last executing test programs:

6m24.938387199s ago: executing program 2 (id=16966):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000100180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6f3ffffb702000008000000b70300000000000885000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x3, &(0x7f00000007c0)=""/3, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x4c}}, 0x0)

6m24.921539685s ago: executing program 2 (id=16968):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYBLOB="002000a26cfbe1d00c42d243c9609b74000000c5000000", @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="000200000000000000000000008000"/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000040) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xf}, {0xc, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x24000840) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) (async)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00'})
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) (async, rerun: 64)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4002, 0x2) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0xa, 0x3, 0x87) (async, rerun: 64)
r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) (async)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x10f, 0xd, 0x0, 0x0)
sendmsg$nl_route(r10, 0x0, 0x0) (async)
socket(0x2a, 0x2, 0x0) (async)
bind$netlink(r10, 0x0, 0x0) (async, rerun: 32)
r11 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r11, 0x0, 0x0)

6m24.746336608s ago: executing program 2 (id=16969):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x8900, 0x4)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close(0x4)

6m24.680107171s ago: executing program 2 (id=16970):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="9ad67b303fadb5cabbb0034ab9d9cc201a00000046922dbe0ead6f7b8342d41af7e1143dada412a8f2a14c1ddaf84e5ee74799298fbc8296a6bad86b9d3094336721e40000000000000000d87768c3fe40cd5cd9d5106ef8a6d6ee0c75f0d1641c3670f04910de", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, 0x140f, 0x1, 0x70bd27, 0x25dfdc03, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x34}}, 0xc080)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x400003, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
ioctl$FIONCLEX(r4, 0x5450)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0x236, &(0x7f0000000740)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0xe, 0x4, 0x0, 0x3, 0x228, 0x64, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x23}, {[@timestamp_prespec={0x44, 0x1c, 0x62, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x1}, {@multicast1, 0x7}]}, @timestamp={0x44, 0x8, 0x67, 0x0, 0xd, [0x3]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x35, 0x2, [0x2, 0x3], "73b30c32f3e2b1020fa264f1571afad2e6d1963f783c342502e807f39d20685149831018a7f27a6ed49d92a059d84d8467029c3e6d"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x2, 0x6, 0x8], "d130196e5f20c70cbb7673f49e83ff0591996489bb185b019f8289b80c8f6831f98cc56cb29b63be41436cc80de2a61187c435ad4588b22600bf2f6d9a7ffc03027a5025cf776f2ca2de87d2556bb49e0a51abac1fb0f6b2c22c018134ce682691e3c484603e332000004470e66fd9a52613b4ba2976623abdd98287137bb2bf7ff1da4e331b73336da01f02ea2fc7fb3dfed33be07b89b9ac58c7851575c373683a5a1e0b7c1fb3a3b8646b13332893831b6dc40da1d73688d26b88ce306874df2a597dab502a0e446c04a14cb963cb320380ef00a54c"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "59eb61ee8919f1ab8c03a692"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x9, 0x2, 0x0, 0x0, 0x2, 0x2}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0xa, 0x2, 0x9, 0x2, 0x0, 0x1, 0x3, 0xf7}, 0x2, {0x3, 0xfffd, 0x2, 0x3, 0x0, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "362dacce4bc2f1678a5266c5a6dd70290016b91a8b67452640b376c316e36ea118375f5ebae40d7217689e6a418bd1edaefb7d5186b52aba802cd7067cfcb57ce1aba903dc5a87f9a049c83c6ab5c5cf274d5342603d0e35414af0f35e11110582fa9bb886adaf9001394b1fd15eee294dcebfa44654781c08680156399ce383e4970b1a3cb8084aa446"}}}}}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r9, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r11, 0x702, 0x64, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x20004185}, 0x4040800)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000180)="51c0c2cf0033d1af0c5ae2f153666730c61162fef92d79", &(0x7f00000004c0)=@tcp6=r1}, 0xffffffffffffff2c)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5400000010000304010000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050019000400000008000a00", @ANYRES32=r13, @ANYBLOB="cf323223317b54dd940c9f391478ccf2bc60d0198f9fbb7c51a11ce611a03c2b0acc4fdef80eba8faa09866c291a9b064133fe777119ca577a66bf86937c5419011aa2d1da9a1e55918565cded8325a2a422d4925d5f12b6146f12fa773cbf9e2d4aaef9544b440468290f83563d585b5f"], 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x8044)

6m24.550584s ago: executing program 2 (id=16973):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @void}, 0x10)
close(0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x1, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1, 0x1800b}, [@IFLA_CARRIER={0x5}, @IFLA_TXQLEN={0x8, 0xd, 0x1028}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)

6m24.55033529s ago: executing program 2 (id=16974):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket(0x29, 0x4, 0x0)
sendmsg$netlink(r1, 0x0, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94)
connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0xba4fe430364b9bcc)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000171401"], 0x20}}, 0x0)
r7 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18)
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x8}, {0x7, 0x1}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x440e0}, 0x98)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@private0, 0x3a})
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r10, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r11 = socket(0x11, 0x3, 0x1)
setsockopt(r11, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r13 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r13, &(0x7f0000000180), 0x12)

6m9.47982385s ago: executing program 32 (id=16974):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket(0x29, 0x4, 0x0)
sendmsg$netlink(r1, 0x0, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94)
connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0xba4fe430364b9bcc)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000171401"], 0x20}}, 0x0)
r7 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18)
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x8}, {0x7, 0x1}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x440e0}, 0x98)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@private0, 0x3a})
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r10, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r11 = socket(0x11, 0x3, 0x1)
setsockopt(r11, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r13 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r13, &(0x7f0000000180), 0x12)

2.693223847s ago: executing program 3 (id=21324):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={<r3=>0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x0], &(0x7f0000000700), 0x0, 0x1}}, 0x40)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000540)={r3, 0xfffffff8, 0x3, 0xfffe, 0x2800, 0x2, 0xf205, 0x6, {r3, @in6={{0xa, 0x4e22, 0x400, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}}, 0xa3, 0x3c, 0xffff8000, 0x2, 0x5}}, &(0x7f0000000600)=0xb0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r3, 0x4}, 0x8)
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d904000003", 0x6}, {&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00', 0x7}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x80, 0x4, 0x0, 0x0, 0x0, 0x3, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6(0xa, 0x5, 0x0)
r9 = accept4$inet(r0, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f0000000300)=0x10, 0x0)
ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)='hsr0\x00', 0x58, 0x9, 0x400})
unshare(0x24020400)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x4}, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xe}, 0xffffffffffffffff, {[0x1, 0x8, 0x2, 0x9, 0x7, 0x9, 0x6, 0x7fffffff]}}, 0x5c)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000001c40)=0x4)
ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000500)=0xffff0080)
ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000000)=0x8)
sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r6], 0x38}}, 0x10)

2.240960139s ago: executing program 0 (id=21333):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x22}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x71d, 0x3509, 0x3, 0x10000, 0x9, 0x1002, 0x9, 0x3, 0x3, 0x802e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xfffc, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x2, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0xa, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x4, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x82, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x1, 0xff, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x8, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xa, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x4, 0xff, 0x4, 0x7, 0x7, 0x7, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x0, 0x7, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x10000, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3, 0x20000000}]}, @int={0x5, 0x0, 0x0, 0x1, 0x5, 0x20}, @enum={0x7}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x2e, 0x0, 0x5f]}}, 0x0, 0x58}, 0x28)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x40000, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x3a, 0x0, @void}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x200000000000011, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40081}, 0x4c000)
socket(0x18, 0xa, 0x3)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r9=>0x0})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r11=>0x0})
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)
bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r13)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r13, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYRES16=r14, @ANYBLOB="010027bd7000ffdbdf252e000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
bind(r7, &(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x1}, 0x80)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r13, 0x8982, &(0x7f0000000300))
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

2.052942019s ago: executing program 0 (id=21336):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipmr_newroute={0x3c, 0x18, 0x4, 0x70bd29, 0x25dfdbff, {0x80, 0x10, 0x20, 0x82, 0x0, 0x3, 0xc8, 0x6, 0x300}, [@RTA_PREFSRC={0x8, 0x7, @loopback}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_SRC={0x8, 0x2, @multicast2}, @RTA_NH_ID={0x8, 0x1e, 0xc80}]}, 0x3c}}, 0x0)
r4 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800)
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003400)={r6, 0x0, 0x0}, 0x20)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f00000002c0)=0x1, 0x4)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', <r11=>0x0})
r12 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r12, 0x10c, 0x8, &(0x7f0000000200), &(0x7f0000000300)=0x4)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000ffff8100"/20, @ANYRES32=0x0, @ANYBLOB="097f050025100400140012800b0001006970766c616e00000400028008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040)
r13 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_opts(r13, 0x29, 0x3b, &(0x7f0000000480)=""/216, &(0x7f0000000580)=0xd8)

1.930226988s ago: executing program 0 (id=21338):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={<r5=>0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={r5, 0x4}, 0x8)
writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d904000003", 0x6}, {&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00', 0x7}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c61e4dd1670ba622324c8504d451247ee000000e730f197bc68e1986977468c9179240bd84df84750c0d6c534ca423f5abf04a2eb6062785d0f8cd01e4c1a712fe43ad51f36c70cb7b190061051e71e285dbc8aefff00c91675df8e8682d2c76cb28c0ecf7d87d91114fa2743d5a92d13b58b2c307d98ff1d68214ca9a04acc27044775c7a61cb6f48713e452c5cceeb0f4484fccda07a85ea2255a00", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6(0xa, 0x5, 0x0)
unshare(0x24020400)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x4}, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xe}, 0xffffffffffffffff, {[0x1, 0x8, 0x2, 0x9, 0x7, 0x9, 0x6, 0x7fffffff]}}, 0x5c)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000001c40)=0x4)
ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000500)=0xffff0080)
ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000000)=0x8)
sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r7], 0x38}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r11=>0x0, 0x1, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x1, 0x0, 0x4, 0x0, @multicast2, @loopback}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r11, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)

1.741347748s ago: executing program 3 (id=21340):
sendmmsg(0xffffffffffffffff, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000004b40)=[{0x0}, {0x0}], 0x2, 0x0, 0x1448}}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f0000001080)="00eeefaf8123221a1e19cd79076797defb1762750b9049966adc8cc2ea5343905d3e1e04049628e48ad4bc80d7fbb2b1542d79cef4a285f9835bc8ac658205077f9576a97bba8ffdea68a0cffc28c2cbc2c0f12a2a4f69539edd02b7e11072b7dce8db4d66535c75d8ecb2dbf6d91903ad4b6974a8251ff1d1f6dcd94fa107eaa25578afc413846bad763ff5ca7dcc356c6a61ff01ef5517b35a3758902c661d7b", 0xa1}, {0x0}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="2d0100000000000013000000ff6d76d32795de0c39fee0cc977cc916c3623f07f9da5ab1a35b5d0500000008cc57e0a9ba0aaf31d065fab4b41fc4634a9b6709a40f9a1deda1706f0fc76070b2dd1067158a8f0c6ee78232d7ceeb2e65dbf25f4448b6663876f75cbfbf4a60bd688646d3ca830801000000030434590a2d35d970aeed81b82dc24598a298bb38f9940d4e2e2e74aaf4b9d41d9a1a39542a44041066aac6c9771d1e7d0f7727e563ecae0dd3fb3da19c96570cb6661ce38970a53fd194f33d61a224e0d53e42e22186b3f30e040a63c9baa0924181edb28846250675cb4611b64ef18bec97cb09a23b33ee6aff032c7004f9f7282ab83def0c1152566099a359c230ea4d127f0bf1222f82def5ad9cf075e6d7bb5450dc2d4345f774673900000000000000000000ac7b000000000000000064e606e96362063e8dd2ed3a46a03b0ff937a6811f805be04d748b9854444ddaba24b2"], 0x138}}], 0x2, 0x804)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008084}, 0x488d1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f00000001c0), &(0x7f0000000740)}, 0x20)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x5, @broadcast, 'gre0\x00'}}, 0x1e)
socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', <r3=>0x0, 0x0, 0x700, 0x7ff, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x2000, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @loopback}}}})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5ebe}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x90}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x816)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000005c80)={&(0x7f00000002c0)="b0dad7d80cfc1f70c0b8cdfd511ebfa874f5bdc2d0d9f348d0e19eb960bc5ea76fd22dc0b8069910348c60fcbf3623cfc4c00fccf538317edf7fa4a1d5b19964a7cddc6757b279dbac92067be3de9cb31c99a134a3ed7b6d93b1975250c6ec060096a223a537af9a28f2052b4444c2599392563db91aa3185beb97d95efb7038d34ea7911e6783a188a3622bb95b4defdcc41649cb1bf553f3148e0cdb1b9b753428587813dc061567fa5835c6de8e301643", &(0x7f00000003c0)=""/80, &(0x7f0000004bc0), 0x0, 0xffffff97}, 0x38)
connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e25, 0x400, @empty, 0x100007}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400000000010104210000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1414aa0c0002800500010000000000080007400000000020000680080001"], 0x84}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655125c}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x4, 0x25dfdbfe, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x0)

1.271287473s ago: executing program 3 (id=21346):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
r2 = socket(0x11, 0x3, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108) (async)
close(0x3) (async)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000700)={'sit0\x00', 0x0}) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x2e0, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8b3d083dc01f56de5745beb720cc0c7f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x50}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="225d612dcc10e1f10ba1b6ccdf48d30dfab6c96bdda940e1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="30b62be06412ac9601e219e515c84a3e98d94b321a9c5e09"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "45e1579193d26eba"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1b105b24c3155960"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e73c9fdcee207f0438a0363f1dbfa08c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "995fc1eab9588396"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e86d51a66eb3966889356553cd3bf5bb"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cf6099e1473105ce7582be3852c992ef"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ea26fddeb673551f416e1d57842a73a3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fad4c71b71f5864f9bbafa253564d68e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x400}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8ad17fa0d13abd0c6f7d7b121901ba8639dad061b5656dac"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7728dea082ff8809"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b0bc4362c8591802"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d6e49d5ee9ebdbe8"}]}, @NL80211_ATTR_REKEY_DATA={0xfc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="74a4c6a40784b47def0b8be38c59165a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1a6563b575a920ab80a731942a49afb9dec2f6653437a06e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="19791885684729b4f8ad5e1a38c521cd"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2903903a2ab45cc2d66efe4c4f1dab8a7454bb8f62377264931d873e83686057"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d879180de45601484cb8a2ee05aac057df5c9145d2f0e0a1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a0467c099280ff41aee18ac416095152a321a3c833606959"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8f02e76df1ea2bc1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aaea1b48ba68aa08a658e8890c7c3d25c5411c487b907c9131260a0e3c9146f4"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="106e48ed6748d2de24db941bbfb2b2a9d8e89c7c939e820d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7eea5abd78d39ebd"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3046659db9972c12fab658c305c048f1702d0395e1d37a21"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8d77951e026788344df1ffe531dffec96e755d8836271f6875b6de03c8bfdaea"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfd2b}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="28943e08bb27692b04ca4c5af9234862"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2e193425f395735d57c06892f7989f2cd65d995a6359961e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5e78d3de5a25b0ea9884a8ef184bf299"}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x8004}, 0x4000804) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000680)={0xf24, r4, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x4a}}}}, [@NL80211_ATTR_TX_RATES={0x320, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0xe, 0x6, 0x2, 0x5, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x8}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x6}, {0x7, 0x9}, {0x3, 0x7}, {0x4, 0x4}, {0x6, 0xa}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0x2}, {0x0, 0x3}, {0x3, 0x2}, {0x3, 0xa}, {0x4, 0xd}, {0x1, 0x8}, {0x0, 0x8}, {0x6, 0x4}, {0x6, 0x1}, {0x5, 0x2}, {0x5, 0x9}, {0x4, 0xa}, {0x0, 0x1}, {0x1, 0xa}, {0x7, 0x7}, {0x2, 0x2}, {0x4, 0x4}, {0x7, 0x9}, {0x3}, {0x6, 0x1}, {0x3}, {0x1, 0x4}, {0x5, 0x2}, {0x4, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x6}, {0x4, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x9, 0x18, 0x1, 0x2, 0x16, 0x2c, 0xc, 0x30, 0x6c, 0xc, 0x24, 0x36, 0x24, 0x30, 0x5, 0x6, 0xb, 0x36, 0x18, 0x0, 0x48, 0x12, 0x18, 0x6, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe2fa, 0x7246, 0xe, 0x7, 0x5, 0x9, 0x0, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x4, 0x1, 0x7f, 0x1, 0x7, 0x0, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x6, 0x40, 0x2, 0xa3, 0x7, 0x1]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x64, 0x1, 0x400, 0x3, 0x0, 0xa36]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x9}, {0x2, 0x8}, {0x4, 0x3}, {0x0, 0x7}, {0x0, 0x3}, {0x6, 0x2}, {0x2, 0xa}, {0x3, 0x1}, {0x5, 0xa}, {0x4, 0x5}, {0x7, 0x2}, {0x3, 0x4}, {0x0, 0x2}, {0x3, 0x1}, {0x1, 0x2}, {0x3, 0xa}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x4}, {0x3, 0x4}, {0x1, 0x5}, {0x3, 0x4}, {0x5}, {0x1, 0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x1, 0x6}, {0x1, 0x9}, {0x6, 0x6}, {0x4, 0x9}, {0x0, 0x6}, {0x1, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x5}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x1}, {0x7, 0x4}, {0x6, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x7, 0x2}, {0x7, 0x4}, {0x5, 0x7}, {0x4, 0xa}, {0x3, 0x3}, {0x6}, {0x1, 0x6}, {0x4, 0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x7, 0x6}, {0x7, 0x9}, {0x2, 0x1}, {0x6, 0x4}, {0x0, 0x5}, {0x3, 0x4}, {0x7, 0xa}, {0x2, 0x4}, {0x1, 0x7}, {0x1}, {0x0, 0x3}, {0x6, 0x8}, {0x3, 0x9}, {0x4, 0x4}, {0x6, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x7, 0x1}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xdc, 0x6, 0xfffb, 0x6, 0xfffd, 0x7, 0x8]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0xc, 0x48, 0x6, 0x60, 0x3, 0x0, 0x6c]}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x8}, {0x7}, {0x2, 0x7}, {0x3, 0x3}, {0x4, 0x8}, {0x0, 0x9}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0xa}, {0x4, 0x5}, {0x7, 0x1}, {0x5, 0xa}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0x4}, {0x3, 0x5}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x1}, {0x2, 0xa}, {0x0, 0x2}, {0x1, 0x9}, {0x3}, {0x1, 0x1}, {0x2, 0xa}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x7}, {0x7, 0x6}, {0x2}, {0x2, 0xa}, {0x2}, {0x7, 0x7}, {0x7}, {0x5, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x5, 0x4}, {0x3, 0x5}, {0x1, 0x3}, {0x0, 0x3}, {0x6}, {0x5, 0x8}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0xa}, {0x6, 0x9}, {0x7, 0x7}, {0x4, 0x1}, {0x7}, {0x7, 0x7}, {0x4, 0xa}, {0x5, 0x1}, {0x3, 0x9}, {0x5, 0x5}, {0x5, 0x8}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x9}, {0x7, 0x4}, {0x4, 0x8}, {0x0, 0x6}, {0x1, 0x6}, {0x0, 0x2}, {0x2, 0x5}, {0x5, 0x1}, {0x3, 0x6}, {0x7}, {0x1, 0x4}, {0x3}, {0x4, 0x6}, {0x0, 0x5}, {0x4, 0x6}, {0x2, 0x8}, {0x0, 0x6}, {0x6, 0x1}, {0x6, 0x1}, {0x2}, {0x2}, {0x6, 0x7}, {0x3, 0x1}, {0x4}, {0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x7, 0xa}, {0x0, 0x3}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x1}, {0x2, 0x3}, {0x3, 0x3}, {0x7}, {0x7, 0x4}, {0x3, 0x4}, {0x7, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x3, 0x3}, {0x7, 0x5}, {0x3, 0x3}, {0x4, 0x6}, {0x6, 0x5}, {0x3, 0x5}, {0x4, 0x4}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x4}, {0x3, 0x3}, {0x1, 0x3}, {0x7, 0x2}, {0x2, 0xa}, {0x1, 0x6}, {0x2, 0x9}, {0x6, 0x9}, {0x2, 0x2}, {0x6, 0x9}, {0x7, 0x7}, {0x5, 0x1}, {0x6, 0x5}, {}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x1}, {0x3, 0xa}, {}, {0x5, 0xa}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0x3}, {0x4, 0x8}, {0x1, 0x4}, {0x1, 0xa}, {0x4, 0xa}, {0x6}, {0x4, 0x8}, {0x3, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0x9}, {0x2, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7baf, 0xb3ca, 0xff, 0x2, 0x6, 0xd976, 0xd153, 0x10]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x3}, {0x2, 0x8}, {0x1, 0x7}, {0x5, 0x2}, {0x4}, {0x0, 0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x9}, {0x1, 0x9}, {0x5, 0x7}, {}, {0x2, 0x3}, {0x1, 0x3}, {0x6, 0x7}, {0x6, 0x1}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0x3}, {0x4, 0x9}, {0x1}, {0x5, 0x6}, {0x4}, {0x1, 0x2}, {0x1, 0x3}, {0x7, 0x8}, {0x3, 0xa}, {0x1, 0x9}, {0x6, 0x7}, {0x4, 0x1}, {0x1}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0xa}, {0x5, 0x7}, {0x4, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {0x6, 0x1}, {0x4, 0x3}, {0x5, 0x6}, {0x3, 0xa}, {0x5, 0xa}, {0x6, 0x5}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x5, 0x8, 0x5, 0x7f, 0x8000, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x2, 0x808, 0x5, 0x8, 0x1, 0x7, 0xa]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x38, 0x1000, 0x6, 0x0, 0x10, 0x6, 0x0, 0x401]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0x6c, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2ef0, 0x3, 0x1000, 0x5, 0x6, 0x5]}}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x5, 0x2, 0x2, 0x30, 0x3, 0x1b, 0x18, 0x9, 0x30, 0x5, 0xc, 0x847f2cab796553ff, 0x6, 0x5, 0x18, 0x6, 0x3, 0x36, 0x6, 0x16, 0xc, 0x0, 0x12, 0x7b, 0x0, 0x1, 0x1b, 0x3, 0x16, 0x18, 0x60, 0x6c]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x2, 0x9}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x5}, {0x6, 0x6}, {0x5, 0xa}, {0x1, 0x2}, {0x2, 0x8}, {0x2, 0x2}, {0x1, 0xa}, {0x7}, {0x0, 0x4}, {0x3, 0x1b}, {0x2, 0xa}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x6, 0xa}, {0x4, 0x8}, {0x4}, {0x1, 0x6}, {0x3, 0x4}, {0x4, 0x8}, {0x4, 0x3}, {0x3, 0x7}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x6, 0x3}, {0x4, 0x9}, {0x4, 0x1}, {0x6, 0x4}, {0x0, 0x4}, {0x6, 0x4}, {0x4, 0x6}, {0x1, 0x7}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x4}, {0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0xa}, {0x6, 0x1}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x18, 0x3, 0x36, 0x9]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x6c, 0x5, 0x1, 0x4, 0x48, 0x18, 0xb, 0x4, 0xc, 0xb, 0x6, 0x18, 0x9, 0x2, 0x2, 0x6]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x2, 0x4}, {0x7, 0x2}, {0x1, 0xa}, {0x3, 0x1}, {0x5, 0x1}, {0x6, 0x7}, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0x4}, {0x3, 0x1e}, {0x3, 0x3}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x7}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0xa}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0x7}, {0x2, 0xa}, {0x3, 0x6}, {}, {0x1, 0x8}, {0x7}, {}, {0x6, 0x3}, {0x0, 0x4}, {0x0, 0x7}, {0x3, 0x8}, {0x2, 0x9}, {0x3, 0x6}, {0x0, 0x6}, {0x1}, {0x2, 0x4}, {0x0, 0x6}, {0x4, 0x4}, {0x0, 0x7}, {0x6, 0xa}, {0x2, 0x1}, {0x5, 0x6}, {0x0, 0xa}, {0x3, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x9, 0xd17, 0x3, 0x4, 0x3, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x6, 0x24, 0x18, 0x1, 0x36, 0x6, 0x24, 0x12, 0xc, 0x48, 0x2, 0x3, 0x60, 0xc, 0x1b, 0x36, 0x60, 0x1, 0x18, 0x6, 0x1, 0xb, 0x6, 0x60, 0x3, 0x6, 0x3, 0x18, 0x5, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x1, 0x48, 0x12, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x100, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x101, 0x1b7f, 0x3, 0x4a88, 0x0, 0x400, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x2, 0x5, 0x100, 0x7, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x9}, {0x6, 0x6}, {0x7, 0xa}, {0x0, 0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0x6}, {0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0xa}, {0x2, 0x3}, {0x6, 0x8}, {0x3, 0x5}, {0x3, 0x5}, {0x3, 0x4}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0xa}, {0x4, 0x7}, {0x1, 0xa}, {0x6, 0x6}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x3, 0x6}, {0x4, 0x9}, {0x1}, {0x2, 0x4}, {0x6, 0x5}, {0x1, 0x5}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x4}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x1}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x3}, {0x2, 0x1}, {0x5, 0x7}, {0x1, 0x7}, {0x6, 0xa}, {0x1, 0x6}, {0x4, 0xa}, {0x7}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x400, 0x101, 0x7, 0x6, 0x7e1, 0x3, 0x2]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x2}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x3}, {0x3, 0xa}, {0x1, 0x6}, {0x6, 0x9}, {0x1, 0x8}, {0x5, 0x1}, {0x2}, {0x1, 0x6}, {0x5, 0x5}, {0x7, 0x2}, {0x1, 0xa}, {0x6, 0x1}, {0x2, 0x1}, {0x7, 0x3}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0x3}, {0x7, 0x7}, {0x4, 0x2}, {0x3, 0x3}, {0x4, 0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x5, 0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0x2}, {0x2}, {0x3, 0x3}, {0x7, 0x7}, {0x5, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x8}, {0x6, 0x8}, {0x2, 0x6}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x1}, {0x6, 0x6}, {0x1, 0x8}, {0x5, 0x5}, {0x2, 0x4}, {0x2, 0x8}, {0x1}, {0x0, 0x15}, {0x5, 0x7}, {0x1, 0x5}, {0x5, 0x7}, {0x4, 0x4}, {0x5, 0x3}, {0x7, 0x4}, {0x4, 0x1}, {0x7, 0x5}, {0x1, 0x4}, {0x1}, {0x0, 0x8}, {0x3, 0x8}, {0x3, 0xa}, {0x2, 0x3}, {0x7, 0x2}, {0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x3, 0x5}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3a, 0x8000, 0xc0, 0x950, 0x1c0, 0x5, 0x1ff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0xfffc, 0x8, 0x40, 0x9, 0x9, 0x4, 0xffd6]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x6}, {0x1, 0x4}, {0x5, 0x8}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0xa}, {0x2, 0x2}, {0x2, 0x9}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x9}, {0x0, 0x2}, {0x5}, {0x3, 0x9}, {0x4, 0x5}, {}, {0x3, 0x9}, {0x4, 0x1}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0x6}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0xa}, {0x3, 0x2}, {0x0, 0x1}, {0x7, 0x2}, {0x0, 0x7}, {0x3, 0x4}, {0x2, 0x4}, {0x2, 0x3}, {0x3, 0x2}, {0x0, 0x3}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x1}, {0x4, 0x9}, {0x5, 0x8}, {0x4, 0x9}, {0x0, 0xa}]}]}]}, @NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0xe7f7283f96a5adbd, 0x2, 0x18, 0x12]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x1}, {0x7, 0xa}, {0x3, 0x9}, {0x6, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x9}, {0x7, 0x6}, {0x2, 0x2}, {0x3, 0x7}, {0x0, 0x5}, {0x6, 0x8}, {0x6, 0x9}, {0x3, 0x1}, {0x2, 0xa}, {0x5, 0x1}, {0x1}, {0x3, 0x2}, {0x4}, {0x4, 0xa}, {0x5, 0x1}, {0x5}, {0x7, 0x2}, {0x2, 0x6}, {0x5, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x3, 0x1}, {}, {0x3, 0x7}, {0x4, 0x3}, {0x5, 0x3}, {0x4, 0x9}, {0x2, 0x6}, {0x6, 0x7}, {0x6}, {0x1, 0x9}, {0x1}, {0x5, 0x3}, {0x1, 0x2}, {0x6, 0x3}, {0x2, 0xa}, {0x5, 0x7}, {0x2, 0x1}, {0x3, 0x2}, {0x1, 0x4}, {0x1, 0x2}, {0x4, 0x1}, {0x7}, {0x4, 0x6}, {0x3, 0x7}, {0x0, 0x8}, {0x4, 0x3}, {0x7, 0xa}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3b5, 0x5, 0x6, 0xfff, 0x41bb, 0x8, 0x5f34, 0x3ff]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x36, 0x6c, 0x12, 0x36, 0x1, 0x2, 0x3, 0x48, 0x15, 0x3, 0x1b, 0x48, 0x48, 0x272816da16700bc, 0x12, 0x5, 0x3, 0x60, 0x60, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xed6b, 0x66d, 0x7, 0xa2f8, 0x5, 0x7f, 0x976d, 0x4]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x23c, 0x9, 0xe, 0x2, 0x0, 0x9]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x8}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x4}, {0x7, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x7}, {0x2, 0x1f}, {0x3}, {0x1, 0xa}]}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x29, 0x5, 0x2, 0x200, 0x4, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x2, 0x80, 0x101, 0x6f60, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x59, 0xac, 0x7fff, 0x3, 0x9, 0x6, 0xa2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x5, 0xd1, 0x9, 0x6, 0x1d, 0x3d, 0xfff9]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x2}, {0x4, 0x2}, {0x1, 0x9}, {0x7, 0x2}, {0x1, 0x2}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x2}, {0x2, 0x5}, {0x2}, {0x2, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x4}, {0x7, 0x2}, {0x5, 0x3}, {0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x1, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x13c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{}, {0x3, 0x5}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x4, 0x6}, {0x1, 0xa}, {0x2, 0x6}, {0x7, 0x9}, {0x0, 0x6}, {0x4, 0x3}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0xa}, {0x2, 0x7}, {0x1, 0x8}, {0x4, 0x2}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0x7}, {0x2, 0x8}, {0x2, 0x6}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0xa}, {0x6, 0x1}, {0x2, 0x5}, {0x5, 0x7}, {0x3, 0xa}, {0x6}, {0x3, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0xa}, {0x1, 0x1}, {0x5}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x400, 0x4, 0x40, 0x5, 0x8001, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x3, 0xfa, 0x1, 0x1, 0x26b]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x4, 0xc, 0xbf4c, 0x7fff, 0x0, 0x7fff]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x7, 0x6}, {0x3, 0x9}, {}, {0x2, 0x1}, {0x0, 0x2}, {0x2, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x7, 0x6}, {0x2, 0xa}, {0x0, 0x8}, {0x6, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x40, 0x5, 0x9, 0xcb84, 0x6, 0x1000]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0x2}, {0x5, 0x3}, {0x2, 0x8}, {0x5, 0x8}, {0x0, 0x3}, {0x6, 0x8}, {0x7, 0x2}, {0x4, 0xa}, {0x6, 0xa}, {0x1, 0x9}, {0x0, 0x5}, {0x5, 0x8}, {0x6, 0x8}, {0x3, 0x5}, {0x3, 0x6}, {0x3, 0x8}, {0x6, 0x4}, {0x7, 0x5}, {0x5, 0x3}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0x5}, {0x3, 0x2}, {0x4, 0x9}, {0x5, 0x8}, {0x1, 0x6}, {}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x3}, {}, {0x5, 0x3}, {0x4, 0x7}, {0x4, 0x3}, {0x5, 0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x31, 0x7, 0xc, 0xfc00, 0x4, 0xd]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x6, 0x1b, 0x12, 0x12, 0x1b, 0x6, 0x12, 0x5, 0xc, 0x36, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xb, 0x7, 0xb8, 0xfff4, 0x6, 0x12e7, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x1f0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x7, 0x4, 0x8, 0x5, 0x81, 0x5]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1, 0x1b, 0x6, 0x48, 0x0, 0x3, 0x9, 0xc, 0x2, 0x1, 0x0, 0x2, 0xd0519304b4bb3a7a, 0x9, 0x1b, 0x1, 0x6, 0x60, 0x9, 0x9, 0x48, 0xb, 0xb, 0x18, 0x36, 0x2, 0x5, 0x18, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x6}, {0x5, 0x5}, {0x5, 0x7}, {0x7, 0x1}, {0x5}, {0x5, 0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0xa}, {0x3, 0x6}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x4}, {0x7, 0x6}, {0x6, 0x2}, {0x1, 0x5}, {0x7, 0x2}, {0x3, 0x2}, {0x5, 0x6}, {0x7, 0x8}, {0x4, 0x5}, {0x2, 0x2}, {0x7, 0x6}, {0x2}, {0x3, 0x3}, {0x3, 0x6}, {0x6, 0x2}, {0x2}, {0x7, 0x4}, {0x6}, {0x6, 0x9}, {0x7, 0x1}, {0x4, 0x4}, {0x0, 0xa}, {0x7, 0x3}, {0x3, 0xa}, {0x1, 0x9}, {0x1}, {0x7, 0x7}, {0x0, 0xa}, {0x6, 0x6}, {0x4}, {0x0, 0xa}, {0x2, 0x4}, {}, {0x1, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x6}, {0x7, 0x1}, {0x5, 0x3}, {0x4, 0x7}, {0x6, 0x8}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x2}, {0x6, 0x7}, {0x4, 0x5}, {0x0, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x6, 0xffc0, 0x8, 0xab, 0x7902, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x8, 0xff55, 0x8, 0xff80, 0x0, 0x7f, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x2}, {0x0, 0x2}, {0x3, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x6}, {0x2, 0x5}, {0x6}, {0x3, 0xa}, {0x6}, {0x1, 0x9}, {0x3, 0x5}, {0x0, 0x6}, {0x5, 0x2}, {0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfffd, 0x8, 0x9, 0xff7f, 0x7f, 0x8000, 0x3f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x1b, 0x2, 0x18, 0x16, 0x2, 0x6c, 0x6c, 0x4, 0x12, 0x16, 0x36, 0x1b, 0x5, 0x12, 0x18, 0x24, 0x36, 0x2, 0x48, 0x48, 0x60, 0x1, 0x36, 0x9, 0x16, 0x3, 0x48, 0x12, 0x24, 0x0, 0x5]}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x60, 0x16, 0x12, 0x0, 0x4]}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x36, 0xb, 0x36, 0x9, 0x5, 0x6e, 0x6, 0x12, 0x18, 0x12, 0x36, 0x3, 0x5, 0x1a, 0x48, 0x7]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0xbba8, 0xffff, 0x1, 0x40, 0xfffa, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1ff, 0x3, 0x2, 0x5, 0x9, 0x43, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6a52, 0x0, 0x8, 0x3ff, 0x2, 0x5, 0x3, 0x435]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x1000, 0xdd3, 0x5, 0x7f, 0x1ff, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x36, 0x1, 0x3, 0x1b, 0x18, 0x78, 0x2, 0x2, 0xc, 0x30, 0x30, 0x18, 0x48, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x238, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x5, 0x4}, {0x4, 0x4}, {0x3, 0x5}, {0x1, 0x4}, {0x1}, {0x0, 0x4}, {0x4, 0x5}, {0x6, 0x1}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x6}, {0x5, 0x1}, {0x3, 0xa}, {0x5, 0xa}, {0x6, 0x7}, {0x1, 0x4}, {0x5, 0x4}, {}, {0x0, 0x9}, {0x0, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x0, 0x3, 0x6, 0x8c, 0x8, 0x9, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3e3, 0x9, 0x3, 0x7fff, 0x1, 0x8000, 0xd, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xd, 0x8001, 0x7ff, 0x6, 0x27bd, 0x8, 0x2]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x6, 0x5, 0x100, 0x2, 0x6, 0x3]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x5, 0x48, 0x16, 0x5, 0xb, 0x48, 0x16, 0x5, 0x18, 0x6, 0x65, 0x36, 0x9, 0x16, 0x18, 0x5, 0x48, 0x2, 0x3]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x5, 0xfffe, 0x3, 0x0, 0x8, 0x9]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x7}, {0x5, 0x1}, {0x0, 0xa}, {0x4}, {0x3, 0x2}, {0x0, 0x7}, {0x6, 0x6}, {0x2, 0x3}, {0x3, 0x6}, {0x5}, {0x1, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x4, 0x4}, {0x5, 0x1}, {0x7, 0x3}, {0x1, 0x3}, {0x3, 0x2}, {0x6, 0x8}, {0x6, 0x2}, {0x0, 0x8}, {0x2, 0x5}, {0x2, 0x6}, {0x6, 0x6}, {0x2, 0x8}, {0x1, 0x5}, {0x6}, {0x6}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0x9}, {0x1}, {0x1, 0x9}, {0x3, 0x5}, {0x2, 0x6}, {0x3, 0x4}, {0x6, 0x6}, {0x3, 0x1}, {0x3, 0x5}, {0x6, 0x5}, {0x6, 0x8}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x8}, {0x6, 0xa}, {0x0, 0xa}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x1}, {0x7, 0x1}, {0x7, 0x2}, {0x3, 0xa}, {0x5}, {0x0, 0xa}, {0x0, 0xa}, {0x4, 0x4}, {0x7, 0x6}, {0x3, 0x9}, {0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x0, 0x2}, {0x1, 0x9}, {0x6, 0x6}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x567b, 0x0, 0x8, 0x60, 0x1, 0x0, 0x9, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x108, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x2, 0x9b24, 0x2, 0xffff, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6, 0x7}, {0x1, 0x5}, {0x2, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x7, 0x5}, {0x4}, {0x0, 0x9}, {0x1, 0x9}, {0x5, 0xa}, {0x3}, {0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x5, 0x5}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x3}, {0x6}, {0x4, 0xa}, {0x3, 0x5}, {0x6}, {0x1, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x1}, {}, {0x7, 0x7}, {0x5, 0x4}, {0x1, 0x2}, {0x7, 0x9}, {0x7, 0x9}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x4}, {0x7, 0x9}, {0x2, 0x7}, {0x1, 0x8}, {0x4, 0x4}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x5}, {0x5, 0x4}, {0x3, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x5}, {0x6, 0x8}, {0x4}, {0x5, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x6, 0x9}, {0x7, 0x3}, {0x4, 0x1}, {0x6, 0x1}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x7, 0x5}, {0x1, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x6}, {0x1, 0xa}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1, 0x60, 0x12, 0x24, 0x2, 0x60, 0x3, 0x16, 0x6c, 0x30, 0x5, 0x30, 0x48, 0x0, 0x6, 0x2, 0x0, 0x48, 0xb, 0x6c, 0x4d, 0xc, 0xc, 0x6, 0x1b, 0x0, 0x5, 0x9, 0x1b]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x18, 0x18, 0x2, 0x16]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x5, 0x4, 0x39, 0x6, 0x36, 0x18, 0x48, 0x0, 0x9, 0x3, 0x1, 0x33, 0x18, 0x2, 0x60, 0xc, 0x3, 0x2, 0x36, 0x9, 0x24, 0x16, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0xff81, 0x3ff, 0x3, 0x4, 0x3, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x16, 0x60, 0x16, 0x12, 0x60, 0x12, 0x1b, 0x2, 0x6c, 0x6c, 0x36, 0x8d4bcced178f8df1, 0x43de08cfcdef8a9f, 0x6d, 0xb, 0x36, 0xb, 0x1, 0x16, 0x7, 0x24, 0x36, 0x30, 0x2, 0x3b, 0x18, 0x1, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xff80, 0x8, 0x3, 0xfff8, 0xfffd, 0x1, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x16, 0xb, 0x3, 0x2b, 0x16, 0x5, 0x1b, 0x16, 0x9, 0x5, 0x9, 0x1, 0x2, 0x6, 0x48, 0x6c, 0x6c, 0x24, 0x1, 0x2, 0x1, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1000, 0x3, 0xaeda, 0x4, 0xfffa, 0x8001, 0x9]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x3}, {0x6, 0x5}, {0x4, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x2, 0x8}, {0x2, 0x4}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x2, 0x3}, {0x2, 0x8}, {0x4, 0x4}, {0x4, 0x4}, {0x1, 0x1}, {0x4}, {0x6}, {0x4, 0x3}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0x7}, {0x6, 0x5}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x2}, {0x2, 0x1}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x8}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xa1b5, 0x0, 0x0, 0x7fff, 0x9, 0x2, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x48, 0x5c0e7b6394910d51]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x19, 0x1, 0x16, 0x18]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x60d4, 0x0, 0xae63, 0x101, 0xfff, 0xf125, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x2, 0x7, 0xb, 0x9, 0x401, 0x8]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x48, 0xb, 0x48, 0x48, 0x1b, 0x6c, 0xc, 0x3, 0x1, 0x6c, 0x4, 0x12, 0x48, 0xb, 0x18, 0x4, 0x60, 0x60, 0x48, 0x2, 0x18, 0x16, 0x6c, 0x6, 0x6, 0xb, 0x3, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xb, 0x14, 0x6c, 0x30, 0x9, 0x7c, 0xc, 0xb, 0x1b, 0x2, 0x5, 0x6, 0x0, 0x5, 0xc, 0x6c, 0x3, 0x36, 0x30, 0x2]}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x6}, {0x6, 0x5}, {0x7, 0x6}, {0x1, 0x2}, {0x1}, {0x3, 0x3}, {0x2}, {0x0, 0x1}, {0x6, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x0, 0x4, 0x18, 0x71, 0x1b, 0x36, 0x6c, 0x6, 0x1, 0x5, 0x7, 0x48, 0x6, 0x5, 0x1, 0x2, 0x12, 0x2, 0x6c, 0x6c, 0x6, 0x60, 0x18, 0x36, 0x2, 0x4, 0x6, 0x16, 0x1, 0x16]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1}, {0x1, 0x2}, {0x4}, {0x4, 0x5}, {0x7, 0x1}, {0x0, 0x6}, {0x5, 0x9}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0xa}, {0x1, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x5, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x0, 0x7}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x6}, {0x1, 0x6}, {0x6, 0x5}, {0x3, 0x9}, {0x4, 0xa}, {0x6, 0x3}, {0x3, 0x6}, {0x1, 0xa}, {0x1, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x8}, {0x2, 0x7}, {0x1, 0x1}, {0x0, 0xa}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x6}, {0x3, 0x8}, {0x0, 0x1}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x7}, {0x6, 0x4}, {0x7, 0x4}, {0x2}, {0x2, 0x7}, {0x7, 0x9}, {0x4}, {0x3, 0x3}, {0x0, 0x9}, {0x7, 0x9}, {0x4, 0x6}, {0x3, 0x3}, {0x6, 0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x6}, {0x2, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8001, 0x7, 0x400, 0xa63, 0xfff, 0x7fff, 0xe7a0]}}]}]}]}, 0xf24}, 0x1, 0x0, 0x0, 0x20040005}, 0x4011) (async, rerun: 32)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x34, r1, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x0)

1.173421398s ago: executing program 3 (id=21347):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}, [{0x4}, {0x4}]}, 0x2c}}, 0x10) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xc1}], 0x1}, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000002c0f33488982dae6468daa4f62e795438200"/40, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000270000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f40000000063c0000000c0a01030000000000000000070000070900020073797a31000000000900010073797a300000000010001b800c0000800800034000000002140000001000010000000000000000000084000a"], 0xd0}}, 0x0) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.113044042s ago: executing program 3 (id=21350):
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50102008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x10, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r3, &(0x7f0000000000), 0xe)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f0000000400)={0x1f, 0xffff}, 0xe)
listen(r4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82100000000000a6020000f8ffffffb703000008000000b7030000000000000c0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff00000042000000", @ANYRES32, @ANYBLOB="0000839100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff00000042000000", @ANYRES32, @ANYBLOB="0000839100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
socket(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYBLOB="f2c207339ce145b9e9a88f788ea4031eaee1db6b96b17ed09c64f7f6d2f4c94f1d14307ff3c6fa542e954185a13d90621d7675f3e75aef386379bd1881c5e75de7396f4a69e52d7150f1e40be06632536e0a5e881c1465388b8240f2ee6412281d0a1a8d0b7ed1c738c0229cd04c79b2b98846fcca8f6cd940306622", @ANYRESHEX=r3], 0x50}}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYBLOB="f2c207339ce145b9e9a88f788ea4031eaee1db6b96b17ed09c64f7f6d2f4c94f1d14307ff3c6fa542e954185a13d90621d7675f3e75aef386379bd1881c5e75de7396f4a69e52d7150f1e40be06632536e0a5e881c1465388b8240f2ee6412281d0a1a8d0b7ed1c738c0229cd04c79b2b98846fcca8f6cd940306622", @ANYRESHEX=r3], 0x50}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r12], 0x50}}, 0x2) (async)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r12], 0x50}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r13=>0x0})
ioctl(r6, 0x10001, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r13}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1.012893093s ago: executing program 3 (id=21352):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet(0x2, 0xa, 0x265)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x20, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000"], 0x80}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000", @ANYRES32=r7], 0x68}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r4, &(0x7f0000002ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x1c, 0x69, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast}, "14f3305280f125e6"}}, 0xfdef)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r9)
sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000010)
r11 = socket$netlink(0x10, 0x3, 0xc)
splice(r0, 0x0, r11, 0x0, 0x800000000082, 0xf)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x4, 0x6}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
close(0x4)

950.867397ms ago: executing program 0 (id=21354):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="11d612c65d4b705cb10c5a0adcf48c6e5e60b19de7313ba6629bd4231ee7f19d4434a30f9ab2946c7c16723f06261975ac58e76a349b0d8b4016dbe2a15ba6112a004afb537a4b464edbb616b108f4db8b0cfa9fd103c4a8e70d3a39f9c189222e9fe5c41ae2ab"], 0x44}}, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 64)
openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async, rerun: 64)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @multicast1}, 0x107, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x2000000000, 0x500})
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

859.207171ms ago: executing program 0 (id=21356):
r0 = socket$inet(0x2, 0x2, 0x1) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='ip6tnl0\x00'})
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)="4c237487bf1dc0b43c4460", 0xb}, {0x0}], 0x2}}], 0x2, 0x2004000) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000380)=""/73}, 0x20) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0d000000190001002cbd7000fbcbdf240a202000000000020024000008001e000600040014000500fe8800000000000000000000000001013b6998b1be439b668e5ea670e77e6f8ec01779e8598faea1a878e76f698058a42dc314303ff6086b75f40b300a0fd1119ba669b4c89d48048efd6bbe552eaf26d847e8164cfd5aff9eecceeedcda8d69387428315c8d6ec4650bb3bde2d3bd765705471ba3c314ac190708ec69ceeb01a1d02495fecc903be72006af997f90749e33"], 0x38}}, 0x8000) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) (async, rerun: 32)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={{0x14, 0x10, 0x4}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0xc1) (async)
recvmsg(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/207, 0xcf}], 0x1, 0x0, 0xffffffffffffff74}, 0x20060) (async)
getsockopt$bt_hci(r9, 0x0, 0x3, &(0x7f0000000fc0)=""/4096, &(0x7f0000001fc0)=0x1000) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000037000000000a20000000000a01030000000000000000010000010900010073797a310000000034000000030a01020000000000000000010000000900010073797a310000000008000540fffffffc0400f67f08000b"], 0x7c}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000201030000000000000000000a1000040c0019800800020001000000180002"], 0x38}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0x3}, 0x6) (async)
write(r6, &(0x7f0000000000)="0a000000010001", 0x7)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@bridge_delvlan={0x30, 0x71, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000007}, 0x0)

805.482657ms ago: executing program 0 (id=21357):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0) (async)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0) (async)
socket(0x1, 0x803, 0x0)
socket(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0xfdcd, &(0x7f0000000440)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000020000000900000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000e00"/28], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
recvmmsg(r7, &(0x7f0000001b00)=[{{&(0x7f00000004c0)=@rc, 0x80, &(0x7f0000001a80)}, 0x9}], 0x1, 0x100, &(0x7f0000001b40))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b000000010000002501"], 0x114}], 0x1, 0x0, 0x0, 0x8814}, 0x24040880) (async)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b000000010000002501"], 0x114}], 0x1, 0x0, 0x0, 0x8814}, 0x24040880)
recvfrom(r8, 0x0, 0x0, 0x42, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

273.204204ms ago: executing program 1 (id=21363):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) (async)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(r2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44820}, 0x810)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) (async)
write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280)

272.878ms ago: executing program 1 (id=21364):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
listen(r0, 0x3)
r1 = socket(0xa, 0x3, 0x3a)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x8044884)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000200"/28], 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES16=0x0], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r6}, 0xc)
unshare(0x20060740)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800800000b8183581087e42f900000000000000000000009532c67bf142338de321a6f1604386ac5dd125d616a589c3c3698595a1c328798d4b18b1747827a9ea1fd6117626"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r7, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, 0x0, &(0x7f0000000240)=0x30)
sendto(r4, &(0x7f0000000280)="8872fdc4fa5bf6abd62b1adf8bfa2181df596cb72e3b174191d69818ef5b0834bdd05c6757a88315cf8e497b51e1727245be42eff7c989d47c4d803167ec3930975b", 0x42, 0x24008842, &(0x7f0000000740)=@ax25={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @null]}, 0x80)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, 0x0, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32, @ANYBLOB="019800000000000020"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x1)
sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r11=>r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES64=r11], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)

132.871479ms ago: executing program 1 (id=21365):
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000506010200000000000000000300000405000100070000000900020073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4048040}, 0x90) (async)
r0 = socket$inet6(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a', @ANYRES32=0x0, @ANYBLOB="312000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40805}, 0x80)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r7, 0x12, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x39}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002b0009002dbd7000fedbdf250500000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40070)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r9 = socket(0x1a, 0x5, 0x7)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x79f4eaf437c20d17}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0x0)

63.56948ms ago: executing program 1 (id=21366):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x160, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x10c, 0x8, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}, @IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x160, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x10c, 0x8, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}, @IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) (async)

1.142172ms ago: executing program 1 (id=21367):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140), 0x0)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x3b, 0x0, 0x1, 0xff}, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x4, {0x2, 0x9, 0x55, 0x3a7, 0xffffffffffffffff}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x5, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4000801)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x44804}, 0x800)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r4=>0x0, 0x4, 0xe9, 0xcb, 0xb, 0x20, @private0, @mcast1, 0x8, 0x7810, 0x5, 0x7}})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000480)={@empty, 0x79, r4})
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000100039040000000000000000000003e4", @ANYRES32=r5, @ANYBLOB="000000000000000020ad7c33001280080001007369740014000280080014000f00020005000900890000f2a9c515feda0ce240469b87a09bfda1f8a1de0119727ff0998b36b96591982164631951501b9a0567ec094e17339acf469c9d1abad71cd5762fc6c3ce2a979fe4c8e4f71f9d713dab95081c"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0)

0s ago: executing program 1 (id=21368):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1, 0x7)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0xa6}, @exit, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xc13}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x37, '\x00', r1, 0x1c, r2, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xf, 0x8001, 0x5}, 0x10, 0x1c66a, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000300)=[{0x4, 0x1, 0x6, 0x8}, {0x2, 0x4, 0x3}, {0x2, 0x2, 0xb, 0x2}, {0x0, 0x5, 0x5, 0x1}, {0x1, 0x4, 0x10, 0x8}], 0x10, 0x2}, 0x94)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001480)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x18)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0))
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000002000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000200000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)

kernel console output (not intermixed with test programs):

HW filter on device bond566
[ 1557.884622][T23466] 8021q: adding VLAN 0 to HW filter on device batadv10
[ 1557.890712][T23466] bond566: (slave batadv10): making interface the new active one
[ 1557.894826][T23466] bond566: (slave batadv10): Enslaving as an active interface with an up link
[ 1557.915861][T23471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20169'.
[ 1557.983744][T23471] bond604: option broadcast_neighbor: invalid value (4)
[ 1557.989476][T23471] bond604 (unregistering): Released all slaves
[ 1558.095829][T23491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20174'.
[ 1558.115246][T23491] xt_TCPMSS: Only works on TCP SYN packets
[ 1558.240037][T23503] netlink: 'syz.0.20178': attribute type 1 has an invalid length.
[ 1558.248373][T23503] workqueue: Failed to create a rescuer kthread for wq "bond568": -EINTR
[ 1558.365801][T23519] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20180'.
[ 1558.411577][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1558.414235][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1558.513153][T23535] netlink: 44 bytes leftover after parsing attributes in process `syz.1.20185'.
[ 1558.774886][T23571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20191'.
[ 1558.778813][T23571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20191'.
[ 1558.809933][T23576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20193'.
[ 1558.954634][T23583] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check.
[ 1558.960774][T23584] 8021q: VLANs not supported on gre0
[ 1559.049846][T23592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20198'.
[ 1559.053557][T23589] 8021q: adding VLAN 0 to HW filter on device bond605
[ 1559.056854][T23592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20198'.
[ 1559.060531][T23592] netlink: 'syz.0.20198': attribute type 15 has an invalid length.
[ 1559.288989][T23623] netlink: 'syz.0.20203': attribute type 4 has an invalid length.
[ 1559.304476][ T6560] rB speed is unknown, defaulting to 1000
[ 1559.306938][ T6560] sy2: Port: 1 Link DOWN
[ 1559.330881][ T6560] rB speed is unknown, defaulting to 1000
[ 1559.336056][ T6560] sy2: Port: 1 Link ACTIVE
[ 1559.451718][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1559.455214][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1559.489081][T23625] 8021q: adding VLAN 0 to HW filter on device bond80
[ 1559.505418][T23625] bond80 (unregistering): Released all slaves
[ 1559.747524][T23652] 8021q: adding VLAN 0 to HW filter on device bond606
[ 1559.772871][T23655] bond569: invalid ARP target 0.0.0.0 specified for addition
[ 1559.775363][T23655] bond569: option arp_ip_target: invalid value (0)
[ 1559.778408][T23655] bond569 (unregistering): Released all slaves
[ 1559.819425][T23644] syzkaller0: entered promiscuous mode
[ 1559.821862][T23644] syzkaller0: entered allmulticast mode
[ 1559.863067][T23658] sit0: left promiscuous mode
[ 1559.876460][T23658] tipc: Resetting bearer <eth:team0>
[ 1560.070616][T23658] vlan9: left allmulticast mode
[ 1560.076085][T23658] bond67: left allmulticast mode
[ 1560.089453][T23658] bond69: left promiscuous mode
[ 1560.112400][T23658] bond70: left promiscuous mode
[ 1560.129495][T23658] bond71: left promiscuous mode
[ 1560.139837][T23658] bond72: left promiscuous mode
[ 1560.143041][T23658] bridge28: left promiscuous mode
[ 1560.147481][T23658] ipvlan0: left allmulticast mode
[ 1560.150643][T23658] bond72: left allmulticast mode
[ 1560.154851][T23658] bridge28: left allmulticast mode
[ 1560.163994][T23658] bond74: left promiscuous mode
[ 1560.167106][T23658] bridge29: left promiscuous mode
[ 1560.179685][T23658] gretap5: left allmulticast mode
[ 1560.501474][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1560.503884][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1562.591552][    C0] net_ratelimit: 2 callbacks suppressed
[ 1562.591563][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1562.595887][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1563.303651][T23660] erspan0: left promiscuous mode
[ 1563.308326][T23660] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1563.312682][T23660] 8021q: adding VLAN 0 to HW filter on device team0
[ 1563.317597][T23660] tipc: Resetting bearer <eth:team0>
[ 1563.339953][T23660] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1563.408643][T23665] pim6reg: entered allmulticast mode
[ 1563.410548][T23665] pim6reg: left allmulticast mode
[ 1563.592126][T23681] siw: device registration error -23
[ 1563.598169][T23681] block nbd2: Unsupported socket: should be TCP or UNIX.
[ 1563.611717][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1563.614053][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1563.738363][T23696] validate_nla: 3 callbacks suppressed
[ 1563.738374][T23696] netlink: 'syz.3.20226': attribute type 9 has an invalid length.
[ 1563.752496][T23696] tipc: Resetting bearer <eth:team0>
[ 1563.757352][T23696] tipc: Disabling bearer <eth:team0>
[ 1564.023834][T23714] __nla_validate_parse: 5 callbacks suppressed
[ 1564.023843][T23714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20228'.
[ 1564.133826][T23719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20231'.
[ 1564.193864][T23727] netlink: 'syz.3.20233': attribute type 1 has an invalid length.
[ 1564.233096][T23727] bond80: entered promiscuous mode
[ 1564.304555][T23727] bond72: (slave bridge28): Releasing backup interface
[ 1564.308527][T23727] bond74: (slave bridge29): Releasing backup interface
[ 1564.313758][T23727] bond76: (slave gretap5): Releasing active interface
[ 1564.320054][T23734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20236'.
[ 1564.328707][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20236'.
[ 1564.332551][T23734] netlink: 'syz.1.20236': attribute type 11 has an invalid length.
[ 1564.335125][T23734] netlink: 'syz.1.20236': attribute type 14 has an invalid length.
[ 1564.340894][T23726] bond80: left promiscuous mode
[ 1564.358757][T23736] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 1564.365761][T23741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20237'.
[ 1564.376551][T23732] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 1564.417786][T23743] netlink: 'syz.3.20238': attribute type 1 has an invalid length.
[ 1564.437644][T23748] xt_hashlimit: size too large, truncated to 1048576
[ 1564.458958][T23747] macvtap13: entered promiscuous mode
[ 1564.462017][T23747] vlan0: entered promiscuous mode
[ 1564.464396][T23747] bond525: entered promiscuous mode
[ 1564.468121][T23747] vlan0: left promiscuous mode
[ 1564.470169][T23747] bond525: left promiscuous mode
[ 1564.528277][T23748] netlink: 'syz.1.20239': attribute type 11 has an invalid length.
[ 1564.530888][T23748] netlink: 224 bytes leftover after parsing attributes in process `syz.1.20239'.
[ 1564.534801][T23748] netlink: 68 bytes leftover after parsing attributes in process `syz.1.20239'.
[ 1564.647170][T23765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20242'.
[ 1564.651611][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1564.654064][T23765] netlink: 52 bytes leftover after parsing attributes in process `syz.3.20242'.
[ 1564.654658][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1564.667957][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20242'.
[ 1565.518158][T23826] bond82: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1565.540217][T23826] bond82 (unregistering): Released all slaves
[ 1565.663856][T23835] netlink: 'syz.3.20252': attribute type 1 has an invalid length.
[ 1565.693683][T23835] 8021q: adding VLAN 0 to HW filter on device bond82
[ 1565.701633][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1566.304484][T23877] siw: device registration error -23
[ 1566.384381][T23881] netlink: 'syz.3.20264': attribute type 1 has an invalid length.
[ 1566.387342][T23881] netlink: 'syz.3.20264': attribute type 2 has an invalid length.
[ 1566.790067][T23907] sit0: entered promiscuous mode
[ 1566.799710][T23907] netlink: 'syz.0.20272': attribute type 1 has an invalid length.
[ 1566.839801][T23915] netlink: 'syz.3.20274': attribute type 1 has an invalid length.
[ 1566.852718][T23915] bond84: entered promiscuous mode
[ 1566.854569][T23915] bond84: entered allmulticast mode
[ 1566.857255][T23915] 8021q: adding VLAN 0 to HW filter on device bond84
[ 1567.005031][T23927] syzkaller0: entered promiscuous mode
[ 1567.007219][T23927] syzkaller0: entered allmulticast mode
[ 1567.097230][T23931] erspan0: Device is already in use.
[ 1567.194266][T23936] bond607: entered allmulticast mode
[ 1567.210563][T23936] macvlan0: entered promiscuous mode
[ 1567.213015][T23936] macvlan0: entered allmulticast mode
[ 1567.215454][T23936] bond607: (slave macvlan0): Opening slave failed
[ 1567.374853][T23958] xt_TCPMSS: Only works on TCP SYN packets
[ 1567.613263][T23972] x_tables: arp_tables: NFQUEUE target: not valid for this family
[ 1567.630839][T23972] ipt_ECN: cannot use operation on non-tcp rule
[ 1567.771969][    C0] net_ratelimit: 3 callbacks suppressed
[ 1567.771985][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1567.777316][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1567.803423][T23988] bond85: (slave ip6gretap0): Enslaving as a backup interface with an up link
[ 1567.842356][T23990] rB speed is unknown, defaulting to 1000
[ 1567.848458][T23990] xfrm0 speed is unknown, defaulting to 1000
[ 1568.017357][T23990] syzkaller0 speed is unknown, defaulting to 1000
[ 1568.020229][T23990] xfrm0 speed is unknown, defaulting to 1000
[ 1568.107941][T24027] vlan11: entered allmulticast mode
[ 1568.109969][T24027] bridge201: entered allmulticast mode
[ 1568.113183][T24027] bridge201: port 1(erspan0) entered blocking state
[ 1568.115945][T24027] bridge201: port 1(erspan0) entered disabled state
[ 1568.118305][T24027] erspan0: entered allmulticast mode
[ 1568.122839][T24027] erspan0: left allmulticast mode
[ 1568.132468][T24028] tipc: Resetting bearer <eth:syzkaller0>
[ 1568.175550][T24031] tipc: Resetting bearer <eth:syzkaller0>
[ 1568.296947][T24036] 8021q: adding VLAN 0 to HW filter on device bond86
[ 1568.329365][    C1] syzkaller0: tun_net_xmit 120
[ 1568.334892][T24036] bond86: (slave veth31): Enslaving as a backup interface with a down link
[ 1568.453250][T24039] rB speed is unknown, defaulting to 1000
[ 1568.459531][T24039] xfrm0 speed is unknown, defaulting to 1000
[ 1568.591893][    C1] syzkaller0: tun_net_xmit 120
[ 1568.696038][T24039] syzkaller0 speed is unknown, defaulting to 1000
[ 1568.699084][T24039] xfrm0 speed is unknown, defaulting to 1000
[ 1568.811478][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1568.813876][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1568.929935][T24043] validate_nla: 5 callbacks suppressed
[ 1568.930007][T24043] netlink: 'syz.3.20304': attribute type 10 has an invalid length.
[ 1568.984504][T24047] netlink: 'syz.3.20304': attribute type 10 has an invalid length.
[ 1569.007086][T24050] netlink: 'syz.1.20305': attribute type 10 has an invalid length.
[ 1569.012001][T24030] tipc: Resetting bearer <eth:syzkaller0>
[ 1569.126743][T24053] __nla_validate_parse: 29 callbacks suppressed
[ 1569.126760][T24053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20306'.
[ 1569.149473][T24053] tipc: Resetting bearer <eth:syzkaller0>
[ 1569.152854][T24053] tipc: Resetting bearer <eth:syzkaller0>
[ 1569.155423][T24053] tipc: Resetting bearer <eth:syzkaller0>
[ 1569.552356][T11273] tipc: Resetting bearer <eth:syzkaller0>
[ 1569.851520][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1569.853932][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1570.901496][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1570.903965][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1571.931607][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1571.934105][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1572.971591][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1572.974714][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1574.011535][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1574.014330][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1575.061537][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1575.064577][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1576.101621][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1576.104220][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1577.131528][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1577.134542][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1578.181475][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1578.184114][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1579.211579][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1579.214597][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1580.251599][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1580.253983][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1581.301448][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1581.303812][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1581.938400][T24065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20310'.
[ 1582.015549][T24078] netlink: 256 bytes leftover after parsing attributes in process `syz.0.20312'.
[ 1582.023748][T24078] netlink: 256 bytes leftover after parsing attributes in process `syz.0.20312'.
[ 1582.156251][T24087] can: request_module (can-proto-5) failed.
[ 1582.210325][T24103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20318'.
[ 1582.228764][T24078] No such timeout policy "syz1"
[ 1582.230704][T24078] netlink: zone id is out of range
[ 1582.233081][T24078] netlink: zone id is out of range
[ 1582.336293][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20321'.
[ 1582.339425][T24118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20321'.
[ 1582.389683][T24131] x_tables: duplicate underflow at hook 1
[ 1582.426796][T24136] pim6reg: entered allmulticast mode
[ 1582.432986][T24136] pim6reg: left allmulticast mode
[ 1582.485194][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20325'.
[ 1582.510368][T24136] 8021q: adding VLAN 0 to HW filter on device bond87
[ 1582.514510][T24148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20327'.
[ 1582.556834][T24155] netlink: 52 bytes leftover after parsing attributes in process `syz.3.20328'.
[ 1582.597605][T24157] bond569: option ad_user_port_key: invalid value (65535)
[ 1582.599903][T24157] bond569: option ad_user_port_key: allowed values 0 - 1023
[ 1582.603927][T24157] bond569 (unregistering): Released all slaves
[ 1582.662395][T24162] netlink: 'syz.1.20329': attribute type 1 has an invalid length.
[ 1582.675905][T24162] bond609: entered promiscuous mode
[ 1582.677944][T24162] 8021q: adding VLAN 0 to HW filter on device bond609
[ 1582.774948][T24170] netlink: 'syz.1.20331': attribute type 1 has an invalid length.
[ 1582.793557][T24170] 8021q: adding VLAN 0 to HW filter on device bond610
[ 1582.860030][T24177] netlink: 'syz.1.20332': attribute type 1 has an invalid length.
[ 1582.893258][T24177] 8021q: adding VLAN 0 to HW filter on device bond611
[ 1582.917035][T24177] bond611: (slave veth307): Enslaving as an active interface with a down link
[ 1582.930640][T24177] 8021q: adding VLAN 0 to HW filter on device batadv16
[ 1582.933966][T24177] bond611: (slave batadv16): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[ 1583.090152][T24181] rB speed is unknown, defaulting to 1000
[ 1583.094679][T24181] xfrm0 speed is unknown, defaulting to 1000
[ 1583.205360][T24181] syzkaller0 speed is unknown, defaulting to 1000
[ 1583.209467][T24181] xfrm0 speed is unknown, defaulting to 1000
[ 1583.371706][    C0] net_ratelimit: 22 callbacks suppressed
[ 1583.371717][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1583.376697][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1583.582204][T24206] netlink: 'syz.1.20339': attribute type 1 has an invalid length.
[ 1583.680329][T24211] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.20340'.
[ 1583.705169][T24206] 8021q: adding VLAN 0 to HW filter on device bond612
[ 1583.725336][T24206] bond612: entered promiscuous mode
[ 1583.731503][T24206] bond612: entered allmulticast mode
[ 1583.967599][T24228] netlink: 'syz.1.20341': attribute type 1 has an invalid length.
[ 1584.038487][T24228] netlink: 'syz.1.20341': attribute type 19 has an invalid length.
[ 1584.364035][T24231] netlink: 'syz.0.20342': attribute type 20 has an invalid length.
[ 1584.367491][T24231] netlink: 'syz.0.20342': attribute type 20 has an invalid length.
[ 1584.407093][T24234] netlink: 'syz.0.20343': attribute type 1 has an invalid length.
[ 1584.410471][T24233] netlink: 'syz.0.20343': attribute type 1 has an invalid length.
[ 1584.414342][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1584.414652][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1584.434904][T24234] bond569: entered promiscuous mode
[ 1584.437439][T24234] 8021q: adding VLAN 0 to HW filter on device bond569
[ 1584.455544][T24233] bond569: (slave bridge202): making interface the new active one
[ 1584.458821][T24233] bridge202: entered promiscuous mode
[ 1584.462119][T24233] bond569: (slave bridge202): Enslaving as an active interface with an up link
[ 1585.451776][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1585.454992][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1586.501524][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1586.503985][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1586.673166][T24211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1586.859160][T24249] syzkaller1: entered promiscuous mode
[ 1586.862782][T24249] syzkaller1: entered allmulticast mode
[ 1586.917460][T24257] xfrm4: entered promiscuous mode
[ 1586.920066][T24257] xfrm4: entered allmulticast mode
[ 1587.066154][T24282] sit0: left promiscuous mode
[ 1587.079968][T24282] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 1587.098369][T24282] tipc: Resetting bearer <eth:syzkaller0>
[ 1587.108219][T24283] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1587.128574][T24283] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1587.155658][T24281] tipc: Resetting bearer <eth:syzkaller0>
[ 1587.357320][T24304] __nla_validate_parse: 10 callbacks suppressed
[ 1587.357331][T24304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20361'.
[ 1587.387481][T24304] 8021q: adding VLAN 0 to HW filter on device bond614
[ 1587.392598][T24304] netlink: 64 bytes leftover after parsing attributes in process `syz.1.20361'.
[ 1587.395748][T24305] netlink: 64 bytes leftover after parsing attributes in process `syz.1.20361'.
[ 1587.411095][T24304] bond614: (slave veth0_to_bond): making interface the new active one
[ 1587.417816][T24304] bond614: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1587.506182][T24308] 8021q: adding VLAN 0 to HW filter on device bond615
[ 1587.617125][T24320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20364'.
[ 1587.660890][T24329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20365'.
[ 1587.677768][T24329] xt_NFQUEUE: number of total queues is 0
[ 1587.680108][T24329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20365'.
[ 1587.712493][T24331] 8021q: VLANs not supported on syzkaller1
[ 1587.729531][T24331] rB speed is unknown, defaulting to 1000
[ 1587.733128][T24331] xfrm0 speed is unknown, defaulting to 1000
[ 1587.833927][T24331] syzkaller0 speed is unknown, defaulting to 1000
[ 1587.836918][T24331] xfrm0 speed is unknown, defaulting to 1000
[ 1587.915727][   T40] tipc: Resetting bearer <eth:syzkaller0>
[ 1587.974155][T24338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20368'.
[ 1587.977989][T24338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20368'.
[ 1587.983874][T24338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20368'.
[ 1588.043600][T24339] syzkaller1: entered promiscuous mode
[ 1588.045722][T24339] syzkaller1: entered allmulticast mode
[ 1588.165206][T24346] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20369'.
[ 1588.227032][T24348] validate_nla: 4 callbacks suppressed
[ 1588.227043][T24348] netlink: 'syz.1.20370': attribute type 13 has an invalid length.
[ 1588.250139][T24348] erspan0: refused to change device tx_queue_len
[ 1588.344103][T24356] bridge203: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 1588.396116][T24366] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000
[ 1588.512249][T24378] netlink: 'syz.3.20379': attribute type 1 has an invalid length.
[ 1588.524160][T24378] bridge0: Device is already in use.
[ 1588.571616][    C0] net_ratelimit: 3 callbacks suppressed
[ 1588.571633][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1588.577168][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1588.755142][T24406] netlink: 'syz.1.20382': attribute type 1 has an invalid length.
[ 1588.772415][T24405] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1588.819201][T24405] 8021q: VLANs not supported on ip6gre0
[ 1588.913647][T24414] netlink: 'syz.0.20385': attribute type 1 has an invalid length.
[ 1588.936303][T24414] 8021q: adding VLAN 0 to HW filter on device bond570
[ 1588.945312][T24414] bond570: entered promiscuous mode
[ 1588.947017][T24414] bond570: entered allmulticast mode
[ 1589.104631][T24420] ip6tnl29: entered allmulticast mode
[ 1589.108810][T14423] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1589.117158][T14423] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1589.131807][ T1289] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1589.356682][T24432] netlink: 'syz.3.20389': attribute type 11 has an invalid length.
[ 1589.473131][T24439] netlink: 'syz.3.20391': attribute type 32 has an invalid length.
[ 1589.517707][T24439] bond88: Setting coupled_control to off (0)
[ 1589.621606][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1589.624697][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1589.739655][T24453] bond572 (unregistering): Released all slaves
[ 1589.756085][T24462] sctp: [Deprecated]: syz.1.20396 (pid 24462) Use of int in max_burst socket option.
[ 1589.756085][T24462] Use struct sctp_assoc_value instead
[ 1589.791507][T24462] erspan0: entered promiscuous mode
[ 1589.937502][T24472] netlink: 'syz.0.20399': attribute type 2 has an invalid length.
[ 1589.951935][T24472] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1589.989416][T24482] netlink: 'syz.1.20401': attribute type 1 has an invalid length.
[ 1589.998641][T24482] netlink: 'syz.1.20401': attribute type 1 has an invalid length.
[ 1590.012217][ T1289] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1590.154182][T24491] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1590.171623][ T1289] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1590.403879][T24523] bond89: invalid ARP target 0.0.0.0 specified for addition
[ 1590.407520][T24523] bond89: option arp_ip_target: invalid value (0)
[ 1590.411055][T24523] bond89 (unregistering): Released all slaves
[ 1590.486894][T24530] netlink: 'syz.1.20413': attribute type 20 has an invalid length.
[ 1590.490279][T24530] netlink: 'syz.1.20413': attribute type 20 has an invalid length.
[ 1590.576787][T24537] bond89: option updelay: invalid value (18446744072776343432)
[ 1590.579956][T24537] bond89: option updelay: allowed values 0 - 2147483647
[ 1590.583908][T24537] bond89 (unregistering): Released all slaves
[ 1590.787265][T24555] bond89: option xmit_hash_policy: invalid value (10)
[ 1590.792102][T24555] bond89 (unregistering): Released all slaves
[ 1591.074352][T24579] workqueue: Failed to create a rescuer kthread for wq "bond572": -EINTR
[ 1591.081619][T24576] 8021q: adding VLAN 0 to HW filter on device bond618
[ 1591.336173][T24585] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check.
[ 1591.368453][T24593] IPVS: Unknown mcast interface: veth1_to_hsr
[ 1591.375052][T24591] pim6reg1: entered allmulticast mode
[ 1591.520941][T24604] pim6reg1: entered promiscuous mode
[ 1591.523258][T24604] pim6reg1: entered allmulticast mode
[ 1591.651808][T24617] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1591.655679][T24617] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1591.714306][T24617] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1591.733136][T24617] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1591.808653][T24617] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1591.822682][T24617] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1591.850610][T24622] xt_l2tp: v2 sid > 0xffff: 262144
[ 1591.866694][T24617] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1591.875122][T24617] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1592.075573][ T6593] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1592.078862][ T6593] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1592.089966][ T6593] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1592.093768][ T6593] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1592.104564][ T6593] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1592.108120][ T6593] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1592.116600][T14423] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1592.119529][T14423] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1592.402363][T24643] __nla_validate_parse: 39 callbacks suppressed
[ 1592.402375][T24643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20444'.
[ 1592.471102][T24649] 8021q: adding VLAN 0 to HW filter on device bond573
[ 1592.475288][T24649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20446'.
[ 1592.490030][T24655] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1592.523275][T24649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20446'.
[ 1592.540023][T24649] bond573: entered promiscuous mode
[ 1592.542754][T24649] bond573: entered allmulticast mode
[ 1592.608272][T24662] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1592.616519][T24662] sch_tbf: burst 255 is lower than device syzkaller0 mtu (299) !
[ 1592.652253][T24665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20451'.
[ 1592.738871][T24671] RDS: rds_bind could not find a transport for ::ffff:172.20.20.49, load rds_tcp or rds_rdma?
[ 1592.899409][    C1] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1596.106531][T24678] x_tables: ip_tables: icmp match: only valid for protocol 1
[ 1600.731381][    C1] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1605.466881][T24685] dvmrp8: entered allmulticast mode
[ 1605.474334][T24685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20456'.
[ 1605.558753][T24688] bond0: (slave ipvlan11): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1605.636790][T24693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20460'.
[ 1605.652916][T24693] pim6reg: entered allmulticast mode
[ 1605.655771][T24693] pim6reg: left allmulticast mode
[ 1605.926922][T24715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20466'.
[ 1606.026617][T24721] validate_nla: 9 callbacks suppressed
[ 1606.026629][T24721] netlink: 'syz.1.20467': attribute type 1 has an invalid length.
[ 1606.057245][T24721] 8021q: adding VLAN 0 to HW filter on device bond619
[ 1606.081152][T24721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20467'.
[ 1606.112251][T24721] bond619: entered promiscuous mode
[ 1606.115299][T24721] bond619: entered allmulticast mode
[ 1606.196653][T24727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20469'.
[ 1606.257937][T24727] 8021q: adding VLAN 0 to HW filter on device bond621
[ 1606.282911][T24727] bond621 (unregistering): Released all slaves
[ 1606.375966][T24735] netlink: 'syz.0.20471': attribute type 1 has an invalid length.
[ 1606.419625][T24735] 8021q: adding VLAN 0 to HW filter on device bond574
[ 1606.449066][T24735] veth205: entered allmulticast mode
[ 1606.453690][T24735] bond574: (slave veth205): Enslaving as an active interface with an up link
[ 1606.482981][T24735] bond574 (unregistering): (slave veth205): Releasing backup interface
[ 1606.489240][T24735] bond574 (unregistering): Released all slaves
[ 1606.528588][T24747] bond0: entered promiscuous mode
[ 1606.530938][T24747] bond0: left promiscuous mode
[ 1606.591100][T24748] bond0: entered promiscuous mode
[ 1606.596761][T24748] bond0: left promiscuous mode
[ 1606.725841][T24754] tipc: Resetting bearer <eth:syzkaller0>
[ 1606.761374][T24768] netlink: 14 bytes leftover after parsing attributes in process `syz.1.20479'.
[ 1606.787124][T24755] tipc: Resetting bearer <eth:syzkaller0>
[ 1606.866661][T24779] netlink: 'syz.0.20482': attribute type 1 has an invalid length.
[ 1606.876009][T24777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20481'.
[ 1606.889187][T24779] bond574: entered promiscuous mode
[ 1606.891244][T24779] 8021q: adding VLAN 0 to HW filter on device bond574
[ 1606.923246][T24779] bond574: (slave bridge205): making interface the new active one
[ 1606.925925][T24779] bridge205: entered promiscuous mode
[ 1606.928490][T24779] bond574: (slave bridge205): Enslaving as an active interface with an up link
[ 1606.938837][T24780] bond574: (slave bridge206): Enslaving as a backup interface with an up link
[ 1606.957662][T24777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20481'.
[ 1607.004103][T24784] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1607.009167][T24784] sch_tbf: burst 255 is lower than device syzkaller0 mtu (299) !
[ 1607.085119][T24789] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[ 1607.195404][T24815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1607.256981][T24818] netlink: 'syz.0.20491': attribute type 9 has an invalid length.
[ 1607.260513][T24821] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1607.380968][T24847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20499'.
[ 1607.405957][T24847] team0: entered promiscuous mode
[ 1607.408054][T24847] team0: entered allmulticast mode
[ 1607.411958][T24847] 8021q: adding VLAN 0 to HW filter on device team0
[ 1607.418349][T24847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20499'.
[ 1607.435138][T24847] team4: entered promiscuous mode
[ 1607.437252][T24847] team4: entered allmulticast mode
[ 1607.439603][T24847] 8021q: adding VLAN 0 to HW filter on device team4
[ 1607.472846][T24854] team5: entered promiscuous mode
[ 1607.474832][T24854] team5: entered allmulticast mode
[ 1607.476850][T24854] 8021q: adding VLAN 0 to HW filter on device team5
[ 1607.502014][T24853] team6: entered promiscuous mode
[ 1607.504869][T24853] team6: entered allmulticast mode
[ 1607.507143][T24853] 8021q: adding VLAN 0 to HW filter on device team6
[ 1607.572376][T24860] tipc: Resetting bearer <eth:syzkaller0>
[ 1607.574912][T24860] tipc: Resetting bearer <eth:syzkaller0>
[ 1607.590938][T24857] netlink: 'syz.3.20501': attribute type 39 has an invalid length.
[ 1607.623436][T21206] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1607.653142][T24868] syzkaller0: entered promiscuous mode
[ 1607.655672][T24868] syzkaller0: entered allmulticast mode
[ 1607.672517][T24868] bond0: entered promiscuous mode
[ 1607.675140][T24868] bond0: entered allmulticast mode
[ 1607.714494][T23189] tipc: Resetting bearer <eth:syzkaller0>
[ 1607.720521][T24870] netlink: 'syz.0.20505': attribute type 1 has an invalid length.
[ 1607.883709][T24882] SET target dimension over the limit!
[ 1607.886531][T24882] netlink: 'syz.0.20510': attribute type 1 has an invalid length.
[ 1607.975374][T24887] netlink: 'syz.3.20511': attribute type 2 has an invalid length.
[ 1608.068279][T24900] netlink: 'syz.3.20513': attribute type 1 has an invalid length.
[ 1608.116364][T24901] bond90: (slave bridge34): making interface the new active one
[ 1608.126181][T24901] bond90: (slave bridge34): Enslaving as an active interface with an up link
[ 1608.144108][T24905] bond90: (slave bridge35): Enslaving as an active interface with a down link
[ 1608.154914][T24900] bond90: entered promiscuous mode
[ 1608.163143][T24900] bridge34: entered promiscuous mode
[ 1608.169665][T24900] bond90: entered allmulticast mode
[ 1608.174195][T24900] bridge34: entered allmulticast mode
[ 1608.180204][T24900] 8021q: adding VLAN 0 to HW filter on device bond90
[ 1608.227788][T25361] bond90: (slave bridge34): link status definitely down, disabling slave
[ 1608.259686][T25361] bridge34: left promiscuous mode
[ 1608.280214][T25361] bridge34: left allmulticast mode
[ 1608.288727][T25361] bond90: now running without any active interface!
[ 1608.297054][T24912] Cannot find add_set index 0 as target
[ 1608.475282][T24934] syzkaller1: entered promiscuous mode
[ 1608.480046][T24934] syzkaller1: entered allmulticast mode
[ 1608.539720][T24939] netlink: 'syz.1.20523': attribute type 2 has an invalid length.
[ 1608.573035][T21206] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1608.584930][ T6593] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1608.612909][T24941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1608.633555][T24949] bond85: (slave ip6gretap0): Releasing backup interface
[ 1608.638809][T24949] bond86: (slave veth31): Releasing backup interface
[ 1608.646613][T24949] bond90: (slave bridge34): Releasing active interface
[ 1608.655064][T24949] bond90: (slave bridge35): Releasing active interface
[ 1608.699138][T24949] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1608.934380][T24985] veth33: entered allmulticast mode
[ 1609.361940][T24981] bond607: left allmulticast mode
[ 1609.368329][T24981] bond609: left promiscuous mode
[ 1609.427560][T24981] bond612: left promiscuous mode
[ 1609.431405][T24981] bond612: left allmulticast mode
[ 1609.435140][T24981] xfrm4: left promiscuous mode
[ 1609.436981][T24981] xfrm4: left allmulticast mode
[ 1609.466991][T24981] bond619: left promiscuous mode
[ 1609.468837][T24981] bond619: left allmulticast mode
[ 1609.477733][T24987] erspan0: Device is already in use.
[ 1609.600641][T25007] syzkaller1: entered promiscuous mode
[ 1609.603369][T25007] syzkaller1: entered allmulticast mode
[ 1609.685287][T25011] bond575: entered promiscuous mode
[ 1609.687741][T25011] 8021q: adding VLAN 0 to HW filter on device bond575
[ 1609.706642][T25011] bond575: entered allmulticast mode
[ 1609.724859][T25011] bond575: (slave bridge209): making interface the new active one
[ 1609.736360][T25011] bridge209: entered promiscuous mode
[ 1609.740026][T25011] bridge209: entered allmulticast mode
[ 1609.744475][T25011] bond575: (slave bridge209): Enslaving as an active interface with an up link
[ 1610.188164][T25066] 8021q: adding VLAN 0 to HW filter on device bond91
[ 1610.208942][T25066] vlan0: entered allmulticast mode
[ 1610.211073][T25066] bond91: entered allmulticast mode
[ 1610.293286][T25070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1610.309852][T25074] mac80211_hwsim hwsim211 syzkaller0: entered promiscuous mode
[ 1610.312860][T25074] mac80211_hwsim hwsim211 syzkaller0: entered allmulticast mode
[ 1610.315347][T25072] tipc: Resetting bearer <eth:syzkaller0>
[ 1610.343421][T25072] syzkaller0: left promiscuous mode
[ 1610.345626][T25072] syzkaller0: left allmulticast mode
[ 1610.351903][T25072] tcf_pedit_act: 24 callbacks suppressed
[ 1610.351919][T25072] tc action pedit offset must be on 32 bit boundaries
[ 1610.358562][T25072] tc action pedit offset must be on 32 bit boundaries
[ 1610.361275][T25072] tc action pedit offset must be on 32 bit boundaries
[ 1610.364248][T25072] tc action pedit offset must be on 32 bit boundaries
[ 1610.367066][T25072] tc action pedit offset must be on 32 bit boundaries
[ 1610.369518][T25072] tc action pedit offset must be on 32 bit boundaries
[ 1610.371740][T25072] tc action pedit offset must be on 32 bit boundaries
[ 1610.373842][T25072] tc action pedit offset must be on 32 bit boundaries
[ 1610.376109][T25072] tc action pedit offset must be on 32 bit boundaries
[ 1610.378317][T25072] tc action pedit offset must be on 32 bit boundaries
[ 1610.380855][T25072] 0: reclassify loop, rule prio 0, protocol 800
[ 1610.388093][T25071] tipc: Resetting bearer <eth:syzkaller0>
[ 1610.446956][T25088] 8021q: adding VLAN 0 to HW filter on device bond576
[ 1610.468800][T25088] bond576: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1610.493739][T25092] bond621: Setting coupled_control to off (0)
[ 1610.510597][T25096] tipc: Resetting bearer <eth:syzkaller0>
[ 1610.528037][T25096] __nla_validate_parse: 66 callbacks suppressed
[ 1610.528047][T25096] netlink: 48 bytes leftover after parsing attributes in process `syz.0.20561'.
[ 1610.533865][T25096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20561'.
[ 1610.570208][T25095] tipc: Resetting bearer <eth:syzkaller0>
[ 1610.629944][T25102] 8021q: adding VLAN 0 to HW filter on device bond578
[ 1610.640630][T25102] bond577: (slave bond578): making interface the new active one
[ 1610.646473][T25102] bond577: (slave bond578): Enslaving as an active interface with an up link
[ 1610.656431][T25102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20562'.
[ 1610.662169][T25102] 8021q: adding VLAN 0 to HW filter on device bond577
[ 1610.752236][   T40] tipc: Resetting bearer <eth:syzkaller0>
[ 1610.838330][T25113] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20565'.
[ 1610.849013][T25113] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20565'.
[ 1610.894505][T25113] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20565'.
[ 1611.007616][T25117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20566'.
[ 1611.069125][T25124] netlink: 64 bytes leftover after parsing attributes in process `syz.0.20568'.
[ 1611.083396][T25124] syzkaller1: entered promiscuous mode
[ 1611.085801][T25124] syzkaller1: entered allmulticast mode
[ 1611.269532][T25129] netlink: 80 bytes leftover after parsing attributes in process `syz.0.20569'.
[ 1611.327037][T25142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20572'.
[ 1611.334001][T25142] erspan0: left promiscuous mode
[ 1611.346853][T25142] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1611.349501][T25142] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1611.353858][T25142] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1611.356504][T25142] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[ 1611.379470][ T6560] xfrm0 speed is unknown, defaulting to 1000
[ 1611.385321][ T6560] s{z0: Port: 1 Link ACTIVE
[ 1611.391159][ T6560] xfrm0 speed is unknown, defaulting to 1000
[ 1612.893881][ T1381] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1614.257212][T25136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1614.594647][T25158] syzkaller1: left promiscuous mode
[ 1614.596947][T25158] syzkaller1: left allmulticast mode
[ 1614.741496][T25158] mac80211_hwsim hwsim211 syzkaller0: left promiscuous mode
[ 1614.743850][T25158] mac80211_hwsim hwsim211 syzkaller0: left allmulticast mode
[ 1614.760361][T25167] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1614.769806][T25167] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1614.829825][T30908] xfrm0 speed is unknown, defaulting to 1000
[ 1614.832596][T30908] s{z0: Port: 1 Link DOWN
[ 1614.837223][T30908] xfrm0 speed is unknown, defaulting to 1000
[ 1615.090440][T25192] can: request_module (can-proto-5) failed.
[ 1615.318085][T25210] bond579: option ad_select: invalid value (34)
[ 1615.321112][T25210] bond579 (unregistering): Released all slaves
[ 1615.358324][T25220] validate_nla: 13 callbacks suppressed
[ 1615.358335][T25220] netlink: 'syz.1.20585': attribute type 7 has an invalid length.
[ 1615.402426][T25221] netlink: 'syz.3.20586': attribute type 1 has an invalid length.
[ 1615.586948][T25235] syzkaller0: entered promiscuous mode
[ 1615.588851][T25235] syzkaller0: entered allmulticast mode
[ 1615.590774][T25235] tipc: Resetting bearer <eth:syzkaller0>
[ 1615.596663][T25235] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1615.637741][T25239] netlink: 'syz.0.20591': attribute type 1 has an invalid length.
[ 1615.660485][T25239] 8021q: adding VLAN 0 to HW filter on device bond579
[ 1615.683371][T25239] bond579: (slave veth207): Enslaving as an active interface with a down link
[ 1615.688389][T25239] __nla_validate_parse: 17 callbacks suppressed
[ 1615.688398][T25239] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20591'.
[ 1615.708159][T25239] bond580: option updelay: invalid value (18446744073709518847)
[ 1615.710530][T25239] bond580: option updelay: allowed values 0 - 2147483647
[ 1615.713980][T25239] bond580 (unregistering): Released all slaves
[ 1615.815980][T25249] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1615.820035][T25249] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1615.825722][T25249] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1615.829052][T25249] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1615.833638][T25249] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1615.837055][T25249] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1615.837864][T25252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20594'.
[ 1615.839942][T25249] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1615.846766][T25249] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1615.850352][T25249] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1615.854884][T25249] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1615.858326][T25249] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1615.863876][T25249] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1615.867088][T25249] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1615.915103][T25260] netlink: 'syz.3.20596': attribute type 27 has an invalid length.
[ 1615.975591][T25260] bond0: left promiscuous mode
[ 1615.981469][T25260] bond0: left allmulticast mode
[ 1616.200039][T25260] bond84: left promiscuous mode
[ 1616.204282][T25260] bond84: left allmulticast mode
[ 1616.226048][T25260] bond90: left promiscuous mode
[ 1616.231251][T25260] bond90: left allmulticast mode
[ 1616.252180][T25260] veth33: left allmulticast mode
[ 1616.260767][T25260] vlan0: left allmulticast mode
[ 1616.265134][T25260] bond91: left allmulticast mode
[ 1616.272365][T25261] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1616.288461][T25261] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1616.294639][T25265] tipc: Resetting bearer <eth:syzkaller0>
[ 1616.315588][T25262] tipc: Resetting bearer <eth:syzkaller0>
[ 1616.363575][T25273] netlink: 'syz.1.20600': attribute type 1 has an invalid length.
[ 1616.369754][T25273] netlink: 228 bytes leftover after parsing attributes in process `syz.1.20600'.
[ 1616.547916][T25287] erspan0: entered promiscuous mode
[ 1616.553768][T25287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20604'.
[ 1616.593191][T25296] netlink: 252 bytes leftover after parsing attributes in process `syz.3.20605'.
[ 1616.643740][T25300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1616.646303][T25302] netlink: 'syz.3.20607': attribute type 11 has an invalid length.
[ 1616.648230][T25300] mac80211_hwsim hwsim211 syzkaller0: entered promiscuous mode
[ 1616.650964][T25300] mac80211_hwsim hwsim211 syzkaller0: entered allmulticast mode
[ 1616.666453][T25300] tipc: Resetting bearer <eth:syzkaller0>
[ 1616.666878][T25302] netlink: 'syz.3.20607': attribute type 11 has an invalid length.
[ 1616.680428][T25302] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1616.746801][T25309] netlink: 'syz.1.20608': attribute type 1 has an invalid length.
[ 1616.777195][T25309] 8021q: adding VLAN 0 to HW filter on device bond623
[ 1616.782688][T25309] bond622: (slave bond623): making interface the new active one
[ 1616.785330][T25309] bond622: (slave bond623): Enslaving as an active interface with an up link
[ 1616.794879][T25309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20608'.
[ 1616.798631][T25309] 8021q: adding VLAN 0 to HW filter on device bond622
[ 1616.805217][T23178] tipc: Resetting bearer <eth:syzkaller0>
[ 1616.903439][T25322] netlink: 'syz.3.20611': attribute type 1 has an invalid length.
[ 1616.923048][T25322] bond92: entered promiscuous mode
[ 1616.924969][T25322] 8021q: adding VLAN 0 to HW filter on device bond92
[ 1616.949509][T25321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20612'.
[ 1616.968566][T25316] syzkaller0: entered promiscuous mode
[ 1616.970453][T25316] syzkaller0: entered allmulticast mode
[ 1617.371356][    C1] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1617.679167][T25330] netlink: 52 bytes leftover after parsing attributes in process `syz.1.20613'.
[ 1617.745658][T25331] netlink: 76 bytes leftover after parsing attributes in process `syz.1.20613'.
[ 1619.785064][T25331] netlink: 52 bytes leftover after parsing attributes in process `syz.1.20613'.
[ 1619.896932][T25341] netlink: 'syz.3.20616': attribute type 1 has an invalid length.
[ 1619.921164][T25341] bond93: entered promiscuous mode
[ 1619.923101][T25341] bond93: entered allmulticast mode
[ 1619.924966][T25341] 8021q: adding VLAN 0 to HW filter on device bond93
[ 1619.935987][T25339] pim6reg: entered allmulticast mode
[ 1619.943581][T25339] pim6reg: left allmulticast mode
[ 1620.020972][T25352] IPVS: set_ctl: invalid protocol: 136 172.20.20.15:20001
[ 1620.084777][T25370] sctp: [Deprecated]: syz.0.20622 (pid 25370) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1620.084777][T25370] Use struct sctp_sack_info instead
[ 1620.104477][T25377] netlink: 'syz.1.20623': attribute type 1 has an invalid length.
[ 1620.130889][T25377] bond624: entered promiscuous mode
[ 1620.133628][T25377] 8021q: adding VLAN 0 to HW filter on device bond624
[ 1620.146235][T25382] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 1620.150110][T25377] bond624: (slave bridge236): making interface the new active one
[ 1620.153791][T25377] bridge236: entered promiscuous mode
[ 1620.157224][T25377] bond624: (slave bridge236): Enslaving as an active interface with an up link
[ 1620.183457][T25377] bond624: (slave ipvlan16): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1620.187778][T25377] bond624: (slave ipvlan16): The slave device specified does not support setting the MAC address
[ 1620.232260][T14423] batman_adv: batadv15: IGMP Querier appeared
[ 1620.234247][T14423] batman_adv: batadv15: MLD Querier appeared
[ 1620.287460][T25394] netlink: 'syz.0.20629': attribute type 1 has an invalid length.
[ 1620.312928][T25394] 8021q: adding VLAN 0 to HW filter on device bond580
[ 1620.324892][T25394] bond580: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[ 1620.330647][T25394] bond580: entered allmulticast mode
[ 1620.351599][T25394] bond580: (slave ip6gretap0): Enslaving as an active interface with an up link
[ 1620.386443][T25409] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 1620.396636][T25404] netlink: 'syz.1.20632': attribute type 2 has an invalid length.
[ 1620.423932][T25397] syzkaller1: entered promiscuous mode
[ 1620.428355][T25397] syzkaller1: entered allmulticast mode
[ 1620.883908][T25451] __nla_validate_parse: 11 callbacks suppressed
[ 1620.883920][T25451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20644'.
[ 1620.890309][T25451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20644'.
[ 1620.897387][T25451] macvlan44: entered allmulticast mode
[ 1620.899502][T25451] gretap0: entered allmulticast mode
[ 1620.929339][T25458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20646'.
[ 1620.970389][T25461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20647'.
[ 1620.974816][T25461] netlink: 'syz.3.20647': attribute type 1 has an invalid length.
[ 1620.993565][T25458] netlink: 14 bytes leftover after parsing attributes in process `syz.0.20646'.
[ 1620.997526][T25458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20646'.
[ 1621.000573][T25458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20646'.
[ 1621.004022][T25458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20646'.
[ 1621.007128][T25458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20646'.
[ 1621.010745][T25458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20646'.
[ 1621.071009][T25464] netlink: 'syz.3.20648': attribute type 30 has an invalid length.
[ 1621.256679][T25477] bond576: (slave veth0_to_bond): Releasing backup interface
[ 1621.276697][T25477] tipc: Resetting bearer <eth:syzkaller0>
[ 1621.286896][T25477] bond566: (slave batadv10): Releasing active interface
[ 1621.305832][T25477] bond569: (slave bridge202): Releasing backup interface
[ 1621.308856][T25477] bridge202: left promiscuous mode
[ 1621.320982][T25477] bond574: (slave bridge205): Releasing backup interface
[ 1621.324297][T25477] bond574: (slave bridge205): the permanent HWaddr of slave - 06:3f:d7:ba:ba:4b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1621.330201][T25477] bridge205: left promiscuous mode
[ 1621.342634][T25477] bond574: (slave bridge206): making interface the new active one
[ 1621.345931][T25477] bridge206: entered promiscuous mode
[ 1621.353891][T25477] bond574: (slave bridge206): Releasing backup interface
[ 1621.358194][T25477] bridge206: left promiscuous mode
[ 1621.367772][T25477] bond575: (slave bridge209): Releasing backup interface
[ 1621.370182][T25477] bridge209: left promiscuous mode
[ 1621.372881][T25477] bridge209: left allmulticast mode
[ 1621.380040][T25477] bond577: (slave bond578): Releasing backup interface
[ 1621.389594][T25477] bond579: (slave veth207): Releasing active interface
[ 1621.396393][T25477] bond580: (slave ip6gretap0): Releasing active interface
[ 1621.475799][T25493] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1621.488620][T25497] netlink: 'syz.3.20658': attribute type 1 has an invalid length.
[ 1621.541872][T30908] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1621.685713][T25525] netlink: 'syz.3.20664': attribute type 3 has an invalid length.
[ 1621.699137][T25526] bond614: (slave veth0_to_bond): Releasing active interface
[ 1621.717081][T25526] batadv15: left allmulticast mode
[ 1621.719339][T25526] batadv15: left promiscuous mode
[ 1621.722829][T25526] bridge0: port 1(batadv15) entered disabled state
[ 1621.733521][T25526] bond611: (slave veth307): Releasing active interface
[ 1621.740039][T25526] bond622: (slave bond623): Releasing backup interface
[ 1621.767129][T25526] bond624: (slave bridge236): Releasing backup interface
[ 1621.771145][T25526] bridge236: left promiscuous mode
[ 1621.886059][T25540] sit0: entered promiscuous mode
[ 1621.896713][T25540] netlink: 'syz.0.20669': attribute type 1 has an invalid length.
[ 1621.964084][T25550] pim6reg1: entered promiscuous mode
[ 1621.966008][T25550] pim6reg1: entered allmulticast mode
[ 1622.115889][T25573] netlink: 'syz.3.20676': attribute type 13 has an invalid length.
[ 1622.163313][T25573] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1622.250210][T25585] mac80211_hwsim hwsim278 wlan0: entered promiscuous mode
[ 1622.255192][T25585] mac80211_hwsim hwsim278 wlan0: entered allmulticast mode
[ 1622.257985][T25585] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1622.290553][T25584] syzkaller1: entered promiscuous mode
[ 1622.292600][T25584] syzkaller1: entered allmulticast mode
[ 1622.326216][T25588] netlink: 'syz.3.20682': attribute type 4 has an invalid length.
[ 1622.331512][T25588] netlink: 'syz.3.20682': attribute type 4 has an invalid length.
[ 1622.339555][T25588] netlink: 'syz.3.20682': attribute type 4 has an invalid length.
[ 1622.424840][T25594] tipc: Resetting bearer <eth:syzkaller0>
[ 1622.439349][T25595] tipc: Resetting bearer <eth:syzkaller0>
[ 1622.454786][T25594] xfrm0: entered promiscuous mode
[ 1622.457677][T25594] xfrm0: entered allmulticast mode
[ 1622.460027][T25594] team0: Port device xfrm0 added
[ 1622.471572][T30909] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1622.658233][T25620] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1622.689453][T25619] 8021q: adding VLAN 0 to HW filter on device bond582
[ 1622.703634][T25619] veth0_to_bond: left promiscuous mode
[ 1622.708876][T25619] bond582: (slave veth0_to_bond): making interface the new active one
[ 1622.714101][T25619] bond582: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1622.718356][ T8213] veth0_to_bond: entered promiscuous mode
[ 1622.734616][T25619] veth0_to_bond: left promiscuous mode
[ 1622.740639][T25619] bond582: entered promiscuous mode
[ 1622.747823][T25619] veth0_to_bond: entered promiscuous mode
[ 1622.750086][T25619] bond582: entered allmulticast mode
[ 1622.752415][T25619] veth0_to_bond: entered allmulticast mode
[ 1622.812017][T30909] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1622.845260][T25634] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[ 1623.079437][T25653] 8021q: adding VLAN 0 to HW filter on device bond583
[ 1623.216934][T25653] tipc: Resetting bearer <eth:syzkaller0>
[ 1623.219502][T25653] tipc: Resetting bearer <eth:syzkaller0>
[ 1623.352348][T30909] rB speed is unknown, defaulting to 1000
[ 1623.352453][T25658] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1623.361806][T30909] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1623.418586][T25668] bond95: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[ 1623.424676][T25668] bond95: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[ 1623.428320][T25668] bond95: entered allmulticast mode
[ 1623.529763][T25680] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[ 1623.534559][T25678] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[ 1623.619385][T25693] tipc: Resetting bearer <eth:syzkaller0>
[ 1623.637482][T25692] tipc: Resetting bearer <eth:syzkaller0>
[ 1623.676175][T25696] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1623.679557][T25696] sch_tbf: burst 255 is lower than device syzkaller0 mtu (299) !
[ 1623.709206][T25698] bridge237: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 1623.733087][T25702] 8021q: adding VLAN 0 to HW filter on device bond96
[ 1623.742828][T25696] PKCS7: Unknown OID: [4] (bad)
[ 1623.744922][T25696] PKCS7: Only support pkcs7_signedData type
[ 1623.747431][T25702] 8021q: adding VLAN 0 to HW filter on device batadv6
[ 1623.752031][T25702] bond96: (slave batadv6): making interface the new active one
[ 1623.755922][T25702] bond96: (slave batadv6): Enslaving as an active interface with an up link
[ 1623.792788][T25702] bond96 (unregistering): (slave batadv6): Releasing active interface
[ 1623.804861][T25702] bond96 (unregistering): Released all slaves
[ 1623.837003][T23178] tipc: Resetting bearer <eth:syzkaller0>
[ 1624.018892][T25715] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1624.022458][T25715] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1624.030057][T25715] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1624.033754][T25715] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[ 1624.055272][T25718] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[ 1624.088617][T21206] xfrm0 speed is unknown, defaulting to 1000
[ 1624.093317][T21206] s{z0: Port: 1 Link ACTIVE
[ 1624.097051][T21206] xfrm0 speed is unknown, defaulting to 1000
[ 1624.139144][T25727] xt_hashlimit: size too large, truncated to 1048576
[ 1624.173536][ T1289] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1624.193348][T25730] IPVS: ip_vs_edit_dest(): server weight less than zero
[ 1624.223700][T25730] bond625: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[ 1624.226850][T25730] bond625: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[ 1624.230546][T25730] bond625: entered allmulticast mode
[ 1624.903002][T25747] block nbd2: shutting down sockets
[ 1625.056305][T25750] ipvlan0: Caught tx_queue_len zero misconfig
[ 1625.204537][T25758] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20000
[ 1625.208205][T25758] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1625.320577][T25767] bond96 (unregistering): Released all slaves
[ 1625.662225][T25801] validate_nla: 13 callbacks suppressed
[ 1625.662236][T25801] netlink: 'syz.3.20733': attribute type 16 has an invalid length.
[ 1625.666588][T25801] netlink: 'syz.3.20733': attribute type 17 has an invalid length.
[ 1628.590483][T25786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1628.698631][T25805] sctp: [Deprecated]: syz.1.20736 (pid 25805) Use of int in max_burst socket option.
[ 1628.698631][T25805] Use struct sctp_assoc_value instead
[ 1628.725303][T25814] sctp: [Deprecated]: syz.1.20736 (pid 25814) Use of int in max_burst socket option.
[ 1628.725303][T25814] Use struct sctp_assoc_value instead
[ 1628.768230][T25812] bond96: option ad_select: invalid value (34)
[ 1628.771884][T25812] bond96 (unregistering): Released all slaves
[ 1628.854293][T25821] __nla_validate_parse: 57 callbacks suppressed
[ 1628.854311][T25821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20740'.
[ 1628.865624][T25821] xt_TCPMSS: Only works on TCP SYN packets
[ 1628.883537][T25823] netlink: 'syz.3.20741': attribute type 1 has an invalid length.
[ 1628.933738][T25823] bond96: entered promiscuous mode
[ 1629.344779][T25822] bond96: left promiscuous mode
[ 1629.412226][T25843] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1629.415864][T25843] syzkaller0: entered promiscuous mode
[ 1629.417615][T25843] syzkaller0: entered allmulticast mode
[ 1629.423130][T25843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20746'.
[ 1629.427470][T25841] tipc: Resetting bearer <eth:syzkaller0>
[ 1629.455054][T25841] tipc: Disabling bearer <eth:syzkaller0>
[ 1629.538120][T25850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20747'.
[ 1629.629853][T25854] pimreg: entered allmulticast mode
[ 1629.632976][T25854] bond445: left allmulticast mode
[ 1629.635494][T25853] pimreg: left allmulticast mode
[ 1629.988239][T25871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20752'.
[ 1630.032290][T25871] veth209: entered allmulticast mode
[ 1630.038516][T25871] bond584: (slave veth209): Enslaving as an active interface with an up link
[ 1630.047438][T25871] bond584 (unregistering): (slave veth209): Releasing backup interface
[ 1630.054106][T25871] bond584 (unregistering): Released all slaves
[ 1630.318927][T25890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20758'.
[ 1630.323946][T25890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20758'.
[ 1630.353443][T25884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20755'.
[ 1630.356746][T25887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20755'.
[ 1630.359639][T25887] netlink: 'syz.0.20755': attribute type 7 has an invalid length.
[ 1630.365106][T25884] netlink: 'syz.0.20755': attribute type 7 has an invalid length.
[ 1630.367819][T25884] netlink: 'syz.0.20755': attribute type 8 has an invalid length.
[ 1630.370601][T25887] netlink: 'syz.0.20755': attribute type 8 has an invalid length.
[ 1630.373934][T25884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20755'.
[ 1630.377117][T25887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20755'.
[ 1630.417240][T25898] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1630.452847][T25904] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1630.456489][T25904] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1630.518679][T25909] netlink: 'syz.1.20762': attribute type 1 has an invalid length.
[ 1630.533213][T25909] workqueue: Failed to create a rescuer kthread for wq "bond626": -EINTR
[ 1631.350304][T25939] netlink: 'syz.0.20768': attribute type 5 has an invalid length.
[ 1631.364446][T25939] geneve17: entered promiscuous mode
[ 1631.366143][T25939] geneve17: entered allmulticast mode
[ 1631.368578][T25361] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 44641 - 0
[ 1631.373576][T25361] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 44641 - 0
[ 1631.377656][T25361] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 44641 - 0
[ 1631.381308][T25361] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 44641 - 0
[ 1631.417104][T25941] netlink: 'syz.0.20769': attribute type 1 has an invalid length.
[ 1631.442885][T25941] 8021q: adding VLAN 0 to HW filter on device bond584
[ 1631.488716][T25944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1631.492334][T25944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1631.495342][T25944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1631.746116][T25970] tipc: Resetting bearer <eth:syzkaller0>
[ 1631.791893][ T1289] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1632.083507][T25997] syzkaller0: entered promiscuous mode
[ 1632.085643][T25997] syzkaller0: entered allmulticast mode
[ 1632.191946][ T1289] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1632.646566][T26008] dvmrp8: entered allmulticast mode
[ 1632.686907][T26016] netlink: 'syz.0.20786': attribute type 32 has an invalid length.
[ 1632.700728][T26016] bond585: option coupled_control: invalid value (255)
[ 1632.704040][T26016] bond585 (unregistering): Released all slaves
[ 1632.829767][T26022] veth211: entered allmulticast mode
[ 1632.834401][T26022] bond585: (slave veth211): Enslaving as an active interface with an up link
[ 1632.846127][T26022] bond585 (unregistering): (slave veth211): Releasing backup interface
[ 1632.853943][T26022] bond585 (unregistering): Released all slaves
[ 1633.176149][T26044] rB speed is unknown, defaulting to 1000
[ 1633.198636][T26044] xfrm0 speed is unknown, defaulting to 1000
[ 1633.386413][T26045] netlink: 'syz.3.20792': attribute type 4 has an invalid length.
[ 1633.410887][T26044] syzkaller0 speed is unknown, defaulting to 1000
[ 1633.415418][T26044] xfrm0 speed is unknown, defaulting to 1000
[ 1633.445701][T26054] rB speed is unknown, defaulting to 1000
[ 1633.448727][T26054] xfrm0 speed is unknown, defaulting to 1000
[ 1633.580456][T26063] sysfs: cannot create duplicate filename '/class/ieee80211/1^!'
[ 1633.587625][T26063] CPU: 1 UID: 0 PID: 26063 Comm: syz.0.20796 Not tainted syzkaller #0 PREEMPT(full) 
[ 1633.587646][T26063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1633.587656][T26063] Call Trace:
[ 1633.587662][T26063]  <TASK>
[ 1633.587668][T26063]  dump_stack_lvl+0xe8/0x150
[ 1633.587692][T26063]  sysfs_warn_dup+0x8e/0xa0
[ 1633.587715][T26063]  sysfs_do_create_link_sd+0xc0/0x110
[ 1633.587732][T26063]  device_add_class_symlinks+0x1cf/0x240
[ 1633.587755][T26063]  device_add+0x467/0xb80
[ 1633.587777][T26063]  wiphy_register+0x1fc8/0x2ff0
[ 1633.587805][T26063]  ? __pfx_wiphy_register+0x10/0x10
[ 1633.587820][T26063]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1633.587838][T26063]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1633.587862][T26063]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1633.587880][T26063]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1633.587906][T26063]  ? ieee80211_register_hw+0x1a11/0x4a50
[ 1633.587965][T26063]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1633.587986][T26063]  ? __asan_memset+0x22/0x50
[ 1633.588004][T26063]  ? __hrtimer_setup+0x1b7/0x260
[ 1633.588022][T26063]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1633.588041][T26063]  mac80211_hwsim_new_radio+0x3238/0x5680
[ 1633.588079][T26063]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1633.588102][T26063]  ? kstrndup+0xbd/0x160
[ 1633.588122][T26063]  ? kstrndup+0xbd/0x160
[ 1633.588137][T26063]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1633.588166][T26063]  genl_family_rcv_msg_doit+0x233/0x340
[ 1633.588188][T26063]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1633.588213][T26063]  ? bpf_lsm_capable+0x9/0x20
[ 1633.588229][T26063]  ? security_capable+0x7e/0x2c0
[ 1633.588255][T26063]  genl_rcv_msg+0x614/0x7a0
[ 1633.588275][T26063]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1633.588289][T26063]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1633.588307][T26063]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1633.588331][T26063]  netlink_rcv_skb+0x226/0x4a0
[ 1633.588351][T26063]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1633.588366][T26063]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1633.588395][T26063]  ? down_read+0x2be/0x330
[ 1633.588415][T26063]  genl_rcv+0x28/0x40
[ 1633.588427][T26063]  netlink_unicast+0x7bb/0x940
[ 1633.588453][T26063]  netlink_sendmsg+0x813/0xb40
[ 1633.588478][T26063]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1633.588499][T26063]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1633.588523][T26063]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1633.588539][T26063]  sock_sendmsg_nosec+0x13a/0x180
[ 1633.588556][T26063]  ____sys_sendmsg+0x54e/0x850
[ 1633.588578][T26063]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1633.588601][T26063]  ? import_iovec+0x73/0xa0
[ 1633.588623][T26063]  ___sys_sendmsg+0x2a5/0x360
[ 1633.588639][T26063]  ? __lock_acquire+0x683/0x2cf0
[ 1633.588657][T26063]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1633.588678][T26063]  ? futex_wake+0x51b/0x5f0
[ 1633.588719][T26063]  ? __fget_files+0x2a/0x420
[ 1633.588732][T26063]  ? __fget_files+0x3a2/0x420
[ 1633.588753][T26063]  __x64_sys_sendmsg+0x1b1/0x290
[ 1633.588772][T26063]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1633.588804][T26063]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1633.588819][T26063]  do_syscall_64+0x174/0x580
[ 1633.588834][T26063]  ? trace_irq_disable+0x3b/0x140
[ 1633.588859][T26063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1633.588872][T26063] RIP: 0033:0x7fb13099ce59
[ 1633.588887][T26063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1633.588898][T26063] RSP: 002b:00007fb13182c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1633.588913][T26063] RAX: ffffffffffffffda RBX: 00007fb130c15fa0 RCX: 00007fb13099ce59
[ 1633.588923][T26063] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000006
[ 1633.588931][T26063] RBP: 00007fb130a32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1633.588967][T26063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1633.588977][T26063] R13: 00007fb130c16038 R14: 00007fb130c15fa0 R15: 00007ffd013b1c08
[ 1633.589001][T26063]  </TASK>
[ 1633.845419][T26054] syzkaller0 speed is unknown, defaulting to 1000
[ 1633.849090][T26054] xfrm0 speed is unknown, defaulting to 1000
[ 1633.953971][T26077] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1633.961749][T26077] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1633.967993][T26077] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1634.234042][T26096] syz.0.20804: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1634.242034][T26096] CPU: 0 UID: 0 PID: 26096 Comm: syz.0.20804 Not tainted syzkaller #0 PREEMPT(full) 
[ 1634.242055][T26096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1634.242066][T26096] Call Trace:
[ 1634.242072][T26096]  <TASK>
[ 1634.242078][T26096]  dump_stack_lvl+0xe8/0x150
[ 1634.242097][T26096]  warn_alloc+0x24c/0x270
[ 1634.242112][T26096]  ? stack_depot_save_flags+0x33/0x800
[ 1634.242122][T26096]  ? __pfx_warn_alloc+0x10/0x10
[ 1634.242136][T26096]  ? kasan_save_track+0x3e/0x80
[ 1634.242143][T26096]  ? __kasan_kmalloc+0x93/0xb0
[ 1634.242152][T26096]  ? xsk_setsockopt+0x52a/0x960
[ 1634.242161][T26096]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1634.242170][T26096]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 1634.242179][T26096]  ? do_syscall_64+0x174/0x580
[ 1634.242189][T26096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1634.242202][T26096]  __vmalloc_node_range_noprof+0x12c/0x1730
[ 1634.242226][T26096]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1634.242240][T26096]  ? __kasan_kmalloc+0x93/0xb0
[ 1634.242250][T26096]  ? __kmalloc_cache_noprof+0x32d/0x660
[ 1634.242264][T26096]  ? __kmalloc_cache_noprof+0x150/0x660
[ 1634.242279][T26096]  vmalloc_user_noprof+0xad/0xe0
[ 1634.242291][T26096]  ? xskq_create+0xbf/0x170
[ 1634.242300][T26096]  xskq_create+0xbf/0x170
[ 1634.242310][T26096]  xsk_init_queue+0x8a/0xe0
[ 1634.242319][T26096]  xsk_setsockopt+0x52a/0x960
[ 1634.242327][T26096]  ? __fget_files+0x2a/0x420
[ 1634.242336][T26096]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1634.242368][T26096]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1634.242382][T26096]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1634.242396][T26096]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1634.242407][T26096]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1634.242417][T26096]  do_sock_setsockopt+0x17c/0x1b0
[ 1634.242430][T26096]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1634.242442][T26096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1634.242470][T26096]  do_syscall_64+0x174/0x580
[ 1634.242480][T26096]  ? trace_irq_disable+0x3b/0x140
[ 1634.242494][T26096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1634.242502][T26096] RIP: 0033:0x7fb13099ce59
[ 1634.242512][T26096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1634.242519][T26096] RSP: 002b:00007fb13182c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1634.242529][T26096] RAX: ffffffffffffffda RBX: 00007fb130c15fa0 RCX: 00007fb13099ce59
[ 1634.242535][T26096] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[ 1634.242540][T26096] RBP: 00007fb130a32e6f R08: 0000000000000004 R09: 0000000000000000
[ 1634.242545][T26096] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1634.242550][T26096] R13: 00007fb130c16038 R14: 00007fb130c15fa0 R15: 00007ffd013b1c08
[ 1634.242563][T26096]  </TASK>
[ 1634.243508][T26096] Mem-Info:
[ 1634.344533][T26096] active_anon:30324 inactive_anon:3 isolated_anon:0
[ 1634.344533][T26096]  active_file:143 inactive_file:53115 isolated_file:0
[ 1634.344533][T26096]  unevictable:1768 dirty:61 writeback:0
[ 1634.344533][T26096]  slab_reclaimable:24577 slab_unreclaimable:330388
[ 1634.344533][T26096]  mapped:26539 shmem:5348 pagetables:1547
[ 1634.344533][T26096]  sec_pagetables:0 bounce:0
[ 1634.344533][T26096]  kernel_misc_reclaimable:0
[ 1634.344533][T26096]  free:795153 free_pcp:19847 free_cma:0
[ 1634.359100][T26096] Node 0 active_anon:83952kB inactive_anon:0kB active_file:368kB inactive_file:150820kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:77640kB dirty:108kB writeback:0kB shmem:16712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:39224kB pagetables:3740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1634.370551][T26096] Node 1 active_anon:37344kB inactive_anon:12kB active_file:204kB inactive_file:61640kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28516kB dirty:136kB writeback:0kB shmem:4680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:35808kB pagetables:2448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1634.389183][T26096] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1634.407118][T26096] lowmem_reserve[]: 0 1586 2116 2116 2116
[ 1634.410362][T26096] Node 0 DMA32 free:804744kB boost:0kB min:25008kB low:31260kB high:37512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:75488kB inactive_anon:0kB active_file:288kB inactive_file:17160kB unevictable:0kB writepending:100kB zspages:0kB present:2080636kB managed:1624064kB mlocked:0kB bounce:0kB free_pcp:7280kB local_pcp:6956kB free_cma:0kB
[ 1634.423040][T26096] lowmem_reserve[]: 0 0 530 530 530
[ 1634.426017][T26096] Node 0 Normal free:10708kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8464kB inactive_anon:0kB active_file:80kB inactive_file:133660kB unevictable:3536kB writepending:8kB zspages:0kB present:1572868kB managed:543104kB mlocked:0kB bounce:0kB free_pcp:1668kB local_pcp:1660kB free_cma:0kB
[ 1634.449550][T26096] lowmem_reserve[]: 0 0 0 0 0
[ 1634.455727][T26096] Node 1 Normal free:2349800kB boost:0kB min:56348kB low:70432kB high:84516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37344kB inactive_anon:12kB active_file:204kB inactive_file:61640kB unevictable:3536kB writepending:136kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:70560kB local_pcp:31392kB free_cma:0kB
[ 1634.467864][T26096] lowmem_reserve[]: 0 0 0 0 0
[ 1634.482826][T26096] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1634.510018][T26096] Node 0 DMA32: 268*4kB (UME) 192*8kB (UME) 579*16kB (UME) 217*32kB (UM) 16*64kB (UE) 30*128kB (UME) 34*256kB (UM) 6*512kB (UM) 14*1024kB (UME) 9*2048kB (UM) 180*4096kB (UM) = 805504kB
[ 1634.517561][T26097] netlink: 'syz.0.20804': attribute type 10 has an invalid length.
[ 1634.519204][T26096] Node 0 Normal: 179*4kB (UME) 227*8kB (UME) 82*16kB (UME) 52*32kB (UM) 64*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 10756kB
[ 1634.528577][T26096] Node 1 Normal: 1292*4kB (UM) 439*8kB (UME) 60*16kB (UE) 88*32kB (UE) 80*64kB (UM) 157*128kB (UM) 60*256kB (UME) 6*512kB (M) 10*1024kB (UM) 5*2048kB (UE) 555*4096kB (UM) = 2349864kB
[ 1634.536635][T26099] netlink: 'syz.1.20805': attribute type 1 has an invalid length.
[ 1634.540394][T26096] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1634.544975][T26096] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1634.548458][T26096] 58606 total pagecache pages
[ 1634.549895][T26096] 0 pages in swap cache
[ 1634.551298][T26096] Free swap  = 124996kB
[ 1634.552605][T26096] Total swap = 124996kB
[ 1634.553951][T26096] 1834877 pages RAM
[ 1634.555182][T26096] 0 pages HighMem/MovableOnly
[ 1634.556669][T26096] 390574 pages reserved
[ 1634.558158][T26096] 0 pages cma reserved
[ 1634.570062][T26099] bond626: entered promiscuous mode
[ 1634.572502][T26099] 8021q: adding VLAN 0 to HW filter on device bond626
[ 1634.619433][T26099] 8021q: adding VLAN 0 to HW filter on device bond626
[ 1634.626706][T26099] bond626: (slave ip6gre17): The slave device specified does not support setting the MAC address
[ 1634.630760][T26099] bond626: (slave ip6gre17): Setting fail_over_mac to active for active-backup mode
[ 1634.645661][T26099] bond626: (slave ip6gre17): making interface the new active one
[ 1634.650556][T26099] ip6gre17: entered promiscuous mode
[ 1634.655201][T26099] bond626: (slave ip6gre17): Enslaving as an active interface with an up link
[ 1634.710966][T26105] __nla_validate_parse: 14 callbacks suppressed
[ 1634.710977][T26105] netlink: 524 bytes leftover after parsing attributes in process `syz.0.20807'.
[ 1634.920203][T26116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20809'.
[ 1634.925187][T26116] netlink: 212 bytes leftover after parsing attributes in process `syz.0.20809'.
[ 1634.928456][T26116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20809'.
[ 1634.977942][T26119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20810'.
[ 1635.046284][T26123] netlink: 'syz.0.20811': attribute type 1 has an invalid length.
[ 1635.080835][T26123] 8021q: adding VLAN 0 to HW filter on device bond585
[ 1635.117641][T26123] bond585: (slave veth213): Enslaving as an active interface with a down link
[ 1635.146370][T26123] tipc: Resetting bearer <eth:syzkaller0>
[ 1635.150563][T26122] tipc: Resetting bearer <eth:syzkaller0>
[ 1635.325870][T26161] syzkaller1: entered allmulticast mode
[ 1635.338627][T26150] netlink: 'syz.1.20814': attribute type 16 has an invalid length.
[ 1635.345724][T26150] netlink: 'syz.1.20814': attribute type 17 has an invalid length.
[ 1635.412841][T26150] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[ 1636.017969][T23189] tipc: Resetting bearer <eth:syzkaller0>
[ 1636.121096][T26171] netlink: 'syz.1.20821': attribute type 1 has an invalid length.
[ 1636.146175][T26171] 8021q: adding VLAN 0 to HW filter on device bond628
[ 1636.169591][T26171] bond628: (slave veth315): Enslaving as an active interface with a down link
[ 1636.178627][T26174] tun0: tun_chr_ioctl cmd 1074025680
[ 1636.302029][T26189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1636.309784][T26189] syzkaller0: entered promiscuous mode
[ 1636.316166][T26189] syzkaller0: entered allmulticast mode
[ 1636.324678][T26189] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1636.349441][T26193] syzkaller1: entered allmulticast mode
[ 1636.356816][T26189] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20825'.
[ 1636.375467][T26189] tipc: Resetting bearer <eth:syzkaller0>
[ 1636.391553][T26187] tipc: Resetting bearer <eth:syzkaller0>
[ 1636.416271][T26187] tipc: Disabling bearer <eth:syzkaller0>
[ 1636.522817][T26201] rB speed is unknown, defaulting to 1000
[ 1636.529610][T26201] xfrm0 speed is unknown, defaulting to 1000
[ 1636.567642][T26212] netlink: 'syz.0.20829': attribute type 1 has an invalid length.
[ 1636.603282][T26212] 8021q: adding VLAN 0 to HW filter on device bond586
[ 1636.634554][T26212] bond586: (slave veth215): Enslaving as an active interface with a down link
[ 1636.643130][T26220] netlink: 'syz.3.20831': attribute type 2 has an invalid length.
[ 1636.671761][T26213] bond586: (slave veth217): Enslaving as an active interface with a down link
[ 1636.708403][T26212] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1636.713035][T26212] bond586: (slave batadv0): making interface the new active one
[ 1636.720988][T26212] batadv0: entered promiscuous mode
[ 1636.733196][T26212] bond586: (slave batadv0): Enslaving as an active interface with an up link
[ 1636.749875][T26213] 8021q: adding VLAN 0 to HW filter on device batadv11
[ 1636.766153][T26213] bond586: (slave batadv11): Enslaving as an active interface with an up link
[ 1636.770222][T26208] netlink: 'syz.1.20828': attribute type 4 has an invalid length.
[ 1636.785152][T26201] syzkaller0 speed is unknown, defaulting to 1000
[ 1636.788434][T26201] xfrm0 speed is unknown, defaulting to 1000
[ 1636.897461][T26208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20828'.
[ 1636.956537][T26236] bond587: Unable to set down delay as MII monitoring is disabled
[ 1636.960671][T26236] bond587 (unregistering): Released all slaves
[ 1637.019515][T26236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20834'.
[ 1637.035105][T26236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1637.043726][T26242] netlink: 'syz.3.20836': attribute type 1 has an invalid length.
[ 1637.085476][T26242] 8021q: adding VLAN 0 to HW filter on device bond97
[ 1637.122448][T26246] bond582: (slave veth0_to_bond): Releasing active interface
[ 1637.124988][T26246] veth0_to_bond: left promiscuous mode
[ 1637.126994][T26246] veth0_to_bond: left allmulticast mode
[ 1637.135527][T26247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20837'.
[ 1637.139722][T26246] xfrm0: left promiscuous mode
[ 1637.141623][T26246] xfrm0: left allmulticast mode
[ 1637.146452][T26246] team0: Port device xfrm0 removed
[ 1637.153770][T26246] tipc: Resetting bearer <eth:syzkaller0>
[ 1637.162282][T26246] bond585: (slave veth213): Releasing active interface
[ 1637.185440][ T1289] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1637.194190][T26246] bond586: (slave veth215): Releasing active interface
[ 1637.201156][T26246] bond586: (slave veth215): the permanent HWaddr of slave - d6:b0:32:76:1c:37 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1637.246163][T26246] bond586: (slave veth217): Releasing active interface
[ 1637.255242][T26254] netlink: 'syz.3.20836': attribute type 10 has an invalid length.
[ 1637.258596][T26254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20836'.
[ 1637.262852][T26246] bond586: (slave batadv0): Releasing active interface
[ 1637.265702][T26246] batadv0: left promiscuous mode
[ 1637.267526][T26246] bond586: (slave batadv11): making interface the new active one
[ 1637.275386][T26246] bond586: (slave batadv11): Releasing active interface
[ 1637.312022][T26248] bond97: (slave veth37): Enslaving as a backup interface with a down link
[ 1637.327189][T26251] ipip15: entered promiscuous mode
[ 1637.392594][T26258] netlink: 'syz.0.20840': attribute type 4 has an invalid length.
[ 1637.408506][T15185] rB speed is unknown, defaulting to 1000
[ 1637.409530][T26260] netlink: 'syz.3.20842': attribute type 1 has an invalid length.
[ 1637.410618][T15185] sy2: Port: 1 Link DOWN
[ 1637.417444][T26263] x_tables: ip_tables: ah match: only valid for protocol 51
[ 1637.422339][T26260] netlink: 'syz.3.20842': attribute type 32 has an invalid length.
[ 1637.422758][T26262] x_tables: ip_tables: ah match: only valid for protocol 51
[ 1637.513439][T15185] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1637.534939][T26260] bond98: option coupled_control: invalid value (255)
[ 1637.560095][T26260] bond98 (unregistering): Released all slaves
[ 1637.770646][T26298] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:21
[ 1637.778201][T26298] netlink: 'syz.0.20849': attribute type 11 has an invalid length.
[ 1637.784312][T26301] xt_hashlimit: size too large, truncated to 1048576
[ 1637.954061][T26317] netlink: 'syz.1.20852': attribute type 1 has an invalid length.
[ 1637.980027][T26317] 8021q: adding VLAN 0 to HW filter on device bond630
[ 1638.018646][T26321] vlan35: entered promiscuous mode
[ 1638.020981][T26321] bond630: entered promiscuous mode
[ 1638.024467][T26321] vlan35: entered allmulticast mode
[ 1638.026688][T26321] bond630: entered allmulticast mode
[ 1638.073234][T26325] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20002
[ 1638.077765][T26325] x_tables: duplicate underflow at hook 2
[ 1638.225194][T26340] netlink: 'syz.1.20859': attribute type 5 has an invalid length.
[ 1638.265352][T26342] syzkaller1: left allmulticast mode
[ 1638.724746][T26362] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[ 1639.449047][T26393] netlink: 'syz.3.20876': attribute type 11 has an invalid length.
[ 1639.772585][T26416] bond98: (slave bridge39): making interface the new active one
[ 1639.778427][T26416] bond98: (slave bridge39): Enslaving as an active interface with an up link
[ 1639.785672][T26416] __nla_validate_parse: 18 callbacks suppressed
[ 1639.785691][T26416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20882'.
[ 1639.797324][T26416] bond98: entered promiscuous mode
[ 1639.799435][T26416] bridge39: entered promiscuous mode
[ 1639.803293][T26416] bond98: entered allmulticast mode
[ 1639.811692][T26416] bridge39: entered allmulticast mode
[ 1639.815530][T26416] 8021q: adding VLAN 0 to HW filter on device bond98
[ 1639.824951][T26416] netlink: 52 bytes leftover after parsing attributes in process `syz.3.20882'.
[ 1639.841571][T26416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20882'.
[ 1639.844722][T26416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20882'.
[ 1639.859216][ T6774] bond98: (slave bridge39): link status definitely down, disabling slave
[ 1639.870264][T26429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20884'.
[ 1639.874104][ T6774] bridge39: left promiscuous mode
[ 1639.891627][ T6774] bridge39: left allmulticast mode
[ 1639.901077][ T6774] bond98: now running without any active interface!
[ 1639.936948][T26439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20885'.
[ 1640.094489][T26452] tipc: Resetting bearer <eth:syzkaller0>
[ 1640.101678][T26452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20889'.
[ 1640.113816][T26451] tipc: Resetting bearer <eth:syzkaller0>
[ 1640.160794][T26456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20891'.
[ 1640.189483][T26461] netlink: 84 bytes leftover after parsing attributes in process `syz.0.20892'.
[ 1642.426324][T23181] tipc: Resetting bearer <eth:syzkaller0>
[ 1642.530150][T26480] erspan0: entered promiscuous mode
[ 1642.544559][T26484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20894'.
[ 1642.618259][T26479] erspan0: left promiscuous mode
[ 1642.909193][T26521] syzkaller1: entered promiscuous mode
[ 1642.913297][T26521] syzkaller1: entered allmulticast mode
[ 1643.049873][T26533] validate_nla: 5 callbacks suppressed
[ 1643.049882][T26533] netlink: 'syz.3.20907': attribute type 1 has an invalid length.
[ 1643.088179][T26533] bond99: entered promiscuous mode
[ 1643.090810][T26533] 8021q: adding VLAN 0 to HW filter on device bond99
[ 1643.098679][T26533] bond99: entered allmulticast mode
[ 1643.117550][T26535] tipc: Resetting bearer <eth:syzkaller0>
[ 1643.147755][T26533] bond99: (slave bridge0): making interface the new active one
[ 1643.150867][T26533] bridge0: entered promiscuous mode
[ 1643.153648][T32166] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1643.157080][T26533] bridge0: entered allmulticast mode
[ 1643.160415][T26533] bond99: (slave bridge0): Enslaving as an active interface with an up link
[ 1643.166098][T26535] tipc: Resetting bearer <eth:syzkaller0>
[ 1643.320824][T26548] bridge0: entered allmulticast mode
[ 1643.529643][T26568] xt_TCPMSS: Only works on TCP SYN packets
[ 1643.791813][T15185] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1643.797197][T26580] bond97: (slave veth37): Releasing backup interface
[ 1643.809148][T26580] bond98: (slave bridge39): Releasing active interface
[ 1643.818893][T26580] bond99: (slave bridge0): Releasing backup interface
[ 1643.821125][T26580] bridge0: left promiscuous mode
[ 1643.823267][T26580] bridge0: left allmulticast mode
[ 1643.880681][T26530] tipc: Resetting bearer <eth:syzkaller0>
[ 1644.048296][T26600] openvswitch: netlink: Tunnel attr 68 out of range max 16
[ 1644.053316][T26600] netlink: 'syz.0.20920': attribute type 30 has an invalid length.
[ 1644.106474][T26602] netlink: 'syz.0.20920': attribute type 30 has an invalid length.
[ 1644.227476][T26607] netlink: 'syz.0.20922': attribute type 3 has an invalid length.
[ 1644.230683][T26607] netlink: 'syz.0.20922': attribute type 3 has an invalid length.
[ 1644.239486][T26607] netlink: 'syz.0.20922': attribute type 1 has an invalid length.
[ 1644.262095][T26607] 8021q: adding VLAN 0 to HW filter on device bond587
[ 1644.522463][T26556] tipc: Resetting bearer <eth:syzkaller0>
[ 1644.822546][T26664] netlink: 'syz.0.20934': attribute type 1 has an invalid length.
[ 1644.837364][T26669] netlink: 'syz.1.20935': attribute type 1 has an invalid length.
[ 1644.867300][T26668] bond633 (unregistering): Released all slaves
[ 1644.885390][T26664] __nla_validate_parse: 24 callbacks suppressed
[ 1644.885405][T26664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20934'.
[ 1644.895922][T26664] 8021q: adding VLAN 0 to HW filter on device bond588
[ 1645.137782][T26664] tipc: Resetting bearer <eth:syzkaller0>
[ 1645.139677][T26664] tipc: Resetting bearer <eth:syzkaller0>
[ 1645.305432][ T6240] rB speed is unknown, defaulting to 1000
[ 1645.335794][ T6240] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1645.381572][ T6240] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1645.418228][T26689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20940'.
[ 1645.425632][T26685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20939'.
[ 1645.516255][T26701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20943'.
[ 1645.542135][T26701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20943'.
[ 1645.569467][T26704] netlink: 224 bytes leftover after parsing attributes in process `syz.1.20944'.
[ 1645.594661][T26706] syzkaller0: entered promiscuous mode
[ 1645.598123][T26706] syzkaller0: entered allmulticast mode
[ 1645.607278][T26708] netlink: 'syz.1.20946': attribute type 1 has an invalid length.
[ 1645.608577][T26706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20945'.
[ 1645.643691][T26708] 8021q: adding VLAN 0 to HW filter on device bond633
[ 1645.646539][T26706] lo: Caught tx_queue_len zero misconfig
[ 1645.683179][T26708] bond633: (slave veth317): Enslaving as an active interface with a down link
[ 1645.699305][T26706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1645.718453][T26706] tipc: Resetting bearer <eth:syzkaller0>
[ 1645.727489][T26705] tipc: Resetting bearer <eth:syzkaller0>
[ 1645.749091][T26705] tipc: Disabling bearer <eth:syzkaller0>
[ 1645.764893][T26721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20949'.
[ 1645.767874][T26721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20949'.
[ 1645.910140][T26734] bond634: option lacp_rate: invalid value (128)
[ 1645.915830][T26734] bond634 (unregistering): Released all slaves
[ 1645.944168][T26742] dvmrp8: left allmulticast mode
[ 1646.063748][T26748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20955'.
[ 1646.292151][T26769] netlink: 'syz.3.20960': attribute type 1 has an invalid length.
[ 1646.336918][T26769] bond101: entered promiscuous mode
[ 1646.339786][T26769] 8021q: adding VLAN 0 to HW filter on device bond101
[ 1646.380206][T26769] macvtap0: entered allmulticast mode
[ 1646.394642][T26769] macvtap1: entered allmulticast mode
[ 1646.414544][T26769] bond101: (slave bridge40): making interface the new active one
[ 1646.417789][T26769] bridge40: entered promiscuous mode
[ 1646.422422][T26769] bond101: (slave bridge40): Enslaving as an active interface with an up link
[ 1646.553290][T26785] pim6reg: entered allmulticast mode
[ 1646.558611][T26785] pim6reg: left allmulticast mode
[ 1646.597644][T26787] 8021q: adding VLAN 0 to HW filter on device bond102
[ 1646.624296][T26787] bond102: (slave veth39): Enslaving as an active interface with a down link
[ 1646.645399][T26787] vlan1: entered allmulticast mode
[ 1646.647724][T26787] veth0_to_bond: entered allmulticast mode
[ 1646.651089][T26787] bond102: (slave vlan1): Error -34 calling dev_set_mtu
[ 1646.709974][T26792] bond103: option updelay: invalid value (18446744073709518847)
[ 1646.713668][T26792] bond103: option updelay: allowed values 0 - 2147483647
[ 1646.717978][T26792] bond103 (unregistering): Released all slaves
[ 1646.858603][T26795] s{z0: rxe_newlink: already configured on xfrm0
[ 1647.118618][T26829] pim6reg: entered allmulticast mode
[ 1647.125887][T26829] pim6reg: left allmulticast mode
[ 1647.310918][T26842] rB speed is unknown, defaulting to 1000
[ 1647.316299][T26842] xfrm0 speed is unknown, defaulting to 1000
[ 1647.338333][T26844] xt_hashlimit: size too large, truncated to 1048576
[ 1647.445958][T26842] syzkaller0 speed is unknown, defaulting to 1000
[ 1647.451065][T26842] xfrm0 speed is unknown, defaulting to 1000
[ 1647.499302][T26851] IPVS: set_ctl: invalid protocol: 8 172.30.1.2:20002
[ 1648.375325][T26864] validate_nla: 6 callbacks suppressed
[ 1648.375334][T26864] netlink: 'syz.1.20986': attribute type 13 has an invalid length.
[ 1648.429868][T26867] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1648.439648][T26867] IPVS: sed: FWM 3 0x00000003 - no destination available
[ 1648.846409][T26887] netlink: 'syz.1.20990': attribute type 10 has an invalid length.
[ 1648.874238][T26889] tipc: Resetting bearer <eth:syzkaller0>
[ 1648.906374][T26889] netlink: 'syz.0.20992': attribute type 13 has an invalid length.
[ 1648.924140][T26889] erspan0: refused to change device tx_queue_len
[ 1648.928917][T26889] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1649.011951][    C0] syzkaller0: tun_net_xmit 120
[ 1649.050592][T26889] bond589: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[ 1649.063162][T26889] bond589 (unregistering): Released all slaves
[ 1649.165818][T26888] tipc: Resetting bearer <eth:syzkaller0>
[ 1649.283790][T26913] macvlan0: entered promiscuous mode
[ 1649.291075][T26913] macvlan0: entered allmulticast mode
[ 1649.304825][T26913] macvlan0 (unregistering): left promiscuous mode
[ 1649.313430][T26913] macvlan0 (unregistering): left allmulticast mode
[ 1649.518163][T26933] netlink: 'syz.1.21001': attribute type 32 has an invalid length.
[ 1649.548997][T26933] bond634: option coupled_control: invalid value (255)
[ 1649.559230][T26933] bond634 (unregistering): Released all slaves
[ 1649.895112][T26957] bond103: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1649.899044][T26957] bond103 (unregistering): Released all slaves
[ 1649.934454][T23184] tipc: Resetting bearer <eth:syzkaller0>
[ 1650.011486][    C1] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1650.019516][T26964] __nla_validate_parse: 32 callbacks suppressed
[ 1650.019525][T26964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21010'.
[ 1650.050572][T26964] netlink: 56 bytes leftover after parsing attributes in process `syz.3.21010'.
[ 1650.199268][T26977] netlink: 92 bytes leftover after parsing attributes in process `syz.1.21014'.
[ 1650.257679][T26984] SET target dimension over the limit!
[ 1650.277496][T26984] bond0: (slave ip6tnl0): Error: Device type is different from other slaves
[ 1650.296837][T26984] ip6erspan1: entered allmulticast mode
[ 1650.629404][T27002] gtp8: entered promiscuous mode
[ 1650.634313][T27002] gtp8: entered allmulticast mode
[ 1650.644869][T27014] netlink: 'syz.1.21025': attribute type 10 has an invalid length.
[ 1650.706550][T27016] mac80211_hwsim hwsim211 syzkaller0: Caught tx_queue_len zero misconfig
[ 1650.776963][T27018] netlink: 'syz.3.21027': attribute type 1 has an invalid length.
[ 1650.835049][T27018] bond103: entered promiscuous mode
[ 1650.844224][T27018] 8021q: adding VLAN 0 to HW filter on device bond103
[ 1650.904882][T27020] 8021q: VLANs not supported on gre0
[ 1650.941136][T27026] bond104: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1650.953358][T27026] bond104 (unregistering): Released all slaves
[ 1650.963233][T27029] netlink: 'syz.1.21030': attribute type 1 has an invalid length.
[ 1650.987957][T27029] 8021q: adding VLAN 0 to HW filter on device bond634
[ 1651.041838][T27029] bond634 (unregistering): Released all slaves
[ 1651.056446][T27035] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[ 1651.059181][T27034] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[ 1651.062485][T27035] tipc: Resetting bearer <eth:syzkaller0>
[ 1651.067898][T27034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21031'.
[ 1651.079970][T27038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21030'.
[ 1651.115731][T27041] netlink: 'syz.3.21033': attribute type 20 has an invalid length.
[ 1651.119009][T27041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21033'.
[ 1651.126527][T27041] netlink: 'syz.3.21033': attribute type 20 has an invalid length.
[ 1651.129907][T27041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21033'.
[ 1651.157376][T27033] tipc: Resetting bearer <eth:syzkaller0>
[ 1651.273813][T27048] sctp: [Deprecated]: syz.0.21035 (pid 27048) Use of int in maxseg socket option.
[ 1651.273813][T27048] Use struct sctp_assoc_value instead
[ 1651.307576][T27057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21036'.
[ 1651.453589][T27067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21040'.
[ 1651.639996][T27078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21043'.
[ 1651.946797][T27094] bridge0: entered allmulticast mode
[ 1652.021997][T26557] tipc: Resetting bearer <eth:syzkaller0>
[ 1652.315748][T27110] veth41: entered allmulticast mode
[ 1652.334671][T27110] bond104: (slave veth41): Enslaving as an active interface with an up link
[ 1652.357347][T27122] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1652.365295][T27122] netlink: 'syz.1.21052': attribute type 1 has an invalid length.
[ 1652.395522][T27122] bond634: entered promiscuous mode
[ 1652.397801][T27122] 8021q: adding VLAN 0 to HW filter on device bond634
[ 1652.413391][T27122] bond634: entered allmulticast mode
[ 1652.432649][T27122] bond634: (slave bridge241): making interface the new active one
[ 1652.436270][T27122] bridge241: entered promiscuous mode
[ 1652.438116][T27122] bridge241: entered allmulticast mode
[ 1652.440872][T27122] bond634: (slave bridge241): Enslaving as an active interface with an up link
[ 1652.471646][T27125] vlan1: entered allmulticast mode
[ 1652.473317][T27125] bond0: entered allmulticast mode
[ 1652.598546][T27145] can: request_module (can-proto-0) failed.
[ 1652.682231][T27158] can: request_module (can-proto-0) failed.
[ 1652.961908][T27183] bond635: option resend_igmp: invalid value (2878)
[ 1652.964131][T27183] bond635: option resend_igmp: allowed values 0 - 255
[ 1652.967162][T27183] bond635 (unregistering): Released all slaves
[ 1653.063939][T27199] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1653.280513][T27218] pim6reg1: entered promiscuous mode
[ 1653.282445][T27218] pim6reg1: entered allmulticast mode
[ 1653.422669][T27227] validate_nla: 4 callbacks suppressed
[ 1653.422680][T27227] netlink: 'syz.3.21076': attribute type 1 has an invalid length.
[ 1653.439674][T27227] 8021q: adding VLAN 0 to HW filter on device bond105
[ 1653.544688][T27235] netlink: 'syz.1.21078': attribute type 10 has an invalid length.
[ 1653.549333][T27235] netlink: 'syz.1.21078': attribute type 2 has an invalid length.
[ 1653.657255][T27252] bond0: entered promiscuous mode
[ 1653.659728][T27252] batadv0: entered promiscuous mode
[ 1653.662694][T27252] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1653.666472][T27252] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[ 1653.671713][T27252] bond0: left promiscuous mode
[ 1653.674113][T27252] batadv0: left promiscuous mode
[ 1653.734817][T27247] bond0: entered promiscuous mode
[ 1653.737394][T27247] batadv0: entered promiscuous mode
[ 1653.739709][T27247] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1653.747815][T27247] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[ 1653.756406][T27247] bond0: left promiscuous mode
[ 1653.759011][T27247] batadv0: left promiscuous mode
[ 1653.837188][T27257] netlink: 'syz.0.21083': attribute type 6 has an invalid length.
[ 1653.839729][T27257] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1653.849793][T27257] vlan36: entered allmulticast mode
[ 1653.854618][T27257] bond0: entered allmulticast mode
[ 1653.971868][T27259] block nbd2: server does not support multiple connections per device.
[ 1653.978764][T27259] block nbd2: shutting down sockets
[ 1654.146912][T27266] openvswitch: netlink: Multiple metadata blocks provided
[ 1654.150502][T27266] netlink: 'syz.0.21086': attribute type 9 has an invalid length.
[ 1654.222935][T27268] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[ 1654.306971][T27273] syzkaller1: entered promiscuous mode
[ 1654.309303][T27273] syzkaller1: entered allmulticast mode
[ 1654.405299][T27275] netlink: 'syz.0.21090': attribute type 1 has an invalid length.
[ 1654.423069][T27275] 8021q: adding VLAN 0 to HW filter on device bond589
[ 1654.485516][T27275] bond589: (slave veth219): Enslaving as an active interface with a down link
[ 1654.517460][T27275] 8021q: adding VLAN 0 to HW filter on device batadv12
[ 1654.521069][T27275] bond589: (slave batadv12): making interface the new active one
[ 1654.524467][T27275] batadv12: entered promiscuous mode
[ 1654.527426][T27275] bond589: (slave batadv12): Enslaving as an active interface with an up link
[ 1654.723472][T27300] netlink: 'syz.1.21098': attribute type 1 has an invalid length.
[ 1654.807432][T27306] syzkaller0: entered promiscuous mode
[ 1654.809259][T27306] syzkaller0: entered allmulticast mode
[ 1655.057624][T27334] macvtap13: entered promiscuous mode
[ 1655.059940][T27334] vlan0: entered promiscuous mode
[ 1655.062333][T27334] bond525: entered promiscuous mode
[ 1655.067602][T27334] vlan0: left promiscuous mode
[ 1655.069205][T27334] bond525: left promiscuous mode
[ 1655.180791][T27339] netlink: 'syz.3.21106': attribute type 30 has an invalid length.
[ 1655.184532][T27339] __nla_validate_parse: 36 callbacks suppressed
[ 1655.184571][T27339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21106'.
[ 1655.208197][T27339] bond106: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[ 1655.218039][T27339] bond106 (unregistering): Released all slaves
[ 1655.580828][T27342] netlink: 36 bytes leftover after parsing attributes in process `syz.1.21107'.
[ 1655.626044][T27344] netlink: 'syz.1.21108': attribute type 1 has an invalid length.
[ 1655.646896][T27344] 8021q: adding VLAN 0 to HW filter on device bond636
[ 1655.730898][T27357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21110'.
[ 1655.743303][T27357] bond0: entered promiscuous mode
[ 1655.745861][T27357] bond0: left promiscuous mode
[ 1655.787524][T27353] 8021q: VLANs not supported on gre0
[ 1655.790763][T27358] 8021q: VLANs not supported on gre0
[ 1655.799695][T27359] bond0: entered promiscuous mode
[ 1655.803378][T27359] bond0: left promiscuous mode
[ 1656.015872][T27363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21111'.
[ 1656.068342][T27372] vlan38: entered promiscuous mode
[ 1656.069989][T27372] bridge0: entered promiscuous mode
[ 1656.120615][T27381] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21113'.
[ 1656.148457][T27375] bond106 (unregistering): Released all slaves
[ 1656.170296][T27376] bond106 (unregistering): Released all slaves
[ 1656.177695][T27385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21115'.
[ 1656.220526][T27385] bond590: option arp_interval: invalid value (18446744073709551615)
[ 1656.223918][T27385] bond590: option arp_interval: allowed values 0 - 2147483647
[ 1656.227518][T27385] bond590 (unregistering): Released all slaves
[ 1656.437884][T27402] netlink: 220 bytes leftover after parsing attributes in process `syz.0.21120'.
[ 1656.509860][T27402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21120'.
[ 1656.552615][T27407] gre0: entered promiscuous mode
[ 1656.554298][T27407] gre0: entered allmulticast mode
[ 1656.556604][T27407] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[ 1656.606295][T27411] netlink: 'syz.1.21123': attribute type 1 has an invalid length.
[ 1656.620192][T27411] 8021q: adding VLAN 0 to HW filter on device bond637
[ 1656.638383][T27415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21124'.
[ 1656.680842][T27412] bond637: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[ 1656.686884][T27412] bond637: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[ 1656.690272][T27416] bond637: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[ 1656.695167][T27416] bond637: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[ 1656.850773][T27433] netlink: 220 bytes leftover after parsing attributes in process `syz.0.21128'.
[ 1657.095858][T27453] 8021q: adding VLAN 0 to HW filter on device bond590
[ 1657.221100][T27460] geneve18: entered promiscuous mode
[ 1657.227147][T27460] geneve18: entered allmulticast mode
[ 1657.314443][T27465] 8021q: adding VLAN 0 to HW filter on device bond106
[ 1657.424478][T27482] pim6reg1: entered promiscuous mode
[ 1657.430731][T27482] pim6reg1: entered allmulticast mode
[ 1657.570598][T27492] xfrm2: entered promiscuous mode
[ 1657.574074][T27492] xfrm2: entered allmulticast mode
[ 1657.595396][T27495] 8021q: adding VLAN 0 to HW filter on device bond591
[ 1657.610768][T27495] bond591: entered promiscuous mode
[ 1657.617106][T27495] bond591: entered allmulticast mode
[ 1657.637477][T27499] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1657.770825][T27516] bond0: entered promiscuous mode
[ 1657.775281][T27516] bond0: left promiscuous mode
[ 1657.812551][T27516] bond0: entered promiscuous mode
[ 1657.819386][T27516] bond0: left promiscuous mode
[ 1658.048876][T27547] bond107: entered promiscuous mode
[ 1658.050930][T27547] 8021q: adding VLAN 0 to HW filter on device bond107
[ 1658.064316][T27547] vlan2: entered allmulticast mode
[ 1658.066062][T27547] bond107: entered allmulticast mode
[ 1658.083948][T27547] bond107: (slave bridge0): making interface the new active one
[ 1658.088373][T27547] bridge0: entered promiscuous mode
[ 1658.094030][T27547] bridge0: entered allmulticast mode
[ 1658.102560][T27547] bond107: (slave bridge0): Enslaving as an active interface with an up link
[ 1658.293325][T27572] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1658.296569][T27572] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1658.489579][T27582] validate_nla: 7 callbacks suppressed
[ 1658.489598][T27582] netlink: 'syz.3.21167': attribute type 1 has an invalid length.
[ 1658.508777][T27582] bond108: entered promiscuous mode
[ 1658.510681][T27582] 8021q: adding VLAN 0 to HW filter on device bond108
[ 1658.521244][T27582] netlink: 'syz.3.21167': attribute type 8 has an invalid length.
[ 1658.577003][T27585] pim6reg: entered allmulticast mode
[ 1658.594526][T27585] pim6reg: left allmulticast mode
[ 1658.624253][T27587] veth319: entered allmulticast mode
[ 1658.786097][T27608] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1658.863834][T27615] bridge242: entered promiscuous mode
[ 1658.978834][T27624] can: request_module (can-proto-0) failed.
[ 1661.704090][T27624] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[ 1661.914061][T27655] netlink: 'syz.3.21183': attribute type 1 has an invalid length.
[ 1661.917539][T27655] netlink: 'syz.3.21183': attribute type 2 has an invalid length.
[ 1661.923596][T27655] __nla_validate_parse: 29 callbacks suppressed
[ 1661.923611][T27655] netlink: 9 bytes leftover after parsing attributes in process `syz.3.21183'.
[ 1661.946796][T27653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21184'.
[ 1661.965390][T27665] netlink: 'syz.1.21185': attribute type 1 has an invalid length.
[ 1662.006780][T27669] tipc: Failed to remove unknown binding: 66,0,0/2271061600:2507234161/2507234162
[ 1662.007845][T27665] bond639: option mode: invalid value (9)
[ 1662.012955][T27669] tipc: Failed to remove unknown binding: 66,0,0/2271061600:2507234161/2507234162
[ 1662.017804][T27669] netlink: 'syz.0.21186': attribute type 1 has an invalid length.
[ 1662.020709][T27665] bond639 (unregistering): Released all slaves
[ 1662.055523][T27669] 8021q: adding VLAN 0 to HW filter on device bond592
[ 1662.138705][T27670] bond592: (slave veth223): Enslaving as an active interface with a down link
[ 1662.155298][T27670] 8021q: adding VLAN 0 to HW filter on device batadv13
[ 1662.160945][T27670] bond592: (slave batadv13): making interface the new active one
[ 1662.170569][T27670] batadv13: entered promiscuous mode
[ 1662.181916][T27670] bond592: (slave batadv13): Enslaving as an active interface with an up link
[ 1662.201524][T27670] bond592 (unregistering): (slave veth223): Releasing active interface
[ 1662.212835][T27670] bond592 (unregistering): (slave batadv13): Releasing active interface
[ 1662.220084][T27670] bond592 (unregistering): Released all slaves
[ 1662.304569][T27689] macvtap9: entered promiscuous mode
[ 1662.306935][T27689] vlan0: entered promiscuous mode
[ 1662.309046][T27689] bond499: entered promiscuous mode
[ 1662.314358][T27689] vlan0: left promiscuous mode
[ 1662.316508][T27689] bond499: left promiscuous mode
[ 1662.670546][T27692] netlink: 'syz.3.21191': attribute type 4 has an invalid length.
[ 1662.679602][T27692] netlink: 'syz.3.21191': attribute type 4 has an invalid length.
[ 1662.885613][T27702] netlink: 'syz.0.21193': attribute type 1 has an invalid length.
[ 1662.922289][T27702] 8021q: adding VLAN 0 to HW filter on device bond592
[ 1662.951506][T27702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21193'.
[ 1662.963810][T27702] bond592: entered promiscuous mode
[ 1662.965927][T27702] bond592: entered allmulticast mode
[ 1662.985833][T27697] rdma_rxe: rxe_newlink: failed to add xfrm0
[ 1663.027363][T27711] netlink: 'syz.0.21195': attribute type 1 has an invalid length.
[ 1663.060271][T27714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21196'.
[ 1663.061084][T27711] macvtap13: entered allmulticast mode
[ 1663.077478][T27711] macvtap14: entered allmulticast mode
[ 1663.085183][T27716] mac80211_hwsim hwsim211 syzkaller0: left promiscuous mode
[ 1663.087877][T27716] mac80211_hwsim hwsim211 syzkaller0: left allmulticast mode
[ 1663.146817][T27711] bond593: (slave bridge215): making interface the new active one
[ 1663.150275][T27711] bond593: (slave bridge215): Enslaving as an active interface with an up link
[ 1663.216516][T27731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21199'.
[ 1663.228204][T27731] xt_TCPMSS: Only works on TCP SYN packets
[ 1663.296477][T27734] bond594: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[ 1663.300977][T27734] bond594 (unregistering): Released all slaves
[ 1663.807791][T27757] netlink: 'syz.3.21205': attribute type 1 has an invalid length.
[ 1663.837542][T27757] 8021q: adding VLAN 0 to HW filter on device bond109
[ 1663.850187][T27757] 8021q: VLANs not supported on gre0
[ 1664.232475][T27776] Cannot find add_set index 2 as target
[ 1664.590144][T27790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21213'.
[ 1664.594528][T27790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21213'.
[ 1664.849693][T27792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21214'.
[ 1665.113217][T27804] netlink: 'syz.3.21219': attribute type 1 has an invalid length.
[ 1665.172559][T27804] bond110: (slave bridge75): making interface the new active one
[ 1665.179605][T27804] bond110: (slave bridge75): Enslaving as an active interface with an up link
[ 1665.186178][T27809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21220'.
[ 1665.234044][T27809] xt_NFQUEUE: number of total queues is 0
[ 1665.357430][T27815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21222'.
[ 1665.394229][T27819] netlink: 'syz.1.21223': attribute type 1 has an invalid length.
[ 1665.591879][ T6774] batadv12: left promiscuous mode
[ 1665.627229][T27839] tipc: Resetting bearer <eth:syzkaller0>
[ 1665.642792][T27839] bond589: (slave veth219): Releasing active interface
[ 1665.646156][T27839] bond589: (slave veth219): the permanent HWaddr of slave - 82:6b:28:76:88:fb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1665.655837][T27839] batadv12: entered promiscuous mode
[ 1665.664973][ T1289] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1665.668976][T27839] bond589: (slave batadv12): Releasing active interface
[ 1665.671803][T27839] batadv12: left promiscuous mode
[ 1665.679208][T27839] bond593: (slave bridge215): Releasing active interface
[ 1665.698846][T27840] xfrm0: entered promiscuous mode
[ 1665.712272][T27840] xfrm0: entered allmulticast mode
[ 1665.715837][T27840] team0: Port device xfrm0 added
[ 1665.761756][ T1289] ip6_tunnel: ip6tnl29 xmit: Local address not yet configured!
[ 1665.777036][T27845] macvtap2: entered promiscuous mode
[ 1665.782544][T27845] vlan0: entered promiscuous mode
[ 1665.786496][T27845] bond91: entered promiscuous mode
[ 1665.795768][T27845] vlan0: left promiscuous mode
[ 1665.799228][T27845] bond91: left promiscuous mode
[ 1665.808620][T27829] tipc: Failed to remove unknown binding: 66,0,0/3293855260:1983911131/1983911132
[ 1665.824420][T27829] tipc: Failed to remove unknown binding: 66,0,0/3293855260:1983911131/1983911132
[ 1665.831944][T27839] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[ 1666.093506][T27858] netlink: 'syz.1.21231': attribute type 1 has an invalid length.
[ 1666.135731][T27858] 8021q: adding VLAN 0 to HW filter on device bond639
[ 1666.397715][T27877] netlink: 'syz.3.21235': attribute type 1 has an invalid length.
[ 1666.511862][T27877] 8021q: adding VLAN 0 to HW filter on device bond111
[ 1666.563225][T27888] netlink: 'syz.1.21236': attribute type 1 has an invalid length.
[ 1666.568298][T27888] workqueue: Failed to create a rescuer kthread for wq "bond640": -EINTR
[ 1666.677684][T27901] netlink: 'syz.1.21240': attribute type 8 has an invalid length.
[ 1666.755651][T27906] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1666.894482][T27918] netlink: 'syz.3.21247': attribute type 1 has an invalid length.
[ 1666.923793][T27918] 8021q: adding VLAN 0 to HW filter on device bond112
[ 1666.945109][T27918] veth43: entered allmulticast mode
[ 1666.954395][T27918] bond112: (slave veth43): Enslaving as an active interface with a down link
[ 1666.967833][T27918] bond112: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 1666.983819][T27918] __nla_validate_parse: 10 callbacks suppressed
[ 1666.983833][T27918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21247'.
[ 1667.073269][T27928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21250'.
[ 1667.076173][T27928] bond0: Caught tx_queue_len zero misconfig
[ 1667.079643][T27930] netlink: 52 bytes leftover after parsing attributes in process `syz.3.21251'.
[ 1667.120023][T27935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21252'.
[ 1667.128517][T27936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21252'.
[ 1667.141455][T27936] netlink: 'syz.3.21252': attribute type 10 has an invalid length.
[ 1667.144373][T27936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21252'.
[ 1667.150945][T27936] geneve0: entered promiscuous mode
[ 1667.152972][T27936] geneve0: entered allmulticast mode
[ 1667.165776][T27939] bond626: (slave ip6gre17): Releasing backup interface
[ 1667.167840][T27939] ip6gre17: left promiscuous mode
[ 1667.174977][T27939] bond628: (slave veth315): Releasing active interface
[ 1667.185860][T27939] bond633: (slave veth317): Releasing active interface
[ 1667.193595][T27939] bond634: (slave bridge241): Releasing backup interface
[ 1667.195809][T27939] bridge241: left promiscuous mode
[ 1667.197524][T27939] bridge241: left allmulticast mode
[ 1667.215297][ T5722] xfrm0 speed is unknown, defaulting to 1000
[ 1667.219237][ T5722] s{z0: Port: 1 Link DOWN
[ 1667.220667][ T5722] xfrm0 speed is unknown, defaulting to 1000
[ 1667.236122][T27943] netlink: 'syz.3.21254': attribute type 5 has an invalid length.
[ 1667.284627][T27948] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[ 1667.602578][T27956] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1667.605698][T27956] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1667.890312][T27957] tipc: Resetting bearer <eth:syzkaller0>
[ 1668.302489][T27967] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1668.305611][T27967] syzkaller0: entered promiscuous mode
[ 1668.307780][T27967] syzkaller0: entered allmulticast mode
[ 1668.313209][T27967] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[ 1668.316633][T27967] netlink: 44 bytes leftover after parsing attributes in process `syz.3.21260'.
[ 1668.395750][T27966] tipc: Resetting bearer <eth:syzkaller0>
[ 1668.450676][T27966] tipc: Disabling bearer <eth:syzkaller0>
[ 1668.970340][T27996] bond114 (unregistering): Released all slaves
[ 1669.072489][T28004] validate_nla: 2 callbacks suppressed
[ 1669.072503][T28004] netlink: 'syz.3.21268': attribute type 1 has an invalid length.
[ 1669.074738][T28005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21268'.
[ 1669.079087][T28004] workqueue: Failed to create a rescuer kthread for wq "bond114": -EINTR
[ 1669.379908][T28023] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1669.419982][T28023] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1669.475896][T14423] bond112: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[ 1669.482319][T14423] bond112: (slave veth0_to_bond): making interface the new active one
[ 1669.489324][T14423] veth0_to_bond: entered promiscuous mode
[ 1669.509567][T14423] bond112: active interface up!
[ 1669.643805][T28031] block nbd2: server does not support multiple connections per device.
[ 1669.651617][T28031] block nbd2: shutting down sockets
[ 1669.652501][T28034] netlink: 'syz.3.21276': attribute type 4 has an invalid length.
[ 1669.669932][T28034] netlink: 'syz.3.21276': attribute type 4 has an invalid length.
[ 1669.708278][T28037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21277'.
[ 1669.729548][T28037] bond114: invalid ARP target 0.0.0.0 specified for addition
[ 1669.732630][T28037] bond114: option arp_ip_target: invalid value (0)
[ 1669.744857][T28037] bond114 (unregistering): Released all slaves
[ 1669.752919][T28040] netlink: 'syz.1.21278': attribute type 1 has an invalid length.
[ 1669.760473][T28042] netlink: 88 bytes leftover after parsing attributes in process `syz.1.21278'.
[ 1669.921123][T28060] xt_hashlimit: size too large, truncated to 1048576
[ 1669.984802][T28064] bond594: option ad_user_port_key: invalid value (65535)
[ 1669.987226][T28064] bond594: option ad_user_port_key: allowed values 0 - 1023
[ 1669.995532][T28064] bond594 (unregistering): Released all slaves
[ 1670.011103][T28066] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1670.210117][T28083] bond640: entered promiscuous mode
[ 1670.212105][T28083] bond640: entered allmulticast mode
[ 1670.214171][T28083] 8021q: adding VLAN 0 to HW filter on device bond640
[ 1670.456309][T28088] xfrm0: Caught tx_queue_len zero misconfig
[ 1670.584847][T28099] rB speed is unknown, defaulting to 1000
[ 1670.587808][T28099] xfrm0 speed is unknown, defaulting to 1000
[ 1670.682885][T28099] syzkaller0 speed is unknown, defaulting to 1000
[ 1670.686051][T28099] xfrm0 speed is unknown, defaulting to 1000
[ 1670.732051][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1670.735342][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1670.845847][T28111] netlink: 'syz.0.21291': attribute type 1 has an invalid length.
[ 1671.066432][T28115] team0: renamed from lo (while UP)
[ 1671.482238][T28145] netlink: 'syz.3.21298': attribute type 1 has an invalid length.
[ 1671.519806][T28145] bond114: entered promiscuous mode
[ 1671.524019][T28145] 8021q: adding VLAN 0 to HW filter on device bond114
[ 1671.771565][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1671.774663][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1671.799617][T28171] netlink: 'syz.0.21303': attribute type 2 has an invalid length.
[ 1671.806527][T28176] netlink: 'syz.3.21304': attribute type 2 has an invalid length.
[ 1671.866435][T28173] netlink: 'syz.0.21303': attribute type 23 has an invalid length.
[ 1672.228930][T28210] __nla_validate_parse: 13 callbacks suppressed
[ 1672.228940][T28210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21311'.
[ 1672.236822][T28210] netlink: 68 bytes leftover after parsing attributes in process `syz.1.21311'.
[ 1672.240129][T28210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21311'.
[ 1672.244832][T28210] netlink: 68 bytes leftover after parsing attributes in process `syz.1.21311'.
[ 1672.399663][T28224] netlink: 'syz.3.21315': attribute type 10 has an invalid length.
[ 1672.476117][T28222] 8021q: VLANs not supported on gre0
[ 1672.528209][T28234] netlink: 152 bytes leftover after parsing attributes in process `syz.3.21318'.
[ 1672.558480][T28238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21319'.
[ 1672.562407][T28234] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1672.650010][T28235] bond641: entered promiscuous mode
[ 1672.657652][T28235] 8021q: adding VLAN 0 to HW filter on device bond641
[ 1672.684140][T28246] pim6reg: entered allmulticast mode
[ 1672.686480][T28246] pim6reg: left allmulticast mode
[ 1672.756175][T28250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21322'.
[ 1672.772702][T28253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21323'.
[ 1672.797862][T28250] 8021q: adding VLAN 0 to HW filter on device bond642
[ 1672.811694][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1672.814038][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1673.117374][T28250] tipc: Resetting bearer <eth:syzkaller0>
[ 1673.130097][T28254] bond0: entered promiscuous mode
[ 1673.176992][T28265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21326'.
[ 1673.202329][T28267] 8021q: adding VLAN 0 to HW filter on device bond594
[ 1673.209049][T28267] netlink: 112 bytes leftover after parsing attributes in process `syz.0.21327'.
[ 1673.290259][T28274] bond595 (unregistering): Released all slaves
[ 1673.525857][T28299] tipc: Resetting bearer <eth:syzkaller0>
[ 1673.625997][T28298] tipc: Resetting bearer <eth:syzkaller0>
[ 1673.784885][T28312] mac80211_hwsim hwsim211 syzkaller0: entered promiscuous mode
[ 1673.787742][T28312] mac80211_hwsim hwsim211 syzkaller0: entered allmulticast mode
[ 1673.852104][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1673.855364][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1673.919822][T28326] bond643 (unregistering): Released all slaves
[ 1674.058328][T28330] IPVS: set_ctl: invalid protocol: 12 172.30.0.2:20002
[ 1674.336036][ T1381] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1674.369513][T28348] validate_nla: 9 callbacks suppressed
[ 1674.369523][T28348] netlink: 'syz.1.21345': attribute type 1 has an invalid length.
[ 1674.525963][T28370] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1674.541875][T28370] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1674.559707][T28370] netlink: 'syz.1.21351': attribute type 1 has an invalid length.
[ 1674.644638][T28373] syzkaller1: entered promiscuous mode
[ 1674.649463][T28373] syzkaller1: entered allmulticast mode
[ 1674.663462][T26558] tipc: Resetting bearer <eth:syzkaller0>
[ 1674.745728][T28394] xt_TCPMSS: Only works on TCP SYN packets
[ 1674.761745][T28395] bond0: (slave ip6tnl0): Error: Device type is different from other slaves
[ 1674.820349][T28403] netlink: 'syz.0.21357': attribute type 1 has an invalid length.
[ 1674.869964][T28402] bond595: (slave bridge0): making interface the new active one
[ 1674.882089][T28402] bond595: (slave bridge0): Enslaving as an active interface with an up link
[ 1674.898509][T28403] bond595: (slave bridge216): Enslaving as an active interface with a down link
[ 1674.902624][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1674.902953][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1675.448454][T28433] netlink: 'syz.1.21365': attribute type 1 has an invalid length.
[ 1675.488020][T28433] 8021q: adding VLAN 0 to HW filter on device bond643
[ 1675.495732][T28433] x_tables: duplicate underflow at hook 3
[ 1675.610925][T28445] netlink: 'syz.1.21368': attribute type 27 has an invalid length.
[ 1675.611908][   T34] INFO: task kworker/1:1H:73 blocked for more than 143 seconds.
[ 1675.614990][T28445] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1675.618557][   T34]       Not tainted syzkaller #0
[ 1675.625350][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1675.629421][   T34] task:kworker/1:1H    state:D stack:25960 pid:73    tgid:73    ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1675.635074][   T34] Workqueue: kblockd blk_mq_requeue_work
[ 1675.637715][   T34] Call Trace:
[ 1675.639280][   T34]  <TASK>
[ 1675.640662][   T34]  __schedule+0x17d9/0x56c0
[ 1675.643540][   T34]  ? __lock_acquire+0x683/0x2cf0
[ 1675.645770][   T34]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1675.648295][   T34]  ? __pfx___schedule+0x10/0x10
[ 1675.650609][   T34]  ? schedule+0x90/0x2b0
[ 1675.656100][   T34]  schedule+0x164/0x2b0
[ 1675.660659][   T34]  schedule_timeout+0x152/0x2c0
[ 1675.663476][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[ 1675.665740][   T34]  ? __pfx_process_timeout+0x10/0x10
[ 1675.667944][   T34]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1675.670314][   T34]  ? prepare_to_wait_event+0x436/0x480
[ 1675.672841][   T34]  nbd_queue_rq+0x889/0x1150
[ 1675.674761][   T34]  ? __pfx_nbd_queue_rq+0x10/0x10
[ 1675.676800][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1675.679321][   T34]  blk_mq_dispatch_rq_list+0x499/0x1990
[ 1675.681788][   T34]  ? sbitmap_get+0x229/0x390
[ 1675.683823][   T34]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[ 1675.686328][   T34]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[ 1675.688749][   T34]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1675.692854][   T34]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[ 1675.695782][   T34]  ? blk_mq_hw_queue_need_run+0x134/0x630
[ 1675.698263][   T34]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[ 1675.700464][   T34]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[ 1675.704301][   T34]  blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1675.706885][   T34]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[ 1675.709112][   T34]  blk_mq_run_hw_queue+0x348/0x4f0
[ 1675.711589][   T34]  blk_mq_run_hw_queues+0x268/0x3f0
[ 1675.713852][   T34]  blk_mq_requeue_work+0x703/0x760
[ 1675.716001][   T34]  ? __pfx_blk_mq_requeue_work+0x10/0x10
[ 1675.718386][   T34]  ? rcu_is_watching+0x15/0xb0
[ 1675.720431][   T34]  ? process_scheduled_works+0xa20/0x14e0
[ 1675.723665][   T34]  process_scheduled_works+0xa8e/0x14e0
[ 1675.726093][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1675.728684][   T34]  ? assign_work+0x3cf/0x5d0
[ 1675.730678][   T34]  worker_thread+0xa47/0xfb0
[ 1675.733123][   T34]  ? __kthread_parkme+0x71/0x1f0
[ 1675.735577][   T34]  kthread+0x388/0x470
[ 1675.737310][   T34]  ? __pfx_worker_thread+0x10/0x10
[ 1675.739525][   T34]  ? __pfx_kthread+0x10/0x10
[ 1675.742224][   T34]  ret_from_fork+0x514/0xb70
[ 1675.744217][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1675.746256][   T34]  ? __switch_to+0xc89/0x1420
[ 1675.748210][   T34]  ? __pfx_kthread+0x10/0x10
[ 1675.750271][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1675.752929][   T34]  </TASK>
[ 1675.757010][   T34] 
[ 1675.757010][   T34] Showing all locks held in the system:
[ 1675.763903][   T34] 1 lock held by khungtaskd/34:
[ 1675.765992][   T34]  #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1675.770151][   T34] 4 locks held by kworker/1:1H/73:
[ 1675.774981][   T34]  #0: ffff888161e9dd40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1675.779467][   T34]  #1: ffffc900017bfc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1675.786279][   T34]  #2: ffff88816c274c98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0
[ 1675.790205][   T34]  #3: ffff88802ea10778 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150
[ 1675.794078][   T34] 2 locks held by getty/5430:
[ 1675.796112][   T34]  #0: ffff8881119170a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1675.800124][   T34]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[ 1675.804761][   T34] 3 locks held by kworker/0:10/6567:
[ 1675.807046][   T34]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1675.812739][   T34]  #1: ffffc90006857c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1675.817849][   T34]  #2: ffff88803c17f250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0
[ 1675.822850][   T34] 1 lock held by udevd/10776:
[ 1675.824881][   T34]  #0: ffff88816bab8350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[ 1675.828662][   T34] 3 locks held by kworker/u8:6/14423:
[ 1675.830689][   T34]  #0: ffff888173930140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1675.836941][   T34]  #1: ffffc9002d4c7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1675.842880][   T34]  #2: ffffffff8fdecec0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0
[ 1675.846542][   T34] 3 locks held by kworker/u9:14/23171:
[ 1675.848674][   T34]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1675.854345][   T34]  #1: ffffc9002e1bfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1675.858845][   T34]  #2: ffffffff8fdecec0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1675.863116][   T34] 1 lock held by syz.3.21352/28372:
[ 1675.865365][   T34]  #0: ffffffff8e95fdf8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[ 1675.869226][   T34] 2 locks held by syz.1.21368/28444:
[ 1675.871646][   T34]  #0: ffffffff8fdecec0 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0xa6/0x140
[ 1675.875108][   T34]  #1: ffffffff8e95ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[ 1675.879604][   T34] 
[ 1675.880747][   T34] =============================================
[ 1675.880747][   T34] 
[ 1675.884434][   T34] NMI backtrace for cpu 1
[ 1675.884446][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1675.884461][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1675.884470][   T34] Call Trace:
[ 1675.884476][   T34]  <TASK>
[ 1675.884482][   T34]  dump_stack_lvl+0xe8/0x150
[ 1675.884502][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[ 1675.884522][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1675.884539][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[ 1675.884560][   T34]  sys_info+0x135/0x170
[ 1675.884576][   T34]  watchdog+0xfd7/0x1030
[ 1675.884601][   T34]  ? watchdog+0x1c7/0x1030
[ 1675.884622][   T34]  kthread+0x388/0x470
[ 1675.884638][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1675.884654][   T34]  ? __pfx_kthread+0x10/0x10
[ 1675.884669][   T34]  ret_from_fork+0x514/0xb70
[ 1675.884684][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1675.884700][   T34]  ? __switch_to+0xc89/0x1420
[ 1675.884720][   T34]  ? __pfx_kthread+0x10/0x10
[ 1675.884735][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1675.884761][   T34]  </TASK>
[ 1675.884766][   T34] Sending NMI from CPU 1 to CPUs 0:
[ 1675.930403][    C0] NMI backtrace for cpu 0
[ 1675.930419][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1675.930432][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1675.930439][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1675.930460][    C0] Code: 7c 75 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 89 14 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1675.930470][    C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000206
[ 1675.930482][    C0] RAX: 0000000000d6e0d7 RBX: ffffffff819aa370 RCX: 0000000080000001
[ 1675.930491][    C0] RDX: 0000000000000001 RSI: ffffffff8dfe37fc RDI: ffffffff8c2ab780
[ 1675.930500][    C0] RBP: ffffffff8e607eb8 R08: ffff8881210338db R09: 1ffff1102420671b
[ 1675.930507][    C0] R10: dffffc0000000000 R11: ffffed102420671c R12: 0000000000000000
[ 1675.930515][    C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000
[ 1675.930525][    C0] FS:  0000000000000000(0000) GS:ffff88818dc25000(0000) knlGS:0000000000000000
[ 1675.930534][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1675.930541][    C0] CR2: 00007fb130bea2f8 CR3: 00000001753d0000 CR4: 00000000000006f0
[ 1675.930629][    C0] Call Trace:
[ 1675.930636][    C0]  <TASK>
[ 1675.930641][    C0]  default_idle+0x9/0x20
[ 1675.930657][    C0]  default_idle_call+0x72/0xb0
[ 1675.930672][    C0]  do_idle+0x2e0/0x540
[ 1675.930686][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1675.930696][    C0]  ? do_idle+0x11/0x540
[ 1675.930709][    C0]  cpu_startup_entry+0x43/0x60
[ 1675.930719][    C0]  rest_init+0x2de/0x300
[ 1675.930735][    C0]  start_kernel+0x392/0x3e0
[ 1675.930752][    C0]  x86_64_start_reservations+0x24/0x30
[ 1675.930769][    C0]  x86_64_start_kernel+0x137/0x1b0
[ 1675.930791][    C0]  common_startup_64+0x13e/0x157
[ 1675.930811][    C0]  </TASK>
[ 1675.933792][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[ 1675.933806][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1675.933821][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1675.933829][   T34] Call Trace:
[ 1675.933837][   T34]  <TASK>
[ 1675.933843][   T34]  vpanic+0x56c/0xa60
[ 1675.933864][   T34]  ? __pfx___schedule+0x10/0x10
[ 1675.933881][   T34]  ? __pfx_vpanic+0x10/0x10
[ 1675.933902][   T34]  panic+0xc5/0xd0
[ 1675.933917][   T34]  ? __pfx_panic+0x10/0x10
[ 1675.933931][   T34]  ? preempt_schedule_common+0x82/0xd0
[ 1675.933945][   T34]  ? preempt_schedule_thunk+0x16/0x40
[ 1675.933965][   T34]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[ 1675.933987][   T34]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[ 1675.934010][   T34]  watchdog+0x1030/0x1030
[ 1675.934034][   T34]  ? watchdog+0x1c7/0x1030
[ 1675.934057][   T34]  kthread+0x388/0x470
[ 1675.934073][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1675.934089][   T34]  ? __pfx_kthread+0x10/0x10
[ 1675.934105][   T34]  ret_from_fork+0x514/0xb70
[ 1675.934121][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1675.934135][   T34]  ? __switch_to+0xc89/0x1420
[ 1675.934156][   T34]  ? __pfx_kthread+0x10/0x10
[ 1675.934197][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1675.934225][   T34]  </TASK>
[ 1676.051151][   T34] Kernel Offset: disabled
[ 1676.052748][   T34] Rebooting in 86400 seconds..
