last executing test programs: 1.812569286s ago: executing program 1 (id=4580): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff, 0x9}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x64}}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$unix(r0, &(0x7f00000084c0), 0x0, 0x10000040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280"], 0x48}}, 0x40000) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4) write(r5, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 1.700982127s ago: executing program 1 (id=4584): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x2, 0x0, 0x1, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 1.605407983s ago: executing program 3 (id=4587): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r1], 0x44}}, 0x0) 1.504792977s ago: executing program 1 (id=4588): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e23, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) (async) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000001840)=0x4) (async) recvmsg(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000001400)=""/180, 0xb4}, {&(0x7f00000014c0)=""/235, 0xeb}, {&(0x7f00000015c0)=""/205, 0xcd}], 0x6, &(0x7f0000001740)=""/131, 0x83}, 0x40000120) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) 1.294441174s ago: executing program 4 (id=4590): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000005000008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008819}, 0x8080) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000307010200000000000000000200000086b39041caaf99fd5c12"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x80) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x41, 0x2}, @struct={0xb, 0x2, 0x0, 0x4, 0x0, 0x3, [{0xf, 0x0, 0xfffffff9}, {0x10, 0x5, 0x101}]}, @typedef={0x4, 0x0, 0x0, 0x8, 0x5}, @float={0xd, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x5f, 0x0, 0x30, 0x0, 0x0]}}, &(0x7f0000000440)=""/108, 0x77, 0x6c, 0x1, 0x5}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf030000000000005509010000000000950000000000000000b7020000010000008500000085000000b700"/89], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x16, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0xd91}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0x6, 0x7, 0x3, 0xff, 0x7}, @tail_call, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x20}, @jmp={0x5, 0x0, 0x9, 0xb, 0x9, 0xffffffffffffffff, 0x8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000600)='GPL\x00', 0x8, 0xa5, &(0x7f0000000640)=""/165, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000740)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000780)=[{0x4, 0x1, 0x10, 0x2}, {0x1, 0x3, 0xa, 0x7}, {0x2, 0x3, 0x2, 0x4}, {0x4, 0x3, 0xb, 0x1}, {0x2, 0x3, 0x3, 0xb}, {0x4, 0x5, 0x1, 0xc}, {0x3, 0x2, 0x0, 0x4}]}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x9, 0x10}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000980)={r0, 0x5, 0x1, 0x4}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r11) ioctl$SIOCSIFHWADDR(r11, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%pB \x00'}, 0x20) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0x0, 0x7f, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x9a, &(0x7f0000000200)=""/154, 0x41100, 0x8, '\x00', r4, @fallback=0x35, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0xa}, 0x10, r6, r7, 0x5, &(0x7f0000000b80)=[r8, r9, r10, r9, 0xffffffffffffffff, r12, r13, 0x1, r14, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x1, 0x2, 0x1, 0x3}, {0x4, 0x2, 0x4, 0x4}, {0x2, 0x4, 0xb, 0xa}, {0x5, 0x5, 0x3, 0x4}, {0x4, 0x4, 0x3, 0x4}], 0x10, 0x1}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'wg2\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x7, 0xda6, [0x3, 0x401, 0x5]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.245344759s ago: executing program 3 (id=4592): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001600", @ANYRES32=0x0, @ANYBLOB="a9000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150a010200000000200000000800fffd28c03ce6a3d083ea1a15be58b15d218f06ecfc7e86a2f63c88e7c677a87242e57e79cca1acbd0810ece9149e015bf8e946ccff6563c81e60cc942fd400715a11ec897ebf88e90c3bef61a26d1ba85b93ba"], 0x14}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000a1a1011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) socket(0x10, 0x803, 0x0) 1.134335892s ago: executing program 0 (id=4594): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(wp256-generic)\x00'}, 0x58) 1.084164145s ago: executing program 0 (id=4595): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 1.075013206s ago: executing program 3 (id=4596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000a80)={{0x6, 0x4, 0xfffff351, 0xffffffff, 0x3}, &(0x7f00000006c0)=[{}, {}, {}, {}, {}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x217) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000003740)=[{{&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f0000000440)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f0000000240)}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000680)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="88000000000000000000000007000000863c000000020004704e01067bac37b405020505d6f7960602050e764296b80eec0534227b9f110204cd5e061126a1f9628cd86bed882f37229f86a29404010044148f03ac1e0101000000ddac1414bb00000007442478d3ac1414aa000000040a010102000000060000000000000008ac1e0001000000081100000000000000000000000100000006000000000000005c0000000000000000000000070000009404000000830b78ac14143fac141433820cf9efe6a53eee7cf3eb37072b6cffffffff0a0101027f000001ac1414aa00000000000000000a010102ac1e00017f000001e00000010000000000000000001400000000000000000000000200000007000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a0101000000000002"], 0x138}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000cc0)}, {0x0}, {&(0x7f0000000d40)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f0000000e40)}], 0x5}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f80)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001000)}, {0x0}], 0x3}}, {{&(0x7f0000001180)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001200)=[{&(0x7f00000011c0)="85a020c09399747b4fd7d8c826065244fe9dddb2287f68215529bd4aef0358cfc1dc387d05d3b32e", 0x28}, {0x0}], 0x2}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="587ce5e95e4cd9567748a6bfc1d1cc78b5eda56a9828eac894a8eaeb5e49995ff849cf3e418c434b82e0fc652add94574db0b35f9917fbc4b0841ce7d9ccb77450b98f8f16627b33beda78376ee8f1b89e8dc5d51e9951cbf9cf8fdfa4b7301c3e61a83a13b0ca256d", 0x69}], 0x1}}], 0x6, 0x200460c0) 1.020674587s ago: executing program 4 (id=4597): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x15, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x1a, 0x8, "2407052dba70b8055af65da76f55c064c54cd3b7db3e"}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:', @ANYRESOCT], 0xa) 975.781681ms ago: executing program 0 (id=4599): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'batadv0\x00', 0x3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x5, 0x0) r2 = socket(0xf, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xc, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x400c012) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x5}, {0x0, 0xfff1}, {0x9, 0x3}}}, 0xffffffffffffff24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 960.068597ms ago: executing program 4 (id=4600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="00c9f967df000000b7080000000001007b8af8ff00000000bf2200000000000007020000f8ffffffb7030000080000ecb70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="86fb4e44162ce027423efa0cf942", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="86fb4e44162ce027423efa0cf942", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') 879.437593ms ago: executing program 3 (id=4602): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r2, 0x1}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 849.694706ms ago: executing program 0 (id=4603): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0xc001) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x80000000, 0x63}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4048010) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1c4, r2, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xb, 0x9, 0x8, 0x8, 0x1, 0x7, 0xe3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x6c, 0x39, 0x18, 0x36, 0x60, 0x9, 0x60, 0x1b, 0x16, 0x5, 0x6, 0x6c, 0x4, 0x30, 0x16, 0xb, 0x36, 0x36, 0x6c, 0x12, 0xc, 0x3, 0x9]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x3, 0x6c, 0x9, 0x36, 0x4, 0x30, 0x60, 0x12, 0x65, 0x4, 0x6c, 0x30, 0xc, 0x2, 0x18, 0x60, 0x0, 0x2, 0x2, 0x18, 0x60, 0x19, 0x24, 0x36, 0xb, 0x5, 0x36, 0x49, 0x18]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x4}, {0x6, 0x2}, {0x3, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x1, 0x6}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x2, 0x1}, {0x5, 0x7}, {}, {0x5, 0x2}, {0x1, 0x4}, {0x4, 0x5}, {0x7, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0x8}, {0x3, 0x6}, {0x1, 0x5}, {0x1}, {0x0, 0x8}, {0x7, 0x3}, {0x2, 0x3}, {0x4, 0xa}, {0x2, 0x5}, {0x0, 0x3}, {0x1, 0x3}, {0x1, 0x9}, {0x7, 0x6}, {0x5, 0x4}, {0x1}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x7, 0x7f, 0x3, 0x2, 0x9, 0x4, 0xf800]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfff0, 0x401, 0x3, 0x9, 0x6, 0xfff]}}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xb, 0x61a, 0x40, 0x9, 0x221c, 0x3, 0x800]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0x6}, {0x3, 0x8}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x8}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0x7}, {0x5, 0x2}, {0x4}, {0x7, 0x9}, {0x6, 0x4}, {0x4, 0x6}, {0x0, 0x6}, {0x2, 0xa}, {0x4, 0x2}, {}, {0x5, 0x1}, {0x3}, {0x2, 0x9}, {0x6, 0xa}, {0x4, 0x1}, {0x5, 0x5}, {0x1, 0x7}, {0x1, 0x9}, {0x7, 0x4}, {0x0, 0x6}, {0x4, 0x9}, {0x7, 0xa}, {0x3, 0x1}, {0x2, 0x5}, {0x5}, {0x0, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x4, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x5, 0x3}, {0x4, 0x9}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x4, 0x2}, {0x7, 0x5}, {0x6}, {0x7}, {0x5, 0x4}, {0x7, 0x3}, {0x2, 0x3}, {0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x985b, 0x1ff, 0x5, 0x190, 0x8]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0xa}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x1, 0x3}, {0x6, 0x5}, {0x6, 0xa}, {0x5, 0x9}, {0x2, 0x2}, {0x1, 0x2}, {0x2, 0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x2, 0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x4}, {0x5, 0x1}, {0x5}, {0x0, 0xa}, {0x5}, {0x2, 0x2}, {0x7, 0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x4}, {0x7, 0x1}, {0x2, 0xa}, {0x1, 0x6}, {0x7}, {0x0, 0x3}, {0x2, 0xa}, {0x2, 0x2}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x5}, {0x4, 0x2}, {0x5, 0xa}, {0x7}, {0x7, 0x5}, {0x3, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x4, 0x4}, {0x1, 0x8}, {0x6, 0x8}, {0x4, 0x3}, {0x7}, {0x3, 0x7}, {0x4, 0x9}, {0x4, 0x8}, {0x3, 0x6}, {0x1, 0x3}, {0x4, 0x2}, {0x3, 0x5}, {0x1, 0x3}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x4, 0x9, 0xfff8, 0x7fff, 0x231b, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x84}, 0xc080) (async, rerun: 64) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) (rerun: 64) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x124, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe35}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20048090}, 0x1001) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x10, 0x70bd2a, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000940)={0x0, 0xf6, "29119fe310dbbd16e20c5cfc37f5e5b6ca62d0f2a9ab825428efcfa57c5f8b45d92d42e817824168f1923a7afa6b103eff530ff267c44da03635a62f21d96c3c13faedf145686a1118b7ad2288f0f504c186796f4119d9ade3777191a3aff60fb1350f1db584a4f809af09ab616aaf79fd133548981d0178adcdecfeec3c5f737ff657a371201d9de6c6cf5795f249dbbb0641a3d568328c5c663786b472c9d959628ee342551fd903185696ff94a675d0c708eae4df93e807934b4c093a04ffb2c323edd02df4ab8de070cb7dd552fbc8945cf41edbfdd30f30da4b684e8e55a459ebdd2c7b7a53f4bd0f1aa86ce362aef88845415f"}, &(0x7f0000000a40)=0xfe) (rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000a80)={r6, @in6={{0xa, 0x4e23, 0x0, @remote, 0x1}}, 0x6, 0x40f}, &(0x7f0000000b40)=0x90) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c00)={0x368, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x203a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdef}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe03}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5815}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89bb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffdd0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe843}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffc40c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa0f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff8000}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "10d500d298730c4e2113c7b86b40867a62e63cf8613b0faf26"}}, @TIPC_NLA_NODE_ID={0xbe, 0x3, "90682462b80c975f8392dc5d0966e3cdd4cfa9d02de08430116137f029dec5f9a44422f13e74ba4eee28e8a3a7359613a8c8e17478f0a8db0abcabb1c653685eeb22ecd99526d275054eca7ca2ff318a4e2f9a0386f2b1f396c1f9de766cd0dc78cd0bc8c3d3991020de4ea00ec272fd71edf8676ca5cc6968a3bb00f7d0efa474796025616946c9e0c9c82e5fd5cc9dbffb4dffe0810551e9dec7eba10c47312fda5214505c8eee4f45af83a38234c088729c1ac6401184b177"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x4000004}, 0x2040000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001340)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f0000001040)={0x2a0, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x46, 0x3, "726b38f99a2f3374a1a6a82fc41215b86ebb4b63d891bff670635cee6ce1c0ce836e081d1b484b2f208f1d933734b9da124a40fbbe3e49974cf0116c6fa7d6febc64"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "6893aedcc7b91947808bdf4e9857d48e69cb95206dcd"}}, @TIPC_NLA_NODE_ID={0x93, 0x3, "52de59f9f912eada0e90e1d25aeb301ba71367129658845fd9acc6e63f2834ab18dc7094ab218953881090e1b8ff6e4cb49527b38eb2c9320e862b5311d9976816254ed8456326cb190bb82b21bce0cac20d47e47c4f419a43e8672424116632b0e33ce180e2084d1798b1b37796d0307c72a725085b45b6ad0e9bca7db7c0a01ce2146b3d5b12e78cd0a40d9a1bf6"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "acee8bcbfcd8cc38b6c8fc932e4a7896795308f0709722b0"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "dd6c893bd9d3da021e277a4ab2e9b85eddacbfeb9b38706031bab1fcf817c0e424ba99"}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x56bd}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x936d0}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "27152d1d2d5973730c2a60d041c0bb0a14bea9438377f83d366db54347b3c5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x44021}, 0x480d0) (async) r8 = socket$inet(0x2, 0x5, 0xb) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000001380)={0x4, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000014c0), 0x8) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x68, r4, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x3ff, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}}, 0x4000) (async) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001800)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x104, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ccf}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x104}}, 0x4000000) r10 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000001880)={&(0x7f0000001840)=""/43, 0x1000, 0x1000, 0x7fffffff, 0x3}, 0x20) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002a80)={r9, 0x20, &(0x7f0000002a40)={&(0x7f0000001a00)=""/4096, 0x1000, 0x0, &(0x7f0000002a00)=""/8, 0x8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002b00)={0x5, 0x11, &(0x7f00000018c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff}, {}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001980)='GPL\x00', 0xfcb, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000019c0)={0x3, 0x2, 0x401, 0x5}, 0x10, r11, 0xffffffffffffffff, 0x0, &(0x7f0000002ac0)=[r9, r9, r9, r9, r10, r9, r9, r9, r9, r9], 0x0, 0x10, 0x2000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002e40)={0x12, 0x11, &(0x7f0000002bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002c80)='syzkaller\x00', 0x754f, 0x71, &(0x7f0000002cc0)=""/113, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x1a, r9, 0x8, &(0x7f0000002d40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000002d80)={0x4, 0xf, 0x2, 0x79}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000002dc0), &(0x7f0000002e00)=[{0x0, 0x3, 0x7, 0x5}, {0x4, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x2, 0x5}], 0x10, 0x94d}, 0x94) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000003b00)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003ac0)={&(0x7f0000002f40)={0xb64, r2, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x56}}}}, [@NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x51}]}]}, @NL80211_ATTR_TID_CONFIG={0x1ec, 0x11d, 0x0, 0x1, [{0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x3d30, 0x0, 0x3, 0x6, 0x3, 0xe94]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0xc, 0x6c, 0x6, 0x24, 0x0, 0x5, 0xb, 0xc, 0xb, 0x60, 0x1, 0x48, 0x12]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x3}, {0x4, 0x7}, {0x3, 0x5}, {0x5, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x4}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x6, 0x7}, {0x4, 0x5}, {0x2, 0x4}, {0x1, 0x4}, {0x3, 0x1}, {0x6, 0x5}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x12]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x1}, {0x1, 0xa}, {0x2, 0x5}, {0x6, 0x6}, {0x1}, {0x5, 0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x7}, {0x6, 0x4}, {0x5}, {0x0, 0x3}, {0x3, 0x7}, {0x5, 0x5}, {0x4, 0xa}, {0x7, 0x2}, {0x1, 0x1}, {0x5, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x3, 0x6}, {0x4, 0x4}, {0x3, 0x8}, {0x5, 0x8}, {0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x8}, {0x6, 0x2}, {0x0, 0x4}, {0x2, 0x3}, {0x2, 0x8}, {0x3, 0x3}, {0x7, 0x2}, {0x1, 0x5}, {0x6, 0x7}, {0x3}, {0x5, 0x9}, {0x3}, {0x4, 0x11}, {0x0, 0x6}, {0x7, 0x7}, {0x5, 0xa}, {0x2, 0x2}, {0x0, 0x6}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0xa}, {0x2, 0x2}, {0x1, 0x8}, {0x7, 0x1}, {0x6, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x7, 0x3}, {0x1, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0x1, 0x6}, {0x7, 0x7}, {0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x0, 0x4}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x1, 0xefc, 0x5, 0x4, 0x4, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7fff, 0x0, 0x6, 0x7fff, 0xd, 0x1, 0x5511]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x24, 0x9, 0x36, 0x1, 0x9, 0x5, 0x44, 0x1, 0x9, 0x3, 0x18, 0x6, 0xde, 0x2, 0x1, 0x2d, 0x4, 0x6, 0x6c, 0x5, 0x1, 0x12, 0x3, 0x9, 0x18, 0xc, 0x1, 0x9, 0x6c, 0xb, 0x24]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x5, 0x75, 0x2, 0xfffe, 0x3, 0x6]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf2, 0xff, 0x0, 0xc, 0xc000, 0x4, 0x3ff, 0x8]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x1b, 0x4, 0x36, 0x4, 0x24, 0x36, 0x5a, 0x6, 0x30, 0x2, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x3, 0x8001, 0x8, 0x3, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbf}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x224, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x101}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x418d}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x58}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x26}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x1, 0x1, 0x24, 0x60, 0x0, 0x30, 0x18, 0x36, 0x12, 0xc, 0x48, 0x1b, 0x24, 0x4, 0xb, 0x68, 0x6, 0x4, 0x60, 0x60, 0xc]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x4, 0x24, 0x1b, 0x4, 0x6, 0x6, 0x5, 0x0]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x16, 0x2, 0x16, 0x1, 0x5, 0x36, 0x6, 0x36, 0x3, 0x24, 0x5, 0x4, 0x48, 0x18, 0x12, 0x6, 0x3, 0x60]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x3, 0x4}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x4, 0x5}, {0x3, 0x5}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xd, 0x5, 0x9, 0x101, 0x6c01, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x6, 0x8, 0x2, 0x9, 0x3, 0x9]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x1, 0x1, 0x6, 0x24, 0x2, 0x6, 0x0, 0x5, 0x48, 0xc, 0x4, 0x60, 0x1b, 0x2, 0x1b, 0x30, 0x0, 0x36, 0x1b, 0xb, 0x5, 0x2, 0x1c, 0x0, 0x60, 0x1b, 0x60, 0x5, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1ff, 0x3, 0x3, 0x2, 0xc, 0x10, 0x200]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x3, 0x7b58, 0x2, 0x9, 0xcbb, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x46}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x548, 0x11d, 0x0, 0x1, [{0x234, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x63}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x8c79, 0x2, 0x6, 0xaf41, 0x6, 0x6, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x2000, 0x5, 0x5, 0x3, 0x5, 0x4]}}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8000, 0x8, 0x100, 0xcf90, 0x4, 0x8]}}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x4}, {}, {0x6}, {0x1, 0xa}, {0x4}, {0x1}, {0x0, 0x5}, {0x1, 0x1}, {0x5, 0x5}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0x4}, {0x0, 0x9}, {0x6, 0x2}, {0x4, 0x9}, {0x6, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x3}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x9}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x9}, {0x2, 0xa}, {0x4, 0x2}, {0x5, 0x8}, {0x0, 0x2}, {0x7, 0x6}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x5, 0x6}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x4}, {0x1, 0x1}, {0x7, 0x4}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x2}, {0x3, 0x9}, {0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x2}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0xa}, {0x3, 0x2}, {0x6, 0x5}, {0x3, 0x3}, {0x1, 0x9}, {0x2}, {0x4, 0xa}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x1}, {0x5, 0x2}, {0x4, 0x8}, {0x1, 0x1}, {0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x5, 0x4}, {0x7}, {0x7, 0x2}, {0x7, 0x7}, {0x3, 0x4}, {0x4, 0x3}, {0x1, 0x1}, {0x3, 0x7}, {0x6, 0x8}, {0x6, 0x4}, {0x0, 0x9}, {0x3, 0x8}, {0x5, 0x1}, {0x0, 0x9}, {0x2, 0x6}, {0x2, 0x4}, {0x3, 0x4}, {0x7, 0x7}, {0x5, 0x4}, {0x4, 0x9}, {0x0, 0x6}, {0x4}, {0x1, 0x4}, {0x4, 0x8}, {0x2, 0x4}, {0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x1, 0x7, 0x0, 0x5, 0x2, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x54f9, 0x3, 0x7, 0x7, 0x9, 0xe, 0xce97, 0x26f9]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x6c, 0x0, 0x1, 0xe, 0x18, 0x41a57ef9e39b281f, 0xc, 0x16, 0x3, 0x60, 0x30, 0x6, 0x3, 0x18, 0x12, 0x18, 0xc, 0x16, 0x5, 0x5, 0x4, 0x4, 0x3, 0x12, 0x72, 0x48, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x8000, 0x1, 0x696c, 0x9, 0xb63c, 0x9]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x7}, {0x2, 0x4}, {0x1}, {0x3, 0x4}, {0x5, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x3}, {0x4, 0x5}, {0x4, 0x6}, {0x5, 0x9}, {0x5, 0x9}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0xa}, {0x7, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x9}, {0x6, 0x1}, {0x3, 0x2}, {0x5, 0x7}, {0x6, 0x9}, {0x2, 0x4}, {0x3}, {0x0, 0x1}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x5}, {0x0, 0xa}, {0x4, 0x6}, {}, {0x1, 0x3}, {0x4, 0x7}, {0x7}, {0x4, 0xa}, {0x1, 0x1}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0xa}, {0x3, 0x6}, {0x1, 0x8}, {0x6}, {0x1, 0x8}, {0x6, 0x2}, {0x5, 0x4}, {0x5, 0x2}, {0x2, 0x7}, {0x2, 0x4}, {0x5, 0x6}, {0x0, 0x9}, {0x7, 0x8}, {0x4}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x1, 0x2, 0x6c, 0x2, 0x18, 0xc, 0x0, 0x48, 0x16, 0x36, 0x4, 0x2, 0x3, 0x2, 0x1b, 0x6c, 0x12, 0x3, 0xb, 0x1, 0x6, 0x34, 0x30, 0x36, 0x18, 0xb, 0x3, 0xb, 0x48, 0x36, 0xc]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x3, 0x5}, {0x5, 0x3}, {0x4, 0x7}, {0x5}, {0x6}, {}, {0x3, 0x3}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0x8}, {0x1, 0xa}, {0x2, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x7, 0x4, 0x7fff, 0x400, 0xc3ff, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x9, 0x4, 0x4, 0x1, 0x20, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x7fff, 0x1, 0xb, 0x6, 0x5, 0xff, 0x2]}}]}]}]}, {0x1f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0x7, 0x401, 0x8, 0x10, 0x9668, 0xe]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x7}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x6}, {0x4, 0x2}, {0x5, 0x6}, {0x5, 0xa}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x9}, {0x3}, {0x6, 0x9}, {0x5, 0x1}, {0x5, 0x4}, {0x6, 0x6}, {0x2, 0x3}, {0x2, 0x9}, {0x4}, {0x4, 0x5}, {0x0, 0x6}, {0x0, 0x6}, {0x7, 0x7}, {0x5, 0x4}, {0x5, 0x8}, {0x7, 0x6}, {0x1, 0xc}, {0x0, 0x8}, {0x6, 0x8}, {0x5, 0x4}, {0x6, 0x4}, {0x0, 0x4}, {0x1, 0x4}, {0x0, 0x8}, {0x7, 0x7}, {0x6, 0x2}, {0x2, 0x2}, {0x4, 0x8}, {0x0, 0x1}, {0x0, 0x6}, {0x5, 0x3}, {0x0, 0x2}, {0x7}, {0x7, 0x7}, {0x3, 0x6}, {0x3, 0x7}, {0x6, 0x1}, {0x6, 0x1}, {0x3, 0x8}, {0x5, 0xa}, {0x3, 0x3}, {0x5, 0x3}, {0x2}, {0x1, 0x1}, {0x6, 0x7}, {}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x0, 0x4}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0x5}, {0x7, 0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x1}, {0x4, 0x4}, {0x0, 0x5}, {0x2, 0x4}, {0x5, 0x4}, {0x0, 0x9}, {0x4, 0x3}, {0x3, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0xf61, 0x7f, 0x2, 0x818, 0xf000, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc5d, 0xced7, 0x1, 0x1ff, 0x9, 0x0, 0x2, 0xffff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xec7e, 0xfbff, 0xfa, 0xb61, 0x8, 0x0, 0x101, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x9, 0x80, 0x5, 0x0, 0x0, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x1000, 0x4, 0x0, 0x7, 0x8, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x4, 0x60, 0x12, 0x6c, 0x3e, 0x30, 0x60, 0x16, 0x48, 0x16, 0x18, 0x5, 0x48, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfdab, 0x1, 0x3, 0x6, 0x8, 0x6b8, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x6, 0x18, 0x9, 0x6c]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0x4}, {0x7, 0x3}, {0x2, 0x7}, {0x7, 0x5}, {0x5, 0x6}, {0x7, 0x2}, {0x4, 0x3}, {0x5, 0x2}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x2, 0x9}, {0x3, 0x3}, {0x4, 0x2}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x2}, {0x0, 0x3}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0xa}, {0x7, 0x2}, {0x4, 0x6}, {0x3, 0x3}, {0x4, 0xa}, {0x2, 0x7}, {0x4, 0x5}, {0x7}, {0x2, 0x1}, {0x6, 0x7}, {0x3, 0x9}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0x6}, {0x4, 0x3}, {0x3, 0x7}, {0x6, 0x2}, {0x2, 0x9}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x5}, {0x4, 0x6}, {0x6, 0x1}, {0x5}, {0x3, 0x7}, {0x4}, {0x2, 0x5}, {0x6, 0x4}, {0x3, 0x2}, {}, {0x4, 0x2}, {0x4, 0xa}, {0x2, 0x5}, {0x2, 0x7}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x7}, {0x5, 0x4}, {0x6, 0x6}, {0x2, 0x8}, {0x6, 0x5}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0xc, 0x24, 0x1, 0x12, 0x30, 0xb, 0x6c, 0x30, 0x60, 0x5, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7bf, 0x401, 0xfff, 0xfff8, 0x5, 0x4, 0x818, 0xbb8]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x87}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x42}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdb}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x4, 0x48, 0x16, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x7, 0x1, 0xffff, 0x9, 0x7, 0x6f]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x931, 0x8001, 0x400, 0x1, 0x1, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4, 0x5, 0x2, 0x1b, 0x24, 0x60, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7c1, 0x5, 0xfff, 0x7, 0x0, 0x6, 0x4, 0xfff9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x6, 0x6, 0x324a, 0x1, 0x9100]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x60, 0xb, 0x6c, 0x6, 0xc, 0x5, 0x36, 0x6, 0x48, 0x3, 0x1b, 0xe, 0x60, 0x9, 0x6c, 0x1, 0xc, 0x6, 0x36, 0x36, 0x1b, 0x1819c73e47d765dc, 0x60, 0x6c, 0x3]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xd8, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x15}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe50}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x92}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x20}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xde}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x65}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x92}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}]}]}]}, 0xb64}, 0x1, 0x0, 0x0, 0x40001}, 0x814) (async, rerun: 64) getsockopt$inet_buf(r8, 0x0, 0x26, &(0x7f0000003b40)=""/169, &(0x7f0000003c00)=0xa9) (rerun: 64) 844.617822ms ago: executing program 4 (id=4604): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000000010002", 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r4, @ANYRES32=r3], 0x58}, 0x1, 0x2}, 0x4000085) 792.938441ms ago: executing program 2 (id=4605): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 760.428878ms ago: executing program 2 (id=4606): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) socket$inet6(0xa, 0x3, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$sock_int(r2, 0x1, 0x1a, &(0x7f0000000240), 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000840)={'gretap0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11}, 0xa) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 737.76976ms ago: executing program 4 (id=4607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) (async) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r4 = openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x5e, @broadcast, 0x4e20, 0x2, 'nq\x00', 0x0, 0x6975, 0x4a}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x5e, @broadcast, 0x4e20, 0x2, 'nq\x00', 0x0, 0x6975, 0x4a}, 0x2c) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x4e21, 0x8, 0x4e20, 0x0, 0xa, 0x100, 0xa0, 0x33, 0x0, r6}, {0x5, 0x3, 0x9, 0x3, 0x9, 0x7, 0x7}, {0x2d, 0x18, 0x4, 0x5000000000000}, 0xff, 0x6e6bba, 0x2, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0xff}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3504, 0x0, 0x2, 0x9, 0xffff, 0x0, 0x8}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x4e21, 0x8, 0x4e20, 0x0, 0xa, 0x100, 0xa0, 0x33, 0x0, r6}, {0x5, 0x3, 0x9, 0x3, 0x9, 0x7, 0x7}, {0x2d, 0x18, 0x4, 0x5000000000000}, 0xff, 0x6e6bba, 0x2, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0xff}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3504, 0x0, 0x2, 0x9, 0xffff, 0x0, 0x8}}, 0xe8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001840)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="bbfe5125d156eddc43475091af5b426f19c0b3e601bba9520d22a3af3f42a459a02f90e8a8e3e170c503e2d76dd2dbab782f67f1a92e85772d66f2cf74e4ac72078d87c7949dc309e533e4add6e95cf86c2058b27bc6c67844579d36ea1bf853509e6e50ac15771b99db701ae04eed5b20484fdd70108528e686fe7d94fcb2c477240ee94720e8fd5ccf932cf9e5a24fdc127a35e3d8cef93a71fb6a1625d2e12e35d9f21ca226b253827bb1e9e639a9a01c00c14fec548e2baa108b52d80cbcf242f4b0ee8558f28c420b8bd9183351a4fdac8280c89020d947f30c969e74655575f1ee396420c03900"/260], 0x68}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001840)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="bbfe5125d156eddc43475091af5b426f19c0b3e601bba9520d22a3af3f42a459a02f90e8a8e3e170c503e2d76dd2dbab782f67f1a92e85772d66f2cf74e4ac72078d87c7949dc309e533e4add6e95cf86c2058b27bc6c67844579d36ea1bf853509e6e50ac15771b99db701ae04eed5b20484fdd70108528e686fe7d94fcb2c477240ee94720e8fd5ccf932cf9e5a24fdc127a35e3d8cef93a71fb6a1625d2e12e35d9f21ca226b253827bb1e9e639a9a01c00c14fec548e2baa108b52d80cbcf242f4b0ee8558f28c420b8bd9183351a4fdac8280c89020d947f30c969e74655575f1ee396420c03900"/260], 0x68}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) 620.036079ms ago: executing program 3 (id=4608): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) 605.791794ms ago: executing program 0 (id=4609): syz_emit_ethernet(0x36, &(0x7f0000000040)={@link_local, @remote, @val={@void, {0x8100, 0x3, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 495.901746ms ago: executing program 1 (id=4610): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) (async) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) write(r0, &(0x7f0000000500)="bc2854", 0x3) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) (async) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) sendto$inet(r2, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 449.235916ms ago: executing program 3 (id=4611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x1d, 0x4, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@deltaction={0x178, 0x31, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6e4}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x24, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030028590214640600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 448.782222ms ago: executing program 0 (id=4612): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0x9d, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r3}, 0x18) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000800)) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x4, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) close(r1) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000000140)={0x5e, 0x0, 0xa, 0x400000b, 0x36, 0x82}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYRESDEC=r8, @ANYRES32, @ANYBLOB="080004"], 0x44}}, 0x0) 448.489593ms ago: executing program 2 (id=4613): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x8040, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 414.725118ms ago: executing program 4 (id=4614): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) (async) sendmmsg$alg(r2, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) 340.887336ms ago: executing program 1 (id=4615): r0 = socket(0x10, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x40000000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x68, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x9a, @empty, 0x5}, @in6={0xa, 0x4e22, 0xa0000, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3ff}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000240)=0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140003"], 0x2c}}, 0x0) 136.519447ms ago: executing program 1 (id=4616): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x4, 0xb99f) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x400, 0x8001, {{0x14, 0x4, 0x0, 0x9, 0x50, 0x67, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x27}, {[@ra={0x94, 0x4}, @noop, @noop, @timestamp={0x44, 0x14, 0xf4, 0x0, 0x5, [0xfffffff8, 0x1000, 0x5, 0x9]}, @ssrr={0x89, 0x13, 0xb2, [@private=0xa010101, @remote, @broadcast, @multicast1]}, @lsrr={0x83, 0xb, 0xb5, [@broadcast, @multicast1]}, @noop]}}}}}) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000540)={@local, r3}, 0x14) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0xc39, @dev={0xfe, 0x80, '\x00', 0x4e}, 0xc0000000}}, 0x0, 0x0, 0x18, 0x0, "3c441b4ac39ec956d30814efaa7aec12bf1731acc676db35b146dd964b14498477b0ba9e62df059acc1ed7f6e4786f9bc00863fb6c4444f0c8389325c531bf7e0a7eeaad4b0aab11e5c5f8c35c207e26"}, 0xd8) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000580)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x18, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r8, 0x0, 0x35, 0xb7, &(0x7f0000000180)="e2d2602c4b171e5d6dba7d8e291e64247dc7742a91738ddc4333da492e132396eff0ed3397792ec9b1d40e3f4cb36f4e8507b61828", &(0x7f0000000300)=""/183, 0x0, 0x0, 0xed, 0x16, &(0x7f0000000680)="1b1ceb16f014e2e109e7d790f7ab6e4c1158f6761619acdaa73917acbde6ff9a711970180028cae8dce455402791704d262ff80ef4f27b9ba15b8e882258159f470642b78d4cee5784f7643215846410e243860d2929e8f28a2c6a091bb6af52f9b0e680b1ce8eaf83908c9b56bdf70229fe6e1ebc766b78b374243f13efd673e7abbccf79662d8f424ac5253d955c5473551b06e18c67986acd6b2186e2131e360aea5397c43f6b031d0328f3950e50e6f0242d2427ed2d1620369c4556b9dde80d7ad710958ef9404e79ed5d63823a388c0aacf18e9961c85a560e009325ad9dcb5cdb8ce90fc1ae444215ec", &(0x7f0000000780)="98867819644a10a25a5755b7bb65c5cd3e295ef71c05", 0x2, 0x0, 0x10}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x1f4, 0xe, 0x0, &(0x7f00000002c0)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r10, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff5e) close(r10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0x8, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r11 = socket(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x988, 0x43, 0xa0, 0x0, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3, 0x1}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0x7fff, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x9, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) 136.320179ms ago: executing program 2 (id=4617): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1418, 0x4}, 0x10}}, 0x0) 65.909535ms ago: executing program 2 (id=4618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0xffffffff, 0x4) 0s ago: executing program 2 (id=4619): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0xc0c4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x1ff) r5 = openat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r9, @ANYBLOB="08000a00c54c"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r10 = socket(0x2, 0x2, 0x1) bind$alg(r10, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r12, 0x90d, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xb, 0x1ffe000, @l2={'eth', 0x3a, 'xfrm0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r11}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r11}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x4, 0x222, 0x6, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x3, 0x1, 0x0, 0x0, "ea1ee06e4a675d1c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) close(0x3) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r10, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1a4, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6e}}}}, [@NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="02a7e9b2b7e0286780fe49de52eb42de"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fffffff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5dc7eaeb165d244e254b3c45e346bf1944ea2a959956aa2787dd50f1851f9284"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "61de4a8aa720480f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1a7c58f80c79433490b8e2b7ed5ae8f0b9bbf4c8d713f52abeed7f8b6e46cf9e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7dd1429027f94a61648ae950e38a7260"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e405c8652a15837b4e6441355e20d72aeb94ee021f5728da"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe22e}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5cb3b55197b1dc78b25010bff4370e1a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "355d8b0ac52ffad3"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a280bbec86162af3edc05793d1d367ca"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9e8733643ffb2e1cbae415b1e8cf052ee5065469126d6187"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="bd87455812c2e7ce4d3d5e7148df5f09"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="de3be49e5df1824bb9b1581789595008916e1b0335fd31eb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5cdb83a5f03f4e85"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="aaefa6d2c4b8e98a7a3e3b455c533e27"}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4050805}, 0x4040041) kernel console output (not intermixed with test programs): uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2646" name="/newroot/521/cgroup.controllers" dev="tmpfs" ino=2671 res=1 errno=0 [ 271.501367][ T29] audit: type=1800 audit(1778975846.984:9): pid=15313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2646" name="cgroup.controllers" dev="tmpfs" ino=2671 res=0 errno=0 [ 271.850868][T15339] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 271.875034][ T4950] block nbd0: Receive control failed (result -32) [ 272.001132][T15339] team1: entered promiscuous mode [ 272.038353][T15339] team1: entered allmulticast mode [ 272.051931][T15349] xt_hashlimit: size too large, truncated to 1048576 [ 272.474537][T15382] netlink: 'syz.0.2662': attribute type 3 has an invalid length. [ 272.499410][T15382] netlink: 'syz.0.2662': attribute type 1 has an invalid length. [ 272.524894][T15382] NCSI netlink: No device for ifindex 813332851 [ 272.640748][T15395] netlink: 'syz.4.2665': attribute type 1 has an invalid length. [ 272.669930][T15395] __nla_validate_parse: 13 callbacks suppressed [ 272.669946][T15395] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2665'. [ 272.702187][T15395] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2665'. [ 272.716971][T15395] netlink: 'syz.4.2665': attribute type 1 has an invalid length. [ 272.732434][T15395] netlink: 'syz.4.2665': attribute type 8 has an invalid length. [ 272.741102][T15395] netlink: 582 bytes leftover after parsing attributes in process `syz.4.2665'. [ 273.006604][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 273.030231][T15423] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2673'. [ 273.243646][T15442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2679'. [ 273.321308][T15447] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 273.364721][T15442] netlink: 'syz.2.2679': attribute type 1 has an invalid length. [ 273.374727][T15442] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2679'. [ 273.383775][T15442] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2679'. [ 273.396265][T15442] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2679'. [ 273.532994][T15457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2683'. [ 273.848973][T14634] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.874596][T14634] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.916530][T14634] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.956487][T14634] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.012533][T15493] x_tables: duplicate underflow at hook 1 [ 274.341935][T15526] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 274.361779][T15526] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 274.681563][T15550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.796197][T15555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.803476][T15555] IPv6: NLM_F_CREATE should be set when creating new route [ 274.810769][T15555] IPv6: NLM_F_CREATE should be set when creating new route [ 274.818031][T15555] IPv6: NLM_F_CREATE should be set when creating new route [ 274.879665][T15555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.996390][T15576] x_tables: duplicate underflow at hook 1 [ 275.656802][T15615] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 275.768369][T15627] Cannot find map_set index 135 as target [ 276.040996][T15647] netlink: 'syz.0.2728': attribute type 1 has an invalid length. [ 276.907322][T15696] netlink: 'syz.2.2745': attribute type 4 has an invalid length. [ 276.919964][T15699] tipc: Started in network mode [ 276.926817][T15699] tipc: Node identity ac14140f, cluster identity 4711 [ 276.934019][T15699] tipc: New replicast peer: 172.20.20.187 [ 276.953580][T15699] tipc: Enabled bearer , priority 10 [ 277.162646][T15715] openvswitch: netlink: Flow key attr not present in new flow. [ 277.711967][T15742] __nla_validate_parse: 18 callbacks suppressed [ 277.711991][T15742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2757'. [ 277.778132][T15747] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2759'. [ 277.807700][T15748] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2759'. [ 277.965952][T15760] netlink: 'syz.0.2763': attribute type 1 has an invalid length. [ 278.033703][T15766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.213387][ T5768] tipc: Node number set to 2886997007 [ 278.250877][T15795] netlink: 'syz.2.2769': attribute type 1 has an invalid length. [ 278.423447][T15795] bond8: entered promiscuous mode [ 278.449309][T15795] 8021q: adding VLAN 0 to HW filter on device bond8 [ 278.460793][T15804] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2772'. [ 278.480638][T15798] IPv6: sit1: Disabled Multicast RS [ 278.487073][T15798] sit1: entered allmulticast mode [ 278.531129][T15799] 8021q: adding VLAN 0 to HW filter on device bond8 [ 278.538230][T15799] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 278.549737][T15799] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 278.564880][T15799] bond8: (slave ip6gre1): making interface the new active one [ 278.572897][T15799] ip6gre1: entered promiscuous mode [ 278.580891][T15799] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 278.589859][T15803] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 278.591641][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2772'. [ 278.640362][T15807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.728967][T15810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2773'. [ 278.771916][T15815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 278.967613][T15830] netlink: 'syz.1.2780': attribute type 1 has an invalid length. [ 279.000515][T15835] sctp: [Deprecated]: syz.4.2781 (pid 15835) Use of int in maxseg socket option. [ 279.000515][T15835] Use struct sctp_assoc_value instead [ 279.053780][T15835] netlink: 'syz.4.2781': attribute type 1 has an invalid length. [ 279.212577][T15835] 8021q: adding VLAN 0 to HW filter on device bond7 [ 279.223571][T15856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2787'. [ 279.259882][T15839] vlan0: entered allmulticast mode [ 279.266204][T15839] bond7: entered allmulticast mode [ 279.374441][T15849] bond7: (slave geneve2): making interface the new active one [ 279.400558][T15849] geneve2: entered allmulticast mode [ 279.417616][T15849] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 279.450896][T15856] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 279.572446][T15872] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2790'. [ 279.595493][ T5648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.613818][ T5648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.626805][ T5648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.641670][ T5648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.649433][ T5648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.714829][T15882] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 279.871314][T15889] netlink: 876 bytes leftover after parsing attributes in process `syz.3.2795'. [ 279.903790][T15889] openvswitch: netlink: Flow actions attr not present in new flow. [ 280.212277][T15908] vlan1: entered promiscuous mode [ 280.514426][T14633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.536492][T14633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.553387][T14633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 280.646565][T15916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.718738][T15873] lo speed is unknown, defaulting to 1000 [ 280.845969][T14633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.875603][T14633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.898100][T14633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 280.987800][T15950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.032199][T14633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.054203][T14633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.067394][T14633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 281.099287][T15957] bond0: ARP target 8.4.0.0 is already present [ 281.105995][T15957] bond0: option arp_ip_target: invalid value (1032) [ 281.157600][T14633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.189643][T14633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.227693][T14633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 281.247369][T15962] netlink: 'syz.0.2813': attribute type 4 has an invalid length. [ 281.266722][T15961] netlink: 'syz.0.2813': attribute type 1 has an invalid length. [ 281.359151][T15961] 8021q: adding VLAN 0 to HW filter on device bond15 [ 281.695621][ T5648] Bluetooth: hci5: command tx timeout [ 281.764438][T14633] geneve3: left allmulticast mode [ 281.792127][T14633] geneve3: left promiscuous mode [ 281.811601][T14633] bridge0: port 1(geneve3) entered disabled state [ 281.931505][T14633] pimreg1: left allmulticast mode [ 282.252099][T14633] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 282.275465][T14633] ip6gre1 (unregistering): left promiscuous mode [ 282.571912][T14633] bond6 (unregistering): (slave geneve2): Releasing active interface [ 282.766845][T16022] __nla_validate_parse: 4 callbacks suppressed [ 282.766862][T16022] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2824'. [ 282.809959][T14633] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 283.197780][T14633] .` (unregistering): Released all slaves [ 283.211103][T14633] bond1 (unregistering): Released all slaves [ 283.236474][T14633] bond0 (unregistering): Released all slaves [ 283.259000][T14633] bond2 (unregistering): Released all slaves [ 283.280265][T14633] bond3 (unregistering): Released all slaves [ 283.304037][T14633] bond4 (unregistering): Released all slaves [ 283.341060][T14633] bond5 (unregistering): Released all slaves [ 283.361444][T14633] bond6 (unregistering): Released all slaves [ 283.387156][T14633] bond7 (unregistering): Released all slaves [ 283.410139][T14633] bond8 (unregistering): Released all slaves [ 283.448794][T15873] speed is unknown, defaulting to 1000 [ 283.458718][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 283.594941][T16022] bond16 (unregistering): Released all slaves [ 283.775824][ T5648] Bluetooth: hci5: command tx timeout [ 283.806272][T16028] bridge5: entered promiscuous mode [ 283.817078][T16028] bridge5: entered allmulticast mode [ 283.830222][T14633] tipc: Disabling bearer [ 283.847671][T14633] tipc: Left network mode [ 284.063324][T16049] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2830'. [ 284.081238][T16049] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2830'. [ 284.097729][T16049] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2830'. [ 284.107716][T14633] IPVS: stopping master sync thread 9697 ... [ 284.341597][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2833'. [ 284.383856][T16069] netlink: 'syz.3.2834': attribute type 9 has an invalid length. [ 284.437931][T16069] netlink: 'syz.3.2834': attribute type 6 has an invalid length. [ 284.505801][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2835'. [ 284.536871][T16077] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2835'. [ 284.560337][T16077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2835'. [ 285.173856][T16108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2842'. [ 285.283019][T16126] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2844'. [ 285.338956][T16114] : entered promiscuous mode [ 285.358102][T15873] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.371840][T15873] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.379555][T15873] bridge_slave_0: entered allmulticast mode [ 285.387466][T15873] bridge_slave_0: entered promiscuous mode [ 285.397112][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 285.444862][T16130] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 285.467958][T16130] team1: entered promiscuous mode [ 285.473047][T16130] team1: entered allmulticast mode [ 285.478948][T15873] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.486238][T15873] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.501267][T15873] bridge_slave_1: entered allmulticast mode [ 285.510735][T15873] bridge_slave_1: entered promiscuous mode [ 285.603892][T15873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.646699][T15873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.826568][T15873] team0: Port device team_slave_0 added [ 285.842878][T15873] team0: Port device team_slave_1 added [ 285.855879][ T5648] Bluetooth: hci5: command tx timeout [ 286.054763][T15873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.094958][T15873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.200253][T15873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.339782][T15873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.361882][T15873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.431595][T15873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.976821][T15873] hsr_slave_0: entered promiscuous mode [ 286.998428][T15873] hsr_slave_1: entered promiscuous mode [ 287.006577][T15873] debugfs: 'hsr0' already exists in 'hsr' [ 287.021124][T15873] Cannot create hsr debugfs directory [ 287.036305][T16192] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 287.242867][T14633] hsr_slave_0: left promiscuous mode [ 287.280135][T14633] hsr_slave_1: left promiscuous mode [ 287.324607][T14633] veth1_macvtap: left promiscuous mode [ 287.336042][T14633] veth0_macvtap: left promiscuous mode [ 287.341771][T14633] veth1_vlan: left promiscuous mode [ 287.347306][T14633] veth0_vlan: left promiscuous mode [ 287.684369][T14633] vcan0 (unregistering): left allmulticast mode [ 287.726894][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 287.913021][T16246] __nla_validate_parse: 4 callbacks suppressed [ 287.913036][T16246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2869'. [ 287.935903][ T5648] Bluetooth: hci5: command tx timeout [ 287.951526][T16247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.970621][T16248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2866'. [ 288.461050][T16265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.537594][T16278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2875'. [ 288.569491][T16278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2875'. [ 288.621572][T16281] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2875'. [ 288.640160][T16281] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 288.757991][T16278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2875'. [ 288.779840][T16286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2878'. [ 288.927759][ T29] audit: type=1804 audit(1778975864.464:10): pid=16296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2880" name="/newroot/575/cgroup.controllers" dev="tmpfs" ino=2950 res=1 errno=0 [ 288.998872][ T29] audit: type=1800 audit(1778975864.494:11): pid=16296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2880" name="cgroup.controllers" dev="tmpfs" ino=2950 res=0 errno=0 [ 289.019917][T14633] IPVS: stop unused estimator thread 0... [ 289.456438][T16321] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.2885'. [ 289.489559][T16321] openvswitch: netlink: Flow key attr not present in new flow. [ 289.518427][T16320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2886'. [ 289.546522][T16326] Unsupported ieee802154 address type: 0 [ 289.555016][T16315] gtp2: entered promiscuous mode [ 289.567763][T16315] gtp2: entered allmulticast mode [ 289.801916][T16342] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.2891'. [ 289.830966][T15873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.848278][T16344] xt_hashlimit: size too large, truncated to 1048576 [ 289.884976][T15873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 289.887082][T16345] set match dimension is over the limit! [ 289.924649][T15873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 290.003171][T15873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.045414][T15873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 290.077213][T15873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 290.126946][T15873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.162520][T15873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 290.526628][T15873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.576684][T15873] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.609222][ T3391] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.616472][ T3391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.670059][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.677302][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.579529][T16435] netlink: 'syz.3.2906': attribute type 9 has an invalid length. [ 291.938262][T15873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.102023][T15873] veth0_vlan: entered promiscuous mode [ 292.138362][T15873] veth1_vlan: entered promiscuous mode [ 292.227779][T16471] netlink: 'syz.0.2913': attribute type 3 has an invalid length. [ 292.246448][T15873] veth0_macvtap: entered promiscuous mode [ 292.280512][T15873] veth1_macvtap: entered promiscuous mode [ 292.374735][T15873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.413597][T15873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.430539][T16481] netlink: 'syz.4.2916': attribute type 9 has an invalid length. [ 292.451051][ T1058] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.474390][ T1058] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.493808][ T1058] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.516587][ T1058] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.668453][T16491] netlink: 'syz.1.2919': attribute type 29 has an invalid length. [ 292.763763][T16494] netlink: 'syz.4.2918': attribute type 39 has an invalid length. [ 292.800480][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.814488][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.921847][ T3391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.931505][ T3391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.952473][T16504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.096605][T16562] __nla_validate_parse: 4 callbacks suppressed [ 296.096622][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2930'. [ 296.133577][T16562] gre0: Caught tx_queue_len zero misconfig [ 316.616091][T16587] : entered promiscuous mode [ 316.835689][T16605] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2944'. [ 316.867325][T16604] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2944'. [ 316.989055][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.056190][T16615] openvswitch: netlink: EtherType 50a is less than min 600 [ 317.361012][T16639] xt_l2tp: missing protocol rule (udp|l2tpip) [ 317.757598][T16663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2964'. [ 317.864242][T16674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2968'. [ 317.972027][T16690] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2968'. [ 318.074734][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2972'. [ 318.139992][T16696] macvlan2: entered allmulticast mode [ 318.165030][T16696] dummy0: entered allmulticast mode [ 318.171407][T16696] dummy0: entered promiscuous mode [ 318.297595][T16711] netlink: 'syz.4.2976': attribute type 1 has an invalid length. [ 318.314288][T16711] netlink: 'syz.4.2976': attribute type 3 has an invalid length. [ 318.324048][T16711] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2976'. [ 318.333860][T16711] NCSI netlink: No device for ifindex 813332851 [ 320.017750][T16731] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2982'. [ 320.066011][T16742] sctp: [Deprecated]: syz.3.2984 (pid 16742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.066011][T16742] Use struct sctp_sack_info instead [ 320.414642][ T4950] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.429787][ T4950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.437728][T16760] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2988'. [ 320.459682][ T4950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.473725][ T4950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.486286][ T4950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.567733][T16764] xt_CT: No such helper "pptp" [ 320.850589][T16788] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2993'. [ 321.353590][T16806] netlink: 'syz.0.2998': attribute type 12 has an invalid length. [ 321.386215][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.412418][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.707300][T16808] bond1: option min_links: invalid value (18446744073709551614) [ 321.715059][T16808] bond1: option min_links: allowed values 0 - 2147483647 [ 321.725964][T16808] bond1 (unregistering): Released all slaves [ 321.871536][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.902365][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.090759][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.142313][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.203780][T16838] veth0: entered promiscuous mode [ 322.320735][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.331340][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.367792][T16755] lo speed is unknown, defaulting to 1000 [ 322.382144][T16843] netlink: 'syz.2.3006': attribute type 29 has an invalid length. [ 322.414863][T16843] __nla_validate_parse: 1 callbacks suppressed [ 322.414878][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3006'. [ 322.451675][T16838] veth0: left promiscuous mode [ 322.532319][T16845] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3005'. [ 322.576877][ T4950] Bluetooth: hci4: command tx timeout [ 322.585583][T16840] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 322.622433][T16840] bond8 (unregistering): Released all slaves [ 322.772052][T16856] gre5: entered promiscuous mode [ 322.789405][T16856] gre5: entered allmulticast mode [ 323.173778][ T13] bridge_slave_1: left allmulticast mode [ 323.208832][ T13] bridge_slave_1: left promiscuous mode [ 323.232474][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.332732][ T13] tipc: Resetting bearer [ 323.661959][ T13] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 323.683193][ T13] ip6gre1 (unregistering): left promiscuous mode [ 323.876964][ T13] tipc: Disabling bearer [ 324.229314][ T13] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 324.362543][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.371441][ T13] bond_slave_0: left promiscuous mode [ 324.380621][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.389753][ T13] bond_slave_1: left promiscuous mode [ 324.398016][ T13] bond0 (unregistering): Released all slaves [ 324.409495][ T13] bond1 (unregistering): (slave ): Releasing backup interface [ 324.418282][ T13] bond1 (unregistering): (slave ): last VLAN challenged slave left bond - VLAN blocking is removed [ 324.431234][ T13] bond1 (unregistering): Released all slaves [ 324.446023][ T13] bond2 (unregistering): Released all slaves [ 324.460217][ T13] bond3 (unregistering): Released all slaves [ 324.474189][ T13] bond4 (unregistering): Released all slaves [ 324.487985][ T13] bond5 (unregistering): Released all slaves [ 324.512630][ T13] bond6 (unregistering): Released all slaves [ 324.526444][T16755] speed is unknown, defaulting to 1000 [ 324.536588][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 324.549984][ T992] speed is unknown, defaulting to 1000 [ 324.657605][ T4950] Bluetooth: hci4: command tx timeout [ 324.701779][ T13] : left promiscuous mode [ 324.800197][ T13] tipc: Left network mode [ 324.987223][T16755] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.994489][T16755] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.002474][T16755] bridge_slave_0: entered allmulticast mode [ 325.010156][T16755] bridge_slave_0: entered promiscuous mode [ 325.030051][T16755] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.037499][T16755] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.044677][T16755] bridge_slave_1: entered allmulticast mode [ 325.051873][T16755] bridge_slave_1: entered promiscuous mode [ 325.092893][T16755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.104202][T16755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.132105][T16755] team0: Port device team_slave_0 added [ 325.139804][T16755] team0: Port device team_slave_1 added [ 325.171423][T16755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.178503][T16755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.204674][T16755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.223321][T16755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.230805][T16755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.258534][T16755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.304545][T16755] hsr_slave_0: entered promiscuous mode [ 325.311218][T16755] hsr_slave_1: entered promiscuous mode [ 325.745290][ T13] hsr_slave_0: left promiscuous mode [ 325.751179][ T13] hsr_slave_1: left promiscuous mode [ 325.757725][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.765272][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.780973][ T13] veth0_macvtap: left promiscuous mode [ 325.786946][ T13] veth1_vlan: left promiscuous mode [ 325.792197][ T13] veth0_vlan: left promiscuous mode [ 325.852939][ T13] pim6reg (unregistering): left allmulticast mode [ 325.868671][ T13] batadv1 (unregistering): left promiscuous mode [ 325.876784][ T13] team0 (unregistering): Port device batadv1 removed [ 325.908783][T16862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.154446][T16923] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3023'. [ 326.228188][T16925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3024'. [ 326.412891][ T13] team_slave_1 (unregistering): left promiscuous mode [ 326.434713][ T13] team0 (unregistering): Port device team_slave_1 removed [ 326.453202][ T13] team_slave_0 (unregistering): left promiscuous mode [ 326.460886][ T13] team0 (unregistering): Port device team_slave_0 removed [ 326.688774][T14633] smbdirect: ib_dev[sy2] removed [ 326.735813][ T4950] Bluetooth: hci4: command tx timeout [ 326.760365][T16938] IPVS: length: 55 != 8 [ 326.799644][T16944] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3027'. [ 326.809947][T16944] openvswitch: netlink: Flow key attr not present in new flow. [ 326.852547][T16940] veth0_to_batadv: entered promiscuous mode [ 326.877314][T16940] veth0_to_batadv: entered allmulticast mode [ 327.046648][T16952] tipc: Enabling of bearer rejected, failed to enable media [ 327.113045][T16958] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 327.146041][T16958] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3031'. [ 327.171889][T16958] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3031'. [ 327.221166][T16958] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3031'. [ 327.267286][T16962] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 327.288771][T16962] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3031'. [ 327.315632][T16962] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3031'. [ 327.369802][T16971] netlink: 'syz.0.3033': attribute type 4 has an invalid length. [ 327.459224][ T13] IPVS: stop unused estimator thread 0... [ 327.572450][T16987] __nla_validate_parse: 1 callbacks suppressed [ 327.572465][T16987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3038'. [ 327.596982][T16988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3035'. [ 327.625566][T16987] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3038'. [ 327.814854][T16987] veth3: entered promiscuous mode [ 327.917578][T17009] openvswitch: netlink: Multiple metadata blocks provided [ 327.942866][T17010] openvswitch: netlink: Multiple metadata blocks provided [ 328.048735][T16755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 328.100112][T16755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.144877][T16755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 328.193092][T16755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.223694][T16755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 328.252590][T16755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.276325][T16755] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.299525][T16755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.636626][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3054'. [ 328.738566][T17052] bond16 (unregistering): Released all slaves [ 328.815213][ T4950] Bluetooth: hci4: command tx timeout [ 328.997048][T16755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.042239][T17079] netlink: 'syz.0.3059': attribute type 3 has an invalid length. [ 329.051993][T16755] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.108333][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.115509][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.163964][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.171175][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.233883][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3060'. [ 329.322961][T17091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3063'. [ 329.387328][T17091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3063'. [ 329.687731][T17118] sctp: [Deprecated]: syz.2.3068 (pid 17118) Use of int in maxseg socket option. [ 329.687731][T17118] Use struct sctp_assoc_value instead [ 329.740923][T17118] netlink: 'syz.2.3068': attribute type 1 has an invalid length. [ 330.023758][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3073'. [ 330.065547][T17134] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 330.108107][T17134] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 330.132770][T17145] netlink: 'syz.0.3075': attribute type 1 has an invalid length. [ 330.202004][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3073'. [ 330.217114][T17143] openvswitch: netlink: Flow actions attr not present in new flow. [ 330.363467][T17152] bond16: (slave gretap4): making interface the new active one [ 330.372014][T17152] bond16: (slave gretap4): Enslaving as an active interface with an up link [ 330.568268][T17170] netlink: 'syz.4.3079': attribute type 13 has an invalid length. [ 330.631351][T16755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.650351][T17175] can: request_module (can-proto-0) failed. [ 330.691234][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3081'. [ 330.821881][T16755] veth0_vlan: entered promiscuous mode [ 330.885003][T16755] veth1_vlan: entered promiscuous mode [ 330.942882][T17198] netlink: 'syz.2.3087': attribute type 7 has an invalid length. [ 330.958843][T17198] netlink: 'syz.2.3087': attribute type 8 has an invalid length. [ 330.961840][T16755] veth0_macvtap: entered promiscuous mode [ 330.979779][T16755] veth1_macvtap: entered promiscuous mode [ 331.030533][T16755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.066213][T16755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.103746][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.124655][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.151039][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.160126][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.411019][ T3391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.440498][ T3391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.590799][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.631938][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.774958][T17232] netlink: Conntrack attr has 3 unknown bytes [ 331.981909][T17243] netlink: 'syz.1.3099': attribute type 11 has an invalid length. [ 332.012920][T17243] netlink: 'syz.1.3099': attribute type 4 has an invalid length. [ 332.171529][ T5648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.194485][ T5648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.206675][ T5648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.216064][ T5648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.223675][ T5648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.624464][T17268] x_tables: unsorted entry at hook 2 [ 332.685088][T17270] __nla_validate_parse: 12 callbacks suppressed [ 332.685105][T17270] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3107'. [ 332.702680][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3107'. [ 332.716698][T17270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3107'. [ 332.728066][T17270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3107'. [ 332.738356][T17270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3107'. [ 332.765498][T17270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3107'. [ 332.908518][T17279] netlink: 'syz.4.3109': attribute type 10 has an invalid length. [ 332.984930][T17279] team0: Port device dummy0 added [ 333.033387][T17284] netlink: 'syz.2.3110': attribute type 1 has an invalid length. [ 333.067307][T17284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.099203][T17284] bond1: (slave geneve2): making interface the new active one [ 333.109354][T17284] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 333.120199][T17250] lo speed is unknown, defaulting to 1000 [ 333.501291][T17304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.709328][T17319] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3120'. [ 333.752298][T17319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3120'. [ 333.849399][T17327] netlink: 'syz.1.3121': attribute type 39 has an invalid length. [ 334.192886][T17341] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3127'. [ 334.231542][T17343] x_tables: duplicate underflow at hook 1 [ 334.262473][ T5648] Bluetooth: hci0: command tx timeout [ 334.326424][T17350] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 334.422585][T17353] openvswitch: netlink: IPv4 tun info is not correct [ 334.552382][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3131'. [ 334.599600][T17250] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.607060][T17250] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.614422][T17250] bridge_slave_0: entered allmulticast mode [ 334.622599][T17250] bridge_slave_0: entered promiscuous mode [ 334.633677][T17250] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.641303][T17250] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.648859][T17250] bridge_slave_1: entered allmulticast mode [ 334.672954][T17250] bridge_slave_1: entered promiscuous mode [ 334.792371][T17250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.818031][T17250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.991358][T17250] team0: Port device team_slave_0 added [ 335.006602][T17250] team0: Port device team_slave_1 added [ 335.069483][T17250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.089845][T17250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.118738][T17250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.156440][T17250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.172073][T17250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.268244][T17250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.406118][T17250] hsr_slave_0: entered promiscuous mode [ 335.428684][T17250] hsr_slave_1: entered promiscuous mode [ 335.448438][T17250] debugfs: 'hsr0' already exists in 'hsr' [ 335.458307][T17250] Cannot create hsr debugfs directory [ 335.487194][T17397] IPv6: Can't replace route, no match found [ 335.595902][T17405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.839046][T17422] pimreg3: entered allmulticast mode [ 335.915028][T17431] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20003 [ 335.968024][T17426] netlink: 'syz.4.3151': attribute type 1 has an invalid length. [ 336.113235][T17250] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.124644][T17250] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.258669][T17250] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.269467][T17250] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.336150][ T5648] Bluetooth: hci0: command tx timeout [ 336.444755][T17250] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.456283][T17250] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.549902][T17250] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.567161][T17250] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.632126][T17478] x_tables: duplicate underflow at hook 2 [ 337.140188][T17509] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.220160][T17250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 337.248398][T17250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.289313][T17250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 337.314680][T17250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.342738][T17250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 337.356079][T17519] netlink: 'syz.4.3177': attribute type 1 has an invalid length. [ 337.385680][T17519] netlink: 'syz.4.3177': attribute type 7 has an invalid length. [ 337.402708][T17250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.403469][T17519] netlink: 'syz.4.3177': attribute type 8 has an invalid length. [ 337.434796][T17250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 337.480200][T17250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.574592][T17533] tc_dump_action: action bad kind [ 337.692782][T17538] bond17: option xmit_hash_policy: invalid value (64) [ 337.703342][T17538] bond17 (unregistering): Released all slaves [ 337.926504][T17250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.958247][T17250] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.973654][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.980864][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.019735][ T3391] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.026972][ T3391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.387092][T17588] __nla_validate_parse: 11 callbacks suppressed [ 338.387118][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3193'. [ 338.416487][ T5648] Bluetooth: hci0: command tx timeout [ 338.684469][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3199'. [ 338.694673][T17609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3199'. [ 338.713256][T14633] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.722700][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3199'. [ 338.740146][T14633] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.750653][T17609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3199'. [ 338.762734][T14633] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.788708][T14633] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.952755][T17625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3204'. [ 338.978375][T17625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3204'. [ 338.988256][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3204'. [ 339.026262][T17628] bridge1: entered promiscuous mode [ 339.038854][T17628] bridge1: entered allmulticast mode [ 339.134419][T17250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.187076][T17640] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3207'. [ 339.277121][T17250] veth0_vlan: entered promiscuous mode [ 339.310771][T17250] veth1_vlan: entered promiscuous mode [ 339.404482][T17250] veth0_macvtap: entered promiscuous mode [ 339.422591][T17250] veth1_macvtap: entered promiscuous mode [ 339.488621][T17250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.527913][T17250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.571759][T14635] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.598596][T14635] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.644887][T14635] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.664313][T14635] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.931519][T14635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.958618][T14635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.034908][T17678] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3221'. [ 340.063101][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.094671][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.192361][T17693] veth0_to_bridge: mtu less than device minimum [ 340.333912][T17695] bond8: entered promiscuous mode [ 340.372627][T17695] 8021q: adding VLAN 0 to HW filter on device bond8 [ 340.496810][ T5648] Bluetooth: hci0: command tx timeout [ 340.542715][T17714] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.614675][T17717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.651692][T17714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.681372][ T4950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.692667][T17714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.704105][ T4950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.714288][ T4950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.724852][ T4950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.732630][ T4950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.933422][T17728] 8021q: VLANs not supported on ip6tnl0 [ 341.592635][T17718] lo speed is unknown, defaulting to 1000 [ 342.176444][T17808] syzkaller0: entered promiscuous mode [ 342.196778][T17808] syzkaller0: entered allmulticast mode [ 342.277642][T17812] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 342.292559][T17812] bond1 (unregistering): Released all slaves [ 342.620830][T17831] syzkaller0: entered promiscuous mode [ 342.627371][T17831] syzkaller0: entered allmulticast mode [ 342.815927][ T5648] Bluetooth: hci1: command tx timeout [ 342.977532][T17850] xt_ecn: cannot match TCP bits for non-tcp packets [ 343.205433][T17718] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.212740][T17718] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.222037][T17718] bridge_slave_0: entered allmulticast mode [ 343.231256][T17718] bridge_slave_0: entered promiscuous mode [ 343.271499][T17718] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.281923][T17718] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.291299][T17718] bridge_slave_1: entered allmulticast mode [ 343.300926][T17718] bridge_slave_1: entered promiscuous mode [ 343.322264][T17869] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 343.356680][T17869] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 343.364860][T17869] gretap1: entered promiscuous mode [ 343.375022][T17869] gretap1: entered allmulticast mode [ 343.438076][T17864] netlink: 'syz.3.3268': attribute type 21 has an invalid length. [ 343.441788][T17718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.462221][T17718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.507293][ T10] IPVS: starting estimator thread 0... [ 343.569312][T17864] __nla_validate_parse: 9 callbacks suppressed [ 343.569329][T17864] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3268'. [ 343.617444][T17881] IPVS: using max 33 ests per chain, 79200 per kthread [ 343.629784][T17718] team0: Port device team_slave_0 added [ 343.662271][T17718] team0: Port device team_slave_1 added [ 343.837936][T17718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.853098][T17718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.902552][T17718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.916718][T17718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.923753][T17718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.958693][T17718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.085126][T17718] hsr_slave_0: entered promiscuous mode [ 344.101560][T17718] hsr_slave_1: entered promiscuous mode [ 344.108169][T17718] debugfs: 'hsr0' already exists in 'hsr' [ 344.114319][T17718] Cannot create hsr debugfs directory [ 344.293520][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3282'. [ 344.346703][T17932] netlink: 'syz.3.3282': attribute type 11 has an invalid length. [ 344.370663][T17932] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3282'. [ 344.372700][T17930] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3284'. [ 344.435541][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3282'. [ 344.483150][T17938] netlink: 'syz.2.3285': attribute type 10 has an invalid length. [ 344.485129][T17718] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.536281][T17938] team0: Device dummy0 failed to register rx_handler [ 344.583667][T17939] : entered promiscuous mode [ 344.651525][T17718] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.755644][T17718] bond0: (slave netdevsim1): Releasing backup interface [ 344.769988][T17718] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.830294][T17718] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.896536][ T5648] Bluetooth: hci1: command tx timeout [ 345.162984][T17718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 345.173343][T17718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.181454][T17718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 345.190329][T17718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.199209][T17718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 345.212709][T17718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.231287][T17718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 345.248404][T17718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.386421][T17718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.425478][T17718] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.449372][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.456554][ T1058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.475360][T14635] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.482529][T14635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.491447][T17972] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3293'. [ 346.051442][T17718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.149311][T18006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3299'. [ 346.239396][T17718] veth0_vlan: entered promiscuous mode [ 346.283173][T17718] veth1_vlan: entered promiscuous mode [ 346.412701][T17718] veth0_macvtap: entered promiscuous mode [ 346.443426][T17718] veth1_macvtap: entered promiscuous mode [ 346.467363][T18021] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3302'. [ 346.526723][T17718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.564609][T17718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.599212][T14636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.620993][T14636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.649921][T14636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.677951][T14636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.755275][ T29] audit: type=1107 audit(1778975922.284:12): pid=18033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 346.912571][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3306'. [ 347.005996][ T5648] Bluetooth: hci1: command tx timeout [ 348.675482][T17980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.784728][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.806343][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.842842][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3309'. [ 349.020626][T18049] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.028310][T18049] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.055753][ T5648] Bluetooth: hci1: command tx timeout [ 349.173132][T18049] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 349.174840][T18071] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3314'. [ 349.284319][T14636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.314234][T14636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.612061][T18100] bridge_slave_0 (unregistering): left allmulticast mode [ 349.644527][T18100] bridge_slave_0 (unregistering): left promiscuous mode [ 349.661800][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3322'. [ 349.670997][T18104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3322'. [ 349.681844][T18100] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.882911][ T4950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.900318][ T4950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.917136][ T4950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.932307][ T4950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.940424][ T4950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.052591][T18121] netlink: 'syz.0.3329': attribute type 1 has an invalid length. [ 350.063557][T18121] netlink: 'syz.0.3329': attribute type 1 has an invalid length. [ 350.117858][T18124] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3328'. [ 350.122325][T18127] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3330'. [ 350.137321][T18125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3327'. [ 350.166866][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3327'. [ 350.202036][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3327'. [ 350.274593][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3327'. [ 350.402609][T18125] team0 (unregistering): Port device team_slave_0 removed [ 350.482412][T18125] team0 (unregistering): Port device team_slave_1 removed [ 350.552043][T18122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.837089][T18113] lo speed is unknown, defaulting to 1000 [ 351.135929][ T4950] Bluetooth: hci1: command tx timeout [ 351.391074][T18185] netlink: 'syz.2.3342': attribute type 1 has an invalid length. [ 351.415373][T18185] netlink: 'syz.2.3342': attribute type 1 has an invalid length. [ 351.468619][T18190] geneve2: entered promiscuous mode [ 352.018822][ T4950] Bluetooth: hci2: command tx timeout [ 352.437527][T18244] netlink: 'syz.2.3362': attribute type 15 has an invalid length. [ 352.581216][T18113] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.592309][T18113] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.603808][T18113] bridge_slave_0: entered allmulticast mode [ 352.611835][T18113] bridge_slave_0: entered promiscuous mode [ 352.620613][T18113] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.627952][T18113] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.635837][T18113] bridge_slave_1: entered allmulticast mode [ 352.658160][T18113] bridge_slave_1: entered promiscuous mode [ 352.717794][T18113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.739512][T18113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.834851][T18262] hsr_slave_1 (unregistering): left promiscuous mode [ 352.888476][T18113] team0: Port device team_slave_0 added [ 352.897533][T18113] team0: Port device team_slave_1 added [ 352.937818][T18113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.944810][T18113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.015811][T18113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.039522][T18113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.047079][T18113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.079135][T18113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.194799][T18113] hsr_slave_0: entered promiscuous mode [ 353.227662][T18113] hsr_slave_1: entered promiscuous mode [ 353.250884][T18113] debugfs: 'hsr0' already exists in 'hsr' [ 353.259096][T18113] Cannot create hsr debugfs directory [ 353.260582][T18288] netlink: 'syz.3.3369': attribute type 21 has an invalid length. [ 353.341548][T18290] sctp: [Deprecated]: syz.0.3373 (pid 18290) Use of int in maxseg socket option. [ 353.341548][T18290] Use struct sctp_assoc_value instead [ 353.405931][T18292] syz_tun: entered allmulticast mode [ 353.643033][T18113] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.655379][T18113] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 353.667361][T18113] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.802316][T18113] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.813191][T18113] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 353.824033][T18113] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.962024][T18113] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.973121][T18113] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 353.984077][T18113] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.072229][T18113] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.085385][T18113] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 354.097050][ T4950] Bluetooth: hci2: command tx timeout [ 354.102955][T18113] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.177856][T18291] syz_tun: left allmulticast mode [ 354.386711][T18113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 354.422901][T18113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.444004][T18113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 354.475843][T18113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 354.493266][T18113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.506221][T18113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.522978][T18113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 354.533332][T18113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.671307][T18365] syzkaller1: entered promiscuous mode [ 354.677081][T18365] syzkaller1: entered allmulticast mode [ 354.731007][T18377] xt_SECMARK: invalid mode: 9 [ 354.756762][T18113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.818534][T18113] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.840727][T18379] __nla_validate_parse: 10 callbacks suppressed [ 354.840773][T18379] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3397'. [ 354.870260][T14636] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.877478][T14636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.908171][T14636] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.915393][T14636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.496668][T18424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3410'. [ 355.565751][T18421] syzkaller0: entered promiscuous mode [ 355.582159][T18421] syzkaller0: entered allmulticast mode [ 355.637824][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3413'. [ 355.648821][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3413'. [ 355.652248][T18424] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 355.683447][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3412'. [ 355.703257][T18430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3412'. [ 355.721569][T18430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3412'. [ 355.921901][T18448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3418'. [ 356.009272][T18113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.185776][ T4950] Bluetooth: hci2: command tx timeout [ 356.253485][T18470] netlink: 'syz.3.3425': attribute type 1 has an invalid length. [ 356.275777][T18470] netlink: 476 bytes leftover after parsing attributes in process `syz.3.3425'. [ 356.295132][T18470] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3425'. [ 356.681819][T18493] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 356.710510][T18493] netlink: 'syz.0.3428': attribute type 11 has an invalid length. [ 356.740633][T18113] veth0_vlan: entered promiscuous mode [ 356.855138][T18113] veth1_vlan: entered promiscuous mode [ 356.983346][T18513] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 357.054507][T18113] veth0_macvtap: entered promiscuous mode [ 357.080259][T18113] veth1_macvtap: entered promiscuous mode [ 357.134402][T18113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.165048][ T29] audit: type=1804 audit(1778975932.694:13): pid=18519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3439" name="/newroot/138/cgroup.controllers" dev="tmpfs" ino=721 res=1 errno=0 [ 357.213427][T18113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.231416][ T29] audit: type=1800 audit(1778975932.724:14): pid=18519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3439" name="cgroup.controllers" dev="tmpfs" ino=721 res=0 errno=0 [ 357.258069][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.287561][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.314197][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.337841][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.567925][T18539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.614389][T18539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.653729][T14633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.664461][T18544] ip6tnl0: entered promiscuous mode [ 357.675357][T14633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.770064][T14633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.797891][T14633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.881108][T18559] Bluetooth: MGMT ver 1.23 [ 357.935693][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 358.255443][ T4950] Bluetooth: hci2: command tx timeout [ 358.417780][T18594] netlink: 'syz.3.3453': attribute type 1 has an invalid length. [ 358.432151][T18594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.439436][T18594] IPv6: NLM_F_CREATE should be set when creating new route [ 358.469030][T18597] netlink: 'syz.3.3453': attribute type 1 has an invalid length. [ 358.500917][T18597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.652880][T18611] ieee802154 phy1 wpan1: encryption failed: -22 [ 359.958767][T18648] __nla_validate_parse: 7 callbacks suppressed [ 359.958781][T18648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'. [ 360.010603][T18653] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 360.043968][T18657] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3468'. [ 360.063268][T18653] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 360.077432][T18653] bond4 (unregistering): Released all slaves [ 360.240800][T18667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3471'. [ 360.370004][T18677] netlink: 'syz.3.3475': attribute type 3 has an invalid length. [ 360.442060][T18681] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 360.467663][T18683] openvswitch: netlink: IP tunnel dst address not specified [ 361.074075][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3489'. [ 361.106150][T18722] netlink: 91 bytes leftover after parsing attributes in process `syz.0.3489'. [ 361.456609][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3498'. [ 361.490392][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3496'. [ 361.496538][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3498'. [ 361.500904][T18747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3496'. [ 361.527607][T18755] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.3499'. [ 361.681012][T18763] netlink: 'syz.1.3502': attribute type 1 has an invalid length. [ 361.715903][T18755] syzkaller0: entered promiscuous mode [ 361.735258][T18755] syzkaller0: entered allmulticast mode [ 361.823286][ T29] audit: type=1804 audit(1778975937.354:15): pid=18770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3504" name="/newroot/90/cgroup.controllers" dev="tmpfs" ino=474 res=1 errno=0 [ 361.903073][ T29] audit: type=1800 audit(1778975937.354:16): pid=18770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3504" name="cgroup.controllers" dev="tmpfs" ino=474 res=0 errno=0 [ 363.556976][T18779] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 363.703111][T18791] openvswitch: netlink: Invalid VLAN frame [ 364.099567][T18819] netlink: 'syz.2.3517': attribute type 1 has an invalid length. [ 364.132750][T18819] netlink: 'syz.2.3517': attribute type 3 has an invalid length. [ 365.111148][T18890] __nla_validate_parse: 7 callbacks suppressed [ 365.111164][T18890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3540'. [ 365.162489][T18895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3540'. [ 365.263503][T18868] nbd2: detected capacity change from 0 to 63 [ 365.389798][T18900] syz_tun: entered allmulticast mode [ 365.409186][T18900] pim6reg: entered allmulticast mode [ 365.418864][ T5648] block nbd2: Receive control failed (result -104) [ 365.428219][ T4950] block nbd2: Receive control failed (result -32) [ 365.503743][T18900] syz_tun (unregistering): left allmulticast mode [ 365.683385][T14635] nci: nci_rsp_packet: unknown rsp opcode 0xa06 [ 365.786707][T18880] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 365.879504][T18924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3548'. [ 365.967580][T18935] ksmbd: Unknown IPC event: 3, ignore. [ 366.128952][T18946] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3552'. [ 366.149376][T18946] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3552'. [ 366.169679][T18946] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3552'. [ 366.296273][T18958] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3556'. [ 366.306264][T18958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3556'. [ 366.322118][T18958] veth0_macvtap: left promiscuous mode [ 366.446184][T18963] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 366.456734][T18965] netlink: 'syz.3.3560': attribute type 1 has an invalid length. [ 366.618645][T18969] macvtap0: entered promiscuous mode [ 366.624159][T18969] team_slave_1: entered promiscuous mode [ 366.632195][T18969] macvtap0: entered allmulticast mode [ 366.641480][T18969] team_slave_1: entered allmulticast mode [ 366.682015][T18970] macvtap1: entered promiscuous mode [ 366.704610][T18970] macvtap1: entered allmulticast mode [ 366.726936][T18982] netlink: 'syz.4.3564': attribute type 1 has an invalid length. [ 366.741828][T18982] No such timeout policy "syz0" [ 366.770874][T18986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3566'. [ 366.780287][T18986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3566'. [ 366.833290][T18986] netlink: 'syz.3.3566': attribute type 21 has an invalid length. [ 366.865494][T18988] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 366.884214][T18988] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 366.985534][ T4950] Bluetooth: hci1: command 0x0401 tx timeout [ 367.001553][T18990] tc_dump_action: action bad kind [ 367.328419][T19018] netlink: 'syz.2.3577': attribute type 1 has an invalid length. [ 367.551482][T19035] netlink: 'syz.1.3581': attribute type 1 has an invalid length. [ 367.684987][T19035] 8021q: adding VLAN 0 to HW filter on device bond3 [ 367.909575][T19051] netlink: 'syz.2.3587': attribute type 2 has an invalid length. [ 368.092537][T19060] lo speed is unknown, defaulting to 1000 [ 368.224041][T19073] x_tables: duplicate underflow at hook 1 [ 368.398410][T19080] tipc: Started in network mode [ 368.409531][T19080] tipc: Node identity e0000001, cluster identity 4711 [ 368.427597][T19080] tipc: Enabling of bearer rejected, failed to enable media [ 368.448003][T19084] tipc: Enabling of bearer rejected, media not registered [ 368.469287][T19075] netlink: 'syz.0.3597': attribute type 13 has an invalid length. [ 368.479571][T19075] veth1_macvtap: left promiscuous mode [ 368.485138][T19075] macsec0: entered allmulticast mode [ 368.560443][T19089] sch_tbf: peakrate 7 is lower than or equals to rate 2147483650 ! [ 369.472351][T19140] netlink: 'syz.0.3619': attribute type 1 has an invalid length. [ 369.594242][T19146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.742650][T19155] sctp: [Deprecated]: syz.1.3623 (pid 19155) Use of int in maxseg socket option. [ 369.742650][T19155] Use struct sctp_assoc_value instead [ 370.066745][T19174] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 370.534968][T19203] __nla_validate_parse: 20 callbacks suppressed [ 370.534985][T19203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3637'. [ 370.774591][T19219] netlink: 'syz.3.3641': attribute type 8 has an invalid length. [ 370.783555][T19222] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3643'. [ 371.017817][T19237] netlink: 'syz.0.3647': attribute type 1 has an invalid length. [ 371.044103][T19240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3648'. [ 371.209362][T19256] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3653'. [ 371.428044][T19273] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3655'. [ 371.454651][T19275] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 371.459620][T19273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.464587][T19275] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3656'. [ 371.709269][T19289] netlink: 'syz.3.3660': attribute type 25 has an invalid length. [ 371.742235][T19292] IPv6: NLM_F_CREATE should be specified when creating new route [ 371.811111][T19295] IPv6: NLM_F_CREATE should be specified when creating new route [ 371.819734][T19295] netlink: 'syz.3.3663': attribute type 1 has an invalid length. [ 371.931823][T19301] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3666'. [ 372.014813][T19307] netlink: 'syz.3.3668': attribute type 9 has an invalid length. [ 372.200248][T19313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3668'. [ 372.302405][T19331] netlink: 'syz.1.3672': attribute type 2 has an invalid length. [ 372.361391][T19333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3673'. [ 372.610234][T19353] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 372.626939][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3679'. [ 372.646711][T19349] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 372.982395][T19374] erspan0: entered promiscuous mode [ 373.009381][T19374] gretap0: entered promiscuous mode [ 373.021554][T19374] debugfs: 'hsr1' already exists in 'hsr' [ 373.043455][T19374] Cannot create hsr debugfs directory [ 373.355934][T19400] netlink: 'syz.3.3694': attribute type 13 has an invalid length. [ 373.371079][T19400] netlink: 'syz.3.3694': attribute type 58 has an invalid length. [ 373.418797][T19405] netlink: 'syz.1.3697': attribute type 4 has an invalid length. [ 373.457417][T19405] netlink: 'syz.1.3697': attribute type 4 has an invalid length. [ 373.894164][T19434] erspan0: entered allmulticast mode [ 374.040475][T19435] bond1: Unable to set down delay as MII monitoring is disabled [ 374.065717][T19435] bond1 (unregistering): Released all slaves [ 374.337168][T19463] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 374.362832][T19463] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 374.826770][T19490] bond4: entered promiscuous mode [ 374.840666][T19490] macvlan3: entered promiscuous mode [ 374.846318][T19490] macvlan3: entered allmulticast mode [ 374.852778][T19490] bond4: (slave macvlan3): Opening slave failed [ 375.614210][T19531] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 375.653063][T19533] __nla_validate_parse: 11 callbacks suppressed [ 375.653081][T19533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3726'. [ 375.921859][T19546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3728'. [ 375.961401][T19550] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 375.990620][T19555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3730'. [ 375.996667][T19553] ip6t_srh: unknown srh invflags 4000 [ 376.095004][T19553] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 376.115079][T19553] IPVS: nq: FWM 3 0x00000003 - no destination available [ 376.122658][ T5736] IPVS: starting estimator thread 0... [ 376.130154][T19558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3732'. [ 376.132082][T19553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3729'. [ 376.169606][T19564] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3735'. [ 376.200753][T19558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3732'. [ 376.215311][T19561] IPVS: using max 35 ests per chain, 84000 per kthread [ 376.235518][T19558] ip6gre0: entered promiscuous mode [ 376.304777][T19570] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.319454][T19570] syzkaller1: entered promiscuous mode [ 376.332144][T19570] syzkaller1: entered allmulticast mode [ 376.383709][T19576] syzkaller0: entered promiscuous mode [ 376.389589][T19576] syzkaller0: entered allmulticast mode [ 376.472108][T19578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3739'. [ 376.698348][T19591] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3743'. [ 376.727913][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3746'. [ 377.043090][T19618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.049309][T19613] macsec1: entered promiscuous mode [ 377.057711][T19613] bridge0: entered promiscuous mode [ 377.067104][T19613] macsec1: entered allmulticast mode [ 377.072924][T19613] bridge0: entered allmulticast mode [ 377.079685][T19613] bridge0: port 1(macsec1) entered blocking state [ 377.086669][T19613] bridge0: port 1(macsec1) entered disabled state [ 377.100410][T19613] bridge0: left allmulticast mode [ 377.115603][T19613] bridge0: left promiscuous mode [ 377.354223][T19643] macsec1: entered promiscuous mode [ 377.365828][T19643] batadv0: entered promiscuous mode [ 377.393071][T19643] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 377.401952][T19643] batadv0: left promiscuous mode [ 377.434806][T19642] macsec1: entered promiscuous mode [ 377.441730][T19642] batadv0: entered promiscuous mode [ 377.449033][T19642] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 377.465646][T19642] batadv0: left promiscuous mode [ 377.482421][ T29] audit: type=1800 audit(1778975953.014:17): pid=19647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3756" name="memory.events" dev="tmpfs" ino=659 res=0 errno=0 [ 377.699585][ T5768] IPVS: starting estimator thread 0... [ 377.805868][T19662] IPVS: using max 57 ests per chain, 136800 per kthread [ 378.418606][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.926256][T19610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.132178][T19668] netlink: 'syz.3.3762': attribute type 2 has an invalid length. [ 380.431558][T19687] netlink: 'syz.0.3772': attribute type 4 has an invalid length. [ 380.478012][T19685] syzkaller0: entered promiscuous mode [ 380.484673][T19685] syzkaller0: entered allmulticast mode [ 380.613146][ T1051] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 380.626971][ T1051] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 380.636316][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 380.825981][T19707] lo speed is unknown, defaulting to 1000 [ 380.985645][ T5736] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 381.132346][T19730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.354259][T19742] __nla_validate_parse: 12 callbacks suppressed [ 381.354276][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3787'. [ 381.473537][T19746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3789'. [ 381.535518][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 381.659257][T19758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3791'. [ 381.725044][T19760] netlink: 'syz.1.3793': attribute type 1 has an invalid length. [ 381.742802][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3793'. [ 381.770047][T19760] netlink: 'syz.1.3793': attribute type 1 has an invalid length. [ 381.787942][T19761] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3793'. [ 381.942192][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3795'. [ 381.985083][T19768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3795'. [ 382.024751][T19771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3796'. [ 382.078868][T19773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3797'. [ 382.121890][T19777] netlink: 'syz.1.3799': attribute type 1 has an invalid length. [ 382.144658][T19777] netlink: 'syz.1.3799': attribute type 11 has an invalid length. [ 382.154090][T19777] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3799'. [ 382.247886][T19788] netlink: 'syz.2.3797': attribute type 3 has an invalid length. [ 382.260045][T19788] netlink: 'syz.2.3797': attribute type 1 has an invalid length. [ 383.232305][T19845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.312405][T19845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.517290][T19859] netlink: 'syz.1.3821': attribute type 11 has an invalid length. [ 383.706445][T19868] syzkaller0: entered promiscuous mode [ 383.724638][T19868] syzkaller0: entered allmulticast mode [ 384.096070][T19881] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 384.128060][T19881] xt_hashlimit: size too large, truncated to 1048576 [ 384.639406][T19911] bridge: RTM_NEWNEIGH with invalid ether address [ 384.752498][T19923] bridge: RTM_NEWNEIGH with invalid ether address [ 384.895342][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 384.996164][T19947] syzkaller1: entered promiscuous mode [ 385.001754][T19947] syzkaller1: entered allmulticast mode [ 385.467745][T19911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.477743][T19928] netlink: 'syz.1.3838': attribute type 1 has an invalid length. [ 385.787630][T19980] netlink: 'syz.2.3855': attribute type 12 has an invalid length. [ 385.899688][T19987] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 385.999384][T19989] nbd: couldn't find device at index 1 [ 386.127515][T20005] netlink: 'syz.0.3862': attribute type 1 has an invalid length. [ 386.142278][ T4950] block nbd3: Receive control failed (result -32) [ 386.395082][T20028] __nla_validate_parse: 14 callbacks suppressed [ 386.395097][T20028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3870'. [ 386.416506][T20030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3869'. [ 386.474977][T20032] netlink: 'syz.0.3871': attribute type 1 has an invalid length. [ 386.497742][T20032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3871'. [ 386.619345][T20037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.690037][T20043] netlink: 'syz.3.3875': attribute type 4 has an invalid length. [ 386.714631][T20045] netlink: 135 bytes leftover after parsing attributes in process `syz.0.3876'. [ 386.724682][T20045] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3876'. [ 386.752288][T20045] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3876'. [ 386.963613][T20059] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3880'. [ 387.121518][T20069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3881'. [ 387.209024][T20072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3885'. [ 387.418332][T20087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3892'. [ 387.536868][T20094] openvswitch: netlink: IP tunnel dst address not specified [ 387.838629][T20115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.860939][T20118] netlink: 'syz.0.3903': attribute type 1 has an invalid length. [ 387.865779][T20121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.872673][T20118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.159816][T20137] tipc: Started in network mode [ 388.179167][T20137] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 388.199677][T20137] tipc: Enabling of bearer rejected, failed to enable media [ 388.413291][T20155] xt_hashlimit: size too large, truncated to 1048576 [ 388.426069][T20157] netlink: 'syz.3.3916': attribute type 12 has an invalid length. [ 388.493320][T20163] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.541223][T20167] netlink: 'syz.2.3914': attribute type 1 has an invalid length. [ 388.606148][T20163] bridge_slave_0 (unregistering): left allmulticast mode [ 388.613224][T20163] bridge_slave_0 (unregistering): left promiscuous mode [ 388.647707][T20163] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.973197][T20188] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 389.276963][T20205] netlink: 'syz.1.3930': attribute type 1 has an invalid length. [ 389.285511][T20203] openvswitch: netlink: Multiple metadata blocks provided [ 389.301686][ T29] audit: type=1107 audit(1778975964.834:18): pid=20207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ą{8uЕ(_ҹ#܌ffcʸb"6ф9qzDG$]FJ-G+Yk(1ٜ- h ' [ 389.303301][ T4950] block nbd5: Receive control failed (result -32) [ 389.462071][T20219] netlink: 'syz.0.3933': attribute type 11 has an invalid length. [ 389.761642][T20241] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.769176][T20241] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.841181][T20246] macvtap1: entered promiscuous mode [ 389.856298][T20246] team0: entered promiscuous mode [ 389.875129][T20246] team_slave_0: entered promiscuous mode [ 389.891164][T20246] team_slave_1: entered promiscuous mode [ 389.913424][T20246] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 389.922473][T20246] team0: Device macvtap1 is already an upper device of the team interface [ 389.932952][T20255] netlink: 'syz.3.3942': attribute type 1 has an invalid length. [ 389.946157][T20246] team0: left promiscuous mode [ 389.969766][ T5758] team_slave_0: left promiscuous mode [ 389.976236][ T5758] team_slave_1: left promiscuous mode [ 390.040418][T20254] rdma_op ffff8880263881f0 conn xmit_rdma 0000000000000000 [ 390.099103][T20258] bond1: (slave gretap2): making interface the new active one [ 390.110313][T20258] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 390.133104][T20263] bond1: (slave bridge6): Enslaving as an active interface with a down link [ 390.157662][T20255] macvlan2: entered promiscuous mode [ 390.163176][T20255] macvlan2: entered allmulticast mode [ 390.176149][T20255] bond1: entered promiscuous mode [ 390.181346][T20255] gretap2: entered promiscuous mode [ 390.189245][T20255] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 390.197328][T20255] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 390.214129][T20255] bond1: left promiscuous mode [ 390.219542][T20255] gretap2: left promiscuous mode [ 390.887837][T20303] validate_nla: 1 callbacks suppressed [ 390.887987][T20303] netlink: 'syz.4.3953': attribute type 14 has an invalid length. [ 391.449906][T20333] __nla_validate_parse: 19 callbacks suppressed [ 391.449922][T20333] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3963'. [ 391.485952][T20333] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3963'. [ 391.508536][T20337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3964'. [ 391.535349][T20333] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3963'. [ 391.561997][T20312] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20000 [ 391.571219][T20335] tc_dump_action: action bad kind [ 391.574850][T20333] netlink: 'syz.0.3963': attribute type 4 has an invalid length. [ 391.599578][T20340] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.3965'. [ 391.623505][T20340] pim6reg1: entered allmulticast mode [ 392.431539][T20386] xt_nat: multiple ranges no longer supported [ 392.443711][T20386] netlink: 'syz.4.3980': attribute type 10 has an invalid length. [ 392.453266][T20381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3977'. [ 392.517610][T20386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.538616][T20386] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 392.649835][T20398] tipc: Enabled bearer , priority 11 [ 392.749677][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3984'. [ 392.848736][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3984'. [ 392.880874][T20411] netlink: 'syz.2.3990': attribute type 12 has an invalid length. [ 392.922036][T20411] netlink: 'syz.2.3990': attribute type 1 has an invalid length. [ 392.948344][T20411] netlink: 'syz.2.3990': attribute type 7 has an invalid length. [ 392.989910][T20411] netlink: 'syz.2.3990': attribute type 8 has an invalid length. [ 393.044754][T20411] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3990'. [ 393.159072][T20430] bond0: entered allmulticast mode [ 393.195633][T20430] bond_slave_0: entered allmulticast mode [ 393.217934][T20430] bond_slave_1: entered allmulticast mode [ 393.232306][T20430] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 393.508136][T20449] bond2 (unregistering): Released all slaves [ 393.609664][T20447] sch_fq: defrate 0 ignored. [ 393.723485][T20462] macvtap1: entered promiscuous mode [ 393.765895][T20462] macvtap1: entered allmulticast mode [ 393.775800][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.805905][T20462] veth1_vlan: entered allmulticast mode [ 393.818753][ T10] tipc: Node number set to 3758096385 [ 393.889068][T20476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4005'. [ 393.891794][T20470] macvtap2: entered promiscuous mode [ 393.921229][T20470] macvtap2: entered allmulticast mode [ 393.944054][T20475] : renamed from bond0 (while UP) [ 394.070918][T20487] dummy0: mtu less than device minimum [ 394.087346][T20492] netlink: 'syz.2.4013': attribute type 8 has an invalid length. [ 394.102199][T20495] netlink: 'syz.2.4013': attribute type 8 has an invalid length. [ 394.180191][T20497] netlink: 'syz.0.4011': attribute type 10 has an invalid length. [ 394.226409][T20497] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.263381][T20497] bond0: (slave team0): Enslaving as an active interface with an up link [ 394.660073][T20543] openvswitch: netlink: IPv4 tun info is not correct [ 394.691433][T20542] bond2 (unregistering): Released all slaves [ 395.096241][T20504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.701355][ T4964] block nbd2: Connection timed out, retrying (0/2 alive) [ 395.712900][ T4964] block nbd2: Connection timed out, retrying (0/2 alive) [ 395.720966][ T4964] block nbd2: Connection timed out, retrying (0/2 alive) [ 395.728439][ T4964] block nbd2: Connection timed out, retrying (0/2 alive) [ 395.736111][ T4964] block nbd2: Dead connection, failed to find a fallback [ 395.746242][ T4964] block nbd2: shutting down sockets [ 395.751924][ T4964] blk_print_req_error: 138 callbacks suppressed [ 395.751936][ T4964] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.769527][ T4964] buffer_io_error: 138 callbacks suppressed [ 395.769630][ T4964] Buffer I/O error on dev nbd2, logical block 3, async page read [ 395.783868][ T4964] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.793608][ T4964] Buffer I/O error on dev nbd2, logical block 2, async page read [ 395.801644][ T4964] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.810767][ T4964] Buffer I/O error on dev nbd2, logical block 1, async page read [ 395.818595][ T4964] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.827697][ T4964] Buffer I/O error on dev nbd2, logical block 0, async page read [ 395.839695][T16632] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.869045][T16632] Buffer I/O error on dev nbd2, logical block 0, async page read [ 395.878050][T16632] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.889095][T16632] Buffer I/O error on dev nbd2, logical block 1, async page read [ 395.899604][T16632] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.908897][T16632] Buffer I/O error on dev nbd2, logical block 2, async page read [ 395.918786][T16632] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.928363][T16632] Buffer I/O error on dev nbd2, logical block 3, async page read [ 395.936927][T16632] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.946077][T16632] Buffer I/O error on dev nbd2, logical block 0, async page read [ 395.953955][T16632] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.963231][T16632] Buffer I/O error on dev nbd2, logical block 1, async page read [ 395.975731][T16632] ldm_validate_partition_table(): Disk read failed. [ 395.986707][T16632] Dev nbd2: unable to read RDB block 0 [ 396.002861][T16632] nbd2: unable to read partition table [ 396.071636][T16632] ldm_validate_partition_table(): Disk read failed. [ 396.079343][T20611] openvswitch: netlink: Key type 30 is not supported [ 396.089716][T20612] openvswitch: netlink: Key type 30 is not supported [ 396.098753][T16632] Dev nbd2: unable to read RDB block 0 [ 396.124785][T16632] nbd2: unable to read partition table [ 396.211736][T20615] validate_nla: 1 callbacks suppressed [ 396.211753][T20615] netlink: 'syz.4.4047': attribute type 21 has an invalid length. [ 396.231564][T20615] netlink: 'syz.4.4047': attribute type 22 has an invalid length. [ 396.251085][T20615] netlink: 'syz.4.4047': attribute type 23 has an invalid length. [ 396.266594][T20615] netlink: 'syz.4.4047': attribute type 25 has an invalid length. [ 396.279014][T20615] netlink: 'syz.4.4047': attribute type 26 has an invalid length. [ 396.305116][T20620] netlink: 'syz.2.4049': attribute type 26 has an invalid length. [ 396.330598][T20620] netlink: 'syz.2.4049': attribute type 26 has an invalid length. [ 396.754866][T20655] netlink: 'syz.0.4057': attribute type 21 has an invalid length. [ 396.774966][T20655] netlink: 'syz.0.4057': attribute type 22 has an invalid length. [ 396.792466][T20655] netlink: 'syz.0.4057': attribute type 23 has an invalid length. [ 396.821221][T20655] __nla_validate_parse: 9 callbacks suppressed [ 396.821236][T20655] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4057'. [ 397.061853][T20665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4061'. [ 397.067793][T20663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4060'. [ 397.101261][T20663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4060'. [ 397.133389][T20663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4060'. [ 397.292573][T20684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4066'. [ 397.316698][T20684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4066'. [ 397.486212][T20700] veth0: entered promiscuous mode [ 397.511769][T20700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4070'. [ 397.553506][T20700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.650057][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4070'. [ 397.754074][T20700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.119929][T20744] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4078'. [ 399.081933][T20804] syzkaller1: entered promiscuous mode [ 399.119766][T20804] syzkaller1: entered allmulticast mode [ 400.326801][T20888] veth1_macvtap: entered allmulticast mode [ 400.350607][T20888] veth1_macvtap (unregistering): left allmulticast mode [ 400.382765][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057267800: rx timeout, send abort [ 400.394888][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057267800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 400.815047][T20909] openvswitch: netlink: Flow key attr not present in new flow. [ 401.033026][T20923] bridge3: entered promiscuous mode [ 401.040376][T20923] bridge3: entered allmulticast mode [ 401.069171][T20925] bridge4: entered promiscuous mode [ 401.076837][T20925] bridge4: entered allmulticast mode [ 401.651079][T20963] validate_nla: 6 callbacks suppressed [ 401.651095][T20963] netlink: 'syz.0.4138': attribute type 10 has an invalid length. [ 401.682556][T20943] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 401.709143][T20963] macvlan1: entered promiscuous mode [ 401.715842][T20963] macvlan1: entered allmulticast mode [ 401.744111][T20963] veth1_vlan: entered allmulticast mode [ 401.768076][T20963] team0: Port device macvlan1 added [ 401.929302][T20974] __nla_validate_parse: 77 callbacks suppressed [ 401.929318][T20974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4143'. [ 402.089659][T20984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4147'. [ 402.270736][T20991] bond0: (slave bond_slave_1): Releasing backup interface [ 402.292478][T20995] syzkaller1: entered promiscuous mode [ 402.298908][T20995] syzkaller1: entered allmulticast mode [ 402.528759][T21013] pim6reg: entered allmulticast mode [ 402.620798][T21017] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4157'. [ 402.646159][T21017] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4157'. [ 402.662426][T21021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4159'. [ 402.675913][T21017] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4157'. [ 402.685831][T21021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4159'. [ 402.875065][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4163'. [ 402.923664][T21041] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4164'. [ 402.959739][T21043] netlink: 'syz.2.4165': attribute type 1 has an invalid length. [ 402.986917][T21043] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4165'. [ 403.104723][T21053] veth5: entered allmulticast mode [ 403.364784][T21067] pim6reg: entered allmulticast mode [ 403.378713][T21067] pim6reg: left allmulticast mode [ 403.495084][T21069] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 403.512872][T21075] netlink: 'syz.2.4175': attribute type 1 has an invalid length. [ 403.665772][T21075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.711291][T21076] vlan0: entered allmulticast mode [ 403.717196][T21076] bond0: entered allmulticast mode [ 404.114231][T21065] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 404.140607][T21065] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 404.162637][T21115] sctp: [Deprecated]: syz.1.4184 (pid 21115) Use of int in max_burst socket option. [ 404.162637][T21115] Use struct sctp_assoc_value instead [ 404.621174][T21134] bond4: option lp_interval: invalid value (0) [ 404.645528][T21134] bond4: option lp_interval: allowed values 1 - 2147483647 [ 404.657097][T21150] netlink: 'syz.3.4196': attribute type 1 has an invalid length. [ 404.674014][T21134] bond4 (unregistering): Released all slaves [ 404.821580][T21159] bond3: (slave bridge10): making interface the new active one [ 404.823079][T21162] netlink: 'syz.1.4199': attribute type 11 has an invalid length. [ 404.851578][T21159] bond3: (slave bridge10): Enslaving as an active interface with an up link [ 404.897428][T21150] macvlan2: entered promiscuous mode [ 404.922967][T21150] macvlan2: entered allmulticast mode [ 404.952978][T21150] bond3: entered promiscuous mode [ 404.962904][T21150] bridge10: entered promiscuous mode [ 404.972036][T21150] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 404.982062][T21150] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 405.023407][T21150] bond3: left promiscuous mode [ 405.037871][T21150] bridge10: left promiscuous mode [ 405.478276][T21191] netlink: 'syz.4.4210': attribute type 12 has an invalid length. [ 405.498278][T21191] netlink: 'syz.4.4210': attribute type 29 has an invalid length. [ 405.907220][T21222] bond5: option mode: invalid value (133) [ 405.952946][T21222] bond5 (unregistering): Released all slaves [ 406.007987][T21227] tipc: Started in network mode [ 406.012961][T21227] tipc: Node identity ac14140f, cluster identity 4711 [ 406.022453][T21227] tipc: New replicast peer: 255.255.255.255 [ 406.045865][T21227] tipc: Enabled bearer , priority 10 [ 406.095355][ T4950] Bluetooth: hci5: command 0x0405 tx timeout [ 406.531908][T21275] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 406.622092][T21278] netlink: 'syz.0.4234': attribute type 11 has an invalid length. [ 406.925589][T21311] syzkaller0: entered promiscuous mode [ 406.931202][T21311] syzkaller0: entered allmulticast mode [ 406.942390][T21311] x_tables: unsorted underflow at hook 2 [ 407.168878][T21325] x_tables: duplicate underflow at hook 3 [ 407.190519][T21331] xt_hashlimit: size too large, truncated to 1048576 [ 407.208360][T21313] syzkaller0: entered promiscuous mode [ 407.214084][T21313] syzkaller0: entered allmulticast mode [ 407.222793][ T10] tipc: Node number set to 2886997007 [ 409.979339][T21319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.290350][T21364] __nla_validate_parse: 15 callbacks suppressed [ 410.290368][T21364] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4258'. [ 410.316106][T21364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4258'. [ 410.340390][T21364] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4258'. [ 410.372020][T21364] netlink: 'syz.1.4258': attribute type 2 has an invalid length. [ 410.388021][T21364] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4258'. [ 410.548920][T21386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4264'. [ 410.676305][T21392] netlink: 'syz.0.4264': attribute type 4 has an invalid length. [ 410.684103][T21392] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4264'. [ 410.826208][T21397] netlink: 'syz.0.4264': attribute type 1 has an invalid length. [ 410.849295][T21397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4264'. [ 410.858479][T21397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4264'. [ 411.055775][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 411.598863][T21414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4271'. [ 412.899655][T21442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4277'. [ 412.962575][T21449] netlink: 'syz.3.4280': attribute type 1 has an invalid length. [ 413.069501][T21449] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 413.092401][T21449] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 413.131310][T21449] bond4: (slave ip6gre1): making interface the new active one [ 413.142796][T21449] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 413.169883][T21466] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 413.287114][T21477] xt_hashlimit: size too large, truncated to 1048576 [ 413.476951][T21488] netlink: 'syz.0.4288': attribute type 39 has an invalid length. [ 413.487155][T21489] netlink: 'syz.0.4288': attribute type 39 has an invalid length. [ 413.605056][T21486] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.612463][T21486] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.487566][T21560] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 414.653420][T14635] syzkaller0: tun_net_xmit 76 [ 414.674912][T21567] syzkaller0: create flow: hash 1133972579 index 1 [ 414.685593][ T5871] syzkaller0: tun_net_xmit 76 [ 414.691430][T14635] syzkaller0: tun_net_xmit 48 [ 414.818870][T21572] syzkaller0: delete flow: hash 1133972579 index 1 [ 415.066308][T21595] netlink: 'syz.2.4317': attribute type 21 has an invalid length. [ 416.705950][T21595] netlink: 'syz.2.4317': attribute type 6 has an invalid length. [ 416.728670][T21595] __nla_validate_parse: 6 callbacks suppressed [ 416.728685][T21595] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4317'. [ 416.993053][T21630] netlink: 'syz.2.4325': attribute type 3 has an invalid length. [ 417.041842][T21620] can: request_module (can-proto-0) failed. [ 417.057084][T21635] xt_ecn: cannot match TCP bits for non-tcp packets [ 417.186771][T21644] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 417.274692][T21646] bond5: option mode: invalid value (133) [ 417.291870][T21646] bond5 (unregistering): Released all slaves [ 417.374011][T21657] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4330'. [ 417.386642][T21657] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4330'. [ 417.414984][T21657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4330'. [ 417.423654][T21660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4332'. [ 417.435976][T21661] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4331'. [ 417.454338][ T5871] hid-generic 0005:04F3:7FFF.0002: item fetching failed at offset 0/1 [ 417.466847][ T5871] hid-generic 0005:04F3:7FFF.0002: probe with driver hid-generic failed with error -22 [ 417.634565][T21666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4333'. [ 417.657533][T21671] ip6gre1: entered allmulticast mode [ 417.670985][T21671] team0: Device ip6gre1 is of different type [ 417.932091][T21688] bond2 (unregistering): Released all slaves [ 417.951347][T21697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4342'. [ 417.962389][T21693] netlink: 'syz.0.4343': attribute type 9 has an invalid length. [ 418.129222][T21701] ip6gre3: entered allmulticast mode [ 418.151645][T21701] team0: Device ip6gre3 is of different type [ 418.182269][T21707] tipc: Invalid UDP bearer configuration [ 418.182325][T21707] tipc: Enabling of bearer rejected, failed to enable media [ 418.320386][T21720] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4350'. [ 418.358894][T21723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4352'. [ 418.419209][T21722] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 418.601403][T21740] netlink: 'syz.4.4357': attribute type 18 has an invalid length. [ 418.643536][ T3294] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.643636][T21740] netlink: 'syz.4.4357': attribute type 18 has an invalid length. [ 418.664606][ T3294] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.673770][ T3294] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.688747][ T3294] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.822272][T21744] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 419.287724][T21780] netlink: 'syz.1.4369': attribute type 2 has an invalid length. [ 419.309301][T21780] netlink: 'syz.1.4369': attribute type 1 has an invalid length. [ 419.402367][T21780] netlink: 'syz.1.4369': attribute type 39 has an invalid length. [ 419.612950][T21809] netem: invalid attributes len -5 [ 419.627360][T21809] netem: change failed [ 420.013952][T21836] : entered promiscuous mode [ 420.294146][T21856] netlink: 'syz.1.4391': attribute type 4 has an invalid length. [ 420.398622][T21863] nbd: nbd2 already in use [ 420.427004][T21863] block nbd2: NBD_DISCONNECT [ 420.451983][T21863] block nbd2: Send disconnect failed -32 [ 420.508734][T21863] block nbd2: Send disconnect failed -32 [ 421.047967][T21914] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 421.616642][T21961] IPVS: ip_vs_edit_dest(): server weight less than zero [ 421.639582][ T3324] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.662791][ T3324] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.712170][ T3324] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.747824][ T3324] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.198114][T21987] __nla_validate_parse: 21 callbacks suppressed [ 422.198131][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4424'. [ 422.362467][T22002] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4425'. [ 422.648138][T22020] netlink: 'syz.4.4431': attribute type 1 has an invalid length. [ 422.731070][T22020] bond2: entered promiscuous mode [ 422.752363][T22020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.767155][T22029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4434'. [ 422.775425][T22031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4435'. [ 422.800634][T22029] openvswitch: netlink: Unknown nsh attribute 0 [ 422.829107][T22035] netlink: 'syz.0.4436': attribute type 1 has an invalid length. [ 422.840940][T22036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4436'. [ 422.850183][T22035] netlink: 'syz.0.4436': attribute type 7 has an invalid length. [ 422.860616][T22035] netlink: 'syz.0.4436': attribute type 8 has an invalid length. [ 422.868658][T22035] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4436'. [ 423.014461][T22052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4438'. [ 423.198357][T22047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 423.234040][T22047] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 423.250961][T22047] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 423.302399][T22047] bond2: (slave ip6gre1): making interface the new active one [ 423.307063][T22067] netlink: 'syz.1.4443': attribute type 1 has an invalid length. [ 423.316184][T22047] ip6gre1: entered promiscuous mode [ 423.323909][T22047] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 423.528285][T22074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4447'. [ 423.549631][T22080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4445'. [ 423.589758][T22080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4445'. [ 423.697386][T22087] netlink: 'syz.4.4449': attribute type 1 has an invalid length. [ 423.713557][T22087] netlink: Unknown conntrack attr (0) [ 423.725818][T22087] netlink: 'syz.4.4449': attribute type 1 has an invalid length. [ 423.755951][T22096] netlink: 'syz.2.4453': attribute type 1 has an invalid length. [ 423.785095][T22090] netlink: 'syz.3.4451': attribute type 1 has an invalid length. [ 423.801339][T22091] sctp: [Deprecated]: syz.0.4452 (pid 22091) Use of int in max_burst socket option. [ 423.801339][T22091] Use struct sctp_assoc_value instead [ 424.001592][T14635] bond0: (slave bond_slave_0): interface is now down [ 424.014446][T22110] bond0: entered promiscuous mode [ 424.021971][T14635] bond0: (slave bond_slave_1): interface is now down [ 424.030416][T22110] bond_slave_0: entered promiscuous mode [ 424.048039][T22110] bond_slave_1: entered promiscuous mode [ 424.370898][ T10] IPVS: starting estimator thread 0... [ 424.465313][T22141] IPVS: using max 41 ests per chain, 98400 per kthread [ 424.749459][T22163] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 424.793407][T22161] syzkaller0: entered promiscuous mode [ 424.813252][T22161] syzkaller0: entered allmulticast mode [ 425.652027][T22223] syzkaller0: entered promiscuous mode [ 425.665502][T22223] syzkaller0: entered allmulticast mode [ 426.046920][T22241] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 426.081956][T22241] bond2 (unregistering): Released all slaves [ 426.188351][T22257] netlink: 'syz.4.4502': attribute type 3 has an invalid length. [ 426.303252][T22238] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 426.578129][T14636] bond0: (slave bond_slave_0): interface is now down [ 426.589097][T14636] bond0: (slave bond_slave_1): interface is now down [ 426.628288][T14636] bond0: now running without any active interface! [ 434.742949][ T3294] bridge_slave_1: left allmulticast mode [ 434.748681][ T3294] bridge_slave_1: left promiscuous mode [ 434.755889][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.777351][ T3294] dvmrp0: left allmulticast mode [ 434.971673][ T3294] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 435.009810][ T3294] bond7 (unregistering): (slave geneve2): Releasing active interface [ 435.018464][ T3294] geneve2 (unregistering): left allmulticast mode [ 435.390708][ T3294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.399756][ T3294] bond_slave_0: left promiscuous mode [ 435.407691][ T3294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.417949][ T3294] bond_slave_1: left promiscuous mode [ 435.424338][ T3294] bond0 (unregistering): Released all slaves [ 435.434980][ T3294] bond1 (unregistering): (slave bond2): Releasing backup interface [ 435.444050][ T3294] bond1 (unregistering): Released all slaves [ 435.458872][ T3294] bond2 (unregistering): Released all slaves [ 435.472956][ T3294] bond3 (unregistering): Released all slaves [ 435.488230][ T3294] bond4 (unregistering): Released all slaves [ 435.510082][ T3294] bond5 (unregistering): Released all slaves [ 435.529787][ T3294] bond6 (unregistering): Released all slaves [ 435.549484][ T3294] bond7 (unregistering): Released all slaves [ 435.562947][ T3294] bond8 (unregistering): Released all slaves [ 435.577528][ T3294] bond9 (unregistering): Released all slaves [ 435.692620][ T3294] : left promiscuous mode [ 435.736988][ T3294] tipc: Disabling bearer [ 435.749852][ T3294] tipc: Left network mode [ 436.258108][ T3294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.267149][ T3294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.286577][ T3294] veth1_macvtap: left promiscuous mode [ 436.292077][ T3294] veth0_macvtap: left promiscuous mode [ 436.361903][ T3294] pim6reg (unregistering): left allmulticast mode [ 436.477871][ T3324] smc: removing ib device syz1 [ 436.496378][ T3294] team0 (unregistering): Port device team_slave_1 removed [ 436.520701][ T3294] team0 (unregistering): Port device team_slave_0 removed [ 436.572737][ T3294] team0 (unregistering): Port device dummy0 removed [ 436.615924][ T48] smc: removing ib device syz0 [ 436.633026][ T10] syz1: Port: 1 Link DOWN [ 436.646201][ T48] smbdirect: ib_dev[syz0] removed [ 436.708455][ T3324] smbdirect: ib_dev[syz1] removed [ 439.393043][ T3294] IPVS: stop unused estimator thread 0... [ 444.335512][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.055368][ T4950] Bluetooth: hci4: command 0x0406 tx timeout [ 450.684943][T22327] __nla_validate_parse: 14 callbacks suppressed [ 450.684960][T22327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4518'. [ 450.709202][T22327] validate_nla: 1 callbacks suppressed [ 450.709218][T22327] netlink: 'syz.3.4518': attribute type 49 has an invalid length. [ 450.709706][T22323] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4519'. [ 450.721081][T22332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4516'. [ 450.752417][T22334] wireguard0: entered promiscuous mode [ 450.776512][T22334] wireguard0: entered allmulticast mode [ 450.804190][T22340] netlink: 'syz.1.4516': attribute type 2 has an invalid length. [ 450.846894][T22342] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4521'. [ 450.861051][T22342] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4521'. [ 450.878736][T22342] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4521'. [ 450.878976][T22344] netlink: 'syz.0.4520': attribute type 1 has an invalid length. [ 450.896395][T22344] netlink: 'syz.0.4520': attribute type 2 has an invalid length. [ 450.917606][T22344] netlink: 'syz.0.4520': attribute type 1 has an invalid length. [ 451.003257][T22351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4523'. [ 451.232527][T22357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4525'. [ 451.668282][T22395] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4532'. [ 451.904624][T22403] rdma_op ffff88803606c9f0 conn xmit_rdma 0000000000000000 [ 451.930276][T22403] netlink: 'syz.3.4535': attribute type 2 has an invalid length. [ 451.945342][T22403] netlink: 'syz.3.4535': attribute type 2 has an invalid length. [ 451.972951][T22409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4537'. [ 452.021707][T22409] xt_hashlimit: size too large, truncated to 1048576 [ 452.079735][T22414] tipc: Started in network mode [ 452.089684][T22414] tipc: Node identity f28d6ced192e, cluster identity 4711 [ 452.108613][T22414] tipc: Enabled bearer , priority 0 [ 452.225641][T22423] netlink: 'syz.2.4540': attribute type 3 has an invalid length. [ 452.252113][T22414] syzkaller0: entered promiscuous mode [ 452.268197][T22423] netlink: 'syz.2.4540': attribute type 1 has an invalid length. [ 452.278266][T22414] syzkaller0: entered allmulticast mode [ 452.299854][T22414] tipc: Resetting bearer [ 452.337503][T22413] tipc: Resetting bearer [ 452.360902][T22385] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 454.214361][T22413] tipc: Disabling bearer [ 454.232321][T22437] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 454.243475][T22444] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 454.298098][T22446] bond6 (unregistering): Released all slaves [ 454.349780][ T10] tipc: Node number set to 3953356013 [ 454.409022][T22452] netlink: 'syz.0.4547': attribute type 12 has an invalid length. [ 454.474363][T22454] bond5: invalid ARP target 0.0.0.0 specified for addition [ 454.483722][T22454] bond5: option arp_ip_target: invalid value (0) [ 454.497780][T22454] bond5 (unregistering): Released all slaves [ 454.881600][T22486] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 454.915893][T22486] bond5: option packets_per_slave: allowed values 0 - 65535 [ 454.934293][T22486] bond5 (unregistering): Released all slaves [ 455.318606][T22518] bond3: entered promiscuous mode [ 455.324870][T22518] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.369036][T22531] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 455.429723][T22531] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 455.468189][T22531] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 455.513782][T22528] bond3: (slave bridge5): making interface the new active one [ 455.527437][T22528] bridge5: entered promiscuous mode [ 455.534963][T22528] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 455.608165][T22538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.982633][T22575] __nla_validate_parse: 12 callbacks suppressed [ 455.982651][T22575] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4576'. [ 456.048477][T22580] openvswitch: netlink: Multiple metadata blocks provided [ 456.098094][T22583] validate_nla: 2 callbacks suppressed [ 456.098109][T22583] netlink: 'syz.3.4579': attribute type 2 has an invalid length. [ 456.182739][T22588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4580'. [ 456.209088][T22594] openvswitch: netlink: Missing key (keys=40, expected=100) [ 456.284698][ T29] audit: type=1800 audit(1778976031.814:19): pid=22596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4582" name="memory.events" dev="tmpfs" ino=1396 res=0 errno=0 [ 456.361761][T22600] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.368997][T22600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.376545][T22600] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.383708][T22600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.477764][T22606] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4585'. [ 456.494123][T22600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.522553][T22600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.538150][T22600] veth0_to_team: entered promiscuous mode [ 456.569424][T22609] bond5: (slave bond_slave_1): Device is not our slave [ 456.577461][T22609] bond5: option active_slave: invalid value (bond_slave_1) [ 456.586341][T22609] bond5 (unregistering): Released all slaves [ 456.604293][T14635] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 456.626220][T14635] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 456.642551][T14635] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 456.669014][ T48] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 456.681776][T14635] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 456.730781][T22624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4590'. [ 456.778080][T22629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4592'. [ 456.802062][T22629] openvswitch: netlink: Flow actions attr not present in new flow. [ 457.357778][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4606'. [ 457.382352][T22673] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20000 [ 457.384380][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4606'. [ 457.431977][T22675] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20000 [ 457.628936][T22685] syzkaller0: entered promiscuous mode [ 457.635724][T22685] syzkaller0: entered allmulticast mode [ 457.660146][T22690] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4613'. [ 457.718443][T22689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4612'. [ 457.879127][T22710] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 457.982683][T22715] ------------[ cut here ]------------ [ 457.989953][T22715] 1 [ 457.989975][T22715] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#1: syz.2.4619/22715 [ 458.001836][T22715] Modules linked in: [ 458.006840][T22715] CPU: 1 UID: 0 PID: 22715 Comm: syz.2.4619 Not tainted syzkaller #0 PREEMPT(full) [ 458.016345][T22715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 458.026449][T22715] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 458.031486][T22715] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 aa d2 b8 f7 66 90 e8 a3 d2 b8 f7 31 ff 48 89 de ba 02 00 00 00 e8 94 68 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bf d6 9e 01 cc 49 [ 458.051220][T22715] RSP: 0018:ffffc90006d9f1c0 EFLAGS: 00010286 [ 458.057387][T22715] RAX: c2eaf5da34e75100 RBX: ffff888033b9aa00 RCX: 0000000000000401 [ 458.065418][T22715] RDX: 0000000000000002 RSI: ffffffff8dfa6c27 RDI: ffffffff8c28af60 [ 458.073407][T22715] RBP: ffffc90006d9f4c0 R08: ffffffff9030bcf7 R09: 1ffffffff206179e [ 458.081458][T22715] R10: dffffc0000000000 R11: fffffbfff206179f R12: dffffc0000000000 [ 458.089509][T22715] R13: 0000000000000000 R14: ffff888033b9aa00 R15: dffffc0000000000 [ 458.097536][T22715] FS: 00007f4ae7aef6c0(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 458.106526][T22715] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.113135][T22715] CR2: 000000110c2bc1ea CR3: 000000003267e000 CR4: 00000000003526f0 [ 458.121205][T22715] Call Trace: [ 458.124572][T22715] [ 458.127631][T22715] ip_push_pending_frames+0x8b/0x110 [ 458.133009][T22715] __icmp_send+0x11e4/0x1690 [ 458.137724][T22715] ? __icmp_send+0x22b/0x1690 [ 458.142524][T22715] ? __pfx___icmp_send+0x10/0x10 [ 458.147545][T22715] ? ip_route_input_noref+0xad/0x270 [ 458.152915][T22715] ? __pfx_ip_route_input_noref+0x10/0x10 [ 458.158707][T22715] ? tcp_v4_early_demux+0x465/0x9c0 [ 458.163927][T22715] ? tcp_v4_early_demux+0x5a7/0x9c0 [ 458.169203][T22715] ip_options_compile+0x80/0xb0 [ 458.174074][T22715] ip_rcv_finish_core+0xaa2/0x1c00 [ 458.179264][T22715] ip_rcv_finish+0x14c/0x2a0 [ 458.183872][T22715] NF_HOOK+0x336/0x3c0 [ 458.188014][T22715] ? sock_wfree+0x26e/0x750 [ 458.192684][T22715] ? __pfx_ip_rcv_finish+0x10/0x10 [ 458.197870][T22715] ? NF_HOOK+0x9e/0x3c0 [ 458.202038][T22715] ? __pfx_NF_HOOK+0x10/0x10 [ 458.206698][T22715] ? __pfx_ip_rcv_finish+0x10/0x10 [ 458.211831][T22715] ? netif_receive_skb+0x102/0xbf0 [ 458.217093][T22715] ? __pfx_ip_rcv+0x10/0x10 [ 458.221610][T22715] netif_receive_skb+0x45b/0xbf0 [ 458.226610][T22715] ? __pfx_netif_receive_skb+0x10/0x10 [ 458.232090][T22715] ? tun_rx_batched+0x185/0x790 [ 458.237145][T22715] tun_rx_batched+0x1de/0x790 [ 458.241845][T22715] ? __build_skb+0x62/0x440 [ 458.246428][T22715] ? __pfx_tun_rx_batched+0x10/0x10 [ 458.251640][T22715] ? tun_get_user+0x2787/0x43e0 [ 458.256564][T22715] ? tun_get_user+0x2787/0x43e0 [ 458.261445][T22715] tun_get_user+0x2bbc/0x43e0 [ 458.266196][T22715] ? tun_get_user+0x2787/0x43e0 [ 458.271105][T22715] ? aa_file_perm+0x50e/0x15e0 [ 458.276069][T22715] ? __pfx_tun_get_user+0x10/0x10 [ 458.281136][T22715] ? __lock_acquire+0x6b5/0x2cf0 [ 458.286194][T22715] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 458.291782][T22715] ? tun_get+0x1c/0x2f0 [ 458.296003][T22715] ? tun_get+0x1c/0x2f0 [ 458.300184][T22715] ? tun_get+0x1c/0x2f0 [ 458.304360][T22715] ? tun_get+0x1c/0x2f0 [ 458.308588][T22715] tun_chr_write_iter+0x113/0x200 [ 458.313626][T22715] vfs_write+0x61d/0xb90 [ 458.317988][T22715] ? __pfx_vfs_write+0x10/0x10 [ 458.322784][T22715] ? __fget_files+0x2a/0x420 [ 458.327452][T22715] ksys_write+0x150/0x270 [ 458.331803][T22715] ? __pfx_ksys_write+0x10/0x10 [ 458.336731][T22715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.342853][T22715] do_syscall_64+0x15f/0xf80 [ 458.347614][T22715] ? trace_irq_disable+0x3b/0x140 [ 458.352704][T22715] ? clear_bhb_loop+0x40/0x90 [ 458.357449][T22715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.363368][T22715] RIP: 0033:0x7f4ae6b5d68e [ 458.367866][T22715] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 458.387542][T22715] RSP: 002b:00007f4ae7aeefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.396019][T22715] RAX: ffffffffffffffda RBX: 00007f4ae7aef6c0 RCX: 00007f4ae6b5d68e [ 458.403999][T22715] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 458.412076][T22715] RBP: 00007f4ae6c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 458.420100][T22715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.428123][T22715] R13: 00007f4ae6e16038 R14: 00007f4ae6e15fa0 R15: 00007ffff878bf78 [ 458.436169][T22715] [ 458.439215][T22715] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 458.446493][T22715] CPU: 1 UID: 0 PID: 22715 Comm: syz.2.4619 Not tainted syzkaller #0 PREEMPT(full) [ 458.455864][T22715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 458.465923][T22715] Call Trace: [ 458.469209][T22715] [ 458.472148][T22715] vpanic+0x56c/0xa60 [ 458.476191][T22715] ? __pfx__printk+0x10/0x10 [ 458.480798][T22715] ? __pfx_vpanic+0x10/0x10 [ 458.485310][T22715] ? is_bpf_text_address+0x292/0x2b0 [ 458.490631][T22715] ? is_bpf_text_address+0x26/0x2b0 [ 458.495851][T22715] panic+0xc5/0xd0 [ 458.499585][T22715] ? __pfx_panic+0x10/0x10 [ 458.504027][T22715] __warn+0x315/0x4c0 [ 458.508020][T22715] ? ip_rt_bug+0x2d/0x140 [ 458.512367][T22715] ? ip_rt_bug+0x2d/0x140 [ 458.516709][T22715] __report_bug+0x29a/0x540 [ 458.521333][T22715] ? NF_HOOK+0x336/0x3c0 [ 458.525595][T22715] ? netif_receive_skb+0x45b/0xbf0 [ 458.530712][T22715] ? tun_rx_batched+0x1de/0x790 [ 458.535569][T22715] ? ip_rt_bug+0x2d/0x140 [ 458.539887][T22715] ? __pfx___report_bug+0x10/0x10 [ 458.544906][T22715] ? ip_rt_bug+0x2d/0x140 [ 458.549220][T22715] report_bug+0x16a/0x220 [ 458.553538][T22715] ? ip_rt_bug+0x2d/0x140 [ 458.557850][T22715] ? ip_rt_bug+0x2f/0x140 [ 458.562173][T22715] handle_bug+0x9c/0x200 [ 458.566430][T22715] exc_invalid_op+0x1a/0x50 [ 458.570946][T22715] asm_exc_invalid_op+0x1a/0x20 [ 458.575805][T22715] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 458.580751][T22715] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 aa d2 b8 f7 66 90 e8 a3 d2 b8 f7 31 ff 48 89 de ba 02 00 00 00 e8 94 68 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bf d6 9e 01 cc 49 [ 458.600365][T22715] RSP: 0018:ffffc90006d9f1c0 EFLAGS: 00010286 [ 458.606441][T22715] RAX: c2eaf5da34e75100 RBX: ffff888033b9aa00 RCX: 0000000000000401 [ 458.614436][T22715] RDX: 0000000000000002 RSI: ffffffff8dfa6c27 RDI: ffffffff8c28af60 [ 458.622414][T22715] RBP: ffffc90006d9f4c0 R08: ffffffff9030bcf7 R09: 1ffffffff206179e [ 458.630391][T22715] R10: dffffc0000000000 R11: fffffbfff206179f R12: dffffc0000000000 [ 458.638368][T22715] R13: 0000000000000000 R14: ffff888033b9aa00 R15: dffffc0000000000 [ 458.646375][T22715] ip_push_pending_frames+0x8b/0x110 [ 458.651676][T22715] __icmp_send+0x11e4/0x1690 [ 458.656279][T22715] ? __icmp_send+0x22b/0x1690 [ 458.660991][T22715] ? __pfx___icmp_send+0x10/0x10 [ 458.665964][T22715] ? ip_route_input_noref+0xad/0x270 [ 458.671274][T22715] ? __pfx_ip_route_input_noref+0x10/0x10 [ 458.677017][T22715] ? tcp_v4_early_demux+0x465/0x9c0 [ 458.682222][T22715] ? tcp_v4_early_demux+0x5a7/0x9c0 [ 458.687408][T22715] ip_options_compile+0x80/0xb0 [ 458.692244][T22715] ip_rcv_finish_core+0xaa2/0x1c00 [ 458.697363][T22715] ip_rcv_finish+0x14c/0x2a0 [ 458.701967][T22715] NF_HOOK+0x336/0x3c0 [ 458.706023][T22715] ? sock_wfree+0x26e/0x750 [ 458.710511][T22715] ? __pfx_ip_rcv_finish+0x10/0x10 [ 458.715605][T22715] ? NF_HOOK+0x9e/0x3c0 [ 458.719744][T22715] ? __pfx_NF_HOOK+0x10/0x10 [ 458.724315][T22715] ? __pfx_ip_rcv_finish+0x10/0x10 [ 458.729427][T22715] ? netif_receive_skb+0x102/0xbf0 [ 458.734532][T22715] ? __pfx_ip_rcv+0x10/0x10 [ 458.739016][T22715] netif_receive_skb+0x45b/0xbf0 [ 458.743942][T22715] ? __pfx_netif_receive_skb+0x10/0x10 [ 458.749389][T22715] ? tun_rx_batched+0x185/0x790 [ 458.754228][T22715] tun_rx_batched+0x1de/0x790 [ 458.758891][T22715] ? __build_skb+0x62/0x440 [ 458.763383][T22715] ? __pfx_tun_rx_batched+0x10/0x10 [ 458.768568][T22715] ? tun_get_user+0x2787/0x43e0 [ 458.773405][T22715] ? tun_get_user+0x2787/0x43e0 [ 458.778244][T22715] tun_get_user+0x2bbc/0x43e0 [ 458.782907][T22715] ? tun_get_user+0x2787/0x43e0 [ 458.787752][T22715] ? aa_file_perm+0x50e/0x15e0 [ 458.792505][T22715] ? __pfx_tun_get_user+0x10/0x10 [ 458.797516][T22715] ? __lock_acquire+0x6b5/0x2cf0 [ 458.802451][T22715] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 458.807896][T22715] ? tun_get+0x1c/0x2f0 [ 458.812046][T22715] ? tun_get+0x1c/0x2f0 [ 458.816216][T22715] ? tun_get+0x1c/0x2f0 [ 458.820377][T22715] ? tun_get+0x1c/0x2f0 [ 458.824522][T22715] tun_chr_write_iter+0x113/0x200 [ 458.829531][T22715] vfs_write+0x61d/0xb90 [ 458.833773][T22715] ? __pfx_vfs_write+0x10/0x10 [ 458.838525][T22715] ? __fget_files+0x2a/0x420 [ 458.843105][T22715] ksys_write+0x150/0x270 [ 458.847429][T22715] ? __pfx_ksys_write+0x10/0x10 [ 458.852306][T22715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.858366][T22715] do_syscall_64+0x15f/0xf80 [ 458.862959][T22715] ? trace_irq_disable+0x3b/0x140 [ 458.868021][T22715] ? clear_bhb_loop+0x40/0x90 [ 458.872702][T22715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.878582][T22715] RIP: 0033:0x7f4ae6b5d68e [ 458.882980][T22715] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 458.902567][T22715] RSP: 002b:00007f4ae7aeefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.910964][T22715] RAX: ffffffffffffffda RBX: 00007f4ae7aef6c0 RCX: 00007f4ae6b5d68e [ 458.918933][T22715] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 458.926884][T22715] RBP: 00007f4ae6c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 458.934836][T22715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.942790][T22715] R13: 00007f4ae6e16038 R14: 00007f4ae6e15fa0 R15: 00007ffff878bf78 [ 458.950759][T22715] [ 458.954278][T22715] Kernel Offset: disabled [ 458.958601][T22715] Rebooting in 86400 seconds..