last executing test programs: 4.283777606s ago: executing program 1 (id=4144): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x90, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x6c, 0x2, 0x0, 0x1, [@nested={0x65, 0x14, 0x0, 0x1, [@generic="78ec41e68670be56830fb3c4b36f310269b42faa2de1f7de828f5f78bbf8fce993c0dbf565f7deb2d2268cfc98de9988e71eba63789e2379e462c2790c6a1c1be8888153ea026ccfb184b9c17563b8f3fbeecfe952a0ff56f55fbb8ad7bc1cc237"]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4008044) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000c08d1f55fbbbed0b91cd06bb945da13b979335bc2bd5a97210623285b4da7d25caba671713ddfe76bbe6fcbe62e65cbb4056117b2a1dda6a6ed4d1e5b2c6319fffa3c8cc1ef21ec3d88ebd431af625ab08aa1c3b8f9cb7b5032a0d7151ee711a138c2bae8b84caa1d5699d4d6acf696b854261fe377c934249d037494a1bede03135b52ee0f2ef92bcdeb5a98e49f27e8c608c54db0adc2e01f55a4f6064ab4c3fb90e394b751f66e6e5cb01c7762026b0cdeeef17bf4351e0d5dee478d4", @ANYRESOCT=0x0], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0xa4, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_USERDATA={0x54, 0xc, "821ee5d1bb7300ea58cca119caa8b699f6fca8d6bc1f0a808987265bebfd4e1bb66ee84e1080633965664fc750395d396b7ce626f39216b5a20256f4216095675a317011ba15eb0b9787b4d71d0ccf1a"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8040}, 0x4000054) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x70bc25, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe068, 0x20}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @local}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8}]]}}}]}, 0x40}, 0x1, 0x2000000000000000, 0x0, 0x20006044}, 0x4080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x2a}, 0x28) r5 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000240)='FREEZING\x00', 0x9) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r10 = socket$kcm(0x10, 0xd, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffff8001, '\x00', 0x0, r7, 0x5, 0x1, 0x3}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r3, r12}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0xb}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x2, 0xffffdf80}]}}]}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) 3.9661944s ago: executing program 1 (id=4147): unshare(0x62040200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='C', 0x1}], 0x1, 0x6) splice(r0, 0x0, r1, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) unshare(0x6c010800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000100)={r3, 0x1, 0x6, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000000), 0x4) socket$netlink(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x40) close(r6) 2.768402754s ago: executing program 4 (id=4166): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x8040480) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x282800, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000480)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f00000005c0)={0x41424344}, 0x4, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_emit_ethernet(0xef, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6b2aa00200b906fffc020000000000000000000000000000fe8000000000000000000000000000bb6c00091866000000880c000100000000fe8000000000000000000000000000000000069a000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000bbff020000000000000000000000000001ff0100000000000000000000fbff00013a0006a96500000011000709680000004e214e20", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="51020005907800009ab0358ab96aadd02c6d01ceacc96530bf82b0794f1cb1faf32508fa11f2a020eea4e18bc9"], 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c009900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r5 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1830000001000000000000000300000018130000", @ANYRES32, @ANYBLOB="000200000000000095000000008e710e"], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) pwrite64(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000440)={'syzkaller1\x00', &(0x7f0000000700)=@ethtool_rx_ntuple={0x35, {0x6, @usr_ip4_spec={@remote, @loopback, 0x6, 0x4, 0x1, 0xf7}, @ether_spec={@multicast, @empty, 0x9}, 0x0, 0x6e, 0x3, 0x4}}}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) r9 = socket$nl_rdma(0x10, 0x3, 0x14) read(r9, &(0x7f0000000040)=""/64, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000914e73f"], 0x4e}}, 0x20008000) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000440)}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 2.611379081s ago: executing program 2 (id=4170): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x805) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x3, &(0x7f0000001540)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="55ad", 0x2}], 0x1}, 0x4c03) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8c0c00", 0x18, 0x6, 0x1, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x20, 0x8, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) 2.535634869s ago: executing program 2 (id=4171): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000500)={&(0x7f0000000540)=0x346, 0x40000000, &(0x7f0000000280)=[{}, {}, {}], &(0x7f00000004c0)}) listen(r0, 0x1000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000001280)=""/4093, &(0x7f0000000040)=0xffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x4) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000011c0)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000062000c0700000c0000000500000000616100"/42], 0x0, 0x29, 0x0, 0x0, 0x100000}, 0x28) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001240)={'macvlan0\x00', @multicast}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, 0x0, 0x1, {0x0, 0x1}, 0xff}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4], 0xfdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r7, 0x0, r10, 0x0, 0xc, 0xd) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaab230180c200030000ab7f88fcb00200000000119078000000000000000000007a4b143b7461fd777b9f49fcdb15400c26a04d835c8c82b8af00000000006c690000000000000f2dbc43efa8698d0a881c51852e4451357d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e69eca2096ffeeb03010000000000649a3bfbc1d19cb307b3472ab9cdb042d26a3fcb2e83b497c83f8224f6e8d9fe0900"/190], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.309613987s ago: executing program 2 (id=4172): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x17, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x12) r3 = socket$inet(0xa, 0x800, 0x83) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @local}, 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x400c1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x400481c}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40004) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000380)=@netrom={'nr', 0x0}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000002dd42e10126a7ba74f7b586b7d8c50e5ecd780344c46c26781f3f68d6ac4cd31dbeb85165358"]}, 0x12e) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x4000000) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x7fff, 0x7, 0xab5, 0xd, 0x80000001}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r4}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0xfffffffffffffdd5, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket(0x2a, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000240)="f2435f01000880000000008508", 0xd, 0x1, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 2.090421138s ago: executing program 0 (id=4175): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd83, &(0x7f0000002ac0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1b, 0xd75, 0x4, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x4e22, 0x4e20, 0xd61, 0x0, @wg=@data={0x4, 0x0, 0x8, "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"}}}}}}, 0x0) r4 = socket$inet6(0xa, 0x6, 0x20) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0xe, 0x803, 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000016c0), r6) 1.789544306s ago: executing program 4 (id=4177): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000003"], 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) unshare(0x2040400) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) bind$xdp(r5, &(0x7f00000005c0)={0x2d, 0x2, 0x0, 0x34}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640000000000800134000000000050005000a00000012000300686173683a6e65742c706f7274"], 0x60}}, 0x20048004) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000011000100000000000400000007000000", @ANYRES32=r3, @ANYBLOB="008404000000000000001a800800028004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.746995363s ago: executing program 1 (id=4178): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d0000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000005631770d556eedd3467668a800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000200000000000000002000000083e9000001000000000000000c0015005a07350081000000"], 0xd0}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) mmap(&(0x7f0000200000/0x3000)=nil, 0x3000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x37000000) 1.583685312s ago: executing program 1 (id=4180): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) socket(0x1, 0x5, 0x0) r1 = socket$kcm(0x10, 0x4, 0x10) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x86, &(0x7f0000000540)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@local}, {@multicast2, 0xb00}, {@local, 0xfffffffc}, {}, {@initdev={0xac, 0x1e, 0x41, 0x0}}, {@local}, {@rand_addr=0x64010101, 0x29}, {@multicast1}]}]}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x12}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000030000180060004000000000006000100000000000600020000000300fc010000000000000000000000000000c0ab6559eee0d4477e2d0b2a22a43c19c83cdf67a0e841e3cd69e3b966d9ac7606f9008833e69a8e5df4d984d084758017d062e490a3dedf2cff00000000"], 0x44}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.541982156s ago: executing program 0 (id=4181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x5, 0x0) listen(r1, 0x10000) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000000080007400000000008000840000000e40900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 1.469548102s ago: executing program 3 (id=4182): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x80) connect$802154_dgram(r1, &(0x7f00000000c0)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x480}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x2e0b}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) (async, rerun: 32) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001440)={&(0x7f00000002c0)={0x116c, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1158, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x46, 0x4, "56edb46f548df543a0c36bdfebc2c3cfe70ac520b4a8c864b87d1aeaedcc415713254a35eca94225eebbdddfe30822e7622b74f63db0256ea56d8f56b8f5f06b8a45"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x60, 0x4, "0f9e890912017ce63ce2793bd58314ceb50b76290fcf2f7b5039e0823b85eff6baf1da7bf8f4e2e6d52eab7441eea99e6c6bea71788344cf3c0e99494169d092a626fb214228ac47840bf1ad6dd94bf4dd4bb39bd91c43dc23718176"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd2e2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff81}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.^-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x116c}, 0x1, 0x0, 0x0, 0x44}, 0x20004000) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x58, 0x3, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x40051) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001600)={0x0, @in6={{0xa, 0x4e22, 0x3, @private2, 0x81}}, 0x4, 0x3, 0x80000001, 0xe, 0x8, 0x7, 0x8}, &(0x7f00000016c0)=0x9c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001700)=@assoc_value={r2, 0x5}, 0x8) r3 = accept(r1, &(0x7f0000001740)=@nfc, &(0x7f00000017c0)=0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20041000}, 0x0) (async, rerun: 32) r6 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001940)={r2, 0x735}, &(0x7f0000001980)=0x8) (async) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000019c0)={@broadcast, @remote, 0x0}, &(0x7f0000001a00)=0xc) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000001a80)={0x0, @l2tp={0x2, 0x0, @empty, 0x4}, @xdp={0x2c, 0x2, r8, 0x2e}, @l2tp={0x2, 0x0, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001a40)='wg1\x00', 0x6, 0x6, 0x1}) (async, rerun: 32) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001b00)={0x0, 0xfffffff3}, 0x8) (rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b40), r9) r10 = socket$nl_rdma(0x10, 0x3, 0x14) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b80)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001bc0)={'batadv0\x00', 0x0}) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001c00)={r2, 0x401}, &(0x7f0000001c40)=0x8) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000001e00)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0xe4, 0x0, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffff8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xdf}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x401}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9b}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x200}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x37}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004041}, 0x4081) (async, rerun: 64) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e80), r3) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001ec0)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000001f00)={'vxcan1\x00', 0x0}) (rerun: 64) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000020c0)={&(0x7f0000001e40), 0xc, &(0x7f0000002080)={&(0x7f0000001f40)={0x104, r12, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x804) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000002100)={r7, 0x8001}, 0x8) sendmsg$nl_generic(r0, &(0x7f00000028c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x10108728}, 0xc, &(0x7f0000002880)={&(0x7f0000002380)={0x4fc, 0x13, 0x20, 0x70bd2a, 0x25dfdbfd, {0x1a}, [@nested={0x10, 0x103, 0x0, 0x1, [@typed={0x8, 0x105, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3e}}, @nested={0x4, 0x35}]}, @nested={0x9d, 0xf2, 0x0, 0x1, [@generic="cd0297061b8e22b50822845988d6f46531cbd4493fcf0dc41e3a7cb5deed8fd53ed909e276a418e0542091e4a2b40e58e34d743723b25aca3dbb4bae62990f06e9c2942e43b52b313976c92b1db93863ea3ce968a1e2295687fac93d1f9c3336c2fd346521508454aa703dea6cc041ef177f0fd100e379d26cd93c99d8153f189cdbc40fc6ac1d0a8f9ff43923a845a8381c489fc3030070b3"]}, @nested={0x206, 0x35, 0x0, 0x1, [@typed={0x8, 0x113, 0x0, 0x0, @pid}, @typed={0x9, 0x11a, 0x0, 0x0, @str='syz0\x00'}, @generic="4fb05ef470176c7da91077d8c192801ff644a4725371ca529855964894dab95e1801430ba97f25409220cb05828bc7fa9d0c0d8a910fde45fcc4a63193417038bf662bd1eec2cf7474c8813cc66d8a8c972928b8afd6c52dfac6ad9fc90a9c3f8b47510021ff58214b7d5b60b00cf0aaadf52b59f72291578b2fa153269586d1d27540d5ba047470d4f8b61df874af36b42a388d7ef856cdf0805bb0d3707610c3a37f4bdff9662ea54d7af8e4c8ed08b8f36d8ebdbfbd7671f9868cf4bd5029b7e7b8ca8fcd4c8f78c08485e17fd85457fe90f5daf63fd341b10bc340a924", @generic="7b264eba218124a3b3aec568b76237e4c71745104e4b6da5c55775a5c3dc98530ccb2b989cdfe932ce5a446fd194956d6ed0ede9f82f24b86271299e883819d8611fc413524aefa3aafb242f734b88", @generic="5405ff1cec909e98d7a445da67eea2e131fcc2af1e133779628a7962c60ead6f1c9e205a6803e30e813373fa5ee56bc2581f27927fd6dec21a829d501d38bd4a8ea066d16b5d4e249d9d4a8606d45d45457cbb5e5a2235bde1494b8ef356cec8abaf69a63ca842f5ed0639cd7030df167a0dce95a7f962d255eb51cb30558722ffee51497c19849daa3e922bc403a2d027ccc6a6380528ca4120ef8a9f8113d584c73137cc612925670bd6604e213bb0920d2c02d175162d13c4fece", @nested={0x4, 0x76}]}, @nested={0x114, 0xae, 0x0, 0x1, [@nested={0x4, 0xc9}, @generic="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", @typed={0x8, 0xa3, 0x0, 0x0, @uid}, @typed={0x8, 0x5a, 0x0, 0x0, @pid}]}, @nested={0x70, 0xad, 0x0, 0x1, [@typed={0x14, 0x110, 0x0, 0x0, @ipv6=@remote}, @typed={0x7, 0x154, 0x0, 0x0, @str='@]\x00'}, @nested={0x4, 0x67}, @nested={0x4, 0xe4}, @generic="d672f1b6625c41af14d1bb9f3917b3ae7b414814cfcbe34988287bfa15fc16d3f421f0147e35a116ad187e740b983a98ab56e518cea9027d439f73ae", @nested={0x4, 0x35}, @nested={0x4, 0x31}, @nested={0x4, 0x13f}]}, @generic="0bf6ba7a2a072690349f0c7800ca39df5ce84e09dbe32ff8cc1abea61ec0e796e758bf1af1a06356ddb13628f6bd9d733934e9b22cb342ecd2d6e9bff8e18769ec599560b4c96871e6f6d26ff897dfceac1bd1e168b0022603a4272dda42dd952467efc00a2901eda8603bc3d36c7889898c177eb36e5159c4194175a0904f4417d9de38560bc341ef6a161a888f6ae5e428ea5dabb87539a00386e8b86dbc41c66d1dc016cd7876416dbd"]}, 0x4fc}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 1.469298788s ago: executing program 4 (id=4183): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @loopback}]}, 0x20}}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @loopback}]}, 0x20}}, 0x0) (async) 1.393553767s ago: executing program 3 (id=4184): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0xd) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async, rerun: 64) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async) close(r1) 1.36334651s ago: executing program 0 (id=4185): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0x81, 0x40}, 0xffff, [0xffffffffffffffff, 0x1, 0x9, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7fffffffffffffff, 0x9, 0x5, 0x6, 0x8, 0x6, 0x4]}) (async, rerun: 64) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x1, 0xfffff034}, {0x48, 0x0, 0x40, 0x3}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000086dd6001012000783a"], 0x0) (async) close(r2) (async) write(r0, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.222163677s ago: executing program 2 (id=4186): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x240, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0xf, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x214, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0a1fb0699d46dac48f29d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346366aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d100"}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x3}]}}]}, 0x240}}, 0x4000010) 1.199832165s ago: executing program 0 (id=4187): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) (async) unshare(0x2c020400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000010851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afffffff8000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) (async) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="659eff61455616cee956b859e7c330da5b7a715b69c85e78b4b3a2fd6b801c", 0x1f}, {&(0x7f0000000240)="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", 0xff}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a5a07", 0x57}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f639caf6e8d7c7a8890ea4a29a1b5bf8cff9ee7f8c32f9a29134e2cf267086d591b5ac1ee120939381125ed90084a96d7cb7d57508595e294fea6bcdd8719a442fe9e7e9b1db8b12c5d39977074a93b89ba94c356a5990d042d23682dad6acb71bd23aaaf70481b938247594746af8476a90df9dfc9e7f46481e21394224ae84416edf9ce3dfcb3bd8c8a22de296f169fd8a5", 0xbd}], 0x5, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x5, 0x19a, 0x6, @mcast1, @remote, 0x1, 0x1, 0x1, 0x6}}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="4d13642004a752efc3def1cbb7a195581868ab0fdea9aad3bd9cf7b78f508cd87a3536330cafc75a214de5dca10bfaed3a4fee19af0a3283f8887816b8e3ca80d084dc84df6409a33bc254da32ca594966440f98fb7edf4b3612998caa90679524c79c23c03f8eb631db6cf0d0e266e13a502512c2c0ed451ed5b3b615a11a920ebe82293cf56b6cc66a2c8a270ba5815b8b54afcf6511b0176470b9d46883a7f2818bf00efcc44ae0976674c757c5be42cd", 0xb2}, {&(0x7f0000000200)="09fe7d92a79ce48014b514c3a39425519c38f6fd1d5f84bdb3244004eec5", 0x1e}], 0x2, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x98}, 0x20000080) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0xffffff7f00000000) (async, rerun: 64) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)={0xc84, r6, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x6f8, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}]}, {0x428, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x23c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2}, {0x5, 0xa}, {0x3, 0xa}, {0x6, 0x9}, {0x7, 0x9}, {0x1, 0x8}, {0x4, 0x5}, {0x7, 0x6}, {0x1, 0x7}, {0x7, 0x5}, {0x6}, {0x1, 0xa}, {0x4, 0x2}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0xa}, {0x0, 0x3}, {0x3, 0xa}, {0x6, 0x9}, {0x0, 0x4}, {0x1, 0x4}, {0x5, 0x9}, {0x5, 0x9}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x2}, {0x0, 0x3}, {0x1, 0x7}, {0x3}, {0x1, 0x7}, {0x2, 0x8}, {0x5, 0x3}, {0x3, 0x6}, {0x7, 0x2}, {0x1, 0x4}, {0x7, 0x9}, {0x0, 0x6}, {0x5, 0x7}, {0x6, 0x9}, {0x6, 0x9}, {0x7, 0x6}, {0x7, 0x3}, {}, {0x1, 0x7}, {0x4, 0x7}, {0x5, 0xa}, {0x2, 0x9}, {0x4, 0x1}, {0x0, 0x9}, {0x5, 0x3}, {0x3}, {0x3, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xf801, 0xbdaa, 0x9, 0x3, 0x401, 0xf4, 0x4ff]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0xc, 0x5, 0x6c, 0x6, 0x24, 0xe, 0x17]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x81, 0x800, 0x100, 0x3ff, 0x4a, 0x6, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x1, 0x1, 0x1, 0x40, 0x0, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x4}, {0x4, 0x4}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x5, 0x3}, {0x1, 0x1}, {0x7, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x1, 0x3, 0x5, 0x6, 0x4, 0xa0, 0x4]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x926, 0x7, 0x9, 0x2, 0xe, 0xf0, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x5, 0x9, 0x9, 0x8, 0x0, 0x3]}}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xeb7, 0x7, 0x1, 0x4, 0x8, 0x9, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x12, 0x2, 0x1b, 0x60, 0x0, 0x16, 0x1b, 0x12, 0x13, 0x36, 0x2, 0x36, 0x6, 0x24, 0x48, 0x1b, 0x1998829f4cedb579, 0x24, 0xc, 0x18, 0x16, 0x5, 0x16, 0x6c, 0x1, 0x48, 0xc, 0x5, 0x36, 0x24]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0x6, 0xb, 0x4, 0x24, 0xa, 0x5, 0x60, 0x1, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x5}, {0x4, 0x1}, {0x4, 0x4}, {0x7, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x5, 0x2}, {0x4}, {0x1}, {0x3, 0x4}, {0x3, 0x3}, {0x0, 0x8}, {0x4, 0x5}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x5}, {0x2, 0x3}, {0x1, 0xa}, {0x5, 0x6}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x7, 0xa}, {0x2, 0x8}, {0x2, 0x2}, {0x4, 0x9}, {0x3, 0x7}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x5}, {0x6, 0x9}, {0x2, 0x5}, {0x6, 0x4}, {0x7, 0x4}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x2c, 0x4, 0x7fff, 0x5, 0x40, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf800, 0x800, 0x87ad, 0xfa, 0x200, 0x6, 0x100]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x3, 0x9, 0x5, 0x1b, 0x2, 0x9, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x800, 0xfffd, 0xfc0, 0x8, 0x5, 0x10]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x2, 0xc, 0x30, 0x16]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x0, 0x7, 0x6, 0x5, 0x0, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x2, 0x6, 0xffff, 0x5, 0x0, 0x2, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x8, 0x5, 0x1, 0x2, 0x2b, 0x6]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x9, 0x16, 0x12, 0x60, 0x1b, 0x6, 0x1, 0x16, 0x60, 0x2, 0x3, 0x24, 0x2, 0x16, 0xb, 0x21, 0x24]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x5, 0x6}, {0x0, 0x6}, {0x7, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {0x0, 0xa}, {0x6, 0x1}, {0x0, 0x4}, {0x7}, {0x6, 0x5}, {0x4, 0x6}, {0x0, 0x8}, {0x1, 0x6}, {}, {0x5, 0x7}, {0x4, 0x3}, {0x6, 0x7}, {0x6, 0x9}, {0x4, 0x2}, {0x3, 0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x0, 0x4}, {}]}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf3, 0x7ff, 0x9, 0x1c0b, 0x4, 0x4, 0x3, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x1, 0x7d, 0x2, 0x8001, 0x2, 0x7]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x24, 0x1, 0x18, 0x30, 0x1b, 0x6c, 0x12, 0x9, 0x3, 0xc, 0x5, 0x67, 0x5, 0x1b, 0xc, 0x0, 0x1, 0x1b, 0x9, 0xc, 0x48, 0x2, 0x1, 0x2, 0x15, 0x16, 0x18, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1c, 0x400, 0x467, 0x8, 0xfffd, 0x7ff, 0x1]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x30, 0x18, 0x6c, 0x3, 0x4, 0x16, 0x36, 0x42, 0x30, 0x1b, 0x2, 0x1a, 0x16, 0x3, 0x2, 0x5, 0x48, 0x12, 0x5, 0x9, 0x60, 0x24, 0x1, 0x9, 0x9, 0x3, 0x36, 0x1, 0x60]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x60, 0xb, 0x4, 0x1b, 0x3, 0x4, 0x1a, 0x5, 0x1, 0x1, 0x8637b3796997f81a, 0x16, 0x2, 0x5, 0x0, 0xc, 0x3, 0x30, 0x4, 0x5, 0x48, 0x0, 0x60, 0x6c, 0x4, 0x4, 0x18, 0x4, 0x18, 0x12, 0x9]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1, 0xfff0, 0x5, 0x7f, 0x6, 0x101, 0xfeff]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0xfff, 0x6, 0x5, 0x2, 0xac]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfa}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x33}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0xe59f, 0x8, 0x9, 0x3, 0x2, 0xd4c7, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x953, 0x6, 0xf0, 0x6, 0x0, 0x0, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x3, 0x200, 0x9, 0xb, 0xf254, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xff, 0xffff, 0x3, 0x0, 0x2, 0xab48, 0x1]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x5}, {0x3, 0x2}, {0x0, 0x2}, {0x7, 0xa}, {0x4, 0xa}, {0x0, 0x1}, {0x4, 0x7}, {0x6, 0x7}, {0x7, 0x3}, {0x1, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {}, {0x6, 0x6}, {0x1, 0x7}, {0x1, 0x8}, {0x0, 0x5}, {0x7, 0x8}, {0x4, 0x5}, {0x3, 0x4}, {0x2, 0x5}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0x4}, {0x2, 0x2}, {0x3, 0x8}, {0x3, 0x1}, {}, {0x3, 0x5}, {0x6, 0x6}, {0x4, 0x7}, {0x5, 0x9}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x7, 0x9}, {0x3, 0x8}, {0x7, 0x8}, {0x7, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x3, 0x5}, {0x0, 0x4}, {0x2}, {0x1, 0x5}, {0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0xa}, {0x2, 0x9}, {0x1, 0x9}, {0x7, 0xa}, {0x1, 0x7}, {0x4, 0x5}, {0x2, 0x9}, {0x7, 0x5}, {0x1, 0xa}, {0x1}, {0x6, 0xa}, {0x6, 0x2}, {0x4, 0x4}, {0x4, 0x1}, {0x3, 0x4}, {0x0, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x7, 0x5}, {0x7, 0x4}, {0x2, 0x5}, {0x6, 0x6}, {0x2, 0x7}, {0x5, 0xa}, {0x1, 0x4}, {0x3, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x16, 0x5, 0x5, 0x18, 0xc, 0x18, 0x12, 0x18, 0x24, 0x12, 0x18, 0x5, 0x16, 0x16, 0x9, 0xc, 0x1, 0x48, 0x1b, 0x9]}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x3}, {0x5, 0x8}, {0x0, 0x3}, {0x7, 0xa}, {0x0, 0x1}, {0x4, 0x5}, {0x5, 0x8}, {0x1, 0x13}, {0x1, 0x4}, {0x4, 0x7}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x7}, {0x7, 0x7}, {0x6, 0x6}, {0x3, 0x3}, {0x5}, {0x7, 0x1}, {0x5, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x4, 0x7}, {0x4, 0xa}, {0x7, 0x3}, {0x2}, {0x1}, {0x7, 0x2}, {0x4, 0x8}, {0x3, 0x7}, {0x7, 0x2}, {0x1, 0x2}, {0x3, 0x8}, {0x4, 0x5}, {0x1, 0x9}, {0x6, 0x4}, {0x3, 0xa}, {0x3}, {0x0, 0xa}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0xa}, {0x6, 0x8}, {0x1}, {0x7, 0xa}, {0x6, 0x8}, {0x1, 0x9}, {0x0, 0x9}, {0x4, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5bc4, 0x0, 0xdd7e, 0x0, 0x6b, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x60, 0x1b, 0x36, 0x0, 0x5, 0x2, 0x48, 0xc, 0x16, 0xc, 0x4, 0x6, 0x30, 0x12, 0x5, 0xb, 0x1b, 0x6c, 0x6c, 0x60, 0xc, 0x30, 0x36, 0x4, 0x1b, 0xb, 0x60, 0x48, 0x16, 0x4]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0xa}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x3}, {0x7, 0x2}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2}, {0x4, 0x9}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0x1}, {0x2, 0x5}, {0x7, 0x3}, {0x0, 0x3}, {0x3, 0xa}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x7, 0x3}, {0x6, 0x9}, {0x2, 0x3}, {0x2, 0x2}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0xa}, {0x7, 0x1}, {0x4, 0x3}, {0x7, 0x2}, {0x0, 0x9}, {0x5, 0x5}, {0x4, 0x2}, {0x5, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x7}, {0x3, 0x5}, {0x4}, {0x3}, {0x1}, {0x2, 0x1}, {0x7, 0x9}, {0x0, 0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x5, 0x4}, {0x4}, {0x5}, {0x2, 0xa}, {0x2, 0xa}, {0x4}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x47}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbf}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xab}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x11}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x57}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfb}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x78, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa9}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x4b4, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4a}]}, {0x2cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x4, 0x7, 0x5, 0x9d, 0x100, 0x7074]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x1, 0x1, 0xd, 0x1ff, 0x10, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb5d1, 0x1, 0x4, 0x8, 0x5, 0x101, 0x9, 0x3]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x9}, {0x5, 0x4}, {0x5}, {0x2, 0x8}, {0x7, 0x9}, {0x4, 0xa}, {0x5, 0x1}, {0x4, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x2}, {0x3, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x5}, {0x4, 0x9}, {0x6}, {0x5, 0x3}, {0x4, 0x5}, {0x2, 0xa}, {0x4, 0x4}, {0x1, 0x7}, {}, {0x7, 0x5}, {0x2, 0x4}, {0x7}, {0x4, 0x1}, {0x0, 0x3}, {0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x3}, {0x0, 0x4}, {0x5, 0x8}, {0x3, 0x7}, {0x0, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0x9}, {0x6, 0x5}, {0x4, 0x1}, {0x4, 0xa}, {0x0, 0x6}, {0x5, 0xa}, {}, {0x6, 0x7}, {0x3, 0xa}, {0x4, 0x7}, {0x2, 0x2}, {0x3, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x3, 0xff, 0x2, 0x9, 0xb2d3, 0x6, 0x7b]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x0, 0x3}, {0x4, 0x5}, {0x5, 0x2}, {0x0, 0x7}, {0x0, 0x4}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x1}, {0x7, 0xa}, {0x0, 0x2}, {0x4, 0x5}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x5}, {0x0, 0x9}, {0x7, 0x6}, {0x1}, {0x4, 0x4}, {0x6, 0xa}, {0x0, 0x4}, {0x2}, {}, {0x5, 0x7}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x6, 0x7}, {0x1, 0x9}, {0x5, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x1}, {0x5, 0x4}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x6}, {0x0, 0xa}, {0x2}, {0x1, 0x8}, {0x3, 0x1}, {0x3, 0x3}, {0x3, 0x2}, {0x7, 0x6}, {0x4, 0x2}, {0x0, 0x9}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x2}, {0x7, 0x8}, {0x7, 0x9}, {0x1, 0x7}, {0x2, 0x7}, {0x5, 0x2}, {0x5, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x0, 0x200, 0x6, 0x1, 0x9, 0x4f7, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x2, 0x80, 0x0, 0xa9d8, 0x9, 0x3, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf9c1, 0x101, 0x2, 0x81, 0x9, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f8, 0x5, 0x1000, 0x3, 0x8, 0x5, 0xa5c, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x3ff, 0x926, 0x5, 0x7, 0x2, 0x1]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf15b, 0x0, 0x7f, 0x2, 0x8, 0x0, 0x2, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7eea, 0xfffc, 0xfff8, 0x9, 0x6, 0x5, 0x0, 0x9]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x2, 0x2, 0x10, 0x5, 0x1, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x463a, 0x2, 0x4, 0x1, 0x2, 0x7, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x9, 0x48, 0x3, 0x60, 0x12, 0x24, 0x18, 0xb, 0x34, 0x9, 0x9, 0x60, 0x5, 0x6c, 0x5, 0x9, 0x71, 0xc, 0x24, 0x0, 0x16, 0x30, 0x1b, 0x16, 0x24]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x30, 0x1, 0x1b, 0x9, 0x3, 0xc, 0x2, 0x1, 0x35, 0x1b, 0x30, 0xb, 0x1, 0x5, 0xc, 0x18, 0x1, 0x4, 0x0, 0x24, 0x12, 0x4, 0x6, 0x15, 0x60, 0x60, 0x5, 0x16, 0xc, 0x4, 0x4]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0x1b, 0x9, 0x2b, 0x18, 0x1, 0x16, 0xc, 0x36, 0x36, 0x24, 0x9, 0x16]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0xb, 0xc, 0x2, 0x24, 0x36, 0x36, 0x6, 0x18, 0x18, 0x24, 0x16, 0xc, 0xc, 0x12, 0xc, 0x6, 0x16, 0x36, 0x6, 0x48, 0x3, 0xc, 0x48, 0x24, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfa}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9ef, 0x1, 0x4, 0xfff, 0x7, 0xa000, 0x9, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8, 0x7fff, 0x400, 0xe, 0x4, 0xaf, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x4, 0x10, 0x9, 0x0, 0xfffe, 0x2, 0x579]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6a, 0xfffa, 0x1, 0x7, 0x2, 0x7, 0xf1f2, 0xb20]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x1, 0x1, 0x7f, 0x9, 0x3, 0xffc0]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0x8}, {0x1, 0x2}, {0x6, 0x1}, {0x7, 0x2}, {0x2, 0xa}, {0x4, 0x3}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x4, 0x7}, {0x2, 0x7}, {0x5, 0x2}, {0x7}, {0x4, 0x5}, {0x0, 0x6}, {0x5, 0x7}, {0x7, 0x6}, {0x7, 0x8}, {0x0, 0x6}, {0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x3, 0x2000, 0x9, 0xffff, 0x6, 0x2, 0x7f]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x4, 0x5, 0x4a21, 0x6, 0xfffe]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x5}, {0x7, 0x8}, {0x7}, {0x5, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x10, 0x5, 0x1ff, 0x9, 0x438f, 0x0, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xba}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0xc84}, 0x1, 0x0, 0x0, 0x4048044}, 0x800) (rerun: 64) 1.187700167s ago: executing program 4 (id=4188): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="38020000050000040000000004020000850000008b0000009500edc49c7400001efb511c48d5150dcdd62c3a1de6e6edb820e31366ccfbae70a26509ce57bc"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="38020000050000040000000004020000850000008b0000009500edc49c7400001efb511c48d5150dcdd62c3a1de6e6edb820e31366ccfbae70a26509ce57bc"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007b080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYRES8=r2], &(0x7f00000007c0)='syzkaller\x00', 0x2, 0xffffffffffffff73, 0x0, 0x41000}, 0x94) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x224392a6aa38735d, 0x3) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x9) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.073420399s ago: executing program 2 (id=4189): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) syz_genetlink_get_family_id$ipvs(0x0, r8) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="8401000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005020000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000e0000002000000000000000000e60000000000000000000092010000000000000600000000000000ffff0000000000003c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f0000000000000001000000000000000200000008000000000000002abd700004350000020001002800000000000000480003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014"], 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfffd, 0x8, 0x3c}, {0x3, 0x3, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) close(r2) 1.023953891s ago: executing program 4 (id=4190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x800) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e24, 0x800, @private1, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2a, 0x84, {{}, {@void, @void, @void}}}, 0x14}}, 0x40048a4) 941.378886ms ago: executing program 3 (id=4191): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd83, &(0x7f0000002ac0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1b, 0xd75, 0x4, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x4e22, 0x4e20, 0xd61, 0x0, @wg=@data={0x4, 0x0, 0x8, "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"}}}}}}, 0x0) r4 = socket$inet6(0xa, 0x6, 0x20) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0xe, 0x803, 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000016c0), r6) 489.995983ms ago: executing program 3 (id=4192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="cbc8ccfd45abec00000000000000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (fail_nth: 10) 240.98694ms ago: executing program 1 (id=4193): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @private0, 0x6}, 0x1c) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@RTM_NEWMDB={0x15, 0x54, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x18}}, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}], 0x10) 237.929223ms ago: executing program 0 (id=4194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffefd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x9, 0x7860, 0xfff}, 0x4c}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffefd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x9, 0x7860, 0xfff}, 0x4c}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) syz_init_net_socket$ax25(0x3, 0x2, 0x194) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000ffff23bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000001040000140000008008000500", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x80008d5}, 0x2c0000c6) 170.631324ms ago: executing program 3 (id=4195): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x74}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x74}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) (async) 141.856541ms ago: executing program 0 (id=4196): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4000884) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 100.781332ms ago: executing program 2 (id=4197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x20004853, &(0x7f00000001c0)={0x11, 0x6, r3, 0x1, 0xa8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x28, 0x5, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040), 0x10) listen(r8, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r10, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x3b6, 0x0, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 38.495829ms ago: executing program 4 (id=4198): bpf$PROG_LOAD(0x5, &(0x7f0000004c40)={0x1e, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000feffdfff000000000000000085000000a000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x50bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc884}, 0x4010084) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x17, 0x0, 0x7, {[@generic={0x44, 0x6, "fc5cad8c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x4000004) 38.259319ms ago: executing program 1 (id=4199): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c00180001ac0f0005"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa000000000000911019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 0s ago: executing program 3 (id=4200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x51}}}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x9}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xfff}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x2}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x5}, {0x30, 0x1}, {0x36, 0x1}, {0x9, 0x1}, {0xb, 0x1}, {0x5, 0x1}, {0xb}, {0x3, 0x1}, {0xc}, {0x36}, {0x16, 0x1}, {0xb, 0x1}, {0x9, 0x1}, {0x3}, {0x48, 0x1}, {0x36}, {0x30, 0x1}, {0x1b}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x6c, 0x1}, {0x36, 0x1}, {0x12, 0x1}, {0x36, 0x1}, {0x2}, {0x16}, {0xc}, {0x16}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x4040034) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x150, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a9e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xaa7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x717b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x28a3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x197c74f1}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x44}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) getuid() r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="b99eb1e83eb4"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xe8, r1, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x6b, 0x2a, [@mic={0x8c, 0x18, {0xf65, "5ef5276a543a", @long="942f83c122c231105adc60a3d1056ebc"}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @supported_rates, @prep={0x83, 0x25, {{0x0, 0x1}, 0xb, 0x6d, @device_a, 0x8, @value=@device_b, 0x65, 0x1, @device_b, 0x4}}, @mesh_chsw={0x76, 0x6, {0x5, 0x0, 0x26, 0xe06}}, @rann={0x7e, 0x15, {{0x1, 0x1c}, 0x24, 0xf1, @device_a, 0x52d7, 0xe, 0x101}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_IE={0x48, 0x2a, [@chsw_timing={0x68, 0x4, {0x101, 0x9}}, @measure_req={0x26, 0x3, {0x9, 0xaf, 0x5}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0xf7}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @ibss={0x6, 0x2, 0x7}, @channel_switch={0x25, 0x3, {0x0, 0xae, 0x7}}, @link_id={0x65, 0x12, {@random="85cbd1e9356c", @broadcast, @device_b}}, @peer_mgmt={0x75, 0x4, {0x1, 0x9, @void, @void, @void}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8c00}]}, 0xe8}}, 0x4000800) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008004}, 0x20008001) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d10f4a732e"}, @NL80211_KEY_SEQ={0xa, 0x4, "3e354b0763d3"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000a00)={0x0, 0x3}, &(0x7f0000000a40)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000a80)={r6, @in={{0x2, 0x4e22, @multicast1}}, 0x8, 0x7}, 0x90) r7 = socket$key(0xf, 0x3, 0x2) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000b40)={{r0}, 0x5, 0x765, 0x644a}) ioctl$XFS_IOC_GETBMAP(r5, 0xc0205826, &(0x7f0000000b80)={0x2, 0x9, 0xb1, 0x7, 0xe857}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001d00)={r8, 0x20, &(0x7f0000001cc0)={&(0x7f0000000c00)=""/4096, 0x1000, 0x0, &(0x7f0000001c00)=""/155, 0x9b}}, 0x10) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001d40)='devices.allow\x00', 0x2, 0x0) tee(r9, r0, 0xffffffffffff7fff, 0x0) r10 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000001d80)) connect$netrom(r10, &(0x7f0000001dc0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000001e40)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f00)={0xe4, r1, 0x20, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x47}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x96f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffe}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7d}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x434}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x184}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1ff9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fffffff}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc00c050}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) 0s ago: executing program 0 (id=4203): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$kcm(0xa, 0x3, 0x87) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0xffffff80, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r2, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000020100800c0001"], 0x114}], 0x1}, 0x0) write$tun(r5, &(0x7f00000004c0)={@void, @val={0x1, 0x1, 0x9, 0x7b05, 0x779f, 0x9db5}, @llc={@snap={0xab, 0xfe, "eb78", "a1ed6f", 0x22eb, "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"}}}, 0x1013) kernel console output (not intermixed with test programs): value instead [ 363.127347][T16600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2746'. [ 363.222734][T16603] nftables ruleset with unbound chain [ 364.214196][T16661] bond8: option all_slaves_active: invalid value (13) [ 364.223832][T16661] bond8 (unregistering): Released all slaves [ 364.423215][T16672] netlink: 'syz.2.2762': attribute type 3 has an invalid length. [ 364.556406][T16680] bridge0: entered allmulticast mode [ 364.648392][T16680] vlan4: left promiscuous mode [ 364.662837][T16680] bridge_slave_0: left promiscuous mode [ 364.681946][T16680] bridge0: port 4(vlan4) entered disabled state [ 364.690780][T16680] vlan3: left allmulticast mode [ 364.697323][T16680] geneve0: left allmulticast mode [ 364.702599][T16680] vlan3: left promiscuous mode [ 364.708037][T16680] geneve0: left promiscuous mode [ 364.713997][T16680] bridge0: port 3(vlan3) entered disabled state [ 364.724272][T16680] bridge_slave_1: left allmulticast mode [ 364.730701][T16680] bridge_slave_1: left promiscuous mode [ 364.739166][T16680] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.876237][T16699] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 365.075595][T16710] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 365.271437][T16690] lo speed is unknown, defaulting to 1000 [ 365.586190][T16741] hsr0: entered promiscuous mode [ 365.796266][T16753] netlink: 'syz.2.2780': attribute type 7 has an invalid length. [ 365.804055][T16753] netlink: 'syz.2.2780': attribute type 8 has an invalid length. [ 366.397574][T16761] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 366.614711][T16786] __nla_validate_parse: 16 callbacks suppressed [ 366.614735][T16786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2787'. [ 366.640069][T16765] xt_hashlimit: size too large, truncated to 1048576 [ 366.968645][T16800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2790'. [ 367.178791][T16814] netlink: 'syz.3.2794': attribute type 1 has an invalid length. [ 367.297902][T16814] bond11: entered promiscuous mode [ 367.327014][T16814] 8021q: adding VLAN 0 to HW filter on device bond11 [ 367.503322][T16833] vxcan0: entered allmulticast mode [ 375.479937][T16872] xt_policy: too many policy elements [ 375.547680][T16876] sctp: [Deprecated]: syz.0.2806 (pid 16876) Use of int in max_burst socket option. [ 375.547680][T16876] Use struct sctp_assoc_value instead [ 375.840234][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 375.849842][T16907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2813'. [ 375.861079][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 375.874432][T16907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2813'. [ 375.895096][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 375.904002][T16911] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 376.163601][T16923] netlink: del zone limit has 8 unknown bytes [ 376.425712][T16934] x_tables: duplicate underflow at hook 3 [ 376.537584][T16940] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 376.548543][T16940] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2823'. [ 376.578076][T16940] syzkaller1: entered promiscuous mode [ 376.583648][T16940] syzkaller1: entered allmulticast mode [ 376.647044][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2825'. [ 376.668495][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2825'. [ 376.688062][T16950] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2821'. [ 376.699947][T16929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2821'. [ 376.968878][T16968] netlink: 'syz.0.2831': attribute type 4 has an invalid length. [ 376.999148][T16968] .`: renamed from bond0 (while UP) [ 377.244523][T16987] netlink: 'syz.2.2837': attribute type 20 has an invalid length. [ 377.262292][ T1199] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.262386][T16987] netlink: 'syz.2.2837': attribute type 20 has an invalid length. [ 377.287313][ T1199] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.308838][ T1199] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.336705][ T1199] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.441080][T17000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.466545][T17000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.487688][T17000] .`: (slave batadv0): Releasing backup interface [ 377.497578][T17000] batadv0 (unregistering): left promiscuous mode [ 377.572223][T17006] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 378.857351][T17074] syzkaller1: entered promiscuous mode [ 378.862967][T17074] syzkaller1: entered allmulticast mode [ 379.082237][T17085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.369629][T17098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.696264][T17104] netlink: zone id is out of range [ 379.701563][T17104] netlink: zone id is out of range [ 379.718466][T17102] macvlan2: entered allmulticast mode [ 379.718598][T17104] netlink: zone id is out of range [ 379.723874][T17102] hsr0: entered allmulticast mode [ 379.734363][T17104] netlink: zone id is out of range [ 379.741168][T17104] netlink: zone id is out of range [ 379.758144][T17102] hsr_slave_0: entered allmulticast mode [ 379.764890][T17102] hsr_slave_1: entered allmulticast mode [ 379.776327][T17107] netlink: 'syz.1.2869': attribute type 1 has an invalid length. [ 379.799749][T17104] netlink: zone id is out of range [ 379.921625][T17120] netlink: 'syz.3.2873': attribute type 2 has an invalid length. [ 379.930046][T17120] netlink: 'syz.3.2873': attribute type 8 has an invalid length. [ 379.943881][T17104] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 380.006034][T17104] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 380.058936][T17125] 8021q: adding VLAN 0 to HW filter on device bond8 [ 380.071021][T17125] netlink: 'syz.1.2869': attribute type 1 has an invalid length. [ 380.095014][T17125] netlink: 'syz.1.2869': attribute type 2 has an invalid length. [ 380.242074][T17137] vxcan0: entered promiscuous mode [ 380.258741][T17139] vxcan2: entered promiscuous mode [ 380.452828][ T9919] lo speed is unknown, defaulting to 1000 [ 380.461352][ T9919] syz2: Port: 1 Link DOWN [ 380.551795][T17159] netlink: 'syz.3.2886': attribute type 1 has an invalid length. [ 380.622395][T17129] lo speed is unknown, defaulting to 1000 [ 380.777031][T17166] nbd: illegal input index 38656 [ 380.822365][T17173] netlink: 'syz.3.2890': attribute type 7 has an invalid length. [ 380.843292][T10146] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.851635][T10146] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.860613][T17173] __nla_validate_parse: 17 callbacks suppressed [ 380.860629][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2890'. [ 380.876324][T10146] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.884616][T10146] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.893640][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2890'. [ 381.094095][T17183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2892'. [ 381.148468][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2892'. [ 381.286867][T17193] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2892'. [ 381.733372][T17199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2896'. [ 381.987658][T17202] xt_CT: No such helper "snmp_trap" [ 382.240319][T17184] lo speed is unknown, defaulting to 1000 [ 382.872258][T17206] lo speed is unknown, defaulting to 1000 [ 382.952999][T17221] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 383.025604][T17221] netlink: 41 bytes leftover after parsing attributes in process `syz.4.2903'. [ 383.034690][T17221] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2903'. [ 383.091393][T17221] netlink: 41 bytes leftover after parsing attributes in process `syz.4.2903'. [ 383.097751][T17228] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2906'. [ 383.340228][T17236] lo speed is unknown, defaulting to 1000 [ 383.362313][T17236] lo speed is unknown, defaulting to 1000 [ 383.384296][T17236] lo speed is unknown, defaulting to 1000 [ 383.392125][T17246] xt_CT: No such helper "syz0" [ 383.508427][T17251] validate_nla: 3 callbacks suppressed [ 383.508445][T17251] netlink: 'syz.2.2910': attribute type 7 has an invalid length. [ 383.534857][T17251] netlink: 'syz.2.2910': attribute type 8 has an invalid length. [ 383.644095][T17251] IPv6: sit1: Disabled Multicast RS [ 383.895694][T17263] tipc: Enabled bearer , priority 0 [ 383.903213][T17263] syzkaller0: entered promiscuous mode [ 383.908844][T17263] syzkaller0: entered allmulticast mode [ 383.956929][T17265] xt_TCPMSS: Only works on TCP SYN packets [ 384.005475][T17269] trusted_key: syz.3.2915 sent an empty control message without MSG_MORE. [ 384.032695][T17270] netlink: 'syz.1.2913': attribute type 39 has an invalid length. [ 384.076736][T17236] infiniband sqz0: set active [ 384.092762][T17236] infiniband sqz0: added lo [ 384.139728][T17271] tipc: Resetting bearer [ 384.179661][ T5890] lo speed is unknown, defaulting to 1000 [ 384.183561][T17236] RDS/IB: sqz0: added [ 384.191200][T17236] smc: adding ib device sqz0 with port count 1 [ 384.194081][T17260] tipc: Resetting bearer [ 384.203420][T17236] smc: ib device sqz0 port 1 has no pnetid [ 384.218590][T17260] tipc: Disabling bearer [ 384.227311][T17278] netlink: 'syz.0.2916': attribute type 6 has an invalid length. [ 384.239554][T17236] lo speed is unknown, defaulting to 1000 [ 384.246607][ T5890] lo speed is unknown, defaulting to 1000 [ 384.504486][T17288] sctp: [Deprecated]: syz.0.2920 (pid 17288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.504486][T17288] Use struct sctp_sack_info instead [ 384.590612][T17236] lo speed is unknown, defaulting to 1000 [ 384.879446][T17312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.984735][T17314] vlan3: entered promiscuous mode [ 384.989980][T17314] geneve1: entered promiscuous mode [ 385.017898][T17314] vlan3: entered allmulticast mode [ 385.045900][T17314] geneve1: entered allmulticast mode [ 385.163701][T17328] Timeout policy `syz0' can only be used by L3 protocol number 17613 [ 385.174533][T17236] lo speed is unknown, defaulting to 1000 [ 385.596425][T17236] lo speed is unknown, defaulting to 1000 [ 385.700295][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.711311][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.719679][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.727773][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.737211][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.949993][T17351] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 386.057308][T10146] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.067742][T10146] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.077822][T10146] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 37949 - 0 [ 386.097147][T17236] lo speed is unknown, defaulting to 1000 [ 386.152073][T10146] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.161959][T10146] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.175528][T10146] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 37949 - 0 [ 386.196946][T17345] lo speed is unknown, defaulting to 1000 [ 386.250296][T10146] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.260331][T10146] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.272469][T10146] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 37949 - 0 [ 386.299842][T17236] lo speed is unknown, defaulting to 1000 [ 386.341280][T10146] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.352198][T10146] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.362047][T10146] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 37949 - 0 [ 386.628281][T10146] tipc: Resetting bearer [ 386.687607][T10146] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 386.776558][T10146] bond10 (unregistering): (slave gretap2): Releasing active interface [ 386.844451][T10146] tipc: Disabling bearer [ 387.088403][T10146] bond7 (unregistering): (slave bridge0): Releasing active interface [ 387.096573][T10146] bridge0 (unregistering): left promiscuous mode [ 387.102907][T10146] bridge0 (unregistering): left allmulticast mode [ 387.208317][T10146] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 387.216556][T10146] bridge7 (unregistering): left promiscuous mode [ 387.271848][T10146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.281900][T10146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.291302][T10146] bond0 (unregistering): Released all slaves [ 387.301572][T10146] bond1 (unregistering): Released all slaves [ 387.313950][T10146] bond2 (unregistering): Released all slaves [ 387.329507][T10146] bond3 (unregistering): Released all slaves [ 387.341462][T10146] bond4 (unregistering): Released all slaves [ 387.355708][T10146] bond5 (unregistering): Released all slaves [ 387.369707][T10146] bond6 (unregistering): (slave vcan0): Releasing backup interface [ 387.377774][T10146] vcan0: left promiscuous mode [ 387.383104][T10146] bond6 (unregistering): Released all slaves [ 387.399339][T10146] bond7 (unregistering): Released all slaves [ 387.411491][T10146] bond8 (unregistering): Released all slaves [ 387.425187][T10146] bond9 (unregistering): Released all slaves [ 387.437476][T10146] bond10 (unregistering): Released all slaves [ 387.456725][T10146] bond11 (unregistering): Released all slaves [ 387.479192][T17345] chnl_net:caif_netlink_parms(): no params data found [ 387.655948][T10146] tipc: Disabling bearer [ 387.667505][T10146] tipc: Left network mode [ 387.681359][T17345] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.696996][T17345] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.721713][T17345] bridge_slave_0: entered allmulticast mode [ 387.737759][T17345] bridge_slave_0: entered promiscuous mode [ 387.751909][T17345] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.776089][T17345] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.783337][T17345] bridge_slave_1: entered allmulticast mode [ 387.804598][T17345] bridge_slave_1: entered promiscuous mode [ 387.869734][ T5827] Bluetooth: hci5: command tx timeout [ 387.891385][T17345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.908149][T17345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.966275][T17345] team0: Port device team_slave_0 added [ 387.974450][T17345] team0: Port device team_slave_1 added [ 388.017609][T17345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.024848][T17345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.054615][T17345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.078607][T17345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.086395][T17345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.113767][T17345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.217554][T17345] hsr_slave_0: entered promiscuous mode [ 388.224411][T17345] hsr_slave_1: entered promiscuous mode [ 388.231508][T17345] debugfs: 'hsr0' already exists in 'hsr' [ 388.246311][T17345] Cannot create hsr debugfs directory [ 388.968322][T10146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.986287][T10146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.390519][T10146] team0 (unregistering): Port device team_slave_1 removed [ 389.409850][T10146] team0 (unregistering): Port device team_slave_0 removed [ 389.647329][T17345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 389.661014][T17345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 389.672431][T17345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 389.698212][T17345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.795002][T17345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.810802][T17345] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.823713][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.830829][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.844482][T10141] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.851659][T10141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.874469][T10146] IPVS: stop unused estimator thread 0... [ 389.945008][ T5827] Bluetooth: hci5: command tx timeout [ 390.014153][T17345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.050222][T17345] veth0_vlan: entered promiscuous mode [ 390.059950][T17345] veth1_vlan: entered promiscuous mode [ 390.086498][T17345] veth0_macvtap: entered promiscuous mode [ 390.095788][T17345] veth1_macvtap: entered promiscuous mode [ 390.111420][T17345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.125421][T17345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.138916][T10146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.148705][T10146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.159143][T10146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.169034][T10146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.226031][T10146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.233870][T10146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.257787][T10149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.267512][T10149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.024934][ T5827] Bluetooth: hci5: command tx timeout [ 393.459381][T17435] xt_cluster: node mask cannot exceed total number of nodes [ 393.620110][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.641187][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.649610][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.675272][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.691634][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.975576][T17462] __nla_validate_parse: 12 callbacks suppressed [ 393.975595][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2946'. [ 394.106183][ T5827] Bluetooth: hci5: command tx timeout [ 394.138169][T17444] lo speed is unknown, defaulting to 1000 [ 394.581251][T17481] net_ratelimit: 11 callbacks suppressed [ 394.581269][T17481] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 394.793912][T17444] chnl_net:caif_netlink_parms(): no params data found [ 395.029032][T17444] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.036416][T17444] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.043728][T17444] bridge_slave_0: entered allmulticast mode [ 395.051560][T17444] bridge_slave_0: entered promiscuous mode [ 395.066968][T17444] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.074271][T17444] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.081671][T17444] bridge_slave_1: entered allmulticast mode [ 395.089612][T17444] bridge_slave_1: entered promiscuous mode [ 395.128572][T17444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.141364][T17444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.183081][T17444] team0: Port device team_slave_0 added [ 395.191734][T17444] team0: Port device team_slave_1 added [ 395.252930][T17444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.263918][T17444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.291215][T17444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.308357][T17444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.316401][T17444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.343049][T17444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.372143][T17512] xt_CT: No such helper "syz0" [ 395.422394][T17444] hsr_slave_0: entered promiscuous mode [ 395.430713][T17444] hsr_slave_1: entered promiscuous mode [ 395.441511][T17444] debugfs: 'hsr0' already exists in 'hsr' [ 395.447514][T17444] Cannot create hsr debugfs directory [ 395.459084][T17517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2963'. [ 395.459600][T17516] netlink: 'syz.3.2962': attribute type 13 has an invalid length. [ 395.568114][T17518] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.605581][T17518] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.701097][T17518] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.773421][T17530] netlink: 'syz.3.2967': attribute type 1 has an invalid length. [ 395.784437][T17444] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.786528][ T5827] Bluetooth: hci2: command tx timeout [ 395.813729][T17518] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.856698][T17444] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.883500][T17531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2967'. [ 396.020606][T17444] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.094090][ T136] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.123767][ T136] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.147420][T10149] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.162389][T17444] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.187109][T10149] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.287405][T17541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2972'. [ 396.364036][T17444] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 396.391668][T17444] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 396.413065][T17548] hsr0: entered promiscuous mode [ 396.429781][T17444] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 396.440613][T17550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2974'. [ 396.441557][T17548] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2973'. [ 396.466270][T17444] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 396.527046][T17550] netlink: 'syz.4.2974': attribute type 1 has an invalid length. [ 396.609003][T17560] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2976'. [ 396.782967][T17444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.824706][T17444] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.853833][T10142] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.861054][T10142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.885884][T10142] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.893093][T10142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.906893][T17576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2981'. [ 396.948386][T17584] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2982'. [ 397.191224][T17598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2984'. [ 397.333602][T17598] 8021q: adding VLAN 0 to HW filter on device bond9 [ 397.451536][T17444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.581514][T17444] veth0_vlan: entered promiscuous mode [ 397.605819][T17579] lo speed is unknown, defaulting to 1000 [ 397.637718][T17444] veth1_vlan: entered promiscuous mode [ 397.681924][T17621] netlink: 'syz.0.2989': attribute type 27 has an invalid length. [ 397.866087][ T5827] Bluetooth: hci2: command tx timeout [ 398.038242][T17621] bridge7: left promiscuous mode [ 398.043284][T17621] bridge7: left allmulticast mode [ 398.062775][T17621] ip6tnl1: left allmulticast mode [ 398.068251][T17621] bond7: left allmulticast mode [ 398.073204][T17621] ip6gretap1: left allmulticast mode [ 398.103253][T17621] geneve1: left allmulticast mode [ 398.124895][T17621] geneve1: left promiscuous mode [ 398.130216][T17621] macsec1: left promiscuous mode [ 398.150463][T17621] macsec1: left allmulticast mode [ 398.327998][T17625] 8021q: adding VLAN 0 to HW filter on device .` [ 398.338292][T17625] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.350546][T17625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.371982][T10146] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.409119][T10146] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.418531][T10146] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.440999][T17444] veth0_macvtap: entered promiscuous mode [ 398.450650][T10146] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.506220][T17444] veth1_macvtap: entered promiscuous mode [ 398.598833][T17444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.616991][T17444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.631945][T10146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.651580][T10146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.714836][T10146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.731349][T10146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.961112][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.984258][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.109359][T10149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.129420][T10149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.733145][T17681] sctp: [Deprecated]: syz.0.3004 (pid 17681) Use of int in maxseg socket option. [ 399.733145][T17681] Use struct sctp_assoc_value instead [ 399.945013][ T5827] Bluetooth: hci2: command tx timeout [ 400.010997][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.023437][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.033185][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.045604][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.059247][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.669910][T17727] __nla_validate_parse: 1 callbacks suppressed [ 400.669928][T17727] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3016'. [ 400.702256][T17729] netlink: 'syz.1.3015': attribute type 1 has an invalid length. [ 400.712494][T17729] netlink: 'syz.1.3015': attribute type 3 has an invalid length. [ 400.722216][T17729] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3015'. [ 400.763278][T17689] lo speed is unknown, defaulting to 1000 [ 400.854842][T17732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3017'. [ 401.339444][T17689] chnl_net:caif_netlink_parms(): no params data found [ 401.526557][T17689] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.548362][T17689] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.558159][T17689] bridge_slave_0: entered allmulticast mode [ 401.567214][T17689] bridge_slave_0: entered promiscuous mode [ 401.590100][T17689] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.597416][T17689] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.604703][T17689] bridge_slave_1: entered allmulticast mode [ 401.612545][T17689] bridge_slave_1: entered promiscuous mode [ 401.690527][T17689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.704464][T17689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.759412][T17689] team0: Port device team_slave_0 added [ 401.771469][T17689] team0: Port device team_slave_1 added [ 401.859562][T17689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.875141][T17689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.903386][T17689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.918661][T17689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.931920][T17689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.937276][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 401.960105][T17689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.025019][ T5827] Bluetooth: hci2: command tx timeout [ 402.104578][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 402.105399][ T5827] Bluetooth: hci4: command tx timeout [ 402.141871][T17689] hsr_slave_0: entered promiscuous mode [ 402.148657][T17689] hsr_slave_1: entered promiscuous mode [ 402.155127][T17689] debugfs: 'hsr0' already exists in 'hsr' [ 402.160871][T17689] Cannot create hsr debugfs directory [ 402.398653][T17811] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3036'. [ 402.512128][T17823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.647996][T17826] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 403.003480][T17689] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 403.043360][T17689] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 403.073994][T17689] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 403.109045][T17848] syzkaller0: entered promiscuous mode [ 403.114556][T17848] syzkaller0: entered allmulticast mode [ 403.123138][T17689] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 403.159857][T17825] lo speed is unknown, defaulting to 1000 [ 403.376154][T17689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.434423][T17689] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.486549][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.493715][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.527319][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.534472][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.185358][ T5827] Bluetooth: hci4: command tx timeout [ 404.229618][T17689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.749377][T17689] veth0_vlan: entered promiscuous mode [ 404.767202][T17689] veth1_vlan: entered promiscuous mode [ 404.799854][T17689] veth0_macvtap: entered promiscuous mode [ 404.808978][T17689] veth1_macvtap: entered promiscuous mode [ 404.827910][T17689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.842372][T17689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.861329][ T1199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.873598][ T1199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.882923][ T1199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.904621][ T1199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.963569][T10142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.972879][T10142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.997679][T10142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.006081][T10142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.054284][T17905] syz_tun: entered promiscuous mode [ 405.060628][T17905] vlan2: entered promiscuous mode [ 406.264865][ T5827] Bluetooth: hci4: command tx timeout [ 408.345229][ T5827] Bluetooth: hci4: command tx timeout [ 409.968203][T17930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3056'. [ 409.995702][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3056'. [ 410.006048][T17936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3054'. [ 410.026650][T17930] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 410.692161][T17946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3060'. [ 410.774764][T17936] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 410.781491][T17936] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 410.982937][T17936] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 411.002171][T17936] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 411.179920][T17974] x_tables: duplicate underflow at hook 3 [ 411.483231][T17936] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 411.497790][T17936] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 411.584003][T17996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3070'. [ 411.623983][T17996] vlan2: entered promiscuous mode [ 411.650108][T17996] bridge0: entered promiscuous mode [ 411.790520][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.802107][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 411.817369][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 411.829823][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.838218][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.866965][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.880970][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 411.904271][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 411.912275][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.921899][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 412.344540][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3079'. [ 412.357763][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3079'. [ 412.377256][T18021] netlink: 'syz.3.3079': attribute type 29 has an invalid length. [ 412.393867][T18022] netlink: 'syz.3.3079': attribute type 29 has an invalid length. [ 412.404441][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3079'. [ 412.414418][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3079'. [ 412.428348][T17943] lo speed is unknown, defaulting to 1000 [ 412.522148][T18029] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3080'. [ 412.989663][T18055] netlink: 'syz.4.3087': attribute type 1 has an invalid length. [ 413.037016][T17943] chnl_net:caif_netlink_parms(): no params data found [ 413.143598][T17943] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.151869][T17943] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.159606][T17943] bridge_slave_0: entered allmulticast mode [ 413.167796][T17943] bridge_slave_0: entered promiscuous mode [ 413.177140][T17943] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.184392][T17943] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.192125][T17943] bridge_slave_1: entered allmulticast mode [ 413.200274][T17943] bridge_slave_1: entered promiscuous mode [ 413.245818][T17943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.258755][T17943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.338820][T17943] team0: Port device team_slave_0 added [ 413.350558][T17943] team0: Port device team_slave_1 added [ 413.428726][T17943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.447220][T17943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.495573][T17943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.508416][T17943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.517437][T17943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.548269][T17943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.691489][T17943] hsr_slave_0: entered promiscuous mode [ 413.706595][T17943] hsr_slave_1: entered promiscuous mode [ 413.719607][T17943] debugfs: 'hsr0' already exists in 'hsr' [ 413.730572][T17943] Cannot create hsr debugfs directory [ 413.862485][T18076] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.869894][T18076] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.013308][T18076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.026343][ T5827] Bluetooth: hci3: command tx timeout [ 414.056857][T18076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.248565][ T136] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.268398][ T136] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.338482][ T136] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.428156][ T136] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.524886][T18072] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 414.530852][T18072] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 414.991474][T17943] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.002664][T18097] Cannot find del_set index 4 as target [ 415.126619][T17943] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.220941][T17943] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.320525][T17943] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.370368][T18079] lec:lec_atm_close: lec0: Shut down! [ 415.678371][T17943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 415.728917][T17943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 415.778053][T17943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 415.809594][T17943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 415.868240][T18101] lo speed is unknown, defaulting to 1000 [ 416.068728][T17943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.103510][T17943] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.129138][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.136345][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.178812][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.186009][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.579745][T18133] netlink: 'syz.0.3099': attribute type 1 has an invalid length. [ 416.689008][T18137] __nla_validate_parse: 2 callbacks suppressed [ 416.689026][T18137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3099'. [ 416.746413][T18135] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 416.757521][T18135] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 416.876785][T18133] macvlan1: entered promiscuous mode [ 416.891196][T18133] macvlan1: entered allmulticast mode [ 416.901766][T18133] bond0: (slave macvlan1): Error -98 calling set_mac_address [ 417.031601][T17943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.170738][T17943] veth0_vlan: entered promiscuous mode [ 417.279169][T17943] veth1_vlan: entered promiscuous mode [ 417.409656][T18154] geneve4: entered promiscuous mode [ 417.421726][ T58] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.436725][ T58] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.452381][ T58] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.518731][ T58] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.536506][T17943] veth0_macvtap: entered promiscuous mode [ 417.561734][T17943] veth1_macvtap: entered promiscuous mode [ 417.651386][T17943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.791054][T18147] lo speed is unknown, defaulting to 1000 [ 417.795268][T17943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.856459][ T136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.878653][ T136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.903468][ T136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.936360][ T5488] lec:lec_start_xmit: lec0:No lecd attached [ 417.945889][ T136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.142033][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.153015][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.215154][T17992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.224312][T17992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.704824][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5770 ms [ 423.713147][ C0] lec:lec_tx_timeout: lec0 [ 423.717722][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 428.744862][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 428.752917][ C0] lec:lec_tx_timeout: lec0 [ 428.757598][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 429.046436][T18212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.200836][T18232] syzkaller0: entered promiscuous mode [ 429.213974][T18232] syzkaller0: entered allmulticast mode [ 429.276757][T18236] bond1: option miimon: invalid value (18446744073709551607) [ 429.284378][T18236] bond1: option miimon: allowed values 0 - 2147483647 [ 429.294109][T18236] bond1 (unregistering): Released all slaves [ 429.447106][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3115'. [ 429.752979][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.761728][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.770082][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.779747][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.788353][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.896775][T18277] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3123'. [ 430.096518][ T5821] team0: Port device syz_tun removed [ 430.169024][T18287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3126'. [ 430.180197][T18287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3126'. [ 430.195841][T18287] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3126'. [ 430.225710][T18265] lo speed is unknown, defaulting to 1000 [ 430.392849][T18291] ip6tnl0: Caught tx_queue_len zero misconfig [ 430.556291][T18305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3131'. [ 430.861451][T18283] lo speed is unknown, defaulting to 1000 [ 430.876390][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3134'. [ 431.160337][T18265] chnl_net:caif_netlink_parms(): no params data found [ 431.311822][T18265] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.325616][T18265] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.333270][T18265] bridge_slave_0: entered allmulticast mode [ 431.362083][T18265] bridge_slave_0: entered promiscuous mode [ 431.387076][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3138'. [ 431.396934][T18265] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.404329][T18265] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.412498][T18265] bridge_slave_1: entered allmulticast mode [ 431.426577][T18265] bridge_slave_1: entered promiscuous mode [ 431.510658][T18265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.530049][T18265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.755217][T18265] team0: Port device team_slave_0 added [ 431.791170][T18265] team0: Port device team_slave_1 added [ 431.865073][ T5823] Bluetooth: hci0: command tx timeout [ 432.051865][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 432.088201][T18371] team0 (unregistering): Port device team_slave_0 removed [ 432.100381][T18371] team0 (unregistering): Port device team_slave_1 removed [ 432.155797][T18265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.169514][T18265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.176718][T18377] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3145'. [ 432.198172][T18265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.241393][T18265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.249344][T18265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.277499][T18265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.290956][T18379] netlink: 'syz.1.3146': attribute type 5 has an invalid length. [ 432.420969][T18265] hsr_slave_0: entered promiscuous mode [ 432.440845][T18265] hsr_slave_1: entered promiscuous mode [ 432.456982][T18265] debugfs: 'hsr0' already exists in 'hsr' [ 432.463774][T18265] Cannot create hsr debugfs directory [ 432.498781][T18394] netlink: 'syz.4.3149': attribute type 4 has an invalid length. [ 432.539392][T18394] .`: renamed from bond0 (while UP) [ 432.835663][T18402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.020598][T18265] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.123573][T18384] lo speed is unknown, defaulting to 1000 [ 433.227901][T18265] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.302890][T18430] nbd: illegal input index -1113835520 [ 433.368611][T18430] bond0: entered allmulticast mode [ 433.406296][T18265] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.490123][T18430] macvlan2: entered promiscuous mode [ 433.515631][T18436] netlink: 'syz.2.3160': attribute type 1 has an invalid length. [ 433.523394][T18436] netlink: 'syz.2.3160': attribute type 2 has an invalid length. [ 433.531353][T18430] macvlan2: entered allmulticast mode [ 433.538001][T18430] bond0: (slave macvlan2): Opening slave failed [ 433.599714][T18265] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.764793][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 433.772873][ C0] lec:lec_tx_timeout: lec0 [ 433.778025][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 433.945095][ T5823] Bluetooth: hci0: command tx timeout [ 434.138025][T18265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 434.150474][T18265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 434.160780][T18265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 434.172560][T18265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 434.298647][T18265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.322881][T18265] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.338061][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.345320][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.379561][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.386738][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.428199][T18265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.591854][T18265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.630614][T18265] veth0_vlan: entered promiscuous mode [ 434.643828][T18265] veth1_vlan: entered promiscuous mode [ 434.679423][T18265] veth0_macvtap: entered promiscuous mode [ 434.689528][T18265] veth1_macvtap: entered promiscuous mode [ 434.705234][T18265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.720302][T18265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.733429][ T136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.743594][ T136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.762815][ T136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.772110][ T136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.826831][T10146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.834663][T10146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.865577][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.873443][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.026675][ T5823] Bluetooth: hci0: command tx timeout [ 438.105184][ T5823] Bluetooth: hci0: command tx timeout [ 438.784812][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 438.792843][ C0] lec:lec_tx_timeout: lec0 [ 438.797485][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 441.749409][T18490] __nla_validate_parse: 10 callbacks suppressed [ 441.749429][T18490] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3168'. [ 441.907011][T18500] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 441.917876][T18502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3173'. [ 442.019355][T18506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3175'. [ 442.055687][T18506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3175'. [ 442.117990][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3178'. [ 442.241442][T18520] Bluetooth: MGMT ver 1.23 [ 442.247284][T18520] syzkaller0: entered promiscuous mode [ 442.252763][T18520] syzkaller0: entered allmulticast mode [ 442.573007][T18522] lo speed is unknown, defaulting to 1000 [ 442.919322][T18529] lo speed is unknown, defaulting to 1000 [ 443.057465][T18556] netlink: 210832 bytes leftover after parsing attributes in process `syz.2.3188'. [ 443.261803][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3192'. [ 443.393852][T18565] bond2: Invalid ad_actor_system MAC address. [ 443.401592][T18565] bond2: option ad_actor_system: invalid value (7) [ 443.430971][T18565] bond2 (unregistering): Released all slaves [ 443.773369][T18582] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3196'. [ 443.791523][T18582] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3196'. [ 443.814801][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 443.822888][ C0] lec:lec_tx_timeout: lec0 [ 443.827543][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 443.906060][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3197'. [ 444.856499][T18642] netdevsim netdevsim1: Direct firmware load for .. @ failed with error -2 [ 444.882705][T18642] netdevsim netdevsim1: Falling back to sysfs fallback for: .. @ [ 448.835939][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 448.843983][ C0] lec:lec_tx_timeout: lec0 [ 448.848578][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 451.518789][T18709] __nla_validate_parse: 3 callbacks suppressed [ 451.518807][T18709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3222'. [ 451.525553][T18715] xt_ecn: cannot match TCP bits for non-tcp packets [ 451.546484][T18716] xt_ecn: cannot match TCP bits for non-tcp packets [ 451.752827][T18726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3228'. [ 451.762787][T18726] bridge0: port 3(syz_tun) entered blocking state [ 451.769798][T18726] bridge0: port 3(syz_tun) entered disabled state [ 451.790367][T18726] syz_tun: entered allmulticast mode [ 451.807540][T18726] bridge0: port 3(syz_tun) entered blocking state [ 451.814165][T18726] bridge0: port 3(syz_tun) entered forwarding state [ 452.034044][T18738] tipc: Enabling of bearer rejected, failed to enable media [ 452.628749][T18759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3237'. [ 452.640055][T18759] netlink: 'syz.2.3237': attribute type 7 has an invalid length. [ 452.648604][T18759] netlink: 'syz.2.3237': attribute type 8 has an invalid length. [ 452.667485][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 452.710518][T18762] xt_CT: No such helper "snmp_trap" [ 452.827399][T18778] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 452.834698][T18778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3243'. [ 452.910986][T18786] netlink: 'syz.4.3238': attribute type 1 has an invalid length. [ 452.931636][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'. [ 452.972317][T18786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.002632][T18789] bond1: entered allmulticast mode [ 453.307649][T18813] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 453.854792][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 453.862843][ C0] lec:lec_tx_timeout: lec0 [ 453.867459][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 454.848597][T18820] netlink: 'syz.2.3249': attribute type 10 has an invalid length. [ 454.856564][T18820] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3249'. [ 454.865891][T18820] bond0: entered promiscuous mode [ 454.871534][T18820] bond_slave_0: entered promiscuous mode [ 454.877930][T18820] bond_slave_1: entered promiscuous mode [ 454.884865][T18820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.891770][T18820] bridge0: port 3(bond0) entered blocking state [ 454.898415][T18820] bridge0: port 3(bond0) entered disabled state [ 454.905000][T18820] bond0: entered allmulticast mode [ 454.910109][T18820] bond_slave_0: entered allmulticast mode [ 454.916388][T18820] bond_slave_1: entered allmulticast mode [ 455.758642][T18769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.940090][T18826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3251'. [ 456.053595][T18839] netlink: 'syz.3.3251': attribute type 16 has an invalid length. [ 456.077596][T18839] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3251'. [ 456.102394][T18839] veth1_macvtap: entered allmulticast mode [ 456.126788][T18839] netlink: 'syz.3.3251': attribute type 16 has an invalid length. [ 456.150310][T18839] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3251'. [ 456.176742][T18839] netlink: 'syz.3.3251': attribute type 16 has an invalid length. [ 456.185060][T18839] netlink: 'syz.3.3251': attribute type 16 has an invalid length. [ 456.215877][T18839] netlink: 'syz.3.3251': attribute type 16 has an invalid length. [ 456.239925][T18839] netlink: 'syz.3.3251': attribute type 16 has an invalid length. [ 456.349253][T18851] syzkaller0: entered promiscuous mode [ 456.364382][T18851] syzkaller0: entered allmulticast mode [ 456.383720][T18864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.413130][T18864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.443570][T18864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.468639][T18864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.812721][T18882] syzkaller0: entered promiscuous mode [ 456.847993][T18882] syzkaller0: entered allmulticast mode [ 457.080574][T18897] bridge1: entered allmulticast mode [ 457.263580][T18903] __nla_validate_parse: 63 callbacks suppressed [ 457.263601][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'. [ 457.363161][T18903] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.390882][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'. [ 458.874806][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 458.882856][ C0] lec:lec_tx_timeout: lec0 [ 458.887591][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 463.430443][T18944] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3276'. [ 463.660042][T18960] validate_nla: 59 callbacks suppressed [ 463.660061][T18960] netlink: 'syz.4.3281': attribute type 1 has an invalid length. [ 463.708935][T18967] netlink: 364 bytes leftover after parsing attributes in process `syz.2.3283'. [ 463.729220][T18960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.750013][T18968] gretap0: entered promiscuous mode [ 463.771323][T18968] vlan3: entered promiscuous mode [ 463.801892][T18960] bond2: (slave geneve2): making interface the new active one [ 463.813415][T18960] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 463.894792][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 463.902843][ C0] lec:lec_tx_timeout: lec0 [ 463.907457][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 463.971048][T18982] vlan2: entered promiscuous mode [ 463.990837][T18982] geneve1: entered promiscuous mode [ 464.018923][T18982] vlan2: entered allmulticast mode [ 464.047700][T18982] geneve1: entered allmulticast mode [ 464.312849][T19004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3292'. [ 464.479327][T19017] netlink: 'syz.2.3293': attribute type 4 has an invalid length. [ 464.979753][T19039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3304'. [ 465.060169][T19045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3307'. [ 465.074549][T19049] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 465.301966][T19068] netlink: 'syz.2.3312': attribute type 55 has an invalid length. [ 465.647725][T19034] lo speed is unknown, defaulting to 1000 [ 465.910479][T19088] delete_channel: no stack [ 466.183490][T19109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3325'. [ 466.231764][T19109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.245103][T19109] netlink: 'syz.0.3325': attribute type 1 has an invalid length. [ 466.260629][T19109] netlink: 'syz.0.3325': attribute type 2 has an invalid length. [ 466.828104][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3329'. [ 466.865701][T19129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3329'. [ 466.896860][T19133] bond0: left allmulticast mode [ 466.901755][T19133] bond_slave_0: left allmulticast mode [ 466.929146][T19133] bond_slave_1: left allmulticast mode [ 466.935455][T19133] bridge0: port 3(bond0) entered disabled state [ 466.936402][T19137] netlink: 'syz.2.3330': attribute type 1 has an invalid length. [ 466.942857][T19139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3329'. [ 466.972578][T19133] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 466.981583][T19137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.989754][T19139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3329'. [ 467.331309][T19155] bridge0: port 3(syz_tun) entered disabled state [ 467.351449][T19155] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.359087][T19155] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.378350][T19169] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 467.486367][T19177] netlink: 'syz.0.3339': attribute type 8 has an invalid length. [ 467.511582][T19177] netlink: 'syz.0.3339': attribute type 64 has an invalid length. [ 467.710446][ T58] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.773506][ T58] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.823681][ T58] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.849368][ T58] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.508215][T19217] netlink: 'syz.2.3348': attribute type 12 has an invalid length. [ 468.924756][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 468.932782][ C0] lec:lec_tx_timeout: lec0 [ 468.937327][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 469.221211][T19225] __nla_validate_parse: 6 callbacks suppressed [ 469.221230][T19225] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3350'. [ 469.269345][T19231] Cannot find set identified by id 65534 to match [ 469.360659][T19227] tunl0: Caught tx_queue_len zero misconfig [ 469.457790][T19236] openvswitch: netlink: Multiple metadata blocks provided [ 469.626481][T19243] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3356'. [ 469.664858][T19243] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3356'. [ 469.973355][T19221] lo speed is unknown, defaulting to 1000 [ 470.651881][T19264] lo speed is unknown, defaulting to 1000 [ 475.064785][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6130 ms [ 475.072805][ C0] lec:lec_tx_timeout: lec0 [ 475.077969][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 476.501485][T19296] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3362'. [ 476.538803][T19306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3365'. [ 476.538915][T19296] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3362'. [ 476.603242][T19310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3365'. [ 476.640487][T19309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3367'. [ 476.995790][T19322] netlink: 'syz.4.3370': attribute type 1 has an invalid length. [ 477.003576][T19322] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3370'. [ 477.024649][T19328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.033675][T19322] xt_policy: neither incoming nor outgoing policy selected [ 477.074674][T19328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.114043][T19328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.148946][T19328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.426695][T19345] netlink: 'syz.4.3376': attribute type 2 has an invalid length. [ 477.434491][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3376'. [ 477.500692][T19350] Bluetooth: MGMT ver 1.23 [ 477.501552][T19319] lo speed is unknown, defaulting to 1000 [ 477.515478][T19350] x_tables: duplicate underflow at hook 3 [ 477.526674][T19350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3377'. [ 478.158719][ T30] audit: type=1804 audit(1774258472.260:6): pid=19378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3383" name="/newroot/45/memory.events" dev="tmpfs" ino=247 res=1 errno=0 [ 478.215522][ T30] audit: type=1800 audit(1774258472.290:7): pid=19378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3383" name="memory.events" dev="tmpfs" ino=247 res=0 errno=0 [ 478.275035][T19380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3384'. [ 478.301505][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3385'. [ 478.321955][T19385] hsr0: entered promiscuous mode [ 478.354006][T19385] macvlan0: entered allmulticast mode [ 478.384162][T19385] hsr0: entered allmulticast mode [ 478.401032][T19385] hsr_slave_0: entered allmulticast mode [ 478.407428][T19385] hsr_slave_1: entered allmulticast mode [ 478.421645][T19388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.449104][T19389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.475062][T19363] lo speed is unknown, defaulting to 1000 [ 478.775193][T19405] vlan2: entered promiscuous mode [ 478.780419][T19405] geneve1: entered promiscuous mode [ 478.790700][T19405] vlan2: entered allmulticast mode [ 478.802100][T19405] geneve1: entered allmulticast mode [ 478.936237][T19415] netlink: 'syz.4.3393': attribute type 1 has an invalid length. [ 479.110011][T19417] tipc: Enabling of bearer rejected, failed to enable media [ 479.264076][T19426] syzkaller1: entered promiscuous mode [ 479.270184][T19426] syzkaller1: entered allmulticast mode [ 480.086057][T19464] vlan0: entered promiscuous mode [ 480.091506][T19464] geneve1: entered promiscuous mode [ 480.100486][T19464] vlan0: entered allmulticast mode [ 480.108043][T19464] geneve1: entered allmulticast mode [ 480.521262][T19491] netlink: 'syz.0.3413': attribute type 3 has an invalid length. [ 480.579228][T19501] x_tables: duplicate underflow at hook 1 [ 480.798458][T19509] sctp: [Deprecated]: syz.3.3419 (pid 19509) Use of int in maxseg socket option. [ 480.798458][T19509] Use struct sctp_assoc_value instead [ 480.824984][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 480.832998][ C0] lec:lec_tx_timeout: lec0 [ 480.841942][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 480.911705][T19500] lo speed is unknown, defaulting to 1000 [ 481.052897][T19520] netlink: 'syz.3.3423': attribute type 4 has an invalid length. [ 481.177982][T19520] netlink: 'syz.3.3423': attribute type 4 has an invalid length. [ 481.443865][T19533] bridge_slave_0: left allmulticast mode [ 481.464198][T19533] bridge_slave_0: left promiscuous mode [ 481.524195][T19533] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.562263][T19533] bridge_slave_1: left allmulticast mode [ 481.569007][T19533] bridge_slave_1: left promiscuous mode [ 481.575346][T19533] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.640282][T19533] bond0: (slave bond_slave_0): Releasing backup interface [ 481.667162][T19533] bond0: (slave bond_slave_1): Releasing backup interface [ 481.731809][T19533] team0: Port device team_slave_0 removed [ 481.748185][T19533] team0: Port device team_slave_1 removed [ 481.762316][T19569] netlink: 'syz.1.3435': attribute type 58 has an invalid length. [ 481.771295][T19533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.785789][T19533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.796164][T19533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.820515][T19533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.837437][T19533] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 481.901189][T19554] syzkaller0: entered promiscuous mode [ 481.926933][T19554] syzkaller0: entered allmulticast mode [ 482.033928][T19563] syzkaller0: entered promiscuous mode [ 482.039563][T19563] syzkaller0: entered allmulticast mode [ 483.147497][T19599] __nla_validate_parse: 7 callbacks suppressed [ 483.147514][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3442'. [ 483.201476][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3440'. [ 483.242425][T19602] rdma_op ffff88802ba7e9f0 conn xmit_rdma 0000000000000000 [ 484.616595][T19623] netlink: 'syz.1.3448': attribute type 16 has an invalid length. [ 484.636707][T19623] netlink: 'syz.1.3448': attribute type 17 has an invalid length. [ 484.675219][T19627] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 484.881829][T19640] netlink: 'syz.1.3455': attribute type 21 has an invalid length. [ 484.891881][T19631] atomic_op ffff88805f10c998 conn xmit_atomic 0000000000000000 [ 484.924903][T19640] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3455'. [ 485.113095][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3460'. [ 485.132603][T19663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3460'. [ 485.158695][T19663] netlink: 'syz.0.3460': attribute type 14 has an invalid length. [ 485.175019][T19663] netlink: 'syz.0.3460': attribute type 11 has an invalid length. [ 485.338080][T19680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.411011][T19683] sctp: [Deprecated]: syz.4.3468 (pid 19683) Use of int in max_burst socket option. [ 485.411011][T19683] Use struct sctp_assoc_value instead [ 485.515772][T19691] tipc: Invalid UDP bearer configuration [ 485.515825][T19691] tipc: Enabling of bearer rejected, failed to enable media [ 485.854736][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 485.862807][ C0] lec:lec_tx_timeout: lec0 [ 485.874818][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 486.265822][T19687] lo speed is unknown, defaulting to 1000 [ 486.315986][T19732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'. [ 486.341226][T19732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'. [ 486.352352][T19734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3482'. [ 486.366600][T19732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'. [ 486.388807][T19732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'. [ 486.513683][T19738] ip6tnl1: entered promiscuous mode [ 486.522205][T19738] ip6tnl1: entered allmulticast mode [ 486.939802][T19712] lo speed is unknown, defaulting to 1000 [ 487.466543][T19705] lo speed is unknown, defaulting to 1000 [ 487.633794][T19729] siw: device registration error -23 [ 487.893091][T19761] lo speed is unknown, defaulting to 1000 [ 488.070798][T19781] syzkaller1: entered promiscuous mode [ 488.076706][T19781] syzkaller1: entered allmulticast mode [ 488.608826][T19790] __nla_validate_parse: 3 callbacks suppressed [ 488.608844][T19790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3495'. [ 490.884789][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 490.892813][ C0] lec:lec_tx_timeout: lec0 [ 490.897366][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 492.933947][T19862] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3508'. [ 492.978767][T19863] "syz.1.3507" (19863) uses obsolete ecb(arc4) skcipher [ 493.029659][T19865] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.3509'. [ 493.196026][T19855] lo speed is unknown, defaulting to 1000 [ 493.396241][T19875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3513'. [ 493.422133][T19875] xt_hashlimit: size too large, truncated to 1048576 [ 493.429512][T19875] xt_hashlimit: overflow, try lower: 0/0 [ 493.562474][T19888] rdma_op ffff8880582eb9f0 conn xmit_rdma 0000000000000000 [ 493.817459][T19896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3519'. [ 493.835625][T19896] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3519'. [ 494.010184][T19904] netlink: 'syz.1.3523': attribute type 1 has an invalid length. [ 494.057577][T19908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3522'. [ 494.287164][T19904] bond3: entered promiscuous mode [ 494.295234][T19904] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.364604][T19917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.385343][T19917] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 494.414860][T19917] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 494.460633][T19917] bond3: (slave vti0): making interface the new active one [ 494.484454][T19917] vti0: entered promiscuous mode [ 494.502216][T19917] bond3: (slave vti0): Enslaving as an active interface with an up link [ 494.696673][T19935] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3528'. [ 494.718824][T19936] netlink: 'syz.0.3529': attribute type 3 has an invalid length. [ 494.898731][T19943] netlink: 'syz.0.3532': attribute type 8 has an invalid length. [ 494.916307][T19946] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3530'. [ 494.926251][ T5890] IPVS: starting estimator thread 0... [ 494.937205][T19946] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20002 [ 494.952487][T19945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3531'. [ 495.035531][T19948] IPVS: using max 30 ests per chain, 72000 per kthread [ 495.193955][T19959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3535'. [ 495.219896][T19959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3535'. [ 495.230897][T19959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3535'. [ 495.353065][T19974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3535'. [ 495.481135][T19968] team0: Port device team_slave_0 removed [ 495.569117][T19981] gtp1: entered promiscuous mode [ 495.602840][T19981] gtp1: entered allmulticast mode [ 495.651592][T19987] batadv_slave_1: entered promiscuous mode [ 495.662466][T19987] batadv_slave_1: entered allmulticast mode [ 495.669795][T19987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.904775][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 495.912842][ C0] lec:lec_tx_timeout: lec0 [ 495.917590][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 496.207877][T20035] netlink: 'syz.1.3547': attribute type 10 has an invalid length. [ 496.283694][ T1199] tipc: Resetting bearer [ 496.486135][ T1199] batman_adv: batadv0: Removing interface: gretap1 [ 496.511383][ T1199] tipc: Disabling bearer [ 496.648446][ T1199] team0: Port device bridge3 removed [ 496.891999][T20058] netlink: 'syz.0.3559': attribute type 1 has an invalid length. [ 496.958358][ T1199] bond0 (unregistering): Released all slaves [ 496.973035][ T1199] bond1 (unregistering): (slave batadv1): Releasing active interface [ 496.982008][ T1199] bond1 (unregistering): Released all slaves [ 496.994362][ T1199] bond2 (unregistering): Released all slaves [ 497.008004][ T1199] bond3 (unregistering): Released all slaves [ 497.022104][ T1199] bond4 (unregistering): Released all slaves [ 497.041607][ T1199] bond5 (unregistering): Released all slaves [ 497.056690][ T1199] bond6 (unregistering): Released all slaves [ 497.057780][T20061] IPv6: NLM_F_CREATE should be specified when creating new route [ 497.073620][ T1199] bond7 (unregistering): Released all slaves [ 497.088657][ T1199] bond8 (unregistering): Released all slaves [ 497.103755][ T1199] bond9 (unregistering): Released all slaves [ 497.125033][T20035] bond0: entered promiscuous mode [ 497.130064][T20035] bond_slave_0: entered promiscuous mode [ 497.138001][T20035] bond_slave_1: entered promiscuous mode [ 497.143974][T20035] bridge0: port 3(bond0) entered blocking state [ 497.150425][T20035] bridge0: port 3(bond0) entered disabled state [ 497.156914][T20035] bond0: entered allmulticast mode [ 497.162033][T20035] bond_slave_0: entered allmulticast mode [ 497.168345][T20035] bond_slave_1: entered allmulticast mode [ 497.185318][T20035] bridge0: port 3(bond0) entered blocking state [ 497.191686][T20035] bridge0: port 3(bond0) entered forwarding state [ 497.210211][ T1199] !: left promiscuous mode [ 497.375908][T20058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.404659][T20059] ipvlan0: entered promiscuous mode [ 497.415217][T20059] ipvlan0: entered allmulticast mode [ 497.420539][T20059] bond2: entered allmulticast mode [ 497.450575][ T1199] tipc: Disabling bearer [ 497.480532][ T1199] tipc: Left network mode [ 499.086117][T20135] bond3: entered allmulticast mode [ 499.114396][T20135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 499.247484][T20145] netlink: 'syz.4.3579': attribute type 9 has an invalid length. [ 499.287443][T20145] __nla_validate_parse: 12 callbacks suppressed [ 499.287465][T20145] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.3579'. [ 499.358016][T20148] netlink: 'syz.2.3580': attribute type 22 has an invalid length. [ 499.366959][T20148] netlink: 'syz.2.3580': attribute type 1 has an invalid length. [ 499.406526][T20148] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3580'. [ 499.619805][T20161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3582'. [ 499.665898][T20158] xt_hashlimit: size too large, truncated to 1048576 [ 499.684819][T20158] xt_hashlimit: overflow, try lower: 0/0 [ 499.955099][T20173] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 500.163411][T20179] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 500.506790][T20197] netlink: 'syz.2.3590': attribute type 2 has an invalid length. [ 500.827175][ T1199] hsr_slave_0: left promiscuous mode [ 500.833257][ T1199] hsr_slave_1: left promiscuous mode [ 500.851760][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.875507][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.929202][ T1199] pim6reg99999999 (unregistering): left allmulticast mode [ 501.187895][ T1199] team0 (unregistering): Port device team_slave_1 removed [ 501.201006][ T1199] team0 (unregistering): Port device team_slave_0 removed [ 501.232377][ T13] smc: removing ib device syz1 [ 501.290455][ T136] smc: removing ib device sqz0 [ 501.305555][ T9] lo speed is unknown, defaulting to 1000 [ 501.313331][ T9] sqz0: Port: 1 Link DOWN [ 501.704722][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 501.712753][ C0] lec:lec_tx_timeout: lec0 [ 501.717978][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 506.744767][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 506.752795][ C0] lec:lec_tx_timeout: lec0 [ 506.757621][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 511.764765][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 511.772803][ C0] lec:lec_tx_timeout: lec0 [ 511.777639][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 513.538867][T20254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.599426][T20260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3597'. [ 513.860872][T20274] netlink: 'syz.4.3601': attribute type 1 has an invalid length. [ 513.928705][T20282] dummy0: Caught tx_queue_len zero misconfig [ 513.951311][T20283] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3600'. [ 514.133690][T20288] syzkaller0: entered promiscuous mode [ 514.365949][T20311] netlink: 'syz.3.3607': attribute type 1 has an invalid length. [ 514.998558][T20326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.014501][T20324] netlink: 'syz.4.3612': attribute type 4 has an invalid length. [ 515.117783][T20331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3615'. [ 515.308423][T20341] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3618'. [ 515.389434][T20350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3622'. [ 515.756769][T20380] netlink: 'syz.0.3629': attribute type 4 has an invalid length. [ 515.795302][T20380] netlink: 'syz.0.3629': attribute type 4 has an invalid length. [ 516.061315][T20403] netlink: 'syz.0.3636': attribute type 3 has an invalid length. [ 516.217444][T20412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3640'. [ 516.236519][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3640'. [ 516.266383][T20412] netlink: 'syz.0.3640': attribute type 18 has an invalid length. [ 516.275155][T20412] netlink: 'syz.0.3640': attribute type 34 has an invalid length. [ 516.329562][T20418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3641'. [ 516.446644][T20426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3644'. [ 516.479379][T20426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 516.585633][T20430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3645'. [ 516.691727][T20430] macvlan2: entered allmulticast mode [ 516.698919][T20430] hsr0: entered allmulticast mode [ 516.704047][T20430] hsr_slave_0: entered allmulticast mode [ 516.715783][T20430] hsr_slave_1: entered allmulticast mode [ 516.774273][T20431] erspan1: entered promiscuous mode [ 516.784733][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 516.792765][ C0] lec:lec_tx_timeout: lec0 [ 516.797448][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 516.804831][T20431] erspan1: entered allmulticast mode [ 516.997764][T20450] vlan3: entered allmulticast mode [ 517.002921][T20450] macvtap0: entered allmulticast mode [ 517.040195][T20452] tipc: Started in network mode [ 517.057164][T20452] tipc: Node identity ac14140f, cluster identity 4711 [ 517.064182][T20452] tipc: New replicast peer: 255.255.255.255 [ 517.089396][T20452] tipc: Enabled bearer , priority 26 [ 517.351008][T20472] netlink: 'syz.1.3653': attribute type 21 has an invalid length. [ 517.375395][T20472] netlink: 'syz.1.3653': attribute type 1 has an invalid length. [ 518.215041][ T29] tipc: Node number set to 2886997007 [ 521.804754][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 521.812773][ C0] lec:lec_tx_timeout: lec0 [ 521.817320][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 523.608443][T20517] __nla_validate_parse: 3 callbacks suppressed [ 523.608461][T20517] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3658'. [ 523.683912][T20526] hsr0: left allmulticast mode [ 523.708854][T20526] hsr_slave_0: left allmulticast mode [ 523.714267][T20526] hsr_slave_1: left allmulticast mode [ 523.762677][T20519] can: request_module (can-proto-4) failed. [ 523.811813][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3663'. [ 523.834308][T20538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3663'. [ 523.886237][T20526] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 524.029362][T20528] syzkaller0: entered promiscuous mode [ 524.034992][T20528] syzkaller0: entered allmulticast mode [ 526.065378][ T5488] hsr0: entered allmulticast mode [ 526.077220][ T5488] hsr_slave_0: entered allmulticast mode [ 526.084542][ T5488] hsr_slave_1: entered allmulticast mode [ 526.123683][T20604] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 526.253121][T20614] netlink: 'syz.4.3678': attribute type 10 has an invalid length. [ 526.274998][T20614] team0: Port device dummy0 added [ 526.283770][T20614] netlink: 'syz.4.3678': attribute type 10 has an invalid length. [ 526.310778][T20614] team0: Port device dummy0 removed [ 526.336114][T20614] .`: (slave dummy0): Enslaving as an active interface with an up link [ 526.535739][T20624] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3680'. [ 526.824864][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 526.832948][ C0] lec:lec_tx_timeout: lec0 [ 526.839069][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 527.205187][T20653] xt_TPROXY: Can be used only with -p tcp or -p udp [ 527.278410][T20660] nbd: must specify a size in bytes for the device [ 527.462160][T20669] syzkaller1: entered promiscuous mode [ 527.469241][T20669] syzkaller1: entered allmulticast mode [ 527.588039][T20677] syzkaller0: entered promiscuous mode [ 527.593980][T20677] syzkaller0: entered allmulticast mode [ 528.204632][T20714] xt_TPROXY: Can be used only with -p tcp or -p udp [ 528.410702][T20727] netlink: 'syz.3.3703': attribute type 2 has an invalid length. [ 528.521426][T20731] syzkaller1: entered promiscuous mode [ 528.538131][T20731] syzkaller1: entered allmulticast mode [ 528.856210][T20759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3712'. [ 528.891292][T20759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3712'. [ 528.986265][T20759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3712'. [ 529.059588][T20759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3712'. [ 529.074999][T20759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3712'. [ 529.085863][T20767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3715'. [ 529.095354][T20769] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3714'. [ 529.095831][T20759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3712'. [ 529.129265][T20759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3712'. [ 529.140773][T20759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3712'. [ 529.228035][T20769] nbd: socks must be embedded in a SOCK_ITEM attr [ 529.236857][T20769] block nbd1: shutting down sockets [ 529.390340][T20786] syzkaller1: entered promiscuous mode [ 529.398640][T20786] syzkaller1: entered allmulticast mode [ 529.717406][T20808] netlink: 'syz.0.3727': attribute type 1 has an invalid length. [ 529.775442][T20810] batman_adv: batadv0: Adding interface: gretap1 [ 529.783834][T20810] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.817972][T20810] batman_adv: batadv0: Interface activated: gretap1 [ 529.860788][T20812] syzkaller0: entered promiscuous mode [ 529.875540][T20812] syzkaller0: entered allmulticast mode [ 530.336887][T20846] syzkaller1: entered promiscuous mode [ 530.342555][T20846] syzkaller1: entered allmulticast mode [ 530.973311][T20878] syzkaller0: entered promiscuous mode [ 530.978929][T20878] syzkaller0: entered allmulticast mode [ 531.080745][T20882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.339315][T20882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.358147][T20887] syzkaller1: entered promiscuous mode [ 531.365949][T20887] syzkaller1: entered allmulticast mode [ 531.512890][T20882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.566597][T20904] netlink: 'syz.4.3755': attribute type 1 has an invalid length. [ 531.577014][T20897] IPVS: length: 44 != 8 [ 531.584403][T20904] netlink: 'syz.4.3755': attribute type 1 has an invalid length. [ 531.596014][T20905] netlink: 'syz.4.3755': attribute type 1 has an invalid length. [ 531.639726][T20905] netlink: 'syz.4.3755': attribute type 1 has an invalid length. [ 531.653066][T20913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.832194][T20882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.854728][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 531.862791][ C0] lec:lec_tx_timeout: lec0 [ 531.867793][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 531.931104][ T29] syzkaller1: tun_net_xmit 90 [ 531.941217][ T29] syzkaller1: tun_net_xmit 90 [ 532.048240][T10145] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.069268][T10145] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.099177][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.137567][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.477438][T20913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.652764][T20976] netlink: 'syz.4.3770': attribute type 21 has an invalid length. [ 534.675577][T20976] __nla_validate_parse: 34 callbacks suppressed [ 534.675595][T20976] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3770'. [ 534.746020][T20967] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3769'. [ 534.763143][ T9919] IPVS: starting estimator thread 0... [ 534.823204][T20976] netlink: 'syz.4.3770': attribute type 5 has an invalid length. [ 534.831114][T20976] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3770'. [ 534.854831][T20986] IPVS: using max 32 ests per chain, 76800 per kthread [ 534.951719][T20994] netlink: 'syz.1.3774': attribute type 3 has an invalid length. [ 534.969196][T20994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3774'. [ 535.420533][T21014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.479166][T21014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.549797][T21030] netlink: 'syz.4.3783': attribute type 1 has an invalid length. [ 535.558728][T21030] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3783'. [ 535.568283][T21030] NCSI netlink: No device for ifindex 0 [ 536.874878][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 536.883006][ C0] lec:lec_tx_timeout: lec0 [ 536.887662][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 541.894899][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 541.902914][ C0] lec:lec_tx_timeout: lec0 [ 541.907492][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 542.759838][T21085] netlink: 'syz.4.3788': attribute type 4 has an invalid length. [ 543.044287][T21122] xt_hashlimit: size too large, truncated to 1048576 [ 543.052718][T21112] syzkaller0: entered promiscuous mode [ 543.055229][T21122] xt_hashlimit: max too large, truncated to 1048576 [ 543.068878][T21112] syzkaller0: entered allmulticast mode [ 543.197140][T21131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 543.786471][T21150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3804'. [ 543.813196][T21153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.844586][ T136] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.865225][ T136] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.889004][ T136] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.914915][ T136] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.992138][T21161] netlink: 'syz.1.3806': attribute type 1 has an invalid length. [ 544.048394][T21164] xt_hashlimit: size too large, truncated to 1048576 [ 544.057280][T21170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3806'. [ 544.123040][T21176] dvmrp12: entered allmulticast mode [ 544.162029][T21170] bond5: (slave bridge2): making interface the new active one [ 544.203047][T21170] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 544.227508][T21161] bond5: (slave bridge3): Enslaving as an active interface with a down link [ 544.288282][T21180] macvlan2: entered promiscuous mode [ 544.293738][T21180] macvlan2: entered allmulticast mode [ 544.299915][T21180] bond5: entered promiscuous mode [ 544.308390][T21180] bridge2: entered promiscuous mode [ 544.325763][T21180] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 544.343219][T21180] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 544.391208][T21180] bond5: left promiscuous mode [ 544.396287][T21180] bridge2: left promiscuous mode [ 544.414434][T21163] dvmrp12: left allmulticast mode [ 544.440169][T21187] syz_tun: entered allmulticast mode [ 544.455469][T21187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3814'. [ 544.502102][T21187] syz_tun (unregistering): left allmulticast mode [ 544.548745][T21188] pim6reg99999999: entered allmulticast mode [ 544.742298][T21205] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3818'. [ 544.742389][T21206] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3818'. [ 544.772948][T21203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3819'. [ 544.819088][T21185] netlink: 'syz.0.3812': attribute type 2 has an invalid length. [ 544.834812][T21185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3812'. [ 545.010775][T21221] IPVS: length: 4096 != 8 [ 545.123403][T21228] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3826'. [ 545.204402][T21237] netlink: 'syz.2.3826': attribute type 5 has an invalid length. [ 545.242093][T21228] smc: net device veth1_to_team erased user defined pnetid S [ 545.793267][T21264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3837'. [ 545.808512][T21264] openvswitch: netlink: Missing key (keys=40, expected=80) [ 546.263451][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3849'. [ 546.299865][T21313] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 546.464237][ T30] audit: type=1800 audit(1774258540.560:8): pid=21305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3846" name="memory.events" dev="tmpfs" ino=777 res=0 errno=0 [ 546.843829][T21343] xt_limit: Overflow, try lower: 324382443/0 [ 546.914744][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 546.922820][ C0] lec:lec_tx_timeout: lec0 [ 546.927782][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 547.201459][T21372] tipc: Started in network mode [ 547.211459][T21375] FAULT_INJECTION: forcing a failure. [ 547.211459][T21375] name failslab, interval 1, probability 0, space 0, times 0 [ 547.224547][T21372] tipc: Node identity 56eeaf0f4fc, cluster identity 4711 [ 547.233972][T21372] tipc: Enabled bearer , priority 0 [ 547.245926][T21372] syzkaller0: entered promiscuous mode [ 547.251559][T21375] CPU: 1 UID: 0 PID: 21375 Comm: syz.1.3861 Not tainted syzkaller #0 PREEMPT(full) [ 547.251584][T21375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 547.251602][T21375] Call Trace: [ 547.251610][T21375] [ 547.251618][T21375] dump_stack_lvl+0xe8/0x150 [ 547.251724][T21375] should_fail_ex+0x412/0x560 [ 547.251849][T21375] should_failslab+0xa8/0x100 [ 547.251897][T21375] __kmalloc_noprof+0xe8/0x760 [ 547.251923][T21375] ? security_sk_alloc+0x52/0x360 [ 547.251999][T21375] security_sk_alloc+0x52/0x360 [ 547.252022][T21375] sk_prot_alloc+0x101/0x210 [ 547.252136][T21375] ? sk_alloc+0x27/0x390 [ 547.252157][T21375] sk_alloc+0x3a/0x390 [ 547.252180][T21375] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 547.252258][T21375] ? __fget_files+0x2a/0x420 [ 547.252299][T21375] ? __fget_files+0x3a0/0x420 [ 547.252325][T21375] ? __fget_files+0x2a/0x420 [ 547.252356][T21375] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 547.252376][T21375] bpf_prog_test_run+0x2c7/0x340 [ 547.252423][T21375] __sys_bpf+0x643/0x950 [ 547.252453][T21375] ? __pfx___sys_bpf+0x10/0x10 [ 547.252495][T21375] ? ksys_write+0x242/0x270 [ 547.252529][T21375] ? __pfx_ksys_write+0x10/0x10 [ 547.252557][T21375] __x64_sys_bpf+0x7c/0x90 [ 547.252583][T21375] do_syscall_64+0x14d/0xf80 [ 547.252702][T21375] ? trace_irq_disable+0x3b/0x150 [ 547.252739][T21375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.252777][T21375] ? clear_bhb_loop+0x40/0x90 [ 547.252800][T21375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.252823][T21375] RIP: 0033:0x7f0867f9c799 [ 547.252842][T21375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.252859][T21375] RSP: 002b:00007f08661f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.252886][T21375] RAX: ffffffffffffffda RBX: 00007f0868215fa0 RCX: 00007f0867f9c799 [ 547.252899][T21375] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 547.252911][T21375] RBP: 00007f08661f6090 R08: 0000000000000000 R09: 0000000000000000 [ 547.252923][T21375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.252935][T21375] R13: 00007f0868216038 R14: 00007f0868215fa0 R15: 00007ffe83d04498 [ 547.252965][T21375] [ 547.490289][T21372] syzkaller0: entered allmulticast mode [ 547.559831][T21372] tipc: Resetting bearer [ 547.990746][T21371] tipc: Resetting bearer [ 548.005220][T21371] tipc: Disabling bearer [ 553.144716][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6220 ms [ 553.152774][ C0] lec:lec_tx_timeout: lec0 [ 553.157874][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 553.587703][T21414] xt_HMARK: spi-set and port-set can't be combined [ 553.848163][T21440] batadv0: entered promiscuous mode [ 553.853827][T21440] vlan3: entered promiscuous mode [ 554.001067][T21453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.042379][T21453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.122558][T21462] __nla_validate_parse: 3 callbacks suppressed [ 554.122576][T21462] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3882'. [ 554.252186][T21462] bridge0: port 3(bond0) entered disabled state [ 554.259523][T21462] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.267144][T21462] bridge0: port 1(1¾x9ÿ) entered disabled state [ 554.412368][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3887'. [ 554.593444][T10145] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.602960][T10145] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.615045][T21486] syzkaller1: entered promiscuous mode [ 554.620531][T21486] syzkaller1: entered allmulticast mode [ 554.636209][T10145] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.647148][T10145] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.903461][T21507] netlink: 'syz.1.3893': attribute type 83 has an invalid length. [ 554.928683][T21509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3894'. [ 554.948157][T21509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3894'. [ 554.972040][T21511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3895'. [ 555.605000][T21535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3900'. [ 555.810811][T21547] syzkaller0: entered promiscuous mode [ 555.825089][T21547] syzkaller0: entered allmulticast mode [ 555.847036][T21550] netlink: 'syz.1.3905': attribute type 11 has an invalid length. [ 555.865693][T21550] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3905'. [ 555.910763][T21554] syzkaller0: entered promiscuous mode [ 555.916722][T21554] syzkaller0: entered allmulticast mode [ 555.960063][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3908'. [ 555.970994][T21560] chnl_net:caif_netlink_parms(): no params data found [ 556.158258][T21568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3909'. [ 556.396071][T21565] pimreg: tun_chr_ioctl cmd 21731 [ 558.904699][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 558.912733][ C0] lec:lec_tx_timeout: lec0 [ 558.917550][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 559.028388][T21577] lo: Caught tx_queue_len zero misconfig [ 559.135116][T21586] netlink: 'syz.0.3912': attribute type 1 has an invalid length. [ 559.250568][T21592] bond3: (slave bridge3): making interface the new active one [ 559.269291][T21598] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3914'. [ 559.283441][T21592] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 559.341797][T21601] lo: Caught tx_queue_len zero misconfig [ 559.378172][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3915'. [ 559.388910][T21601] bond0: left allmulticast mode [ 559.394077][T21601] bond_slave_0: left allmulticast mode [ 559.400871][T21601] bond_slave_1: left allmulticast mode [ 559.406977][T21601] bridge0: port 3(bond0) entered disabled state [ 559.434239][T21601] bridge_slave_1: left allmulticast mode [ 559.457238][T21601] bridge_slave_1: left promiscuous mode [ 559.465918][T21601] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.477566][T21601] ¾x9ÿ: left allmulticast mode [ 559.483467][T21601] ¾x9ÿ: left promiscuous mode [ 559.488712][T21601] bridge0: port 1(1¾x9ÿ) entered disabled state [ 559.638277][T21626] ve: renamed from veth0_to_batadv [ 559.958995][T21646] netem: invalid attributes len -1 [ 559.965420][T21646] netem: change failed [ 559.983814][T21646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3929'. [ 560.046065][T21651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3928'. [ 560.366388][T21671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3937'. [ 560.504608][T21673] bond0: left allmulticast mode [ 560.510139][T21673] bond1: left allmulticast mode [ 560.510873][T21680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3939'. [ 560.516089][T21673] vlan2: left promiscuous mode [ 560.551671][T21673] geneve1: left promiscuous mode [ 560.575878][T21673] vlan2: left allmulticast mode [ 560.580835][T21673] geneve1: left allmulticast mode [ 560.586775][T21673] hsr0: left allmulticast mode [ 560.591629][T21673] hsr_slave_0: left allmulticast mode [ 560.598549][T21673] hsr_slave_1: left allmulticast mode [ 560.605432][T21673] macvlan2: left allmulticast mode [ 560.711579][T21689] netlink: 'syz.0.3943': attribute type 13 has an invalid length. [ 560.723183][T21689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3943'. [ 560.811945][T21693] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.3945'. [ 560.821973][T21689] tipc: Started in network mode [ 560.828658][T21689] tipc: Node identity 7a376af6849b, cluster identity 4711 [ 560.836506][T21689] tipc: Enabled bearer , priority 0 [ 560.962161][T21689] syzkaller0: entered promiscuous mode [ 560.979136][T21689] syzkaller0: entered allmulticast mode [ 560.996709][T21689] tipc: Resetting bearer [ 561.058273][T21688] tipc: Resetting bearer [ 562.542331][T21688] tipc: Disabling bearer [ 562.558316][ T5963] tipc: Node number set to 4272712438 [ 562.564139][T21730] syzkaller1: left promiscuous mode [ 562.591938][T21730] syzkaller1: left allmulticast mode [ 562.755158][T21743] siw: device registration error -23 [ 562.766657][T21742] lo speed is unknown, defaulting to 1000 [ 562.779370][T21740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3959'. [ 562.836978][T21746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3959'. [ 562.863132][T21742] lo speed is unknown, defaulting to 1000 [ 562.914787][T21742] lo speed is unknown, defaulting to 1000 [ 562.942553][T21742] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 562.986018][T21745] lo speed is unknown, defaulting to 1000 [ 563.039168][T21742] lo speed is unknown, defaulting to 1000 [ 563.056506][T21742] lo speed is unknown, defaulting to 1000 [ 563.090014][T21742] lo speed is unknown, defaulting to 1000 [ 563.099824][T21742] lo speed is unknown, defaulting to 1000 [ 563.107918][T21742] lo speed is unknown, defaulting to 1000 [ 563.116184][T21742] lo speed is unknown, defaulting to 1000 [ 563.125489][T21742] lo speed is unknown, defaulting to 1000 [ 563.186749][T21742] lo speed is unknown, defaulting to 1000 [ 563.206676][T21762] syzkaller0: entered allmulticast mode [ 563.272031][T21766] syzkaller0: entered promiscuous mode [ 563.337774][T21748] nbd1: detected capacity change from 0 to 63 [ 563.352607][T21767] block nbd1: Receive control failed (result -32) [ 563.376814][ T5823] block nbd1: Receive control failed (result -104) [ 563.376814][T20293] block nbd1: Receive control failed (result -32) [ 563.383457][ T5827] block nbd1: Receive control failed (result -32) [ 563.598160][T21780] netlink: 'syz.4.3970': attribute type 1 has an invalid length. [ 563.629359][T21777] lo speed is unknown, defaulting to 1000 [ 563.666195][T17632] IPVS: starting estimator thread 0... [ 563.704182][T21782] lo speed is unknown, defaulting to 1000 [ 563.754761][T21788] IPVS: using max 33 ests per chain, 79200 per kthread [ 564.033412][T21806] netlink: 'syz.1.3976': attribute type 1 has an invalid length. [ 564.143760][T21806] bond6: entered promiscuous mode [ 564.150145][T21806] 8021q: adding VLAN 0 to HW filter on device bond6 [ 564.744694][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 564.752780][ C0] lec:lec_tx_timeout: lec0 [ 564.758021][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 564.874453][T21855] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 564.929287][T21855] __nla_validate_parse: 3 callbacks suppressed [ 564.929304][T21855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3984'. [ 564.973787][T21855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3984'. [ 564.982387][T21857] lo speed is unknown, defaulting to 1000 [ 565.085610][T21862] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3987'. [ 565.106901][T21865] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3987'. [ 565.273957][T21870] netlink: 592 bytes leftover after parsing attributes in process `syz.4.3989'. [ 565.465680][T21886] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3993'. [ 565.499899][T21886] .`: (slave dummy0): Releasing backup interface [ 565.512625][T21883] lo speed is unknown, defaulting to 1000 [ 565.543392][T21886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3993'. [ 569.775011][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 569.783053][ C0] lec:lec_tx_timeout: lec0 [ 569.788635][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 571.522994][T21925] netlink: 'syz.1.3995': attribute type 1 has an invalid length. [ 571.540188][T21919] 8021q: VLANs not supported on gre0 [ 571.608805][T21925] bond7: entered promiscuous mode [ 571.614353][T21925] 8021q: adding VLAN 0 to HW filter on device bond7 [ 571.643210][T21935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3997'. [ 571.805156][T21940] syzkaller1: entered promiscuous mode [ 571.810671][T21940] syzkaller1: entered allmulticast mode [ 571.866022][T21945] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4000'. [ 572.037024][T21961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4004'. [ 572.151149][T21961] bridge3: port 1(veth7) entered blocking state [ 572.159561][T21961] bridge3: port 1(veth7) entered disabled state [ 572.166261][T21961] veth7: entered allmulticast mode [ 572.173564][T21961] veth7: entered promiscuous mode [ 572.252159][T21966] bridge3: port 2(veth0_to_bond) entered blocking state [ 572.295239][T21966] bridge3: port 2(veth0_to_bond) entered disabled state [ 572.311813][T21966] veth0_to_bond: entered allmulticast mode [ 572.346688][T21966] veth0_to_bond: entered promiscuous mode [ 572.390155][T21961] bridge3: port 3(veth9) entered blocking state [ 572.398048][T21961] bridge3: port 3(veth9) entered disabled state [ 572.408564][T21961] veth9: entered allmulticast mode [ 572.416949][T21961] veth9: entered promiscuous mode [ 572.481250][T21984] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4009'. [ 572.490945][T21984] netlink: 'syz.1.4009': attribute type 9 has an invalid length. [ 572.495173][T21972] lo speed is unknown, defaulting to 1000 [ 572.615309][T21993] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 572.806035][T22008] tipc: Enabled bearer , priority 10 [ 572.820687][T22009] nbd: socks must be embedded in a SOCK_ITEM attr [ 573.137418][T22031] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4024'. [ 573.178905][T22034] IPVS: Unknown mcast interface: nr0 [ 573.330093][T22043] netlink: 'syz.4.4028': attribute type 13 has an invalid length. [ 573.487520][T22050] lo speed is unknown, defaulting to 1000 [ 573.692958][T22054] lo speed is unknown, defaulting to 1000 [ 573.896234][T22062] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4033'. [ 573.908404][T22062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4033'. [ 573.917453][T22062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4033'. [ 573.993604][T17632] tipc: Node number set to 422489871 [ 574.278103][T22102] netlink: 616 bytes leftover after parsing attributes in process `syz.0.4042'. [ 574.356219][T22108] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4045'. [ 574.794699][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 574.802772][ C0] lec:lec_tx_timeout: lec0 [ 574.807859][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 574.834624][T22146] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 575.030292][T22160] netlink: 'syz.2.4059': attribute type 31 has an invalid length. [ 575.222400][T22165] syzkaller0: entered promiscuous mode [ 575.228140][T22165] syzkaller0: entered allmulticast mode [ 576.808534][T22187] lo speed is unknown, defaulting to 1000 [ 577.031891][T22217] __nla_validate_parse: 3 callbacks suppressed [ 577.031910][T22217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4071'. [ 577.050121][T22217] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4071'. [ 577.084826][T22217] ksmbd: Unknown IPC event: 1, ignore. [ 579.814855][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 579.822875][ C0] lec:lec_tx_timeout: lec0 [ 579.827600][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 583.522844][T22264] netlink: 'syz.0.4079': attribute type 29 has an invalid length. [ 583.537474][T22262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4081'. [ 583.822518][T22292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4088'. [ 584.400490][T22302] vlan3: entered allmulticast mode [ 584.463930][T22308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4091'. [ 584.844683][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 584.852720][ C0] lec:lec_tx_timeout: lec0 [ 584.857557][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 586.309684][T22320] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 586.434152][T22328] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4095'. [ 586.490646][T22333] ip6gre1: entered promiscuous mode [ 586.506336][T22333] ip6gre1: entered allmulticast mode [ 586.515674][T22341] netlink: 83 bytes leftover after parsing attributes in process `syz.3.4097'. [ 586.525557][T22328] syzkaller0: entered promiscuous mode [ 586.531046][T22328] syzkaller0: entered allmulticast mode [ 586.542453][T22337] tc_dump_action: action bad kind [ 586.552739][T22333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4097'. [ 586.567182][T22328] 0: reclassify loop, rule prio 0, protocol 800 [ 586.600878][T22333] delete_channel: no stack [ 586.903068][T22372] netlink: 'syz.3.4105': attribute type 1 has an invalid length. [ 586.963781][T22376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4105'. [ 587.049171][T22372] bond1: entered promiscuous mode [ 587.057867][T22381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4105'. [ 587.066027][T22372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 587.084831][T22381] bond1: entered allmulticast mode [ 587.116975][T22372] bond1: (slave bridge4): making interface the new active one [ 587.124629][T22372] bridge4: entered promiscuous mode [ 587.131458][T22372] bridge4: entered allmulticast mode [ 587.143007][T22372] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 587.144089][T22383] netlink: 'syz.2.4107': attribute type 3 has an invalid length. [ 587.306311][T22389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4107'. [ 587.465029][T22405] netlink: 'syz.4.4113': attribute type 1 has an invalid length. [ 588.752025][T22405] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 588.953093][T22434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 589.865009][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 589.873037][ C0] lec:lec_tx_timeout: lec0 [ 589.877667][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 593.467402][ T2394] block nbd1: Connection timed out, retrying (0/4 alive) [ 593.475987][ T2394] block nbd1: Connection timed out, retrying (0/4 alive) [ 593.483033][ T2394] block nbd1: Connection timed out, retrying (0/4 alive) [ 593.490939][ T2394] block nbd1: Connection timed out, retrying (0/4 alive) [ 593.499216][ T11] block nbd1: Dead connection, failed to find a fallback [ 593.509219][ T11] block nbd1: shutting down sockets [ 593.515183][ T11] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.525444][ T11] Buffer I/O error on dev nbd1, logical block 2, async page read [ 593.533344][ T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.543904][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 593.552501][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.562011][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 593.570079][ T11] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.579674][ T11] Buffer I/O error on dev nbd1, logical block 3, async page read [ 593.588881][T21685] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.598807][T21685] Buffer I/O error on dev nbd1, logical block 0, async page read [ 593.607529][T21685] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.617097][T21685] Buffer I/O error on dev nbd1, logical block 1, async page read [ 593.625307][T21685] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.635445][T21685] Buffer I/O error on dev nbd1, logical block 2, async page read [ 593.643229][T21685] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.652946][T21685] Buffer I/O error on dev nbd1, logical block 3, async page read [ 593.661057][T21685] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.670889][T21685] Buffer I/O error on dev nbd1, logical block 0, async page read [ 593.678701][T21685] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 593.688211][T21685] Buffer I/O error on dev nbd1, logical block 1, async page read [ 593.696718][T21685] ldm_validate_partition_table(): Disk read failed. [ 593.704109][T21685] Dev nbd1: unable to read RDB block 0 [ 593.710106][T21685] nbd1: unable to read partition table [ 593.720683][T21685] ldm_validate_partition_table(): Disk read failed. [ 593.727836][T21685] Dev nbd1: unable to read RDB block 0 [ 593.733604][T21685] nbd1: unable to read partition table [ 594.884715][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 594.892749][ C0] lec:lec_tx_timeout: lec0 [ 594.897538][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 595.610182][T22504] tipc: Resetting bearer [ 595.641412][T22504] tipc: Resetting bearer [ 595.675936][T22518] netlink: 376 bytes leftover after parsing attributes in process `syz.3.4130'. [ 595.684844][T22500] netlink: 376 bytes leftover after parsing attributes in process `syz.3.4130'. [ 595.717987][T22504] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.763048][T22504] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.788582][T22504] hsr0: left promiscuous mode [ 595.829092][T22524] netlink: 'syz.2.4129': attribute type 12 has an invalid length. [ 595.838030][T22524] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4129'. [ 595.867916][T22509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4129'. [ 595.943104][T22527] syzkaller0: entered promiscuous mode [ 595.961084][T22527] syzkaller0: entered allmulticast mode [ 596.069076][T22534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4136'. [ 596.150113][T22536] tipc: Started in network mode [ 596.155164][T22536] tipc: Node identity 8e833a74469c, cluster identity 4711 [ 596.181206][T22536] tipc: Enabled bearer , priority 0 [ 596.190535][T22536] syzkaller0: entered promiscuous mode [ 596.196667][T22536] syzkaller0: entered allmulticast mode [ 596.286590][T22536] tipc: Resetting bearer [ 596.303012][T22545] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4140'. [ 596.310233][T22554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4141'. [ 596.368346][T22535] tipc: Resetting bearer [ 596.399153][T22535] tipc: Disabling bearer [ 596.439334][T22562] netlink: 'syz.1.4144': attribute type 2 has an invalid length. [ 596.486581][T22562] : entered promiscuous mode [ 596.492188][T22545] lo speed is unknown, defaulting to 1000 [ 596.825250][T22589] netlink: 'syz.3.4149': attribute type 1 has an invalid length. [ 596.860277][T22589] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4149'. [ 596.913829][T22593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4148'. [ 597.051517][T22592] lo speed is unknown, defaulting to 1000 [ 597.271764][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4153'. [ 597.333847][T22614] bridge6: entered allmulticast mode [ 597.379664][T22618] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 597.427999][T22617] bond4: entered allmulticast mode [ 597.442746][T22617] 8021q: adding VLAN 0 to HW filter on device bond4 [ 597.664833][T22594] lo speed is unknown, defaulting to 1000 [ 597.698996][T22638] ip6erspan0: entered allmulticast mode [ 598.194142][T22671] bond2: option arp_interval: invalid value (18446744073709551615) [ 598.206341][T22671] bond2: option arp_interval: allowed values 0 - 2147483647 [ 598.234333][T22671] bond2 (unregistering): Released all slaves [ 598.966279][T22686] bond1: option arp_interval: invalid value (18446744073709551615) [ 598.984337][T22686] bond1: option arp_interval: allowed values 0 - 2147483647 [ 599.002434][T22686] bond1 (unregistering): Released all slaves [ 599.206056][T22727] bond0: left promiscuous mode [ 599.210912][T22727] bond_slave_0: left promiscuous mode [ 599.217522][T22727] bond_slave_1: left promiscuous mode [ 599.249788][T22727] vlan2: left promiscuous mode [ 599.254608][T22727] geneve1: left promiscuous mode [ 599.278991][T22727] vlan2: left allmulticast mode [ 599.298968][T22727] geneve1: left allmulticast mode [ 599.304578][T22727] bond3: left promiscuous mode [ 599.316084][T22727] vti0: left promiscuous mode [ 599.321637][T22727] erspan1: left promiscuous mode [ 599.326847][T22727] erspan1: left allmulticast mode [ 599.338511][T22727] bond6: left promiscuous mode [ 599.346693][T22727] bond7: left promiscuous mode [ 599.447897][T22746] pim6reg1: entered promiscuous mode [ 599.453236][T22746] pim6reg1: entered allmulticast mode [ 599.735552][T22763] wireguard0: entered promiscuous mode [ 599.904716][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 599.912803][ C0] lec:lec_tx_timeout: lec0 [ 599.917369][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 600.162257][T22785] FAULT_INJECTION: forcing a failure. [ 600.162257][T22785] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 600.197787][T22785] CPU: 1 UID: 0 PID: 22785 Comm: syz.3.4192 Not tainted syzkaller #0 PREEMPT(full) [ 600.197821][T22785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.197832][T22785] Call Trace: [ 600.197840][T22785] [ 600.197848][T22785] dump_stack_lvl+0xe8/0x150 [ 600.197881][T22785] should_fail_ex+0x412/0x560 [ 600.197914][T22785] _copy_to_user+0x31/0xb0 [ 600.198054][T22785] simple_read_from_buffer+0xe1/0x170 [ 600.198087][T22785] proc_fail_nth_read+0x1bb/0x230 [ 600.198134][T22785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 600.198164][T22785] ? rw_verify_area+0x2a6/0x4d0 [ 600.198183][T22785] ? __fget_files+0x2a/0x420 [ 600.198208][T22785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 600.198237][T22785] vfs_read+0x20c/0xa70 [ 600.198255][T22785] ? fdget_pos+0x246/0x320 [ 600.198277][T22785] ? __pfx___mutex_lock+0x10/0x10 [ 600.198333][T22785] ? __pfx_vfs_read+0x10/0x10 [ 600.198355][T22785] ? __fget_files+0x2a/0x420 [ 600.198385][T22785] ? __fget_files+0x3a0/0x420 [ 600.198411][T22785] ? __fget_files+0x2a/0x420 [ 600.198446][T22785] ksys_read+0x150/0x270 [ 600.198469][T22785] ? __pfx_ksys_read+0x10/0x10 [ 600.198501][T22785] do_syscall_64+0x14d/0xf80 [ 600.198522][T22785] ? trace_irq_disable+0x3b/0x150 [ 600.198548][T22785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.198568][T22785] ? clear_bhb_loop+0x40/0x90 [ 600.198591][T22785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.198610][T22785] RIP: 0033:0x7f6bf735cfce [ 600.198629][T22785] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 600.198645][T22785] RSP: 002b:00007f6bf82b9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 600.198664][T22785] RAX: ffffffffffffffda RBX: 00007f6bf82ba6c0 RCX: 00007f6bf735cfce [ 600.198678][T22785] RDX: 000000000000000f RSI: 00007f6bf82ba0a0 RDI: 0000000000000004 [ 600.198689][T22785] RBP: 00007f6bf82ba090 R08: 0000000000000000 R09: 0000000000000000 [ 600.198700][T22785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 600.198711][T22785] R13: 00007f6bf7616038 R14: 00007f6bf7615fa0 R15: 00007fff6ae69658 [ 600.198741][T22785] [ 600.606662][T22799] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 600.632660][T22799] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 600.642835][T22802] netlink: 'syz.0.4196': attribute type 21 has an invalid length. [ 600.651237][T22802] netlink: 'syz.0.4196': attribute type 22 has an invalid length. [ 600.660365][T22802] netlink: 'syz.0.4196': attribute type 23 has an invalid length. [ 600.672615][T22802] netlink: 'syz.0.4196': attribute type 25 has an invalid length. [ 600.683472][T22802] netlink: 'syz.0.4196': attribute type 26 has an invalid length. [ 600.691859][T22802] __nla_validate_parse: 11 callbacks suppressed [ 600.691873][T22802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4196'. [ 601.216530][T22829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4205'. [ 601.224814][T22831] netlink: 488 bytes leftover after parsing attributes in process `syz.3.4206'. [ 601.237494][T22831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4206'. [ 601.246523][T22831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4206'. [ 601.293362][T22829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4205'. [ 601.354114][T22839] [ 601.356488][T22839] ====================================================== [ 601.363506][T22839] WARNING: possible circular locking dependency detected [ 601.370545][T22839] syzkaller #0 Not tainted [ 601.374977][T22839] ------------------------------------------------------ [ 601.381999][T22839] syz.0.4203/22839 is trying to acquire lock: [ 601.388065][T22839] ffff88805953ccc0 (&mm->mmap_lock){++++}-{4:4}, at: gup_fast_fallback+0x20d/0x22e0 [ 601.397524][T22839] [ 601.397524][T22839] but task is already holding lock: [ 601.404887][T22839] ffff8880331ae0e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x152/0x2360 [ 601.414322][T22839] [ 601.414322][T22839] which lock already depends on the new lock. [ 601.414322][T22839] [ 601.424721][T22839] [ 601.424721][T22839] the existing dependency chain (in reverse order) is: [ 601.433826][T22839] [ 601.433826][T22839] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 601.441578][T22839] lock_sock_nested+0x41/0x100 [ 601.446882][T22839] inet_shutdown+0x6a/0x390 [ 601.452005][T22839] nbd_mark_nsock_dead+0x2e9/0x560 [ 601.457725][T22839] sock_shutdown+0x15e/0x260 [ 601.462832][T22839] nbd_clear_sock+0x24/0x170 [ 601.467932][T22839] nbd_config_put+0x2dd/0x580 [ 601.473118][T22839] nbd_genl_connect+0x19d5/0x1cf0 [ 601.478655][T22839] genl_family_rcv_msg_doit+0x22a/0x330 [ 601.484774][T22839] genl_rcv_msg+0x61c/0x7a0 [ 601.489787][T22839] netlink_rcv_skb+0x232/0x4b0 [ 601.495058][T22839] genl_rcv+0x28/0x40 [ 601.499550][T22839] netlink_unicast+0x80f/0x9b0 [ 601.504882][T22839] netlink_sendmsg+0x813/0xb40 [ 601.510165][T22839] ____sys_sendmsg+0x972/0x9f0 [ 601.515506][T22839] ___sys_sendmsg+0x2a5/0x360 [ 601.520696][T22839] __x64_sys_sendmsg+0x1bd/0x2a0 [ 601.526154][T22839] do_syscall_64+0x14d/0xf80 [ 601.531258][T22839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.537669][T22839] [ 601.537669][T22839] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 601.545322][T22839] __mutex_lock+0x19f/0x1300 [ 601.550435][T22839] nbd_queue_rq+0x37b/0x1100 [ 601.555537][T22839] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 601.561704][T22839] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 601.568600][T22839] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 601.575110][T22839] blk_mq_run_hw_queue+0x348/0x4f0 [ 601.580741][T22839] blk_mq_dispatch_list+0xd16/0xe10 [ 601.586551][T22839] blk_mq_flush_plug_list+0x48d/0x570 [ 601.592436][T22839] __blk_flush_plug+0x3ed/0x4d0 [ 601.597929][T22839] __submit_bio+0x28d/0x580 [ 601.603029][T22839] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 601.609183][T22839] block_read_full_folio+0x599/0x830 [ 601.614986][T22839] filemap_read_folio+0x137/0x3b0 [ 601.620546][T22839] do_read_cache_folio+0x358/0x590 [ 601.626175][T22839] read_part_sector+0xb6/0x2b0 [ 601.631457][T22839] adfspart_check_ICS+0xa5/0xa40 [ 601.636904][T22839] bdev_disk_changed+0x7ba/0x1550 [ 601.642441][T22839] blkdev_get_whole+0x380/0x510 [ 601.647899][T22839] bdev_open+0x31e/0xd30 [ 601.652647][T22839] blkdev_open+0x470/0x610 [ 601.657581][T22839] do_dentry_open+0x785/0x14e0 [ 601.662858][T22839] vfs_open+0x3b/0x340 [ 601.667440][T22839] path_openat+0x2e08/0x3860 [ 601.672551][T22839] do_file_open+0x23e/0x4a0 [ 601.677562][T22839] do_sys_openat2+0x113/0x200 [ 601.682751][T22839] __x64_sys_openat+0x138/0x170 [ 601.688114][T22839] do_syscall_64+0x14d/0xf80 [ 601.693226][T22839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.699626][T22839] [ 601.699626][T22839] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 601.706830][T22839] __mutex_lock+0x19f/0x1300 [ 601.711938][T22839] nbd_queue_rq+0xc6/0x1100 [ 601.716984][T22839] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 601.723039][T22839] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 601.729875][T22839] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 601.736366][T22839] blk_mq_run_hw_queue+0x348/0x4f0 [ 601.741985][T22839] blk_mq_dispatch_list+0xd16/0xe10 [ 601.747697][T22839] blk_mq_flush_plug_list+0x48d/0x570 [ 601.753591][T22839] __blk_flush_plug+0x3ed/0x4d0 [ 601.758957][T22839] __submit_bio+0x28d/0x580 [ 601.763972][T22839] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 601.770118][T22839] block_read_full_folio+0x599/0x830 [ 601.775920][T22839] filemap_read_folio+0x137/0x3b0 [ 601.781455][T22839] do_read_cache_folio+0x358/0x590 [ 601.787076][T22839] read_part_sector+0xb6/0x2b0 [ 601.792355][T22839] adfspart_check_ICS+0xa5/0xa40 [ 601.797808][T22839] bdev_disk_changed+0x7ba/0x1550 [ 601.803344][T22839] blkdev_get_whole+0x380/0x510 [ 601.808703][T22839] bdev_open+0x31e/0xd30 [ 601.813461][T22839] blkdev_open+0x470/0x610 [ 601.818472][T22839] do_dentry_open+0x785/0x14e0 [ 601.823752][T22839] vfs_open+0x3b/0x340 [ 601.828332][T22839] path_openat+0x2e08/0x3860 [ 601.833430][T22839] do_file_open+0x23e/0x4a0 [ 601.838442][T22839] do_sys_openat2+0x113/0x200 [ 601.843631][T22839] __x64_sys_openat+0x138/0x170 [ 601.848995][T22839] do_syscall_64+0x14d/0xf80 [ 601.854092][T22839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.860492][T22839] [ 601.860492][T22839] -> #4 (set->srcu){.+.+}-{0:0}: [ 601.867602][T22839] __synchronize_srcu+0xca/0x3e0 [ 601.873094][T22839] elevator_switch+0x1e8/0x7a0 [ 601.878415][T22839] elevator_change+0x2cc/0x450 [ 601.883691][T22839] elevator_set_default+0x36c/0x430 [ 601.889395][T22839] blk_register_queue+0x366/0x430 [ 601.894930][T22839] __add_disk+0x677/0xd50 [ 601.899768][T22839] add_disk_fwnode+0xfb/0x480 [ 601.904955][T22839] nbd_dev_add+0x72c/0xb50 [ 601.909882][T22839] nbd_init+0x168/0x1f0 [ 601.914676][T22839] do_one_initcall+0x250/0x8d0 [ 601.919952][T22839] do_initcall_level+0x104/0x190 [ 601.925462][T22839] do_initcalls+0x59/0xa0 [ 601.930318][T22839] kernel_init_freeable+0x2a6/0x3e0 [ 601.936030][T22839] kernel_init+0x1d/0x1d0 [ 601.940887][T22839] ret_from_fork+0x51e/0xb90 [ 601.946019][T22839] ret_from_fork_asm+0x1a/0x30 [ 601.951297][T22839] [ 601.951297][T22839] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 601.959110][T22839] __mutex_lock+0x19f/0x1300 [ 601.964213][T22839] elevator_change+0x1b3/0x450 [ 601.969489][T22839] elevator_set_none+0xb5/0x140 [ 601.974844][T22839] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 601.981161][T22839] nbd_start_device+0x17f/0xb10 [ 601.986521][T22839] nbd_genl_connect+0x165b/0x1cf0 [ 601.992050][T22839] genl_family_rcv_msg_doit+0x22a/0x330 [ 601.998107][T22839] genl_rcv_msg+0x61c/0x7a0 [ 602.003118][T22839] netlink_rcv_skb+0x232/0x4b0 [ 602.008385][T22839] genl_rcv+0x28/0x40 [ 602.012876][T22839] netlink_unicast+0x80f/0x9b0 [ 602.018155][T22839] netlink_sendmsg+0x813/0xb40 [ 602.023425][T22839] ____sys_sendmsg+0x972/0x9f0 [ 602.028699][T22839] ___sys_sendmsg+0x2a5/0x360 [ 602.033888][T22839] __x64_sys_sendmsg+0x1bd/0x2a0 [ 602.039335][T22839] do_syscall_64+0x14d/0xf80 [ 602.044434][T22839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.050833][T22839] [ 602.050833][T22839] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 602.059428][T22839] blk_alloc_queue+0x546/0x680 [ 602.064700][T22839] __blk_mq_alloc_disk+0x197/0x390 [ 602.070322][T22839] nbd_dev_add+0x499/0xb50 [ 602.075247][T22839] nbd_init+0x168/0x1f0 [ 602.079911][T22839] do_one_initcall+0x250/0x8d0 [ 602.085183][T22839] do_initcall_level+0x104/0x190 [ 602.090623][T22839] do_initcalls+0x59/0xa0 [ 602.095466][T22839] kernel_init_freeable+0x2a6/0x3e0 [ 602.101185][T22839] kernel_init+0x1d/0x1d0 [ 602.106033][T22839] ret_from_fork+0x51e/0xb90 [ 602.111133][T22839] ret_from_fork_asm+0x1a/0x30 [ 602.116410][T22839] [ 602.116410][T22839] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 602.123608][T22839] fs_reclaim_acquire+0x71/0x100 [ 602.129055][T22839] kmem_cache_alloc_noprof+0x40/0x650 [ 602.134940][T22839] mas_alloc_nodes+0x291/0x350 [ 602.140278][T22839] mas_preallocate+0x2d6/0x640 [ 602.145550][T22839] vma_link+0x123/0x470 [ 602.150222][T22839] insert_vm_struct+0x199/0x260 [ 602.155584][T22839] create_init_stack_vma+0x304/0x670 [ 602.161381][T22839] alloc_bprm+0x495/0x5c0 [ 602.166215][T22839] kernel_execve+0x87/0x930 [ 602.171232][T22839] try_to_run_init_process+0x13/0x60 [ 602.177052][T22839] kernel_init+0xad/0x1d0 [ 602.181895][T22839] ret_from_fork+0x51e/0xb90 [ 602.186994][T22839] ret_from_fork_asm+0x1a/0x30 [ 602.192270][T22839] [ 602.192270][T22839] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 602.199823][T22839] __lock_acquire+0x15a5/0x2cf0 [ 602.205222][T22839] lock_acquire+0xf0/0x2e0 [ 602.210151][T22839] gup_fast_fallback+0x226/0x22e0 [ 602.215689][T22839] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 602.221916][T22839] iov_iter_get_pages2+0x5e/0xa0 [ 602.227357][T22839] sk_msg_zerocopy_from_iter+0x22c/0x880 [ 602.233576][T22839] tls_sw_sendmsg+0x9da/0x2360 [ 602.238845][T22839] sock_write_iter+0x333/0x4f0 [ 602.244121][T22839] do_iter_readv_writev+0x619/0x8c0 [ 602.249834][T22839] vfs_writev+0x33c/0x990 [ 602.254678][T22839] do_writev+0x154/0x2e0 [ 602.259445][T22839] do_syscall_64+0x14d/0xf80 [ 602.264557][T22839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.270965][T22839] [ 602.270965][T22839] other info that might help us debug this: [ 602.270965][T22839] [ 602.281190][T22839] Chain exists of: [ 602.281190][T22839] &mm->mmap_lock --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 602.281190][T22839] [ 602.294228][T22839] Possible unsafe locking scenario: [ 602.294228][T22839] [ 602.301663][T22839] CPU0 CPU1 [ 602.307021][T22839] ---- ---- [ 602.312374][T22839] lock(sk_lock-AF_INET6); [ 602.316883][T22839] lock(&nsock->tx_lock); [ 602.323815][T22839] lock(sk_lock-AF_INET6); [ 602.330830][T22839] rlock(&mm->mmap_lock); [ 602.335238][T22839] [ 602.335238][T22839] *** DEADLOCK *** [ 602.335238][T22839] [ 602.343367][T22839] 2 locks held by syz.0.4203/22839: [ 602.348550][T22839] #0: ffff88806ac2c8f0 (&ctx->tx_lock){+.+.}-{4:4}, at: tls_sw_sendmsg+0x12f/0x2360 [ 602.358050][T22839] #1: ffff8880331ae0e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x152/0x2360 [ 602.367788][T22839] [ 602.367788][T22839] stack backtrace: [ 602.373661][T22839] CPU: 1 UID: 0 PID: 22839 Comm: syz.0.4203 Not tainted syzkaller #0 PREEMPT(full) [ 602.373679][T22839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 602.373689][T22839] Call Trace: [ 602.373696][T22839] [ 602.373704][T22839] dump_stack_lvl+0xe8/0x150 [ 602.373727][T22839] print_circular_bug+0x2e1/0x300 [ 602.373752][T22839] check_noncircular+0x12e/0x150 [ 602.373776][T22839] __lock_acquire+0x15a5/0x2cf0 [ 602.373804][T22839] lock_acquire+0xf0/0x2e0 [ 602.373822][T22839] ? gup_fast_fallback+0x20d/0x22e0 [ 602.373845][T22839] ? __page_table_check_zero+0x397/0x3e0 [ 602.373862][T22839] ? __page_table_check_zero+0x6a/0x3e0 [ 602.373880][T22839] ? gup_fast_fallback+0x20d/0x22e0 [ 602.373900][T22839] gup_fast_fallback+0x226/0x22e0 [ 602.373921][T22839] ? gup_fast_fallback+0x20d/0x22e0 [ 602.373943][T22839] ? get_page_from_freelist+0x24f5/0x2580 [ 602.373969][T22839] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 602.374068][T22839] ? __pfx_gup_fast_fallback+0x10/0x10 [ 602.374088][T22839] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 602.374104][T22839] ? is_valid_gup_args+0x11f/0x200 [ 602.374131][T22839] ? get_user_pages_fast+0x4d/0xb0 [ 602.374153][T22839] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 602.374173][T22839] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 602.374194][T22839] iov_iter_get_pages2+0x5e/0xa0 [ 602.374210][T22839] sk_msg_zerocopy_from_iter+0x22c/0x880 [ 602.374232][T22839] ? __pfx_sk_msg_zerocopy_from_iter+0x10/0x10 [ 602.374258][T22839] tls_sw_sendmsg+0x9da/0x2360 [ 602.374288][T22839] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 602.374303][T22839] ? __pfx_aa_sk_perm+0x10/0x10 [ 602.374387][T22839] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 602.374457][T22839] ? sock_rps_record_flow+0x19/0x350 [ 602.374475][T22839] ? inet_send_prepare+0x47/0x270 [ 602.374493][T22839] ? inet6_sendmsg+0x101/0x120 [ 602.374566][T22839] ? __pfx_inet6_sendmsg+0x10/0x10 [ 602.374584][T22839] sock_write_iter+0x333/0x4f0 [ 602.374606][T22839] ? __pfx_sock_write_iter+0x10/0x10 [ 602.374630][T22839] ? preempt_schedule_thunk+0x16/0x30 [ 602.374651][T22839] do_iter_readv_writev+0x619/0x8c0 [ 602.374672][T22839] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 602.374690][T22839] ? bpf_lsm_file_permission+0x9/0x20 [ 602.374716][T22839] ? security_file_permission+0x75/0x260 [ 602.374757][T22839] ? rw_verify_area+0x255/0x4d0 [ 602.374773][T22839] vfs_writev+0x33c/0x990 [ 602.374796][T22839] ? __pfx_vfs_writev+0x10/0x10 [ 602.374821][T22839] ? __fget_files+0x2a/0x420 [ 602.374844][T22839] ? __fget_files+0x3a0/0x420 [ 602.374865][T22839] ? __fget_files+0x2a/0x420 [ 602.374889][T22839] do_writev+0x154/0x2e0 [ 602.374909][T22839] ? __pfx_do_writev+0x10/0x10 [ 602.374932][T22839] do_syscall_64+0x14d/0xf80 [ 602.374950][T22839] ? trace_irq_disable+0x3b/0x150 [ 602.374973][T22839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.374988][T22839] ? clear_bhb_loop+0x40/0x90 [ 602.375005][T22839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.375021][T22839] RIP: 0033:0x7f8e2e99c799 [ 602.375035][T22839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.375049][T22839] RSP: 002b:00007f8e2f88c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 602.375065][T22839] RAX: ffffffffffffffda RBX: 00007f8e2ec16180 RCX: 00007f8e2e99c799 [ 602.375076][T22839] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 602.375086][T22839] RBP: 00007f8e2ea32c99 R08: 0000000000000000 R09: 0000000000000000 [ 602.375096][T22839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.375105][T22839] R13: 00007f8e2ec16218 R14: 00007f8e2ec16180 R15: 00007ffe2b154248 [ 602.375128][T22839] [ 602.772957][T22838] netlink: 'syz.1.4207': attribute type 1 has an invalid length. [ 602.827459][T22845] tipc: Enabled bearer , priority 10 [ 602.847574][T22851] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4209'. [ 602.857753][T22838] bond8: entered promiscuous mode [ 602.863066][T22838] 8021q: adding VLAN 0 to HW filter on device bond8 [ 602.870558][T22838] netlink: 'syz.1.4207': attribute type 1 has an invalid length. [ 602.934054][T22830] netlink: 'syz.0.4203': attribute type 1 has an invalid length. [ 602.972773][T22830] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4203'. [ 605.704707][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 605.712724][ C0] lec:lec_tx_timeout: lec0 [ 605.717459][ C0] lec:lec_start_xmit: lec0:No lecd attached SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 609.591821][T17689] syz_tun (unregistering): left allmulticast mode [ 609.599365][T17689] bridge0: port 3(syz_tun) entered disabled state [ 609.619336][T10141] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.687590][T10141] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.717465][T10141] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.786915][T10141] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.046536][T10141] bond3 (unregistering): (slave bridge3): Releasing active interface [ 610.106831][T10141] bond0 (unregistering): Released all slaves [ 610.114413][T10141] bond1 (unregistering): Released all slaves [ 610.125098][T10141] bond2 (unregistering): Released all slaves [ 610.133602][T10141] bond3 (unregistering): Released all slaves [ 610.142897][T10141] bond4 (unregistering): Released all slaves [ 610.184906][T10141] tipc: Left network mode [ 610.336709][T10141] veth1_macvtap: left promiscuous mode [ 610.342221][T10141] veth0_macvtap: left promiscuous mode [ 610.420715][T10141] hsr0 (unregistering): left allmulticast mode [ 610.745573][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 610.753627][ C0] lec:lec_tx_timeout: lec0 [ 610.758588][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 611.288888][T10141] bridge_slave_1: left allmulticast mode [ 611.294566][T10141] bridge_slave_1: left promiscuous mode [ 611.302350][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.310718][T10141] bridge_slave_0: left promiscuous mode [ 611.317472][T10141] bridge0: port 1(bridge_slave_0) entered disabled state