last executing test programs: 2m42.713102051s ago: executing program 0 (id=2131): r0 = socket$unix(0x1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x62}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 2m42.637629539s ago: executing program 0 (id=2133): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip6gre0\x00', 0x2000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xffff, 0xffe6}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x40014) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) accept$netrom(r10, &(0x7f0000000400)={{0x3, @null}, [@remote, @rose, @null, @bcast, @bcast, @default, @bcast]}, &(0x7f0000000200)=0x23) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 2m42.109555376s ago: executing program 0 (id=2144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4814}, 0x4008014) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8090) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r7) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="65572abd7000f900002504000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r8, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) unshare(0x20000600) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) read(r9, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f0000000140)={0x1d, r12}, 0x10) sendmsg$can_bcm(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r13 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) 2m40.234202655s ago: executing program 0 (id=2157): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x48) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 2m40.10357391s ago: executing program 0 (id=2162): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000440)) write$ppp(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2m39.820400757s ago: executing program 0 (id=2170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x651d7466, @link='syz0\x00'}}}, [""]}, 0x68}}, 0x4804) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r3, 0x8, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae00"/24, 0x18) (async) shutdown(r4, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x30}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0xd4, r7, 0x60c, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5ec}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000002600010008bd7000fcdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 2m24.762854687s ago: executing program 32 (id=2170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x651d7466, @link='syz0\x00'}}}, [""]}, 0x68}}, 0x4804) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r3, 0x8, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae00"/24, 0x18) (async) shutdown(r4, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x30}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0xd4, r7, 0x60c, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5ec}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000002600010008bd7000fcdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 2m24.478399212s ago: executing program 4 (id=2426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) setsockopt$sock_int(r2, 0x1, 0x46, &(0x7f0000000100)=0x8, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000180a01010000000000000000000000030900010073797a3000000000140000001100010000000000000000000000000a7a45588b29a2e7693500fc9049a4901d708b4981aeaed7b1a31ca70b27af57afa79fbd3cf8b2c653bdc272b89f4ba4510df8499716edef9f97c1d2ba98a5201a570705398c43a0a91b54db4ef60a70a5c3691d2071c6b0adaa3a5cc2351d27c249e1c430fce94ecc503154cd8bbf596c60a4544d0e5c5bfb765307992a338f1c0cdd1e8f2c446635399fb092965dabc9"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x14, 0x30, 0x200}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x24000000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000104050000000000000000000e00000405000100030000007d27b7b90a06b3458940570a520686696ca69a21b4231d48f4a1d77c5365f35e1ac4141f19c9aad6e50fe531f7cb82a55d2b608f4b3dae7ed742c5bd541e5e9271debca44349a48919f9f5341ce8583a7b0cb46bf6f1cced69ba9b09c7c7c10ad2debe167323ce1c05c9840c4529de8db1d91582313891e6d59c0a4bde8b001fe2a872928e010000000000000002efea5a9102a3fb80e1932249d08200000000000000"], 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000200)={0x4c, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6aa}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x297}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4048881) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3000000040000100fcff0700fedbdf2501000000040047801000018067ff108008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="4bfa3e530251433ed4abfe2b3ae292ce6d6f11a31c82a8ff54d6e1818e6019a29d257ea9fabaad04007ca2670fe7d3b3bc4cc315acf9d2e459f6a2328edd10979735f06b9bed45c12109a72e72ceb3d1c27244f20c95cf7b1a478b0a7ca6713e25e34a5ce4e68576aa6ee164157266849e67c7c0694759cd68da7cdb20c4c0c934e2c774f330a6ed"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000500)={'ip6gretap0\x00', @remote}) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r11, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000600440000300012800b00010067656e65766500002000028005000c00010000001400070000000000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r12}, 0x18) sendto(r1, &(0x7f0000000900)="136eeebdabd1e330c99ef9f5bbdaf05fa5cedf12bbffeaecc55d4925c2f2c0ac265efe0fcef781627d7b9b2e9bbd7bf11ba477654827257b917f10caa359037aef44430a6a48abe5f2edbb747b41e3601081465d70edde4fa01529ab6a4b4374c6c1e932a5d2140cecd298cffe95f2bb9298c374003b3dfb88a895cfbc8912724386dab743d89dbffdaaf1824a1b13bf3d471d6b645f861e3c9564fe843b43486aac00000000", 0xa6, 0x48014, &(0x7f0000000440)=@qipcrtr={0x2a, 0x2, 0xfffffffe}, 0x80) 2m24.050000415s ago: executing program 4 (id=2429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b000000072000000111f072c000000001", @ANYRESHEX=r0, @ANYRES8=r0], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000840)=""/171}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={r0, &(0x7f0000000740)="7049aeafa72ba2675055fba093030037aaf80ba1936f6be0146ea3ccfe26f56b16ff17c62c6c09442e706e0368988109b496ddbfa97c4a2fc4bbad3f72aa084a15749b5358d700c08cc0f6d5d6f212d2659cd54725fe9366a64ca723895e302e9d7484400eafe93c5177c7fb68f0bf8f713bcc666c88d4137ad7d0ce2d825d755475440a4a4ffa", &(0x7f0000000640)=""/24}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000000006ca153ff459e321be69d6a5abd8854eff37ecea0d04729f7083b8bb2d494c2bf0c2a47cc13e0bed78645b403fb9ed7615e13c2d638542262c5e4b", @ANYRES16=r3, @ANYBLOB="04002cbd7000fedbdf250100000006000a004e23000008000800ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002000010027bd7000000000000a002040000043070000000014000200fe8800000000f000000000000000010108000d"], 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00001d670000000800400070c1a75e08680100", @ANYRES16=r5, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32=0x0, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket(0x26, 0x5, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r8, 0x1, 0x4, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r10 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{0x0, 0x5}, {0x1}]}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000001100000000ff0000080001"], 0x20}, 0x1, 0x200000000000000}, 0x0) write(r10, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070200003900000000000000080009000d000000", 0x24) 2m23.984898617s ago: executing program 4 (id=2431): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="052b33d061000016300012800b0001006272696467650000200002800c002efdffffffffffffffff050007001f"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x3c}}, 0x0) 2m23.895693796s ago: executing program 4 (id=2432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) r1 = socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x4) r5 = socket$netlink(0x10, 0x3, 0x8) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2m23.840113643s ago: executing program 4 (id=2434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x49}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) 2m23.77551839s ago: executing program 4 (id=2435): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) 2m8.164648202s ago: executing program 33 (id=2435): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) 23.187906077s ago: executing program 2 (id=3922): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000010003704000000000300000000000000749c5d0b929cca13e84f98fb497628f76c40e145d4061af0886dcc76474d39532d23304d626fb911878dd0476e7e4148e21b9006395642e5abe8a8024207b6a6e87119e5ef6c8d45a08447bcce064308655d07f1bc1632b32dc94ba0feaf70abd7bc6004e5", @ANYRES32=0x0, @ANYBLOB="3040040000000000"], 0x20}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002000000000000000002000004680800000000000001000000000000000000000001"], 0x0, 0x4a}, 0x20) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, r5}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, r6}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r8}, &(0x7f0000000400), &(0x7f0000000440)=r9}, 0x20) (async) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x6, 0x3, 0x5, 0x60000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_getnexthop={0x38, 0x6a, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x200440b4}, 0x4) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) (async) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000200)={0x2b, 0x2}) (async) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r13, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 22.88592406s ago: executing program 2 (id=3928): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000b00000000000009030000000b0000000000000a0048e9850000000000"], &(0x7f00000006c0)=""/211, 0x35, 0xd3, 0x1, 0x3, 0x10000}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000340)=""/215, 0xd7, 0x0, &(0x7f00000002c0)}}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r1}, 0x8) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0xe, &(0x7f0000000880)=""/4096, &(0x7f0000000680)=0x1000) (async, rerun: 64) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async, rerun: 64) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000480), 0x10) (async, rerun: 32) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) (async, rerun: 32) sendmmsg$inet(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) (async) sendto$inet(r3, &(0x7f00000001c0)='l', 0x1, 0x24048015, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x7, [@enum={0x2, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x7ff}, {0x5, 0x8001}, {0x10, 0x5}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x5}, @const={0x7, 0x0, 0x0, 0xa, 0x5}, @func={0x6, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61, 0x61, 0x2e, 0x61, 0x30]}}, &(0x7f00000007c0)=""/134, 0x67, 0x86, 0x0, 0x80000000, 0x10000, @value=r2}, 0x28) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv4_newnexthop={0x1c, 0x68, 0xefce5d6aba1cf00f, 0x70bd28, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x58, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0xc, 0x9, 0xffff}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 22.831514502s ago: executing program 2 (id=3929): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r2, 0x4, 0x4, 0x7, 0x9, 0x28, @remote, @empty, 0x8000, 0x1, 0x5, 0x1000}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x40800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x2, {{@in=@multicast1, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r11, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r12) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r10, 0x1}, 0x1c}}, 0x0) (async, rerun: 32) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r8) (rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x4c, r13, 0x830b318aaeefb05f, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2b3ed946aae2d0e9}, 0x2040010) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 724.294759ms ago: executing program 3 (id=3933): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100"], 0x34}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 717.23716ms ago: executing program 2 (id=3934): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x25, 0x80000, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) 716.531454ms ago: executing program 6 (id=3935): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x8d, 0x100, 0x66, @mcast1, @mcast1, 0x8, 0x7, 0x9e90, 0x8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, 0x24}, 0xffffffffffffff66) r1 = socket(0x1a, 0x80000, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 714.944171ms ago: executing program 3 (id=3936): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x56) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) close(r1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x88113, r0, 0x7bb7b000) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000180)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000000080)={r7, r8/1000+60000}, 0x10) 713.854616ms ago: executing program 6 (id=3938): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060200000800020011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000640)={0x1, 0x4, 0x7, 0x311c9c03, @vifc_lcl_ifindex, @local}, 0x10) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000640)={0x1, 0x4, 0x7, 0x311c9c03, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000006c0)={0x0, 0x4, 0x8, 0x7f, @vifc_lcl_ifindex, @empty}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0xe000000}]}]}}, 0x0, 0x42}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0200000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000e7ffffff000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000100"/28], 0x48) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x74}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x30}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x1, @mcast2, 0x6}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet6(r5, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) syz_init_net_socket$netrom(0x6, 0x5, 0x18) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x18) 711.338683ms ago: executing program 3 (id=3939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6_vti0\x00', 0x8000}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x68}}, 0x40801) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6_vti0\x00', 0x8000}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x68}}, 0x40801) (async) 710.214045ms ago: executing program 2 (id=3941): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xffffffffffffff40, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) 706.2175ms ago: executing program 1 (id=3943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfb0, 0x1e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x81) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}]}, 0xd0}}, 0x81) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f4, 0x1, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_NAT_SRC={0x84, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x5, 0xff, 0xde, 0x8001]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_TUPLE_MASTER={0x80, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x34, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3ff}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xde82}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8001}]}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x19}}, {0x8, 0x2, @private=0xa010100}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4}, 0x8080) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000700)={'bridge0\x00', {0x2, 0x0, @empty}}) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000038c0)=[{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000740)="eb468470101ada49308c38eb09d53beb4655001c9de94f741234d0fa0d59b060d843d96ba54022d47ef796541046d8e1df883363d2ab50f2836ac3be73d57ab6c651ed3addfb14f6188d3dd9a0913d2f997ea866275f00d0724f408e794ac6a0114e4606", 0x64}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="cbaf3b61ab26604756fd82a80229d2ae045148b3225faa7839872852d9474266cfd8781b3cea99347b0487e12a20bb238e31103b1287d6173612116ae3c3ecfc5c9c273d6cbeeab0e9494900cbcfc23a9acf4de24cef85dca2d52d7808fdcce06c3ab22a68dd82d6a61089affbb944bfba362319a5b4c7dd9add33459b9931505579691696b68e82567c0c548552c0993ebc48f3f487ac5aa2ed1fb4ba545df367043eeb80db68243b53547c", 0xac}, {&(0x7f0000001880)="ce8e41fcbb74042a0ea5a267b85920eef855ba37503c2316748400eb9b023791a72138863506deac303c528ad7234de7bc05b0da", 0x34}, {&(0x7f00000018c0)="41d5eea92b0af5965b95e3dd9ed6858eb99a6bba032ed2af41e1ef96b9606515fea7d5651a8377cb32a305", 0x2b}], 0x5, 0x0, 0x0, 0x4000}, {0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001980)="c7704b220ec08a8fe16c47dca230c0c2ad572a170c66b76b91f6bcf7425d992f275cee2933c27436d3de37d0996740b41e7eff2a1de4f163e86dabaa31ec6cb38b1799013f37bfb416e1d8aec02fb606e8e19c6d88314bf7898d5d88359eba6a6b85ce73522a01b7d788292090634c56c8600b53546121072d74be2f52c88cee7f71a16ae07be1f895382a45fa3f7770b75ad3be43ba726060cc3246e3baa639bee350c4b25433dddb28711d6e6d5cf0ffe1c2322b16b779cbeba9d61bc9ff9e16bc6e9ba2a34b4d3f8a794a64d1e6569acd6bd891333f356325e5aab6b9c448a405c4ac3c5415", 0xe7}, {&(0x7f0000001a80)="320bc9dcef814e5fa41ed22e87e2d5fa5239436c423642ca721425e9c352310e428e354de9ccfef8d71161536272e4694be87ec376dcd57f1d557c35a44baeb92d54039e2c548d0597a10a89504bcaa1aead4d6de4acfeca4aae657e8f18c32fc3a92cd9ee96853a1ceb4af25a1f5e8f1b5fd61308fe484eb174e5a36e3591be09621017c9da258e13ff838d3c888defbf3c32fa460f43c4bda77a92cedff2dd5e087852945cb0b90b71b7c2c8d07e71da00727248753c98c60e716d23", 0xbd}, {&(0x7f0000001b40)="7243d093b6607e7d9e86e7cbfae8a5b8c34e51b409f62150373c9c42ad6e074e4225e2704e515fb0fb2ae39697d2f99a2d676a198b3ab3", 0x37}, {&(0x7f0000001b80)="177cb31a9e876038fe332f197c739405a9f7c91a21d263d47381360f6f46b55f56236aabf94a7f5324df6e7ac8e9ebaa9a5aefa2ff624a94180c7037b4bbfd87eba6308eb3ba57f51389b90d376a62fbf453bb33044925e7573170dc966ff42d5a6bee6549727614c8d0e5b0dfa2cfc0", 0x70}, {&(0x7f0000001c00)="6aee4bd8e950ffc1b506d05c2aacd4813b8ca66bbd9096d6b6557265bddb9c0fff2b4eb64bbfa946f03714b847c1f8c31067c4bf59a372af658e43efda8c6cf5b64c9e878ff4e5061f744abb4aa87777dfb2561f9b2f29783056d9054e3fbd65acdd41c0a8e28afe21e54cf1f0b0e882d170ced853b29d0bd2572ca38c9ebd49dae2c6", 0x83}], 0x5, &(0x7f0000001d40)=[@op={0x18}, @iv={0xc0, 0x117, 0x2, 0xa6, "c58e2d0a24df27a6e1894395874c782a89dd14e6d1ce44f3a56cedfdcc37465addd5a44292efd142d07235f13279e1760d9c3697a2209a1c247e853736858e4ee6a82f2c78adae66ff620b041f938eba2bdc94b398640eaed7d25d13fc179e50094a7ef03755eec347b2bf3c3a8dc65ce24dc3609cabba810b07287b51b6f5a99b95b57830d90e363acbbfaedde2be7e0f4666a4d78eea810773ab3573c8e2f380e7bdb959a2"}, @assoc={0x18, 0x117, 0x4, 0xeed4}, @op={0x18, 0x117, 0x3, 0x1}], 0x108, 0x800}, {0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001e80)="591c84b9e51047b469e37c8b5a9036053d0396d56ecdb6f6af3827c17e074deaf2adf2f66be6a3d0bfab6424b0f94b757ded7110c0300b0a4ef9ad4e9714d41e1e6c9c3bb840cef6e882cb0f88ce71d19e6e950d9e", 0x55}, {&(0x7f0000001f00)="9aee56c6dc5b95bee54dd9c04c59159ed8a905ea6b9b531e1254c57a5c06e140864bc69385286e1523237ba484d9c7020b6b76dd3532606924e5b8a1c959df17c8f1391699398faa0b6e457b1b14d16342", 0x51}], 0x2, &(0x7f0000001fc0)=[@assoc={0x18, 0x117, 0x4, 0x6b845d68}, @iv={0xe0, 0x117, 0x2, 0xc8, "70f9572206f199e3eac68d460edfefd09aef86cf1266fc5050993e9417c2c5f21ba771807aab65cd65af9dfa20fccca2743a14ab16986fbc36aeb3ec07de40faeb5bc89443eafc102dbf778d00282a3bdeab39fe4fff99c998dd867304bef997b32a99825cb6bbe2dabe3e237cda8a468c85ee7c33e4c5298701ad1e442132637a069c9c3868400d6d41fed8d58089af7dfd5e3b9186ee618b1323e9d940d0c3dbeea23f5a44191a48164d4863be81547a121fada0e1aad57b4afab6010c01f728d6cbea365d8c04"}, @iv={0x40, 0x117, 0x2, 0x26, "3649355993de911d1dc029b50cd26cfd5e6b026fb5726a3a39dd4f0e062eb312c3c6a88186f9"}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x150, 0x8880}, {0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002140)="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", 0xfe}, {&(0x7f0000002240)="88316e0d99378a6e2600b263e51b6ddf81ac9a5e76b571c394f5336d2b81ffb03186776af5abf067001a30ef9a91c4eddc391d2b944caf2eb9468e3ebd5e6565e74c596b9568ceaaefccd9eaec7df831243dfe98c120f668b59b1e80c291b7197c", 0x61}, {&(0x7f00000022c0)="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", 0x1000}], 0x3, 0x0, 0x0, 0x24000000}, {0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003300)="7c01fb6bf7a17759874edb3e548ced0af7983ce1961a8b02ddb6618f6f9f8184bec76bebabb30dcd0a2f28276ce8ac92b7896c6189d10210c8796fdc88606a798f1ed8c4fff9b4cc519090e491ab6f11a7aafddb1607ce55bc416ad69938ead4", 0x60}, {&(0x7f0000003380)="18e5bcfe7a913fb6397b79d2180fc1ae4eaac24f12bccaf91f3426b29bba81bcb50170e9e733ac31f6e1342564959e0a89e53981cb93a89753b4f485f7e72ebdab8b28b3d5676cf9323cbeed4a687ef53b0d8aa6ebfd35edd2d330e4ded4e58c2f8d7ec1ea763d6650e3b6fca1e6a83bf14ec790f58cf3d76a479456d5409427a10fe19697d87af85601da94ad838fda657948336499dab0feb04694661da4", 0x9f}, {&(0x7f0000003440)="e1fcdb908ba183551d3daf9cd07d874d7414a91d59793dad0e8b741c79cf949fb6076d1557b7bf126b6718a27d933b50a6a848cf878827fd5def7d197fd6ff94222f3e614e010ff4796bc2f9181952c7e812eddb503eb0d0f75a6e0499558dc7df08e5126375356c923e1d3b17f1bbdf0b4386fd313b35072699574bc8c4dd71f05e38d87939df750517c58db21023f9e94af709699a1112d5dfbf7a3e2a54d333cdc2d741d78d", 0xa7}, {&(0x7f0000003500)="1cbf21af4f43858d732820524b50", 0xe}, {&(0x7f0000003540)="297932207962cfe156c4486ed40887fa45e78ee7253f0088c5d98b21f57fb84c52c4a9c38a76e26b828a9ba9648efd1a0dbefb115e281ea0c04e6746edacee6ef8b2d89041a861be4550fc7460f68b155c996c8ec404f527967c22dddaed48d532f4fb971a4543e7c8c7d87c4559976783b14fc2fbf81fe50c5097a4883997501eb0e2c1c29ef813fb94edf58653a3914ac2f5d1c07479623e54ae31f31ddae7c3f58410f33e419a3bb68e923cbe015106407beba752e2e59b73f2e5d5ee17fde4a6039d6fecd94eb62659a81eb4b951e1b8294dae730026b24756c240e07fa6e46677101cadb69c889a4e2cbd81e78669771a415ca188", 0xf7}, {&(0x7f0000003640)="1770c52e11c5a35e39940c41ff1fb3df59cdc52343fab8d8c8dce2c8748cac50e37d9587a4427c019d90570f273435f7cf6d561be44eeb5d4d8efd0c42751319de", 0x41}], 0x6, 0x0, 0x0, 0x48010}, {0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000003740)="e61be8945ff43223d0a445d55ffae9c8f90d85ef6c65fdcc0593d78f2f7e6ee64a5fab3bcfdba03220119c2fd7fcab525fa39290f76004a7987e1ce71ae0f9155c09f50291eeab929e3c1ab9c035aab99db2bc5009eee0d7034e31cc76b7417cd18408e75ff4b5f43ca1c7331dcbd5d41aa2aebff73d533205503c07ba7a78e253431734a9d53e4d56050d32d3d0b7b8be70ddb26174b3574b3caba278bffdb93ff92f9b91ecc64a1f2317efeb20bf04e12164869bed7a778403044b4cdd941a18a050c8fd51ef1461f45f7a8fc37cb539cc40004d06e62f5982ad4d32f58d259779a207309ecf09e14236da5e8d", 0xee}], 0x1, &(0x7f0000003880)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x44810}], 0x6, 0x3edb48d1afffa813) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x2c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x48, 0x59}}}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000003c00)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x2c, r1, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c0}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000004c40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004c80)={'team0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000004e40)=[{{&(0x7f0000003c40)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000003c80)="31986c9e4245303e8fcbecfbc66329bc43d6a7570ec24a54d25bcf5b6c4f9d73a9a33e8d27ef0be73905ff2dcaf412ea8af998fbf130bd77763b07ba377f7c6ebc1de51827fd604243ac155f76dd689b0f4041", 0x53}, {&(0x7f0000003d00)="03b729d738c6e88135f2ff07017df7c386483f0ac76c4f6f3dc478cebb9ea43f99caa87a06bbc4386a272aff229c460291144ae45116518981c6846d51fd38425297cb5059ee42d7c5102b62217a3c62a4b9f4d0f06d76d826026d1e80b94399f4ce1adbd06170ee6269d4274e633c3583f32ed08d27337c358d4aa7ea", 0x7d}, {&(0x7f0000003d80)="669abe8c3db7fa4f104335cb00b64d5af3fa877441e4b0887ad47ba8d43376a03a2374bd71009d4048808113ffab3b415f2edc66eca7e51bdc7a132e52ac9871e0c12b56160b1fde5214dd02db88787349e5414cd3545e719be9503ebd572d77b70838291a6121296fa1ae06aed2c832310a7d5c6b603de4ccae634a427d92ca0591e012b5f7a1acb7c72824f26277fb4b1d6f147e5a5296887af8f821ae89bf49adef9f0f983b3f415e9498dc23e78f0985eee51cfe", 0xb6}, {&(0x7f0000003e40)="856fb3cf10d55410465a3c04149b9ead63b9aca0c3bf7a5810f2419af19d518e01a62220d302fe95f5ffbc1c85b3e46306cf26a8d7bfae4e3cb105fbc3f7371e78c37760cb05e41a6a793f8e3f19ca8234f8fe80812d5aa616c18bbe784e327ec7125064d0ca0eeec0435b6cfc239715a03ed8e27825b2cc", 0x78}, {&(0x7f0000003ec0)="f144a946e0c515479c78de24814fe5ff4b370ffcae42e7573cff2ad33bb70aa6af9de84548484079ad87bc7bbc6bf421ac1fc77872cbdc", 0x37}, {&(0x7f0000003f00)="5ca715352ce2c14d77cedacbe99bd1127f9599e49fda05db993f38fe47d0e984c2c208945ccc0e7c5acb68fb9dcf7c0125c2501e793e6febaaf009311e3785489d94a682b2efcc", 0x47}, {&(0x7f0000003f80)="2acb582d93ce53a40780c0f5a0547e105f35a255ccf70e369653f2709b7af1033abca3fb62d040c23281e72a078373d2438d08a89f18968847d5ffc7296bf4f1a8dcd48bc54c175879f6b7b7c1bf", 0x4e}, {&(0x7f0000004000)="4878e513a7ce97f9654ecb55e0c99a9107a24afcb9c37ff271671b79014f1343a92a34cba0336fc8e39033c9e2d4499a83bfbe9225121981e645309961330cb0b4ec64abd8ae6218b02072267eb34589f9e9d16dceb5906dfa44475ea9edf9", 0x5f}, {&(0x7f0000004080)="4030fae1b07643e036065ca8424cee73b165e6e7", 0x14}], 0x9, &(0x7f0000004180)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}], 0x18}}, {{&(0x7f00000041c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000004400)=[{&(0x7f0000004200)="2c997c81f6a38433eb72d82e5bade046fe7858f4746ea8926b4d92cd5d45da5a70dc8eb3c0559ddfaccd50ed02fdefd8d207005c0084ae85dc2c56de384abfc380e5d25ec113c77666a8683c", 0x4c}, {&(0x7f0000004280)="62e1965ddacb8ce0a19666845a1afb4d3c852a5629d7e03536740e6064ab354f3c74b1aeacdc21de67dcd3b655b075e7cffb47f6e9fcdfdd54a153dff07f76fd4ab3420dbb331b8fe4b2020c1652dd14e9cb4a07cd9ec964c89fadb97dc6384f6aaa689551d3605532ec41f490995185742c4d30b0bdc9cc91efaeb23f49367982f76a529a285ba72f8502bfacdc6cc19ace7811fb09d070b99f4c3329f4bee38bc6562a8a99b3012bc1e3e28da56e8564a37b612531d52ea87596c391e8a5b8a1a36899a654325b8eda9a", 0xcb}, {&(0x7f0000004380)="a3f520bfacff146f31d99db3186d5a46cf11b68ce123eb5ad58acac26d1ac8bcdcc8d874a3197ff19a684e5fe207f01d71490693696a9421c9a824437524c2088fa568325d98829c1bab5adf05522f4a242d6b730b72f4be7e63e82540e7edb2d600a86a087f0151e4a19e5d7d2734660fab8a", 0x73}], 0x3}}, {{&(0x7f0000004440)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f00000044c0)=[{&(0x7f0000004480)="ba867fe9966a1d916b639e55e69e", 0xe}], 0x1, &(0x7f0000004500)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x58, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0xbe, [@local, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @lsrr={0x83, 0x17, 0xe6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @lsrr={0x83, 0x7, 0x49, [@remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0xf0}}, {{&(0x7f0000004600)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000004940)=[{&(0x7f0000004640)="d5a3e08a510cf045ae16a772d3af74257f9d4701be324a5b5e0fb5762eeaeaa2afd3af6a657f8600697ecbb35b607f25d22b70f6260017e60999782d79f479bf1c1438a3f0deda5f0733de9314a07b37d2f047e8943a7e8b1d1273ef2dc4e3beab8ad5a41c91ce88b434e0a103b066d9c896455028f1de250cd06e3b350ef2d725f15ddaaf5731a9fe8011571655ebd409e136d667b70ecf9953aea6e6f640c2f9ec0bdfaa4f9dfa4d868850eade671fca4fbff9ff11da53db75fdcedb5eac4ff4950bc5ab60abdef1b2a195e5216a7c96f08273ebb0b1359f150506e269d3801e85db927c61be8350", 0xe9}, {&(0x7f0000004740)="3272170d6fdb2123dfe2438d5d85499d72b6a31e7860de39b73e939334d72ea7dc1723650a954fe09fc13dcae2612e14cc197f86db0b7e6aec1808d426207dd03eeac7b37b2376c8ea56", 0x4a}, {&(0x7f00000047c0)="c861d2a378d1c82b6694da8a48cabf0a4d0f9cef81831e284e71d0268dfa85b9e73930c25fc5a8a245fbbadd52b9e17342535bdde09be466169254a66d75702712b108d569c01263ec5e84544883", 0x4e}, {&(0x7f0000004840)="0c3b0c2ac725796b0770292dbdcf210d3a97d700eb56f29b4d9975bd9dac33291cc754546555e6ef5cc08c549cf40737348841dcd7021d248eb4f847c9096f38bb8d4ab539ea6bc1892fdbc47b78ed3db1a4a4a5407f67658a9ab8558265368d7e350e55f8152367de56ce217c59cbac7aa660ccc83a7e392a7534672cc9dc79215e14482841bfea711688ee01bf320a1072a59713446f6b85f6c164a7b383b61ba32a69ad3d0b43fd47756f3e68518ec54979c6f5ff593dde2736480b29a129a92fd0094f8e3ecc777f3bc2eec753a168", 0xd1}], 0x4}}, {{0x0, 0x0, &(0x7f0000004c00)=[{&(0x7f0000004980)="d9c3dd17d2a89c6159", 0x9}, {&(0x7f00000049c0)="844445ea46b9ed27ae17f129b98145c8824ab71580f7d42c6ddfeef2c50c68558e933dd3e285846b2f8dab6efe863086eae43ab20ff84f", 0x37}, {&(0x7f0000004a00)="02ffa14f385337be463984e1d4f448bbbfa7184a8b371211dfbb9378515bdc5128e7d83739a8b59f996274b7a5d66cd5dadd73f19b3d8d5fdcc99c38860c6e7af8fe94c7fa8f7a4a619e3cf252c6251bb8e433652b4e17f2012e4788a56c1bcadf53fd6584c7ec928a3e3329870fbb073fda47fcbdc0981cd6cbb01c7633cdf371d39ff5940f13aa35f1de70a7739947c889bdfd0dfee9cbc2e7d67aa934f38f88b2d8f8bb91d365db7b60be097ad669afebc71be57327c7ef1d052ebecf56229f814845", 0xc4}, {&(0x7f0000004b00)="74ee12e979851ae1b509cb76262660be6050c45533d2f5fcd4386ef9f76b0d7bfd6d2ede6a4eee1abca84fc46985391ebafad2ae6dce4f2b39daba0bee08b3a51233ac833585498946ab3b3064affdfbda0342f462348ed6bcfe1202f52a261b7827721039e6c7cc0463daf0aea0f9ba198cf8e6c80029e862a6e719801b636207cae43ac56543db8f8732966cc7e6e66ce5ae38b2aff0725945d5ab88b990a4fee15deed4dd4260220114db3f415cca09b619f22c7050192a3ffa6892b1f6ab03dd60fa8b", 0xc5}], 0x4, &(0x7f0000004cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @rand_addr=0x64010100}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x1e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0xf}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x31}]}, @timestamp_addr={0x44, 0xc, 0xe0, 0x1, 0x8, [{@multicast2, 0x800}]}, @generic={0x7, 0x4, "52ea"}, @generic={0x83, 0x9, "4e720c671c0c6f"}, @cipso={0x86, 0xf, 0x1, [{0x2, 0x9, "c44afce189e2a6"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @loopback}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff01}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x150}}], 0x5, 0x2400c000) syz_genetlink_get_family_id$wireguard(&(0x7f0000004f80), r0) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005000), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000050c0)={'syztnl1\x00', &(0x7f0000005040)={'ip6_vti0\x00', r8, 0x4, 0x1, 0x8, 0x2, 0x4a, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x80, 0x8, 0x9, 0x7fffffff}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000052c0)={&(0x7f0000004fc0)={0x10, 0x0, 0x0, 0x75d97c15413e3169}, 0xc, &(0x7f0000005280)={&(0x7f0000005100)={0x174, r9, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x174}}, 0x20004041) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005300)='./cgroup/syz0\x00', 0x200002, 0x0) close(r6) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000005400)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000053c0)={&(0x7f0000005380)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x48}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000005480), r6) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000005540)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005500)={&(0x7f00000054c0)={0x38, r11, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004015}, 0x24004008) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000005640)={&(0x7f0000005580), 0xc, &(0x7f0000005600)={&(0x7f00000055c0)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xa02c, 0x4}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x30}, 0x1, 0x0, 0x0, 0xc814}, 0x800) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000006800)={&(0x7f0000005680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000067c0)={&(0x7f00000056c0)={0x10dc, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6ba, 0x3f}}}}, [@NL80211_ATTR_TID_CONFIG={0x6a0, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xeb}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xaa57f3e3c7f5325}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x56}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x4f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xedc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0xaecf, 0x7fff, 0x7, 0xf8, 0x7, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x2, 0x5}, {0x6, 0x8}, {0x1, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xeb0, 0x3cfe, 0x4, 0x5, 0x8000, 0x6, 0x8, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xee, 0x0, 0x6, 0x6, 0x9, 0x2565, 0x68]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x0, 0x8, 0x2, 0x3, 0x200, 0xeb, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x0, 0x4}, {0x2, 0x1}, {0x4, 0x6}, {0x2}, {0x4, 0x1}, {0x6, 0x2}, {0x6, 0x5}, {0x5, 0xa}, {0x2}, {0x3, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x3, 0x5}, {0x2, 0x7}, {0x4, 0x5}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x4, 0x60, 0x16, 0x2, 0x36, 0x14, 0x24, 0x16, 0x60, 0x17, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xf, 0xc23, 0x8, 0x0, 0x4, 0x3, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x1, 0x1, 0x9, 0xdef7, 0xd5a9, 0x14]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x0, 0x691d, 0x2, 0x400, 0x4, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x7d, 0x30, 0x36, 0x6c, 0x2, 0x6, 0x30, 0x2, 0x1b, 0x1b, 0x1, 0x30, 0x6, 0x18, 0x18, 0x1, 0x0, 0x18, 0x6, 0x30, 0x48, 0x2, 0xb, 0x4, 0x12, 0x4, 0x48, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x2, 0x5, 0x6, 0xffff, 0xd, 0xe6, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4cea, 0x40f, 0x4, 0x8000, 0x8, 0x88d9, 0x79, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3be, 0x7f, 0x573a, 0x6, 0x8001, 0x8000, 0x93a, 0xfff8]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x334, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf, 0x5, 0x9, 0x1, 0x1, 0xfc01, 0x4]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x8, 0x76, 0x6c, 0x12, 0x36, 0x3, 0x48, 0x4, 0x60, 0x46, 0xc]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x691e, 0xe1, 0x1, 0x4, 0x3, 0x182, 0xb5, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd7, 0x3, 0x1151, 0xffff, 0x5, 0xffff, 0x1, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x22, 0x36, 0xb, 0xb, 0x24, 0x60, 0x36, 0xc, 0x3, 0x2, 0x1, 0x16, 0xb, 0x1b, 0x5, 0x3, 0x3, 0x48]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0xc, 0x24, 0x2, 0x36, 0x36, 0xe, 0x2, 0x4, 0x36, 0x1, 0x60, 0x1, 0x2, 0x24, 0x24, 0x48, 0x6, 0x12, 0x16, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x24, 0x3, 0x18, 0x28, 0x30, 0x1, 0x36, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x77, 0xfff7, 0x2, 0xab3, 0x7, 0x8, 0x9, 0x8e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfc00, 0x8, 0xfff, 0x4, 0x5648, 0x1, 0xf]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x0, 0x2, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x2}, {0x7}, {0x0, 0xa}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0xa}, {0x1, 0x1}, {0x7, 0x1}, {0x7, 0x5}, {0x5, 0x4}, {0x4, 0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x6}, {0x6, 0x4}, {0x5, 0xa}, {0x4, 0x2}, {0x3, 0x4}, {0x7, 0x3}, {0x0, 0x4}, {0x6, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x7, 0x6}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {}, {0x0, 0x7}]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x6, 0x5, 0x12, 0x48, 0x5, 0x9, 0x16, 0x6c, 0x16, 0x18, 0x3, 0x12, 0x36, 0x1, 0x9, 0x0, 0xc, 0x48, 0x12, 0x18, 0x1b, 0x0, 0x1b, 0x30, 0x6, 0xb]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x5}, {0x1, 0x3}, {0x3, 0x3}, {0x6, 0x1}, {0x7}, {0x0, 0x6}, {0x4, 0xa}, {0x3, 0x4}, {0x4, 0x4}, {0x0, 0x6}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x8}, {0x7, 0x8}, {0x2, 0x2}, {0x0, 0xa}, {0x4, 0x8}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x7}, {0x6, 0x8}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0x9}, {0x7}, {0x1, 0x5}, {0x7}, {0x1, 0x2}, {0x4}, {0x2, 0x8}, {0x2, 0x4}, {0x1, 0x7}, {0x2, 0x19}, {0x2, 0x3}, {0x6, 0x3}, {0x6, 0x8}, {0x1, 0x9}, {0x1, 0x7}, {0x2, 0x4}, {0x2, 0x1}, {0x6, 0x6}, {0x3, 0x1}, {0x1, 0x5}, {0x2, 0x7}, {}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x3, 0x5, 0x12, 0xc, 0x1b, 0x68, 0x16, 0x2, 0x9, 0x2, 0x12, 0x6c, 0x48, 0xc, 0x5]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x1}, {0x2, 0x8}, {0x7, 0x9}, {0x2, 0xa}, {0x5, 0x6}, {0x4, 0x1}, {0x5, 0x6}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x6}, {0x1, 0x5}, {0x4}, {0x2, 0x3}, {0x5, 0x8}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa35, 0x2, 0x1, 0x1f7c, 0x1, 0xfff9, 0x6, 0xff]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x60, 0x4, 0x60, 0x60, 0x30, 0x24, 0x5, 0x4, 0x17, 0x16, 0x60, 0x36, 0x1b, 0x70, 0x2, 0xb, 0x4, 0x12, 0x1b, 0x6c, 0x3, 0x18, 0x1b, 0x6c, 0x48, 0xc, 0x36, 0x2]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x9, 0xc, 0x12, 0x86cbb610195562c4, 0x4, 0x6, 0x4, 0x1b, 0x18, 0x48, 0x9, 0x6c, 0x16, 0x60, 0x2, 0x18, 0x60, 0x1b, 0x3, 0x6]}]}, @NL80211_BAND_5GHZ={0x120, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x6, 0x7}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x5}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x5, 0x4}, {0x3, 0x1}, {0x7, 0x2}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0x4}, {0x1, 0xa}, {0x1, 0x8}, {0x2, 0x7}, {0x7, 0x6}, {0x4, 0xa}, {0x2, 0x5}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0x9}, {0x7, 0x5}, {0x5, 0x1}, {0x3, 0x8}, {0x4, 0x6}, {0x6, 0x2}, {0x1, 0x7}, {0x1}, {0x5, 0x3}, {0x0, 0x4}, {0x3, 0x5}, {0x7, 0x7}, {0x5, 0x7}, {0x1, 0x4}, {0x2, 0x3}, {0x4, 0x2}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0xa}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0xa}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0x3}, {0x5, 0x8}, {0x5, 0x4}, {0x2, 0x4}, {0x2}, {0x4, 0x4}, {0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4c76, 0x5, 0x8, 0xd, 0x7ff, 0x5, 0x1, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x2}, {0x3}, {0x6, 0x2}, {0x1, 0x1}, {0x3, 0x11}, {}, {0x4, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x5}, {0x1, 0x9}, {0x5, 0xa}, {0x4, 0x2}, {0x3, 0x6}, {0x4, 0x7}, {0x1, 0x5}, {0x5, 0x1}, {0x5, 0x8}, {0x6, 0x7}, {0x7, 0x4}, {0x6, 0x5}, {0x4, 0x4}, {0x3, 0x4}, {0x7, 0x5}, {0x7, 0x3}, {0x5, 0x9}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0x7}, {0x3, 0x1}, {0x2, 0xa}, {0x2, 0x9}, {0x0, 0x4}, {0x4, 0x5}, {0x6, 0x7}, {0x1, 0x4}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0x2}, {0x3}, {0x6}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x3}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x8, 0xf, 0x9, 0x5, 0x7ff, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x12, 0x24, 0x14, 0x3, 0x36, 0x0, 0x9, 0x30, 0x6, 0x60, 0x36, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x1, 0x1, 0x1ff, 0x1, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfff, 0x4, 0x2, 0x8, 0x5, 0x7fff, 0x3]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x24, 0x30, 0x6, 0x9, 0x5, 0x9]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x5, 0x7}, {0x1, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x4}, {0x3, 0x5}, {0x3, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x4}, {0x3, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {0x5}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x9}, {0x3, 0xa}, {0x6}, {0x6, 0x1}, {0x0, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf719}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfa}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x74}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x68f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x16f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe6}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfb}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c4, 0x11d, 0x0, 0x1, [{0x2ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2bc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x6, 0xffdd, 0x1, 0x2, 0xfe, 0x181c]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0xc, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x56b4, 0x2, 0x7ff, 0xffff, 0xd, 0x3, 0xdef, 0xe0]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x3, 0x4, 0x1, 0x7, 0x8, 0x1, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0xc, 0x5, 0x6, 0xc, 0x5, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff8a, 0x8, 0x5, 0x2, 0x168, 0x4, 0x3, 0x5f57]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xe76, 0xa73c, 0x9, 0x1, 0xcab, 0xfffd, 0x980]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x0, 0x17a, 0x80, 0x0, 0x9, 0x4, 0xb5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x3}, {0x4, 0x4}, {0x4, 0x5}, {0x6, 0x7}, {0x2, 0x8}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0x4}, {0x5, 0x8}, {0x6, 0x9}, {0x7, 0x7}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0xa}, {0x4, 0x5}, {0x1, 0x1}, {0x1, 0x4}, {0x7, 0x3}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x9}, {0x6, 0x8}, {0x7, 0x1}, {0x5, 0x4}, {0x6, 0x1}, {0x4, 0x4}, {0x1}, {0x1, 0x2}, {0x5}, {0x1, 0x1}, {0x5, 0x8}, {0x2, 0xa}, {}, {0x6, 0xa}, {0x2, 0x7}, {0x6, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x6, 0x9}, {0x3, 0x5}, {0x7, 0x3}, {0x2, 0x5}, {0x5, 0x3}, {0x1, 0x3}, {0x1, 0x2}, {0x1, 0x1}, {0x4, 0x10}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x1}, {0x7, 0x5}, {0x3, 0x7}, {0x3, 0x2}, {0x3, 0xa}, {0x7, 0x5}, {0x3, 0xa}, {0x0, 0x4}, {0x7, 0x3}, {0x2}, {0x1, 0x4}, {0x4, 0x4}, {0x6, 0x5}, {0x1, 0x2}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1, 0x1}, {0x4}, {0x1, 0x2}, {0x6, 0x2}, {0x4, 0x4}, {0x3, 0xa}, {0x1, 0x8}, {0x4, 0x7}, {0x0, 0x4}, {0x7, 0x3}, {0x7, 0x1}, {0x2, 0x8}, {0x4}, {0x5}, {0x2, 0xa}, {0x0, 0x6}, {0x6, 0x2}, {0x2, 0x1}, {0x3, 0x6}, {0x1}, {0x7, 0x9}, {0x3, 0x5}, {0x4, 0x5}, {0x1, 0x6}, {0x2}, {0x7, 0xa}, {0x6, 0xa}, {0x7, 0x8}, {0x5, 0x5}, {0x1, 0x7}, {0x2, 0xa}, {0x1}, {0x4, 0x6}, {0x0, 0x2}, {0x0, 0x1}, {0x7, 0x7}, {0x7, 0x9}, {0x4, 0x3}, {0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x2, 0x100, 0x4, 0x8, 0xa0, 0x87, 0x7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x18, 0xc, 0x66, 0x33, 0x4, 0x6, 0x24, 0x2, 0x48, 0x18, 0x12, 0x9, 0xc, 0x12, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x365e, 0xad7, 0x8fd, 0xaff, 0x7, 0x3ff, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xa, 0x3, 0x4, 0x3, 0x8, 0x5, 0x7]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0xa}, {0x0, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0xf5a, 0xfffc, 0xd4, 0x9e12, 0x5, 0x2]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x8}, {0x0, 0x5}, {0x1, 0x2}, {0x4}, {0x4, 0x5}, {0x4, 0x4}, {0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x5}, {0x6, 0x7}, {0x1, 0xa}, {0x3, 0x8}, {0x5, 0x6}, {0x2, 0x5}, {0x7, 0x4}, {0x5, 0x8}, {0x1, 0x8}, {}, {0x6, 0xa}, {0x1, 0x5}, {0x5, 0x2}, {0x5, 0x7}, {0x4}, {0x5, 0x6}, {0x0, 0x6}, {0x4}, {0x5}, {0x0, 0x5}, {0x6, 0x7}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0x7}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x6, 0xf, 0x401, 0x7, 0x7, 0xbba1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x6, 0x8001, 0xcb2a, 0x1da0, 0x10, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x7ff, 0x2, 0x8, 0x4, 0x100, 0xd0d]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x8}, {0x5, 0x2}, {0x3, 0x3}, {0x2, 0x5}, {0x0, 0x8}, {0x4, 0x4}, {0x1, 0xa}, {0x5, 0x3}, {0x6, 0x5}, {0x7, 0x8}, {0x3}, {0x3, 0xa}, {0x1}, {0x3, 0x6}, {0x0, 0xa}, {}, {0x1, 0x3}, {0x4, 0xa}, {0x4, 0x8}, {0x0, 0x7}, {0x3, 0x4}, {0x5, 0x8}, {0x7, 0x8}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0x9}, {0x5, 0x5}, {0x5, 0x9}, {0x7, 0xa}, {0x2, 0xa}, {0x7, 0x9}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x7}, {0x1, 0x9}, {0x7, 0x2}, {0x7, 0x2}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x6}, {0x7}, {0x5, 0xa}, {0x7, 0xa}, {0x2}, {0x6, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x3, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x7, 0x7, 0x4, 0x548, 0x3, 0x6]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0x6c, 0x48, 0x9, 0x5, 0x1, 0x1, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x16}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x39}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4e}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x1, 0x2, 0x401, 0x6, 0xffff, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x800, 0xfff8, 0x7, 0x2, 0xe]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xff, 0x81, 0x494, 0x5c4, 0x1000, 0xf, 0x5]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x12, 0x16, 0x60, 0x2, 0x36, 0x30, 0x3, 0x5, 0x1b, 0x3]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x2, 0x9, 0xfff6, 0xfff1, 0xba1, 0x800, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0xc9, 0x5, 0x6e1, 0xe9, 0x98, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x95}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x340, 0x11d, 0x0, 0x1, [{0x234, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x8, 0x9, 0x2, 0x6, 0x4, 0x1]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x3, 0x7, 0x1, 0x4, 0x9, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x4c, 0x5, 0x9, 0x1b, 0x24, 0x78, 0x0, 0x3]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x8, 0x8, 0x67e, 0x7, 0x2, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x18, 0x2, 0x18, 0x2, 0x1b, 0x6c, 0x2, 0x36, 0x2, 0x3, 0x3c, 0x12, 0x1, 0xccb66f6c536066c5, 0x1d, 0x6, 0x12, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x8, 0x0, 0x9, 0x1, 0x6, 0x6]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x90c, 0x1dc3, 0x9, 0x8001, 0x4, 0x1, 0x7, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x1}, {0x5}, {0x4, 0x6}, {0x0, 0x5}, {}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x8}, {0x2, 0x5}, {0x0, 0x9}, {0x6, 0x9}, {0x5, 0x6}, {0x0, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x7, 0x1}, {0x7}, {0x5, 0x2}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x7}, {0x1, 0x9}, {0x0, 0x7}, {0x4, 0x2}, {0x4, 0x9}, {0x6, 0x9}, {0x5, 0x7}, {0x2, 0x2}, {0x0, 0x5}, {0x3, 0x2}, {0x4, 0x7}, {0x2, 0x4}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x9}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0x1}, {0x5, 0x4}, {0x4, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0x2}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x6}, {0x5, 0x2}, {0x5, 0x7}, {0x7, 0x3}, {0x6, 0x6}, {0x6, 0x1}, {0x5, 0x6}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x2}, {0x5, 0x6}, {0x2, 0x3}, {0x3, 0x4}, {0x3, 0x5}, {}, {0x4, 0x8}, {0x7, 0x9}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x6, 0x9}, {0x2, 0xa}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0x7}, {0x3, 0x5}, {0x5}, {0x4, 0x7}, {0x6, 0x2}, {0x0, 0xa}, {0x4, 0x6}, {0x4, 0x5}, {0x6, 0x3}, {0x2}, {0x7, 0x7}, {0x4, 0x4}, {0x2, 0x5}, {0x1, 0x5}, {0x0, 0x7}, {0x4, 0x4}, {0x1}, {0x2, 0x6}, {0x0, 0x6}, {0x6, 0x5}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x4}, {0x2, 0xa}, {0x1, 0x7}, {0x7, 0x1}, {0x7, 0x7}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x2}, {0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff7f, 0x0, 0x9, 0x3, 0x0, 0x7ff, 0x1ff, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x4}, {0x1, 0x5}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0x8}, {0x4, 0x1}, {0x3, 0x4}, {0x0, 0x3}, {0x4}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xa}, {0x5, 0x2}, {0x1, 0x6}, {0x5}, {0x7, 0xa}, {0x3, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {0x4, 0x4}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x60, 0x3d, 0x4, 0x4]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x2}, {0x4, 0x7}, {0x7, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x6, 0x5}, {0x1, 0x8}, {0x4, 0x8}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0x7}, {0x0, 0x6}, {0x6, 0x5}, {0x6, 0x3}, {0x0, 0x7}, {0x1, 0xa}, {0x1}, {0x1, 0x9}, {0x6, 0x9}, {0x1}, {0x7, 0x1}, {0x3, 0xa}, {0x1}, {0x0, 0x9}, {0x5, 0xa}, {0x2, 0x5}, {0x2, 0x2}, {0x4}, {0x4, 0x5}, {0x3, 0x5}, {0x7, 0x7}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ab, 0x41, 0xc, 0x0, 0x2, 0x1, 0x7140, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x49, 0x6932, 0x3, 0xffff, 0x9fc, 0x5, 0x8, 0x4]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff7}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbb}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x6}, {0x1, 0x6}, {0x1, 0x8}, {0x4, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x6}, {0x2}, {0x3, 0x3}, {0x7, 0x8}, {0x7, 0x2}, {0x5, 0x4}, {0x0, 0x3}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x43}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x45b5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xfc, 0x11d, 0x0, 0x1, [{0xf8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x8, 0x9, 0x1518, 0x1ff, 0x8000, 0xb404, 0xc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff, 0x0, 0x200, 0x81, 0x8, 0xfff7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x4}, {0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x7}, {0x3, 0x6}, {0x6, 0x7}, {0x2}, {0x1, 0x7}, {0x2, 0x1}, {0x3, 0x8}, {0x6, 0x1}, {0x6, 0x6}, {0x1, 0x8}, {0x2, 0x6}, {0x1, 0x2}, {0x3, 0x1}, {0x4, 0x9}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x6, 0x6}, {0x2, 0x5}, {0x2}, {0x4, 0x1}, {0x4, 0x8}, {0x6, 0x5}, {0x7, 0x3}, {0x2, 0x6}, {0x7, 0x4}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x1, 0xffff, 0xd, 0x6, 0x7, 0x1]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x9, 0x4, 0x1, 0x6, 0x6, 0x9, 0x6, 0x1b, 0x1, 0x9, 0x36, 0x6, 0x2, 0x60, 0x18, 0x24, 0x2, 0x36, 0x2, 0x24, 0x18, 0x4, 0x67, 0x73, 0x6c, 0x16, 0x48, 0x3, 0x6, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb5f, 0x3, 0x1, 0x6, 0x813, 0x6, 0x1]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0xc, 0x3, 0xc, 0x2, 0x6, 0x6, 0x1, 0x6c, 0x6, 0x2, 0x0, 0x1, 0x12, 0xb, 0x18, 0x60, 0x12, 0x1, 0x3, 0xc, 0x24, 0x48, 0x12, 0x30, 0x1b, 0x60, 0xb, 0x13, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x62}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x59}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdf}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xcd0baf7186959573}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x4000040}, 0x4a001) 705.03176ms ago: executing program 2 (id=3944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x34, r3, 0x201, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x20040080) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x1a4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xa8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r5 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="dc0000000a06050000000000000000000100000264000780080009400000130308001c40000000ff08001c4000000005080009410000000508001c40fffffff90a001100aaaaaaaaaabb000014001700677265300000000000000000000000000c00194000000000000000000c00018008000140e00000023000078008000940000000030c001840000000000000000805000700210000000800094000000005080009400000000134000880100007800c0018400000000000000004100007800c001b4000000000007a3100000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r7 = accept(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000c00)="d08c22a9424c4eb7ffcceebe7f5afa1a", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r7, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000001340)={0x0, 'lo\x00', {0x4}, 0x5}) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 703.351103ms ago: executing program 3 (id=3945): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x3, 0x2, 0xffff7fff, 0x8000, r1, 0x7, '\x00', 0x0, r2, 0x2, 0x2, 0x1, 0xa, @value=r3}, 0x50) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x5c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x5, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 632.976835ms ago: executing program 6 (id=3946): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) (async) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) 630.527651ms ago: executing program 3 (id=3947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r4, &(0x7f0000000240)={0x1a, 0x207, 0x7, 0x6c, 0x3, 0x0, @remote}, 0x10) write$tun(r2, &(0x7f0000000040)={@val={0x1c, 0x1c}, @void, @x25={0x2, 0x2, 0xfd, "bde476f3d588595e7fe6fedbd4"}}, 0x14) 612.415174ms ago: executing program 6 (id=3948): syz_emit_ethernet(0x1e, &(0x7f0000000040)={@link_local, @multicast, @void, {@can={0xc, {{0x2}, 0x8, 0x3, 0x0, 0x0, "3b25bd12e89012e7"}}}}, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r1, 0x1, 0x48, 0x0, &(0x7f00000003c0)) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) socket(0x2d, 0x3, 0x5) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) (async) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x58, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010103}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8060}, 0x8000) 558.060739ms ago: executing program 1 (id=3949): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000bf1bf282e3a8000000000000001d3c00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 556.185177ms ago: executing program 5 (id=3950): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x48, 0x24, 0xf0b, 0x3fff, 0x25dfdbfc, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000}]}}]}, 0x48}}, 0x4c094) (async) r3 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r3, 0x6fb57000) 471.004356ms ago: executing program 1 (id=3951): r0 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000000080)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x301, 0x0, 0x0, {0xb, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x18c, 0x0, 0xa, 0x202, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x1e, 0x6, "96f9e60e9adbe41f26f458a9d540c5e783ac2f4d8e0599dbe303"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x102, 0x6, "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"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0x260}}, 0x1000) (async) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 64) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}}, 0x0) (async) r5 = socket$inet(0x2, 0x1, 0x0) (async) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000100)={0x200, 0xffffffff, 0xa, 0x2, 0x7}) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async, rerun: 64) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async, rerun: 64) listen(r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 448.138241ms ago: executing program 5 (id=3952): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES16, @ANYRES16=r0], 0x118}], 0x1, 0x0, 0x0, 0xc455}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000000)=',&+-&\x00', 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) (async) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) getgid() setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x3) 310.139258ms ago: executing program 5 (id=3953): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000b03"], 0x0, 0x5a}, 0x20) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000280)={0x18, 0x0, {0x0, @local, 'pimreg0\x00'}}) r3 = accept4(r1, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0x80, 0x180000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="31000076bb87bcfdfbef060000008a3ef55ee3ac1b731ce88471b2e838ccfef985746e00a2690070b3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x36}, 0x94) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f00000002c0)="6973f6493fe56b35ab61f98bb51b36ea2d46d8e897ad4888fd5d078044a5b95546826ebf7f9cf0a5c2959273d1f257f62678d3ba2f1deabb") accept4$unix(r3, &(0x7f0000000140), &(0x7f00000001c0)=0x6e, 0x800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1600000043000001fffffffffcdbdf25037c0000040047800c000180a8bd2de61ed6fd62"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x3, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x4, 0x6, 0x9, 0xcb, 0xb2, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 309.450572ms ago: executing program 6 (id=3954): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="8402020100"], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c1e0000", @ANYRES16=r0, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0800c300000000000800c40000000000"], 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESHEX, @ANYBLOB="1001758a9599c7a571165c5ccb8a08613c4a5da8dab5bd257be2538e5f52d765f2d3215e4164169562e3f5dfe9837ad11cc0eac370770ee5f75d0e7750b2a81d5ebf181382494a2a4b6690f69f041b5b83d8bfeb8dccbd5ae31de99b72c1ffdbc3b3d8625cfd8ec1ced8a5e5d8a8c95720bbb4f9e415828e5144e7f8529e7d56fccb0413beb0915042ba32", @ANYBLOB="f649f82086c62098d0d8af44e69b78f5531885a7871823a45c01e197a6f65d8802a33cf195257eaf4e5eadf3196899f5e6c220b604c5cf67ec93b4eca8cf99ccbf39ab8fdfc589ed1e4b41cc79994f2d4a5b33a7a83e25825d5b040f74400f7f5ed0993e24454088ef725afd6ac8d88733ed6dd4b05947bc4acc", @ANYRESDEC=r1, @ANYRES16=r0, @ANYRESOCT, @ANYRES32=r5], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIONCLEX(r6, 0x5450) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x5}, 0x1c) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x0, 0x800) r9 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="4a84324eda", 0x5}], 0x1}}], 0x2, 0x0) close(r9) syz_emit_ethernet(0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000000000000000000008100440088631f7761"], 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000e80040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 304.695232ms ago: executing program 1 (id=3955): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'gretap0\x00', r2, 0x8000, 0x1, 0xd27f, 0x7e, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x8, 0x4, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1e}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getqdisc={0x48, 0x26, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {0x8, 0xfff3}, {0x5, 0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', r3, r1, 0x2, 0x4, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc09323"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc09323"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r8}, 0x8b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r8, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r9, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r9, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r14, r13}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) (async) r15 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x1, 0xbf22, 0x110}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r17}, 0x48) (async) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r17}, 0x48) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x1001, 0x16}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r18, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r19}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r18, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r19}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x4e, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x960}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x4, 0x0, 0x7, 0x5, 0x4, 0x100, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @tail_call, @map_fd={0x18, 0x2, 0x1, 0x0, r8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @map_fd={0x18, 0x5, 0x1, 0x0, r11}, @ldst={0x0, 0x0, 0x0, 0x7, 0x9, 0x10, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0x1, '\x00', r3, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r14, 0xffffffffffffffff, 0x4, &(0x7f00000007c0)=[r15, r16, r0, r19, r20], &(0x7f0000000800)=[{0x2, 0x2, 0x8, 0x4}, {0x4, 0x4, 0xe, 0x7}, {0x2, 0x1, 0xe, 0x2}, {0x3, 0x4, 0x5, 0x4}], 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x4e, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x960}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x4, 0x0, 0x7, 0x5, 0x4, 0x100, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @tail_call, @map_fd={0x18, 0x2, 0x1, 0x0, r8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @map_fd={0x18, 0x5, 0x1, 0x0, r11}, @ldst={0x0, 0x0, 0x0, 0x7, 0x9, 0x10, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0x1, '\x00', r3, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r14, 0xffffffffffffffff, 0x4, &(0x7f00000007c0)=[r15, r16, r0, r19, r20], &(0x7f0000000800)=[{0x2, 0x2, 0x8, 0x4}, {0x4, 0x4, 0xe, 0x7}, {0x2, 0x1, 0xe, 0x2}, {0x3, 0x4, 0x5, 0x4}], 0x10, 0x3}, 0x94) 267.340965ms ago: executing program 3 (id=3956): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x209, 0x209, 0x7, [@volatile={0xf, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8, 0x1}, {0xa, 0x4}, {0xd, 0x1}]}, @datasec={0xb, 0x5, 0x0, 0xf, 0x1, [{0x2, 0x0, 0x800}, {0x1, 0x4f6efa8, 0x2}, {0x1, 0x1, 0xffffff9e}, {0x4, 0x2, 0x400}, {0x3, 0x5, 0x10000}], '~'}, @union={0xb, 0xa, 0x0, 0x5, 0x1, 0xfffffbff, [{0x10, 0x0, 0x4}, {0x6, 0x2, 0x4}, {0x7, 0x4, 0x6}, {0x1, 0x3, 0x4}, {0xd, 0x2, 0x7fffffff}, {0xb, 0x2, 0xb}, {0xd, 0x3, 0xffff}, {0xf, 0x1}, {0x1, 0x3}, {0x0, 0x1, 0x4}]}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0xd, 0x7}, {0x6, 0x6}, {0x2, 0xc}]}, @volatile={0xd}, @datasec={0xd, 0x5, 0x0, 0xf, 0x2, [{0x1, 0x3, 0x4}, {0x2, 0xffffffff, 0x1}, {0x2, 0x9, 0x3ff}, {0x1, 0xedd4, 0x5}, {0x5, 0x0, 0x7fff}], "2aec"}, @datasec={0xf, 0x9, 0x0, 0xf, 0x2, [{0x1, 0x6, 0x6e9}, {0x5, 0xfffffffa, 0x4}, {0x5, 0x5, 0x4}, {0x2, 0x4, 0xd8fc}, {0x1, 0x1, 0x3}, {0x4, 0xd, 0x7}, {0x2, 0x4, 0x9}, {0x1, 0xd, 0x7fff}, {0x1, 0xfa}], "21b6"}, @float={0x1, 0x0, 0x0, 0x10, 0x2}, @volatile={0xf, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x22b}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, r4, 0xad43cb14c4f8aeb3, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, 0x0, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r1, 0x0, 0xff, 0x3, 0x0, 0x2, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8, 0x7800, 0x6, 0x400}}) close(r8) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r10, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 161.426018ms ago: executing program 1 (id=3957): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005d40)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="34000000000000000000000007000000442420f9"], 0x38}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 161.121692ms ago: executing program 5 (id=3958): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @remote}}, 0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@fwd={0x10}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x5f, 0x30, 0x2e, 0x0, 0x0, 0x30, 0x61, 0x0, 0x2e, 0x0]}}, &(0x7f0000000140)=""/167, 0x3c, 0xa7, 0x1, 0x800}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xe38, '\x00', 0x0, r2, 0x4, 0x4, 0x5}, 0x50) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "1487201ef26bc853", "5cec8b3380b4fdaf9b514a3ec4d16b8ca6d9df74f02f817a75b85b5926a97969", 'G=._', "03d316a0247bd1b4"}, 0x38) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x5, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) 132.918909ms ago: executing program 1 (id=3959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x22020400) (async) r2 = socket$alg(0x26, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x6e02a6c3770c3083) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCNEWUNIT(r1, 0x4004743b, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200b5f383ca00ea6356b5000000000004"], 0x1c}], 0x1}, 0x0) (async) r5 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000711069000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) (async) read(r7, &(0x7f00000003c0)=""/141, 0x8d) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xffff, 0x6}, {0xffff, 0xffff}, {0x0, 0xfffc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x30}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 117.011923ms ago: executing program 6 (id=3960): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x24c}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13fbf66d28b02a7f7bff7ddc34"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "641b0230944a0546"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x47, 0x0, &(0x7f0000002100)) (async) getsockopt$sock_int(r4, 0x1, 0x47, 0x0, &(0x7f0000002100)) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 38.174627ms ago: executing program 5 (id=3961): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd", 0x2a}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x2, 0x0, 0x0, 0x6, 0x4, [{0xd, 0x9}, {}, {0x1, 0x1}, {0xe, 0x6}, {0x7, 0x80000000}, {0x6, 0xe}, {0x2, 0x7}, {0x1, 0xb6c}, {0xf, 0x6}, {0xf, 0x1}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x30]}}, 0x0, 0x2a}, 0x36) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bb78c", 0x34, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x34, 0x0, @gue={{0x2, 0x0, 0x0, 0x7, 0x0, @val=0x80}, "ba66523bc5dea26a1ca732c6535999ae3164ec5ef5b99e18d31261edd793d61d8464a0e8"}}}}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd", 0x2a}], 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x2, 0x0, 0x0, 0x6, 0x4, [{0xd, 0x9}, {}, {0x1, 0x1}, {0xe, 0x6}, {0x7, 0x80000000}, {0x6, 0xe}, {0x2, 0x7}, {0x1, 0xb6c}, {0xf, 0x6}, {0xf, 0x1}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x30]}}, 0x0, 0x2a}, 0x36) (async) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bb78c", 0x34, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x34, 0x0, @gue={{0x2, 0x0, 0x0, 0x7, 0x0, @val=0x80}, "ba66523bc5dea26a1ca732c6535999ae3164ec5ef5b99e18d31261edd793d61d8464a0e8"}}}}}}}, 0x0) (async) 0s ago: executing program 5 (id=3962): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2, @ANYBLOB="31d70e025ae027c89c8fc254ec3a819aad1bb96700"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @broadcast}}) kernel console output (not intermixed with test programs): rsing attributes in process `syz.2.2105'. [ 332.458389][T13607] block nbd1: Unsupported socket: should be TCP or UNIX. [ 332.696255][T13628] openvswitch: netlink: Flow key attribute not present in set flow. [ 333.096727][T13653] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 333.363862][T13677] netlink: 'syz.4.2122': attribute type 15 has an invalid length. [ 333.434256][ T3604] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 333.443510][T13677] netlink: 'syz.4.2122': attribute type 15 has an invalid length. [ 333.452900][ T3604] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 333.459114][T13673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.473389][ T3604] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 333.481469][T13675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.482934][ T3604] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 333.844262][T13704] bond8 (unregistering): Released all slaves [ 333.877025][T13705] ip6gre2: entered allmulticast mode [ 333.984890][T13718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.587414][T13763] x_tables: duplicate underflow at hook 2 [ 334.602226][T13764] x_tables: duplicate underflow at hook 2 [ 334.993819][T13730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.846831][T13776] __nla_validate_parse: 13 callbacks suppressed [ 335.846850][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 335.898168][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 335.919632][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 335.955503][ C0] syz_tun: tun_net_xmit 66 [ 335.965824][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 335.973887][ C0] lec:lec_tx_timeout: lec0 [ 335.978764][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 336.084206][T13788] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2157'. [ 336.271386][T13808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2163'. [ 336.344064][T13816] netlink: 'syz.1.2166': attribute type 11 has an invalid length. [ 336.444543][T13822] netlink: 'syz.1.2169': attribute type 21 has an invalid length. [ 336.560618][T13832] netlink: 'syz.1.2173': attribute type 1 has an invalid length. [ 336.818317][T13850] IPVS: persistence engine module ip_vs_pe_ not found [ 336.926880][T13857] tunl0: Caught tx_queue_len zero misconfig [ 336.965557][ C0] syz_tun: tun_net_xmit 66 [ 337.017087][T13867] x_tables: duplicate underflow at hook 1 [ 337.082216][T13875] xt_hashlimit: size too large, truncated to 1048576 [ 337.192331][T13879] : renamed from vxcan1 [ 337.710552][T13904] netlink: 'syz.1.2194': attribute type 29 has an invalid length. [ 337.803914][T13909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2195'. [ 337.822941][T13911] : renamed from bond_slave_1 (while UP) [ 337.899833][T13914] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2198'. [ 337.944662][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 338.081593][T13928] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2198'. [ 338.227502][T13935] netlink: 'syz.3.2204': attribute type 21 has an invalid length. [ 338.250987][T13935] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2204'. [ 338.418572][T13951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.716126][T13971] dvmrp6: entered allmulticast mode [ 339.106784][T13996] netlink: 'syz.2.2222': attribute type 8 has an invalid length. [ 339.464633][T14024] netlink: 'syz.2.2229': attribute type 10 has an invalid length. [ 339.470614][T14020] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 339.699666][T14033] netlink: 'syz.1.2231': attribute type 11 has an invalid length. [ 339.900037][T14046] netlink: 'syz.2.2235': attribute type 1 has an invalid length. [ 339.968957][T14056] syz_tun: tun_net_xmit 86 [ 339.980838][T14057] netlink: 'syz.1.2236': attribute type 15 has an invalid length. [ 340.489593][T14085] openvswitch: netlink: IP tunnel dst address not specified [ 340.662404][T14098] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 340.704851][T14100] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 340.764101][T14100] bond7 (unregistering): Released all slaves [ 340.810291][T14098] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 340.810946][T14108] tipc: Enabling of bearer rejected, failed to enable media [ 340.882928][T14111] __nla_validate_parse: 10 callbacks suppressed [ 340.882951][T14111] netlink: 296 bytes leftover after parsing attributes in process `syz.2.2249'. [ 340.952485][T14115] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2250'. [ 340.983678][T14115] gtp0: entered promiscuous mode [ 340.993282][T14115] gtp0: entered allmulticast mode [ 340.995298][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 341.006397][ C0] lec:lec_tx_timeout: lec0 [ 341.011085][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 341.045514][ C1] syz_tun: tun_net_xmit 86 [ 341.048458][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2253'. [ 341.194556][T14137] bond2: option mode: unable to set because the bond device has slaves [ 341.260526][ T3604] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:8495:fcff:fe1f:b948 error=-28 [ 341.262389][T14137] bond2: (slave veth7): Enslaving as an active interface with a down link [ 341.325179][ T12] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aaaa error=-28 [ 341.339492][T14145] bridge_slave_0: entered promiscuous mode [ 341.355193][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2258'. [ 341.617544][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2264'. [ 341.779586][T14184] bond7 (unregistering): Released all slaves [ 341.839174][T14191] netlink: 'syz.2.2271': attribute type 1 has an invalid length. [ 341.867111][T14191] netlink: 'syz.2.2271': attribute type 4 has an invalid length. [ 341.874886][T14191] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2271'. [ 341.905613][T14194] xt_hashlimit: invalid rate [ 342.060490][T14206] pim6reg: entered allmulticast mode [ 342.080231][T14207] gre0: entered promiscuous mode [ 342.085517][ C1] syz_tun: tun_net_xmit 86 [ 342.093163][T14207] gre0: entered allmulticast mode [ 342.204491][T14214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2278'. [ 342.231530][T14219] netlink: 'syz.3.2280': attribute type 1 has an invalid length. [ 342.251815][T14219] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 342.332498][T14230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.336528][T14234] netlink: 'syz.2.2285': attribute type 1 has an invalid length. [ 342.358865][T14234] netlink: 'syz.2.2285': attribute type 1 has an invalid length. [ 342.367195][T14234] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.2285'. [ 342.454051][T14241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2287'. [ 342.467948][T14241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.520580][T14243] netlink: 'syz.2.2288': attribute type 3 has an invalid length. [ 342.584143][T14252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2291'. [ 343.017174][T14263] siw: device registration error -23 [ 343.240571][T14276] netlink: 'syz.3.2299': attribute type 24 has an invalid length. [ 343.269546][T14278] x_tables: duplicate underflow at hook 1 [ 343.643312][T14300] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 343.687252][T14300] team0: entered promiscuous mode [ 343.692430][T14300] team0: entered allmulticast mode [ 343.743120][T14312] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.775166][T14315] 8021q: adding VLAN 0 to HW filter on device bond8 [ 343.815887][T14320] netlink: 'syz.4.2307': attribute type 1 has an invalid length. [ 343.876263][T14320] gretap2: entered promiscuous mode [ 343.884769][T14320] bond7: (slave gretap2): making interface the new active one [ 343.893403][T14320] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 343.911304][T14320] macvlan3: entered promiscuous mode [ 343.917701][T14320] macvlan3: entered allmulticast mode [ 343.924140][T14320] bond7: entered promiscuous mode [ 343.932451][T14320] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 343.940245][T14320] bond7: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 343.958013][T14320] bond7: left promiscuous mode [ 344.139463][T14339] netlink: 'syz.4.2311': attribute type 1 has an invalid length. [ 344.298763][T14346] xt_hashlimit: invalid interval [ 344.428503][T14352] netlink: 'syz.4.2316': attribute type 1 has an invalid length. [ 344.478594][T14352] bond9: (slave gretap3): making interface the new active one [ 344.492159][T14352] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 345.086663][T14401] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 345.314775][T14416] xt_addrtype: ipv6 does not support BROADCAST matching [ 345.507695][T14426] team_slave_0 (unregistering): left promiscuous mode [ 345.514500][T14426] team_slave_0 (unregistering): left allmulticast mode [ 345.524932][T14426] team0: Port device team_slave_0 removed [ 346.025330][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 346.033354][ C0] lec:lec_tx_timeout: lec0 [ 346.037996][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 348.401959][T14425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.415433][T14436] nbd: couldn't find device at index 0 [ 348.570854][T14458] bond6: entered promiscuous mode [ 348.576481][T14458] bond6: entered allmulticast mode [ 348.582152][T14458] 8021q: adding VLAN 0 to HW filter on device bond6 [ 348.591849][T14456] __nla_validate_parse: 17 callbacks suppressed [ 348.591868][T14456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2346'. [ 348.665955][T14458] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2348'. [ 348.675153][T14458] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2348'. [ 348.682985][T14466] openvswitch: netlink: Missing valid actions attribute. [ 348.735387][T14466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.824477][T14473] validate_nla: 1 callbacks suppressed [ 348.824494][T14473] netlink: 'syz.2.2351': attribute type 5 has an invalid length. [ 349.476623][T14522] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2365'. [ 349.659360][T14543] netlink: 'syz.4.2372': attribute type 3 has an invalid length. [ 349.754263][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'. [ 349.784897][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2375'. [ 349.844944][T14552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.876514][T14552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.892671][T14552] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 349.916856][T14552] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 349.929482][T14552] bond0 (unregistering): Released all slaves [ 350.018505][T14564] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2380'. [ 350.030530][T14564] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2380'. [ 350.178558][T14573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.430012][T14599] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 350.736378][T14627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 350.746795][T14618] vlan3: entered allmulticast mode [ 350.784393][T14627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 351.041670][T14644] openvswitch: netlink: IP tunnel dst address not specified [ 351.049341][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 351.049382][ C0] lec:lec_tx_timeout: lec0 [ 351.057518][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 351.258280][T14663] netlink: 'syz.1.2412': attribute type 9 has an invalid length. [ 351.474497][T14685] netlink: 'syz.3.2418': attribute type 58 has an invalid length. [ 351.696011][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 351.767557][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.779823][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.789395][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.800452][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.808802][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.883532][T14714] netlink: 'syz.1.2425': attribute type 21 has an invalid length. [ 351.936294][T14719] openvswitch: netlink: Message has 12 unknown bytes. [ 352.019171][T14716] xt_CT: No such helper "pptp" [ 352.328900][T14731] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 352.400864][T14705] chnl_net:caif_netlink_parms(): no params data found [ 352.604328][T14705] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.638621][T14705] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.655981][T14705] bridge_slave_0: entered allmulticast mode [ 352.678699][T14705] bridge_slave_0: entered promiscuous mode [ 352.693909][T14705] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.703670][T14705] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.726884][T14705] bridge_slave_1: entered allmulticast mode [ 352.734427][T14705] bridge_slave_1: entered promiscuous mode [ 352.773063][T14761] netlink: 'syz.2.2438': attribute type 1 has an invalid length. [ 352.789922][T14705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.803768][T14705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.851245][T14705] team0: Port device team_slave_0 added [ 352.860657][T14705] team0: Port device team_slave_1 added [ 352.921739][T14705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.929262][T14705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.963983][T14705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.000154][T14705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.007447][T14705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.034062][T14705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.053947][T14765] unsupported nlmsg_type 40 [ 353.158962][T14705] hsr_slave_0: entered promiscuous mode [ 353.178579][T14705] hsr_slave_1: entered promiscuous mode [ 353.197783][T14705] debugfs: 'hsr0' already exists in 'hsr' [ 353.213114][T14705] Cannot create hsr debugfs directory [ 353.580628][T14705] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 353.586511][T14794] netlink: 'syz.1.2446': attribute type 1 has an invalid length. [ 353.619401][T14705] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 353.737130][T14794] bond0: entered promiscuous mode [ 353.754773][T14794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.783379][T14705] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 353.824181][T14807] __nla_validate_parse: 15 callbacks suppressed [ 353.824211][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 353.824788][T14802] bond0: (slave bridge6): making interface the new active one [ 353.841895][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 353.848788][T14802] bridge6: entered promiscuous mode [ 353.864026][ T5839] Bluetooth: hci5: command tx timeout [ 353.868919][T14809] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2450'. [ 353.874139][T14807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2451'. [ 353.879599][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2451'. [ 353.897724][T14802] bridge6: left promiscuous mode [ 353.962813][T14705] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 354.035602][T14813] tipc: Enabled bearer , priority 0 [ 354.104719][T14812] syzkaller0: entered promiscuous mode [ 354.110332][T14812] syzkaller0: entered allmulticast mode [ 354.116676][T14812] tipc: Resetting bearer [ 354.145362][T14825] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2454'. [ 354.158260][T14812] tipc: Resetting bearer [ 355.533215][T14812] tipc: Disabling bearer [ 355.557075][T12805] tipc: Node number set to 3682184514 [ 355.656772][T14705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.698630][T14705] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.735094][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.742330][ T3604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.796950][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.804126][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.926034][ T5839] Bluetooth: hci5: command tx timeout [ 355.926354][T14855] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 355.959101][T14858] netlink: 'syz.2.2461': attribute type 21 has an invalid length. [ 355.969054][T14847] netlink: 'syz.1.2460': attribute type 7 has an invalid length. [ 356.038557][T14861] netlink: 'syz.3.2463': attribute type 1 has an invalid length. [ 356.098154][T14861] 8021q: adding VLAN 0 to HW filter on device bond9 [ 356.154407][T14865] bond9: (slave veth0_to_bond): making interface the new active one [ 356.167988][T14865] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 356.241000][T14865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2463'. [ 356.243079][T14861] 8021q: adding VLAN 0 to HW filter on device bond10 [ 356.279352][T14861] bond9: (slave bond10): Enslaving as an active interface with a down link [ 356.329943][T14861] ipvlan0: entered allmulticast mode [ 356.339143][T14861] batman_adv: batadv0: Adding interface: ipvlan0 [ 356.345884][T14861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.356791][T14861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.367165][T14861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 356.390319][T14861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.401309][T14861] batman_adv: batadv0: Interface activated: ipvlan0 [ 356.419675][T14705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.547505][T14883] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2467'. [ 356.613448][T14883] bond7: (slave erspan0): Device is not bonding slave [ 356.628861][T14883] bond7: option active_slave: invalid value (erspan0) [ 356.639171][T14883] bond7 (unregistering): Released all slaves [ 356.642887][T14890] sctp: [Deprecated]: syz.3.2469 (pid 14890) Use of int in max_burst socket option. [ 356.642887][T14890] Use struct sctp_assoc_value instead [ 356.800128][T14705] veth0_vlan: entered promiscuous mode [ 356.820591][T14705] veth1_vlan: entered promiscuous mode [ 356.841182][T14898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2470'. [ 356.858318][T14897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2470'. [ 356.885512][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 356.893544][ C0] lec:lec_tx_timeout: lec0 [ 356.898288][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 356.908626][T14705] veth0_macvtap: entered promiscuous mode [ 356.936628][T14705] veth1_macvtap: entered promiscuous mode [ 356.956769][T14705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.973326][T14705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.998824][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.012303][ T7457] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.064031][ T7457] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.086004][ T7457] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.314800][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.355586][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.383170][T14916] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.414404][ T7457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.435679][ T7457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.649830][T14935] xt_bpf: check failed: parse error [ 358.005821][ T5839] Bluetooth: hci5: command tx timeout [ 358.229355][T14971] netlink: 'syz.3.2490': attribute type 1 has an invalid length. [ 358.262658][T14971] 8021q: adding VLAN 0 to HW filter on device bond11 [ 358.287036][T14971] bond11: (slave geneve3): making interface the new active one [ 358.316227][T14971] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 358.448893][T14975] tipc: New replicast peer: 255.255.255.255 [ 358.476099][T14975] tipc: Enabled bearer , priority 10 [ 358.774656][T14988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.202638][T15019] __nla_validate_parse: 2 callbacks suppressed [ 359.202656][T15019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2505'. [ 359.203347][T15020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2505'. [ 359.475099][T15035] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 359.491650][T15037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2510'. [ 359.509712][T15037] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 359.522294][T15037] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 359.631871][T15043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2513'. [ 359.657903][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2514'. [ 359.672563][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2513'. [ 359.673489][T15048] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 359.697955][T15048] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001 [ 359.722290][T15048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2514'. [ 359.742982][T15050] vlan0: entered promiscuous mode [ 359.748925][T15050] bridge0: entered promiscuous mode [ 359.809905][T15052] xt_hashlimit: size too large, truncated to 1048576 [ 359.879369][T15058] tc_dump_action: action bad kind [ 360.036617][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2520'. [ 360.044770][T15069] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2519'. [ 360.085679][ T5839] Bluetooth: hci5: command tx timeout [ 360.152452][T15073] netlink: 'syz.1.2522': attribute type 32 has an invalid length. [ 360.163899][T15076] xt_limit: Overflow, try lower: 604147548/4200216962 [ 360.244509][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2523'. [ 360.518995][T15103] netlink: 'syz.3.2531': attribute type 10 has an invalid length. [ 360.538199][T15101] netlink: 'syz.2.2533': attribute type 3 has an invalid length. [ 360.621947][T15108] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.630578][T15108] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.660492][T15106] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 360.737478][T15115] syzkaller0: entered promiscuous mode [ 360.743008][T15115] syzkaller0: entered allmulticast mode [ 360.751971][T15115] x_tables: unsorted underflow at hook 1 [ 361.099121][T15138] netlink: 'syz.1.2547': attribute type 1 has an invalid length. [ 361.180763][T15138] 8021q: adding VLAN 0 to HW filter on device bond8 [ 361.188771][T15141] bond8: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 361.257948][T15138] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 361.260886][T15145] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 361.288865][ T36] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 361.303163][T15145] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 361.344942][T15145] syzkaller0: entered promiscuous mode [ 361.350651][T15145] syzkaller0: entered allmulticast mode [ 361.399850][T15150] tipc: New replicast peer: 255.255.255.255 [ 361.406796][T15150] tipc: Enabled bearer , priority 10 [ 361.425639][ T3474] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 361.443956][ T3474] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 361.600918][ T3474] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 361.624938][ T3474] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 361.720917][T15167] vcan1: entered promiscuous mode [ 361.726238][T15167] vcan1: entered allmulticast mode [ 361.732978][T15167] team0: Device vcan1 is of different type [ 361.769241][ T3474] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 361.807189][ T36] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 361.874918][T15169] 8021q: adding VLAN 0 to HW filter on device bond9 [ 361.906075][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 361.914129][ C0] lec:lec_tx_timeout: lec0 [ 361.919020][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 361.944897][T15183] macvlan0: entered promiscuous mode [ 361.967503][T15183] macvlan0: entered allmulticast mode [ 361.999731][T15183] bond9: entered allmulticast mode [ 362.015616][T15183] bond9: entered promiscuous mode [ 362.021402][T15183] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 362.031176][T15183] team0: Port device macvlan0 added [ 362.184822][T15196] gtp1: entered promiscuous mode [ 362.193622][T15196] gtp1: entered allmulticast mode [ 362.597223][T15230] netlink: 'syz.5.2576': attribute type 1 has an invalid length. [ 362.776391][T15240] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20003 [ 362.862106][T15245] netlink: 'syz.1.2581': attribute type 10 has an invalid length. [ 362.905118][T15245] veth1_macvtap: left promiscuous mode [ 362.933528][T15245] team0: Device veth1_macvtap failed to register rx_handler [ 363.097329][T15257] bridge0: port 1(ipvlan0) entered blocking state [ 363.110366][T15257] bridge0: port 1(ipvlan0) entered disabled state [ 363.120732][T15257] ipvlan0: entered allmulticast mode [ 363.145501][T15257] bridge0: entered allmulticast mode [ 363.153330][T15257] ipvlan0: left allmulticast mode [ 363.165529][T15257] bridge0: left allmulticast mode [ 363.308835][T15272] netlink: 'syz.3.2587': attribute type 6 has an invalid length. [ 363.498608][T15253] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 363.511708][T15253] bond1: option packets_per_slave: allowed values 0 - 65535 [ 363.533122][T15253] bond1 (unregistering): Released all slaves [ 363.616987][T15289] bridge0: port 1(syz_tun) entered blocking state [ 363.624210][T15289] bridge0: port 1(syz_tun) entered disabled state [ 363.631801][T15289] syz_tun: entered allmulticast mode [ 363.639977][T15289] syz_tun: entered promiscuous mode [ 363.827747][ T3604] net_ratelimit: 50 callbacks suppressed [ 363.827768][ T3604] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 363.906498][ T3604] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 364.018447][ T7454] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 364.043787][ T7454] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 364.175675][ T7454] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 364.183477][ T7454] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 364.294182][T15324] netlink: 'syz.3.2600': attribute type 2 has an invalid length. [ 364.319362][T15324] : entered promiscuous mode [ 364.328101][ T3474] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 364.355462][ T50] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 364.387447][ T50] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 364.495461][ T50] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 364.535752][T15329] nbd: couldn't find device at index 0 [ 364.581979][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.596459][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.606738][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.615031][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.626141][T15329] netlink: 'syz.2.2605': attribute type 1 has an invalid length. [ 364.634865][T15329] __nla_validate_parse: 20 callbacks suppressed [ 364.634881][T15329] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2605'. [ 364.651199][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.673323][T15335] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.705514][T15335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2607'. [ 364.868900][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2609'. [ 364.890276][T15346] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2610'. [ 364.904598][T15341] bond12 (unregistering): Released all slaves [ 364.967581][ T5828] syz_tun (unregistering): left allmulticast mode [ 364.983507][ T5828] syz_tun (unregistering): left promiscuous mode [ 364.991037][ T5828] bridge0: port 1(syz_tun) entered disabled state [ 365.004496][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2610'. [ 365.052851][T15353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2612'. [ 365.068624][T15353] netlink: 'syz.3.2612': attribute type 7 has an invalid length. [ 365.078808][T15353] netlink: 'syz.3.2612': attribute type 8 has an invalid length. [ 365.098079][T15356] netlink: 'syz.2.2611': attribute type 83 has an invalid length. [ 365.109056][T15356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.140712][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2612'. [ 365.445987][T15365] netlink: 'syz.5.2614': attribute type 4 has an invalid length. [ 365.453771][T15365] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2614'. [ 365.490503][T15365] `: renamed from bond0 (while UP) [ 365.594169][T15332] chnl_net:caif_netlink_parms(): no params data found [ 365.892676][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2619'. [ 365.917097][T15332] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.928234][T15332] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.936783][T15332] bridge_slave_0: entered allmulticast mode [ 365.944560][T15332] bridge_slave_0: entered promiscuous mode [ 365.956125][T15395] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2621'. [ 365.983958][T15332] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.991409][T15332] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.999304][T15332] bridge_slave_1: entered allmulticast mode [ 366.026313][T15332] bridge_slave_1: entered promiscuous mode [ 366.320894][ T3604] bond8 (unregistering): (slave ip6gretap2): Releasing active interface [ 366.507096][ T3604] tipc: Disabling bearer [ 366.664956][ T3604] dvmrp0 (unregistering): left allmulticast mode [ 366.688826][ T3604] dvmrp6 (unregistering): left allmulticast mode [ 366.711438][ T3604] dvmrp1 (unregistering): left allmulticast mode [ 366.728025][ T5837] Bluetooth: hci6: command tx timeout [ 366.935288][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 366.943378][ C0] lec:lec_tx_timeout: lec0 [ 366.948162][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 367.189246][ T3604] bond1 (unregistering): Released all slaves [ 367.201446][ T3604] bond2 (unregistering): Released all slaves [ 367.302620][ T3604] bond3 (unregistering): (slave veth5): Releasing active interface [ 367.311416][ T3604] bond3 (unregistering): Released all slaves [ 367.405368][ T3604] bond4 (unregistering): Released all slaves [ 367.418825][ T3604] bond5 (unregistering): (slave veth7): Releasing active interface [ 367.427871][ T3604] bond5 (unregistering): (slave veth9): Releasing active interface [ 367.436825][ T3604] bond5 (unregistering): Released all slaves [ 367.538509][ T3604] bond6 (unregistering): Released all slaves [ 367.633944][ T3604] bond0 (unregistering): Released all slaves [ 367.728355][ T3604] bond7 (unregistering): Released all slaves [ 367.834735][ T3604] bond8 (unregistering): Released all slaves [ 367.933214][ T3604] bond9 (unregistering): left allmulticast mode [ 367.939708][ T3604] bond9 (unregistering): left promiscuous mode [ 367.953846][ T3604] team0: Port device macvlan0 removed [ 367.962914][ T3604] bond9 (unregistering): Released all slaves [ 368.082206][T15332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.172967][T15332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.204457][ T3604] tipc: Disabling bearer [ 368.233835][ T3604] tipc: Disabling bearer [ 368.238093][T15446] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 368.248855][ T3604] tipc: Left network mode [ 368.387167][T15332] team0: Port device team_slave_0 added [ 368.406584][T15332] team0: Port device team_slave_1 added [ 368.501140][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.513925][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.523761][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.538889][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.555978][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.568201][T15332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.605400][T15332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.634552][T15332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.680336][T15332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.689771][T15332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.730165][T15332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.807619][ T5837] Bluetooth: hci6: command tx timeout [ 368.855066][T15332] hsr_slave_0: entered promiscuous mode [ 368.862391][T15332] hsr_slave_1: entered promiscuous mode [ 368.872523][T15332] debugfs: 'hsr0' already exists in 'hsr' [ 368.878896][T15332] Cannot create hsr debugfs directory [ 369.799894][T15513] __nla_validate_parse: 6 callbacks suppressed [ 369.799913][T15513] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2643'. [ 369.931003][T15518] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2644'. [ 370.163563][T15536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2646'. [ 370.198699][T15541] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2647'. [ 370.217702][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2646'. [ 370.276066][T15536] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 370.324838][ T3604] hsr_slave_0: left promiscuous mode [ 370.391789][ T3604] hsr_slave_1: left promiscuous mode [ 370.573643][T15553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2650'. [ 370.648636][ T5837] Bluetooth: hci1: command tx timeout [ 370.848036][ T3604] team0 (unregistering): Port device team_slave_1 removed [ 370.899152][ T5837] Bluetooth: hci6: command tx timeout [ 370.915999][T15555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2651'. [ 371.180826][ T3604] smc: removing net device team0 with user defined pnetid SYZ2 [ 371.208710][T15555] netlink: 'syz.2.2651': attribute type 25 has an invalid length. [ 371.349705][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2653'. [ 371.364557][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2654'. [ 371.377687][T15561] net_ratelimit: 57 callbacks suppressed [ 371.377705][T15561] openvswitch: netlink: Flow actions attr not present in new flow. [ 371.439414][T15564] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2652'. [ 371.453955][T15561] @0: renamed from bond_slave_1 (while UP) [ 371.652859][T15574] netlink: 'syz.5.2656': attribute type 61 has an invalid length. [ 371.654102][T15459] chnl_net:caif_netlink_parms(): no params data found [ 371.703410][T15571] veth0: entered promiscuous mode [ 371.721154][T15570] veth0: left promiscuous mode [ 371.853208][ T3604] IPVS: stop unused estimator thread 0... [ 371.955309][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 371.963398][ C0] lec:lec_tx_timeout: lec0 [ 371.969327][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 372.038385][T15459] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.041197][T15591] netlink: 'syz.2.2659': attribute type 21 has an invalid length. [ 372.046178][T15459] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.061197][T15459] bridge_slave_0: entered allmulticast mode [ 372.069520][T15459] bridge_slave_0: entered promiscuous mode [ 372.107877][T15459] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.117081][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.125728][T15459] bridge_slave_1: entered allmulticast mode [ 372.139144][T15459] bridge_slave_1: entered promiscuous mode [ 372.255645][T15459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.329776][T15459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.378533][T15332] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.729833][ T5837] Bluetooth: hci1: command tx timeout [ 372.910256][T15332] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.938705][T15608] netlink: 'syz.3.2663': attribute type 12 has an invalid length. [ 372.960160][T15459] team0: Port device team_slave_0 added [ 372.966782][ T5837] Bluetooth: hci6: command tx timeout [ 372.997964][T15459] team0: Port device team_slave_1 added [ 373.003603][T15332] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.107798][T15332] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.144832][T15630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.204965][T15459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.212555][T15459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.274705][T15459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.296182][T15459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.303839][T15459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.331934][T15459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.464500][T15459] hsr_slave_0: entered promiscuous mode [ 373.497252][T15459] hsr_slave_1: entered promiscuous mode [ 373.525376][T15459] debugfs: 'hsr0' already exists in 'hsr' [ 373.531158][T15459] Cannot create hsr debugfs directory [ 373.548272][T15647] bridge0: entered allmulticast mode [ 373.657527][T15665] : entered promiscuous mode [ 374.160390][T15332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.257588][T15332] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.330581][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.337803][ T3604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.369288][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.376508][ T3604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.498150][T15708] xt_connbytes: Forcing CT accounting to be enabled [ 374.522216][T15716] netlink: 'syz.3.2686': attribute type 5 has an invalid length. [ 374.630895][T15459] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 374.680943][T15459] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 374.743618][T15459] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 374.752454][T15726] x_tables: unsorted entry at hook 3 [ 374.801498][T15459] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 374.810364][ T5837] Bluetooth: hci1: command tx timeout [ 375.247950][T15459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.258442][T15759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 375.312775][T15459] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.393245][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.400482][ T7439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.473338][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.480563][ T7439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.508043][T15332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.904801][T15332] veth0_vlan: entered promiscuous mode [ 375.962586][T15332] veth1_vlan: entered promiscuous mode [ 376.086866][T15332] veth0_macvtap: entered promiscuous mode [ 376.103278][T15332] veth1_macvtap: entered promiscuous mode [ 376.216357][T15332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.231779][T15332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.272425][ T7454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.308206][ T7454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.344719][ T7454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.365454][ T7454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.414149][T15459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.695088][ T7457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.718062][ T7457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.860195][T15823] netlink: 'syz.2.2702': attribute type 1 has an invalid length. [ 376.885691][ T5837] Bluetooth: hci1: command tx timeout [ 376.919474][T15823] bond8: entered promiscuous mode [ 376.933654][T15823] 8021q: adding VLAN 0 to HW filter on device bond8 [ 376.957409][ T7448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.965240][ T7448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.985356][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 377.000789][ C0] lec:lec_tx_timeout: lec0 [ 377.005539][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 377.247330][T15459] veth0_vlan: entered promiscuous mode [ 377.284426][T15459] veth1_vlan: entered promiscuous mode [ 377.394441][T15842] __nla_validate_parse: 17 callbacks suppressed [ 377.394460][T15842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2707'. [ 377.405921][T15459] veth0_macvtap: entered promiscuous mode [ 377.422964][T15459] veth1_macvtap: entered promiscuous mode [ 377.430586][T15842] netlink: 'syz.3.2707': attribute type 7 has an invalid length. [ 377.459545][T15842] netlink: 'syz.3.2707': attribute type 8 has an invalid length. [ 377.473260][T15842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 377.494357][T15459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.548956][T15459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.574111][ T3474] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.603933][ T3474] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.656291][ T3474] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.698276][ T3474] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.729563][T15860] sctp: [Deprecated]: syz.1.2713 (pid 15860) Use of int in maxseg socket option. [ 377.729563][T15860] Use struct sctp_assoc_value instead [ 377.882355][T15865] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2716'. [ 377.956886][ T7454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.980827][ T7454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.036145][T15870] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 378.089149][T15870] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2719'. [ 378.139018][ T7439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.170608][T15877] netlink: 'syz.2.2720': attribute type 9 has an invalid length. [ 378.185457][ T7439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.204220][T15877] netlink: 'syz.2.2720': attribute type 9 has an invalid length. [ 378.224277][T15877] netlink: 'syz.2.2720': attribute type 9 has an invalid length. [ 378.240920][T15877] netlink: 'syz.2.2720': attribute type 9 has an invalid length. [ 378.293370][T15877] netlink: 'syz.2.2720': attribute type 9 has an invalid length. [ 378.306761][T15877] netlink: 'syz.2.2720': attribute type 9 has an invalid length. [ 378.365057][T15891] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2725'. [ 378.417761][T15877] netlink: 'syz.2.2720': attribute type 9 has an invalid length. [ 378.569902][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.579890][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.603212][T15896] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2727'. [ 378.689014][T15902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2726'. [ 378.943331][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2730'. [ 379.020500][T15918] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2732'. [ 379.080602][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2734'. [ 379.589264][T15956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.623831][T15951] bond_slave_1: entered allmulticast mode [ 379.899682][T15972] tipc: Started in network mode [ 379.905826][T15972] tipc: Node identity ac1414aa, cluster identity 4711 [ 379.913598][T15972] tipc: Enabled bearer , priority 10 [ 380.085622][T15987] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 380.127051][T15979] bond1 (unregistering): Released all slaves [ 380.192827][T15985] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 380.940913][T16042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.048356][ T5890] tipc: Node number set to 2886997162 [ 381.365207][T16071] syzkaller0: entered promiscuous mode [ 381.382371][T16071] syzkaller0: entered allmulticast mode [ 381.880533][T16108] validate_nla: 59 callbacks suppressed [ 381.880553][T16108] netlink: 'syz.6.2789': attribute type 26 has an invalid length. [ 381.982294][T16117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.015314][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 382.023369][ C0] lec:lec_tx_timeout: lec0 [ 382.028375][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 382.119234][T16122] netlink: 'syz.5.2797': attribute type 2 has an invalid length. [ 382.135682][T16122] netlink: 'syz.5.2797': attribute type 16 has an invalid length. [ 382.143798][T16122] netlink: 'syz.5.2797': attribute type 17 has an invalid length. [ 382.146637][T16117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.208463][T16120] erspan0: entered promiscuous mode [ 382.745829][T16122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.791718][T16122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.989780][T16139] macvtap1: entered promiscuous mode [ 383.015609][T16139] macvtap1: entered allmulticast mode [ 383.056003][T16139] veth1_vlan: entered allmulticast mode [ 383.111662][T16141] macvtap2: entered promiscuous mode [ 383.118050][T16141] macvtap2: entered allmulticast mode [ 383.140147][ T7454] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.157707][ T7454] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.340969][T16150] team0 (unregistering): left allmulticast mode [ 383.358789][T16150] team_slave_1: left allmulticast mode [ 383.382087][T16150] team0 (unregistering): left promiscuous mode [ 383.393572][T16150] team_slave_1: left promiscuous mode [ 383.401414][T16166] tipc: Failed to remove unknown binding: 66,0,0/0:4092701021/4092701022 [ 383.402943][T16150] bridge0: port 3(team0) entered disabled state [ 383.412727][T16166] tipc: Failed to remove unknown binding: 66,0,0/0:4092701021/4092701022 [ 383.429778][T16150] smc: removing net device team0 with user defined pnetid SYZ2 [ 383.454491][T16150] team0 (unregistering): Port device team_slave_1 removed [ 383.477285][ T7454] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.499938][ T7454] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.593703][T16171] __nla_validate_parse: 13 callbacks suppressed [ 383.593720][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2809'. [ 383.616216][T16171] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2809'. [ 383.789510][T16180] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2812'. [ 383.811980][T16182] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2811'. [ 383.927790][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2817'. [ 383.949331][T16196] vlan0: entered promiscuous mode [ 384.192244][T16211] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2821'. [ 384.413717][T16228] netlink: 1084 bytes leftover after parsing attributes in process `syz.1.2829'. [ 384.480574][T16228] block nbd1: NBD_DISCONNECT [ 384.628040][T16239] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2833'. [ 384.648769][T16240] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2833'. [ 384.671569][T16239] netlink: 'syz.1.2833': attribute type 11 has an invalid length. [ 384.984832][T16263] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.994143][T16263] bridge_slave_1: left allmulticast mode [ 385.000306][T16263] bridge_slave_1: left promiscuous mode [ 385.006561][T16263] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.080656][T16268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2841'. [ 385.537630][T16294] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 386.430709][T16322] syzkaller0: entered promiscuous mode [ 386.436663][T16322] syzkaller0: entered allmulticast mode [ 386.579535][T16337] netlink: 'syz.5.2861': attribute type 1 has an invalid length. [ 387.035476][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 387.043561][ C0] lec:lec_tx_timeout: lec0 [ 387.048425][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 387.214593][ T5837] Bluetooth: hci4: link tx timeout [ 387.223122][ T5837] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 388.790790][T16386] netlink: 'syz.2.2869': attribute type 21 has an invalid length. [ 389.276570][T16414] syz_tun: tun_net_xmit 98 [ 389.304209][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 389.334558][T16414] __nla_validate_parse: 12 callbacks suppressed [ 389.334576][T16414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2877'. [ 389.398299][T16414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2877'. [ 389.408536][T16414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2877'. [ 389.417563][T16414] netlink: 'syz.2.2877': attribute type 14 has an invalid length. [ 389.425653][T16414] netlink: 'syz.2.2877': attribute type 13 has an invalid length. [ 389.985478][T16446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.198947][T16464] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2889'. [ 390.228965][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2886'. [ 390.477784][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2893'. [ 390.545209][T16482] macvlan3: left allmulticast mode [ 390.581563][T16482] macvlan3: left promiscuous mode [ 390.612815][T16482] bridge0: port 4(macvlan3) entered disabled state [ 390.651757][T16482] bridge_slave_0: left promiscuous mode [ 390.658969][T16482] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.682764][T16496] netlink: 'syz.1.2896': attribute type 12 has an invalid length. [ 390.710357][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2897'. [ 390.722382][T16501] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 390.827744][T16501] openvswitch: netlink: Message has -2 unknown bytes. [ 390.828884][T16507] pimreg3: entered allmulticast mode [ 391.256516][T16535] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2906'. [ 391.469353][T16553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.520006][T16545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.731795][T16571] netlink: 'syz.1.2913': attribute type 21 has an invalid length. [ 392.047898][T16590] tipc: Started in network mode [ 392.055295][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 392.057817][T16590] tipc: Node identity 1, cluster identity 4711 [ 392.063358][ C0] lec:lec_tx_timeout: lec0 [ 392.063807][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 392.081384][T16590] tipc: Node number set to 1 [ 392.143811][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2918'. [ 392.245173][T16595] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2918'. [ 392.881283][T16639] netlink: 'syz.1.2930': attribute type 58 has an invalid length. [ 392.903993][T16628] bridge_slave_1: entered allmulticast mode [ 393.174633][T16459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.472172][T16667] delete_channel: no stack [ 393.690181][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 393.726230][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 393.734848][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 393.743299][ T5837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 393.757598][T16683] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 393.767638][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 393.820862][T16683] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.828792][T16683] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.836068][T16683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.387775][ T7457] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.531786][T16713] __nla_validate_parse: 11 callbacks suppressed [ 394.531807][T16713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2948'. [ 394.606815][T16713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2948'. [ 394.766621][T16725] openvswitch: netlink: IP tunnel dst address not specified [ 394.787071][ T7457] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.849255][T16725] openvswitch: netlink: IP tunnel dst address not specified [ 395.093672][ T7457] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.177213][T16743] xfrm0: entered promiscuous mode [ 395.184499][T16743] xfrm0: entered allmulticast mode [ 395.249505][T16755] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2955'. [ 395.304003][T16757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2955'. [ 395.313639][T16755] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2955'. [ 395.343420][T16755] netlink: 'syz.1.2955': attribute type 6 has an invalid length. [ 395.352288][T16755] netlink: 'syz.1.2955': attribute type 5 has an invalid length. [ 395.366072][ T7457] bond0: (slave ): Releasing backup interface [ 395.375476][T16755] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2955'. [ 395.394136][T16761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2956'. [ 395.419322][ T7457] netdevsim netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.431048][T16762] sctp: [Deprecated]: syz.2.2957 (pid 16762) Use of int in max_burst socket option. [ 395.431048][T16762] Use struct sctp_assoc_value instead [ 395.450278][T16755] delete_channel: no stack [ 395.506371][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2956'. [ 395.665763][T16764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2957'. [ 395.711861][T16764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.845578][ T5837] Bluetooth: hci7: command tx timeout [ 395.965109][T16789] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 396.587936][T16818] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2969'. [ 397.014136][T16838] netlink: 'syz.6.2972': attribute type 1 has an invalid length. [ 397.147680][ T7457] erspan0 (unregistering): left promiscuous mode [ 397.191125][ T7457] gretap0 (unregistering): left promiscuous mode [ 397.364332][ T7457] bond11 (unregistering): (slave geneve3): Releasing active interface [ 397.618267][ T7457] bond5 (unregistering): (slave bridge0): Releasing backup interface [ 397.925370][ T5839] Bluetooth: hci7: command tx timeout [ 398.405329][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6350 ms [ 398.413407][ C0] lec:lec_tx_timeout: lec0 [ 398.418297][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 399.202330][ T7457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.214097][ T7457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.224431][ T7457] bond0 (unregistering): Released all slaves [ 399.318775][ T7457] bond1 (unregistering): Released all slaves [ 399.415077][ T7457] bond2 (unregistering): Released all slaves [ 399.427222][ T7457] bond3 (unregistering): Released all slaves [ 399.527171][ T7457] bond4 (unregistering): Released all slaves [ 399.627118][ T7457] bond5 (unregistering): Released all slaves [ 399.640927][ T7457] bond6 (unregistering): Released all slaves [ 399.746791][ T7457] bond7 (unregistering): Released all slaves [ 399.840415][ T7457] bond8 (unregistering): Released all slaves [ 399.941548][ T7457] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 399.953368][ T7457] bond9 (unregistering): (slave bond10): Releasing active interface [ 399.962331][ T7457] bond9 (unregistering): Released all slaves [ 400.005499][ T5839] Bluetooth: hci7: command tx timeout [ 400.096213][ T7457] bond10 (unregistering): Released all slaves [ 400.203720][ T7457] bond11 (unregistering): Released all slaves [ 400.235102][T16678] chnl_net:caif_netlink_parms(): no params data found [ 400.269412][T16838] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 400.371526][T16849] netlink: 'syz.1.2973': attribute type 1 has an invalid length. [ 400.527898][T16851] bond3: (slave gretap1): making interface the new active one [ 400.551652][T16851] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 400.570417][ T7457] : left promiscuous mode [ 400.791658][T16875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2979'. [ 400.881512][ T7457] : left promiscuous mode [ 400.946879][T16872] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2978'. [ 401.112208][ T7457] tipc: Disabling bearer [ 401.123596][ T7457] tipc: Left network mode [ 401.124907][T16678] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.166115][T16678] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.187031][T16678] bridge_slave_0: entered allmulticast mode [ 401.204757][T16678] bridge_slave_0: entered promiscuous mode [ 401.313079][T16877] syzkaller1: entered promiscuous mode [ 401.321365][T16877] syzkaller1: entered allmulticast mode [ 401.329199][T16678] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.337521][T16678] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.357010][T16678] bridge_slave_1: entered allmulticast mode [ 401.370857][T16678] bridge_slave_1: entered promiscuous mode [ 401.617501][T16913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2984'. [ 401.690704][T16678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.784581][T16678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.992541][T16678] team0: Port device team_slave_0 added [ 402.019742][T16678] team0: Port device team_slave_1 added [ 402.085438][ T5839] Bluetooth: hci7: command tx timeout [ 402.207629][T16678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.225140][T16678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.296993][T16678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.319291][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 402.389427][T16957] netlink: 'syz.5.2997': attribute type 1 has an invalid length. [ 402.464024][T16678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.491989][T16678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.603745][T16965] netlink: 'syz.5.2997': attribute type 1 has an invalid length. [ 402.622776][T16678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.861978][T16957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.925702][T16958] vlan2: entered promiscuous mode [ 402.936854][T16958] bond0: entered promiscuous mode [ 402.942438][T16958] vlan2: entered allmulticast mode [ 402.947744][T16958] bond0: entered allmulticast mode [ 403.089519][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.105744][ T7457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.128235][ T7457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.169885][ T7457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.206975][ T7457] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 403.223016][ T7457] batman_adv: batadv0: Removing interface: ipvlan2 [ 403.236403][ T7457] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 403.254100][ T7457] batman_adv: batadv0: Removing interface: ipvlan0 [ 403.329537][ T7457] veth1_macvtap: left promiscuous mode [ 403.342036][ T7457] veth0_macvtap: left promiscuous mode [ 404.170379][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 404.178469][ C0] lec:lec_tx_timeout: lec0 [ 404.184092][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 404.286016][T17001] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3006'. [ 404.424510][T16678] hsr_slave_0: entered promiscuous mode [ 404.445001][T16678] hsr_slave_1: entered promiscuous mode [ 404.453648][T17006] blkio.reset_stats is deprecated [ 404.495918][T16678] debugfs: 'hsr0' already exists in 'hsr' [ 404.501711][T16678] Cannot create hsr debugfs directory [ 404.522704][T17011] netlink: 'syz.5.3010': attribute type 1 has an invalid length. [ 404.552968][T17011] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3010'. [ 404.600803][T17011] netlink: 658 bytes leftover after parsing attributes in process `syz.5.3010'. [ 404.628420][T17011] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3010'. [ 404.693261][T17020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3011'. [ 404.804140][T17012] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3011'. [ 405.661918][ T7457] IPVS: stop unused estimator thread 0... [ 405.792500][T17066] netlink: 'syz.5.3025': attribute type 142 has an invalid length. [ 406.243259][T17103] netlink: 'syz.5.3030': attribute type 1 has an invalid length. [ 406.266843][T17103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.277689][T17105] .: renamed from bridge_slave_1 [ 406.409925][T16678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 406.446543][T17111] netlink: 'syz.2.3031': attribute type 2 has an invalid length. [ 406.454331][T17111] __nla_validate_parse: 2 callbacks suppressed [ 406.454351][T17111] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3031'. [ 406.505586][T16678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 406.562052][T16678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 406.598917][T17118] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3034'. [ 406.602079][T16678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 406.820507][T16678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.934726][T16678] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.982634][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.989853][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.034547][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.041778][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.174432][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3040'. [ 407.530223][T17184] syzkaller1: entered promiscuous mode [ 407.558541][T17184] syzkaller1: entered allmulticast mode [ 407.724848][T16678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.859841][T17208] netlink: 'syz.5.3052': attribute type 1 has an invalid length. [ 407.919458][T16678] veth0_vlan: entered promiscuous mode [ 407.963410][T16678] veth1_vlan: entered promiscuous mode [ 408.052985][T17215] xt_hashlimit: size too large, truncated to 1048576 [ 408.120255][T17220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3054'. [ 408.131848][T16678] veth0_macvtap: entered promiscuous mode [ 408.416940][T16678] veth1_macvtap: entered promiscuous mode [ 408.588348][T16678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.640474][T16678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.675429][ T3604] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.737092][ T3604] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.769633][ T3604] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.802005][ T3604] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.811327][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3060'. [ 408.824653][T17252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3056'. [ 408.981200][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3060'. [ 409.925381][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 409.933490][ C0] lec:lec_tx_timeout: lec0 [ 409.938800][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 411.776038][T17289] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 412.024273][T17289] syzkaller0: entered promiscuous mode [ 412.032956][T17289] syzkaller0: entered allmulticast mode [ 412.070170][T17294] syzkaller0: entered allmulticast mode [ 412.081537][ T7448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.100238][T17294] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 412.114667][ T7448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.361171][T17305] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 412.421478][ T7454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.429986][ T7454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.476452][T17305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3071'. [ 413.062295][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.095543][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 413.117507][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 413.134037][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 413.144024][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 413.257295][T17344] netlink: 212356 bytes leftover after parsing attributes in process `syz.5.3085'. [ 413.762539][T17342] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.110591][T17342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.143458][T17342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.454305][T17342] veth1_vlan: left allmulticast mode [ 414.557659][ T3604] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.574357][ T3604] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.636217][ T3604] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.645187][ T3604] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.759390][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3098'. [ 414.809537][T17387] syzkaller0: entered promiscuous mode [ 414.815084][T17387] syzkaller0: entered allmulticast mode [ 414.892660][T17387] tipc: Enabled bearer , priority 0 [ 414.905717][T17385] tipc: Resetting bearer [ 414.933049][T17385] tipc: Disabling bearer [ 414.945307][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 414.953438][ C0] lec:lec_tx_timeout: lec0 [ 414.958192][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 415.104027][T17401] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 415.118407][T17401] bond1 (unregistering): Released all slaves [ 415.142433][T17339] chnl_net:caif_netlink_parms(): no params data found [ 415.209028][ T5837] Bluetooth: hci2: command tx timeout [ 415.326739][T17411] netlink: 'syz.5.3104': attribute type 1 has an invalid length. [ 415.341534][T17339] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.352416][T17339] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.362413][T17414] Cannot find add_set index 0 as target [ 415.368760][T17339] bridge_slave_0: entered allmulticast mode [ 415.376058][T17339] bridge_slave_0: entered promiscuous mode [ 415.384593][T17411] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 415.385175][T17339] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.459058][T17339] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.481762][T17339] bridge_slave_1: entered allmulticast mode [ 415.500515][T17339] bridge_slave_1: entered promiscuous mode [ 415.585155][T17423] smc: net device team0 applied user defined pnetid SYZ2 [ 415.588548][T17339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.618666][T17339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.664190][T17432] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3109'. [ 415.676990][T17429] smc: net device caif0 applied user defined pnetid SYZ2 [ 415.797799][T17339] team0: Port device team_slave_0 added [ 415.818120][T17339] team0: Port device team_slave_1 added [ 415.897763][T17339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.905565][T17339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.960560][T17339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.986873][T17339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.993866][T17339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.023522][T17339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.153974][T17463] IPVS: ip_vs_add_dest(): server weight less than zero [ 416.161085][ T107] IPVS: starting estimator thread 0... [ 416.187800][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 416.212579][T17339] hsr_slave_0: entered promiscuous mode [ 416.226154][T17463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3116'. [ 416.229724][T17339] hsr_slave_1: entered promiscuous mode [ 416.258476][T17339] debugfs: 'hsr0' already exists in 'hsr' [ 416.267312][T17464] IPVS: using max 55 ests per chain, 132000 per kthread [ 416.283874][T17339] Cannot create hsr debugfs directory [ 416.335764][T17471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3119'. [ 416.417683][ T7457] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.455385][ T7457] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.530761][ T7457] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.550157][ T7457] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.605901][T17480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3123'. [ 416.860471][T17339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.889852][T17496] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3129'. [ 416.899339][T17339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.899409][T17339] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 417.251215][T17339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.268694][T17339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.279548][T17339] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 417.286530][ T5837] Bluetooth: hci2: command tx timeout [ 417.473524][T17339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.485677][T17339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.496122][T17339] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 417.566233][T17339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.587605][T17339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.588506][T17526] netlink: 'syz.3.3137': attribute type 39 has an invalid length. [ 417.600787][T17339] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 417.729476][T17533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3138'. [ 417.917739][T17339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.952045][T17339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.984426][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3141'. [ 417.987960][T17339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 418.011231][T17539] netlink: 'syz.5.3141': attribute type 1 has an invalid length. [ 418.030108][T17339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.054770][T17541] tipc: MTU too low for tipc bearer [ 418.212979][T17339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.277117][T17339] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.314709][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.321921][ T7457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.401786][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.409012][ T7457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.453931][T17563] syzkaller0: entered promiscuous mode [ 418.460286][T17563] syzkaller0: entered allmulticast mode [ 418.561330][T17575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.600297][T17576] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3151'. [ 418.796605][T17339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.820743][T17584] rdma_op ffff88801e6901f0 conn xmit_rdma 0000000000000000 [ 418.857659][T17339] veth0_vlan: entered promiscuous mode [ 418.890165][T17339] veth1_vlan: entered promiscuous mode [ 418.968298][T17339] veth0_macvtap: entered promiscuous mode [ 418.978646][T17339] veth1_macvtap: entered promiscuous mode [ 419.013448][T17589] dvmrp0: entered allmulticast mode [ 419.040222][T17339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.079284][T17339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.102855][T17593] netlink: 'syz.5.3156': attribute type 83 has an invalid length. [ 419.123924][ T7457] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.139979][ T7457] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.155144][ T7457] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.186123][ T7457] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.372787][T17603] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3159'. [ 419.375333][ T5837] Bluetooth: hci2: command tx timeout [ 419.551177][ T7454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.598880][ T7454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.729644][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.751838][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.757048][T17626] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3167'. [ 419.789215][T17626] netlink: 'syz.6.3167': attribute type 1 has an invalid length. [ 419.833448][T17626] netlink: 'syz.6.3167': attribute type 1 has an invalid length. [ 419.871719][T17626] netlink: 'syz.6.3167': attribute type 2 has an invalid length. [ 419.893748][T17626] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3167'. [ 419.895072][T17636] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 419.965299][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 419.973379][ C0] lec:lec_tx_timeout: lec0 [ 419.983964][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 420.102067][T17646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3170'. [ 420.129219][T17646] bridge_slave_0: default FDB implementation only supports local addresses [ 420.270582][T17647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.634247][T17683] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3183'. [ 420.743624][T17687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3185'. [ 420.814954][T17687] tipc: Failed to obtain node identity [ 420.822422][T17687] tipc: Enabling of bearer rejected, failed to enable media [ 420.871356][T17694] tipc: Started in network mode [ 420.876872][T17694] tipc: Node identity 7e04269a0abe, cluster identity 4711 [ 420.890799][T17694] tipc: Enabled bearer , priority 0 [ 420.990225][T17707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3188'. [ 420.994308][T17704] netlink: 'syz.1.3190': attribute type 1 has an invalid length. [ 421.022312][T17694] syzkaller0: entered promiscuous mode [ 421.037146][T17694] syzkaller0: entered allmulticast mode [ 421.043848][T17694] tipc: Resetting bearer [ 421.154920][ T7442] tipc: Resetting bearer [ 421.201337][T17709] bond4: (slave bridge3): making interface the new active one [ 421.210094][T17709] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 421.275551][T17688] tipc: Resetting bearer [ 421.456406][ T5837] Bluetooth: hci2: command tx timeout [ 422.057721][T17751] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 423.090748][T17688] tipc: Disabling bearer [ 423.103051][ T107] tipc: Node number set to 1958356634 [ 423.437581][T17772] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 423.593029][T17784] __nla_validate_parse: 3 callbacks suppressed [ 423.593050][T17784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3212'. [ 423.728291][T17790] xt_l2tp: unknown flags: 10 [ 423.740381][T17790] xt_l2tp: unknown flags: 10 [ 423.753119][T17790] xt_l2tp: unknown flags: 10 [ 423.753965][T17793] x_tables: unsorted entry at hook 3 [ 423.768865][T17790] xt_l2tp: unknown flags: 10 [ 423.774894][T17790] xt_l2tp: unknown flags: 10 [ 423.785845][T17790] xt_l2tp: unknown flags: 10 [ 423.805948][T17790] xt_l2tp: unknown flags: 10 [ 423.827387][T17790] xt_l2tp: unknown flags: 10 [ 423.833931][T17790] xt_l2tp: unknown flags: 10 [ 423.851982][T17790] xt_l2tp: unknown flags: 10 [ 424.042379][T17801] xt_hashlimit: overflow, rate too high: 0 [ 424.089018][T17804] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3218'. [ 424.120461][T17806] netlink: 'syz.6.3220': attribute type 5 has an invalid length. [ 424.242898][T17814] netlink: 'syz.2.3224': attribute type 21 has an invalid length. [ 424.282615][T17814] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.317927][T17821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.423745][T17830] netlink: 'syz.3.3228': attribute type 28 has an invalid length. [ 424.454464][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3226'. [ 424.473635][T17830] netlink: 'syz.3.3228': attribute type 3 has an invalid length. [ 424.487966][T17830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3228'. [ 424.787981][T17849] IPVS: sed: FWM 3 0x00000003 - no destination available [ 424.801269][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 424.856498][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3234'. [ 424.995547][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 425.003612][ C0] lec:lec_tx_timeout: lec0 [ 425.008273][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 425.305598][T17877] netlink: 'syz.6.3241': attribute type 13 has an invalid length. [ 425.426556][T17890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3245'. [ 425.438886][T17889] dvmrp0: entered allmulticast mode [ 425.476902][T17892] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3247'. [ 425.613198][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3249'. [ 425.630543][T17907] netlink: 'syz.6.3249': attribute type 1 has an invalid length. [ 425.723480][T17907] bond1: (slave geneve2): making interface the new active one [ 425.735217][T17907] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 425.752152][T17919] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3252'. [ 425.764354][T17919] netlink: 'syz.5.3252': attribute type 1 has an invalid length. [ 425.775596][ T3474] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 425.784539][ T7454] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 425.806918][ T7454] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 425.870685][T17919] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3252'. [ 425.961799][ T7454] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 425.982701][T17930] openvswitch: netlink: IP tunnel dst address not specified [ 426.413006][T17949] netem: change failed [ 426.603467][T17955] netlink: 'syz.5.3265': attribute type 4 has an invalid length. [ 426.618583][T17962] netlink: 'syz.1.3266': attribute type 2 has an invalid length. [ 426.693155][T17962] : entered promiscuous mode [ 426.722003][T17964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.814010][T17964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.889504][T17966] veth0: entered promiscuous mode [ 426.917182][T17961] veth0: left promiscuous mode [ 427.279481][T18001] tipc: Enabling of bearer rejected, failed to enable media [ 427.423206][T18011] xt_TCPMSS: Only works on TCP SYN packets [ 427.483219][T18011] netlink: 'syz.6.3280': attribute type 1 has an invalid length. [ 428.019843][T18044] delete_channel: no stack [ 428.279854][T18050] syzkaller0: entered promiscuous mode [ 428.285946][T18050] syzkaller0: entered allmulticast mode [ 428.441761][T18060] sctp: [Deprecated]: syz.1.3296 (pid 18060) Use of int in max_burst socket option deprecated. [ 428.441761][T18060] Use struct sctp_assoc_value instead [ 430.016785][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 430.024809][ C0] lec:lec_tx_timeout: lec0 [ 430.029841][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 430.159488][T18080] macsec0: entered promiscuous mode [ 430.164760][T18080] macsec0: entered allmulticast mode [ 430.191601][T18081] veth1_macvtap: entered allmulticast mode [ 430.206804][T18081] macsec0: left promiscuous mode [ 430.223522][T18081] macsec0: left allmulticast mode [ 430.233215][T18081] veth1_macvtap: left allmulticast mode [ 430.497348][T18099] 8021q: VLANs not supported on sit0 [ 430.509408][T18104] netlink: 'syz.2.3307': attribute type 29 has an invalid length. [ 430.656828][T18110] netlink: 'syz.3.3308': attribute type 3 has an invalid length. [ 430.706288][T18113] netlink: 'syz.6.3310': attribute type 4 has an invalid length. [ 430.932657][T18125] netlink: 'syz.1.3316': attribute type 1 has an invalid length. [ 430.942223][T18125] netlink: 'syz.1.3316': attribute type 7 has an invalid length. [ 430.975724][T18125] netlink: 'syz.1.3316': attribute type 8 has an invalid length. [ 430.983507][T18125] __nla_validate_parse: 8 callbacks suppressed [ 430.983525][T18125] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3316'. [ 430.994459][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3316'. [ 431.040195][T18125] NCSI netlink: No device for ifindex 65584 [ 431.053742][T18131] netlink: 'syz.6.3315': attribute type 5 has an invalid length. [ 431.070580][T18131] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3315'. [ 431.664634][T18157] dvmrp6: entered allmulticast mode [ 431.732932][T18168] ip6t_rpfilter: unknown options [ 431.844701][T18171] validate_nla: 2 callbacks suppressed [ 431.844719][T18171] netlink: 'syz.2.3329': attribute type 21 has an invalid length. [ 431.923098][T18171] netlink: 'syz.2.3329': attribute type 22 has an invalid length. [ 431.932982][T18180] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3332'. [ 431.955029][T18171] netlink: 'syz.2.3329': attribute type 23 has an invalid length. [ 431.967613][T18171] netlink: 'syz.2.3329': attribute type 25 has an invalid length. [ 431.976807][T18171] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3329'. [ 431.987781][T18180] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3332'. [ 432.022492][T18180] bridge0: port 2(syz_tun) entered blocking state [ 432.051929][T18180] bridge0: port 2(syz_tun) entered disabled state [ 432.062407][T18180] syz_tun: entered allmulticast mode [ 432.077618][T18180] syz_tun: entered promiscuous mode [ 432.090476][T18188] delete_channel: no stack [ 432.828334][T18235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3343'. [ 432.899880][T18239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3345'. [ 432.985839][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3349'. [ 433.005356][T18245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3349'. [ 433.239424][T17045] udevd[17045]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 433.314328][T17045] udevd[17045]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 433.362342][T18261] syzkaller0: entered promiscuous mode [ 433.377766][T18261] syzkaller0: entered allmulticast mode [ 433.426939][T18271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.447785][T18273] netlink: 'syz.1.3357': attribute type 6 has an invalid length. [ 433.642305][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027f5ec00: rx timeout, send abort [ 434.142797][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027f5d800: rx timeout, send abort [ 434.151967][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027f5ec00: abort rx timeout. Force session deactivation [ 434.238200][T18321] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 434.330601][T18325] x_tables: unsorted entry at hook 3 [ 434.378832][T18321] bond1 (unregistering): Released all slaves [ 434.451383][T18334] syzkaller0: entered promiscuous mode [ 434.469753][T18334] syzkaller0: entered allmulticast mode [ 434.651039][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027f5d800: abort rx timeout. Force session deactivation [ 435.045339][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 435.053416][ C0] lec:lec_tx_timeout: lec0 [ 435.057793][T18376] openvswitch: netlink: IPv6 tunnel dst address is zero [ 435.058662][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 435.247444][T18391] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 435.333891][T18398] sctp: [Deprecated]: syz.1.3398 (pid 18398) Use of int in max_burst socket option. [ 435.333891][T18398] Use struct sctp_assoc_value instead [ 435.720466][T18419] syzkaller0: entered promiscuous mode [ 435.735541][T18419] syzkaller0: entered allmulticast mode [ 436.017987][T18435] tipc: Enabled bearer , priority 0 [ 436.057606][T18435] syzkaller0: entered promiscuous mode [ 436.079647][T18435] syzkaller0: entered allmulticast mode [ 436.108450][T18435] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 436.184635][T18435] tipc: Resetting bearer [ 436.222261][T18433] tipc: Resetting bearer [ 436.247591][T18433] tipc: Disabling bearer [ 436.416378][T18451] tipc: Failed to obtain node identity [ 436.422898][T18451] tipc: Enabling of bearer rejected, failed to enable media [ 436.552617][T18462] __nla_validate_parse: 8 callbacks suppressed [ 436.552635][T18462] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3416'. [ 437.167019][T18496] netlink: 'syz.6.3426': attribute type 1 has an invalid length. [ 437.192366][T18496] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3426'. [ 437.319694][T18504] xt_bpf: check failed: parse error [ 437.463628][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3431'. [ 437.588056][T18522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3433'. [ 437.733215][T18530] x_tables: duplicate underflow at hook 1 [ 437.912845][T18548] netlink: 'syz.3.3439': attribute type 1 has an invalid length. [ 437.955482][T18550] netlink: 'syz.3.3439': attribute type 1 has an invalid length. [ 437.987375][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3442'. [ 438.048931][T18554] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3442'. [ 438.077443][T18554] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3442'. [ 438.211883][T18571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.304176][T18580] : renamed from bond0 (while UP) [ 439.020313][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3456'. [ 440.012940][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.885682][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 440.893762][ C0] lec:lec_tx_timeout: lec0 [ 440.898675][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 441.211260][T18574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.370790][T18621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3460'. [ 441.384314][T18624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3459'. [ 441.440362][T18626] veth0_to_bond: entered promiscuous mode [ 441.510463][T18626] veth0_to_bond: entered allmulticast mode [ 441.712689][T18652] netlink: 'syz.2.3467': attribute type 4 has an invalid length. [ 441.936895][T18662] __nla_validate_parse: 1 callbacks suppressed [ 441.936916][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'. [ 442.123207][T18675] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.3475'. [ 442.673203][T18703] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3480'. [ 442.699973][T18703] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3480'. [ 442.724253][T18716] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3484'. [ 443.081616][T18746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.099222][T18739] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 443.184974][T18750] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3492'. [ 443.331797][T18759] syz_tun: entered allmulticast mode [ 443.344861][T18759] dvmrp8: entered allmulticast mode [ 443.353319][T18759] dvmrp8: left allmulticast mode [ 443.444423][T18765] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 443.489747][T18757] syz_tun: left allmulticast mode [ 443.673419][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3498'. [ 443.683583][T18774] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 443.705852][T18780] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3500'. [ 443.774310][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3500'. [ 443.802958][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3500'. [ 444.196727][T18813] xt_hashlimit: size too large, truncated to 1048576 [ 444.366101][T18827] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 445.045713][T18856] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 445.799335][T18892] netlink: 'syz.5.3531': attribute type 29 has an invalid length. [ 445.824179][T18892] netlink: 'syz.5.3531': attribute type 29 has an invalid length. [ 445.905534][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 445.913575][ C0] lec:lec_tx_timeout: lec0 [ 445.918550][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 446.262298][T18916] syzkaller0: entered promiscuous mode [ 446.269622][T18916] syzkaller0: entered allmulticast mode [ 446.365702][T18921] bond0: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 446.384871][T18921] bond0 (unregistering): Released all slaves [ 446.440264][T18930] syz_tun: entered allmulticast mode [ 446.521374][T18935] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 446.543361][T18935] bond2 (unregistering): Released all slaves [ 446.649499][T18921] dvmrp8: entered allmulticast mode [ 446.697183][T18941] dvmrp8: left allmulticast mode [ 446.849834][T18948] syzkaller0: entered promiscuous mode [ 446.858257][T18948] syzkaller0: entered allmulticast mode [ 446.877650][T18920] syz_tun: left allmulticast mode [ 447.280049][T18980] __nla_validate_parse: 8 callbacks suppressed [ 447.280070][T18980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3557'. [ 447.340170][T18984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3558'. [ 447.403309][T18991] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3562'. [ 447.515077][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3560'. [ 447.535102][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3560'. [ 447.633298][T19004] netlink: 'syz.6.3564': attribute type 4 has an invalid length. [ 447.658738][T19004] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3564'. [ 447.692715][T19004] `: renamed from bond0 [ 447.932530][T19018] macvtap1: entered allmulticast mode [ 447.947030][T19018] veth0_macvtap: entered allmulticast mode [ 448.007644][T19026] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 448.037927][T19028] ieee802154 phy1 wpan1: encryption failed: -90 [ 448.068780][T19032] netlink: 'syz.3.3573': attribute type 29 has an invalid length. [ 448.222431][T19039] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3575'. [ 448.385655][T19049] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 448.398908][T19049] bond1 (unregistering): Released all slaves [ 448.548299][T19061] tipc: Failed to remove unknown binding: 66,0,0/1958356634:962783705/962783706 [ 448.570532][T19063] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3583'. [ 448.598896][T19061] tipc: Failed to remove unknown binding: 66,0,0/1958356634:962783705/962783706 [ 449.000739][T19101] netlink: 'syz.3.3594': attribute type 11 has an invalid length. [ 449.009905][T19101] netlink: 'syz.3.3594': attribute type 4 has an invalid length. [ 449.018381][T19101] netlink: 199768 bytes leftover after parsing attributes in process `syz.3.3594'. [ 449.245841][T19116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3599'. [ 449.415209][T19125] netlink: 'syz.3.3602': attribute type 4 has an invalid length. [ 449.492588][T19128] xfrm1: entered promiscuous mode [ 449.498787][T19128] xfrm1: entered allmulticast mode [ 449.658580][T19141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.768976][T19151] netlink: 'syz.6.3610': attribute type 4 has an invalid length. [ 450.015152][T19165] netlink: 'syz.1.3621': attribute type 1 has an invalid length. [ 450.189811][T19165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.382817][T19179] bond0: (slave veth3): Enslaving as an active interface with a down link [ 450.456975][T19165] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 450.474705][T19165] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 450.518419][T19203] tipc: Enabled bearer , priority 0 [ 450.541300][T19200] syzkaller1: entered promiscuous mode [ 450.546967][T19200] syzkaller1: entered allmulticast mode [ 450.634396][T19207] x_tables: duplicate entry at hook 3 [ 450.655197][T19197] tipc: Disabling bearer [ 450.925289][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 450.933361][ C0] lec:lec_tx_timeout: lec0 [ 450.938166][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 451.270574][T19251] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 451.299164][T19253] x_tables: duplicate underflow at hook 4 [ 451.320282][T19246] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 451.479735][T19265] IPVS: ip_vs_add_dest(): server weight less than zero [ 451.898346][T19296] tipc: Started in network mode [ 451.916564][T19296] tipc: Node identity , cluster identity 4711 [ 451.931546][T19296] tipc: Failed to set node id, please configure manually [ 451.961706][T19296] tipc: Enabling of bearer rejected, failed to enable media [ 452.247496][T19321] openvswitch: netlink: Flow key attr not present in new flow. [ 452.411962][ T798] IPVS: starting estimator thread 0... [ 452.419602][T19330] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 452.495799][ T5837] Bluetooth: hci2: command tx timeout [ 452.525791][T19332] IPVS: using max 31 ests per chain, 74400 per kthread [ 452.685482][T19351] netlink: 'syz.1.3676': attribute type 1 has an invalid length. [ 452.693427][T19351] __nla_validate_parse: 18 callbacks suppressed [ 452.693448][T19351] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3676'. [ 452.703739][T19346] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3676'. [ 452.740543][T19352] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3677'. [ 452.774815][T19352] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3677'. [ 452.807605][T19357] xt_l2tp: invalid flags combination: 0 [ 452.968522][T19365] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 453.049077][T19365] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 453.067455][T19365] gretap2: entered promiscuous mode [ 453.092939][T19365] gretap2: entered allmulticast mode [ 453.178317][T19368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3684'. [ 453.243819][T19374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3684'. [ 453.430326][T19368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.444612][T19368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.462119][T19368] bond0 (unregistering): Released all slaves [ 453.485721][T19391] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 453.575623][T19395] netlink: 'syz.3.3690': attribute type 3 has an invalid length. [ 454.274800][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3700'. [ 454.289775][T19449] gtp0: entered promiscuous mode [ 454.294766][T19449] gtp0: entered allmulticast mode [ 454.355491][T19452] netlink: 5496 bytes leftover after parsing attributes in process `syz.1.3702'. [ 454.380204][ T798] IPVS: starting estimator thread 0... [ 454.535605][T19456] IPVS: using max 30 ests per chain, 72000 per kthread [ 454.961187][T19463] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3705'. [ 455.945537][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 455.953597][ C0] lec:lec_tx_timeout: lec0 [ 457.061306][T19428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.256618][T19494] sctp: [Deprecated]: syz.2.3715 (pid 19494) Use of int in maxseg socket option. [ 457.256618][T19494] Use struct sctp_assoc_value instead [ 457.284988][T19494] sctp: [Deprecated]: syz.2.3715 (pid 19494) Use of int in maxseg socket option. [ 457.284988][T19494] Use struct sctp_assoc_value instead [ 457.353291][T19507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3715'. [ 457.957944][T19536] netlink: 'syz.2.3725': attribute type 10 has an invalid length. [ 457.979272][T19536] team0: Device ipvlan1 failed to register rx_handler [ 458.031979][T19543] __nla_validate_parse: 1 callbacks suppressed [ 458.031997][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3727'. [ 458.101163][T19543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3727'. [ 458.145406][ T3604] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.164630][ T3604] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.181098][T19550] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3728'. [ 458.219333][ T3604] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.231132][ T3604] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.260709][T19562] netlink: 'syz.2.3729': attribute type 9 has an invalid length. [ 458.289503][T19562] netlink: 'syz.2.3729': attribute type 11 has an invalid length. [ 458.298855][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3732'. [ 458.306537][T19562] netlink: 'syz.2.3729': attribute type 12 has an invalid length. [ 458.350617][T19569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3733'. [ 458.366600][T19562] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3729'. [ 458.382782][T19564] gtp0: entered promiscuous mode [ 458.395452][T19564] gtp0: entered allmulticast mode [ 458.460669][ T5837] block nbd2: Receive control failed (result -107) [ 458.891116][T19600] syzkaller0: entered promiscuous mode [ 458.906240][T19600] syzkaller0: entered allmulticast mode [ 458.967781][ T5837] Bluetooth: hci2: link tx timeout [ 458.973548][ T5837] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 458.975103][T19606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3742'. [ 459.015152][T19606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3742'. [ 459.055755][T19609] syz.5.3743: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 459.101499][T19612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.116254][T19609] CPU: 1 UID: 0 PID: 19609 Comm: syz.5.3743 Not tainted syzkaller #0 PREEMPT(full) [ 459.116280][T19609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 459.116295][T19609] Call Trace: [ 459.116303][T19609] [ 459.116310][T19609] dump_stack_lvl+0xe8/0x150 [ 459.116339][T19609] warn_alloc+0x249/0x340 [ 459.116358][T19609] ? stack_trace_save+0xa9/0x100 [ 459.116381][T19609] ? __pfx_warn_alloc+0x10/0x10 [ 459.116405][T19609] ? kasan_save_track+0x4f/0x80 [ 459.116419][T19609] ? kasan_save_track+0x3e/0x80 [ 459.116432][T19609] ? __kasan_kmalloc+0x93/0xb0 [ 459.116446][T19609] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 459.116462][T19609] ? xskq_create+0x56/0x170 [ 459.116478][T19609] ? xsk_setsockopt+0x54c/0x990 [ 459.116497][T19609] ? do_sock_setsockopt+0x17c/0x1b0 [ 459.116516][T19609] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 459.116533][T19609] ? do_syscall_64+0xe2/0xf80 [ 459.116553][T19609] __vmalloc_node_range_noprof+0x132/0x1730 [ 459.116600][T19609] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 459.116623][T19609] ? __kasan_kmalloc+0x93/0xb0 [ 459.116641][T19609] vmalloc_user_noprof+0xad/0xe0 [ 459.116655][T19609] ? xskq_create+0xbf/0x170 [ 459.116670][T19609] xskq_create+0xbf/0x170 [ 459.116687][T19609] xsk_init_queue+0xad/0x110 [ 459.116710][T19609] xsk_setsockopt+0x54c/0x990 [ 459.116734][T19609] ? __pfx_xsk_setsockopt+0x10/0x10 [ 459.116759][T19609] ? __pfx_aa_sk_perm+0x10/0x10 [ 459.116780][T19609] ? aa_sock_opt_perm+0xff/0x1a0 [ 459.116808][T19609] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 459.116827][T19609] ? __pfx_xsk_setsockopt+0x10/0x10 [ 459.116854][T19609] do_sock_setsockopt+0x17c/0x1b0 [ 459.116879][T19609] __x64_sys_setsockopt+0x13d/0x1b0 [ 459.116905][T19609] do_syscall_64+0xe2/0xf80 [ 459.116922][T19609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.116938][T19609] ? trace_irq_disable+0x37/0x100 [ 459.116954][T19609] ? clear_bhb_loop+0x60/0xb0 [ 459.116974][T19609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.116997][T19609] RIP: 0033:0x7f6c2d99aeb9 [ 459.117014][T19609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.117028][T19609] RSP: 002b:00007f6c2e7ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 459.117047][T19609] RAX: ffffffffffffffda RBX: 00007f6c2dc15fa0 RCX: 00007f6c2d99aeb9 [ 459.117059][T19609] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 459.117069][T19609] RBP: 00007f6c2da08c1f R08: 0000000000000004 R09: 0000000000000000 [ 459.117078][T19609] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.117087][T19609] R13: 00007f6c2dc16038 R14: 00007f6c2dc15fa0 R15: 00007ffddc49bce8 [ 459.117113][T19609] [ 459.117235][T19609] Mem-Info: [ 459.117294][T19609] active_anon:6773 inactive_anon:0 isolated_anon:0 [ 459.117294][T19609] active_file:2825 inactive_file:40051 isolated_file:0 [ 459.117294][T19609] unevictable:768 dirty:41 writeback:0 [ 459.117294][T19609] slab_reclaimable:12310 slab_unreclaimable:121712 [ 459.117294][T19609] mapped:39535 shmem:1363 pagetables:1482 [ 459.117294][T19609] sec_pagetables:0 bounce:0 [ 459.117294][T19609] kernel_misc_reclaimable:0 [ 459.117294][T19609] free:1275753 free_pcp:13458 free_cma:0 [ 459.117341][T19609] Node 0 active_anon:27092kB inactive_anon:0kB active_file:11300kB inactive_file:160000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158140kB dirty:164kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15380kB pagetables:5788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 459.117386][T19609] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 459.117428][T19609] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.117485][T19609] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 459.117526][T19609] Node 0 DMA32 free:1199892kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27092kB inactive_anon:0kB active_file:11300kB inactive_file:160000kB unevictable:1536kB writepending:164kB zspages:0kB present:3129332kB managed:2554120kB mlocked:0kB bounce:0kB free_pcp:37136kB local_pcp:15920kB free_cma:0kB [ 459.117581][T19609] lowmem_reserve[]: 0 0 1 1 1 [ 459.117619][T19609] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.117671][T19609] lowmem_reserve[]: 0 0 0 0 0 [ 459.117710][T19609] Node 1 Normal free:3887760kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16712kB local_pcp:6464kB free_cma:0kB [ 459.117764][T19609] lowmem_reserve[]: 0 0 0 0 0 [ 459.117834][T19609] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 459.117957][T19609] Node 0 DMA32: 5826*4kB (UM) 4437*8kB (UME) 1182*16kB (UM) 101*32kB (UM) 294*64kB (UM) 447*128kB (UM) 264*256kB (UM) 171*512kB (UM) 113*1024kB (UE) 65*2048kB (UME) 156*4096kB (UM) = 1199920kB [ 459.118127][T19609] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 459.118231][T19609] Node 1 Normal: 222*4kB (UE) 61*8kB (UME) 57*16kB (UME) 97*32kB (UME) 32*64kB (UME) 11*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3887760kB [ 459.118401][T19609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.118417][T19609] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 459.118433][T19609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.118448][T19609] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 459.118464][T19609] 44235 total pagecache pages [ 459.118478][T19609] 0 pages in swap cache [ 459.118486][T19609] Free swap = 124996kB [ 459.118494][T19609] Total swap = 124996kB [ 459.118503][T19609] 2097051 pages RAM [ 459.118510][T19609] 0 pages HighMem/MovableOnly [ 459.118518][T19609] 426623 pages reserved [ 459.118525][T19609] 0 pages cma reserved [ 459.356272][T19619] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20001 [ 459.367278][T19620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3745'. [ 459.885211][T19630] ieee802154 phy1 wpan1: encryption failed: -22 [ 459.895204][T19632] 8021q: VLANs not supported on xfrm0 [ 459.904852][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 460.227917][T19654] netlink: 'syz.5.3752': attribute type 13 has an invalid length. [ 460.236611][T19654] netlink: 'syz.5.3752': attribute type 17 has an invalid length. [ 460.412986][T19666] netlink: 'syz.1.3757': attribute type 1 has an invalid length. [ 460.547706][T19654] 8021q: adding VLAN 0 to HW filter on device ` [ 460.566052][T19654] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.587511][T19654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.611609][T19675] netem: incorrect gi model size [ 460.649565][T19676] netem: incorrect gi model size [ 460.818498][ T5839] Bluetooth: hci2: link tx timeout [ 460.825000][ T5839] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 460.962500][T19695] netlink: 'syz.2.3764': attribute type 1 has an invalid length. [ 460.999669][T19691] syzkaller0: entered promiscuous mode [ 461.006009][T19691] syzkaller0: entered allmulticast mode [ 461.045718][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 461.487731][T19725] bond6 (unregistering): Released all slaves [ 461.740568][T19747] 8021q: VLANs not supported on gre0 [ 461.755806][T19742] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 461.783162][T12798] IPVS: starting estimator thread 0... [ 461.794991][T19756] netlink: 'syz.2.3779': attribute type 1 has an invalid length. [ 461.831128][T19756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.885490][T19753] IPVS: using max 37 ests per chain, 88800 per kthread [ 461.902065][T19756] bond0: (slave gretap1): making interface the new active one [ 461.922315][T19756] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 462.024966][T19749] tap0: tun_chr_ioctl cmd 2148553947 [ 462.508398][T19802] netlink: 'syz.2.3798': attribute type 21 has an invalid length. [ 462.978621][T19836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.002822][T19839] netlink: 'syz.5.3806': attribute type 9 has an invalid length. [ 463.012907][T19836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.022450][T19836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.030278][T19836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.076642][T19842] veth1_macvtap: left promiscuous mode [ 463.083027][T19842] macsec0: entered promiscuous mode [ 463.088423][T19842] macsec0: entered allmulticast mode [ 463.098449][T19842] openvswitch: netlink: IP tunnel dst address not specified [ 463.106733][T19842] veth1_macvtap: entered promiscuous mode [ 463.112547][T19842] veth1_macvtap: entered allmulticast mode [ 463.120424][T19842] macsec0: left promiscuous mode [ 463.127367][T19842] macsec0: left allmulticast mode [ 463.132575][T19842] veth1_macvtap: left allmulticast mode [ 463.135012][T19839] __nla_validate_parse: 10 callbacks suppressed [ 463.135027][T19839] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3806'. [ 465.875102][T19831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.038038][T19858] syzkaller0: entered promiscuous mode [ 466.043560][T19858] syzkaller0: entered allmulticast mode [ 466.216941][T19873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3817'. [ 466.320320][T19868] nbd: couldn't find a device at index 1 [ 466.340334][T19880] rdma_rxe: rxe_newlink: failed to add lo [ 466.442844][T19880] netlink: 'syz.3.3819': attribute type 3 has an invalid length. [ 466.495968][T19880] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3819'. [ 466.538852][T19895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3823'. [ 466.820125][T19913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3826'. [ 466.853253][T19910] xt_ecn: cannot match TCP bits for non-tcp packets [ 467.827517][T19973] batadv_slave_1: entered promiscuous mode [ 467.863735][T19970] batadv_slave_1: left promiscuous mode [ 467.878946][T19984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3843'. [ 468.070538][T19998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3846'. [ 468.144818][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3846'. [ 468.251047][T20007] syzkaller0: entered promiscuous mode [ 468.258012][T20007] syzkaller0: entered allmulticast mode [ 468.545527][T20028] netlink: 'syz.2.3852': attribute type 1 has an invalid length. [ 468.683027][T20037] netlink: 'syz.5.3854': attribute type 21 has an invalid length. [ 468.893718][T20055] x_tables: duplicate underflow at hook 1 [ 468.982352][T20060] netlink: 'syz.6.3859': attribute type 10 has an invalid length. [ 469.043298][T20060] `: (slave netdevsim0): Enslaving as an active interface with an up link [ 469.072590][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3860'. [ 469.494458][T20093] openvswitch: netlink: Multiple metadata blocks provided [ 469.541851][T20093] openvswitch: netlink: Multiple metadata blocks provided [ 469.752485][T20106] netlink: 'syz.6.3871': attribute type 4 has an invalid length. [ 469.776376][T20106] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3871'. [ 469.838274][T20117] netlink: 'syz.2.3872': attribute type 1 has an invalid length. [ 470.042074][T20132] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 470.070657][T20133] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3877'. [ 470.075486][T20132] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 470.150375][T20132] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 470.167124][T20138] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 470.190655][T20132] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 470.218849][T20132] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 470.239378][T20132] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 470.262005][T20132] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 470.272290][T20132] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 471.059463][T20165] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3884'. [ 471.352293][T20185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3890'. [ 471.463286][T20191] macsec1: entered promiscuous mode [ 471.468139][T20193] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3893'. [ 471.489545][T20193] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3893'. [ 472.064296][T20229] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3902'. [ 472.079639][T20230] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3901'. [ 473.206668][T20302] __nla_validate_parse: 3 callbacks suppressed [ 473.206687][T20302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3924'. [ 473.327667][T20313] syzkaller0: entered promiscuous mode [ 473.333230][T20313] syzkaller0: entered allmulticast mode [ 473.384307][T20317] netlink: 'syz.6.3927': attribute type 1 has an invalid length. [ 473.676275][T20345] Bluetooth: MGMT ver 1.23 [ 473.681372][T20345] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 474.061889][T20365] pimreg: entered allmulticast mode [ 474.978136][T10720] lec:lec_start_xmit: lec0:No lecd attached [ 477.926149][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 479.985446][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 479.993475][ C0] lec:lec_tx_timeout: lec0 [ 486.110727][ T7439] bond_slave_0: left promiscuous mode [ 486.117100][ T7439] : left promiscuous mode [ 486.517735][ T7439] dvmrp6 (unregistering): left allmulticast mode [ 487.010194][ T7439] bond2 (unregistering): (slave macvlan5): Releasing active interface [ 487.024588][ T3604] smc: removing ib device syz0 [ 487.037567][ T7439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.054077][ T7439] bond0 (unregistering): (slave ): Releasing backup interface [ 487.068251][ T7439] bond0 (unregistering): (slave .): Releasing backup interface [ 487.079711][ T7439] bond0 (unregistering): Released all slaves [ 487.090310][ T7439] bond1 (unregistering): Released all slaves [ 487.193260][ T7439] bond2 (unregistering): (slave veth7): Releasing active interface [ 487.202872][ T7439] bond2 (unregistering): Released all slaves [ 487.215232][ T7439] bond3 (unregistering): Released all slaves [ 487.227631][ T7439] bond4 (unregistering): Released all slaves [ 487.335069][ T7439] bond5 (unregistering): Released all slaves [ 487.436751][ T7439] bond6 (unregistering): Released all slaves [ 487.448989][ T7439] bond7 (unregistering): Released all slaves [ 487.554195][ T7439] bond8 (unregistering): Released all slaves [ 488.165435][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 488.429419][ T7439] : left promiscuous mode [ 488.524156][ T7439] tipc: Left network mode [ 488.699965][ T7439] hsr_slave_0: left promiscuous mode [ 488.707025][ T7439] hsr_slave_1: left promiscuous mode [ 488.712805][ T7439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.721218][ T7439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.730453][ T7439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.738000][ T7439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.750801][ T7439] veth1_macvtap: left promiscuous mode [ 488.813124][ T7439] pim6reg (unregistering): left allmulticast mode [ 488.850444][ T7439] pimreg3 (unregistering): left allmulticast mode [ 488.875132][ T7439] pim6reg527 (unregistering): left allmulticast mode [ 489.778797][ T7439] IPVS: stop unused estimator thread 0... [ 495.609507][T20425] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3942'. [ 495.683857][T20435] 8021q: VLANs not supported on lo [ 496.010476][T20460] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 496.037958][T20461] net_ratelimit: 6962 callbacks suppressed [ 496.037977][T20461] openvswitch: netlink: IP tunnel dst address not specified [ 496.209670][T20474] netlink: 'syz.6.3960': attribute type 1 has an invalid length. [ 496.218913][T20474] netlink: 'syz.6.3960': attribute type 2 has an invalid length. [ 496.230440][T20474] netlink: 'syz.6.3960': attribute type 1 has an invalid length. [ 496.254580][T20474] netlink: 'syz.6.3960': attribute type 3 has an invalid length. [ 496.277127][T20474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3960'. [ 496.283679][T20487] netlink: 'syz.5.3962': attribute type 1 has an invalid length. [ 496.323729][T20487] bond2: entered promiscuous mode [ 496.330136][ T31] INFO: task syz.4.2435:14743 blocked for more than 143 seconds. [ 496.330160][ T31] Not tainted syzkaller #0 [ 496.330170][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.330180][ T31] task:syz.4.2435 state:D stack:25880 pid:14743 tgid:14742 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 496.330232][ T31] Call Trace: [ 496.330238][ T31] [ 496.330256][ T31] __schedule+0x14ea/0x5050 [ 496.330297][ T31] ? __pfx___schedule+0x10/0x10 [ 496.330317][ T31] ? schedule+0x90/0x360 [ 496.330333][ T31] schedule+0x164/0x360 [ 496.330348][ T31] schedule_preempt_disabled+0x13/0x30 [ 496.330361][ T31] __mutex_lock+0x7fe/0x1300 [ 496.330381][ T31] ? __mutex_lock+0x5ac/0x1300 [ 496.330398][ T31] ? nfsd_nl_threads_set_doit+0x2cb/0x960 [ 496.330420][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 496.330435][ T31] ? net_generic+0x1e/0x240 [ 496.330456][ T31] ? net_generic+0x1e/0x240 [ 496.330554][ T31] ? net_generic+0x1e/0x240 [ 496.330571][ T31] ? net_generic+0x1e/0x240 [ 496.330592][ T31] nfsd_nl_threads_set_doit+0x2cb/0x960 [ 496.330616][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 496.330635][ T31] ? __asan_memcpy+0x40/0x70 [ 496.330656][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 496.330682][ T31] ? bpf_lsm_capable+0x9/0x20 [ 496.330699][ T31] ? security_capable+0x7e/0x2c0 [ 496.330721][ T31] genl_rcv_msg+0x61c/0x7a0 [ 496.330743][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.330759][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 496.330785][ T31] netlink_rcv_skb+0x232/0x4b0 [ 496.330801][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 496.330818][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 496.330831][ T31] ? genl_rcv+0x19/0x40 [ 496.330859][ T31] ? down_read+0x272/0x2e0 [ 496.330873][ T31] ? genl_rcv+0xd/0x40 [ 496.330891][ T31] genl_rcv+0x28/0x40 [ 496.330907][ T31] netlink_unicast+0x80f/0x9b0 [ 496.330933][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 496.330951][ T31] ? __alloc_skb+0x193/0x390 [ 496.330968][ T31] ? netlink_sendmsg+0x650/0xb40 [ 496.330981][ T31] ? skb_put+0x11b/0x210 [ 496.331000][ T31] netlink_sendmsg+0x813/0xb40 [ 496.331021][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.331039][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 496.331057][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.331074][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.331089][ T31] ____sys_sendmsg+0xa68/0xad0 [ 496.331107][ T31] ? __might_fault+0xaf/0x130 [ 496.331131][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.331156][ T31] ? import_iovec+0x73/0xa0 [ 496.331179][ T31] ___sys_sendmsg+0x2a5/0x360 [ 496.331195][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 496.331217][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.331240][ T31] ? futex_wake+0x4ac/0x580 [ 496.331286][ T31] ? __fget_files+0x2a/0x420 [ 496.331301][ T31] ? __fget_files+0x3a0/0x420 [ 496.331323][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 496.331343][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.331370][ T31] ? rcu_is_watching+0x15/0xb0 [ 496.331394][ T31] do_syscall_64+0xe2/0xf80 [ 496.331411][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.331426][ T31] ? trace_irq_disable+0x37/0x100 [ 496.331441][ T31] ? clear_bhb_loop+0x60/0xb0 [ 496.331458][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.331472][ T31] RIP: 0033:0x7f9d2b59aeb9 [ 496.331486][ T31] RSP: 002b:00007f9d2c51b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.331505][ T31] RAX: ffffffffffffffda RBX: 00007f9d2b815fa0 RCX: 00007f9d2b59aeb9 [ 496.331517][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000009 [ 496.331527][ T31] RBP: 00007f9d2b608c1f R08: 0000000000000000 R09: 0000000000000000 [ 496.331538][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.331548][ T31] R13: 00007f9d2b816038 R14: 00007f9d2b815fa0 R15: 00007ffd555ddc08 [ 496.331687][ T31] [ 496.341222][T20487] 8021q: adding VLAN 0 to HW filter on device bond2 [ 496.351144][ T31] [ 496.351144][ T31] Showing all locks held in the system: [ 496.356075][T20489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3962'. [ 496.366214][ T31] 1 lock held by khungtaskd/31: [ 496.371205][T20489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3962'. [ 496.371273][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3} [ 496.413055][T20487] bond2: (slave bridge6): making interface the new active one [ 496.417078][ T31] , at: debug_show_all_locks+0x2e/0x180 [ 496.417136][ T31] 2 locks held by getty/5585: [ 496.417149][ T31] #0: ffff88814d6be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 496.417206][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 496.417262][ T31] 3 locks held by kworker/u8:11/7439: [ 496.417274][ T31] #0: ffff88802ffb2948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 496.417328][ T31] #1: ffffc9000bea7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0} [ 496.461813][T20487] bridge6: entered promiscuous mode [ 496.461999][ T31] , at: process_scheduled_works+0xa0f/0x17a0 [ 496.481098][T20487] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 496.482653][ T31] #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 496.850442][ T31] 2 locks held by syz.0.2170/13829: [ 496.855694][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.863903][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 496.874726][ T31] 2 locks held by syz.4.2435/14743: [ 496.879967][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 496.888253][ T31] #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 496.898430][ T31] [ 496.900765][ T31] ============================================= [ 496.900765][ T31] [ 496.909270][ T31] NMI backtrace for cpu 1 [ 496.909286][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 496.909303][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 496.909313][ T31] Call Trace: [ 496.909319][ T31] [ 496.909325][ T31] dump_stack_lvl+0xe8/0x150 [ 496.909349][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 496.909370][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 496.909394][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 496.909417][ T31] sys_info+0x135/0x170 [ 496.909434][ T31] watchdog+0xf90/0xfe0 [ 496.909456][ T31] ? watchdog+0x209/0xfe0 [ 496.909479][ T31] kthread+0x726/0x8b0 [ 496.909500][ T31] ? __pfx_watchdog+0x10/0x10 [ 496.909516][ T31] ? __pfx_kthread+0x10/0x10 [ 496.909537][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.909552][ T31] ? __pfx_kthread+0x10/0x10 [ 496.909571][ T31] ret_from_fork+0x51b/0xa40 [ 496.909589][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 496.909602][ T31] ? __switch_to+0xc82/0x1410 [ 496.909626][ T31] ? __pfx_kthread+0x10/0x10 [ 496.909646][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.909682][ T31] [ 496.909689][ T31] Sending NMI from CPU 1 to CPUs 0: [ 497.032733][ C0] NMI backtrace for cpu 0 [ 497.032752][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 497.032769][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 497.032778][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 497.032799][ C0] Code: b8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 69 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 497.032811][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000246 [ 497.032826][ C0] RAX: 000000000021cccf RBX: ffffffff8199570d RCX: 0000000080000001 [ 497.032836][ C0] RDX: 0000000000000001 RSI: ffffffff8dcc99c0 RDI: ffffffff8c073a00 [ 497.032847][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 497.032857][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1b70 [ 497.032868][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 497.032878][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 497.032890][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.032900][ C0] CR2: 00007f78fcfe4198 CR3: 000000007e146000 CR4: 00000000003526f0 [ 497.032914][ C0] Call Trace: [ 497.032921][ C0] [ 497.032927][ C0] default_idle+0x9/0x20 [ 497.032944][ C0] default_idle_call+0x72/0xb0 [ 497.032961][ C0] do_idle+0x1bd/0x500 [ 497.032975][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 497.032993][ C0] ? __pfx_do_idle+0x10/0x10 [ 497.033010][ C0] cpu_startup_entry+0x43/0x60 [ 497.033023][ C0] rest_init+0x2de/0x300 [ 497.033041][ C0] start_kernel+0x380/0x3d0 [ 497.033061][ C0] x86_64_start_reservations+0x24/0x30 [ 497.033077][ C0] x86_64_start_kernel+0x143/0x1c0 [ 497.033095][ C0] common_startup_64+0x13e/0x147 [ 497.033120][ C0] [ 497.218434][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 497.225335][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 497.234444][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 497.244496][ T31] Call Trace: [ 497.247768][ T31] [ 497.250689][ T31] vpanic+0x1e0/0x670 [ 497.254663][ T31] panic+0xc5/0xd0 [ 497.258372][ T31] ? __pfx_panic+0x10/0x10 [ 497.262778][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 497.268146][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 497.274294][ T31] watchdog+0xfda/0xfe0 [ 497.278448][ T31] ? watchdog+0x209/0xfe0 [ 497.282777][ T31] kthread+0x726/0x8b0 [ 497.286836][ T31] ? __pfx_watchdog+0x10/0x10 [ 497.291499][ T31] ? __pfx_kthread+0x10/0x10 [ 497.296077][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.301269][ T31] ? __pfx_kthread+0x10/0x10 [ 497.305843][ T31] ret_from_fork+0x51b/0xa40 [ 497.310419][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 497.315516][ T31] ? __switch_to+0xc82/0x1410 [ 497.320184][ T31] ? __pfx_kthread+0x10/0x10 [ 497.324766][ T31] ret_from_fork_asm+0x1a/0x30 [ 497.329532][ T31] [ 497.332919][ T31] Kernel Offset: disabled [ 497.337231][ T31] Rebooting in 86400 seconds..