last executing test programs: 2.852654257s ago: executing program 3 (id=1952): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f80)=@ethtool_per_queue_op={0x4b, 0xe, [0x9d6, 0x3, 0x0, 0x401, 0x80000000, 0x2, 0x8, 0x18c9, 0x3, 0x7, 0x0, 0x2, 0x742, 0x71b3, 0x4, 0x1ff, 0x2, 0x8, 0xfffffff9, 0x50, 0xffffffff, 0x1, 0x367, 0x4, 0x2, 0x7, 0x7fff, 0xa2c, 0x7aa, 0x40, 0x6, 0x4, 0xfffffffd, 0x5, 0x1000, 0x6, 0x7fff, 0x2, 0x2, 0x400, 0x3, 0x6, 0x7f, 0x1000, 0x80, 0x2, 0x6, 0x400, 0x6d, 0xff, 0x9, 0x0, 0x2, 0x4, 0x4, 0xffffffff, 0xac29, 0x8, 0x2, 0x1de4, 0x80000000, 0x81, 0xc4, 0xa78, 0xee, 0x7, 0x5b1, 0xe, 0x1ff, 0x7, 0x6, 0x84d, 0x101, 0x100, 0xe, 0x9, 0x1, 0xfffffff8, 0x9b7, 0x50, 0x9bd6, 0x9, 0x3, 0x34, 0x1, 0x7, 0x80000000, 0x7, 0x963, 0xeb0, 0x5, 0x0, 0x1, 0x3, 0xf, 0x0, 0xa, 0xd1, 0x2, 0xa7, 0x4, 0x2, 0x3, 0x8, 0xecf, 0x5, 0x10, 0x20000, 0x9, 0xfffffffc, 0x3ff, 0x4, 0x8, 0x618, 0x3ff, 0xd, 0x80000001, 0x8, 0x6, 0x9, 0x4, 0x8, 0x4, 0x8001, 0x5, 0xe511, 0x7, 0x6]}}) 2.807669422s ago: executing program 3 (id=1953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e5eceeef", 0x4}], 0x1}}], 0x2, 0x4040040) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000000)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140500002b00010000000400ffdbdf25030100800c0000000000000000000000140001000100000000000000000000000000000150bb2a98570c67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec1dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99bfe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820000000000"], 0x114}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, 0xa31f, 0x2}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x4, 0xfffe}, &(0x7f0000000340)=0x8) r5 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x22020400) r6 = socket(0x1d, 0x2, 0x6) bind$can_raw(r6, &(0x7f00000000c0)={0x1d, 0x0, 0x900}, 0x10) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x14}, 0x800) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff000000000000001400000000fc6276d7543083d273dcc57d5a37b980460bb3dc63ebc6e478e797f93c102e9875a718b671516146b9bd61d0fc08607efab4ae1a08393308f62555bd0b286c3584b56b", @ANYRES32=0x0, @ANYBLOB="0800000000000000280012800b0001006272696467650000180002800a001400aaaaaaaaaabb00000800090000000000"], 0x48}}, 0x0) r9 = socket$inet(0x2, 0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r9, 0x89f4, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={@remote, 0x1, 0x0, 0x60, 0x0, [{@private}, {@local}, {@dev}, {@remote}, {@empty}, {@remote}]}}) 2.45970159s ago: executing program 3 (id=1960): r0 = socket$inet6(0xa, 0x80002, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$rose(r3, 0x104, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x24, &(0x7f0000000440), &(0x7f0000000100)=0x8) sendfile(r3, r3, 0x0, 0x7ff) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000eb810000000000ffffffffff000000000000", @ANYRES32=r7], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r8, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r9, &(0x7f0000000280)}, 0x20) listen(r5, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0xfffffe3e, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0xc8}}, 0x4000041) r11 = accept$netrom(r5, 0x0, 0x0) r12 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r12, &(0x7f0000000140)={0x1d, r13}, 0x10) sendmsg$can_bcm(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500000003"], 0x48}}, 0x0) connect$inet6(r0, 0x0, 0x0) r14 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYRES8=r11, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x13, r14, 0x0) 2.065640645s ago: executing program 1 (id=1965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000200)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000200)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) (async) 1.898810791s ago: executing program 1 (id=1970): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90) recvmmsg(r3, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ff070100"/32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.725025982s ago: executing program 4 (id=1974): r0 = socket$inet6(0xa, 0x802, 0x200000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000070000000800fdff0609000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000070000000000008ad3f0fe8ad737ec88f2dc486650afb83c0cc3cc1e0a67a55ddf2f3b216056163333008e0010f4d2d25c3f61d9f85444a9fb7b6de924ddc020bca17225f9a3eb9b445b17ecb50efc183ac13a76bcfb9abe50b8421b6c2c2d8b8db9b93aadecd0a35b058e5f1a38da90e928c08db9699a91b7dba78c6f5a1dc9fec30388b8fce28e73e67ffd0d91f40bf90159eaffff104d9ebacc0c67ec22e1ab5e4abe47f73fc4b66230649d55e5e14dfd4a"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r2, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0xffffffffffffff03) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="8672455174d0643ae174669d5a888b403fb79e2fe54469be5cac07e04aef86f5069ca9205cfc1ff8ba97bf60c412b16ae3b28f6fba769ec6add93eadb2da079d58d77e6056ca5b6ee4b937264d3a4aa23df57ea979202fafa7a146adb9df46911a644f14aabc81", 0x67}, {&(0x7f0000001000)="5f656b8d6134cd58f99de6b004ee09a96bfc9a6b351ec6f98762de17306d9183849ffaadb9979b7fc00f12077636b090b0a18eabfc4274e7d2640a81ec4099277232e7ac9f244ca95f660edbf25812489f0cd8ecb03931b19008c9d0b33835e3fd69ee336a2e195b0365c4c42f9e0571fbb460294f2322824366fd42c014cd2b00b04d0be83ebc22b26e7e246d02928cde89c64e6a8bae83b64e5d6c7bb976d9a6272b34dec670663751b3692f6ce183e0f8ba7ae4bda052df1fc2d49597f5b1fc67cae840aea901eb22beb7061c00c05d7187da158dfebc55f802add6f6958324bc397efa23f45afafd06f071c547df01899a66c14cb16d7692eb6823bb7369c3b6a727b01bb428df3fe7cfc79b9533eb4d7608183425cbe3d0d5d338f7cb5110bcac53a842e1921791ca84750f9ccca5e4f610e0ed982980d104e5dad37611e1912067a350871de24dd2f3a5ca6055c8e457e14f8abf91057653c3eaef704c0ada8394e74bf7816ad22436fde0c3c29db6a39c1f3ad2746192c5defc0a2eef9abc411a93eab5da5eebf36c9dddddcbef04390507cacd3009326c8bb5610e8b8e387302757ad84d3d825bc5599d9b2237f1e5722b1e8b27c867b650bf144e2e802ad52c6b217eeb6dfd793e06beaa4773bb47aa4512a952a81416d0eb7aa13221c32230b09d55ff306cd5aafe80047a535f3522e6809639ab6fce6b2b533aad7c5c1225a600034f9d5cd7552680677a4a0ea52e1db7b85d493b3c07c881325593b05f2772fce7b43b9d477399e6d109ffc296b3f0011960f36e5c25f359c9d4f2f21f41b31de316d3f9f133948174bcbf9a7167f9bdb4d7318c0a53b9ade3c0bb3472b8161de2b92feb2757b2f399db48a546b9b3ad447fe348ea54a38e64486298635d34bbba938473993c15ac9adf9029673e5d07d1873f686cdfac360450fdd6b0d82953742c96170d5ee4c7aaae986624243ca62c695507530efd8e80988b26244fa145798e8c8d2be5eec58649e3e05424508da4c1526a3f3952d4eaaaf8c0c62fe802355cc1273884d37e067fbce7128cbb5f200c4d8ed851647559aba27e9414e957e6cd8b5ed8fed70cd61aa637d7f6e34653e36f5f306cec1b3264e214f6e5ddc7b9a37f07f34223c94290c61a8a75b570b93cad3d4a1d6a2e6af5c6384190d7e55c145ef95fceea3a39cb5d8d59e08d648b59a9bf6115ef08eb387267c22283ade69417195cd1ef4ee0ce0d313c8bed3be8c68904be604f7d44a998f5f8eefb95405c11aecd5f64405b092d59a8444acce53a648859730f8bbe7b71b1900a8fe524b4d5115c12aa0d8ccd3555b80063e9e579a3e9dbf84e5413b4881bfa0b6f3428963c793e51efc1511d4f2fc3448a73b9da21526b28ef1db4210525fbe80f056802ad45d7dc17309fd9ae31c5cdfab6323e8f2db3eee5e20994b730ea880794ac5e8ea95332ee0097919d87f1c032747eaf3542af9812253b57457b6342186132c1e0e89d372b9763a52029bf3bf8871962b796d8dfbcc4fc6354e84b3b120b6fe9a983e8499d6fa9be55fc5b28116d1f08832d658a2225e8b62770b300e191b329b580148795568235461895dfda3b0b2fd05320245321a3747e6d59ae88d4f02363d07757472087446c2fa9e9f015f633cb6ed3c1b92e144efc4d9a5b622de3b83455bcedf584487d15e3198ac744bc5640df6515bf8dcd4701a80ece1d46a21464ca418eebe7305c59ced4aeb9b4b30cdf26cee1e05309b4b5b38cf70045073e4eba8e80d48afc454a6c6358f0e08ca76b1a2583131b809db05f0aef216ee3c9559d8c97b59090a2fadb54262f33fd0266e2b751c06f9923b8c1d79305ac030b3c61289d5d996e1f3799a0b3d0bd23842b1f21f00b15415b65e659a83e2de3db89f01aac5dc343b84b6775069a3317bd7782d44cbef71a4b3dea10447ff83aab675c2b3c97f93f8eedfe67974635752288e6ed01a2c7bb654a3dfd73a693de8b37c39543ee96b2698f09e20e1f41119d61aeeee286b1164e7caebf80ce4c29542d2a3cbefcf2f972dc562d28c0ed878c78956aabf5e0bcbbe4d8059c38aed9d36f9db15464a05bdb783e34fb09060c2c18232b900c3091c95152bdd043fa10c5baad8633213b5d360d5ef7d7c4e5806bc6a72e9d0c92066ef6db77f33d149461b9c82ccf91a0e9b5f368606dd807e886b33195daecc84418bdf5e7c35a57ca397ca433a712118de8527b066206bf86245da88918bb11ba74443382afb938c0d0ca03fc3820abeef08c2ab4545e706b73083dde008e6757fbe835ef7c9a4792a666cbb4c24c5689b7d32eaa43b9fda770ed16f43e61d350840a50417ff879f6550b261d1898056cdb8e0979f6fac0f6962110a25207eafa0652da45f5198e2bba2049f88b51306f6b4ad8d6d0edee54ad8292b55ee3e4a920e290560fba74173c0d8c1d0002781603d37ab7e0d743dea92690c204760814da48d1ecbcd0f92a70fd907b72b19474fef8fa3bade5392edc348d6e4061358a5a83a7ba5a05a89eb4c08395232155101c510f653f38f96bd5411eddec5c5ee8ea5d01367db37b1b4d51f4bf81c21d259ee792a3a1780e63a9604a8613fa1bc5439cde7306a70efed5dfeb295ea2b75605e0a88b729046e02bebf0861054a0489f4f9619d6c3413ac01095d494901e0952d63d5c1fb09849f9881e1c7432e5794179abc2b0efbc08e4d115b451d8d0f2881eaa04113d1cfe22752c16282eda61d2c2e7b1b723de9b80863cbc00154ba3456ec7e0e029304ca23df496b7836b7bad565b1c56c92899bb09aecf4d582273961f49279d452f97a022fa8ebfc7bddd6140d1ed5e73b6cf156dbcd3b09b2872a3e42be00cfee1978b1feb720124c7e2f1adb77a0af90f8e5c06714b6a335aa866b0b1d07b488c3516492b2f8b04de10f4f456ac9ded11ccdb72f272428db83a612891fc4084c0a734707c85cbb154e676f0a463e79b88d41d57e67da84f5852d3a194b638eb2779c57d0d8935f0a8254de0579bc98725a899f317bf17b03d563b07b004f2ddabc8edf2a570c15cd437c748be01b7777ad1c59dbcc52e86bfcecbbd800dc87075e1668d5a2d6f63924436bba05abe4afdedc925726537d41dcaedfc763b10288e51a4bd653c4a676c468c7b5e447b27bbd6b36ef1b7e30d0c234fdb009ed553709886d2feed3121a8a77de760c920163b84a2c63f1327c534996c6ab9c7e71e6a4cf026100edb9b952fc57e2921f99b2a9cb7d51777c43193332dc9838868f84ebc10efbcd02e4fdc7b8af606c18aef5fc842a3662b31041be1e46eac3683e1cbbbf36b34f7e84ba2928233154ecd39ae30a5c5ebee365f2653de712c514820ca6408abc526deded9b2d57a5ceebbe18adc3a481231ab8a01c5765d4696d3c3f2fae9b7d1041c769928b43d3e2eb86ef9f819e2b12633de82731e59ec5f79c5da24311024d0c04a4c026baa3186b5d76e4bc052b6b8d027ba9825de4713ea042b29d8b9ac82bad71cbc1a84164dfe52624f613992f9cc6970bf1dc9d77df41471b45fd28a66e9c9864d9dfb9db18d925c55699c8650c5011330c628ec72063c145efacedd68410126065b531c70eac5baead32de21023273eda9d8c5f0a4a2ae7ccdaac6ccefa30ad418988e6da51909109c6bfbe0a2851c3729ad31ea306b986ffeb3c3126f3efe17c21b55b0aaa3ab0e128af3fe59211bd4677ae13214daed13a4f9037ed12fe42170095eb364b58ae266b79f7305939864063874ad7364716a02665779e36899bf5b9cd09e484e490ce6ddb2a1492d4b0fa50453a7eb278162d6896687dd887c4f863c2bdd3fb029af87c188dcd20189c1fa4ff606972dd5033c8cedbeba9794c07787d7a109a0facc41df079c433f72e58c4cb88092aaa1a4f4106aa5356a1a03807dcca8ef46fe636521c97b9eda897520b1d0966210374c2e2c3c9f5b358464aeb6782aabd042add846c34143c5fcc1403d18f2c9879165fa738692d78906eca56fbd1da3206019b3acc644fdb0653fd1c8a26bc2dc22818dbc4acef2bd0f94059fb9d3fba423e28c62b4f59ec28884de7db7c42291586a10739bd1b80274082c4a1cf0dbc774b88106707fc1fa6316fe1841e532e9a14bf152849258035b410366a48d5c6951058438d91a9a2516a7f6465048dc5509f833aa2d2125f3467332d669407b860a8bbf254859eddfedaa2698f1406f3c666a2a4413e6cabf9cb729a00ed1c4afcba8a7cdbff8676aa3ec365bf144dd48d0a957ceff5953bcc20e29502f9407724a23432f22ddd31d814bf92f33c4454cf94174677ec580439aa02fd3ca3be3d904e3515987c991d6df06b29327a6caee82d029730efeeec591be7991a1f8e7efbc878993a323696e9508b932e79c6efa3bb606dc5324d186254f0f8ba3bb34e8a1892b4621471f13f00bf68456da47ccfa038f7a494915a132fe3a1034b6708e3ff59ceea49e142be02de0f23ab1a37a44425357c36012ccde7baf7c75e70e4c0a4da7ed433717743a84ee4550e4f8e4d95fb9575b4859883ce8c34bf70aec77531c8337a8764231d7adee14187e1b6899bf84b2a41989c1f16db3855c6605ea2edd21c9b7298a532392efae5d82463619de0f0f479360f11a0f8916fa39832645b7771a603876aebc77128cf80abb88e510bcb9a700564f5d078814fc63846eec81030d4440c70a0594e025da5169c8ec41703f0842512697569e8a343157c5bac4af210f522e61ab2dfb222244a38994a097f438d88d8372157675ebd6e35d5da0e7c047e20f6b0b55f0d01215db7c34dfb567d58c7c9378aec27ebef2aa8a6ac24a42bb9d0f0272833b53030e4e01f43a7923817c172b18959dae1fedd21383f7ff299cc110880ca04441e838c330dd8809f2ac45e42718301498295c891cd755c27e4cea1ae21d1b567b10299c44e173901f095088c64a03e7fb14e44590112ab5f5226603ece8ef76056a9f4fa726103fb66c1f2ce5a43709942ba9fba74b9e16d829d1b877a90045d95fc68e8d2e8961943b863bbd21ff4d7bcd6380c6149445f50394d043f973a089655bafead916c526e41f0063c13f34ff079f012561941f20376fbcf502dda28fcf117a286f12939e7a630ef06fd48e2ab629c6edacd7dfcac20be60edf6b34ba4a2113ecaec2186695c825aa0b2b29cb1c05fed06f86294d2177535baa3b31fa2589e12d5a84455941aa62a0c0ec14ed4bfaedfa897dce1c46eaeaac23c1c8754a7ed81dd99ac4425e7e5745d70c3bf80d2d2164b9f8ce2b39cb59e4231ec47b726119731056d00bb7629b4de0573b9b3190b7dc3a8e5234bd2d8c68f42af612bcc85e89d2747289554532e268886bfbec78eb49e4de0d72ed8383576a827c6a79149ec4f6f4f562208369f5506c5c4ce44c4de1a9a1b10a1a8dc8035b000355f9e8cc1a759956fa1e8d66c1a1bd090cef6b35ceb7fad07c407e7223f6b0dd92814dd52b03709356c39860c7048be49cb95247cfefd62cf3d6e101bb778251762561b2ac0e699176cb285b43165780311dce80007da1df6cb76cd23b4efb51042c75ceeb21dfb5218f829dfaa238c5762b7d4f9bf209b544ab701c1dcecc1e3721ff7482ab2161f6e4d46e5cc1aa47b44c2ddc25bec15b1c345dd9529bd7ec5e1dd89956447f60a3a7b65ed282e58d737e1ceb74456aa99b98b6651dd11baa4e997f92ac06b3a1d3a0d448950e81c905f09eebe281c19e1f4a75dd3f82bcda5434afa9b8c1eec0b9b8c1aa9b878f2a9", 0x1000}, {&(0x7f0000000300)="1662ab963425c3b758710b6e77c7670813f5539c0ca6a93540207330b284a4f88ed3", 0x22}, {&(0x7f0000000380)="960227a4fb127b263ac3f026beee7a13c8b6d54165b0045093c7ce510b91a48cd388c1019d74a65446347df6649417a688a02ae23aac4fe2ee9b627d740445e950b9b6c54c6c6e0e58ccda9591742d8c37bb7c0937a83fa58a32dab307f310ffc914c87a0c844b89497a595aebe85a83fa7aa608be24ce6c460f8dd216a7afc2402dad33dc7f65491e5501a7af7d727f0e469f7e48dc59308541cb8f8dc6dbc821afb02090dc4dfa2fd5f4a46088ab3eb35fb6735f9f608f639877a2c29c4cff8ce9b807c66d6f70384c8acb57d4613ec8d91cba44bceb4d771661463b1900a0a7512b5cdaa5bfaa", 0xe8}, {&(0x7f0000000480)="541ccfac51aa4f", 0x7}], 0x5, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}, 0x20004080) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd010000000000140000006030032800082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) sendto$inet6(r0, 0x0, 0x0, 0x2004c011, &(0x7f0000000080)={0xa, 0x4e24, 0xd502, @empty, 0x8000}, 0x1c) 1.70003473s ago: executing program 0 (id=1975): sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140)=0x9, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0xfffffffffffffda3) 1.589557742s ago: executing program 0 (id=1977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000580)=@kern={0x10, 0x0, 0x0, 0x10400}, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500002c00004000002f9078ac1e0001e00000010100000000189078040000000000000086ddffff00000000"], 0x3e) 1.473978547s ago: executing program 3 (id=1978): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r0, &(0x7f0000000300)=""/212, 0xd4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 1.372581003s ago: executing program 4 (id=1979): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x1000, 0x3}, 0x20) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x966) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x1}, 0x8) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r5}, 0x0, 0x80000001, 0x3}) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="80c23abba22e1d736a197bbd8324ad866a7aa5033445ac866e62f9039239439d84cc0fd3cbdfbc13a6e619e337b4e2", 0x2f}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xc8, 0x117, 0x2, 0xb0, "46d2671d7f7f44a536d73b92c324e00996f56388b206bca54677ed32f0b80e4089242fd59f7e01d38055c687605e35375639f7fa42fb388ddd462dbed6b2d69709b6055a5369f437aac0d85cc18b37824de32e19b5fdee9d3b30162cb8ff0f6ed0fe9606d46846afdb41fc9204294145e88f9832d8df7aa89f4864dc426f0f58b03a1a74f65d562c620ecf7b3adf926782a7c394b197d1293d632a8c5a56e1c1d7bf062bcb851f589ab515fcd037ba18"}, @op={0x18}], 0x110, 0x20}], 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, 0x5, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x4880) 1.295274208s ago: executing program 2 (id=1981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{}, {0x0, 0x5}]}]}]}]}, 0x30}}, 0x0) 1.24584327s ago: executing program 4 (id=1982): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, 0x0, 0x43059294f10fa146) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000015b40)={0x0, 0x0, &(0x7f0000015b00)={&(0x7f0000000100)={0xb8, 0x13, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_USERDATA={0x85, 0x8, "06a2644649e45296e3e356f284440bd4038fd2c498a0e2e1701adf2e7e61a5870ad931fc18563f09caed5acd2a1deb840ebb0762f82d06662ecd4d68799d5fbc6bcdcbe47bd2865e75355ff74bb36cde375d952395fbddaea0098a03097444aa0affed4095a3768eb8045f77e8aa60c42e7ecdee1fb54b697ada62b12727019431"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0xb8}}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.148635242s ago: executing program 4 (id=1983): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64) r1 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) ioctl(r1, 0x2, &(0x7f00000003c0)="763c8218cd80caac3ae6feb59cb4fc23b3567f4f38f6de875c640b712c5420376ee7b51350f43494cb7c8419e9335700ba72b30674ba916fa61855570eeab7073ca71c09cf644b731a07") (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89e0, 0x500) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r6 = gettid() write$cgroup_pid(r5, &(0x7f0000000140)=r6, 0x12) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="1c005a801800016e9900"], 0x38}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@multicast1, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x1, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x5, 0x1c, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x8000000, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0xb8}}, 0x8044) (async, rerun: 64) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xfc}}, 0x0) (async) socket$inet6(0xa, 0x3, 0x5) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000000), 0xc) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448e6, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, 0x0}, 0x5b4}], 0x1, 0x850) 1.147713099s ago: executing program 0 (id=1984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.03811553s ago: executing program 2 (id=1985): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) syz_emit_ethernet(0xa6, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x70, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, [{0x0, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af2602"}, {0x0, 0x1, "00000500000000002600"}, {}]}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="080005000b00"], 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) 962.414176ms ago: executing program 1 (id=1986): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x2, 0x3, 0xa, 0x0, 0x4}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000370a010400000000000000000f072000"], 0x14}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x10, 0x803, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0xc040) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r8, 0x0, 0x7f}, 0x18) (async) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000100)={0x8, 0x2, 0x2, 0x1, 0x1}, 0x8) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c24b9baa5cbff4b58c87e402f0c4232777c062eebb171b53c0d7981f6bd775d0a06995513ac604dfb5983797dfb11d30a48408fbcc6738671bddc1f0b0a9eccc06488092371c7ab67c7c0ee9792a1f3165214", @ANYRESDEC, @ANYRESDEC=r11, @ANYRES16=r9, @ANYRES16=r8, @ANYRES64=r11], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$sock_SIOCBRADDBR(r11, 0x89a0, &(0x7f0000000080)='pim6reg\x00') (async) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001980)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r12, 0x8b32, &(0x7f0000000040)) 676.710562ms ago: executing program 0 (id=1987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x8, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x5612}]}, 0x44}, 0x1, 0x0, 0x0, 0xc}, 0x4000010) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x28) socket$nl_route(0x10, 0x3, 0x0) 655.332963ms ago: executing program 2 (id=1988): r0 = gettid() (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r2, 0x0, 0x0, 0x0}, 0x30) 311.355908ms ago: executing program 1 (id=1989): socket$kcm(0x29, 0x2, 0x0) (async) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000000)={{r0}, "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"}) sendmsg$sock(r0, &(0x7f0000001780)={&(0x7f0000001000)=@sco={0x1f, @none}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001080)="003604bc5e9e5bcfbfecef429d4cf70b29f88894ec8f66b377e0dcf7654f3d7ff5ce09da6f370c0eef7c60b2f9c8af4f132ad46504d6b694667d18c59e69ab4e078ab18dd7e5ed99144d72f62d032550f035ec481a63f1cae90632f92ea007c59467b48fadbae0f4063816ed2c9b7b6ff187f5bf91f8e08c46549cc6cfd0c1e3f89181b2788c6f6d48871f7b7ca5a45d5642e78da6dbdfa3da69020b44e8f1640ff7aecf65b086ffcb30a23230cef3ae35ac210000fa73e233e6a37c439d7928c08e7ad39bdfa2dbfc145c9177c6062506e1f06e8305ea", 0xd7}, {&(0x7f0000001180)="6164255360454c6a576f789e33e68588a9681fb30204a2c66712b77b407d4c7c31c3632dee9ebe7ff42a336d7197c172722f6a384a250677fdc5d72193c625f5d0bd1097e3758905969a3fb7c15b05194080293643", 0x55}, {&(0x7f0000001200)="f8437cbbc329303b57ba3c77a3965c4e1b2fad5be056c8095e0db26bac01f9d38c8af70a2da7a323d2683ac257726da26515e72565", 0x35}, {&(0x7f0000001240)="50ac38a2fe3b6cf10b98cb6e760b08d65d3f582d2739b37b6ce1b551730810f6b9343cde1a3c20a178bda18efdc87681be9a1f5fbc8e1f200167fd097d3b3498036430adee49ed1f7ee7e1a29317f2179c5914bb786b74a7841f936e7073c52868597b0cb699926420a791004ee7505e21a0d840f9ba3ea17d313d8a06901fab6a9c52f4c3685ae3c0768d7c40b806e8b13d49f92cf7495edbbcc4a19d64b1eb234b70bd4b08d2b6da0d7db2a02e15dda9b4fdd17c9596833b82bd9edc54ff8e", 0xc0}, {&(0x7f0000001300)="eb3cc1a049512bd2741b132e45a8fb140e7fb386d14ea26c0b094bd84da5548f03fde0ff4d95bd610f6aa357ede941410d42ad37fd90ea28", 0x38}, {&(0x7f0000001340)="9492656fb431cd806bf63751a54dd9dcb8d7b8b5fb7621f40976cb7ad0d77c668868895607077c3a6488e071b76ce5da8529bb579de82d21c6d22e50a38f271116e978eb9e44afacc30c681ccaeed3674267913205387283b0a2ae2ca1c1969a500905c9f4902a69f26a66161774fbb6c761ee372a3cf0ae2b13169933006e966f6fd99e457d9d4ffc262f240d1d2de1fa22b7af854459d25f08b22627137c0be9a81ae20b3da861a46b5fdcb73883d14b556866e8eae50c964d8a76ed1f8e9d43726f217b04f6827686f2bf88a740fea961f22fa09830892cf7b9c9c9055aa09cd7adc8ae17122179eee405", 0xec}, {&(0x7f0000001440)="56c80a1109827da2bb5ff478c92ad2a72c16ca1c547a8b33492435c2670cbb1800e26550750798a657860190760866a9dff6f957e1ec3fbe0d2902b948369301ada1e023c6ceaa9dd8897fb88ecc98c2ade3e3376dc349e926f5525c255ad137ca34e851b2aef5b71d4f28214f4130c6ce279213c9d40474df75bc3b799b18cd9e71ad485df61bca", 0x88}, {&(0x7f0000001500)="4b1c678a7c0bad81952b164479104fa3d1b82730c8e4182d0af9fd010bbc6ffe8e2d2d8a596279fd86e75c738d47f2def093c8ba2b6f2386022f9d84a81c09288af24a27ab49fab3afe3739f847870b7f51b773b07defb6512476174be3524", 0x5f}, {&(0x7f0000001580)="498f3760a914fd452463008b6ced6e46460abe61894e14f7c1db0e5b8055aaa9a7bc113a42ec5682c6ce8574723a01", 0x2f}, {&(0x7f00000015c0)="01bd09c07f1925f620c9cc60b87f06e810188eecb28861435947a1d72c62ea237ad7249ff46cef6bf244df77a5265440dfd9fa4635b2c9cb8b9d261f3c199e373b199acd25787b06f72124853c847835bdcb5d9a5805e47c762313867ac79d1a0d7fa5e0470f40f5f87e5640360b51187e5607fa04506572562e67c5d003884c64013568d8331343663fe37df375484f42dfcd9018a83eadadcfc9d81b591b01f19bc90a2f8b20cff73deaa00b92555f557b78294ff6bfc8ed9b876f3fa26645de73abe8ebda20634daf8b", 0xcb}], 0xa}, 0x40000) r1 = accept(r0, &(0x7f00000017c0)=@isdn, &(0x7f0000001840)=0x80) sendmsg$AUDIT_TRIM(r1, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x10, 0x3f6, 0x100, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24004100}, 0x4001) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001980), r2) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000019c0)={0xb, {{0x2, 0x4e22, @empty}}}, 0x88) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000019c0)={0xb, {{0x2, 0x4e22, @empty}}}, 0x88) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000001a80)) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000001a80)) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000001ac0)={0x0, 0x1, 0x6, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001b00)=@assoc_value={0x0, 0x81}, &(0x7f0000001b40)=0x8) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000001b80)={'veth0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001c00), r1) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001c00), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x806}, 0x880) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000001d00)=0x9, &(0x7f0000001d40)=0x4) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000001d80)={@ipv4={""/10, ""/2, @empty}, 0x0}, &(0x7f0000001dc0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001f00)={'erspan0\x00', &(0x7f0000001e00)={'ip_vti0\x00', r6, 0x10, 0x20, 0xfff, 0x10001, {{0x2c, 0x4, 0x0, 0x6, 0xb0, 0x65, 0x0, 0xe, 0x4, 0x0, @empty, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0x83, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x74}, {@loopback}, {@remote, 0x7}, {@empty}]}, @timestamp_addr={0x44, 0x24, 0xef, 0x1, 0x2, [{@empty, 0x80000000}, {@loopback, 0x2}, {@local, 0x2c0}, {@multicast2, 0xeb4}]}, @ssrr={0x89, 0xb, 0xfd, [@rand_addr=0x64010102, @rand_addr=0x64010101]}, @end, @timestamp_prespec={0x44, 0x3c, 0xeb, 0x3, 0x5, [{@empty, 0x9}, {@multicast1, 0x4}, {@rand_addr=0x64010101, 0x5}, {@remote, 0xfffffff9}, {@multicast2, 0x4}, {@multicast1, 0x101}, {@multicast2, 0xffff}]}, @lsrr={0x83, 0xb, 0xa6, [@broadcast, @remote]}, @noop]}}}}}) socket$phonet(0x23, 0x2, 0x1) (async) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000001f40)={0x0, 0x4, 0x9}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000001f40)={0x0, 0x4, 0x9}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x100a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb52}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x887}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000840}, 0x8080) sendto$packet(r1, &(0x7f0000002080)="bd83a0027904976f3432cd7f165b6f80c96324fd9f5a4dd5e4f1c12a3a6d296be9c2141c3e6472e042c1211b12f2f66184fe39489ec8f50d149d3a19d6e6368f06b0f456fd67519874e91de1b92ac13339b3f1668415c1360a649480dc4ffcbcc56388db19012077be6ec8dbc49650e911ae57ede7afa65a0ffdacc555ffdf74a738cdcbb6ae47cfc9051fede3a8d99b0de8ec7821a9f2bf705d4897d5ba238fba348d7e0f396e54133b6aebd21dbb4a5acdacc3d7", 0xb5, 0x40, &(0x7f0000002140)={0x11, 0x87772f3d20bd063d, r6, 0x1, 0x3}, 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000002180)=0x80000000, 0x4) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000002180)=0x80000000, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), r2) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002240)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002340)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x13926147c4dda23e}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x54, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8}, @val={0xc, 0x99, {0xa9c1, 0xd}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x66}}, @NL80211_ATTR_PID={0x8, 0x52, r10}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002340)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x13926147c4dda23e}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x54, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8}, @val={0xc, 0x99, {0xa9c1, 0xd}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x66}}, @NL80211_ATTR_PID={0x8, 0x52, r10}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000002380)=0xdae, &(0x7f00000023c0)=0x2) 310.825053ms ago: executing program 4 (id=1990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x400000000010, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) (async) recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}], 0x1, 0x10002, 0x0) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000880)=0xbc, 0x4) (async) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000300000008000400ac1414000800020000000000080001"], 0x2c}}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newtclass={0x40, 0x28, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xffff, 0xf}, {0xfff3, 0x10}, {0x10, 0xe}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}, @TCA_RATE={0x6, 0x5, {0xff, 0x32}}]}, 0x40}}, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0x1}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) 305.869142ms ago: executing program 3 (id=1991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x1d, r6, 0x0, {0x0, 0xff, 0x2}, 0xfd}, 0x18, &(0x7f00000006c0)={&(0x7f0000000600)="df79c7a0c7d788233d9022edcfd04996ce2c7509a13f739a68322988d49611281a849a0dc1d8e219ab8701daf381d60ae6d889f3df138a787950043d4fd1b026e629c6a450c6a483209697825b8fe5b0b605b30696ed5e79c31713679ecddb7e697f2ba57f40069c0ea4aa42369d9954826533800c12b393ee0048424e42c0ed34", 0x81}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r7 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f7", 0x81}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001280)=""/204, 0xcc}], 0x1}, 0x40000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x24, r9, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r9, 0x214, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa, 0x14}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x70000, {0x6, 0x1, 0x8, 0x7}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044804}, 0x40844) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r2, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000081) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) 305.478772ms ago: executing program 0 (id=1992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x20, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@multicast2, @in=@broadcast, @in=@multicast2, @in=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) 305.189861ms ago: executing program 2 (id=1993): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a80)='Z8', 0x2}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000002000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0xed000000, 0x10, &(0x7f0000000200), 0x10}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, &(0x7f00000029c0)) splice(r3, &(0x7f0000000100)=0xc0, r5, &(0x7f0000000140)=0x4, 0x2, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002f00000018000380100003800c00018005000208000000000400010018000180140002007369743000"], 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r7) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r4) setsockopt$netrom_NETROM_T4(r8, 0x103, 0x6, &(0x7f00000024c0)=0x7d, 0x4) sendmmsg$alg(r7, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c400)=ANY=[@ANYBLOB], 0x8dec}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000c0a0) 305.003892ms ago: executing program 1 (id=1994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 304.405055ms ago: executing program 4 (id=1995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x4, 0x5, 0x1000, 0xffffffffffffffff, 0xe}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 241.605513ms ago: executing program 0 (id=1996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003012000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2}}}}]}, 0x44}}, 0x0) 116.686062ms ago: executing program 2 (id=1997): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) (async) 98.095582ms ago: executing program 3 (id=1998): syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x4, 0xf8ee) syz_emit_ethernet(0x36f, &(0x7f0000000480)={@multicast, @link_local, @void, {@ipv6={0x86dd, @tcp={0xc, 0x6, "d291f3", 0x339, 0x6, 0x1, @local, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0xc4, 0x4, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x9, [0x6, 0xe, 0x8]}}, @padn={0x1, 0x1, [0x0]}]}, @hopopts={0x4, 0x25, '\x00', [@generic={0xe, 0x64, "0f1f1e39a43fb653a543f04ea4f45c9b643c53e80e140f820319a04f375b85707eacb1b4d0ad7b6979428d7ed90de61cd5e6f5b7ccd9531803f4e4de248d832018626156fe063aa2ae434d2936e2a377796996030005b2eaf0d8c4fbe425b7395592c0a4"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x38}, @jumbo={0xc2, 0x4, 0x10}, @generic={0x2, 0x92, "7eab607dcef0fbdea859cb31f9150322b768017bc49877565a69b55251cc8efa500efeadecaf34a383003235a37e0a88685344f048cb02faf2faa3e8f1ae0a2736a8d92c5b31ab021a9a7b8ca1df810c1f69bbe4706cb709feab4559a6ae9c1777e6c3791a28dd2ba69073e36c6e858949ac0ba7d802916fedb4185bbb86b06bd9097b360f333494ffa8a99103951d4bc6f8"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @hopopts={0x6c, 0x13, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x81, 0x9437, [0xdec]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @pad1, @ra={0x5, 0x2, 0x6}, @generic={0x97, 0x65, "f77c76a30519ec66aa1f93b466de1a6d7d421942b9bb668523fd53d3aed95bdc42bb9865cb644925181ea855fe358dc7596a6abb4244e7f05f45e11b74849c10c97fe9d60d23893d9d4428264c66b53c3f7b9679e56b0b52bb994f8d2169aae312c8a8186d"}, @pad1, @jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0x7}]}, @fragment={0x11, 0x0, 0x3f, 0x0, 0x0, 0xb, 0x65}, @hopopts={0x6, 0x4, '\x00', [@pad1, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim]}, @dstopts={0x32, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0xfff4}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e22, 0x4e24, r0, r1, 0x0, 0x0, 0x9, 0x20, 0x84, 0x0, 0x1, {[@fastopen={0x22, 0xd, "9ed9ec34a91ab95e0fc6ce"}]}}, {"1eb38153fa8a2ddc3942f3f1efe606ebe741657aee50a81799f3f9994fbdd1042be46ba9859b32ec740b2b0f9732977f4ec6c1aa09a455b6835cdd94fc51840b1563f834f7f71f06d01b1e9d7d66f65b9991549e36587123ba06ba8a197954971a446d9532141fd8a86ef88fed2d946f5990f974c6a77fd3d9dc30907e46cf8602345cd790f6a678e2d89f877ea0b6456e8484712d75102d685bd506f008cfbdd9e691f4adc9472e16012d04c5dd33b1a6f8bb605dad5189127ba7c243"}}}}}}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 45.809315ms ago: executing program 1 (id=1999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001a000100fdffffff000000c9ff03c2c3ed0c0a000020", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe880000000000000000000000000001080002000700000014000100fe800000000000000000000000000027"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001a000100fdffffff000000c9ff03c2c3ed0c0a000020", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe880000000000000000000000000001080002000700000014000100fe800000000000000000000000000027"], 0x4c}}, 0x0) (async) 0s ago: executing program 2 (id=2000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x30840, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) pselect6(0x40, &(0x7f0000000080)={0x3c7, 0x3, 0x10000, 0xd, 0x9, 0x1, 0x4, 0x1}, &(0x7f00000000c0)={0x3, 0x3, 0x200000, 0x3, 0x10001, 0x6, 0x2, 0x1}, &(0x7f0000000100)={0x8, 0x4, 0x3, 0x1, 0x100, 0xc, 0x1fc, 0x4}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x8]}, 0x8}) r2 = socket$phonet(0x23, 0x2, 0x1) listen(r2, 0x4) r3 = accept4(r2, 0x0, &(0x7f0000000200), 0x1000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa3}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa7bbcc9991ad1383}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2326}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa4}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x24000004) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r4, 0xfffffe00, &(0x7f0000000380)="0126474995f322327f18fc2006bb12a4e7d3c24f37e7f2c97acb191538fbc7d4bfbd2e5d0f893c2813e00dd9b6117edf81e3f7b883d7616284e72d9730fc33d1e0e185296568dcffe82604a046dd8d1df76cb7d1181940b64b55ed7819529dd61824c769283280b8def0917067510938da79758f6158ee038a9df4f8f91aea4720cc40dc528e054cb4efb300aad112fc6712785038630e2a32fdc206d7a6fcb8c38d1bdeeeff4b8564e7c609b4790690fb2c0d6ed9026fd0e9d4a44f6fd3f841459519728c251235795d8223a7b6c0d99333af41fc17d3b7eddfd9ead783151938055ccad93ce1509cb29062fc7516") r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0xa00, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x15}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x34}}, 0x40040) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000005c0)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000600)=0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x2, 0x70bd28, 0x5, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000780)={0xffffffffffffffff}) r8 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r8) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x7, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000001680)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001640)={&(0x7f0000000940)={0xcf8, r9, 0x105, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0x6}, {0x3, 0x9}, {0x2, 0x1}, {0x1, 0x3}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0x2}, {0x5, 0x2}, {0x1, 0x5}, {0x4, 0x5}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x6}, {0x7, 0x6}, {0x2, 0x9}, {0x4, 0x5}, {0x3, 0x4}, {0x2, 0x9}, {0x7, 0x6}, {0x2, 0x3}, {0x3, 0x7}, {0x6, 0x1}, {0x2, 0x5}, {0x3, 0x2}, {0x7, 0x8}, {0x4}, {0x1, 0x2}, {}, {0x3, 0x16}, {0x1, 0x7}, {0x2, 0x3}, {0x7, 0x4}, {0x3, 0x2}, {0x1, 0x7}, {0x4, 0x6}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x9}, {0x0, 0x6}, {0x5, 0x7}, {0x5, 0x9}, {0x1, 0x9}, {0x4, 0xa}, {0x5, 0x1}, {}, {0x2, 0x7}, {0x4, 0x8}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x6}, {0x0, 0x6}, {0x0, 0x2}, {}, {0x4}, {0x4, 0x5}, {0x0, 0x5}, {0x5, 0x8}, {0x6, 0x2}, {0x2, 0xa}, {0x1, 0xa}, {0x3}, {0x5, 0x5}, {0x5, 0x8}, {0x6, 0x8}, {0x3, 0x7}, {0x3, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x78ba, 0xa7, 0x8c2, 0x6, 0x0, 0x4]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x9}, {0x6, 0x7}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x7}, {0x7, 0x3}, {0x7, 0x4}, {0x4, 0x9}, {0x1, 0x8}, {0x5, 0x9}, {0x2, 0x5}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x5, 0xa}, {0x0, 0xa}, {0x4, 0x6}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x7, 0x6}, {0x5, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x6, 0x5, 0x4bb3, 0x8, 0x20, 0x9, 0x1]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x5}, {0x3, 0x4}, {0x2, 0x1}, {0x2, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x5}, {0x4, 0x1}, {0x6, 0x8}, {0x2, 0x1}, {0x7, 0x1}, {0x3, 0x7}, {0x0, 0x9}, {0x7, 0x3}, {}, {0x4, 0xa}, {0x5, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x2, 0x2}, {0x7, 0x8}, {0x1, 0x4}, {0x5, 0x4}, {0x0, 0x8}, {0x2, 0xa}, {0x1, 0x6}, {0x4, 0x6}, {0x2, 0x3}, {0x0, 0x9}, {0x2, 0x3}, {0x1, 0x4}, {0x0, 0x8}, {0x5, 0x5}, {0x2, 0x2}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{}, {0x2, 0x5}, {0x2, 0x3}, {0x0, 0xa}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x6, 0x7}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0x9}, {0x1}, {0x7, 0x4}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x5}, {0x2, 0x1}, {0x5, 0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x3, 0x7}, {0x3, 0xa}, {0x7}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x5}, {0x2, 0x5}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x3}, {0x5, 0x3}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x2, 0xa}, {0x4, 0x9}, {0x7, 0x8}, {0x5, 0x7}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x7}, {0x5, 0x7}, {0x0, 0x4}, {0x4}, {0x1, 0x6}, {0x7, 0x2}, {0x2, 0x1}, {0x1, 0x2}, {0x5, 0x2}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1000, 0xfa3, 0x6, 0x5ca, 0x8e18, 0x1, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfc39, 0x2, 0x10, 0x6, 0xfc00, 0x100, 0x3]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x75d3aa288ca25718, 0x2, 0x30, 0x16, 0x1b, 0x12, 0x34, 0x24, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5a8, 0x1, 0x7, 0x8000, 0x7, 0x2, 0x4, 0xa1]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x4, 0x1}, {0x3, 0x5}, {0x1, 0x3}, {0x3, 0x2}, {0x6, 0x8}, {0x3, 0x9}, {0x6, 0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x4, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x7, 0x4}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x3}, {0x5, 0x5}, {0x7, 0x6}, {0x2, 0x2}, {0x3}, {0x0, 0x9}, {0x3, 0xa}, {0x4}, {0x5, 0x3}, {0x2, 0x2}, {0x4, 0x8}, {0x3, 0x4}, {0x5, 0x8}, {0x6, 0x7}, {0x6}, {0x5, 0x3}, {0x0, 0x5}, {0x2, 0x2}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0xa}, {0x0, 0x3}, {0x3, 0x9}, {}, {0x1, 0xa}, {0x5, 0x3}, {0x4, 0x1}, {0x3, 0x5}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x9}, {0x6, 0x9}, {0x7, 0x4}, {0x4, 0x1}, {0x1, 0x3}, {0x4, 0x9}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x7}, {0x7, 0x3}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x2}, {0x3}, {0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0x9}, {0x2, 0x5}, {0x5, 0x8}, {}, {0x1, 0x5}, {0x5, 0x5}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x0, 0x5, 0x1, 0xe, 0x6, 0xb185, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x148, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff1, 0x31b0, 0x3, 0x5, 0x5, 0x4, 0x4, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd82, 0x1, 0xd, 0x1, 0x1, 0x1, 0x7, 0x5]}}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x9, 0xfe2, 0xad, 0x6, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x9, 0x8, 0x8, 0xf58e, 0x4, 0x8]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xa, 0x3, 0x2, 0x8, 0xc4, 0x8e5, 0x81]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x18, 0x24, 0x24, 0x6e, 0x2, 0x2, 0x6c, 0x3, 0x36, 0x44, 0x4, 0x60, 0x12, 0xb, 0x6, 0x4, 0x4]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x36, 0x3, 0x3, 0x60, 0x3, 0x36, 0x3, 0x5, 0x12, 0x1b, 0x3, 0x2, 0x48, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x200, 0x0, 0xac, 0x5, 0x8, 0x0, 0xbc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0xb10e1592a441bb11, 0x2, 0x1b, 0x48, 0xb, 0x3, 0x60, 0xc, 0x6c, 0x12, 0x48, 0x36, 0xc, 0x30, 0x6, 0x30, 0x0, 0x6, 0xb, 0x9, 0x1e, 0x2]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x4, 0xb, 0x3, 0x1, 0x8, 0x8, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2421, 0x2000, 0x3, 0x8, 0x4, 0x4, 0x0, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x44db, 0x67f, 0x101, 0x4, 0x0, 0x200, 0x0, 0x5]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x2, 0x6, 0x7, 0x5, 0x7, 0x2, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x6c, 0x3f, 0xd0fdeef45b109028, 0x30, 0x60, 0x6c, 0x30, 0xb, 0x30, 0x36, 0x24, 0x4, 0x5, 0x6, 0xb, 0x6, 0x30, 0x3, 0xc, 0x12, 0x4, 0x6c, 0x9, 0x5, 0x5]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x4, 0x8}, {0x3, 0x9}, {0x1, 0x2}, {}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0x2}, {0x6, 0x1}, {0x6, 0x3}, {0x3, 0x7}, {0x3, 0xa}, {0x5, 0x5}, {0x6, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x5, 0x3}, {0x6, 0x7}, {0x7, 0x7}, {0x0, 0x1}, {0x2, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0x2}, {0x1, 0x4}, {0x0, 0x9}, {0x3, 0x5}, {0x4, 0x2}, {0x1, 0x5}, {0x5, 0x1}, {0x3}, {0x6, 0x4}, {0x6, 0x2}, {0x6, 0x3}, {0x2, 0x8}, {0x7, 0x3}, {0x7, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x7}, {0x3, 0x8}, {}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x7, 0x6}, {0x4, 0x6}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x25b7, 0x7, 0x8, 0x5, 0x1ff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x4c4, 0xc, 0x46, 0x8, 0x100, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x9, 0xfffd, 0xdf76, 0xf, 0x575, 0xbc]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x6c, 0x1, 0x1b, 0x1, 0x6c, 0x6, 0x6c, 0x2, 0x24, 0x36, 0x2, 0x24, 0x9, 0x9, 0x9, 0x1, 0xb, 0x48, 0x6c, 0x30, 0x36]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x4}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x5}, {0x2, 0x8}, {0x6, 0x9}, {0x7, 0x1}, {0x4, 0x4}, {0x3, 0x2}, {0x6}, {0x3, 0x8}, {0x0, 0x7}, {0x4, 0x9}, {0x5}, {0x1, 0x6}, {0x0, 0x1}, {0x7, 0x9}, {0x2, 0x9}, {0x5, 0x5}, {0x6, 0xa}, {0x3}, {0x3, 0x1}, {0x3, 0x4}, {0x6, 0x6}, {}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0xa}, {0x6}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x3}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8f, 0xefb, 0xf, 0x6, 0x53, 0x3, 0x651]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x2, 0x7ff, 0x9, 0x925, 0x2, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x1b, 0x4, 0x36, 0x6, 0x2, 0x0, 0x18, 0x3f, 0x6, 0x6, 0x48, 0x60, 0xc, 0x6, 0x6c, 0x3, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x2, 0x14, 0x4, 0x4, 0x1, 0xb]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x4}, {0x7, 0x5}, {0x3, 0x9}, {0x1, 0x1}, {0x6, 0x3}, {0x4, 0x2}, {0x0, 0xa}, {0x2, 0x9}, {0x1, 0x9}, {0x6, 0x9}, {0x6, 0x5}, {0x7, 0x3}, {0x5, 0x1}, {0x6, 0x8}, {0x3, 0x6}, {0x7, 0x3}, {0x4, 0x2}, {0x2, 0x4}, {0x3, 0xa}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0x7}, {0x2, 0x5}, {0x4, 0x8}, {0x7, 0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xbc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x8, 0x8, 0xda, 0x3, 0x5, 0xfe00]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x16, 0x12, 0xb, 0x60, 0x1, 0x4, 0x36, 0xc, 0xc, 0x12, 0x5, 0x9, 0x78, 0x6, 0x60, 0x1, 0x6c, 0x16, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x7, 0xfa61, 0x3ff, 0x0, 0x6, 0x4]}}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x8, 0x8000, 0x30, 0x3, 0x1000, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa9, 0x643, 0x81, 0x5, 0xe292, 0xf800, 0x5b, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf0d4, 0x2a, 0x1000, 0xff, 0x2456, 0x4, 0xd94, 0xfff4]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x4}, {0x7, 0x2}, {0x3, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {0x2, 0x8}, {0x1, 0x8}, {0x6, 0x4}, {0x6, 0x5}, {0x2, 0x1}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x148, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x22af, 0xec53, 0x3, 0x1000, 0x8001, 0x4f8c, 0x4, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0x2}, {0x2, 0x7}, {0x1, 0x8}, {0x7, 0x2}, {0x2, 0x7}, {0x2, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x4}, {0x0, 0x5}, {0x4, 0x9}, {0x4, 0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x5, 0xa}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x7, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0x6}, {0x2, 0x5}, {0x2, 0x4}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x3}, {0x3, 0x7}, {0x7, 0x8}, {0x4, 0x9}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x7}, {0x0, 0x8}, {0x7, 0x3}, {0x3, 0x6}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x7}, {0x5, 0x5}, {0x2}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x0, 0xf, 0x7, 0x2, 0x3, 0x2, 0x1]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4423, 0x1, 0x7, 0x3f80, 0x0, 0x81, 0x7, 0x10]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x3, 0x0, 0x1, 0x3df4, 0x7, 0x2]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x19, 0x48, 0xc, 0x60]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x5, 0x3, 0x1, 0x30, 0x3, 0x4, 0x30, 0xdab50328cd21bf3f, 0x4, 0x30, 0x18, 0x17, 0x6, 0x2, 0x11, 0x48, 0x1, 0x5, 0x3, 0x1, 0x60, 0x12, 0x30, 0x0, 0x60, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x22, 0x5a, 0x2, 0x5, 0x16, 0x54, 0xb, 0x1b, 0x3, 0x9, 0x48, 0x24, 0x60, 0x48, 0xb, 0xc, 0x24]}]}]}, @NL80211_ATTR_TX_RATES={0x40c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7, 0x2, 0x39, 0x7, 0xffff, 0x3, 0xd8d]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x4, 0x16, 0x12, 0x48, 0x1, 0x0, 0x1b, 0x1, 0x3, 0x6, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x6, 0x9, 0x8, 0xf800, 0x40, 0x7, 0x1]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{}, {0x5, 0x8}, {0x4, 0x6}, {0x1, 0x3}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x36, 0x30, 0x12, 0x36, 0x6, 0x60, 0x4, 0x2, 0xc, 0x16, 0xc, 0xb, 0xc, 0x4, 0x48, 0x0, 0x6, 0xb, 0x60, 0x16, 0x6, 0x1, 0x18, 0xe0a4c420ada13c8a, 0x24, 0x3, 0x30, 0x7ae2f5b59afd4a64, 0x9, 0x1b, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x3}, {0x0, 0x2}, {0x6, 0x7}, {}, {0x2, 0x1}, {0x1, 0x9}, {0x6, 0x9}, {0x3, 0x8}, {0x3, 0x4}, {0x2, 0x5}, {0x5, 0x5}, {0x4, 0x4}, {0x1, 0x1}, {0x7}, {0x3}, {0x2, 0x5}, {0x6, 0x6}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x2}, {0x6, 0x9}, {0x3, 0x6}, {0x7, 0x4}, {}, {0x5, 0x1}, {0x3, 0x7}, {0x1, 0x3}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x7, 0x8}, {0x1, 0xa}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x6}, {0x7, 0x4}, {0x6, 0x1f}, {0x5, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x6, 0x8}, {0x2, 0x5}, {0x0, 0x6}, {0x5, 0xa}, {0x7, 0x8}, {0x6, 0x8}, {0x5, 0x6}, {0x7}, {0x2, 0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x1, 0x30, 0x24, 0x4, 0xb, 0x2, 0x36, 0x1b, 0x1, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x3}, {0x5, 0x2}, {0x0, 0x6}, {0x2, 0x1}, {0x6}, {0x0, 0x3}, {0x3, 0x3}, {0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x6}, {0x2, 0x1}, {0x3, 0x4}, {0x7, 0x8}, {0x2, 0x9}, {0x4, 0x9}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x6}, {0x5, 0x2}, {0x7, 0xa}, {0x4, 0x6}, {0x4, 0x3}, {0x6, 0xa}, {0x3, 0x7}, {0x6, 0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7ff, 0x1, 0xffff, 0x2, 0x2, 0xffff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x92, 0xabf3, 0x5, 0x400, 0x2, 0x48e, 0xaa]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x7}, {0x5, 0x2}, {0x2, 0x9}, {0x3, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x0, 0x4}, {0x1, 0x13}, {0x0, 0x8}, {0x4, 0x4}, {0x7, 0x7}, {0x0, 0x4}, {0x4, 0x5}, {0x3}, {0x1}, {0x3, 0x9}, {0x2, 0x1}, {0x3, 0x4}, {0x3, 0x8}, {0x6, 0x9}, {0x4, 0x4}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x8}, {0x1, 0xa}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x7}, {0x2, 0x3}, {0x3, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x1, 0x3}, {0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x2, 0x1}, {0x2, 0x8}, {0x0, 0x9}, {0x3, 0x4}, {0x5, 0x6}, {0x1, 0x6}, {0x3, 0x4}, {0x1, 0x7}, {0x6}]}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{}, {0x3, 0x8}, {0x1, 0xa}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x4}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x4}, {0x1, 0x9}, {0x4, 0x6}, {0x5}, {0x4, 0x3}, {0x7, 0x1}, {0x7, 0xa}, {0x1, 0x4}, {}, {0x2, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x0, 0x5}, {0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x2, 0x5}, {0x0, 0x9}, {0x7, 0x6}, {0x3, 0x2}, {0x1, 0x5}, {0x1, 0x3}, {0x4, 0x4}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0x3}, {0x4, 0x5}, {0x4, 0x2}, {0x6, 0x5}, {0x5, 0x9}, {0x1, 0x4}, {0x4}, {0x5, 0x8}, {0x3, 0x1}, {0x5, 0x6}, {0x4, 0x9}, {0x2, 0x7}, {0x6}, {0x2, 0xa}, {0x6, 0xa}, {0x5}, {0x3, 0x5}, {0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x3}, {0x7, 0x3}, {0x0, 0x4}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x0, 0x3, 0x1, 0x5, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x16, 0xb, 0x6, 0x30, 0x48, 0x6, 0x48, 0x90, 0x1b, 0x18, 0x2, 0x9, 0x6c, 0x12, 0x6, 0x18, 0x5, 0xe, 0x2, 0x9, 0x6c, 0x2d, 0xc, 0x78, 0x16, 0x9, 0x1, 0x48, 0x30, 0x6c]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x5, 0x5, 0x16, 0x30, 0x3, 0x12, 0x12, 0xb824d894657382c1, 0x0, 0x16, 0x60, 0x6c, 0x1, 0x2, 0x9, 0x56, 0x6, 0x12, 0x2, 0x2, 0x30, 0xc, 0x18, 0x4, 0x0, 0xc, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x4, 0xd, 0x36, 0x2, 0x2, 0x1]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x7}, {0x6, 0x8}, {0x0, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0x5, 0x7}, {0x0, 0xa}, {0x6}, {}, {0x6}, {0x1, 0x9}, {0x4}, {0x4, 0x3}, {0x7, 0x2}, {0x4, 0x1}, {0x6, 0x6}, {0x5, 0x2}, {0x7}, {0x7, 0x3}, {0x4, 0x1}, {0x2}, {0x0, 0x2}, {0x3, 0x5}, {0x1, 0x4}, {0x4}, {0x7, 0x5}, {0x4, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x1, 0x3}, {0x2}, {0x5, 0x4}, {0x0, 0xa}, {0x4, 0x2}, {0x2, 0x5}, {0x0, 0x2}, {0x1}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x4}, {0x1, 0x6}, {0x7, 0x6}, {0x4, 0x2}, {0x4, 0x3}, {0x2, 0x3}, {0x5, 0x9}, {0x2, 0x8}, {0x2, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x1}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x76, 0x6c, 0x1b, 0x18, 0x4, 0x24, 0x36, 0x1, 0xe35cc3cd67b7f77d, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1ff, 0xff20, 0x1000, 0xfff, 0xdc2, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x100, 0x7, 0x10, 0x4, 0x5, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x6, 0x40, 0x1, 0x7dc8, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x6, 0x4}, {0x2, 0x9}, {0x4, 0xa}, {0x5, 0x7}, {0x3, 0x5}, {0x2, 0x7}, {0x0, 0x8}, {0x1, 0x1}, {0x4, 0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x5, 0x1}, {0x1, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x6}, {0x3, 0x5}, {0x6, 0x8}, {0x6}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x5, 0x7}, {0x7, 0x1}, {0x2}, {0x1, 0x9}, {0x0, 0x1}, {0x7, 0x7}, {0x2, 0x7}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x4}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x0, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x5, 0x5, 0x90c, 0x8, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x2}, {0x0, 0x4}, {0x0, 0x9}, {0x6, 0x7}, {0x2, 0x5}, {0x0, 0x3}, {0x7}, {0x3, 0x9}, {0x1}, {0x7}, {0x5, 0xa}, {0x2, 0x8}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x6}, {0x7, 0x9}, {0x4, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x1, 0x5}, {0x2, 0xa}, {0x6, 0x7}, {0x2}, {0x5, 0x1}, {0x7, 0x3}, {0x7}, {0x2, 0x4}, {0x0, 0x6}, {0x2}, {0x7, 0x9}, {0x1, 0x3}, {0x0, 0x6}, {0x4, 0x7}, {0x3, 0x1}, {0x4, 0x9}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x4}, {0x5, 0x9}, {0x1, 0x8}, {0x5}, {0x6, 0x1}, {0x2}, {0x0, 0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x7, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0x1}, {0x6, 0x1}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0x9}, {0x1, 0x7}, {0x2, 0xa}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1, 0x800, 0xb020, 0x44ef, 0x0, 0x8a00, 0xfffb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x3, 0x2, 0xfff, 0xf, 0x3, 0x2]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x6, 0x8}, {0x6, 0x3}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x48, 0x48, 0x18, 0x5, 0x6c, 0x3c, 0x5, 0x9, 0x6c, 0x36, 0x1, 0x60, 0x36, 0x60, 0x24, 0xb, 0x4, 0x3, 0x71, 0x0, 0x48, 0x1b, 0x16, 0x12, 0x56, 0x18, 0xc, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x6}, {0x4, 0x8}, {0x5, 0x5}, {0x2, 0xa}, {0x2, 0x5}, {0x3, 0x5}, {0x0, 0x2}, {0x6, 0x5}, {0x5, 0x3}, {0x4, 0x4}, {0x1, 0x2}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x2}, {0x7}, {0x2, 0xa}, {0x5, 0x8}, {0x4, 0x8}, {0x2, 0x7}, {0x5, 0x6}, {0x7, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x108, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x492c, 0x9, 0x5, 0x0, 0x8, 0x200, 0xe38, 0x4]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x30, 0x2, 0x6c, 0x2, 0x48, 0x24, 0x3, 0x18, 0x18, 0xb, 0x1, 0x60, 0x48, 0x48, 0x30, 0x9, 0xb, 0x3, 0x6c, 0x5, 0x18, 0x1b, 0x2e, 0xc, 0x3, 0x16, 0xc, 0x18, 0x48]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x200, 0x3ff, 0x4fff, 0x100, 0x100, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6, 0x9}, {0x5, 0x1}, {0x3}, {0x4, 0x5}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x9}, {0x5, 0xa}, {0x2, 0x1}, {0x0, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x6, 0x9}, {0x6, 0x2}, {0x5, 0x2}, {0x4, 0x8}, {0x1, 0x4}, {0x4, 0x6}, {0x7, 0x2}, {0x7, 0x7}, {0x3, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x4, 0xa}, {0x2, 0x7}, {0x5}, {0x1, 0x6}, {0x1, 0x3}, {0x5, 0x7}, {0x5, 0x1}, {0x6, 0x4}, {0x2, 0xa}, {0x3, 0x3}, {0x2}, {0x1, 0x1}, {0x7, 0x8}, {0x0, 0x9}, {0x7, 0x9}, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x3}, {0x3, 0x5}, {0x5, 0x5}, {0x3, 0x5}, {0x7, 0x4}, {0x7, 0x6}, {0x6, 0x7}, {0x7, 0x4}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {}, {0x7, 0x7}, {0x1, 0x3}, {0x6, 0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x9}, {0x5}, {0x1}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x5}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x6}, {0x3, 0xa}, {0x0, 0xa}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x145, 0x78a9, 0x0, 0x7, 0x3, 0x8000]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x56, 0x7ff, 0x3, 0x8, 0x8, 0x9, 0x3, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x1, 0x0, 0x8d8, 0x6, 0xfff7, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0xcf8}, 0x1, 0x0, 0x0, 0xc000}, 0x20000055) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x20, r9, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800c}, 0x4) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001800), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001840)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001880)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000001cc0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x84, r10, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x884}, 0x0) kernel console output (not intermixed with test programs): 3] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.164973][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.172268][ T5863] bridge_slave_1: entered allmulticast mode [ 90.180933][ T5863] bridge_slave_1: entered promiscuous mode [ 90.188117][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.195239][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.202698][ T5878] bridge_slave_0: entered allmulticast mode [ 90.210990][ T5878] bridge_slave_0: entered promiscuous mode [ 90.275335][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.282654][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.290534][ T5878] bridge_slave_1: entered allmulticast mode [ 90.298352][ T5878] bridge_slave_1: entered promiscuous mode [ 90.305002][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.312666][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.320051][ T5861] bridge_slave_0: entered allmulticast mode [ 90.327931][ T5861] bridge_slave_0: entered promiscuous mode [ 90.413459][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.421682][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.429043][ T5861] bridge_slave_1: entered allmulticast mode [ 90.436408][ T5861] bridge_slave_1: entered promiscuous mode [ 90.443396][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.450606][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.457889][ T5874] bridge_slave_0: entered allmulticast mode [ 90.465124][ T5874] bridge_slave_0: entered promiscuous mode [ 90.475703][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.488810][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.500615][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.512742][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.538648][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.545860][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.553550][ T5874] bridge_slave_1: entered allmulticast mode [ 90.561621][ T5874] bridge_slave_1: entered promiscuous mode [ 90.584119][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.612043][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.654401][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.719886][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.746062][ T5862] team0: Port device team_slave_0 added [ 90.754204][ T5863] team0: Port device team_slave_0 added [ 90.762555][ T5878] team0: Port device team_slave_0 added [ 90.786262][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.800093][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.811188][ T5862] team0: Port device team_slave_1 added [ 90.832885][ T5863] team0: Port device team_slave_1 added [ 90.858670][ T5878] team0: Port device team_slave_1 added [ 90.905509][ T5184] Bluetooth: hci1: command tx timeout [ 90.905509][ T5869] Bluetooth: hci2: command tx timeout [ 90.910842][ T5872] Bluetooth: hci0: command tx timeout [ 90.944470][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.951535][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.978097][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.988835][ T5872] Bluetooth: hci3: command tx timeout [ 91.025838][ T5861] team0: Port device team_slave_0 added [ 91.047463][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.054441][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.080724][ T5872] Bluetooth: hci4: command tx timeout [ 91.084614][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.107539][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.114505][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.143507][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.161224][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.168344][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.195035][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.209390][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.216595][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.242999][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.255986][ T5861] team0: Port device team_slave_1 added [ 91.263523][ T5874] team0: Port device team_slave_0 added [ 91.272276][ T5874] team0: Port device team_slave_1 added [ 91.315325][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.322776][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.349894][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.389202][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.396206][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.422238][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.454792][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.462696][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.489949][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.502141][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.509633][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.535898][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.594169][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.601974][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.628367][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.675690][ T5863] hsr_slave_0: entered promiscuous mode [ 91.682640][ T5863] hsr_slave_1: entered promiscuous mode [ 91.694622][ T5862] hsr_slave_0: entered promiscuous mode [ 91.702017][ T5862] hsr_slave_1: entered promiscuous mode [ 91.708424][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 91.714233][ T5862] Cannot create hsr debugfs directory [ 91.764007][ T5878] hsr_slave_0: entered promiscuous mode [ 91.770547][ T5878] hsr_slave_1: entered promiscuous mode [ 91.778976][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 91.784756][ T5878] Cannot create hsr debugfs directory [ 91.892913][ T5861] hsr_slave_0: entered promiscuous mode [ 91.899425][ T5861] hsr_slave_1: entered promiscuous mode [ 91.905514][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 91.911778][ T5861] Cannot create hsr debugfs directory [ 92.012676][ T5874] hsr_slave_0: entered promiscuous mode [ 92.020362][ T5874] hsr_slave_1: entered promiscuous mode [ 92.027129][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 92.032880][ T5874] Cannot create hsr debugfs directory [ 92.105232][ T982] cfg80211: failed to load regulatory.db [ 92.553793][ T5878] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.573879][ T5878] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.589332][ T5878] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.610005][ T5878] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.668427][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.685086][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.699676][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.727860][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.798851][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.811143][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.840293][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.862422][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.929227][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.942260][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.953663][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.986953][ T5872] Bluetooth: hci2: command tx timeout [ 92.988316][ T5869] Bluetooth: hci0: command tx timeout [ 92.992391][ T5872] Bluetooth: hci1: command tx timeout [ 93.007737][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.057223][ T5872] Bluetooth: hci3: command tx timeout [ 93.137083][ T5872] Bluetooth: hci4: command tx timeout [ 93.142937][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.160715][ T5874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.171779][ T5874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.211067][ T5874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.235717][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.243876][ T5874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.288695][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.331696][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.339088][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.380656][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.393194][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.400371][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.412982][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.482942][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.514913][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.522077][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.543121][ T4088] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.550424][ T4088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.562460][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.569692][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.644743][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.651933][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.685931][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.776212][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.794479][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.841903][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.849140][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.904102][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.918137][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.925320][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.984194][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.992023][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.034643][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.077321][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.084521][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.508390][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.643886][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.721448][ T5861] veth0_vlan: entered promiscuous mode [ 94.804263][ T5861] veth1_vlan: entered promiscuous mode [ 94.855986][ T5862] veth0_vlan: entered promiscuous mode [ 94.895754][ T5862] veth1_vlan: entered promiscuous mode [ 94.914912][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.936114][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.963933][ T5878] veth0_vlan: entered promiscuous mode [ 95.009468][ T5878] veth1_vlan: entered promiscuous mode [ 95.053103][ T5861] veth0_macvtap: entered promiscuous mode [ 95.059056][ T5184] Bluetooth: hci2: command tx timeout [ 95.068732][ T5184] Bluetooth: hci1: command tx timeout [ 95.076742][ T5872] Bluetooth: hci0: command tx timeout [ 95.094206][ T5862] veth0_macvtap: entered promiscuous mode [ 95.104181][ T5863] veth0_vlan: entered promiscuous mode [ 95.116972][ T5861] veth1_macvtap: entered promiscuous mode [ 95.133199][ T5862] veth1_macvtap: entered promiscuous mode [ 95.148658][ T5872] Bluetooth: hci3: command tx timeout [ 95.184172][ T5863] veth1_vlan: entered promiscuous mode [ 95.209666][ T5878] veth0_macvtap: entered promiscuous mode [ 95.218045][ T5872] Bluetooth: hci4: command tx timeout [ 95.220456][ T5874] veth0_vlan: entered promiscuous mode [ 95.237683][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.251243][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.273898][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.294064][ T5878] veth1_macvtap: entered promiscuous mode [ 95.308897][ T1007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.319688][ T1007] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.333797][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.355126][ T1007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.364627][ T1007] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.380136][ T5874] veth1_vlan: entered promiscuous mode [ 95.410549][ T1007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.438655][ T1007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.448668][ T1007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.460495][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.475808][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.496068][ T1007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.539342][ T1007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.553341][ T5863] veth0_macvtap: entered promiscuous mode [ 95.585279][ T1007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.595517][ T1007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.614069][ T5863] veth1_macvtap: entered promiscuous mode [ 95.637531][ T1007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.651803][ T5874] veth0_macvtap: entered promiscuous mode [ 95.653093][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.670489][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.704031][ T5874] veth1_macvtap: entered promiscuous mode [ 95.781914][ T4808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.794325][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.803490][ T4808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.805522][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.819100][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.872681][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.883279][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.930688][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.940577][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.962516][ T4088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.968628][ T4808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.979850][ T4808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.012287][ T4088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.023672][ T4088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.061830][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.073862][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.096208][ T4088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.118923][ T4088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.152375][ T4088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.164975][ T4088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.213812][ T4088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.264627][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.286565][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.485973][ T4088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.502728][ T4088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.582729][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.593247][ T6000] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 96.608786][ T5996] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 96.621812][ T5996] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 96.630891][ T5996] gretap1: entered promiscuous mode [ 96.636206][ T5996] gretap1: entered allmulticast mode [ 96.649884][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.686745][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.764126][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.797962][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.865512][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.883332][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.141975][ T6015] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.145445][ T5872] Bluetooth: hci0: command tx timeout [ 97.155420][ T5869] Bluetooth: hci1: command tx timeout [ 97.162511][ T5872] Bluetooth: hci2: command tx timeout [ 97.236440][ T5872] Bluetooth: hci3: command tx timeout [ 97.307618][ T5872] Bluetooth: hci4: command tx timeout [ 97.433751][ T6023] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.635691][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 97.679086][ T6033] netlink: 'syz.3.16': attribute type 2 has an invalid length. [ 97.737067][ T6037] netlink: 'syz.1.17': attribute type 11 has an invalid length. [ 97.746400][ T6037] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17'. [ 97.903716][ T6048] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 98.091888][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.100212][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.322361][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.337000][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.522819][ T6045] gretap1: left promiscuous mode [ 98.552725][ T4808] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.561931][ T4808] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.674605][ T4808] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.703368][ T4808] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.765632][ T6081] netlink: 'syz.4.29': attribute type 10 has an invalid length. [ 98.844999][ T6081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.894094][ T6081] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 98.957821][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 99.077093][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.32'. [ 99.350903][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 99.500849][ T6108] lo speed is unknown, defaulting to 1000 [ 99.520691][ T6108] lo speed is unknown, defaulting to 1000 [ 99.536223][ T6108] lo speed is unknown, defaulting to 1000 [ 99.553618][ T6108] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.596421][ T6108] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 99.651412][ T6122] netlink: 'syz.0.39': attribute type 17 has an invalid length. [ 99.678409][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 99.692368][ T6122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.39'. [ 99.753825][ T6126] netlink: 'syz.4.41': attribute type 1 has an invalid length. [ 99.756050][ T6108] lo speed is unknown, defaulting to 1000 [ 99.785388][ T6108] lo speed is unknown, defaulting to 1000 [ 99.833703][ T6108] lo speed is unknown, defaulting to 1000 [ 99.883113][ T6108] lo speed is unknown, defaulting to 1000 [ 99.912304][ T6108] lo speed is unknown, defaulting to 1000 [ 100.005650][ T6133] netlink: 196 bytes leftover after parsing attributes in process `syz.1.42'. [ 100.462503][ T6161] netlink: 'syz.4.52': attribute type 1 has an invalid length. [ 100.506372][ T6163] bond0: entered allmulticast mode [ 100.541047][ T6163] bond_slave_0: entered allmulticast mode [ 100.571130][ T6163] bond_slave_1: entered allmulticast mode [ 100.746189][ T6161] veth3: entered promiscuous mode [ 100.793929][ T6176] syz.1.55 uses obsolete (PF_INET,SOCK_PACKET) [ 100.859400][ T6179] Zero length message leads to an empty skb [ 101.459872][ T6201] netlink: 'syz.0.63': attribute type 33 has an invalid length. [ 101.507601][ T6201] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 101.631904][ T6205] lo: entered allmulticast mode [ 101.646045][ T6205] lo: left allmulticast mode [ 101.704212][ T6214] batadv0: entered promiscuous mode [ 101.748267][ T6214] bond0: entered promiscuous mode [ 101.753356][ T6214] bond_slave_0: entered promiscuous mode [ 101.786890][ T6214] bond_slave_1: entered promiscuous mode [ 101.818568][ T6214] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 101.847801][ T6214] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 101.920420][ T6214] hsr1: entered allmulticast mode [ 101.925520][ T6214] batadv0: entered allmulticast mode [ 101.954339][ T6214] bond0: entered allmulticast mode [ 101.965971][ T6214] bond_slave_0: entered allmulticast mode [ 102.007072][ T6214] bond_slave_1: entered allmulticast mode [ 102.024754][ T6214] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 102.100056][ T6233] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 102.142876][ T6233] __nla_validate_parse: 5 callbacks suppressed [ 102.142894][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72'. [ 102.195585][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 102.460725][ T6248] netlink: 'syz.2.77': attribute type 1 has an invalid length. [ 102.473148][ T6254] bond0: entered promiscuous mode [ 102.486740][ T6254] bond_slave_0: entered promiscuous mode [ 102.504228][ T6254] bond_slave_1: entered promiscuous mode [ 102.534980][ T6253] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 102.551929][ T6253] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 102.568216][ T6256] veth0: entered promiscuous mode [ 102.599963][ T6252] veth0: left promiscuous mode [ 102.626194][ T6252] bond0: left promiscuous mode [ 102.649131][ T6252] bond_slave_0: left promiscuous mode [ 102.654775][ T6252] bond_slave_1: left promiscuous mode [ 102.753042][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'. [ 102.919589][ T982] IPVS: starting estimator thread 0... [ 102.925573][ T6271] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 103.017533][ T6281] warning: `syz.1.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.057159][ T6272] IPVS: using max 27 ests per chain, 64800 per kthread [ 103.065565][ T6281] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.88'. [ 103.201925][ T6284] vlan1: entered allmulticast mode [ 103.227991][ T6284] veth0_vlan: entered allmulticast mode [ 103.237412][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 103.258082][ T6282] raw_sendmsg: syz.0.85 forgot to set AF_INET. Fix it! [ 103.859317][ T6316] netlink: 32 bytes leftover after parsing attributes in process `syz.3.96'. [ 104.092810][ T6330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.102'. [ 104.116884][ T6330] unsupported nlmsg_type 40 [ 104.385410][ T6332] lo speed is unknown, defaulting to 1000 [ 104.538211][ T6345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.107'. [ 104.930517][ T6330] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 105.724145][ T6335] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.863476][ T6358] netlink: 32 bytes leftover after parsing attributes in process `syz.4.111'. [ 105.949979][ T6367] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.010107][ T6365] team0: Device wireguard0 is of different type [ 106.155036][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.116'. [ 106.202995][ T6377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.322441][ T6383] netlink: 'syz.0.117': attribute type 1 has an invalid length. [ 106.787688][ T6415] netlink: 'syz.4.126': attribute type 11 has an invalid length. [ 106.813521][ T6411] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 106.845562][ T6411] gretap1: entered promiscuous mode [ 106.851620][ T6411] gretap1: entered allmulticast mode [ 107.074479][ T6430] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 107.291258][ T6438] __nla_validate_parse: 6 callbacks suppressed [ 107.291288][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 107.311051][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'. [ 107.393473][ T6446] trusted_key: syz.4.136 sent an empty control message without MSG_MORE. [ 107.880726][ T6462] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 107.925051][ T6462] netlink: 36 bytes leftover after parsing attributes in process `syz.2.142'. [ 108.032065][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'. [ 108.039113][ T5968] IPVS: starting estimator thread 0... [ 108.053074][ T6467] xfrm1: entered promiscuous mode [ 108.058496][ T6467] xfrm1: entered allmulticast mode [ 108.118438][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'. [ 108.142372][ T6471] IPVS: using max 27 ests per chain, 64800 per kthread [ 108.469178][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 108.592166][ T6493] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.765410][ T6503] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20004 [ 109.020055][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.157'. [ 109.174598][ T6523] vxcan1: tx address claim with dest, not broadcast [ 109.550378][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 109.689108][ T6558] netlink: 96 bytes leftover after parsing attributes in process `syz.3.168'. [ 109.949399][ T6574] netlink: 'syz.1.174': attribute type 1 has an invalid length. [ 109.961407][ T6574] netlink: 224 bytes leftover after parsing attributes in process `syz.1.174'. [ 109.973516][ T6574] block nbd1: not configured, cannot reconfigure [ 110.177641][ T6589] tipc: Can't bind to reserved service type 1 [ 110.505584][ T6601] veth0: entered promiscuous mode [ 110.522197][ T6601] veth0: left promiscuous mode [ 110.643198][ T6611] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 110.685739][ T6612] macvtap1: entered promiscuous mode [ 110.716401][ T6612] macvtap1: entered allmulticast mode [ 110.749120][ T6612] bond_slave_0: entered promiscuous mode [ 110.755033][ T6612] bond_slave_1: entered promiscuous mode [ 110.781978][ T6612] bond0: entered allmulticast mode [ 110.820101][ T6612] bond_slave_0: entered allmulticast mode [ 110.826327][ T6612] bond_slave_1: entered allmulticast mode [ 110.834219][ T6612] bond0: entered promiscuous mode [ 110.843484][ T6612] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 110.852074][ T6612] team0: Device macvtap1 failed to register rx_handler [ 110.867861][ T6612] bond0: left allmulticast mode [ 110.881740][ T6612] bond_slave_0: left allmulticast mode [ 110.891887][ T6612] bond_slave_1: left allmulticast mode [ 110.919633][ T6612] bond0: left promiscuous mode [ 110.931185][ T6612] bond_slave_0: left promiscuous mode [ 110.936764][ T6612] bond_slave_1: left promiscuous mode [ 111.324944][ T6647] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 111.550376][ T6659] netlink: 'syz.3.202': attribute type 1 has an invalid length. [ 111.589442][ T6659] netlink: 'syz.3.202': attribute type 4 has an invalid length. [ 111.792545][ T6673] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 111.799315][ T6673] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 111.803228][ T6671] syzkaller0: entered promiscuous mode [ 111.820192][ T6671] syzkaller0: entered allmulticast mode [ 112.555407][ T6705] tipc: Enabling of bearer rejected, media not registered [ 112.682673][ T6710] netlink: 'syz.0.222': attribute type 29 has an invalid length. [ 112.697838][ T6710] netlink: 'syz.0.222': attribute type 29 has an invalid length. [ 112.707400][ T6710] __nla_validate_parse: 12 callbacks suppressed [ 112.707418][ T6710] netlink: 500 bytes leftover after parsing attributes in process `syz.0.222'. [ 112.754325][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 112.790854][ T6710] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 112.816717][ T6710] team0: Device veth1_macvtap failed to register rx_handler [ 112.899728][ T6710] syz.0.222 (6710) used greatest stack depth: 17912 bytes left [ 113.049509][ T6722] Driver unsupported XDP return value 0 on prog (id 98) dev N/A, expect packet loss! [ 113.131483][ T6727] netlink: 'syz.3.229': attribute type 1 has an invalid length. [ 113.197087][ T6727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.622002][ T6727] bond1: (slave veth3): Enslaving as an active interface with a down link [ 113.758687][ T6733] bond1: (slave veth0_to_bond): making interface the new active one [ 113.782590][ T6742] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 113.790840][ T6733] veth0_to_bond: entered promiscuous mode [ 113.798541][ T6733] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 114.006001][ T6749] netlink: 56 bytes leftover after parsing attributes in process `syz.1.235'. [ 114.050265][ T6749] netlink: 56 bytes leftover after parsing attributes in process `syz.1.235'. [ 114.324166][ T6763] netlink: 80 bytes leftover after parsing attributes in process `syz.1.242'. [ 114.342647][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 114.527205][ T6779] tipc: Started in network mode [ 114.543501][ T6779] tipc: Node identity 080211000001, cluster identity 4711 [ 114.554029][ T6779] tipc: Enabled bearer , priority 0 [ 114.596986][ T6785] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 114.626886][ T6786] openvswitch: netlink: Invalid VLAN frame [ 114.637740][ T6784] nft_compat: unsupported protocol 0 [ 114.647029][ T6785] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 114.679009][ T6779] tipc: Resetting bearer [ 115.128879][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 115.169052][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.253'. [ 115.268358][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 115.299691][ T6808] netlink: 20 bytes leftover after parsing attributes in process `syz.3.253'. [ 115.376890][ T6813] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 115.667763][ T9] tipc: Node number set to 134418688 [ 115.669399][ T6821] bridge: RTM_NEWNEIGH with invalid ether address [ 116.988515][ T6870] team1: entered promiscuous mode [ 117.008277][ T6870] team1: entered allmulticast mode [ 117.320520][ T6895] dvmrp0: entered allmulticast mode [ 117.343937][ T6894] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 117.648761][ T6912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.685690][ T6915] netlink: 'syz.2.293': attribute type 1 has an invalid length. [ 117.708338][ T6913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.984338][ T6930] __nla_validate_parse: 5 callbacks suppressed [ 117.984377][ T6930] netlink: 5084 bytes leftover after parsing attributes in process `syz.0.294'. [ 118.064337][ T6934] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 118.382807][ T6948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.803688][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.304'. [ 119.451440][ T7005] sctp: [Deprecated]: syz.0.316 (pid 7005) Use of int in max_burst socket option deprecated. [ 119.451440][ T7005] Use struct sctp_assoc_value instead [ 119.757956][ T7035] syzkaller0: entered promiscuous mode [ 119.763608][ T7035] syzkaller0: entered allmulticast mode [ 120.417328][ T7044] netlink: 788 bytes leftover after parsing attributes in process `syz.2.324'. [ 120.648607][ T7057] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.329'. [ 120.909030][ T7081] unknown channel width for channel at 909000KHz? [ 121.325989][ T7102] netlink: 'syz.0.341': attribute type 1 has an invalid length. [ 121.810113][ T7132] netlink: 48 bytes leftover after parsing attributes in process `syz.4.351'. [ 121.820357][ T7134] unknown channel width for channel at 909000KHz? [ 121.827630][ T7134] unknown channel width for channel at 909000KHz? [ 121.834082][ T7134] unknown channel width for channel at 909000KHz? [ 121.896820][ T7139] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 122.561764][ T37] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.594743][ T37] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.618187][ T37] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.630299][ T37] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.757412][ T7190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.365'. [ 122.783729][ T7190] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 122.868051][ T7196] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 123.063187][ T7203] netlink: 'syz.4.368': attribute type 2 has an invalid length. [ 123.154166][ T7213] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 123.323303][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 123.331382][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 123.352921][ T7226] netlink: 'syz.3.374': attribute type 12 has an invalid length. [ 123.364591][ T7222] netlink: 52 bytes leftover after parsing attributes in process `syz.4.373'. [ 123.765443][ T7251] netlink: 36 bytes leftover after parsing attributes in process `syz.3.381'. [ 124.043099][ T7258] netlink: 224 bytes leftover after parsing attributes in process `syz.4.382'. [ 124.319512][ T7284] IPVS: length: 24 != 3445464 [ 124.521769][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 124.579135][ T7290] geneve2: entered promiscuous mode [ 124.637433][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 124.714115][ T7299] netlink: 'syz.1.393': attribute type 1 has an invalid length. [ 124.733328][ T7301] netlink: 224 bytes leftover after parsing attributes in process `syz.4.390'. [ 124.904612][ T7311] netlink: 44 bytes leftover after parsing attributes in process `syz.1.393'. [ 124.958184][ T7304] gretap1: entered promiscuous mode [ 125.047385][ T12] veth0_to_bond: left promiscuous mode [ 125.219632][ T7322] netlink: 104 bytes leftover after parsing attributes in process `syz.0.400'. [ 125.472960][ T7335] tipc: Enabling of bearer rejected, failed to enable media [ 126.043699][ T7362] lo speed is unknown, defaulting to 1000 [ 126.684003][ T7410] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 126.963738][ T7428] netlink: 'syz.2.419': attribute type 42 has an invalid length. [ 126.984049][ T7426] 8021q: VLANs not supported on xfrm0 [ 126.991426][ T7426] sock: sock_timestamping_bind_phc: sock not bind to device [ 127.122959][ T7432] macvtap1: entered promiscuous mode [ 127.128781][ T7432] vlan0: entered promiscuous mode [ 127.134347][ T7432] macvtap1: entered allmulticast mode [ 127.144087][ T7432] vlan0: entered allmulticast mode [ 127.151477][ T7432] veth0_vlan: entered allmulticast mode [ 127.193517][ T7436] macvtap2: entered promiscuous mode [ 127.199066][ T7436] macvtap2: entered allmulticast mode [ 127.227293][ T7432] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 127.435110][ T7451] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 127.453704][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.461973][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.478721][ T7444] bond0: left allmulticast mode [ 127.483660][ T7444] bond_slave_0: left allmulticast mode [ 127.491418][ T7444] bond_slave_1: left allmulticast mode [ 127.543230][ T7444] bridge_slave_0: left allmulticast mode [ 127.551990][ T7444] bridge_slave_0: left promiscuous mode [ 127.559518][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.578326][ T7444] bridge_slave_1: left allmulticast mode [ 127.584060][ T7444] bridge_slave_1: left promiscuous mode [ 127.591940][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.604094][ T7444] bond1: (slave veth0_to_bond): Releasing active interface [ 127.618932][ T7444] bond0: (slave bond_slave_0): Releasing backup interface [ 127.635722][ T7444] bond0: (slave bond_slave_1): Releasing backup interface [ 127.652839][ T7444] team0: Port device team_slave_0 removed [ 127.671890][ T7444] team0: Port device team_slave_1 removed [ 127.682164][ T7444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.694454][ T7444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.712070][ T7444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.724248][ T7444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.805925][ T7444] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 127.849393][ T7444] gretap1: left promiscuous mode [ 127.854372][ T7444] gretap1: left allmulticast mode [ 127.862083][ T7444] xfrm1: left promiscuous mode [ 127.868772][ T7444] xfrm1: left allmulticast mode [ 127.878765][ T7444] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 127.902594][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.912891][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.944195][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.956592][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.042960][ T7459] netlink: 'syz.1.428': attribute type 1 has an invalid length. [ 128.065077][ T7459] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 128.261532][ T7477] sctp: [Deprecated]: syz.1.434 (pid 7477) Use of int in max_burst socket option. [ 128.261532][ T7477] Use struct sctp_assoc_value instead [ 128.333802][ T7476] gretap1: entered promiscuous mode [ 128.352234][ T7476] gretap1: entered allmulticast mode [ 128.522749][ T7482] __nla_validate_parse: 9 callbacks suppressed [ 128.522769][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.436'. [ 128.747290][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 128.762059][ T7508] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 128.770865][ T7508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.843737][ T7514] netlink: 'syz.2.445': attribute type 10 has an invalid length. [ 128.858641][ T7514] bridge0: port 3(team0) entered blocking state [ 128.865273][ T7514] bridge0: port 3(team0) entered disabled state [ 128.885617][ T7514] team0: entered allmulticast mode [ 128.903087][ T7514] team_slave_0: entered allmulticast mode [ 128.935768][ T7514] team_slave_1: entered allmulticast mode [ 128.950166][ T7514] team0: left allmulticast mode [ 128.955220][ T7514] team_slave_0: left allmulticast mode [ 128.962789][ T7514] team_slave_1: left allmulticast mode [ 129.058818][ T7531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.447'. [ 129.445417][ T7550] veth0: entered promiscuous mode [ 129.468101][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'. [ 129.523580][ T7553] Bluetooth: MGMT ver 1.23 [ 129.587674][ T7550] veth0 (unregistering): left promiscuous mode [ 129.990819][ T7580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.462'. [ 130.026632][ T7580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.462'. [ 130.070157][ T7580] gretap0: entered promiscuous mode [ 130.077104][ T7580] batadv_slave_1: entered promiscuous mode [ 130.084112][ T7580] debugfs: 'hsr1' already exists in 'hsr' [ 130.090226][ T7580] Cannot create hsr debugfs directory [ 130.113094][ T7584] batadv1: entered allmulticast mode [ 130.127784][ T7588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.465'. [ 130.498137][ T5872] Bluetooth: hci4: command tx timeout [ 130.630260][ T7614] netlink: 'syz.3.472': attribute type 13 has an invalid length. [ 130.768868][ T7614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.779107][ T7614] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.794436][ T7614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.839307][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 131.713475][ T7637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.484'. [ 132.328362][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'. [ 132.534340][ T7672] syzkaller1: entered promiscuous mode [ 132.550281][ T7672] syzkaller1: entered allmulticast mode [ 133.182846][ T7707] netlink: 'syz.0.506': attribute type 4 has an invalid length. [ 133.219589][ T7707] netlink: 'syz.0.506': attribute type 8 has an invalid length. [ 133.466906][ T7717] netlink: 'syz.0.507': attribute type 4 has an invalid length. [ 134.834004][ T7748] __nla_validate_parse: 4 callbacks suppressed [ 134.834024][ T7748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.513'. [ 135.047078][ T7753] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 135.054926][ T7753] nbd: error processing sock list [ 135.112634][ T7753] block nbd0: shutting down sockets [ 135.153293][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.517'. [ 135.332703][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 135.346809][ T7768] netlink: 'syz.2.521': attribute type 3 has an invalid length. [ 135.367112][ T7768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.473883][ T7772] tipc: Started in network mode [ 135.522324][ T7772] tipc: Node identity 3ae3f6e25d7d, cluster identity 4711 [ 135.530848][ T7772] tipc: Enabled bearer , priority 0 [ 135.538726][ T7775] syzkaller0: entered promiscuous mode [ 135.554697][ T7775] syzkaller0: entered allmulticast mode [ 135.590658][ T7772] tipc: Resetting bearer [ 135.601884][ T7771] tipc: Resetting bearer [ 135.624825][ T7771] tipc: Disabling bearer [ 135.858949][ T7784] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 136.047482][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.529'. [ 136.136468][ T7796] netlink: 40 bytes leftover after parsing attributes in process `syz.0.531'. [ 136.169330][ T7798] tipc: Enabling of bearer rejected, failed to enable media [ 136.204532][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.529'. [ 136.235072][ T7791] netlink: 'syz.3.529': attribute type 15 has an invalid length. [ 136.255852][ T7800] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 136.306571][ T7800] netlink: 'syz.4.533': attribute type 2 has an invalid length. [ 136.324151][ T7803] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 136.375803][ T7803] netlink: 'syz.4.533': attribute type 2 has an invalid length. [ 137.083594][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 137.725317][ T7849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.548'. [ 138.179989][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.430147][ T7847] validate_nla: 1 callbacks suppressed [ 138.430167][ T7847] netlink: 'syz.4.548': attribute type 3 has an invalid length. [ 138.900623][ T7877] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.558'. [ 138.950391][ T7880] netlink: 'syz.3.560': attribute type 17 has an invalid length. [ 138.959259][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 138.976206][ T7877] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.993686][ T7880] gretap0: entered promiscuous mode [ 139.003919][ T7880] gretap0: left promiscuous mode [ 139.052373][ T7877] team0: Device ip6gre1 is of different type [ 139.639705][ T7907] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 139.826374][ T7925] nbd: must specify a device to reconfigure [ 139.838961][ T7925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.914086][ T7927] __nla_validate_parse: 1 callbacks suppressed [ 139.914117][ T7927] netlink: 132 bytes leftover after parsing attributes in process `syz.4.575'. [ 139.957973][ T7927] gre0: entered promiscuous mode [ 140.604314][ T7967] IPVS: set_ctl: invalid protocol: 135 172.30.0.4:20000 [ 141.085891][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'. [ 141.243135][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 141.437362][ T7989] netlink: 132 bytes leftover after parsing attributes in process `syz.3.591'. [ 141.471204][ T7994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.593'. [ 141.797315][ T8006] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 142.095469][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 142.111066][ T8023] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 142.119340][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 142.449061][ T8049] netlink: 'syz.1.609': attribute type 2 has an invalid length. [ 142.468213][ T8049] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.609'. [ 142.480134][ T8040] netlink: 48 bytes leftover after parsing attributes in process `syz.3.606'. [ 142.486981][ T8049] nbd: must specify a device to reconfigure [ 142.525087][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.606'. [ 142.796228][ T8064] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 143.127813][ T8081] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 143.632303][ T8111] netlink: 'syz.1.628': attribute type 29 has an invalid length. [ 143.652479][ T8111] netlink: 'syz.1.628': attribute type 29 has an invalid length. [ 143.674995][ T8111] netlink: 'syz.1.628': attribute type 29 has an invalid length. [ 143.684153][ T8111] netlink: 'syz.1.628': attribute type 29 has an invalid length. [ 144.656336][ T8160] vlan2: entered promiscuous mode [ 144.679100][ T8160] bridge0: entered promiscuous mode [ 144.699377][ T8162] netlink: zone id is out of range [ 144.704592][ T8162] netlink: zone id is out of range [ 144.728029][ T8162] netlink: zone id is out of range [ 144.752097][ T8162] netlink: zone id is out of range [ 144.783486][ T8162] netlink: zone id is out of range [ 144.808922][ T8162] netlink: zone id is out of range [ 144.808944][ T8168] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 144.814122][ T8162] netlink: get zone limit has 8 unknown bytes [ 144.863754][ T8168] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 145.373602][ T8200] __nla_validate_parse: 8 callbacks suppressed [ 145.373623][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 145.441431][ T8200] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 145.843541][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 145.937719][ T8218] erspan0: entered promiscuous mode [ 145.976389][ T8218] macvtap1: entered promiscuous mode [ 145.982706][ T8218] macvtap1: entered allmulticast mode [ 145.993821][ T8218] erspan0: entered allmulticast mode [ 146.278115][ T8233] sctp: [Deprecated]: syz.1.666 (pid 8233) Use of int in maxseg socket option. [ 146.278115][ T8233] Use struct sctp_assoc_value instead [ 146.309681][ T8237] netlink: 'syz.0.667': attribute type 3 has an invalid length. [ 146.315495][ T8238] netlink: 'syz.0.667': attribute type 3 has an invalid length. [ 146.355892][ T8238] netlink: 'syz.0.667': attribute type 5 has an invalid length. [ 146.562694][ T8249] netlink: 'syz.0.672': attribute type 1 has an invalid length. [ 146.601806][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 147.116245][ T8278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.679'. [ 147.161399][ T8275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.679'. [ 147.476799][ T8294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.685'. [ 147.493522][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 148.298702][ T8337] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 148.882382][ T8360] netlink: 'syz.2.702': attribute type 10 has an invalid length. [ 148.891791][ T8360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.924756][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 148.942166][ T8360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.970938][ T8360] batadv0 (unregistering): left promiscuous mode [ 149.001903][ T8367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.705'. [ 149.085247][ T8366] netlink: 104 bytes leftover after parsing attributes in process `syz.0.703'. [ 149.479034][ T8388] vcan0: tx drop: invalid sa for name 0x0000000000080000 [ 150.323572][ T8412] macsec0: entered promiscuous mode [ 150.347437][ T8412] macsec0: entered allmulticast mode [ 150.412429][ T8413] veth1_macvtap: entered allmulticast mode [ 150.423390][ T8413] macsec0: left promiscuous mode [ 150.432909][ T8413] macsec0: left allmulticast mode [ 150.440028][ T8413] veth1_macvtap: left allmulticast mode [ 150.641701][ T8442] netlink: 'syz.3.724': attribute type 11 has an invalid length. [ 150.677313][ T8442] __nla_validate_parse: 2 callbacks suppressed [ 150.677342][ T8442] netlink: 224 bytes leftover after parsing attributes in process `syz.3.724'. [ 150.735408][ T8438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.723'. [ 150.777374][ T8442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.780723][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 150.795771][ T8438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.723'. [ 150.826890][ T8438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.723'. [ 150.861648][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.726'. [ 150.892111][ T8438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.723'. [ 151.004933][ T8455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.727'. [ 151.021064][ T8455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.727'. [ 151.187329][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'. [ 151.690707][ T8491] bridge_slave_1: left allmulticast mode [ 151.706343][ T8491] bridge_slave_1: left promiscuous mode [ 151.719288][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.738214][ T8491] bridge_slave_0: left allmulticast mode [ 151.744502][ T8491] bridge_slave_0: left promiscuous mode [ 151.751281][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.094085][ T8514] netlink: 'syz.4.745': attribute type 10 has an invalid length. [ 152.144500][ T8514] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 152.323679][ T8524] netlink: 'syz.4.751': attribute type 3 has an invalid length. [ 152.339251][ T8523] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 152.654828][ T8549] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 152.802093][ T8549] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 152.828573][ T8549] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 152.849173][ T8549] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 153.030176][ T8556] tipc: Started in network mode [ 153.043458][ T8556] tipc: Node identity 32c18b250153, cluster identity 4711 [ 153.073790][ T8556] tipc: Enabled bearer , priority 0 [ 153.109360][ T8560] syzkaller0: entered promiscuous mode [ 153.115052][ T8560] syzkaller0: entered allmulticast mode [ 153.235354][ T8560] tipc: Resetting bearer [ 153.262289][ T8550] tipc: Resetting bearer [ 153.273722][ T8580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.300471][ T8550] tipc: Disabling bearer [ 153.478643][ T8591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.784352][ T8607] netlink: 'syz.2.773': attribute type 10 has an invalid length. [ 153.808087][ T8607] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 153.817317][ T8607] team0: Failed to send options change via netlink (err -105) [ 153.824838][ T8607] team0: Port device dummy0 added [ 153.834655][ T8607] netlink: 'syz.2.773': attribute type 10 has an invalid length. [ 153.844181][ T8607] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 153.858236][ T8607] team0: Failed to send options change via netlink (err -105) [ 153.866122][ T8607] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 153.906803][ T8607] team0: Port device dummy0 removed [ 153.938870][ T8607] dummy0: entered promiscuous mode [ 153.944761][ T8607] dummy0: entered allmulticast mode [ 153.952136][ T8607] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.961637][ T8616] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 153.981714][ T8617] geneve2: entered promiscuous mode [ 154.500406][ T8641] syzkaller0: entered promiscuous mode [ 154.506160][ T8641] syzkaller0: entered allmulticast mode [ 156.167967][ T8677] __nla_validate_parse: 10 callbacks suppressed [ 156.167986][ T8677] netlink: 40 bytes leftover after parsing attributes in process `syz.4.795'. [ 156.195253][ T8680] netlink: 'syz.3.797': attribute type 3 has an invalid length. [ 156.331434][ T8685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.798'. [ 156.932925][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'. [ 157.061923][ T8730] netlink: 44 bytes leftover after parsing attributes in process `syz.3.810'. [ 157.077501][ T8730] netlink: 43 bytes leftover after parsing attributes in process `syz.3.810'. [ 157.111657][ T8730] netlink: 'syz.3.810': attribute type 5 has an invalid length. [ 157.146617][ T8730] netlink: 43 bytes leftover after parsing attributes in process `syz.3.810'. [ 157.245027][ T8741] netlink: 'syz.2.814': attribute type 64 has an invalid length. [ 157.278725][ T8741] netlink: 5 bytes leftover after parsing attributes in process `syz.2.814'. [ 157.307991][ T8743] netlink: 'syz.0.815': attribute type 1 has an invalid length. [ 157.328250][ T8741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'. [ 157.466490][ T8752] netlink: 'syz.3.819': attribute type 3 has an invalid length. [ 157.563945][ T8758] netlink: 44 bytes leftover after parsing attributes in process `syz.2.821'. [ 157.583417][ T8761] IPVS: Error connecting to the multicast addr [ 157.786895][ T8756] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.810328][ T8775] Bluetooth: MGMT ver 1.23 [ 157.833797][ T8773] netlink: 'syz.2.824': attribute type 6 has an invalid length. [ 157.871513][ T8756] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 157.904661][ T8780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.825'. [ 158.120880][ T8786] openvswitch: netlink: Missing key (keys=40, expected=100) [ 158.610058][ T8827] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32766) [ 158.622928][ T8827] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 158.834431][ T8838] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 158.933347][ T8846] netlink: 'syz.3.845': attribute type 1 has an invalid length. [ 159.742294][ T8885] pim6reg: entered allmulticast mode [ 159.778426][ T8885] pim6reg: left allmulticast mode [ 159.845344][ T8892] tipc: Enabling of bearer rejected, failed to enable media [ 160.417033][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 161.256387][ T8956] __nla_validate_parse: 11 callbacks suppressed [ 161.256407][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'. [ 161.365274][ T8960] netlink: 232 bytes leftover after parsing attributes in process `syz.4.882'. [ 161.540820][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.885'. [ 161.555379][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.885'. [ 161.734593][ T8975] netlink: 'syz.1.889': attribute type 4 has an invalid length. [ 162.040627][ T8996] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 162.128642][ T9004] netlink: 'syz.2.897': attribute type 1 has an invalid length. [ 162.430325][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'. [ 163.083968][ T9057] netlink: 'syz.4.912': attribute type 1 has an invalid length. [ 163.233020][ T9064] openvswitch: netlink: IPv4 tunnel dst address is zero [ 163.288847][ T9057] bond1: entered promiscuous mode [ 163.330103][ T9057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.411490][ T9065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.421294][ T9065] bond1: (slave bond2): making interface the new active one [ 163.429831][ T9065] bond2: entered promiscuous mode [ 163.437551][ T9065] bond1: (slave bond2): Enslaving as an active interface with an up link [ 163.472329][ T9078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.581573][ T9080] netlink: 100 bytes leftover after parsing attributes in process `syz.1.921'. [ 163.788613][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 163.819505][ T9094] netlink: 176 bytes leftover after parsing attributes in process `syz.0.924'. [ 163.850501][ T9094] netlink: 'syz.0.924': attribute type 5 has an invalid length. [ 163.957443][ T9103] : renamed from bridge_slave_0 (while UP) [ 164.052548][ T9111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.929'. [ 164.063790][ T9111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.929'. [ 164.574430][ T9134] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 164.813106][ T9147] openvswitch: netlink: Flow actions attr not present in new flow. [ 164.899474][ T9149] netlink: 'syz.2.941': attribute type 11 has an invalid length. [ 164.934124][ T9113] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 164.934187][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.951136][ T9149] netlink: 'syz.2.941': attribute type 11 has an invalid length. [ 164.975150][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.998320][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.033057][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.520041][ T9188] netlink: 'syz.0.953': attribute type 2 has an invalid length. [ 166.222572][ T9234] block nbd0: NBD_DISCONNECT [ 166.241559][ T9236] netlink: 'syz.1.965': attribute type 9 has an invalid length. [ 166.290753][ T9234] netlink: 'syz.0.964': attribute type 10 has an invalid length. [ 166.302069][ T9238] 8021q: VLANs not supported on tunl0 [ 166.456200][ T9244] tipc: Started in network mode [ 166.462324][ T9244] tipc: Node identity 22440f3a20d8, cluster identity 4711 [ 166.469910][ T9244] tipc: Enabled bearer , priority 0 [ 166.523089][ T9245] syzkaller0: entered promiscuous mode [ 166.553945][ T9245] syzkaller0: entered allmulticast mode [ 166.644348][ T9244] tipc: Resetting bearer [ 166.661857][ T9251] tipc: Enabled bearer , priority 0 [ 166.669797][ T9251] syzkaller0: entered promiscuous mode [ 166.675753][ T9251] syzkaller0: entered allmulticast mode [ 166.724527][ T9243] tipc: Resetting bearer [ 166.756100][ T9243] tipc: Disabling bearer [ 166.756128][ T9258] netlink: 'syz.0.975': attribute type 1 has an invalid length. [ 166.770915][ T9255] __nla_validate_parse: 11 callbacks suppressed [ 166.770932][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'. [ 166.819623][ T9258] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.842195][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'. [ 166.845872][ T9259] tipc: Resetting bearer [ 166.899538][ T9250] tipc: Resetting bearer [ 166.934432][ T9250] tipc: Disabling bearer [ 166.983242][ T9264] veth0: entered promiscuous mode [ 166.993794][ T9264] veth0: left promiscuous mode [ 167.170351][ T9281] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 167.342827][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 167.405449][ T9294] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 167.470089][ T9293] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 168.117939][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 168.170725][ T9326] openvswitch: netlink: Message has 4 unknown bytes. [ 168.186536][ T9326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.207295][ T9330] netlink: 'syz.4.996': attribute type 15 has an invalid length. [ 168.224369][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.996'. [ 168.321149][ T4808] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 168.347716][ T4808] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 168.382975][ T4808] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 168.407497][ T4808] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 168.541824][ T9348] netlink: 'syz.2.999': attribute type 17 has an invalid length. [ 168.560992][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'. [ 168.597985][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.999'. [ 168.699603][ T9350] erspan0: left allmulticast mode [ 168.705038][ T9350] macvtap1: left promiscuous mode [ 168.711180][ T9350] macvtap1: left allmulticast mode [ 168.727010][ T9348] gretap0: entered promiscuous mode [ 168.734643][ T9348] gretap0: left promiscuous mode [ 168.757181][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 168.785597][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 168.796665][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.806886][ T7401] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.829371][ T7401] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.839267][ T7401] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.233318][ T9378] tipc: Started in network mode [ 169.254482][ T9378] tipc: Node identity 122caaf5dac4, cluster identity 4711 [ 169.272875][ T9378] tipc: Enabled bearer , priority 0 [ 169.404704][ T9387] syzkaller0: entered promiscuous mode [ 169.456607][ T9387] syzkaller0: entered allmulticast mode [ 169.633642][ T9377] tipc: Resetting bearer [ 169.715653][ T9377] tipc: Disabling bearer [ 169.726710][ T9407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1018'. [ 169.824170][ T9401] veth5: entered promiscuous mode [ 169.831239][ T9401] veth5: entered allmulticast mode [ 169.910071][ T9414] netlink: 'syz.3.1019': attribute type 8 has an invalid length. [ 170.066024][ T9427] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 170.112804][ T9427] netlink: 'syz.2.1023': attribute type 16 has an invalid length. [ 170.120975][ T9427] netlink: 'syz.2.1023': attribute type 17 has an invalid length. [ 170.261714][ T9427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.274564][ T9427] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.312001][ T9427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.337723][ T9] lo speed is unknown, defaulting to 1000 [ 170.346407][ T9448] netlink: 'syz.0.1026': attribute type 23 has an invalid length. [ 170.356682][ T9] syz2: Port: 1 Link ACTIVE [ 170.765689][ T9458] tipc: Enabling of bearer rejected, already enabled [ 170.781372][ T9458] tipc: Resetting bearer [ 170.912624][ T37] tipc: Resetting bearer [ 171.034287][ T9464] sctp: [Deprecated]: syz.2.1033 (pid 9464) Use of int in max_burst socket option. [ 171.034287][ T9464] Use struct sctp_assoc_value instead [ 171.285546][ T9476] IPVS: length: 177 != 8 [ 171.307537][ T9481] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21 [ 172.100463][ T9519] netlink: 'syz.0.1048': attribute type 1 has an invalid length. [ 172.164461][ T9519] nbd: device at index 0 is going down [ 172.183733][ T9523] nbd: device at index 0 is going down [ 172.421816][ T9532] netlink: 'syz.0.1050': attribute type 1 has an invalid length. [ 172.435062][ T5927] udevd[5927]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 172.455879][ T9532] __nla_validate_parse: 44 callbacks suppressed [ 172.455897][ T9532] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1050'. [ 172.745985][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 173.699229][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'. [ 173.721278][ T9577] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 173.918497][ T9591] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1063'. [ 173.970867][ T9591] xt_socket: unknown flags 0xd0 [ 173.979220][ T9593] tipc: Enabling of bearer rejected, already enabled [ 174.057876][ T9590] lo speed is unknown, defaulting to 1000 [ 174.488871][ T9610] netlink: 'syz.0.1070': attribute type 1 has an invalid length. [ 174.496849][ T9610] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1070'. [ 174.509728][ T9610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1070'. [ 174.660232][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 174.766141][ T9624] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.1074'. [ 174.778155][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 174.787727][ T9628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1075'. [ 174.807384][ T9628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1075'. [ 174.813150][ T9624] netlink: 'syz.4.1074': attribute type 4 has an invalid length. [ 174.857073][ T9] IPVS: starting estimator thread 0... [ 174.889553][ T9628] gretap1: entered promiscuous mode [ 174.905146][ T9628] gretap1: entered allmulticast mode [ 174.912274][ T9590] FAULT_INJECTION: forcing a failure. [ 174.912274][ T9590] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 174.930715][ T9590] CPU: 0 UID: 0 PID: 9590 Comm: syz.3.1069 Not tainted syzkaller #0 PREEMPT(full) [ 174.930739][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 174.930758][ T9590] Call Trace: [ 174.930766][ T9590] [ 174.930774][ T9590] dump_stack_lvl+0x189/0x250 [ 174.930805][ T9590] ? __pfx____ratelimit+0x10/0x10 [ 174.930825][ T9590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.930847][ T9590] ? __pfx__printk+0x10/0x10 [ 174.930873][ T9590] ? __might_fault+0xb0/0x130 [ 174.930911][ T9590] should_fail_ex+0x414/0x560 [ 174.930944][ T9590] _copy_from_user+0x2d/0xb0 [ 174.930970][ T9590] ___sys_sendmsg+0x158/0x2a0 [ 174.930997][ T9590] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.931059][ T9590] ? __fget_files+0x2a/0x420 [ 174.931074][ T9590] ? __fget_files+0x3a0/0x420 [ 174.931102][ T9590] __x64_sys_sendmsg+0x19b/0x260 [ 174.931128][ T9590] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.931162][ T9590] ? __pfx_ksys_write+0x10/0x10 [ 174.931185][ T9590] ? rcu_is_watching+0x15/0xb0 [ 174.931209][ T9590] ? do_syscall_64+0xbe/0x3b0 [ 174.931234][ T9590] do_syscall_64+0xfa/0x3b0 [ 174.931253][ T9590] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.931272][ T9590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.931290][ T9590] ? clear_bhb_loop+0x60/0xb0 [ 174.931312][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.931330][ T9590] RIP: 0033:0x7f035558eec9 [ 174.931351][ T9590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.931366][ T9590] RSP: 002b:00007f03564e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.931388][ T9590] RAX: ffffffffffffffda RBX: 00007f03557e5fa0 RCX: 00007f035558eec9 [ 174.931402][ T9590] RDX: 0000000024004010 RSI: 00002000000004c0 RDI: 0000000000000003 [ 174.931413][ T9590] RBP: 00007f03564e9090 R08: 0000000000000000 R09: 0000000000000000 [ 174.931424][ T9590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.931434][ T9590] R13: 00007f03557e6038 R14: 00007f03557e5fa0 R15: 00007ffcfe615fb8 [ 174.931464][ T9590] [ 174.977633][ T9631] IPVS: using max 26 ests per chain, 62400 per kthread [ 175.942538][ T9681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.035973][ T9683] lo speed is unknown, defaulting to 1000 [ 176.295154][ T9698] bridge2: entered promiscuous mode [ 176.332274][ T9698] bridge2: entered allmulticast mode [ 176.651995][ T9683] FAULT_INJECTION: forcing a failure. [ 176.651995][ T9683] name failslab, interval 1, probability 0, space 0, times 1 [ 176.700655][ T9683] CPU: 1 UID: 0 PID: 9683 Comm: syz.4.1093 Not tainted syzkaller #0 PREEMPT(full) [ 176.700682][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 176.700694][ T9683] Call Trace: [ 176.700702][ T9683] [ 176.700710][ T9683] dump_stack_lvl+0x189/0x250 [ 176.700738][ T9683] ? __pfx____ratelimit+0x10/0x10 [ 176.700759][ T9683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.700782][ T9683] ? __pfx__printk+0x10/0x10 [ 176.700817][ T9683] ? __pfx___might_resched+0x10/0x10 [ 176.700843][ T9683] should_fail_ex+0x414/0x560 [ 176.700885][ T9683] should_failslab+0xa8/0x100 [ 176.700916][ T9683] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 176.700945][ T9683] ? __alloc_skb+0x112/0x2d0 [ 176.700972][ T9683] __alloc_skb+0x112/0x2d0 [ 176.700999][ T9683] netlink_sendmsg+0x5c6/0xb30 [ 176.701031][ T9683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.701056][ T9683] ? aa_sock_msg_perm+0xf1/0x1d0 [ 176.701080][ T9683] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.701102][ T9683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.701143][ T9683] __sock_sendmsg+0x219/0x270 [ 176.701178][ T9683] ____sys_sendmsg+0x505/0x830 [ 176.701211][ T9683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.701248][ T9683] ? import_iovec+0x74/0xa0 [ 176.701286][ T9683] ___sys_sendmsg+0x21f/0x2a0 [ 176.701315][ T9683] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.701383][ T9683] ? __fget_files+0x2a/0x420 [ 176.701400][ T9683] ? __fget_files+0x3a0/0x420 [ 176.701431][ T9683] __x64_sys_sendmsg+0x19b/0x260 [ 176.701461][ T9683] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.701498][ T9683] ? __pfx_ksys_write+0x10/0x10 [ 176.701524][ T9683] ? rcu_is_watching+0x15/0xb0 [ 176.701551][ T9683] ? do_syscall_64+0xbe/0x3b0 [ 176.701578][ T9683] do_syscall_64+0xfa/0x3b0 [ 176.701600][ T9683] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.701621][ T9683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.701641][ T9683] ? clear_bhb_loop+0x60/0xb0 [ 176.701666][ T9683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.701686][ T9683] RIP: 0033:0x7f59d198eec9 [ 176.701704][ T9683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.701720][ T9683] RSP: 002b:00007f59d2740038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.701741][ T9683] RAX: ffffffffffffffda RBX: 00007f59d1be5fa0 RCX: 00007f59d198eec9 [ 176.701755][ T9683] RDX: 0000000024004010 RSI: 00002000000004c0 RDI: 0000000000000003 [ 176.701768][ T9683] RBP: 00007f59d2740090 R08: 0000000000000000 R09: 0000000000000000 [ 176.701780][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.701792][ T9683] R13: 00007f59d1be6038 R14: 00007f59d1be5fa0 R15: 00007ffe75d8d8c8 [ 176.701824][ T9683] [ 177.291140][ T9738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.461543][ T9728] __nla_validate_parse: 36 callbacks suppressed [ 177.461563][ T9728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1107'. [ 177.481722][ T9728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1107'. [ 177.555783][ T9728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1107'. [ 177.573914][ T9728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1107'. [ 177.594104][ T9728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1107'. [ 177.621489][ T9728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1107'. [ 177.663388][ T9728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1107'. [ 177.700413][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 177.751258][ T9728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1107'. [ 177.761810][ T9728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1107'. [ 177.771561][ T9728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1107'. [ 177.937771][ T9768] netlink: 'syz.1.1116': attribute type 1 has an invalid length. [ 178.095241][ T9775] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 178.291619][ T9788] sctp: [Deprecated]: syz.2.1124 (pid 9788) Use of int in maxseg socket option. [ 178.291619][ T9788] Use struct sctp_assoc_value instead [ 178.822487][ T9813] tipc: Enabled bearer , priority 0 [ 178.860081][ T9803] tipc: Resetting bearer [ 178.927623][ T9815] syzkaller0: entered promiscuous mode [ 178.934913][ T9815] syzkaller0: entered allmulticast mode [ 178.977702][ T9815] tipc: Resetting bearer [ 178.999572][ T9815] tipc: Disabling bearer [ 179.466642][ T9835] veth0: entered promiscuous mode [ 179.593406][ T9843] netlink: 'syz.4.1141': attribute type 24 has an invalid length. [ 180.208040][ T9875] netlink: 'syz.2.1149': attribute type 21 has an invalid length. [ 180.245862][ T9872] lo speed is unknown, defaulting to 1000 [ 180.305421][ T9834] veth0: left promiscuous mode [ 180.516514][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.524232][ T9887] bridge0: port 1() entered disabled state [ 180.824315][ T9897] netlink: 'syz.0.1156': attribute type 11 has an invalid length. [ 181.404174][ T9910] netlink: 'syz.2.1159': attribute type 4 has an invalid length. [ 181.587087][ T9916] netlink: 'syz.0.1161': attribute type 10 has an invalid length. [ 181.606730][ T9916] team0: Port device dummy0 added [ 181.630273][ T9914] netlink: 'syz.0.1161': attribute type 10 has an invalid length. [ 181.639284][ T9914] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 181.660909][ T9914] team0: Failed to send options change via netlink (err -105) [ 181.706214][ T9914] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 181.736969][ T9914] team0: Port device dummy0 removed [ 181.754049][ T9914] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 182.884012][ T9986] __nla_validate_parse: 44 callbacks suppressed [ 182.884032][ T9986] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1180'. [ 182.981807][ T9989] netlink: 'syz.0.1181': attribute type 11 has an invalid length. [ 183.070792][ T9995] tipc: New replicast peer: 255.255.255.255 [ 183.083369][ T9995] tipc: Enabled bearer , priority 10 [ 183.124250][ T9998] openvswitch: netlink: IP tunnel TTL not specified. [ 183.238059][T10007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1186'. [ 183.265062][T10007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.272686][T10007] IPv6: NLM_F_CREATE should be set when creating new route [ 183.312601][T10007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.331285][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 183.337111][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1188'. [ 183.354019][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1188'. [ 183.365853][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1188'. [ 183.368310][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1187'. [ 183.384156][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1188'. [ 183.444339][T10012] xt_socket: unknown flags 0xe4 [ 183.489653][T10023] sctp: [Deprecated]: syz.2.1190 (pid 10023) Use of int in max_burst socket option. [ 183.489653][T10023] Use struct sctp_assoc_value instead [ 183.621251][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'. [ 183.642981][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1192'. [ 183.735371][T10037] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 183.752969][T10040] netlink: 'syz.1.1196': attribute type 21 has an invalid length. [ 184.403946][T10068] tipc: New replicast peer: 255.255.255.255 [ 184.410554][T10068] tipc: Enabled bearer , priority 10 [ 184.724884][T10093] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 184.744689][T10093] netlink: 'syz.0.1211': attribute type 10 has an invalid length. [ 184.770801][T10091] : renamed from veth1_vlan [ 185.133089][T10108] netlink: 'syz.3.1217': attribute type 21 has an invalid length. [ 185.302863][T10121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.354940][T10124] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 185.411181][ T982] tipc: Node number set to 3370691317 [ 185.440000][T10127] netlink: 'syz.0.1226': attribute type 2 has an invalid length. [ 185.453122][T10127] netlink: 'syz.0.1226': attribute type 2 has an invalid length. [ 185.583770][T10136] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 185.602694][T10136] netlink: 'syz.1.1228': attribute type 2 has an invalid length. [ 185.819685][T10152] netlink: 'syz.1.1233': attribute type 1 has an invalid length. [ 185.857905][T10152] tipc: Enabling of bearer rejected, already enabled [ 185.919078][T10156] netlink: 'syz.0.1235': attribute type 9 has an invalid length. [ 185.968176][T10154] xt_l2tp: unknown flags: 10 [ 186.192448][T10167] C: renamed from lo (while UP) [ 187.178386][T10221] tipc: Enabling of bearer rejected, already enabled [ 187.227163][T10223] tipc: Enabled bearer , priority 0 [ 187.284913][T10223] syzkaller0: entered promiscuous mode [ 187.325026][T10223] syzkaller0: entered allmulticast mode [ 187.365209][T10223] tipc: Resetting bearer [ 187.413295][T10222] tipc: Resetting bearer [ 187.484689][T10222] tipc: Disabling bearer [ 187.595693][T10241] lo speed is unknown, defaulting to 1000 [ 187.755378][T10247] veth3: entered allmulticast mode [ 187.917270][T10262] __nla_validate_parse: 23 callbacks suppressed [ 187.917288][T10262] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1263'. [ 188.125963][ T13] tipc: Subscription rejected, illegal request [ 188.271371][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1272'. [ 188.297454][T10275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1272'. [ 188.308529][T10279] validate_nla: 2 callbacks suppressed [ 188.308545][T10279] netlink: 'syz.3.1273': attribute type 5 has an invalid length. [ 188.317405][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 188.338396][T10279] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1273'. [ 188.417751][T10241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1260'. [ 188.431142][T10279] tipc: Enabling of bearer rejected, failed to enable media [ 188.453834][T10241] FAULT_INJECTION: forcing a failure. [ 188.453834][T10241] name failslab, interval 1, probability 0, space 0, times 0 [ 188.469681][T10241] CPU: 0 UID: 0 PID: 10241 Comm: syz.0.1260 Not tainted syzkaller #0 PREEMPT(full) [ 188.469710][T10241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.469723][T10241] Call Trace: [ 188.469730][T10241] [ 188.469739][T10241] dump_stack_lvl+0x189/0x250 [ 188.469769][T10241] ? __pfx____ratelimit+0x10/0x10 [ 188.469791][T10241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.469819][T10241] ? __pfx__printk+0x10/0x10 [ 188.469855][T10241] ? __pfx___might_resched+0x10/0x10 [ 188.469873][T10241] ? fs_reclaim_acquire+0x7d/0x100 [ 188.469898][T10241] should_fail_ex+0x414/0x560 [ 188.469934][T10241] should_failslab+0xa8/0x100 [ 188.469966][T10241] __kmalloc_noprof+0xcb/0x4f0 [ 188.469993][T10241] ? fib_trie_table+0x33/0x1d0 [ 188.470022][T10241] fib_trie_table+0x33/0x1d0 [ 188.470049][T10241] fib_new_table+0x135/0x2d0 [ 188.470081][T10241] inet_rtm_newroute+0x115/0x210 [ 188.470110][T10241] ? __lock_acquire+0xab9/0xd20 [ 188.470142][T10241] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 188.470207][T10241] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 188.470236][T10241] rtnetlink_rcv_msg+0x7cf/0xb70 [ 188.470257][T10241] ? __lock_acquire+0xab9/0xd20 [ 188.470287][T10241] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 188.470307][T10241] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.470347][T10241] netlink_rcv_skb+0x208/0x470 [ 188.470371][T10241] ? __lock_acquire+0xab9/0xd20 [ 188.470399][T10241] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.470422][T10241] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.470456][T10241] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.470487][T10241] netlink_unicast+0x82f/0x9e0 [ 188.470526][T10241] ? __pfx_netlink_unicast+0x10/0x10 [ 188.470559][T10241] ? netlink_sendmsg+0x642/0xb30 [ 188.470577][T10241] ? skb_put+0x11b/0x210 [ 188.470604][T10241] netlink_sendmsg+0x805/0xb30 [ 188.470637][T10241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.470662][T10241] ? aa_sock_msg_perm+0xf1/0x1d0 [ 188.470685][T10241] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.470706][T10241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.470729][T10241] __sock_sendmsg+0x219/0x270 [ 188.470763][T10241] ____sys_sendmsg+0x505/0x830 [ 188.470795][T10241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.470831][T10241] ? import_iovec+0x74/0xa0 [ 188.470861][T10241] ___sys_sendmsg+0x21f/0x2a0 [ 188.470889][T10241] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.470956][T10241] ? __fget_files+0x2a/0x420 [ 188.470972][T10241] ? __fget_files+0x3a0/0x420 [ 188.471002][T10241] __x64_sys_sendmsg+0x19b/0x260 [ 188.471030][T10241] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.471067][T10241] ? __pfx_ksys_write+0x10/0x10 [ 188.471090][T10241] ? rcu_is_watching+0x15/0xb0 [ 188.471115][T10241] ? do_syscall_64+0xbe/0x3b0 [ 188.471143][T10241] do_syscall_64+0xfa/0x3b0 [ 188.471162][T10241] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.471182][T10241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.471201][T10241] ? clear_bhb_loop+0x60/0xb0 [ 188.471225][T10241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.471243][T10241] RIP: 0033:0x7fd1ce98eec9 [ 188.471261][T10241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.471276][T10241] RSP: 002b:00007fd1cf8b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.471296][T10241] RAX: ffffffffffffffda RBX: 00007fd1cebe5fa0 RCX: 00007fd1ce98eec9 [ 188.471310][T10241] RDX: 0000000024004010 RSI: 00002000000004c0 RDI: 0000000000000003 [ 188.471322][T10241] RBP: 00007fd1cf8b0090 R08: 0000000000000000 R09: 0000000000000000 [ 188.471333][T10241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.471344][T10241] R13: 00007fd1cebe6038 R14: 00007fd1cebe5fa0 R15: 00007fff75937bd8 [ 188.471382][T10241] [ 188.934159][ T5941] lo speed is unknown, defaulting to 1000 [ 188.940901][ T5941] syz2: Port: 1 Link DOWN [ 189.280055][T10303] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1277'. [ 189.311178][T10308] tipc: Enabling of bearer rejected, already enabled [ 189.561807][T10326] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1282'. [ 189.621359][T10333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.654762][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1284'. [ 189.685082][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 189.697975][T10337] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 189.882058][T10342] lo speed is unknown, defaulting to 1000 [ 190.052714][T10351] pim6reg527: entered allmulticast mode [ 190.307138][T10369] gretap2: entered promiscuous mode [ 190.742495][T10342] FAULT_INJECTION: forcing a failure. [ 190.742495][T10342] name failslab, interval 1, probability 0, space 0, times 0 [ 190.792159][T10342] CPU: 1 UID: 0 PID: 10342 Comm: syz.4.1288 Not tainted syzkaller #0 PREEMPT(full) [ 190.792190][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 190.792202][T10342] Call Trace: [ 190.792210][T10342] [ 190.792219][T10342] dump_stack_lvl+0x189/0x250 [ 190.792247][T10342] ? __pfx____ratelimit+0x10/0x10 [ 190.792269][T10342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.792293][T10342] ? __pfx__printk+0x10/0x10 [ 190.792327][T10342] ? __pfx___might_resched+0x10/0x10 [ 190.792345][T10342] ? fs_reclaim_acquire+0x7d/0x100 [ 190.792368][T10342] should_fail_ex+0x414/0x560 [ 190.792402][T10342] should_failslab+0xa8/0x100 [ 190.792432][T10342] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 190.792458][T10342] ? __alloc_skb+0x112/0x2d0 [ 190.792481][T10342] __alloc_skb+0x112/0x2d0 [ 190.792507][T10342] netlink_ack+0x146/0xa50 [ 190.792524][T10342] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 190.792555][T10342] netlink_rcv_skb+0x28c/0x470 [ 190.792570][T10342] ? __lock_acquire+0xab9/0xd20 [ 190.792593][T10342] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 190.792611][T10342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.792637][T10342] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.792660][T10342] netlink_unicast+0x82f/0x9e0 [ 190.792693][T10342] ? __pfx_netlink_unicast+0x10/0x10 [ 190.792718][T10342] ? netlink_sendmsg+0x642/0xb30 [ 190.792733][T10342] ? skb_put+0x11b/0x210 [ 190.792754][T10342] netlink_sendmsg+0x805/0xb30 [ 190.792778][T10342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.792798][T10342] ? aa_sock_msg_perm+0xf1/0x1d0 [ 190.792816][T10342] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.792841][T10342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.792859][T10342] __sock_sendmsg+0x219/0x270 [ 190.792886][T10342] ____sys_sendmsg+0x505/0x830 [ 190.792910][T10342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.792944][T10342] ? import_iovec+0x74/0xa0 [ 190.792968][T10342] ___sys_sendmsg+0x21f/0x2a0 [ 190.792990][T10342] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.793040][T10342] ? __fget_files+0x2a/0x420 [ 190.793053][T10342] ? __fget_files+0x3a0/0x420 [ 190.793076][T10342] __x64_sys_sendmsg+0x19b/0x260 [ 190.793099][T10342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.793127][T10342] ? __pfx_ksys_write+0x10/0x10 [ 190.793146][T10342] ? rcu_is_watching+0x15/0xb0 [ 190.793166][T10342] ? do_syscall_64+0xbe/0x3b0 [ 190.793189][T10342] do_syscall_64+0xfa/0x3b0 [ 190.793205][T10342] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.793221][T10342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.793237][T10342] ? clear_bhb_loop+0x60/0xb0 [ 190.793256][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.793270][T10342] RIP: 0033:0x7f59d198eec9 [ 190.793285][T10342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.793297][T10342] RSP: 002b:00007f59d2740038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.793314][T10342] RAX: ffffffffffffffda RBX: 00007f59d1be5fa0 RCX: 00007f59d198eec9 [ 190.793325][T10342] RDX: 0000000024004010 RSI: 00002000000004c0 RDI: 0000000000000003 [ 190.793335][T10342] RBP: 00007f59d2740090 R08: 0000000000000000 R09: 0000000000000000 [ 190.793345][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.793354][T10342] R13: 00007f59d1be6038 R14: 00007f59d1be5fa0 R15: 00007ffe75d8d8c8 [ 190.793379][T10342] [ 191.593554][T10407] netlink: 'syz.0.1307': attribute type 1 has an invalid length. [ 191.619213][T10407] netlink: 'syz.0.1307': attribute type 1 has an invalid length. [ 191.652104][T10407] hsr_slave_0: left promiscuous mode [ 191.676986][T10407] hsr_slave_1: left promiscuous mode [ 191.802912][T10416] netlink: 'syz.3.1309': attribute type 1 has an invalid length. [ 192.428542][T10435] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20002 [ 192.454419][T10432] lo speed is unknown, defaulting to 1000 [ 192.831831][T10447] xfrm1: entered allmulticast mode [ 193.028238][T10453] __nla_validate_parse: 10 callbacks suppressed [ 193.028257][T10453] netlink: 81 bytes leftover after parsing attributes in process `syz.1.1324'. [ 193.249306][T10432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1316'. [ 193.646669][ T5872] Bluetooth: hci4: link tx timeout [ 193.652217][ T5872] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 193.663015][ T5872] Bluetooth: hci4: link tx timeout [ 193.668977][ T5872] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.853141][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'. [ 193.982378][T10490] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1335'. [ 194.108166][T10499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1337'. [ 194.132062][T10493] syzkaller1: entered promiscuous mode [ 194.144620][T10493] syzkaller1: entered allmulticast mode [ 194.204049][T10499] netlink: 'syz.4.1337': attribute type 1 has an invalid length. [ 194.438420][T10516] netlink: 'syz.4.1342': attribute type 1 has an invalid length. [ 194.446378][T10516] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1342'. [ 194.462156][T10514] netlink: 'syz.0.1340': attribute type 3 has an invalid length. [ 194.470340][T10516] nbd: illegal input index 1048576 [ 194.614760][T10513] lo speed is unknown, defaulting to 1000 [ 194.781714][T10527] netlink: 'syz.0.1346': attribute type 1 has an invalid length. [ 194.880105][T10527] bond5: entered promiscuous mode [ 194.885735][T10527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.895996][T10525] block nbd1: server does not support multiple connections per device. [ 194.907476][T10525] block nbd1: shutting down sockets [ 194.933906][T10534] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1348'. [ 195.063524][T10532] 8021q: adding VLAN 0 to HW filter on device bond6 [ 195.085920][T10532] bond5: (slave bond6): making interface the new active one [ 195.094811][T10532] bond6: entered promiscuous mode [ 195.095468][T10517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1341'. [ 195.103454][T10532] bond5: (slave bond6): Enslaving as an active interface with an up link [ 195.162067][T10517] FAULT_INJECTION: forcing a failure. [ 195.162067][T10517] name failslab, interval 1, probability 0, space 0, times 0 [ 195.232497][T10517] CPU: 0 UID: 0 PID: 10517 Comm: syz.1.1341 Not tainted syzkaller #0 PREEMPT(full) [ 195.232524][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 195.232536][T10517] Call Trace: [ 195.232543][T10517] [ 195.232552][T10517] dump_stack_lvl+0x189/0x250 [ 195.232580][T10517] ? __pfx____ratelimit+0x10/0x10 [ 195.232601][T10517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.232625][T10517] ? __pfx__printk+0x10/0x10 [ 195.232649][T10517] ? netlink_unicast+0x82f/0x9e0 [ 195.232680][T10517] ? ___sys_sendmsg+0x21f/0x2a0 [ 195.232704][T10517] ? do_syscall_64+0xfa/0x3b0 [ 195.232755][T10517] should_fail_ex+0x414/0x560 [ 195.232788][T10517] should_failslab+0xa8/0x100 [ 195.232818][T10517] kmem_cache_alloc_noprof+0x73/0x3c0 [ 195.232847][T10517] ? skb_clone+0x212/0x3a0 [ 195.232894][T10517] skb_clone+0x212/0x3a0 [ 195.232924][T10517] __netlink_deliver_tap+0x404/0x850 [ 195.232960][T10517] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.232983][T10517] netlink_deliver_tap+0x19c/0x1b0 [ 195.233005][T10517] netlink_sendskb+0x68/0x140 [ 195.233038][T10517] netlink_unicast+0x397/0x9e0 [ 195.233065][T10517] ? __asan_memcpy+0x40/0x70 [ 195.233097][T10517] ? __pfx_netlink_unicast+0x10/0x10 [ 195.233139][T10517] netlink_rcv_skb+0x28c/0x470 [ 195.233161][T10517] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.233184][T10517] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.233219][T10517] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.233249][T10517] netlink_unicast+0x82f/0x9e0 [ 195.233289][T10517] ? __pfx_netlink_unicast+0x10/0x10 [ 195.233321][T10517] ? netlink_sendmsg+0x642/0xb30 [ 195.233339][T10517] ? skb_put+0x11b/0x210 [ 195.233366][T10517] netlink_sendmsg+0x805/0xb30 [ 195.233398][T10517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.233423][T10517] ? aa_sock_msg_perm+0xf1/0x1d0 [ 195.233445][T10517] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.233467][T10517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.233490][T10517] __sock_sendmsg+0x219/0x270 [ 195.233524][T10517] ____sys_sendmsg+0x505/0x830 [ 195.233555][T10517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.233589][T10517] ? import_iovec+0x74/0xa0 [ 195.233620][T10517] ___sys_sendmsg+0x21f/0x2a0 [ 195.233648][T10517] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.233714][T10517] ? __fget_files+0x2a/0x420 [ 195.233730][T10517] ? __fget_files+0x3a0/0x420 [ 195.233766][T10517] __x64_sys_sendmsg+0x19b/0x260 [ 195.233795][T10517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.233829][T10517] ? __pfx_ksys_write+0x10/0x10 [ 195.233853][T10517] ? rcu_is_watching+0x15/0xb0 [ 195.233880][T10517] ? do_syscall_64+0xbe/0x3b0 [ 195.233906][T10517] do_syscall_64+0xfa/0x3b0 [ 195.233927][T10517] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.233947][T10517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.233967][T10517] ? clear_bhb_loop+0x60/0xb0 [ 195.233992][T10517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.234010][T10517] RIP: 0033:0x7f2b2db8eec9 [ 195.234028][T10517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.234044][T10517] RSP: 002b:00007f2b2e942038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.234064][T10517] RAX: ffffffffffffffda RBX: 00007f2b2dde6090 RCX: 00007f2b2db8eec9 [ 195.234079][T10517] RDX: 0000000024004010 RSI: 00002000000004c0 RDI: 0000000000000003 [ 195.234092][T10517] RBP: 00007f2b2e942090 R08: 0000000000000000 R09: 0000000000000000 [ 195.234103][T10517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.234114][T10517] R13: 00007f2b2dde6128 R14: 00007f2b2dde6090 R15: 00007fffc2ce9be8 [ 195.234148][T10517] [ 195.615776][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 195.758850][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 195.798970][T10561] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 196.044482][T10583] erspan0: entered allmulticast mode [ 196.274141][T10595] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1365'. [ 196.295462][T10597] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 196.980687][T10638] lo speed is unknown, defaulting to 1000 [ 197.937826][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 199.026969][T10735] lo speed is unknown, defaulting to 1000 [ 199.217273][T10748] netlink: 'syz.1.1408': attribute type 7 has an invalid length. [ 199.238959][T10748] __nla_validate_parse: 2 callbacks suppressed [ 199.238978][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1408'. [ 199.296206][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1407'. [ 199.333280][T10744] netlink: 'syz.2.1407': attribute type 1 has an invalid length. [ 199.342300][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 199.431442][T10760] syz.1.1410 uses old SIOCAX25GETINFO [ 199.469277][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 199.503839][T10758] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.513797][T10758] bond2: (slave bond3): making interface the new active one [ 199.522199][T10758] bond2: (slave bond3): Enslaving as an active interface with an up link [ 199.530906][ T7399] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 199.551152][T10760] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 199.585769][ T7399] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 199.595002][ T7399] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 199.603887][ T7399] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 199.623394][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.940757][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.940842][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 225.984605][T10802] netlink: 'syz.2.1423': attribute type 1 has an invalid length. [ 225.994374][T10801] netlink: 'syz.0.1421': attribute type 8 has an invalid length. [ 226.175558][T10805] lo speed is unknown, defaulting to 1000 [ 226.494272][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1429'. [ 226.647154][T10828] IPVS: ip_vs_edit_dest(): server weight less than zero [ 226.841657][T10836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1433'. [ 226.863301][T10836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1433'. [ 227.449058][T10868] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1442'. [ 227.484347][T10872] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 227.513078][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1444'. [ 227.551815][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1444'. [ 227.676005][T10878] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1446'. [ 227.721173][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1447'. [ 227.764403][T10882] bond7: entered promiscuous mode [ 227.771126][T10882] bond7: entered allmulticast mode [ 227.776864][T10882] 8021q: adding VLAN 0 to HW filter on device bond7 [ 227.911272][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1451'. [ 227.996637][T10887] lo speed is unknown, defaulting to 1000 [ 228.251478][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'. [ 228.315317][T10899] netlink: 'syz.4.1454': attribute type 21 has an invalid length. [ 229.752680][T10962] lo speed is unknown, defaulting to 1000 [ 230.610901][T11010] netlink: 'syz.4.1488': attribute type 1 has an invalid length. [ 230.968769][T11031] netlink: 'syz.0.1493': attribute type 2 has an invalid length. [ 231.141152][T11036] xt_HMARK: proto mask must be zero with L3 mode [ 231.152387][T11033] lo speed is unknown, defaulting to 1000 [ 231.248050][T11040] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 231.514733][T11054] __nla_validate_parse: 12 callbacks suppressed [ 231.514754][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 231.929098][T11077] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1506'. [ 232.023246][T11077] sit0: entered promiscuous mode [ 232.046841][T11077] netlink: 'syz.3.1506': attribute type 1 has an invalid length. [ 232.082814][T11077] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1506'. [ 232.131812][T11087] sctp: [Deprecated]: syz.1.1509 (pid 11087) Use of int in maxseg socket option. [ 232.131812][T11087] Use struct sctp_assoc_value instead [ 232.210178][T11086] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 232.340562][T11097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1510'. [ 232.436939][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'. [ 232.824910][T11121] lo speed is unknown, defaulting to 1000 [ 232.894494][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1518'. [ 233.030507][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 233.441349][T11121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1517'. [ 233.601974][T11145] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1522'. [ 233.698215][T11148] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 233.961859][T11159] veth0: entered promiscuous mode [ 233.997360][T11158] veth0: left promiscuous mode [ 234.136844][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 234.143553][T11166] lo speed is unknown, defaulting to 1000 [ 234.581360][T11190] tipc: Enabled bearer , priority 0 [ 234.611095][T11190] syzkaller0: entered promiscuous mode [ 234.629104][T11190] syzkaller0: entered allmulticast mode [ 234.693783][T11190] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 234.725514][T11190] tipc: Resetting bearer [ 234.781705][T11187] tipc: Resetting bearer [ 234.823910][T11187] tipc: Disabling bearer [ 235.151070][T11215] bridge0: port 3(batadv1) entered blocking state [ 235.176280][T11215] bridge0: port 3(batadv1) entered disabled state [ 235.194226][T11215] batadv1: entered allmulticast mode [ 235.213088][T11215] batadv1: entered promiscuous mode [ 235.301438][T11228] tipc: Enabling of bearer rejected, already enabled [ 235.445775][T11228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.562666][T11228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.622356][ T7401] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 235.632500][ T7401] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 235.782876][T11228] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 235.802169][T11228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.935260][T11228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.133327][T11254] lo speed is unknown, defaulting to 1000 [ 236.254549][T11265] bond1: (slave veth3): Releasing active interface [ 236.379523][ T7399] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.539840][ T7401] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.653737][ T7399] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.730832][ T7399] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.974241][ T44] IPVS: starting estimator thread 0... [ 237.078530][T11300] IPVS: using max 26 ests per chain, 62400 per kthread [ 237.537245][T11315] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 237.693573][T11323] __nla_validate_parse: 5 callbacks suppressed [ 237.693592][T11323] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1569'. [ 237.757616][T11320] netlink: 'syz.1.1570': attribute type 2 has an invalid length. [ 237.765262][T11325] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 237.765536][T11320] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1570'. [ 237.894747][T11321] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1568'. [ 238.080637][T11336] lo speed is unknown, defaulting to 1000 [ 238.645869][T11366] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1580'. [ 238.841613][T11370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1581'. [ 238.852761][T11370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1581'. [ 239.676175][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 239.694193][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 239.797746][T11397] lo speed is unknown, defaulting to 1000 [ 240.065426][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'. [ 240.135101][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'. [ 240.712852][T11429] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 240.866093][T11435] netlink: 'syz.0.1601': attribute type 1 has an invalid length. [ 240.930614][T11441] lo speed is unknown, defaulting to 1000 [ 241.608878][T11464] tipc: Enabled bearer , priority 0 [ 241.616295][T11464] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 241.623922][T11464] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 241.641580][T11464] tipc: Resetting bearer [ 242.288379][T11485] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20000 [ 242.414768][T11494] virt_wifi0: mtu less than device minimum [ 242.650581][ T982] tipc: Node number set to 1738471138 [ 242.678636][T11503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.779943][T11500] tipc: Enabled bearer , priority 10 [ 242.799580][T11509] netlink: 'syz.4.1626': attribute type 1 has an invalid length. [ 242.910789][T11513] __nla_validate_parse: 10 callbacks suppressed [ 242.910806][T11513] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1627'. [ 243.176586][T11521] lo speed is unknown, defaulting to 1000 [ 243.394152][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1633'. [ 243.692963][T11544] lo speed is unknown, defaulting to 1000 [ 243.877077][T11544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1634'. [ 244.242700][T11565] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 244.307643][T11568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1641'. [ 244.416141][T11561] lo speed is unknown, defaulting to 1000 [ 244.585068][T11565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.606667][T11581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1641'. [ 244.731061][T11589] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1643'. [ 244.781111][T11569] veth7: entered promiscuous mode [ 244.801300][T11569] bond2: (slave veth7): Enslaving as an active interface with a down link [ 244.843276][T11575] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1641'. [ 244.865594][T11575] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1641'. [ 244.887406][T11575] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1641'. [ 245.991916][T11621] net veth1_virt_wifi .: renamed from virt_wifi0 [ 246.063896][T11625] lo speed is unknown, defaulting to 1000 [ 246.214156][T11630] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1654'. [ 247.204136][T11654] syzkaller1: entered promiscuous mode [ 247.285879][T11654] syzkaller1: entered allmulticast mode [ 247.754501][T11674] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 247.991813][T11683] __nla_validate_parse: 7 callbacks suppressed [ 247.991832][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 248.014975][T11679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1670'. [ 248.125819][T11684] lo speed is unknown, defaulting to 1000 [ 248.433871][T11695] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1677'. [ 249.442513][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1692'. [ 249.453121][T11745] batadv1: left allmulticast mode [ 249.462421][T11745] batadv1: left promiscuous mode [ 249.468750][T11745] bridge0: port 3(batadv1) entered disabled state [ 249.483142][T11745] bridge_slave_1: left allmulticast mode [ 249.490083][T11745] bridge_slave_1: left promiscuous mode [ 249.499565][T11745] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.522737][T11745] : left allmulticast mode [ 249.532918][T11745] : left promiscuous mode [ 249.548076][T11745] bridge0: port 1() entered disabled state [ 249.830810][T11759] lo speed is unknown, defaulting to 1000 [ 250.121103][T11773] vlan3: entered allmulticast mode [ 250.126287][T11773] hsr0: entered allmulticast mode [ 250.131518][T11773] hsr_slave_0: entered allmulticast mode [ 250.137237][T11773] hsr_slave_1: entered allmulticast mode [ 250.177423][T11775] netlink: 'syz.2.1700': attribute type 1 has an invalid length. [ 250.262823][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 250.483779][T11786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1706'. [ 250.504119][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1705'. [ 250.528128][T11787] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1705'. [ 250.572391][T11787] netlink: 'syz.3.1705': attribute type 5 has an invalid length. [ 250.662907][T11792] lo speed is unknown, defaulting to 1000 [ 250.975108][T11810] netlink: 'syz.0.1709': attribute type 4 has an invalid length. [ 251.061657][T11815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1713'. [ 251.102491][T11813] tipc: Enabled bearer , priority 0 [ 251.131314][T11812] syzkaller0: entered promiscuous mode [ 251.148493][T11812] syzkaller0: entered allmulticast mode [ 251.271119][T11812] tipc: Resetting bearer [ 251.354838][T11812] tipc: Disabling bearer [ 251.407410][T11833] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 251.602928][T11831] lo speed is unknown, defaulting to 1000 [ 252.307511][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 252.645285][T11883] netlink: 'syz.2.1730': attribute type 11 has an invalid length. [ 252.651997][T11887] netlink: 'syz.0.1733': attribute type 10 has an invalid length. [ 252.710332][T11883] netlink: 'syz.2.1730': attribute type 1 has an invalid length. [ 253.097363][T11904] netlink: 'syz.4.1736': attribute type 10 has an invalid length. [ 253.178541][T11904] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 253.209277][T11899] lo speed is unknown, defaulting to 1000 [ 253.349329][T11911] __nla_validate_parse: 1 callbacks suppressed [ 253.349347][T11911] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1739'. [ 253.404272][T11916] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1741'. [ 253.446601][T11916] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1741'. [ 253.573348][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1742'. [ 253.635008][T11923] tipc: Enabled bearer , priority 10 [ 253.643749][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1744'. [ 253.720811][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1744'. [ 253.820356][T11899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1735'. [ 253.880409][T11939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.511233][T11951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1750'. [ 254.750411][ T24] tipc: Node number set to 43781946 [ 254.959304][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 255.004406][T11970] bridge_slave_1 (unregistering): left allmulticast mode [ 255.031064][T11970] bridge_slave_1 (unregistering): left promiscuous mode [ 255.039676][T11970] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.255491][T11982] netlink: 'syz.4.1760': attribute type 21 has an invalid length. [ 255.261780][T11981] netlink: 'syz.0.1759': attribute type 1 has an invalid length. [ 255.289392][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 255.322302][T11984] netlink: 'syz.2.1761': attribute type 7 has an invalid length. [ 255.753534][T12003] lo speed is unknown, defaulting to 1000 [ 256.060857][T12020] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 256.143255][T12020] bond2: (slave vcan0): Error -95 calling set_mac_address [ 257.160108][T12073] tipc: Enabled bearer , priority 0 [ 257.184057][T12073] syzkaller0: entered promiscuous mode [ 257.190416][T12073] syzkaller0: entered allmulticast mode [ 257.320031][T12080] netlink: 'syz.1.1790': attribute type 2 has an invalid length. [ 257.574385][T12072] tipc: Resetting bearer [ 257.633105][T12072] tipc: Disabling bearer [ 257.832408][T12096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.881668][T12096] openvswitch: netlink: Invalid VLAN frame [ 258.527439][T12127] syzkaller1: entered promiscuous mode [ 258.532964][T12127] syzkaller1: entered allmulticast mode [ 258.726314][T12131] netlink: 'syz.3.1803': attribute type 11 has an invalid length. [ 258.867271][T12158] netlink: 'syz.2.1812': attribute type 58 has an invalid length. [ 258.901661][T12158] __nla_validate_parse: 29 callbacks suppressed [ 258.901680][T12158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1812'. [ 259.031493][T12171] netlink: 'syz.0.1815': attribute type 1 has an invalid length. [ 259.039565][T12171] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1815'. [ 259.050477][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 259.102761][T12173] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1816'. [ 259.294734][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1819'. [ 259.512445][T12192] tipc: Enabled bearer , priority 0 [ 259.563962][T12202] syzkaller0: entered promiscuous mode [ 259.582834][T12202] syzkaller0: entered allmulticast mode [ 259.638835][T12192] tipc: Resetting bearer [ 259.656708][T12190] tipc: Resetting bearer [ 259.727945][T12190] tipc: Disabling bearer [ 259.750916][T12210] openvswitch: netlink: IP tunnel TTL not specified. [ 260.008547][T12230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1833'. [ 260.133813][T12223] syzkaller1: entered promiscuous mode [ 260.147110][T12223] syzkaller1: entered allmulticast mode [ 260.177556][T12238] xt_bpf: check failed: parse error [ 260.325570][T12248] netlink: 'syz.1.1836': attribute type 21 has an invalid length. [ 260.358110][T12248] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.396060][T12248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.403445][T12248] IPv6: NLM_F_CREATE should be set when creating new route [ 260.411639][T12248] IPv6: NLM_F_CREATE should be set when creating new route [ 260.418965][T12248] IPv6: NLM_F_CREATE should be set when creating new route [ 260.502559][T12255] dvmrp0: entered allmulticast mode [ 260.518121][T12255] dvmrp0: left allmulticast mode [ 260.845438][T12279] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 261.044336][T12287] openvswitch: netlink: Key type 4624 is out of range max 32 [ 261.060982][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.099987][T12293] netlink: 'syz.2.1851': attribute type 13 has an invalid length. [ 261.169002][T12295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1851'. [ 261.192773][T12293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.213111][ T5941] lo speed is unknown, defaulting to 1000 [ 261.222000][ T5941] syz2: Port: 1 Link ACTIVE [ 261.242976][T12299] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1853'. [ 261.474522][T12307] netlink: 'syz.2.1857': attribute type 83 has an invalid length. [ 261.533976][T12310] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 261.555001][T12313] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 261.617663][T12319] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1859'. [ 261.636287][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1858'. [ 261.707827][T12326] bridge0: port 1(veth0_to_bridge) entered blocking state [ 261.722082][T12326] bridge0: port 1(veth0_to_bridge) entered disabled state [ 261.729846][T12326] veth0_to_bridge: entered allmulticast mode [ 261.754894][T12326] veth0_to_bridge: entered promiscuous mode [ 261.785455][T12321] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.800893][T12328] IPVS: Error connecting to the multicast addr [ 262.030642][T12340] netlink: 'syz.3.1864': attribute type 2 has an invalid length. [ 262.786154][T12389] lo: entered allmulticast mode [ 262.900369][T12389] lo speed is unknown, defaulting to 1000 [ 263.054174][T12388] lo: left allmulticast mode [ 286.493593][T12440] mac80211_hwsim hwsim5 : renamed from wlan1 [ 286.653777][T12456] netlink: 'syz.0.1897': attribute type 3 has an invalid length. [ 286.938657][T12470] wg1: entered promiscuous mode [ 286.944589][T12470] wg1: entered allmulticast mode [ 287.059699][T12467] veth11: entered promiscuous mode [ 287.082991][T12484] __nla_validate_parse: 11 callbacks suppressed [ 287.083011][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1903'. [ 287.162362][T12488] netlink: 'syz.0.1905': attribute type 1 has an invalid length. [ 287.249431][T12491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1906'. [ 287.265442][T12491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1906'. [ 287.349445][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'. [ 287.610851][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 287.658983][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 287.713082][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 287.725173][T12526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1917'. [ 287.739757][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 287.749794][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 288.218398][T12557] Bluetooth: MGMT ver 1.23 [ 288.262143][T12557] syzkaller1: entered promiscuous mode [ 288.269933][T12557] syzkaller1: entered allmulticast mode [ 288.293286][T12561] xt_l2tp: missing protocol rule (udp|l2tpip) [ 288.600738][T12578] netlink: 'syz.4.1936': attribute type 1 has an invalid length. [ 288.842996][T12605] netlink: 'syz.0.1938': attribute type 1 has an invalid length. [ 288.907236][T12605] bond8: (slave bridge5): making interface the new active one [ 288.915293][T12605] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 288.932923][T12610] syzkaller0: entered promiscuous mode [ 288.939190][T12610] syzkaller0: entered allmulticast mode [ 289.540041][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 289.853091][T12637] netlink: 'syz.3.1947': attribute type 1 has an invalid length. [ 290.472322][T12664] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 290.683097][T12689] netlink: 'syz.4.1964': attribute type 1 has an invalid length. [ 290.695375][T12689] netlink: 'syz.4.1964': attribute type 1 has an invalid length. [ 291.863734][T12763] netlink: 'syz.0.1984': attribute type 1 has an invalid length. [ 292.341122][T12789] veth0: mtu less than device minimum [ 292.710536][T12811] tipc: Enabled bearer , priority 0 [ 292.744091][T12811] syzkaller0: entered promiscuous mode [ 292.762040][T12811] syzkaller0: entered allmulticast mode [ 292.888952][T12821] [ 292.891332][T12821] ====================================================== [ 292.898347][T12821] WARNING: possible circular locking dependency detected [ 292.905372][T12821] syzkaller #0 Not tainted [ 292.909785][T12821] ------------------------------------------------------ [ 292.916915][T12821] syz.3.1998/12821 is trying to acquire lock: [ 292.922972][T12821] ffffffff8f68f7b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 292.932471][T12821] [ 292.932471][T12821] but task is already holding lock: [ 292.939827][T12821] ffffffff8f68f758 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 292.949407][T12821] [ 292.949407][T12821] which lock already depends on the new lock. [ 292.949407][T12821] [ 292.959821][T12821] [ 292.959821][T12821] the existing dependency chain (in reverse order) is: [ 292.968830][T12821] [ 292.968830][T12821] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 292.976745][T12821] lock_acquire+0x120/0x360 [ 292.981787][T12821] _raw_spin_lock_bh+0x36/0x50 [ 292.987088][T12821] nr_rt_ioctl+0x390/0xd50 [ 292.992039][T12821] sock_do_ioctl+0xdc/0x300 [ 292.997076][T12821] sock_ioctl+0x576/0x790 [ 293.001986][T12821] __se_sys_ioctl+0xfc/0x170 [ 293.007116][T12821] do_syscall_64+0xfa/0x3b0 [ 293.012166][T12821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.018597][T12821] [ 293.018597][T12821] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 293.026599][T12821] lock_acquire+0x120/0x360 [ 293.031640][T12821] _raw_spin_lock_bh+0x36/0x50 [ 293.036975][T12821] nr_rt_ioctl+0x193/0xd50 [ 293.041931][T12821] sock_do_ioctl+0xdc/0x300 [ 293.046969][T12821] sock_ioctl+0x576/0x790 [ 293.051832][T12821] __se_sys_ioctl+0xfc/0x170 [ 293.056945][T12821] do_syscall_64+0xfa/0x3b0 [ 293.061971][T12821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.068404][T12821] [ 293.068404][T12821] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 293.076236][T12821] validate_chain+0xb9b/0x2140 [ 293.081532][T12821] __lock_acquire+0xab9/0xd20 [ 293.086740][T12821] lock_acquire+0x120/0x360 [ 293.091769][T12821] _raw_spin_lock_bh+0x36/0x50 [ 293.097070][T12821] nr_rt_device_down+0xa9/0x720 [ 293.102458][T12821] nr_device_event+0x137/0x150 [ 293.107760][T12821] notifier_call_chain+0x1b3/0x3e0 [ 293.113405][T12821] netif_close_many+0x29c/0x410 [ 293.118771][T12821] netif_close+0x158/0x210 [ 293.123705][T12821] dev_close+0x10a/0x220 [ 293.128467][T12821] bpq_device_event+0x377/0x6a0 [ 293.133835][T12821] notifier_call_chain+0x1b3/0x3e0 [ 293.139469][T12821] netif_close_many+0x29c/0x410 [ 293.144835][T12821] netif_close+0x158/0x210 [ 293.149783][T12821] dev_close+0x10a/0x220 [ 293.154560][T12821] bond_setup_by_slave+0x5f/0x3f0 [ 293.160114][T12821] bond_enslave+0x7a0/0x3a70 [ 293.165230][T12821] bond_do_ioctl+0x635/0x9b0 [ 293.170344][T12821] bond_siocdevprivate+0x17e/0x350 [ 293.175974][T12821] dev_ifsioc+0xb57/0xf00 [ 293.180822][T12821] dev_ioctl+0x84c/0x1150 [ 293.185670][T12821] sock_ioctl+0x719/0x790 [ 293.190624][T12821] __se_sys_ioctl+0xfc/0x170 [ 293.195740][T12821] do_syscall_64+0xfa/0x3b0 [ 293.200763][T12821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.207175][T12821] [ 293.207175][T12821] other info that might help us debug this: [ 293.207175][T12821] [ 293.217395][T12821] Chain exists of: [ 293.217395][T12821] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 293.217395][T12821] [ 293.231310][T12821] Possible unsafe locking scenario: [ 293.231310][T12821] [ 293.238786][T12821] CPU0 CPU1 [ 293.244155][T12821] ---- ---- [ 293.249523][T12821] lock(nr_neigh_list_lock); [ 293.254208][T12821] lock(&nr_node->node_lock); [ 293.261494][T12821] lock(nr_neigh_list_lock); [ 293.268704][T12821] lock(nr_node_list_lock); [ 293.273300][T12821] [ 293.273300][T12821] *** DEADLOCK *** [ 293.273300][T12821] [ 293.281440][T12821] 2 locks held by syz.3.1998/12821: [ 293.286634][T12821] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 293.295427][T12821] #1: ffffffff8f68f758 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 293.305454][T12821] [ 293.305454][T12821] stack backtrace: [ 293.311345][T12821] CPU: 1 UID: 0 PID: 12821 Comm: syz.3.1998 Not tainted syzkaller #0 PREEMPT(full) [ 293.311364][T12821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.311386][T12821] Call Trace: [ 293.311394][T12821] [ 293.311402][T12821] dump_stack_lvl+0x189/0x250 [ 293.311425][T12821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.311444][T12821] ? __pfx__printk+0x10/0x10 [ 293.311466][T12821] ? print_lock_name+0xde/0x100 [ 293.311489][T12821] print_circular_bug+0x2ee/0x310 [ 293.311509][T12821] check_noncircular+0x134/0x160 [ 293.311529][T12821] validate_chain+0xb9b/0x2140 [ 293.311548][T12821] ? rt6_disable_ip+0x6b3/0x720 [ 293.311566][T12821] ? __lock_acquire+0xab9/0xd20 [ 293.311589][T12821] __lock_acquire+0xab9/0xd20 [ 293.311615][T12821] ? nr_rt_device_down+0xa9/0x720 [ 293.311636][T12821] lock_acquire+0x120/0x360 [ 293.311658][T12821] ? nr_rt_device_down+0xa9/0x720 [ 293.311685][T12821] ? nr_rt_device_down+0xa9/0x720 [ 293.311706][T12821] _raw_spin_lock_bh+0x36/0x50 [ 293.311730][T12821] ? nr_rt_device_down+0xa9/0x720 [ 293.311752][T12821] nr_rt_device_down+0xa9/0x720 [ 293.311774][T12821] ? do_raw_spin_unlock+0x122/0x240 [ 293.311796][T12821] nr_device_event+0x137/0x150 [ 293.311817][T12821] notifier_call_chain+0x1b3/0x3e0 [ 293.311838][T12821] netif_close_many+0x29c/0x410 [ 293.311857][T12821] ? __pfx_netif_close_many+0x10/0x10 [ 293.311874][T12821] ? bond_netdev_event+0x227/0xe80 [ 293.311895][T12821] netif_close+0x158/0x210 [ 293.311910][T12821] ? __pfx_netif_close+0x10/0x10 [ 293.311923][T12821] ? tun_device_event+0x77/0x1020 [ 293.311941][T12821] ? __pfx___neigh_ifdown+0x10/0x10 [ 293.311963][T12821] ? macsec_notify+0x104/0x660 [ 293.311985][T12821] dev_close+0x10a/0x220 [ 293.312004][T12821] bpq_device_event+0x377/0x6a0 [ 293.312020][T12821] notifier_call_chain+0x1b3/0x3e0 [ 293.312040][T12821] netif_close_many+0x29c/0x410 [ 293.312057][T12821] ? __pfx_netif_close_many+0x10/0x10 [ 293.312077][T12821] netif_close+0x158/0x210 [ 293.312091][T12821] ? __pfx_netif_close+0x10/0x10 [ 293.312104][T12821] ? do_raw_spin_lock+0x121/0x290 [ 293.312124][T12821] ? __local_bh_enable_ip+0x12d/0x1c0 [ 293.312139][T12821] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.312156][T12821] dev_close+0x10a/0x220 [ 293.312179][T12821] bond_setup_by_slave+0x5f/0x3f0 [ 293.312205][T12821] bond_enslave+0x7a0/0x3a70 [ 293.312235][T12821] ? finish_task_switch+0x266/0x950 [ 293.312256][T12821] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.312272][T12821] ? __pfx_bond_enslave+0x10/0x10 [ 293.312299][T12821] ? apparmor_capable+0x137/0x1b0 [ 293.312337][T12821] ? full_name_hash+0x92/0xe0 [ 293.312356][T12821] ? netdev_name_node_lookup+0xdf/0x120 [ 293.312380][T12821] bond_do_ioctl+0x635/0x9b0 [ 293.312399][T12821] ? __pfx_bond_do_ioctl+0x10/0x10 [ 293.312418][T12821] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 293.312435][T12821] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 293.312453][T12821] ? rcu_is_watching+0x15/0xb0 [ 293.312472][T12821] bond_siocdevprivate+0x17e/0x350 [ 293.312491][T12821] ? __pfx_bond_siocdevprivate+0x10/0x10 [ 293.312511][T12821] ? full_name_hash+0x92/0xe0 [ 293.312529][T12821] ? netdev_name_node_lookup+0xdf/0x120 [ 293.312553][T12821] dev_ifsioc+0xb57/0xf00 [ 293.312573][T12821] dev_ioctl+0x84c/0x1150 [ 293.312590][T12821] sock_ioctl+0x719/0x790 [ 293.312615][T12821] ? __pfx_sock_ioctl+0x10/0x10 [ 293.312638][T12821] ? __fget_files+0x3a0/0x420 [ 293.312652][T12821] ? __fget_files+0x2a/0x420 [ 293.312667][T12821] ? bpf_lsm_file_ioctl+0x9/0x20 [ 293.312687][T12821] ? __pfx_sock_ioctl+0x10/0x10 [ 293.312709][T12821] __se_sys_ioctl+0xfc/0x170 [ 293.312729][T12821] do_syscall_64+0xfa/0x3b0 [ 293.312747][T12821] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.312763][T12821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.312778][T12821] ? clear_bhb_loop+0x60/0xb0 [ 293.312796][T12821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.312813][T12821] RIP: 0033:0x7f035558eec9 [ 293.312828][T12821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.312843][T12821] RSP: 002b:00007f03564c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.312860][T12821] RAX: ffffffffffffffda RBX: 00007f03557e6090 RCX: 00007f035558eec9 [ 293.312872][T12821] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000004 [ 293.312883][T12821] RBP: 00007f0355611f91 R08: 0000000000000000 R09: 0000000000000000 [ 293.312893][T12821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.312903][T12821] R13: 00007f03557e6128 R14: 00007f03557e6090 R15: 00007ffcfe615fb8 [ 293.312923][T12821] [ 293.762107][ T44] tipc: Node number set to 865241893 [ 293.795236][T12821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.807064][T12821] bond0: (slave rose0): Enslaving as an active interface with an up link [ 293.830347][T12811] tipc: Resetting bearer [ 293.844570][T12809] tipc: Resetting bearer [ 293.863528][T12809] tipc: Disabling bearer