26371] netlink: 'syz.0.5825': attribute type 21 has an invalid length. [ 560.014022][T25522] : left promiscuous mode [ 560.067778][T26371] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5825'. [ 560.125856][T25522] tipc: Disabling bearer [ 560.131739][T25522] tipc: Left network mode [ 560.140915][T26379] netlink: 'syz.2.5830': attribute type 11 has an invalid length. [ 560.167626][T26230] hsr_slave_0: entered promiscuous mode [ 560.178881][T26230] hsr_slave_1: entered promiscuous mode [ 560.191030][T26230] debugfs: 'hsr0' already exists in 'hsr' [ 560.219340][T26230] Cannot create hsr debugfs directory [ 560.330888][T26375] syzkaller0: entered promiscuous mode [ 560.342229][T26375] syzkaller0: entered allmulticast mode [ 560.372129][T26390] tipc: New replicast peer: 255.255.255.255 [ 560.392455][T26390] tipc: Enabled bearer , priority 10 [ 560.457232][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 560.535314][T26399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5835'. [ 560.551411][T26399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5835'. [ 560.643605][T26404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.769244][T26409] syzkaller0: entered promiscuous mode [ 560.782205][T26409] syzkaller0: entered allmulticast mode [ 560.804348][T26409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5837'. [ 560.878481][T25522] veth1_macvtap: left promiscuous mode [ 560.890205][T25522] veth0_macvtap: left promiscuous mode [ 560.937082][ T5830] Bluetooth: hci1: command tx timeout [ 560.945838][T26426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5838'. [ 561.005126][T25522] pim6reg (unregistering): left allmulticast mode [ 561.030838][T25522] team0 (unregistering): Port device wireguard0 removed [ 561.497531][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 561.510857][T26230] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.682914][T26230] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.819700][T26230] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.912041][T26457] syz.0.5848 (26457) used greatest stack depth: 17472 bytes left [ 562.055906][T26230] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.140325][T26478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5851'. [ 562.171523][T26476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5852'. [ 562.416725][T26230] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 562.448089][T26230] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 562.491883][T26230] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 562.510945][T26494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5854'. [ 562.537230][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 562.543408][T26230] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 562.863682][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.873989][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 562.952794][T26230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.005673][T26230] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.023546][ T5830] Bluetooth: hci1: command tx timeout [ 563.040992][T25518] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.048230][T25518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.069458][T26523] netlink: 'syz.4.5860': attribute type 1 has an invalid length. [ 563.098275][T25514] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.105422][T25514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.216089][T26534] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5863'. [ 563.478151][T26556] netlink: 'syz.3.5866': attribute type 1 has an invalid length. [ 563.577069][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 563.994326][T26586] lo speed is unknown, defaulting to 1000 [ 564.022621][T26586] wg1 speed is unknown, defaulting to 1000 [ 564.267364][T26597] bond12: (slave gretap0): Device is not bonding slave [ 564.274523][T26597] bond12: option active_slave: invalid value (gretap0) [ 564.283609][T26597] bond12 (unregistering): Released all slaves [ 564.386604][T25522] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.404454][T25522] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.431916][T25522] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.468250][T26230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.482302][T25522] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.593232][T26230] veth0_vlan: entered promiscuous mode [ 564.609192][T26230] veth1_vlan: entered promiscuous mode [ 564.617389][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 564.644184][T26230] veth0_macvtap: entered promiscuous mode [ 564.655814][T26230] veth1_macvtap: entered promiscuous mode [ 564.714332][T26230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.731639][T26623] __nla_validate_parse: 10 callbacks suppressed [ 564.731658][T26623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5881'. [ 564.736237][T26620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5879'. [ 564.797944][T26626] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5879'. [ 564.850407][T26620] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5879'. [ 564.878010][T26230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.915977][T26630] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5882'. [ 564.933848][T26624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5880'. [ 564.950183][T26624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5880'. [ 564.990844][T26624] syzkaller1: entered promiscuous mode [ 564.996423][T26624] syzkaller1: entered allmulticast mode [ 565.034558][ T7705] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.053782][ T7705] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.097186][ T5830] Bluetooth: hci1: command tx timeout [ 565.145537][ T7705] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.155386][ T7705] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.172630][T26646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.358674][T25514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.381391][T25514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.451264][T25522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.480541][T25522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.657016][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 565.758967][T26688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5900'. [ 565.782903][T26688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5900'. [ 565.810099][T26697] netlink: 'syz.3.5903': attribute type 8 has an invalid length. [ 566.087619][T26719] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 566.137907][T26721] netlink: 'syz.0.5911': attribute type 33 has an invalid length. [ 566.192907][T26729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5913'. [ 566.220555][T26729] netlink: 'syz.2.5913': attribute type 1 has an invalid length. [ 566.260505][T26738] openvswitch: netlink: Flow actions attr not present in new flow. [ 566.269324][T26729] 8021q: adding VLAN 0 to HW filter on device bond4 [ 566.289686][T26739] bond4: (slave bridge9): making interface the new active one [ 566.298645][T26739] bond4: (slave bridge9): Enslaving as an active interface with an up link [ 566.299845][T26737] "syz.0.5915" (26737) uses obsolete ecb(arc4) skcipher [ 566.697235][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 567.737323][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 567.886968][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.895209][ C1] lec:lec_tx_timeout: lec0 [ 567.983174][ T7705] gretap0: left allmulticast mode [ 567.989501][ T7705] bridge0: port 3(gretap0) entered disabled state [ 567.997497][ T7705] bridge_slave_1: left allmulticast mode [ 568.003312][ T7705] bridge_slave_1: left promiscuous mode [ 568.009160][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.019457][ T7705] bridge_slave_0: left allmulticast mode [ 568.025126][ T7705] bridge_slave_0: left promiscuous mode [ 568.031600][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.092864][ T7705] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 568.101371][ T7705] ip6gre1 (unregistering): left promiscuous mode [ 568.177622][ T7705] bond4 (unregistering): (slave gretap2): Releasing active interface [ 568.223819][ T7705] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 568.440136][ T7705] bond5 (unregistering): (slave bridge5): Releasing active interface [ 568.730294][ T7705] bond11 (unregistering): (slave bridge11): Releasing backup interface [ 568.738774][ T7705] bridge11 (unregistering): left promiscuous mode [ 568.777135][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 568.788630][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.798391][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.808201][ T7705] bond0 (unregistering): Released all slaves [ 568.819246][ T7705] bond1 (unregistering): (slave bond2): Releasing active interface [ 568.828458][ T7705] bond1 (unregistering): Released all slaves [ 568.840767][ T7705] bond2 (unregistering): Released all slaves [ 568.856819][ T7705] bond3 (unregistering): Released all slaves [ 568.872053][ T7705] bond4 (unregistering): Released all slaves [ 568.888041][ T7705] bond5 (unregistering): Released all slaves [ 568.900467][ T7705] bond6 (unregistering): Released all slaves [ 568.912547][ T7705] bond7 (unregistering): Released all slaves [ 568.925278][ T7705] bond8 (unregistering): (slave lo): Releasing backup interface [ 568.942888][ T7705] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 568.954740][ T7705] bond8 (unregistering): Released all slaves [ 568.967497][ T7705] bond9 (unregistering): Released all slaves [ 568.979893][ T7705] bond10 (unregistering): Released all slaves [ 568.995761][ T7705] bond11 (unregistering): Released all slaves [ 569.013466][ T7945] lo speed is unknown, defaulting to 1000 [ 569.115442][ T7705] : left promiscuous mode [ 569.185628][ T7705] tipc: Left network mode [ 569.389518][ T7705] hsr_slave_0: left promiscuous mode [ 569.395289][ T7705] 0·: left promiscuous mode [ 569.401040][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.412090][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.542857][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 569.563336][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 569.573345][ T7705] veth0_to_team (unregistering): left allmulticast mode [ 569.827105][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 570.857072][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 571.897136][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 572.937284][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 573.977059][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 575.017155][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 576.057225][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 577.097093][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 578.137178][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 579.177141][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 580.217231][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 581.257295][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 582.297031][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 582.873215][T14136] lec:lec_start_xmit: lec0:No lecd attached [ 583.337088][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 584.377147][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 585.417122][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 586.457188][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 587.497079][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 587.886937][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 587.895004][ C1] lec:lec_tx_timeout: lec0 [ 587.935056][T26814] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 587.951034][T26813] __nla_validate_parse: 1 callbacks suppressed [ 587.951054][T26813] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5931'. [ 587.966103][T26816] netlink: 'syz.4.5933': attribute type 1 has an invalid length. [ 587.966123][T26816] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5933'. [ 587.966138][T26816] netlink: 658 bytes leftover after parsing attributes in process `syz.4.5933'. [ 587.966151][T26816] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5933'. [ 588.127494][T26828] vlan4: entered promiscuous mode [ 588.202407][T26834] netlink: 'syz.0.5940': attribute type 2 has an invalid length. [ 588.214654][T26834] netlink: 'syz.0.5940': attribute type 1 has an invalid length. [ 588.237275][T26832] netlink: 'syz.2.5938': attribute type 3 has an invalid length. [ 588.239359][T26834] netlink: 'syz.0.5940': attribute type 1 has an invalid length. [ 588.246286][T26837] IPv6: sit1: Disabled Multicast RS [ 588.263011][T26834] netlink: 'syz.0.5940': attribute type 2 has an invalid length. [ 588.280906][T26837] sit1: entered allmulticast mode [ 588.462456][T26858] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5945'. [ 588.537009][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 588.559076][T26865] netlink: 'syz.4.5948': attribute type 1 has an invalid length. [ 588.919887][T26902] vlan3: entered allmulticast mode [ 588.925333][T26902] bridge_slave_0: entered allmulticast mode [ 588.971517][T26907] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5957'. [ 589.096390][T26912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5959'. [ 589.148318][T26916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5960'. [ 589.370985][T26932] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5965'. [ 589.577103][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 589.668333][T26951] syzkaller0: entered promiscuous mode [ 589.686373][T26951] syzkaller0: entered allmulticast mode [ 589.946607][T26970] tipc: Started in network mode [ 589.954821][T26970] tipc: Node identity ac14140f, cluster identity 4711 [ 589.961852][T26970] tipc: New replicast peer: 172.20.20.187 [ 589.974276][T26970] tipc: Enabled bearer , priority 10 [ 590.069045][T26979] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5985'. [ 590.181457][T26984] netlink: 'syz.2.5987': attribute type 10 has an invalid length. [ 590.230797][T26990] netlink: 'syz.3.5988': attribute type 3 has an invalid length. [ 590.242912][T26990] netlink: 'syz.3.5988': attribute type 3 has an invalid length. [ 590.263382][T26984] team0 (unregistering): Port device team_slave_0 removed [ 590.278398][T26984] team0 (unregistering): Port device team_slave_1 removed [ 590.617305][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 591.090528][ T10] tipc: Node number set to 2886997007 [ 591.211911][T27072] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 591.259224][T27081] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 591.657555][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 592.697159][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 593.737101][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 594.159574][T27067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 594.292417][T27127] netlink: 'syz.4.6024': attribute type 11 has an invalid length. [ 594.312550][T27127] __nla_validate_parse: 11 callbacks suppressed [ 594.312566][T27127] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.6024'. [ 594.333099][T27132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6027'. [ 594.342584][T27132] block nbd1: Unsupported socket: should be TCP or UNIX. [ 594.616693][T27151] wg1 speed is unknown, defaulting to 1000 [ 594.777043][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 594.983443][T27172] IPv6: NLM_F_CREATE should be specified when creating new route [ 595.015528][T27174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6038'. [ 595.026080][T27174] nbd: must specify at least one socket [ 595.065934][T27169] bridge1: entered promiscuous mode [ 595.074999][T27169] bridge1: entered allmulticast mode [ 595.141070][T27184] ieee802154 phy1 wpan1: encryption failed: -22 [ 595.182677][T27188] validate_nla: 2 callbacks suppressed [ 595.182696][T27188] netlink: 'syz.0.6041': attribute type 25 has an invalid length. [ 595.289186][T27190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6043'. [ 595.331720][T27197] syzkaller0: entered promiscuous mode [ 595.343492][T27197] syzkaller0: entered allmulticast mode [ 595.466119][ T35] bond0: (slave bond_slave_0): interface is now down [ 595.486961][ T35] bond0: (slave bond_slave_1): interface is now down [ 595.527546][ T35] bond0: now running without any active interface! [ 595.702584][T27230] syzkaller0: entered promiscuous mode [ 595.722559][T27230] syzkaller0: entered allmulticast mode [ 595.732110][T27234] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6056'. [ 595.759308][T27230] netlink: 'syz.4.6055': attribute type 4 has an invalid length. [ 595.817056][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 595.920395][T27245] netlink: 'syz.3.6059': attribute type 1 has an invalid length. [ 595.931266][T27248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6059'. [ 596.857049][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 597.897212][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 598.937049][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 599.977168][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 601.017076][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 602.057232][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 603.097171][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 604.137119][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 605.177121][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 606.217085][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 607.257025][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 608.297099][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 609.337099][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 610.377177][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 611.417057][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 612.457133][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 613.497134][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 614.537154][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 615.577072][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 616.617055][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 617.321353][T27257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6062'. [ 617.352694][T27257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6062'. [ 617.382033][T27257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6062'. [ 617.559196][T27279] xt_recent: Unsupported userspace flags (000000b1) [ 617.590145][T27279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6068'. [ 617.600021][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6069'. [ 617.657003][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 617.690289][T27287] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6071'. [ 617.816205][T27294] netlink: 'syz.1.6069': attribute type 1 has an invalid length. [ 618.141625][T27329] netlink: 'syz.4.6081': attribute type 3 has an invalid length. [ 618.345901][T27345] IPVS: length: 253 != 8 [ 618.476281][T27353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6089'. [ 618.616526][T27369] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6092'. [ 618.671783][T27373] xt_cgroup: xt_cgroup: no path or classid specified [ 618.697044][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 618.759141][T27383] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6096'. [ 618.801332][T27385] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6097'. [ 618.917658][T27391] bond0: entered allmulticast mode [ 618.929594][T27391] bond_slave_0: entered allmulticast mode [ 618.939056][T27391] bond_slave_1: entered allmulticast mode [ 619.120703][T27410] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 619.241735][T27415] syzkaller1: entered promiscuous mode [ 619.256493][T27415] syzkaller1: entered allmulticast mode [ 619.578899][T27435] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 619.737076][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 620.605221][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 620.616356][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 620.625857][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 620.633805][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 620.643173][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 620.663945][T27515] tipc: Resetting bearer [ 620.692114][T27515] wg1 speed is unknown, defaulting to 1000 [ 620.777431][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 620.838114][T27515] chnl_net:caif_netlink_parms(): no params data found [ 620.905599][T27515] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.913063][T27515] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.920603][T27515] bridge_slave_0: entered allmulticast mode [ 620.928195][T27515] bridge_slave_0: entered promiscuous mode [ 620.935875][T27515] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.945224][T27515] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.952729][T27515] bridge_slave_1: entered allmulticast mode [ 620.959941][T27515] bridge_slave_1: entered promiscuous mode [ 620.984600][T27515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.998093][T27515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.025403][T27515] team0: Port device team_slave_0 added [ 621.033416][T27515] team0: Port device team_slave_1 added [ 621.057031][T27515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.063986][T27515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.090193][T27515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.103734][T27515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.111420][T27515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.138204][T27515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.182331][T27515] hsr_slave_0: entered promiscuous mode [ 621.188661][T27515] hsr_slave_1: entered promiscuous mode [ 621.331606][T27515] netdevsim netdevsim0 netdevsim2 (unregistering): left promiscuous mode [ 621.668495][T27538] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 621.784981][T25522] tipc: Subscription rejected, illegal request [ 621.817148][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 622.697259][ T5834] Bluetooth: hci5: command tx timeout [ 622.857083][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 623.443432][T27504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 623.538639][T27515] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 623.567337][T27515] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 623.591670][T27515] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 623.636401][T27515] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 623.692626][T27547] tipc: Enabling of bearer rejected, already enabled [ 623.845910][T27515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.876510][T27515] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.877690][ T122] tipc: Subscription rejected, illegal request [ 623.890732][T25521] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.897854][T25521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.905499][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 623.905792][T27568] __nla_validate_parse: 9 callbacks suppressed [ 623.905805][T27568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6150'. [ 623.944731][T27568] netlink: 1371 bytes leftover after parsing attributes in process `syz.3.6150'. [ 623.984559][T27567] syzkaller0: entered promiscuous mode [ 624.007305][T27567] syzkaller0: entered allmulticast mode [ 624.022181][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.029380][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.086140][T27574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6151'. [ 624.114231][T27574] netlink: 'syz.3.6151': attribute type 10 has an invalid length. [ 624.156393][T27515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 624.301476][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.311587][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 624.354986][T27582] lo: left allmulticast mode [ 624.380404][T27582] tunl0: left allmulticast mode [ 624.395209][T27582] gre0: left allmulticast mode [ 624.405481][T27582] ip_vti0: left allmulticast mode [ 624.413779][T27582] ip6_vti0: left allmulticast mode [ 624.419439][T27582] sit0: left allmulticast mode [ 624.428630][T27582] ip6tnl0: left allmulticast mode [ 624.434893][T27582] ip6gre0: left allmulticast mode [ 624.443676][T27582] syz_tun: left allmulticast mode [ 624.450164][T27582] bond0: left allmulticast mode [ 624.455162][T27582] bridge0: left allmulticast mode [ 624.461016][T27582] nlmon0: left allmulticast mode [ 624.466362][T27582] caif0: left allmulticast mode [ 624.472415][T27582] vxcan0: left allmulticast mode [ 624.477968][T27582] veth0: left allmulticast mode [ 624.483408][T27582] veth1: left allmulticast mode [ 624.488796][T27582] wg0: left allmulticast mode [ 624.494008][T27582] wg1: left allmulticast mode [ 624.499439][T27582] wg2: left allmulticast mode [ 624.504944][T27582] veth0_to_bridge: left allmulticast mode [ 624.512061][T27582] veth1_to_bridge: left allmulticast mode [ 624.518332][T27582] veth0_to_bond: left allmulticast mode [ 624.524200][T27582] bond_slave_0: left allmulticast mode [ 624.530840][T27582] veth1_to_bond: left allmulticast mode [ 624.536755][T27582] bond_slave_1: left allmulticast mode [ 624.543216][T27582] veth0_to_team: left allmulticast mode [ 624.551025][T27582] veth1_to_team: left allmulticast mode [ 624.558056][T27582] veth0_to_batadv: left allmulticast mode [ 624.564044][T27582] batadv_slave_0: left allmulticast mode [ 624.574301][T27582] veth1_to_batadv: left allmulticast mode [ 624.580342][T27582] batadv_slave_1: left allmulticast mode [ 624.587012][T27582] xfrm0: left allmulticast mode [ 624.592334][T27582] veth0_to_hsr: left allmulticast mode [ 624.598503][T27582] veth1_to_hsr: left allmulticast mode [ 624.605543][T27582] hsr0: left allmulticast mode [ 624.612034][T27582] hsr_slave_0: left allmulticast mode [ 624.617644][T27582] hsr_slave_1: left allmulticast mode [ 624.623331][T27582] veth1_virt_wifi: left allmulticast mode [ 624.629684][T27582] veth0_virt_wifi: left allmulticast mode [ 624.637382][T27587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6156'. [ 624.657157][T27582] virt_wifi0: left allmulticast mode [ 624.663621][T27582] veth1_vlan: left allmulticast mode [ 624.669538][T27582] vlan0: left allmulticast mode [ 624.674694][T27582] vlan1: left allmulticast mode [ 624.680019][T27582] macvlan1: left allmulticast mode [ 624.685377][T27582] ipvlan0: left allmulticast mode [ 624.691135][T27582] ipvlan1: left allmulticast mode [ 624.696279][T27582] veth0_vlan: left allmulticast mode [ 624.704621][T27582] veth1_macvtap: left allmulticast mode [ 624.710626][T27582] veth0_macvtap: left allmulticast mode [ 624.716585][T27582] macvtap0: left allmulticast mode [ 624.722176][T27582] macsec0: left allmulticast mode [ 624.727789][T27582] geneve0: left allmulticast mode [ 624.733362][T27582] geneve1: left allmulticast mode [ 624.738755][T27582] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 624.746461][T27582] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 624.754116][T27582] netdevsim netdevsim4 netdevsim2: left allmulticast mode [ 624.761624][T27582] netdevsim netdevsim4 netdevsim3: left allmulticast mode [ 624.769247][T27582] mac80211_hwsim hwsim45 wlan0: left allmulticast mode [ 624.776352][T27582] mac80211_hwsim hwsim46 wlan1: left allmulticast mode [ 624.784299][T27582] vlan2: left allmulticast mode [ 624.787605][ T5834] Bluetooth: hci5: command tx timeout [ 624.789412][T27582] erspan0: left allmulticast mode [ 624.800052][T27582] bridge1: left allmulticast mode [ 624.805274][T27582] veth2: left allmulticast mode [ 624.816647][T27582] veth3: left allmulticast mode [ 624.822450][T27582] ipvlan2: left allmulticast mode [ 624.828770][T27582] ip6gretap0: left allmulticast mode [ 624.834883][T27582] mac80211_hwsim hwsim48 wlan2: left allmulticast mode [ 624.842481][T27582] mac80211_hwsim hwsim46 pimreg: left allmulticast mode [ 624.849910][T27582] bond1: left allmulticast mode [ 624.854933][T27582] bond2: left allmulticast mode [ 624.861651][T27582] gtp0: left allmulticast mode [ 624.866649][T27582] ip6tnl1: left allmulticast mode [ 624.872394][T27582] syztnl2: left allmulticast mode [ 624.877894][T27582] bridge2: left allmulticast mode [ 624.883182][T27582] bond3: left allmulticast mode [ 624.888690][T27582] vxcan2: left allmulticast mode [ 624.893890][T27582] vxcan3: left allmulticast mode [ 624.899605][T27582] gre1: left allmulticast mode [ 624.904577][T27582] gretap1: left allmulticast mode [ 624.910343][T27582] geneve2: left allmulticast mode [ 624.915582][T27582] sit1: left allmulticast mode [ 624.921376][T27582] bond5: left promiscuous mode [ 624.926209][T27582] ip6gre1: left promiscuous mode [ 624.932282][T27582] bond6: left promiscuous mode [ 624.937062][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 624.945971][T27582] macvtap1: left allmulticast mode [ 624.952340][T27582] macvtap2: left promiscuous mode [ 624.957988][T27582] macvtap2: left allmulticast mode [ 625.079253][T27597] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6160'. [ 625.112243][T27515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.126158][T27601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6158'. [ 625.173718][T27515] veth0_vlan: entered promiscuous mode [ 625.190529][T27515] veth1_vlan: entered promiscuous mode [ 625.218366][T27601] 8021q: VLANs not supported on gre0 [ 625.263386][T27605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.274838][T27607] openvswitch: netlink: Flow actions attr not present in new flow. [ 625.293250][T27515] veth0_macvtap: entered promiscuous mode [ 625.322510][T27515] veth1_macvtap: entered promiscuous mode [ 625.371531][T27515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.430173][T27615] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 625.431387][T27515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.459494][T27615] netlink: 'syz.1.6166': attribute type 10 has an invalid length. [ 625.463422][ T122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.481130][T27615] netlink: 396 bytes leftover after parsing attributes in process `syz.1.6166'. [ 625.492844][ T122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.522999][ T122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.554623][ T122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.697309][T27626] netlink: 'syz.1.6171': attribute type 1 has an invalid length. [ 625.710855][T25521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.729175][T25521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.808733][T27641] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6175'. [ 625.819895][ T122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.842107][ T122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.977076][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 626.000807][T27657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6133'. [ 626.288084][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 626.325754][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 626.334222][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 626.343840][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 626.352973][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 626.424234][T27671] wg1 speed is unknown, defaulting to 1000 [ 626.471891][T27680] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:32789 [ 626.722677][T27671] chnl_net:caif_netlink_parms(): no params data found [ 626.860600][ T5830] Bluetooth: hci5: command tx timeout [ 626.872156][T27708] netlink: 'syz.2.6194': attribute type 1 has an invalid length. [ 626.899371][T27708] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6194'. [ 627.017025][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 627.079230][T27671] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.088708][T27671] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.096201][T27671] bridge_slave_0: entered allmulticast mode [ 627.108229][T27671] bridge_slave_0: entered promiscuous mode [ 627.144295][T27671] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.152788][T27671] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.163440][T27671] bridge_slave_1: entered allmulticast mode [ 627.171606][T27671] bridge_slave_1: entered promiscuous mode [ 627.259194][T27671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.277806][ T35] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.296292][ T35] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.340215][T27671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.383936][ T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.393201][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.428174][T27744] netlink: 'syz.3.6202': attribute type 32 has an invalid length. [ 627.491704][T27671] team0: Port device team_slave_0 added [ 627.512494][T27671] team0: Port device team_slave_1 added [ 627.678415][T27671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.685390][T27671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.732845][T27671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.747869][T27671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.756937][T27671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.784353][T27671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.862799][T25519] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.910272][T25521] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.970739][T25522] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.056983][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 628.057874][T27671] hsr_slave_0: entered promiscuous mode [ 628.071350][T27671] hsr_slave_1: entered promiscuous mode [ 628.079053][T27671] debugfs: 'hsr0' already exists in 'hsr' [ 628.084891][T27671] Cannot create hsr debugfs directory [ 628.107050][T25522] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.146143][ T122] team0: left allmulticast mode [ 628.159932][ T122] team_slave_0: left allmulticast mode [ 628.165558][ T122] team_slave_1: left allmulticast mode [ 628.172531][ T122] macvlan2: left allmulticast mode [ 628.178799][ T122] bridge3: left allmulticast mode [ 628.184042][ T122] team0: left promiscuous mode [ 628.189064][ T122] team_slave_0: left promiscuous mode [ 628.194734][ T122] team_slave_1: left promiscuous mode [ 628.201529][ T122] macvlan2: left promiscuous mode [ 628.206824][ T122] bridge3: left promiscuous mode [ 628.213958][ T122] bridge0: port 4(team0) entered disabled state [ 628.234101][ T122] gretap0: left allmulticast mode [ 628.246087][ T122] bridge0: port 3(gretap0) entered disabled state [ 628.266299][ T122] bridge_slave_1: left allmulticast mode [ 628.292525][ T122] bridge_slave_1: left promiscuous mode [ 628.299287][ T122] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.312852][ T122] ¾x9ÿ: left allmulticast mode [ 628.325232][ T122] ¾x9ÿ: left promiscuous mode [ 628.333045][ T122] bridge0: port 1(0¾x9ÿ) entered disabled state [ 628.413179][ T122] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 628.457658][ T5830] Bluetooth: hci4: command tx timeout [ 628.556592][ T122] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 628.691247][ T122] team0: Port device bridge3 removed [ 628.731978][ T122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.741859][ T122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.751434][ T122] bond0 (unregistering): Released all slaves [ 628.760984][ T122] bond1 (unregistering): Released all slaves [ 628.773517][ T122] bond2 (unregistering): Released all slaves [ 628.789031][ T122] team0: Port device macvlan2 removed [ 628.798963][ T122] bond3 (unregistering): Released all slaves [ 628.817263][ T122] bond4 (unregistering): Released all slaves [ 628.830439][ T122] bond5 (unregistering): Released all slaves [ 628.844261][ T122] bond6 (unregistering): Released all slaves [ 628.865079][ T122] bond7 (unregistering): (slave lo): Releasing backup interface [ 628.873837][ T122] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 628.885438][ T122] bond7 (unregistering): Released all slaves [ 628.937747][ T5830] Bluetooth: hci5: command tx timeout [ 629.096995][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 629.142459][ T122] : left promiscuous mode [ 629.344175][ T122] tipc: Disabling bearer [ 629.366228][ T122] tipc: Left network mode [ 629.468688][T27838] __nla_validate_parse: 9 callbacks suppressed [ 629.468705][T27838] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6220'. [ 629.487040][T27840] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6219'. [ 629.712207][T27671] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.817017][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 629.825060][ C1] lec:lec_tx_timeout: lec0 [ 629.921915][T27671] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.076742][T27671] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.144264][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 630.220400][T27671] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.306228][T27878] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 630.313769][T27878] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 630.485006][T27882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.540069][ T5830] Bluetooth: hci4: command tx timeout [ 630.590155][T27882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6230'. [ 630.784847][T27898] bond5: Removing last ns target with arp_interval on [ 630.883919][ T122] hsr_slave_0: left promiscuous mode [ 630.891939][T27904] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 630.910640][ T122] hsr_slave_1: left promiscuous mode [ 631.163385][ T122] team0 (unregistering): Port device team_slave_1 removed [ 631.177687][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 631.196019][ T122] team0 (unregistering): Port device team_slave_0 removed [ 631.300005][ T122] vcan0 (unregistering): left allmulticast mode [ 631.348429][T27911] bridge1: entered promiscuous mode [ 631.364349][T27911] bridge1: entered allmulticast mode [ 631.464964][T27671] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 631.515869][T27671] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 631.599745][T27935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6242'. [ 631.622757][T27671] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 631.660054][T27934] veth0_macvtap: mtu less than device minimum [ 631.710537][T27671] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 631.846752][T27958] netlink: 'syz.2.6248': attribute type 10 has an invalid length. [ 631.890680][ T122] IPVS: stop unused estimator thread 0... [ 632.065926][T27971] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6254'. [ 632.102712][T27671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.125469][T27971] netlink: 'syz.2.6254': attribute type 3 has an invalid length. [ 632.175891][T27971] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6254'. [ 632.188971][T27671] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.217002][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 632.232280][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.239488][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.259032][T27971] netlink: 'syz.2.6254': attribute type 1 has an invalid length. [ 632.281673][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.288865][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.315238][T27983] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.371574][T27971] bond6: entered promiscuous mode [ 632.376720][T27971] bond6: entered allmulticast mode [ 632.382847][T27971] 8021q: adding VLAN 0 to HW filter on device bond6 [ 632.491064][T27992] lo: Caught tx_queue_len zero misconfig [ 632.619265][ T5830] Bluetooth: hci4: command tx timeout [ 632.763741][T27671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.802320][T28008] netlink: 'syz.3.6264': attribute type 1 has an invalid length. [ 632.826118][T28008] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6264'. [ 633.088155][T28026] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6270'. [ 633.100594][T28027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6269'. [ 633.149391][T28031] netlink: 'syz.1.6271': attribute type 3 has an invalid length. [ 633.197482][T27671] veth0_vlan: entered promiscuous mode [ 633.215774][T27671] veth1_vlan: entered promiscuous mode [ 633.257084][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 633.281923][T27671] veth0_macvtap: entered promiscuous mode [ 633.315432][T27671] veth1_macvtap: entered promiscuous mode [ 633.362553][T27671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.393120][T27671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.393878][T28045] netlink: 'syz.0.6276': attribute type 1 has an invalid length. [ 633.425729][T28045] netlink: 'syz.0.6276': attribute type 4 has an invalid length. [ 633.440434][T28045] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6276'. [ 633.507327][T25521] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.540594][T25521] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.574341][T25521] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.599884][T25521] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.653633][T28059] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 633.709306][T28059] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 633.762220][T25521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.789979][T25521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.908579][T25521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.929108][T25521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.203771][T28083] tipc: Started in network mode [ 634.206368][T28085] x_tables: duplicate underflow at hook 1 [ 634.226508][T28083] tipc: Node identity 92bf83f773ad, cluster identity 4711 [ 634.244129][T28083] tipc: Enabled bearer , priority 0 [ 634.297029][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 634.349587][T28086] syzkaller0: entered promiscuous mode [ 634.355195][T28086] syzkaller0: entered allmulticast mode [ 634.362528][T28086] tipc: Resetting bearer [ 634.393589][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 634.403033][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 634.410808][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 634.420269][T28082] tipc: Resetting bearer [ 634.431382][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 634.441802][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 634.532889][T28094] __nla_validate_parse: 5 callbacks suppressed [ 634.532908][T28094] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6292'. [ 634.700030][ T5834] Bluetooth: hci4: command tx timeout [ 634.877581][T28114] netlink: 'syz.1.6298': attribute type 1 has an invalid length. [ 634.885463][T28114] netlink: 'syz.1.6298': attribute type 2 has an invalid length. [ 634.941317][T28116] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 635.337066][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 636.101480][T28082] tipc: Disabling bearer [ 636.132013][ T10] tipc: Node number set to 3776087031 [ 636.279694][T28122] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6302'. [ 636.323684][T28131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6305'. [ 636.376985][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 636.450111][T28137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6307'. [ 636.491742][T28137] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 636.514546][T28137] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6307'. [ 636.537106][ T5834] Bluetooth: hci3: command tx timeout [ 636.541993][T28148] netlink: 'syz.4.6309': attribute type 1 has an invalid length. [ 636.572413][T28151] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 636.577253][T28155] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 636.652614][T28091] chnl_net:caif_netlink_parms(): no params data found [ 636.652997][T28155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6310'. [ 636.721270][T28151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6310'. [ 636.770608][T28091] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.778195][T28091] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.779575][T28165] x_tables: duplicate underflow at hook 2 [ 636.785413][T28091] bridge_slave_0: entered allmulticast mode [ 636.801026][T28091] bridge_slave_0: entered promiscuous mode [ 636.810358][T28091] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.818842][T28091] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.826156][T28091] bridge_slave_1: entered allmulticast mode [ 636.835715][T28091] bridge_slave_1: entered promiscuous mode [ 636.872078][T28091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.885405][T28091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.924584][T28091] team0: Port device team_slave_0 added [ 636.958419][T28091] team0: Port device team_slave_1 added [ 636.989195][T28170] syzkaller1: entered promiscuous mode [ 636.994852][T28170] syzkaller1: entered allmulticast mode [ 637.002110][T28091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.010142][T28091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.039353][T28091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.051489][T28170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6314'. [ 637.104357][T28091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.111644][T28091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.142247][T28091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.183477][T28173] syzkaller0: entered promiscuous mode [ 637.194239][T28173] syzkaller0: entered allmulticast mode [ 637.251154][T28185] netlink: 'syz.1.6320': attribute type 1 has an invalid length. [ 637.285996][T28180] syzkaller0: entered promiscuous mode [ 637.291775][T28180] syzkaller0: entered allmulticast mode [ 637.302058][T28189] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6321'. [ 637.325265][T28091] hsr_slave_0: entered promiscuous mode [ 637.344522][T28091] hsr_slave_1: entered promiscuous mode [ 637.357770][T28091] debugfs: 'hsr0' already exists in 'hsr' [ 637.368234][T28091] Cannot create hsr debugfs directory [ 637.402602][T28198] netlink: 'syz.4.6323': attribute type 21 has an invalid length. [ 637.417081][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 637.439687][T28198] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6323'. [ 637.842506][T28091] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.859942][T28091] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.991303][T28091] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.008031][T28091] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.044205][T28217] syz.0.6330 uses old SIOCAX25GETINFO [ 638.229187][T28091] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.249759][T28091] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.457016][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 638.477539][T28091] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.489653][T28091] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.517500][T28247] netlink: 'syz.0.6339': attribute type 83 has an invalid length. [ 638.618145][ T5834] Bluetooth: hci3: command tx timeout [ 638.695683][T28263] syz_tun: entered allmulticast mode [ 638.745087][T28265] netlink: 'syz.4.6344': attribute type 1 has an invalid length. [ 639.350923][T28293] netlink: 'syz.4.6349': attribute type 10 has an invalid length. [ 639.370560][T28293] veth0_vlan: left promiscuous mode [ 639.379518][T28293] veth0_vlan: entered promiscuous mode [ 639.389520][T28293] team0: Device veth0_vlan failed to register rx_handler [ 639.497010][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 640.002028][T28304] __nla_validate_parse: 3 callbacks suppressed [ 640.002040][T28304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6351'. [ 640.536989][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 640.697118][ T5834] Bluetooth: hci3: command tx timeout [ 641.577214][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 641.646885][T28263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 641.671641][T28091] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 641.709815][T28091] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 641.756094][T28091] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 641.780686][T28091] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 641.948321][T28333] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 641.962810][T28333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.077086][T28339] netlink: 'syz.1.6360': attribute type 10 has an invalid length. [ 642.091234][T28091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.098219][T28339] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6360'. [ 642.191792][T28091] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.191938][T28353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6364'. [ 642.214380][T28353] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 642.244309][T25519] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.251489][T25519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.303346][T25519] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.310538][T25519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.424165][T28366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6368'. [ 642.616989][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 642.729801][T28386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.777214][ T5834] Bluetooth: hci3: command tx timeout [ 642.786815][T28391] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6373'. [ 642.912233][T28091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.040160][T28091] veth0_vlan: entered promiscuous mode [ 643.076416][T28091] veth1_vlan: entered promiscuous mode [ 643.180980][T28091] veth0_macvtap: entered promiscuous mode [ 643.226195][T28399] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.248687][T28091] veth1_macvtap: entered promiscuous mode [ 643.308856][T28091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.342001][T28091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.391675][ T7705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.416233][ T7705] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.450211][ T7705] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.515419][ T7705] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.657042][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 643.710413][T28417] x_tables: duplicate underflow at hook 1 [ 643.719030][T25519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.750457][T25519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.773851][T28421] IPv6: NLM_F_CREATE should be specified when creating new route [ 643.864937][T25522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.882915][T28425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6383'. [ 643.888103][T25522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.041090][T28429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6385'. [ 644.184494][T28442] tipc: Enabling of bearer rejected, failed to enable media [ 644.227986][T28450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6389'. [ 644.288384][ T7705] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.291259][T28450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6389'. [ 644.311676][ T7705] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.337846][ T7705] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.362000][ T7705] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.362093][T28450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6389'. [ 644.507370][T28456] 8021q: adding VLAN 0 to HW filter on device bond8 [ 644.606191][T28456] bond8: entered promiscuous mode [ 644.626990][T28456] bond8: entered allmulticast mode [ 644.696994][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 644.908519][T28476] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 645.704977][T28514] tipc: Enabling of bearer rejected, failed to enable media [ 645.737036][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 646.316438][T14136] lec:lec_start_xmit: lec0:No lecd attached [ 646.332943][T28539] x_tables: duplicate entry at hook 3 [ 646.338601][T28537] netlink: 'syz.4.6406': attribute type 1 has an invalid length. [ 646.383054][T28539] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 646.393912][T28539] __nla_validate_parse: 7 callbacks suppressed [ 646.393928][T28539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6407'. [ 646.409881][T28539] ------------[ cut here ]------------ [ 646.415346][T28539] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 646.427596][T28539] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#1: syz.1.6407/28539 [ 646.437421][T28539] Modules linked in: [ 646.442340][T28539] CPU: 1 UID: 0 PID: 28539 Comm: syz.1.6407 Not tainted syzkaller #0 PREEMPT(full) [ 646.452185][T28539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 646.462437][T28539] RIP: 0010:u32_change+0x1daf/0x2720 [ 646.467799][T28539] Code: 3d ae 0e 43 06 01 75 33 e8 8e 12 0d f8 eb 50 e8 87 12 0d f8 48 8d 3d 70 43 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 80 a0 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 62 12 0d f8 eb 24 e8 5b 12 0d f8 [ 646.473721][T28548] x_tables: duplicate entry at hook 3 [ 646.487548][T28539] RSP: 0018:ffffc90003676fc0 EFLAGS: 00010293 [ 646.487572][T28539] RAX: ffffffff89b8a249 RBX: ffff888035a43c00 RCX: 0000000000000010 [ 646.487585][T28539] RDX: ffffffff8ce1a080 RSI: 0000000000000020 RDI: ffffffff9020e5c0 [ 646.487597][T28539] RBP: ffffc90003677178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 646.487608][T28539] R10: dffffc0000000000 R11: ffffed10170e8181 R12: ffff888035a438e8 [ 646.487620][T28539] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 646.487631][T28539] FS: 00007f14a3ee26c0(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 646.487646][T28539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.487659][T28539] CR2: 00007f14a2f87680 CR3: 0000000069c6a000 CR4: 00000000003526f0 [ 646.487674][T28539] Call Trace: [ 646.487683][T28539] [ 646.487706][T28539] ? __pfx_u32_change+0x10/0x10 [ 646.487732][T28539] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 646.487778][T28539] tc_new_tfilter+0xff8/0x1780 [ 646.487823][T28539] ? __pfx_tc_new_tfilter+0x10/0x10 [ 646.591031][T28539] ? __pfx_tc_new_tfilter+0x10/0x10 [ 646.596239][T28539] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 646.601239][T28539] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 646.606355][T28539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 646.611865][T28539] ? ref_tracker_free+0x693/0x840 [ 646.616958][T28539] ? __copy_skb_header+0xa3/0x4a0 [ 646.621999][T28539] ? __pfx_ref_tracker_free+0x10/0x10 [ 646.627452][T28539] netlink_rcv_skb+0x232/0x4b0 [ 646.632245][T28539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 646.637791][T28539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 646.643100][T28539] ? netlink_deliver_tap+0x2e/0x1b0 [ 646.648962][T28539] netlink_unicast+0x80f/0x9b0 [ 646.653753][T28539] ? __pfx_netlink_unicast+0x10/0x10 [ 646.659591][T28539] ? netlink_sendmsg+0x650/0xb40 [ 646.664582][T28539] ? skb_put+0x11b/0x210 [ 646.669050][T28539] netlink_sendmsg+0x813/0xb40 [ 646.673828][T28539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.679193][T28539] ? aa_sock_msg_perm+0xf1/0x1b0 [ 646.684148][T28539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 646.689488][T28539] ____sys_sendmsg+0x972/0x9f0 [ 646.694278][T28539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.701192][T28539] ? import_iovec+0x73/0xa0 [ 646.705722][T28539] ___sys_sendmsg+0x2a5/0x360 [ 646.710844][T28539] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.716060][T28539] ? preempt_schedule_common+0x82/0xd0 [ 646.721597][T28539] ? preempt_schedule_thunk+0x16/0x30 [ 646.727047][T28539] ? __fget_files+0x2a/0x420 [ 646.731644][T28539] ? __fget_files+0x3a0/0x420 [ 646.736331][T28539] __sys_sendmmsg+0x27c/0x4e0 [ 646.741119][T28539] ? __pfx___sys_sendmmsg+0x10/0x10 [ 646.746333][T28539] ? do_futex+0x395/0x420 [ 646.751390][T28539] ? rcu_is_watching+0x15/0xb0 [ 646.756205][T28539] __x64_sys_sendmmsg+0xa0/0xc0 [ 646.761524][T28539] do_syscall_64+0x14d/0xf80 [ 646.766136][T28539] ? trace_irq_disable+0x3b/0x150 [ 646.771217][T28539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.777070][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 646.777423][T28539] ? clear_bhb_loop+0x40/0x90 [ 646.788847][T28539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.794748][T28539] RIP: 0033:0x7f14a2f9c819 [ 646.799229][T28539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.819019][T28539] RSP: 002b:00007f14a3ee2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 646.827507][T28539] RAX: ffffffffffffffda RBX: 00007f14a3215fa0 RCX: 00007f14a2f9c819 [ 646.835502][T28539] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 646.843562][T28539] RBP: 00007f14a3032c91 R08: 0000000000000000 R09: 0000000000000000 [ 646.852238][T28539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.860721][T28539] R13: 00007f14a3216038 R14: 00007f14a3215fa0 R15: 00007fff92a65558 [ 646.868775][T28539] [ 646.871810][T28539] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 646.879083][T28539] CPU: 1 UID: 0 PID: 28539 Comm: syz.1.6407 Not tainted syzkaller #0 PREEMPT(full) [ 646.888450][T28539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 646.898518][T28539] Call Trace: [ 646.901798][T28539] [ 646.904725][T28539] vpanic+0x56c/0xa60 [ 646.908714][T28539] ? __pfx__printk+0x10/0x10 [ 646.913305][T28539] ? __pfx_vpanic+0x10/0x10 [ 646.917808][T28539] ? is_bpf_text_address+0x292/0x2b0 [ 646.923106][T28539] ? is_bpf_text_address+0x26/0x2b0 [ 646.928317][T28539] panic+0xc5/0xd0 [ 646.932050][T28539] ? __pfx_panic+0x10/0x10 [ 646.936483][T28539] __warn+0x315/0x4f0 [ 646.940471][T28539] ? u32_change+0x1da0/0x2720 [ 646.945156][T28539] ? u32_change+0x1da0/0x2720 [ 646.949877][T28539] __report_bug+0x29a/0x540 [ 646.954387][T28539] ? ___sys_sendmsg+0x2a5/0x360 [ 646.959242][T28539] ? __sys_sendmmsg+0x27c/0x4e0 [ 646.964097][T28539] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 646.969123][T28539] ? u32_change+0x1da0/0x2720 [ 646.973795][T28539] ? __pfx___report_bug+0x10/0x10 [ 646.978824][T28539] report_bug_entry+0x19a/0x290 [ 646.983665][T28539] ? u32_change+0x1daf/0x2720 [ 646.988328][T28539] ? u32_change+0x1db4/0x2720 [ 646.992991][T28539] handle_bug+0xce/0x200 [ 646.997225][T28539] exc_invalid_op+0x1a/0x50 [ 647.001717][T28539] asm_exc_invalid_op+0x1a/0x20 [ 647.006550][T28539] RIP: 0010:u32_change+0x1daf/0x2720 [ 647.011825][T28539] Code: 3d ae 0e 43 06 01 75 33 e8 8e 12 0d f8 eb 50 e8 87 12 0d f8 48 8d 3d 70 43 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 80 a0 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 62 12 0d f8 eb 24 e8 5b 12 0d f8 [ 647.031427][T28539] RSP: 0018:ffffc90003676fc0 EFLAGS: 00010293 [ 647.037662][T28539] RAX: ffffffff89b8a249 RBX: ffff888035a43c00 RCX: 0000000000000010 [ 647.045618][T28539] RDX: ffffffff8ce1a080 RSI: 0000000000000020 RDI: ffffffff9020e5c0 [ 647.053570][T28539] RBP: ffffc90003677178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 647.061528][T28539] R10: dffffc0000000000 R11: ffffed10170e8181 R12: ffff888035a438e8 [ 647.069492][T28539] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 647.077460][T28539] ? u32_change+0x1d99/0x2720 [ 647.082145][T28539] ? __pfx_u32_change+0x10/0x10 [ 647.086979][T28539] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 647.092614][T28539] tc_new_tfilter+0xff8/0x1780 [ 647.097384][T28539] ? __pfx_tc_new_tfilter+0x10/0x10 [ 647.102614][T28539] ? __pfx_tc_new_tfilter+0x10/0x10 [ 647.107800][T28539] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 647.112724][T28539] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 647.117818][T28539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 647.123257][T28539] ? ref_tracker_free+0x693/0x840 [ 647.128263][T28539] ? __copy_skb_header+0xa3/0x4a0 [ 647.133276][T28539] ? __pfx_ref_tracker_free+0x10/0x10 [ 647.138637][T28539] netlink_rcv_skb+0x232/0x4b0 [ 647.143388][T28539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 647.148831][T28539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 647.154106][T28539] ? netlink_deliver_tap+0x2e/0x1b0 [ 647.159294][T28539] netlink_unicast+0x80f/0x9b0 [ 647.164058][T28539] ? __pfx_netlink_unicast+0x10/0x10 [ 647.169334][T28539] ? netlink_sendmsg+0x650/0xb40 [ 647.174257][T28539] ? skb_put+0x11b/0x210 [ 647.178488][T28539] netlink_sendmsg+0x813/0xb40 [ 647.183244][T28539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.188515][T28539] ? aa_sock_msg_perm+0xf1/0x1b0 [ 647.193447][T28539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 647.198722][T28539] ____sys_sendmsg+0x972/0x9f0 [ 647.203483][T28539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.208759][T28539] ? import_iovec+0x73/0xa0 [ 647.213249][T28539] ___sys_sendmsg+0x2a5/0x360 [ 647.217918][T28539] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.223194][T28539] ? preempt_schedule_common+0x82/0xd0 [ 647.228641][T28539] ? preempt_schedule_thunk+0x16/0x30 [ 647.234016][T28539] ? __fget_files+0x2a/0x420 [ 647.238590][T28539] ? __fget_files+0x3a0/0x420 [ 647.243255][T28539] __sys_sendmmsg+0x27c/0x4e0 [ 647.247921][T28539] ? __pfx___sys_sendmmsg+0x10/0x10 [ 647.253132][T28539] ? do_futex+0x395/0x420 [ 647.257473][T28539] ? rcu_is_watching+0x15/0xb0 [ 647.262233][T28539] __x64_sys_sendmmsg+0xa0/0xc0 [ 647.267356][T28539] do_syscall_64+0x14d/0xf80 [ 647.271936][T28539] ? trace_irq_disable+0x3b/0x150 [ 647.276947][T28539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.282999][T28539] ? clear_bhb_loop+0x40/0x90 [ 647.287674][T28539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.293593][T28539] RIP: 0033:0x7f14a2f9c819 [ 647.298001][T28539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.317588][T28539] RSP: 002b:00007f14a3ee2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 647.325990][T28539] RAX: ffffffffffffffda RBX: 00007f14a3215fa0 RCX: 00007f14a2f9c819 [ 647.333946][T28539] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 647.341903][T28539] RBP: 00007f14a3032c91 R08: 0000000000000000 R09: 0000000000000000 [ 647.349863][T28539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.357831][T28539] R13: 00007f14a3216038 R14: 00007f14a3215fa0 R15: 00007fff92a65558 [ 647.365801][T28539] [ 647.369184][T28539] Kernel Offset: disabled [ 647.373534][T28539] Rebooting in 86400 seconds..