last executing test programs: 6m41.559385981s ago: executing program 1 (id=961): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'nicvf0\x00', 0xd}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000808000340000000000800024000000000080006400000000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000801) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES64=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000014002101000000000000000023000000", @ANYRES32=0x0, @ANYBLOB="040002"], 0x2c}}, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'batadv_slave_0\x00'}) 6m41.331982823s ago: executing program 1 (id=962): syz_emit_ethernet(0x76, &(0x7f0000000780)=ANY=[@ANYBLOB="bbbbbbbbbbbb403a00fe8000000000000000000000000000bbff02000000000000000000000000000104009078000000006000000000001100200100000000000000000000000000010000000000000000000000000000000087000519670000006200"/118], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x2823, 0x3, 0x5}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000004000), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000004100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40090) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="7a4f72de4eb50a11f889950c46", 0xd}, {&(0x7f00000001c0)="ec3a0d9c7e70502d4b33d6d7e5738fc3da08ee1745cead2e705b41f3dcce89ace7c908d0bf24dfd6e49e237644717d0f91a62161bb4fd27b3db1b4bcf3fc40c707c7f34370992322c55da5bd46c1847e9ea8c7796e", 0x55}, {&(0x7f0000000240)="dbeb60d209fe90e64a5c67b6917862557ea726aa42efa3184a48ef00f413943dbe01c3cf6f84ab1ca6d18e8207f94c0fe60bf183205c4014169b9530bf45df543f046ad7b825c99dcf1cc580", 0x4c}, {&(0x7f00000002c0)="77290309f5fdb677dc4ad5878ccee9f9766496395fec4eedafc36ce8c6109179314b06fa9eeb1ff28c6e2ea8fcc896a82f89e9c2a5585cf3c2076dfbde16aba66841dbeaa1d42f5d2237cc7aa33a72a3aacad80830cc0a18f15911588a55e86d7d7dbce594a4d3929a3ac24be01e1393b957240ce11f85c41de77f65b9fe3157e674f0869556677893b7fbf1725042d54588e01f373212e36ad70ef428a1eeb1670a14c1c9c205ba129256de3c730ddf0a2748cb1c04fd8f181d496024", 0xbd}, {&(0x7f0000000500)="6e16757316eea3ad03bd5efafb79e282cb2ac83c1b6350f28e5cf5c4f93b00327597c054647f52cc1c96a8b5e55ea7819f9e9eb39bdf55d2c33fc8dfecd5988956b99504f6ec033a505b8a0032d53326587fb66502031bcec438845da6dbd6dfe419d8a8a60b0d503c0744577639b63404358d6b546015faf74ed598fb4013d245063801a24b446950934f7a4616769be59465d9e545428bb088bc9bb44f6654a6be7fdf4f3f1f69786dc85306eb9a3e168c9c11", 0xb4}, {&(0x7f00000005c0)="390ff4ddc879d666b0badc0b3e42881db776630a676bccb799003b9ac535a0dcfbe91fbfed0630e140079985558dd8761f5db949ec42ddab00aaf19f2008f1425aa74da0f25dadc43b2a3efd20b09093c169210c61a5f2d3d925c9576950e4774f94ccc52fba1f59b866694e3f808de15f83347e567f490e7c70274c7c4861bf19d3e389ec257e81ca46fc445bfa5c63d3716c07414d7645e4654119680ef47de9", 0xa1}], 0x6, 0x0, 0x0, 0x200488c1}, 0x0) sendmmsg(r0, &(0x7f0000004040)=[{{&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000003f00)="88c9efb078f0f3b8559dfd1c731d3cd2517d53440514ce00364d6b1361de132d946d01adbd4fa656686a0f65516acecf5c0cf8da82a2e682cab64a8ce8faa5d03821a916bd1d53b5f4d1711bbf4721d530b73a105c5b7aa687120104ff37dd26222d13dcf6920525838e7ee0366f", 0x6e}, {&(0x7f0000003f80)="13d339fcc8a102e5776b389a3c4de2e9782728148c3b3da8b060832e", 0x1c}], 0x3, &(0x7f0000004000)}}], 0x1, 0xc0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003d00)=ANY=[@ANYBLOB="80010000170001000000000000000000fc00000000b1000000000000000000000000000000000000fe80000000000000000033c4dc84dd94690000000000bbe0000002000000000000000000000000fc00000000000000000000800000000000df000000080000000000f700000000a49fb0960000000000000000167220dbdb253c9a64fdfe33b699622878d38b0ae0a2b6d749ba4e164fedbfb75d0a0790be377ffcf59e414789857193704b36", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000440005007f000001000000000000000000000000000000003200000000000000fc02000000000000000000000000000000000000000200000000000000000000000000000c0015000000000037000000"], 0x180}}, 0x0) recvmsg(r0, &(0x7f0000003cc0)={&(0x7f0000000740)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003bc0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/86, 0x56}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/90, 0x5a}, {&(0x7f00000028c0)=""/188, 0xbc}, {&(0x7f0000002980)=""/134, 0x86}, {&(0x7f0000002a40)=""/106, 0x6a}, {&(0x7f0000002ac0)=""/221, 0xdd}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x9, &(0x7f0000003c80)=""/45, 0x2d}, 0x2001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003f000701feffffff00000000037c0000040042801000018004000000080002", @ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket(0x8, 0x1, 0xffffca5c) 6m41.24792525s ago: executing program 1 (id=963): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000380), &(0x7f00000000c0)=0x8) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r2, &(0x7f0000002e80)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001ec0)=""/175, 0xaf}, {&(0x7f0000001f80)=""/234, 0xea}, {&(0x7f0000002080)=""/31, 0x1f}, {&(0x7f00000020c0)=""/69, 0x45}, {&(0x7f0000002140)=""/15, 0xf}, {&(0x7f0000002180)=""/129, 0x81}, {&(0x7f0000002240)=""/68, 0x44}, {&(0x7f00000022c0)=""/122, 0x7a}, {&(0x7f0000002340)=""/59, 0x3b}], 0x9, &(0x7f0000002440)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002500)=""/47, 0x2f}, {&(0x7f0000002540)=""/67, 0x43}, {&(0x7f00000025c0)=""/55, 0x37}], 0x3, &(0x7f0000002640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002740)=""/191, 0xbf}], 0x1}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f00000028c0)=""/21, 0x15}, {&(0x7f0000000580)=""/6, 0x6}, {&(0x7f0000002940)=""/184, 0xb8}], 0x3, &(0x7f0000002a40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000002b80)=@abs, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002c00)=""/12, 0xc}, {&(0x7f0000002c40)=""/121, 0x79}, {&(0x7f0000002cc0)=""/175, 0xaf}], 0x3, &(0x7f0000002dc0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}], 0x5, 0x100, &(0x7f0000002fc0)={0x0, 0x989680}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x114, r5, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x114}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f00000001c0), 0x10) (async) bind$can_raw(r9, &(0x7f00000001c0), 0x10) bind$can_raw(r9, &(0x7f0000000000), 0x10) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@local, 0x78, r8}) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000000)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000010000000001000000004001010"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x60000004}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000010000000001000000004001010"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x60000004}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001c40)=[{{&(0x7f0000000040)={0xa, 0x6, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x3}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)="86d905b7364c95267591baa23b039c3185ce21f90cb5eda9ed2ff5", 0x1b}, {&(0x7f00000000c0)="c1c9a78cdc6d97f833d8dbaf1c", 0xd}, {&(0x7f0000000100)="9a43484f2822115d5a6ae321725675f3e9fb15b6bdd04b7633fb7d3fb484c3a57190f9f3645122ea5ccdf9", 0x2b}, {&(0x7f0000000140)="023d707abf87c07689dd85401fbc564961c450001dde06fc09cc94a097a04d70610b3deaece3e2902c3786ae64ad74c4eef79b245055ba754d16442f51b7d8db2109d97feceb26ed362cd37e33e22e1c86a6adb4ee01c574bca54dade7c04bbc07156ccb00ff39791a1d41f1a9d9cf6367b120ed59e9bdc2c944632dea", 0x7d}, {&(0x7f00000001c0)="ee83b150a8d6653f100ba09d9adf95cac161676f415f0a9881bbd4750066e26baf583e605ff4c19e3105781ca8663b92", 0x30}, {&(0x7f0000000200)="b636bf5d3d11", 0x6}, {&(0x7f0000000240)="6c091d15e6c37dfde9eaacfc597902e2ff72a0a7d4b218ae162477efa60dc0762d1fbee0dfe9a57d67d78740981cb1ed2e58c09b1e823940505286ed8df027562ded07a9c6324a2df19d88aab12bfb72950d47cfa849be5fe8b5cfc79e6347a2c0cf72f833395416c7f84ddf2311555c1f1d4f5356b35f483a789d96b8cf8219f8d872765defd03ce7ff75d8b769343837b502a0ec38928a3926e4afafe0b39c86c3", 0xa2}, {&(0x7f0000000300)="7494299bd85e7a145db4c4e45346e9d34d0b9ea93c8da1e2dc8fe891d513673386a7ff9d778e48fd7e2dc9edf6eb3b558682f3b9d67b83b5a071453f57ac9535a8742e55ceaf851a9b93519eb1ba1a0bdcfba73b3007597f63113fdbeb9009f79b5a3e02126c819fd59a5034267018bbd93b86bb430d5ecf57432b14fe965b882cdd6528357f9d6890375a29a2a86ef6e508c6cd9b8d660c006dcb8ad8ec6d41d69ebf1a560abc3a22169ce7e88f42ac6364d0fb13", 0xb5}, {&(0x7f00000003c0)="9fd5e9a18b5835dd691266ebc42367c0d13b2351dda6a924ce7d9c66f01b5f3c7e7c397d9174c4463faf75fef748e90debcbff59ac5c351bcf7fca2f4c5198c214372dcf923305dd5cb25112fa9d6e8c3420d359dd0c2ec20675b208a2d568", 0x5f}], 0x9, &(0x7f0000001d00)=ANY=[@ANYBLOB="140000000000000029000000080000000500000000000000140000000000000029000000340020000900000000000000b0000000000000002900000036000000001200000000000007200000000206050300000000000000000007000000000000000b00000000000000005c622f1a426b2b68487a12e96ec22f77a8fca774a92277c154bb18ab4ff8bb1788b428c0d536c60203849ba1575f9c6c29e35d21821e696ff4de0aa9c957bcef9c1ec432cd00583d0538c10b0e57c6344568bb8e3abe6c841c1531c56a000100000100040101050200080104000000000000000000951a6a95dda81aa602faf8f594268eaad0893a197fa3ea79078d85d233813dd6e92a7a892f2760dc6ce240796b1036c462abc97efba61b4d967ffa39a98b22fd7fe1645b6c547e79a69b59b7075b13effa44e43cbee383e9abb98eaf2b2d2eaed78d76f5c27ebaf53758b134c1d6d0bafd8a3ddc30aea41f2128e288d565851a6279ef34fb646e1c35c47c882e4cd4ffd04d2257ce72c68c62deb0205846c12f54736368f2ed8ed20a27b72668c6"], 0xe0}}, {{&(0x7f0000000600)={0xa, 0x4e21, 0x5, @private0, 0x6}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000640)="4210bd8693c94ce474ee30b37ced6caa923d2d92478080ffc785e5d6d93441f8ec6056236865fd7167b8f602c4be86cd3b1662db4e9bbb9a07e1c13bd1d4d7e1a3ccd64068161d3cab5581f9799c051d69b485195b535972702022868a5b8283cc087cf6f12e0b92", 0x68}], 0x1}}, {{&(0x7f0000000700)={0xa, 0x4e23, 0x3, @private0, 0x3}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="ddaa0d91554e51d1e684179be11d8d75b3c0195f1220e809120b0ece64e23d896133240ae8279a48b1f62467bf9430d1f3caf099821b75f92033985beed23bb4af61467855a5d24d4bb3696557814f53667b1bf6557a076d192577e9fb35c620a35adc60653a084717dfde9b32619f1cc38ef32aa87391590dc019908604", 0x7e}, {&(0x7f00000017c0)="ee4532ae8f80b623fa8e31a94b4f687c0d99633d7f4aeb87f234a20e15fc2512d923edcad7fdd3f58404b6dfc0ff7d99b2d9c237a00ace0b904b52e12feb6a01e19a0913a475fecc7573c4a91cf85c59670ee386157cc4ef54fb2d5d6a3e133bb80b789b17e13e5ab85dfb050bd84dc65cfd54afb676112b0ffcd873c96eaebcfaddb4f3081aa42ecc34de22c667bc08842626826e8cef3a4615ddaf6d0d82a68a306b414b2fb81119a81074bd9839781eedd26b8c25e89b9ec437c2b32dfeefdaccba3aacce6c38331b348f", 0xcc}, {&(0x7f00000018c0)="8943feade339be133ef5e09fa4220e0e126edfea33e6206e770ce2947e8f4c32400871f75eb90f9c61d3fb3f997c3fe042caf92829961a6a8f4a0324bc59985d4ab066a6f8be418aed806062e5049f0e5277e3d530444cbc5e298e676b143cbec5e37c12a4977af150f7529dd061f619c040493b48588ad86d118155dc3cd4249ba8285cde54747cdf25d6f8791bec47fffc78540934fba4", 0x98}, {&(0x7f0000001980)="cdf9a8e596706f3e1f9db4c8525f48a4fb9c9a32c32dac461dcaf9b8f3ca809a45a25a95d0e83ee53e8d3568e604360c44453770f6cc829f8d1349bcc52d4e0d16b9c909a211f20ad4dc1ddb496ad320638502ce9770e4634e12e4fff105a5112c832e3b1e39203a156d17acb7c68ed9568d5beec04296d454fc350aa49755", 0x7f}, {&(0x7f0000001a00)="3198c1ce2ccdf10b1cef327985db4777bc19ad656513591ff801c092863abbd3ca4d32aa33637b439f8f3a9e27a6f1f7f80d48bf9029bb4cca0b8c3d56e6b7e33458058a6e6d385038b266e1d6128a9c3135df18a144e24cacdf92d12e9285ff6f7eb9a8b46af1aed9b2979986a107591700a112e0dad6eb5e0b97776e578043c98369549860b5d454208296f5488de2f6cef770945d09f69a87bdd664fe83bc9b18cb75076e7dbed4c8c38415d37c758dc497b18348f9e20333345c", 0xbc}], 0x6, &(0x7f0000003000)=ANY=[@ANYBLOB="80000000000000002900000036000000290c0000000000000750000000001204008003000000000000000700000000000000050000000000000004000000000000000c000000000000000b00000000000000050000000000000007000000000000000d0000000000000007100000000102068d4c020000000000000000000000180000000000000029000000370000008700000000000000300000000000000029000000370000008803000000000000c91000000000000000000000000000000001c204000000052400000000000000290000003200000000000000000000000000ffffac1414bb", @ANYRES32=r6, @ANYBLOB="00d32fffa32c585b824c4797cc66b70aeaba"], 0xf0}}], 0x3, 0x24004080) 6m40.983327882s ago: executing program 1 (id=965): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x5, 0x0, &(0x7f0000000080)=0x39) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) getsockopt(r1, 0x200000000114, 0x5, 0x0, &(0x7f0000000080)=0x39) (async) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x401, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x44}}, 0x0) (async) 6m40.645441069s ago: executing program 1 (id=968): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900), 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/97, 0x61}, {&(0x7f0000000240)=""/56, 0x38}], 0x2}, 0x8}], 0x1, 0x142, 0x0) 6m40.394697145s ago: executing program 1 (id=970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x234, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xd}, {0x0, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x8c97}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x138, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf7, 0xc4, 0x1, 0x2, 0x0, 0x7, 0x1, 0x6}}, {0x10, 0x2, [0x5, 0x10, 0x0, 0x1, 0x1, 0x1]}}, {{0x1c, 0x1, {0x5, 0xfc, 0x80, 0x5, 0x0, 0x4, 0x9, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x3, 0x72, 0x6, 0x9, 0x1, 0x7ff, 0x4, 0xa}}, {0x18, 0x2, [0x4, 0x4c, 0x6, 0x41, 0x3, 0x7, 0x40, 0x9, 0xfffb, 0x6]}}, {{0x1c, 0x1, {0x8, 0x9, 0x26, 0x8, 0x0, 0x80000001, 0x1, 0x4}}, {0xc, 0x2, [0xff60, 0x2ea, 0xf, 0x1]}}, {{0x1c, 0x1, {0x2, 0x3, 0x400, 0x0, 0x0, 0x0, 0x7, 0x8}}, {0x14, 0x2, [0xfee3, 0x80, 0xb, 0x6, 0x8, 0x0, 0x1ff, 0x2]}}, {{0x1c, 0x1, {0x5, 0xee, 0x4, 0x1, 0x1, 0x1, 0xc9d5, 0x7}}, {0x12, 0x2, [0x8, 0x9e2, 0x1239, 0x93dc, 0xe56, 0x8, 0x0]}}, {{0x1c, 0x1, {0x5, 0x63, 0x3, 0x2aac, 0x1, 0x10000, 0x101, 0x3}}, {0xa, 0x2, [0x2, 0x6, 0x1]}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xd, 0x9, 0x6, 0x0, 0x400, 0xb, 0x6}}, {0x10, 0x2, [0x2, 0xff5e, 0x1, 0x6, 0x6, 0x81]}}]}, @qdisc_kind_options=@q_cbq={{0x8}, {0x64, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x2, 0x0, 0x200, 0x3ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x2b, '\x00', 0xff, 0x7, 0x5, 0xfff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x0, 0xf10, 0xf, 0x65}}, @TCA_CBS_PARMS={0x18, 0x1, {0x71, '\x00', 0x3, 0x8, 0x81, 0x1}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}]}, 0x234}, 0x1, 0x0, 0x0, 0x81}, 0x44010) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 6m24.098615866s ago: executing program 32 (id=970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x234, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xd}, {0x0, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x8c97}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x138, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf7, 0xc4, 0x1, 0x2, 0x0, 0x7, 0x1, 0x6}}, {0x10, 0x2, [0x5, 0x10, 0x0, 0x1, 0x1, 0x1]}}, {{0x1c, 0x1, {0x5, 0xfc, 0x80, 0x5, 0x0, 0x4, 0x9, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x3, 0x72, 0x6, 0x9, 0x1, 0x7ff, 0x4, 0xa}}, {0x18, 0x2, [0x4, 0x4c, 0x6, 0x41, 0x3, 0x7, 0x40, 0x9, 0xfffb, 0x6]}}, {{0x1c, 0x1, {0x8, 0x9, 0x26, 0x8, 0x0, 0x80000001, 0x1, 0x4}}, {0xc, 0x2, [0xff60, 0x2ea, 0xf, 0x1]}}, {{0x1c, 0x1, {0x2, 0x3, 0x400, 0x0, 0x0, 0x0, 0x7, 0x8}}, {0x14, 0x2, [0xfee3, 0x80, 0xb, 0x6, 0x8, 0x0, 0x1ff, 0x2]}}, {{0x1c, 0x1, {0x5, 0xee, 0x4, 0x1, 0x1, 0x1, 0xc9d5, 0x7}}, {0x12, 0x2, [0x8, 0x9e2, 0x1239, 0x93dc, 0xe56, 0x8, 0x0]}}, {{0x1c, 0x1, {0x5, 0x63, 0x3, 0x2aac, 0x1, 0x10000, 0x101, 0x3}}, {0xa, 0x2, [0x2, 0x6, 0x1]}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xd, 0x9, 0x6, 0x0, 0x400, 0xb, 0x6}}, {0x10, 0x2, [0x2, 0xff5e, 0x1, 0x6, 0x6, 0x81]}}]}, @qdisc_kind_options=@q_cbq={{0x8}, {0x64, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x2, 0x0, 0x200, 0x3ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x2b, '\x00', 0xff, 0x7, 0x5, 0xfff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x0, 0xf10, 0xf, 0x65}}, @TCA_CBS_PARMS={0x18, 0x1, {0x71, '\x00', 0x3, 0x8, 0x81, 0x1}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}]}, 0x234}, 0x1, 0x0, 0x0, 0x81}, 0x44010) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 2.980367402s ago: executing program 0 (id=4003): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r3, 0x200, 0x6, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r9 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r10, &(0x7f0000000140)={0x20000004}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r14 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r14, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r12, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff00"], 0x70}, 0x1, 0x0, 0x0, 0x2800}, 0x20000040) 2.771666403s ago: executing program 4 (id=4007): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) getsockname$packet(r4, &(0x7f0000000280), &(0x7f00000002c0)=0x14) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) 2.65594881s ago: executing program 2 (id=4009): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x821}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r0}]}}}]}, 0x38}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000040)=0xd0, 0x4) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {}, 0x4}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000080)={{0x0, 0x8000000000000004, 0x4, 0xdd09, 0x4, 0xb, 0x7ea0, 0x8000, 0x7a6, 0x2, 0x5, 0x5, 0x2, 0xfff, 0x5}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pipe(&(0x7f00000055c0)={0xffffffffffffffff}) shutdown(r4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10009, 0x8a0}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}]}, 0x34}}, 0x4084) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00'], 0x20, 0x20000000}], 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xfffffffc}}]}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x402) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0x400, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x0, 0x0, 0x2}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800001e030000"], 0x0) 2.527115782s ago: executing program 4 (id=4011): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 2.404768881s ago: executing program 2 (id=4012): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000022000000000b8"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xf0042, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x50, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x5, @loopback, 0x8}}, 0x0, 0x0, 0x4, 0x0, "61236b90dcdfe3ce2bb54fa6c4654e6c39d7ddcc4501330078eb7bf1597d638c7d4315210fb34d4c84c2f976071138016e8934b34d8b9cff05cd33c159c2c5a51f1bbe5b7d758286a3c82392b39a1d3f"}, 0xd8) close(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xf9}, 0x8) write$rfkill(r6, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) syz_emit_ethernet(0x14, &(0x7f0000002e00)={@random="25f0504a4e97", @local, @void, {@llc={0x4, {@llc={0x0, 0xf4, "bf", "cd7015"}}}}}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000100)={0x1d, r8}, 0x10) 2.363104858s ago: executing program 0 (id=4014): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x401, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20048800) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000001280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f0000000200)={0x102c, r3, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}]}, 0x102c}, 0x1, 0x0, 0x0, 0x20008010}, 0x24008040) r5 = socket$xdp(0x2c, 0x3, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000002080)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002040)={&(0x7f0000001300)={0xd10, r3, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x518, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x45}]}, {0x4}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x274, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x7}, {0x3, 0x4}, {0x3, 0x6}, {0x0, 0x6}, {0x2, 0x3}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x4, 0x5}, {0x2}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x9}, {0x0, 0x9}, {0x6, 0x9}, {0x7}, {0x4, 0x9}, {0x1, 0x9}, {0x2, 0x5}, {0x0, 0x9}, {0x7, 0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x7}, {0x6, 0x1}, {0x6, 0x6}, {0x2, 0x6}, {0x6, 0x7}, {0x4, 0x5}, {0x6, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x3, 0x9}, {0x2, 0x4}, {0x3, 0x6}, {0x0, 0x2}, {}, {0x1, 0x2}, {0x4, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x1, 0x6}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x8}, {0x6, 0x9}, {0x2, 0x3}, {0x5, 0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x4}, {0x2, 0x7}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x5}, {0x4, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x1, 0x6}, {0x3, 0x3}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x5}, {0x4, 0x8}, {0x4, 0x2}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0x5}, {0x4, 0x3}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0xa}, {0x0, 0x9}, {0x6, 0x4}, {0x0, 0x1}, {0x4, 0x6}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0x4}, {0x7, 0x3}, {0x6, 0x7}, {0x2, 0x1}, {}, {0x0, 0x4}, {0x0, 0x9}, {0x6, 0x6}, {0x3, 0x9}, {0x7, 0x8}, {0x2, 0x1}, {0x5, 0x8}, {0x1}, {0x2, 0x3}, {0x7, 0x7}, {0x4, 0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x3, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {0x7, 0x3}, {0x6, 0x4}, {0x5, 0x2}, {0x3, 0x9}, {0x7, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x7, 0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x6, 0x1}, {0x2, 0x5}, {0x1, 0x5}, {0x2, 0x8}, {0x1, 0x4}, {0x6}, {0x6, 0x4}, {0x1, 0x1}, {0x5, 0x4}, {0x1, 0xa}, {0x5, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {}, {0x0, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x9028, 0x6, 0xaa, 0x8, 0x0, 0x1, 0x9]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0xa}, {0x7, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x4, 0x3}, {0x3, 0x3}, {0x3, 0x4}, {0x4, 0x1}, {0x6, 0x9}, {0x1, 0x4}, {0x3, 0x6}, {0x7, 0x1}, {0x6}, {0x6, 0x5}, {0x5, 0x1}, {0x3}, {0x1, 0x4}, {0x4, 0x9}, {0x0, 0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x9}, {0x1, 0xa}, {0x3, 0x6}, {0x1, 0x3}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0xa}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x7, 0x3}, {0x7, 0x9}, {0x2, 0x8}, {0x5, 0x2}, {0x0, 0x7}, {0x1}, {0x7, 0xa}, {0x3, 0x2}, {}, {0x2, 0x8}, {0x6, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x4}, {0x2, 0x7}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x3, 0xa}, {0x3, 0x1}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x4}, {0x4, 0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x5, 0x8}, {0x7, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x5, 0xa}, {0x6, 0x5}, {0x1, 0x8}, {0x5, 0x5}, {0x6}, {0x1, 0x3}, {0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x1b, 0x18, 0x9, 0x48, 0x36, 0x9, 0x9, 0x6c, 0x5, 0x0, 0x36, 0x1b, 0x16, 0x4, 0x1, 0x5]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x9, 0x60, 0x18, 0x2, 0x18, 0x2d, 0x16, 0x4, 0x1, 0x12, 0x48, 0x18, 0xb, 0x60, 0x5, 0xc, 0x6, 0x5, 0x30, 0x6, 0x1, 0xb, 0x16, 0x6c, 0x30]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1d, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x6, 0x6, 0x6d9, 0x8, 0x6, 0x1, 0x4]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x7}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0xa}, {0x3, 0x5}, {0x0, 0x7}, {0x2, 0x6}, {0x2}, {0x7, 0x8}, {0x7, 0x7}, {0x4, 0x5}, {0x6, 0x8}, {0x0, 0x6}, {0x6, 0x6}, {0x0, 0x3}, {0x0, 0x4}, {0x5, 0x4}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0x6}, {0x5, 0xa}, {0x2, 0x5}, {0x0, 0x6}, {0x7, 0x5}, {0x5, 0xa}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x7}, {0x6, 0x1}, {0x2, 0x5}, {0x5, 0x8}, {0x7, 0x4}, {0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x6, 0x2}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x6}, {0x2}, {0x5, 0x4}, {0x2, 0x8}, {0x4, 0x3}, {0x6, 0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x5}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0x8}, {0x6, 0x7}, {0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x3, 0x0, 0x5, 0x1, 0x4, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x2, 0x3337, 0x7, 0x2e, 0x2, 0x1]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0xa}, {0x5, 0x6}, {0x2, 0x1}, {0x2, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x6}, {0x5, 0x3}, {0x2, 0xa}, {0x2, 0x1}, {0x6, 0x4}, {0x1, 0xa}, {0x2, 0x1}, {0x2, 0x7}, {0x4, 0x9}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x9}, {0x1}, {0x3, 0x5}, {0x1, 0x3}, {0x1, 0x8}, {0x3, 0x3}, {0x6, 0x8}, {0x6, 0x1}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0x5}, {0x4, 0x4}, {0x7, 0x1}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x7}, {0x1, 0x4}, {0x7, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {0x6, 0x7}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x9, 0x5, 0x41b8, 0x8, 0xf, 0x3]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x56, 0x60, 0x14, 0x12, 0xc, 0x16, 0x36, 0x18, 0x5, 0x6, 0x24, 0x50, 0x36, 0x36]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x244, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x7, 0xb, 0x0, 0x80, 0x3d, 0x41]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0x30, 0xc, 0x24, 0x36, 0x48, 0x3, 0x4, 0x60, 0x48, 0x1b, 0xc, 0x60, 0x3d, 0x2, 0x36, 0x1, 0x60, 0x48, 0xb, 0x30, 0x3, 0xb, 0x2e, 0x36, 0x2, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8964, 0x9, 0x0, 0x5, 0x4, 0x0, 0x35cf, 0x59ff]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0x9, 0x2, 0x16, 0x2, 0x33, 0x6c, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0xa}, {0x3}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x4, 0x2}, {0x4}, {0x6, 0x5}, {0x7, 0x9}, {0x4}, {0x2, 0x1}, {0x7, 0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0x7}, {0x3, 0x4}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x4}, {0x7, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x5, 0x1}, {0x1, 0x8}, {0x3, 0x8}, {0x7, 0x8}, {0x4, 0x8}, {0x6, 0x9}, {0x5, 0x1}, {0x4}, {0x7, 0xa}, {0x0, 0x4}, {0x2}, {0x5}, {0x2, 0x6}, {0x4, 0x7}, {0x7, 0x2}, {0x2, 0x5}, {0x5, 0x7}, {0x0, 0x9}, {0x1, 0x2}, {0x3, 0x5}, {0x5}, {0x7, 0x8}, {0x3, 0xa}, {0x0, 0x6}, {0x6, 0x6}, {0x6}, {0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x5, 0x8}, {0x4, 0xa}, {0x4, 0x9}, {0x6, 0x1}, {0x6, 0xa}, {0x1}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x35b2, 0x9, 0x6, 0x9, 0x6, 0x3, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x2, 0x9, 0xfff8, 0x3, 0x1, 0xde9, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x7, 0x7, 0xb6, 0x9, 0x4d, 0xffff, 0x6]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0xb, 0x2, 0x48, 0xed, 0x5, 0x12, 0x60, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x8}, {0x7, 0xa}, {0x3, 0x5}, {0x5, 0x2}, {0x4, 0x4}, {0x3, 0x9}, {}, {0x7, 0x7}, {0x5, 0x9}, {0x2, 0x6}, {0x5, 0x2}, {0x0, 0x4}, {0x3, 0xa}, {0x7}, {0x4, 0x4}, {0x2, 0x1}, {0x6, 0x5}, {0x2, 0x6}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf014, 0xf785, 0x8, 0x7, 0x3, 0xfff7, 0x1, 0x6]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0xd, 0x5, 0x0, 0x41, 0x8, 0x8, 0x6]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x6, 0x7f3, 0xe8, 0x81, 0x5f, 0xa4da]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x1}, {0x5, 0x6}, {0x4, 0x8}, {0x3, 0x4}, {0x6, 0x9}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x8}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0x9}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x5}, {0x4, 0x4}, {0x5, 0x8}, {0x3, 0x7}, {0x1}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x6c, 0x5, 0x24, 0x4, 0x30, 0x36, 0x1, 0x0, 0x3, 0x48, 0x48, 0x9, 0x30, 0x9, 0x9, 0xc, 0x3b6c949ab1755e5b, 0x5, 0x6, 0xf9c931cba6f4fcf5, 0x60, 0x4, 0x1, 0x1, 0x5, 0x0, 0x12, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x618, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x47}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x26}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x53}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x33}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10001}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x140, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x3}, {0x0, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x1, 0x1}, {0x4, 0xa}, {0x5, 0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x2, 0x6}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0x1}, {0x4, 0xa}, {0x1, 0x1}, {0x7, 0x3}, {0x4, 0x9}, {0x7, 0x9}, {0x2, 0x9}, {0x7, 0xa}, {0x6, 0x9}, {0x1, 0xa}, {0x1, 0x6}, {0x6, 0x2}, {0x1}, {0x7}, {0x0, 0x6}, {0x6, 0xa}, {0x3, 0x2}, {0x1, 0x8}, {0x2, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xec40, 0x800, 0x4, 0x5, 0x100, 0x1]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x6, 0x1}, {0x6, 0xa}, {0x1, 0x3}, {0x5, 0x2}, {0x6, 0x9}, {0x0, 0x1}, {0x2, 0xa}, {0x1, 0xa}, {0x5, 0x8}, {0x0, 0x7}, {0x4}, {0x6, 0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x7, 0x7}, {0x7, 0x4}, {0x5, 0x8}, {0x2, 0x4}, {0x6, 0x4}, {0x7, 0x3}, {0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x1, 0x9}, {0x3, 0x9}, {0x6, 0x6}, {0x1, 0x9}, {0x4, 0x6}, {0x7}, {0x7}, {0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0x8}, {0x6, 0x7}, {0x4, 0x9}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x5}, {0x1, 0x1}, {0x3, 0x8}, {0x5, 0x8}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x7ff, 0xfffa, 0xc336, 0x8000, 0x6, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x5, 0xa}, {0x7, 0x8}, {0x2, 0x7}, {0x3}, {0x3, 0xa}, {0x2, 0x4}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x4}, {0x4, 0x3}, {0x0, 0x1}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x0, 0xa91, 0x0, 0x8, 0x306, 0x8d0]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd05, 0x9, 0x7, 0xac, 0xfff7, 0xb26, 0x70, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1fc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x3}, {0x7, 0x8}, {0x3, 0x9}, {0x5, 0xa}, {0x6, 0x3}, {0x3, 0x14}, {0x3, 0x7}, {0x3, 0x4}, {0x0, 0x7}, {0x2, 0x9}, {0x4, 0x4}, {0x6}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x9}, {0x5, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x2}, {0x3, 0x3}, {0x3, 0x5}, {0x5, 0xa}, {0x1, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x0, 0x50, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xfc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x64, 0x6, 0x1b, 0x12, 0x30, 0x1b, 0x1b, 0xb, 0x6, 0x2, 0x2, 0x2, 0x4, 0x15, 0x72, 0x5, 0xb, 0x48, 0x1, 0xb, 0x30, 0x6, 0x4, 0x18, 0x1, 0x2, 0x1, 0x2, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x81, 0x5, 0x22, 0x2, 0x425, 0x4, 0x3b2]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x2}, {0x1, 0x5}, {0x7, 0x4}, {0x5, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x4}, {0x3, 0x4}, {0x2, 0x6}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x3, 0x2}, {0x7, 0x2}, {0x2, 0x3}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x8}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0x4}, {0x2, 0xa}, {0x3, 0x2}, {0x7, 0x3}, {0x3, 0x9}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x3, 0xa}, {0x3, 0x2}, {0x1, 0x4}, {0x1, 0x6}, {0x4}, {0x6, 0x2}, {0x0, 0x8}, {0x5, 0x5}, {0x4, 0x2}, {0x3}, {0x6, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x3, 0x8}, {0x2, 0x3}, {0x2, 0x4}, {0x2, 0x8}, {0x5, 0x2}, {0x4, 0x6}, {0x6, 0x6}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xf672, 0x1, 0x2, 0x314, 0x401, 0x8, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xc, 0x1, 0xfffc, 0x6, 0x4, 0x9, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4a4, 0x3, 0x8, 0x1, 0xfffb, 0x0, 0x7fff]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0xa}, {0x1, 0x8}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x7}, {0x5}, {0x3, 0x5}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x3}, {0x6, 0x5}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x2}, {0x6, 0x7}, {0x3, 0x1}, {0x1, 0x7}, {0x1, 0x9}, {0x5, 0x7}, {0x1}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x8}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x5}, {}, {0x5, 0x9}, {0x4, 0x5}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x2}, {0x7, 0x7}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0xa}, {0x3, 0x6}, {0x5, 0x5}, {0x6, 0x2}, {0x3}, {0x5, 0x6}, {0x3, 0xa}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x8}, {0x7, 0x3}, {0x5, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0x4}, {0x6, 0x1}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0xa}, {0x4, 0x7}, {0x1, 0xa}, {0x4, 0x7}, {0x3, 0x2}, {0x0, 0x9}, {0x0, 0xa}, {0x3, 0x6}, {0x5, 0x3}, {0x4, 0x2}, {0x3, 0x2}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x5}, {0x3, 0x5}, {0x5, 0xa}, {0x1, 0x6}, {0x5, 0xa}, {0x4, 0x2}, {0x7, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x7, 0xa}, {0x7, 0x3}, {0x1, 0x3}, {0x2, 0x2}, {0x1, 0x6}, {0x1, 0x4}, {0x5, 0x9}, {0x2, 0x2}, {0x0, 0x9}, {0x7}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x9}, {0x3, 0x7}, {0x4, 0x6}, {0x6, 0x6}, {0x7, 0x6}, {0x5, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x6, 0x1}, {0x1, 0x6}, {0x4, 0x5}, {0x7, 0x9}, {0x7, 0x8}, {0x2, 0x5}, {0x4, 0x9}, {0x3, 0x4}, {0x5, 0x6}, {0x6, 0x3}, {0x6, 0x8}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x9}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x9}, {0x0, 0x5}, {0x4, 0x3}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0xa}, {0x3, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x22, 0x5, 0xf, 0x8, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x2, 0x36, 0xc, 0x1, 0x6, 0x3, 0x3, 0x8, 0xc, 0x18, 0x12, 0x4, 0x30, 0x1, 0x5, 0x3, 0x6, 0x24, 0x36, 0xb, 0x18, 0x9, 0x2, 0x1, 0x1, 0x4, 0xb, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x134, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x1}, {0x1, 0x6}, {0x6, 0x4}, {0x6, 0x7}, {0x3, 0x3}, {0x7, 0x9}, {0x5, 0xa}, {0x0, 0x5}, {0x7, 0x4}, {0x4, 0x1}, {}, {0x6, 0x7}, {0x6, 0x9}, {0x6, 0x8}, {0x4, 0x3}, {0x7, 0x9}, {0x7, 0x6}, {0x1, 0x5}, {0x5, 0x4}, {0x3, 0x3}, {0x4, 0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x3, 0x2}, {0x0, 0x7}, {0x7, 0x9}, {0x7}, {0x2}, {0x6, 0x7}, {0x5, 0x9}, {0x7, 0x5}]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0x1}, {0x6, 0x3}, {0x3, 0xa}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x2}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x9}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0xa}, {0x2, 0x2}, {0x2, 0x2}, {0x1}, {0x0, 0x4}, {0x0, 0x5}, {0x3, 0x5}, {0x1, 0x5}, {0x1, 0x6}, {}, {0x6, 0x6}, {0x5, 0x9}, {0x5, 0x5}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0xa}, {0x2, 0x6}, {0x4, 0x4}, {0x2, 0x6}, {0x2, 0x8}, {0x2, 0x9}, {0x2, 0x5}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6712a7b8e9c85be6, 0x2, 0x0, 0x60, 0x3, 0x2, 0xc, 0xce9182f811c80067, 0x2, 0x24, 0x48, 0x30, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6ca, 0x8, 0x40, 0x3, 0xfff, 0x1, 0x100, 0x12ab]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x0, 0x6, 0xbb2, 0x3, 0x3ff, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x1, 0x7, 0x4, 0x7fff, 0x20, 0xb8, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x60, 0x6, 0x60, 0x2, 0x1, 0x5, 0x12, 0x16, 0x6, 0x5, 0x6c, 0x60, 0x4, 0x5, 0x36, 0x6, 0x1, 0x4, 0x5, 0x18, 0x60, 0x1c, 0x6]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x9}, {0x2, 0x2}, {0x0, 0x3}, {0x5, 0x8}, {0x0, 0x6}, {0x0, 0x2}, {0x7, 0x1}, {0x7, 0x2}, {0x2, 0x1}, {0x2, 0x3}, {0x3}, {0x0, 0x6}, {0x4, 0x4}, {0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x21}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9d}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0xa5b, 0x0, 0x4, 0x0, 0x0, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x1, 0x8, 0x4, 0x6, 0x2, 0x0, 0x3]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x7}, {0x2, 0x6}, {0x2, 0x4}, {0x3, 0x3}, {0x7}, {0x6, 0x2}, {0x5, 0x5}, {0x5, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x3, 0x4}, {0x4, 0x9}, {0x1, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xa}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x24, 0x24, 0x1b, 0xb, 0x48, 0x4, 0x2, 0x5, 0x5, 0x60, 0x12, 0x18, 0x3, 0x2, 0x60, 0x5, 0x5, 0x3]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x60, 0x3, 0x60, 0x30, 0xb, 0x36, 0x36, 0x5, 0x9, 0x6, 0x5, 0x1, 0x2, 0x28, 0x1b]}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x180, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa2}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x104, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x2}, {0x4}, {0x7, 0xa}, {0x3, 0x6}, {0x0, 0x8}, {0x0, 0x2}, {0x0, 0xa}, {0x3, 0x1}, {0x4, 0x4}, {0x5, 0x8}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x5, 0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x2}, {0x1, 0x8}, {0x3, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x6, 0xa}, {0x4, 0x7}, {0x6, 0x1}, {0x0, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x7, 0x9}, {0x3, 0x1}, {0x0, 0xa}, {}, {0x7, 0x3}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x5}, {0x3, 0x3}, {0x6, 0x4}, {0x4, 0xa}, {0x7, 0x8}, {0x0, 0xa}, {0x5, 0x7}, {0x4, 0x8}, {0x5, 0xa}, {0x6}, {0x3}, {0x0, 0x4}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x3, 0x1}, {0x2, 0x2}, {0x5, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0xa}, {0x2}, {0x7, 0x7}, {0x2}, {0x0, 0x4}, {0x0, 0x5}, {0x6}, {0x5, 0x1}, {0x3, 0x9}, {0x0, 0x2}]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xff, 0x40, 0x3ff, 0xdc23, 0x7, 0x3ff, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x1ff, 0x40, 0xd, 0x9, 0x4c20, 0x4, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x4, 0x7fff, 0xc000, 0x101, 0x81, 0x0, 0xbd]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x24, 0x1b, 0x1b, 0xd8, 0x9, 0x5, 0x3, 0x12, 0x24, 0x30, 0x24, 0x12, 0x9d3205d17961f0ce, 0x5, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x9, 0x60, 0x1, 0x6, 0x9, 0x3, 0x9, 0x1b, 0x2, 0x6, 0x5, 0x41, 0x30, 0x30, 0x24, 0x4, 0x6, 0x1b, 0xb, 0x5, 0x2b, 0x1b, 0x5, 0x18, 0xb, 0x60, 0x18, 0x60, 0x5, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x1, 0x1, 0x0, 0x200, 0xff3a, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xeb}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x40}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}]}]}, 0xd10}, 0x1, 0x0, 0x0, 0xc0}, 0x40) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002100), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x24, r7, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x54}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x30, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x629}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r8, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x44, r9, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x7ffd}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8085}, 0x4041) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000002480)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000002500)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000002540)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000002580)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000025c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f00000026c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x64, r9, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x9}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x9}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xc9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xa}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xa}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x1c, r3, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000002900)={r5, &(0x7f0000002800)='\xc8\x00', 0x40, &(0x7f0000002840)={@align=0x4, {0x3ff, 0x6, 0x7, 0x20400000000}}, 0x0, &(0x7f0000002880), &(0x7f00000028c0)=0x8}) sendmsg$NFT_MSG_GETOBJ(r15, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002a80)={&(0x7f0000002980)={0xe0, 0x13, 0xa, 0x300, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x81, 0x8, "747ad5624506fcd500585e8944cf8808dca7aeb18f4d39aa8382e405bde56e21ab38ea7b70f65644581e4af75d09f9e6172b638704a93ada5866c1aa19b095972e7d8d5826954408c97865fd3eb9de6a045fe19d86cfd69b0a02fb8c1fd78af113b97c6717807e963bf9b93b6aebdbfc5e3cef2ecba2e3ac273d7c90da"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) write$nci(r15, &(0x7f0000002b00)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x8, 0x1}, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r15, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)={0x50, 0x2, 0x7, 0x200, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_QUOTA={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xc72}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1e0d17b6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000002e00)={0xffffffffffffffff, 0x0, 0x67, 0x0, &(0x7f0000002c80)="a15f5501efa9852fb00061083244beff0d06661e9c33fc06ba1da5b97de825e88dd84c2d7478dce7bf59b38dfc9d34d7a73f2dde2738c4294522fe602f97f88cf931df053bf6df38d0183cd93790c0da4de276e8223eed3bac5ff0f42f731352bdb6f18528130c", 0x0, 0x0, 0x0, 0xee, 0x0, &(0x7f0000002d00)="795403461b39b0c3cd760de43cf1f4a65c5483932874d9d0db33c4c81800cbd526c4dbc996d59aa3af8b54bb4bffaca1a4795b89e7a722dc824114ac4732b036e4840c556e75b1401a6084341beb642e80f6bd5702ef90e197f46543b5ef46bd76e58fcff3db0cf73e2cdf0f9b5c4d391698a503c61233a1277e8759da8a715ff3b4bc58d46a9eb2386ea0789c17e79f20e2d39831efd2585a0c7bc008107c68578d1652eea33a9a2d0813b6bd477654eff6ea89775c75e08b1b51b27aaeb26300514c14ddf6674ed042a96973642393ccb165ff66c32330013c8f4360b73e999b586d97b7afdcd701e2335c3713", 0x0, 0x2, 0x0, 0x44df}, 0x50) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80d0) 2.180164454s ago: executing program 4 (id=4016): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)={0x34, r3, 0xb97534d5fe970ccf, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280), 0x1000000}, 0x20) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r6, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)={0x34, r3, 0xb97534d5fe970ccf, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x34}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280), 0x1000000}, 0x20) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_timeval(r6, 0x1, 0x2, 0x0, 0x48) (async) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async) 2.122685822s ago: executing program 3 (id=4017): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) socket$inet(0x2, 0x1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x4c080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffde2}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x30040010) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$can_bcm(r0, &(0x7f00000004c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000010400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000040f5"], 0x48}}, 0x0) 2.064061425s ago: executing program 0 (id=4018): r0 = socket(0x28, 0x1, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x218, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7703bd58}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x48}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x5}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 1.940287856s ago: executing program 3 (id=4019): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xa8, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @peer_mgmt={0x75, 0x6, {0x0, 0x2, @val=0x5, @void, @void}}, @measure_req={0x26, 0x92, {0xf6, 0xa2, 0x1, "d192a81c02b149e714eb41ecd37b5c0c84e87a6398950c8afdb6decc1e721a3a4775de8ca56a77c234b976e2aafd1c504e8f9286ced413b882e3a7d71355d3c7fd6e60ee32bd006c20d11b22ee7f1a5ef67baf47f1ac4814d99fc4341c0e40c37e2df800b0b0e780ff02d00cfee7c06a3d8a248b46259a854bd0b8b4501fffff4f02b80f2b046b802170262c0d8b81"}}, @channel_switch={0x25, 0x3, {0x1, 0x8c, 0x9}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x84}, 0x8080) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) bind$alg(r2, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) unshare(0x400) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) 1.869316281s ago: executing program 0 (id=4021): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xffff, 0x5f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040000}, 0x8c1) socket$kcm(0x23, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130001002dbd70000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000020c001a800800058004000680"], 0x2c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x4, 0x660, 0xee7f, 0x2, 0x1}, &(0x7f00000003c0)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02ff4284860186ddba71f16b7d", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) 1.752272612s ago: executing program 4 (id=4023): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0xde, 0x7, 0xf, 0x69, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x8, 0x8, 0x7, 0x1}}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x200000c0) 1.740456806s ago: executing program 3 (id=4024): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x409, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000340)={{r6, &(0x7f00000001c0)='ipvlan\x00', 0x105002, &(0x7f0000000280)={@_ha_fsid={[0xf4c8d70e, 0x8b]}, {0x200, 0x8000, 0x7, 0x7}}, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x80}, 0x0, 0xfffffffffffffffd}) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r1, 0x1, {0x0, 0x1}, 0x1}, 0x18) 1.613793625s ago: executing program 5 (id=4025): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000018110004", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000b7080000000000007b8af8ff00000000b708000078b500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000087ca08"], 0x0, 0xf234, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r1, 0x201, 0x0, 0x0, {0x4, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x8, 0x3000000000002}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000018110004", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000b7080000000000007b8af8ff00000000b708000078b500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000087ca08"], 0x0, 0xf234, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r1, 0x201, 0x0, 0x0, {0x4, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x8, 0x3000000000002}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) 1.492127767s ago: executing program 0 (id=4026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b330000000000dcdf250500000010001d800c00008008000d80040002801de2efcf0b96148df15c4201ec00"/53], 0x24}, 0x1, 0x0, 0x0, 0x8c1}, 0x44000) 1.491805016s ago: executing program 5 (id=4027): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) sendmmsg(r1, &(0x7f0000006440)=[{{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x0, 0x0, {0xa, 0x4e21, 0x0, @local, 0x5}}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000540)="52c10f760535aee14240ab1f6fd28daaf22421d15c1d8551b0eccf511e712729103b4e095f7ec36a87c540f242fdb9a5368d3bb9496581723fad3b09239b9e35f1af0642357fc08573cb9e73654e104d78f600", 0x53}, {&(0x7f00000005c0)="b702dcc2ca881d781d3ba3556f260b1d7979adf8c839aa563751474ec4fe787c5f2b529d1b364569053b66de724a01e35fee3bea8c4de72806338a60c6acf370ebd3a7c33e5009f9a7acce0ef9d8bf311c523a42f9aa78c76a5b5c16e45cba7d502a4adaf9597533b5d216d39168bf50", 0x70}, {&(0x7f0000000640)="2d57ee3d800024ec5227ea129db8382466f5efa96cacbd57346c677f22e0b9ff13f993b08fe042b54763c42ccb1ebb311f800fcd44be30811908d99f453222c0f16a326f14c909cdcca6845f5285946a206481e6e7b62104c1ebacadf2fd16eebc614eb42860ed98a99a5be1ed0f891ed575d2ebd8dc718587d7917b005247e31fef407aba1d089e2617db0a650ded6cce47e3bec29f918849e3ab89305623ed02f836ee8cf45977ce7a8a462bb120ffc208b66d4252dacf77511218b7b5", 0xbe}, {&(0x7f0000000700)="bbca8401cde42e65ddd92e1767a8b3068e87597d7bb755db5d2f81e34b47a3ef0e9068dd6911f1d96d83304fb6b90cd92715f0c5bb5395fa1915bd106ac1707e03ed73eb39a3d547948c5fb80acc71175c110960c5aca8539d4ee417966afc83f7fbf8d28ddcaf033bef8d62c243f8da4e184ed007fffca67ebb56c7f32f6ce0f2208f6a8f32d7b5cf11754aad368fdc90fafbc3b7f5275a9e754540621f900eaa32ca39b8baf736dc2dae479867f3fc680b9fda15ef1e65516b7225d1b533d98f0731c837cd2e259c3e75c471fca5d5ccb6f69e0d70", 0xd6}, {&(0x7f0000000800)="1d11b9464f2e18edb7b54c6c92b5aa1b3fc80e81060fbc5416a715b50595c5d8d9090a9539e53fb54ab427e788680b309b779929f59c86dfde652336bf9434a71359ee9dda74517af3d56acbf3ad550cf19f39e6270a6e772b0885180c67610078a0aac864b2d412d26c271703a25af892911d3cbc5e8cb548567826a0814792966fbfa746b7fd6443390f934f0d6f0091bfcfeb3e2d3bd400f49f7f", 0x9c}, {&(0x7f0000000a80)}, {0x0}], 0x7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005980)=[{0xe0, 0x29, 0x8, "80bb73b9b88c0e29cbec5d73cc527155be8e600e8fafce4a5e2ecb3a6d475999401c77d8b2e2153a5b366e25bcd9e00018727e37849558f4393d0a3137fb627a0a548a7646ddb4c309f09483a2f6fa3a0e7bd09b277df0eb229a27c0eb91ca4fafb734bc8d6e5d3afe20e996e6b875b425cfab22141d02052b79fc16c071d09eff1b1e1cc72ad3c76556494ce49245505638ede7de4650d860d6a18c53e47f169d111863728e388e6ef23b63633b27d27453bf3bbcad6c456837e49d99bf76b8f7b0ceb249127957bc9a"}], 0xe0}}, {{&(0x7f0000005bc0)=@can, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005c40)="924ca8fc9960", 0x6}, {&(0x7f0000005d00)="fbb539bcbf", 0x5}, {0xfffffffffffffffe}, {&(0x7f0000005e00)}], 0x4, &(0x7f0000006000)=ANY=[@ANYBLOB="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"], 0x440}}], 0x3, 0x40) 1.423014377s ago: executing program 4 (id=4028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000041180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) 1.329993914s ago: executing program 0 (id=4029): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.280744553s ago: executing program 3 (id=4030): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x5, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) 1.280082841s ago: executing program 2 (id=4031): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x49c2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xac}, 0x1, 0x0, 0x0, 0x44001}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r3}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000300)={r2}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000780)={0x1d, r0}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x8, 0x2, 0x0, 0x0, "cf7175876853d309"}, 0x10}, 0x1, 0x0, 0x0, 0x20008814}, 0x4805) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x6003}, @void, @x25={0x2, 0x8, 0xf3, "b9a5152dc7e4a996d6"}}, 0x10) socket$inet6(0xa, 0x800, 0x1) 1.104188786s ago: executing program 4 (id=4032): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000a600000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r7, r9, 0x25, 0x0, @val=@netkit={@void, @value=r7}}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r4}, 0x8) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000000c0)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000004f0be80000000000fcffffff180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f80000000002000008000000b703000009000000850000009300000095000000000000009b3f5a7e04d288daf070ebbe84267acfa7598aff09f8bb32a75dc5eedb7404ddc6550150a988749e25a3ef366ab9abdcf0583670694337b8920cd60c201d9ae48d18f5a67ba55ce29f1db6c5cf718d016258ba9ed196a2b67969a4c00947854461441152c9955b13c5bf1d7606b46ca3f939ab537e27bdf3c805"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r11, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) 1.037814263s ago: executing program 5 (id=4033): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffe0, 0xc}, {0x0, 0xfff1}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x24045810) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r3, @ANYBLOB="81ffffff000000001c0012800b0001006772659dd0ae65000c00028008000100", @ANYRES32, @ANYBLOB="08000d000000000008000400080008", @ANYRESHEX=r3, @ANYRESOCT=r1], 0x4c}}, 0x0) 911.239336ms ago: executing program 3 (id=4034): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000300}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x50}}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, &(0x7f00000005c0)) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002ebd7000fddbdf250200000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ffffffff740000000800a0009e090000080026008a09000008009f0000000000a163b924575a089800004772c4794b5092ac019cdc46838dff1f03669171602f9b40a37a09fd05fa3c50241d0bc4e4276c27837fe1644d8511683d49616aa6a7be8a4606b61d084e5d8c4505df0dc948f4a15cffe8a65b49197534406e1cdbdc3e21740d8a4fcf5be2aa34b066eb561eb3f11a1c25c56ac1bd8f6efbbe5f7785286f2f2adc231931"], 0x40}, 0x1, 0x0, 0x0, 0x24040015}, 0x20000000) 635.067172ms ago: executing program 5 (id=4035): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000480)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)}], 0x1, &(0x7f0000000440)=""/63, 0x3f}, 0x3}], 0x1, 0x3021, 0x0) (async) recvmmsg(r0, &(0x7f0000000480)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)}], 0x1, &(0x7f0000000440)=""/63, 0x3f}, 0x3}], 0x1, 0x3021, 0x0) shutdown(r0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) close(0x3) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r1, &(0x7f0000000000)=',)(/^-\x00', 0x210000, &(0x7f0000000080)={@_ha_fsid={[0xc, 0x7]}, {0x8, 0x1, 0x10, 0x3}}, 0x9, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 473.838476ms ago: executing program 2 (id=4036): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x14008045) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000400", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf255a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300000040000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x200448d0) 396.199279ms ago: executing program 5 (id=4037): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x6e, 0x8, 0x0, 0x79, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x48, 0x7, 0x95d, 0x73}}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000480)=0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r4, 0x25, 0x4, @val=@uprobe_multi={&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)=[0x8000], 0x0, 0xad, 0x1, 0x0, r5}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r8, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x10000, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000040)={0x6, 'syzkaller1\x00', {0x2}, 0xcba2}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) 208.859046ms ago: executing program 3 (id=4038): socket(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff2}, {0xe, 0xf}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000000100"], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x2, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="0b0bd46aea0b6ac3fd", @ANYRES16=r11, @ANYRES16=r7, @ANYRESHEX=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20008801}, 0x20000885) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) 208.487346ms ago: executing program 2 (id=4039): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYBLOB="00001000e000030000010001000000"], 0x38}}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x7f, 0x1, @vifc_lcl_ifindex=r4, @empty}, 0x10) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x9, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040004}, 0x40010) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f00000001c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x8}}], 0x18}, 0x40050) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000140)="a0002883591ecc0e", 0x8}, {&(0x7f0000000000)="67e136bbccd7a3bcf79e11ed421bfc33dac9d81c6a499e1c3352c96ce50d58b6cf36bebd74e88a84ffe3479ee118342350b9e2640234a5d45a451e551f28034302e4b43bf9bf7964cd2e9c94eb7dbbf747f8b2334a89a86f227dd3ac7af84a09925515960befafcf50485aa5950b07cc19d879af647b5e1cdab3b9f59a4f08aa4b4c10c57acc97a6aeb8a321b1ad4856636b68d6d68e80942c86bd73b961e23d275a8b2e8e8f5137", 0xa8}, {&(0x7f00000002c0)="2495218c74f5736f147789f0658facd1a1f9c736ef7e985b015ddfe79c2e4c561990601ae2e4b0f35f52c4877e06eb4a4e9b833199aee7a27c583ec29040bd1bfc954250fe647830ec937b6bc48ceaf25148abe31a14eb52e4f5e1e9450b9299c52c7d8cc1adf69e1d9163c21a1d8fe500445c1a6b3b3afde703c8e44c4eb032128e62c0", 0x84}, {&(0x7f0000000200)="75884266797c10c5a7fda12528b0270155eb2cabff4cd873d530bd3b35280c368fd589fb1a6a4375d7fe546318efe6b8de11ae36068483303ede8936a3e89404e6afffce1b70b179e45d765276da3d53ab4fb031a6049b6ce54acff2a76e50038e3c678858b29b5f9b942a0daa4a7d", 0x6f}, {&(0x7f0000000380)="b8b8616911735c1e65f067c12082295c1e8055d3e85b2bc143a9ec6ff784c2c55a8ac81a0d45f467594a0d15026262ac086b19dd4e020f557d9e80e41d0ad7dfc328e2491cd71043ddd7c605bd95f73923ef369959edbbb1ce6fa25b13e38358ecde9b78333e7d1050c5252c7430bfa03ed7d64e6a6193ed97889c6ddeb3dbfc355916bf1e705a1e4ed0515dfa98882a4146fac637272ee620c546d48d15d443b6dffb", 0xa3}, {&(0x7f0000000440)}, {&(0x7f0000000480)="53587339d0707769ff587a44227c6786d3d14117bb05e01ee4a0af754a41f1d6ce137d6a45d5b8c4672ba0d38bda892a9afc1db42baa9567a3f0cc1efacf47c8df284d68bde8d8d66da460657ea90da55a2036fea23a8955ecacedd327d49108992122d46d95cc508a5a5a314862dbb6c0f2c5a0081f58a9749ae533023e107237093e337e03c8b0a5d8649e3edea24efcc66553c4f2a3692468ae1f9f0074ceae8b145f89cf64cab57a2af400f1242f2fbcbbe7a7da03ccbcb56216e5ae68a76c8d34bfd6fea1e8d2dfe0d54ea9b94b4dad29f4587c0e5171e964b12a2c5a56b1a58072d6f6d1131969dfd13d58596b70a3db01a9", 0xf5}, {&(0x7f0000000880)="3f22add9811567ceaf01869bed63a1f1ecf73daf3052a9f8b87eea16a7bb7ee1d25c6156628346467fc9fa97140d1858fbeadce643df2fde329306313a42fd5d6b76508b", 0x44}, {&(0x7f0000000680)="940567988d2ab3edfce0200091c5f7716cf190504ebda81483d5ba7cd33baf6749db822c6c8d77c4846f56ef62ab2528f4218808dab27f4302570edd8b7026ec1259a986c986b71f27c4e54b5f175fb463e8114692dfceb3f956a974d08489ae94f56b1769e2015a2bc1d7030ebb342b8178f908449c2d881c2c1f8b9e511e571596f1dd3e1003f983218f9ebe42a7f21294dc85b8819b592bb0ecec25cab502035862af8c570485796a4e3867c180aaf8d795c38b49b6bafaf56285b7e280353132766070f8e38c027ad97b9a9432e3d7700b146a1e464f808c652b7b2d40a36f1de4f21bd547fa56b821", 0xeb}, {&(0x7f0000000780)="501bcfe3eda8ae731043716ebb084d40622e00308f8d9eb96583445731ae78ba9fe8b0dbdaf4ad616e69ccf7451acc4db4edc4c464ca20bf351214dc50ff9f50a2353a1b1c9ae8726e96a8251fcb3aa49cfcf7089ef24eb06b43ab2ef7e26965fa50860e775eb1741c1fc2179103452e5f28948c3579037ab7a4219db60ff27a912e08b52c69b9a36b5746d8afab2be24c3dc5a39acd76d9697e12778750d3012cd418075c91e55e69ad6d1d07c2a1fc5219291bd20f04bb494cfe04158b2a036c04fecabeb6747efa6ea9e2196dd868364e5883ecf44d5aad807074205786a906b065edee5d074bfc", 0xe9}, {&(0x7f0000000a00)="ddef6048fdda4f65a4caeb68c02e215f6c3b7a25e68cf11c47d94a97e4986b3f1dd3f1ef44a6cc75645f7ea444235cdb4e8d46a599ce9ea30b913707ccaac367040a2f8d216d97b16175e210025f56c434f44b1ff7ada542af7b71dc3e17e5703da6622396e9b50315b4aef58ac6929201050f1ad37b2e8a0ed02d90aec9af227f839a31518e56eda60588656118ffe21822c93ca0cc1a24dc8337ac8f3b7adb1a8a4ba1e1da098be198f73167efc79cc71256510a415e", 0xb7}], 0xb}}], 0x1, 0x40800) 128.06849ms ago: executing program 5 (id=4040): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@gettaction={0x54, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x24008840) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x113, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x4000) getsockopt$sock_int(r0, 0x1, 0x4a, 0x0, &(0x7f00000001c0)) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x300000, 0x1000, 0x9, 0x2}, 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x2c, @local, 0x4e23, 0x3, 'nq\x00', 0x8, 0xa, 0x56}, {@remote, 0x4e21, 0x10000, 0x8001, 0x4}}, 0x44) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) clock_gettime(0x8, 0x0) shutdown(r5, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 2 (id=4041): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0xa}, @empty, @local}, 0xc) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): [T14636] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 701.725554][T14636] ? sctp_v6_is_any+0x64/0x80 [ 701.725574][T14636] ? sctp_copy_one_addr+0x93/0x360 [ 701.725592][T14636] sctp_bind_addr_copy+0xb3/0x3c0 [ 701.725610][T14636] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 701.725639][T14636] sctp_connect_new_asoc+0x2ff/0x6b0 [ 701.725664][T14636] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 701.725692][T14636] ? __local_bh_enable_ip+0xd0/0x130 [ 701.725709][T14636] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 701.725733][T14636] ? security_sctp_bind_connect+0x7e/0x2c0 [ 701.725758][T14636] sctp_sendmsg+0x1576/0x2c50 [ 701.725777][T14636] ? unwind_next_frame+0xa6/0x2550 [ 701.725811][T14636] ? __pfx_sctp_sendmsg+0x10/0x10 [ 701.725836][T14636] ? aa_sk_perm+0x6d5/0x900 [ 701.725863][T14636] ? __pfx_aa_sk_perm+0x10/0x10 [ 701.725888][T14636] ? sock_rps_record_flow+0x19/0x350 [ 701.725909][T14636] ? inet_sendmsg+0x2f4/0x370 [ 701.725932][T14636] ____sys_sendmsg+0x80a/0x9f0 [ 701.725959][T14636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 701.725983][T14636] ? import_iovec+0x73/0xa0 [ 701.726007][T14636] ___sys_sendmsg+0x2a5/0x360 [ 701.726022][T14636] ? __lock_acquire+0x6b5/0x2cf0 [ 701.726046][T14636] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.726098][T14636] ? __fget_files+0x2a/0x420 [ 701.726119][T14636] ? __fget_files+0x3a0/0x420 [ 701.726148][T14636] __x64_sys_sendmsg+0x1bd/0x2a0 [ 701.726172][T14636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 701.726200][T14636] ? __pfx_ksys_write+0x10/0x10 [ 701.726233][T14636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.726251][T14636] do_syscall_64+0x174/0x580 [ 701.726266][T14636] ? trace_irq_disable+0x3b/0x140 [ 701.726290][T14636] ? clear_bhb_loop+0x40/0x90 [ 701.726311][T14636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.726327][T14636] RIP: 0033:0x7f7aadf9ce59 [ 701.726344][T14636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.726358][T14636] RSP: 002b:00007f7aaef1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.726376][T14636] RAX: ffffffffffffffda RBX: 00007f7aae215fa0 RCX: 00007f7aadf9ce59 [ 701.726387][T14636] RDX: 00000000240280d1 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 701.726397][T14636] RBP: 00007f7aaef1a090 R08: 0000000000000000 R09: 0000000000000000 [ 701.726407][T14636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 701.726417][T14636] R13: 00007f7aae216038 R14: 00007f7aae215fa0 R15: 00007ffe3b43f128 [ 701.726444][T14636] [ 702.077432][ T5778] tipc: Node number set to 134418688 [ 702.748312][T14660] netlink: 'syz.5.2275': attribute type 1 has an invalid length. [ 702.858798][T14660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 703.009623][T14660] bond4: (slave geneve3): making interface the new active one [ 703.036504][T14660] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 703.052657][T14471] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.065853][T14471] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.100921][T14471] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.130736][T14471] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.450508][T14683] __nla_validate_parse: 1 callbacks suppressed [ 703.450528][T14683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 703.522856][T14690] netlink: 'syz.4.2281': attribute type 1 has an invalid length. [ 703.522907][T14683] tc_dump_action: action bad kind [ 703.544445][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 703.583571][T14690] netlink: 'syz.4.2281': attribute type 1 has an invalid length. [ 703.881108][T14704] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2288'. [ 704.042719][T14704]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.095550][T14712] netlink: 'syz.4.2290': attribute type 1 has an invalid length. [ 704.115672][T14704]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.190376][T14704]  (unregistering): Released all slaves [ 704.202880][T10922] bridge6: port 2(veth0_to_bond) entered disabled state [ 704.351961][T14728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2290'. [ 704.365420][T14730] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2293'. [ 704.375771][T14730] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2293'. [ 704.389889][T14730] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2293'. [ 704.431640][T14717] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 704.573847][T14721] veth3: entered promiscuous mode [ 704.602867][T14728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.604511][ T6879] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 704.644257][T14740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2296'. [ 704.769777][T14742] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2297'. [ 704.794168][ T6881] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 705.413959][T14768] atomic_op ffff88801d7d2198 conn xmit_atomic 0000000000000000 [ 705.443718][T14772] netlink: 'syz.3.2304': attribute type 4 has an invalid length. [ 705.504078][T14772] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 705.648690][T14781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2308'. [ 706.092608][T14792] netlink: 'syz.4.2312': attribute type 1 has an invalid length. [ 706.163726][T14791] hsr_slave_1 (unregistering): left promiscuous mode [ 706.417698][T14806] raw_sendmsg: syz.3.2316 forgot to set AF_INET. Fix it! [ 707.150845][T14846] tipc: Enabled bearer , priority 24 [ 707.436945][T14858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.137474][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 708.260301][T14906] netlink: 'syz.5.2344': attribute type 1 has an invalid length. [ 708.435168][T14917] netlink: 'syz.2.2350': attribute type 4 has an invalid length. [ 708.444165][T14917] netlink: 'syz.2.2350': attribute type 4 has an invalid length. [ 708.455655][ T5867] lo speed is unknown, defaulting to 1000 [ 708.465184][T14917] __nla_validate_parse: 8 callbacks suppressed [ 708.465203][T14917] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2350'. [ 708.481091][ T5867] sz1: Port: 1 Link ACTIVE [ 708.490595][ T5867] lo speed is unknown, defaulting to 1000 [ 710.983716][T14889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 711.439999][T14933] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 711.524943][T14933] bond0: (slave lo): Error: Device can not be enslaved while up [ 711.899213][T14961] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2365'. [ 711.933762][T14963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2364'. [ 712.018939][T14961] bridge0: entered promiscuous mode [ 712.459662][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'. [ 712.568462][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'. [ 712.610079][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'. [ 712.757695][T15001] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2378'. [ 712.816239][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'. [ 713.092642][T15010] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 713.131852][T15010] nbd: error processing sock list [ 713.165734][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'. [ 713.614185][T15042] openvswitch: netlink: IPv4 tun info is not correct [ 713.818540][T15052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2391'. [ 713.857671][T15052] netlink: 'syz.2.2391': attribute type 7 has an invalid length. [ 713.888184][T15052] netlink: 'syz.2.2391': attribute type 8 has an invalid length. [ 713.903186][T15057] netlink: 'syz.4.2392': attribute type 2 has an invalid length. [ 713.903904][T15054] netlink: 'syz.2.2391': attribute type 16 has an invalid length. [ 713.963538][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2391'. [ 713.986463][T15055] netlink: 'syz.2.2391': attribute type 16 has an invalid length. [ 714.028982][T15055] netlink: 'syz.2.2391': attribute type 3 has an invalid length. [ 714.070748][T15065] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.2395'. [ 714.071890][T15054] netlink: 'syz.2.2391': attribute type 3 has an invalid length. [ 714.129157][T15055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2391'. [ 714.165728][T15054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2391'. [ 714.210514][T15071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2396'. [ 714.247584][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2396'. [ 714.445343][T15080] netlink: 'syz.3.2398': attribute type 1 has an invalid length. [ 714.492842][T15082] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2399'. [ 714.702249][T15080] 8021q: adding VLAN 0 to HW filter on device bond6 [ 715.036041][T15107] syzkaller1: entered promiscuous mode [ 715.062589][T15107] syzkaller1: entered allmulticast mode [ 715.363720][T15126] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 715.447101][T15134] syzkaller1: entered promiscuous mode [ 715.539521][T15134] syzkaller1: entered allmulticast mode [ 715.786268][T15150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2420'. [ 715.814246][T15155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2420'. [ 715.826501][T15154] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 716.458986][T15177] gtp1: entered promiscuous mode [ 716.490169][T15177] gtp1: entered allmulticast mode [ 716.573960][T15183] pim6reg: entered allmulticast mode [ 717.250128][T15216] syzkaller0: entered promiscuous mode [ 717.259848][T15216] syzkaller0: entered allmulticast mode [ 717.441533][T15223] macvlan0: left promiscuous mode [ 717.507780][T15223] tipc: Resetting bearer [ 717.533175][T15223] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 717.542719][T15223] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 717.553706][T15223] gtp0: left allmulticast mode [ 717.855611][ T5807] lo speed is unknown, defaulting to 1000 [ 717.916822][ T5807] sz1: Port: 1 Link DOWN [ 717.985873][ T5807] lo speed is unknown, defaulting to 1000 [ 718.304446][T15259] syzkaller0: left promiscuous mode [ 718.372168][T15259] syzkaller0: left allmulticast mode [ 718.729243][T15275] IPv6: sit1: Disabled Multicast RS [ 718.747080][T15279] veth0: entered promiscuous mode [ 718.811774][T15277] veth0: left promiscuous mode [ 718.991500][ T5699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.025380][ T5699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.064038][T15283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.100189][T15288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.112856][T15292] __nla_validate_parse: 7 callbacks suppressed [ 719.112874][T15292] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2462'. [ 719.459843][T15303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 719.517522][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2466'. [ 719.532286][T15310] veth1_to_bond: entered allmulticast mode [ 719.554522][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2465'. [ 719.633802][T15310] veth1_to_bond (unregistering): left allmulticast mode [ 719.811891][T15325] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2465'. [ 719.923596][T15310] bond0: (slave bond_slave_1): Releasing backup interface [ 719.967225][T15334] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2470'. [ 720.626940][T15351] bond5: invalid ARP target 0.0.0.0 specified for addition [ 720.654653][T15351] bond5: option arp_ip_target: invalid value (0) [ 720.666469][T15351] bond5 (unregistering): Released all slaves [ 720.694174][T15361] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2478'. [ 720.872466][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2479'. [ 721.177085][T15349] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 721.225612][T15349] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 721.474571][T15389] syzkaller1: entered promiscuous mode [ 721.493601][T15389] syzkaller1: entered allmulticast mode [ 722.022506][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2494'. [ 722.778657][T15454] veth3: entered allmulticast mode [ 722.923347][T15463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2509'. [ 723.542453][T15490] netlink: set zone limit has 4 unknown bytes [ 725.417537][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 725.832088][T15458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.846438][T15494] nbd: illegal input index 2958377 [ 726.096777][T15511] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2523'. [ 726.102175][T15514] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2525'. [ 726.118649][T15515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2524'. [ 726.149622][T15511] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2523'. [ 726.159694][T15509] lo: Caught tx_queue_len zero misconfig [ 726.269565][T15511] erspan0: entered promiscuous mode [ 726.291899][T15511] gretap0: entered promiscuous mode [ 726.325325][T15511] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 726.370229][T15511] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 726.470598][T15509] syzkaller0: entered promiscuous mode [ 726.476079][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'. [ 726.520688][T15509] syzkaller0: entered allmulticast mode [ 726.719945][T15543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2531'. [ 726.771717][T15543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2531'. [ 726.804298][T15536] syzkaller0: entered promiscuous mode [ 726.822637][T15536] syzkaller0: entered allmulticast mode [ 726.988126][T15551] xt_hashlimit: size too large, truncated to 1048576 [ 727.027228][T15552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2533'. [ 727.133343][T15557] tipc: Resetting bearer [ 727.226733][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2537'. [ 727.455673][T15568] netlink: 81 bytes leftover after parsing attributes in process `syz.5.2538'. [ 728.142646][T15606] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 728.187798][T15606] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 728.215331][T15606] tipc: Resetting bearer [ 728.708554][T15635] netlink: 'syz.2.2556': attribute type 39 has an invalid length. [ 728.748909][T15639] IPv6: sit2: Disabled Multicast RS [ 728.814433][T15635] syz_tun (unregistering): left allmulticast mode [ 729.771857][T15686] veth1_vlan: entered promiscuous mode [ 729.805938][T15686] macvtap1: entered promiscuous mode [ 729.820508][T15686] macvtap1: entered allmulticast mode [ 729.866179][T15686] veth1_vlan: entered allmulticast mode [ 729.958376][T15692] macvtap2: entered promiscuous mode [ 729.984267][T15692] macvtap2: entered allmulticast mode [ 730.203774][T15707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.099062][T15758] __nla_validate_parse: 39 callbacks suppressed [ 731.099083][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2592'. [ 731.178229][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2592'. [ 731.207216][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2592'. [ 731.238827][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2592'. [ 731.268094][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2592'. [ 731.285463][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2592'. [ 731.324768][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2592'. [ 731.365388][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2592'. [ 731.412610][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2592'. [ 731.495625][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2592'. [ 731.763397][T15790] xt_hashlimit: size too large, truncated to 1048576 [ 732.112948][T15808] netlink: 'syz.0.2606': attribute type 1 has an invalid length. [ 732.778932][T15835] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 733.006922][T15845] netem: change failed [ 733.507689][T15870] FAULT_INJECTION: forcing a failure. [ 733.507689][T15870] name failslab, interval 1, probability 0, space 0, times 0 [ 733.572851][T15870] CPU: 0 UID: 0 PID: 15870 Comm: syz.0.2627 Not tainted syzkaller #0 PREEMPT(full) [ 733.572878][T15870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 733.572890][T15870] Call Trace: [ 733.572898][T15870] [ 733.572906][T15870] dump_stack_lvl+0xe8/0x150 [ 733.572933][T15870] should_fail_ex+0x412/0x560 [ 733.572959][T15870] should_failslab+0xa8/0x100 [ 733.572980][T15870] __kmalloc_cache_noprof+0x88/0x660 [ 733.573003][T15870] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 733.573022][T15870] ? sctp_add_bind_addr+0x8c/0x370 [ 733.573045][T15870] sctp_add_bind_addr+0x8c/0x370 [ 733.573067][T15870] sctp_copy_local_addr_list+0x314/0x4f0 [ 733.573089][T15870] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 733.573106][T15870] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 733.573125][T15870] ? sctp_v6_is_any+0x64/0x80 [ 733.573143][T15870] ? sctp_copy_one_addr+0x93/0x360 [ 733.573163][T15870] sctp_bind_addr_copy+0xb3/0x3c0 [ 733.573182][T15870] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 733.573211][T15870] sctp_connect_new_asoc+0x2ff/0x6b0 [ 733.573235][T15870] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 733.573263][T15870] ? __local_bh_enable_ip+0xd0/0x130 [ 733.573277][T15870] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 733.573298][T15870] ? security_sctp_bind_connect+0x7e/0x2c0 [ 733.573320][T15870] sctp_sendmsg+0x1576/0x2c50 [ 733.573338][T15870] ? unwind_next_frame+0xa6/0x2550 [ 733.573370][T15870] ? __pfx_sctp_sendmsg+0x10/0x10 [ 733.573395][T15870] ? aa_sk_perm+0x6d5/0x900 [ 733.573427][T15870] ? __pfx_aa_sk_perm+0x10/0x10 [ 733.573453][T15870] ? sock_rps_record_flow+0x19/0x350 [ 733.573476][T15870] ? inet_sendmsg+0x2f4/0x370 [ 733.573498][T15870] ____sys_sendmsg+0x80a/0x9f0 [ 733.573526][T15870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.573550][T15870] ? import_iovec+0x73/0xa0 [ 733.573575][T15870] ___sys_sendmsg+0x2a5/0x360 [ 733.573592][T15870] ? __lock_acquire+0x6b5/0x2cf0 [ 733.573625][T15870] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.573677][T15870] ? __fget_files+0x2a/0x420 [ 733.573698][T15870] ? __fget_files+0x3a0/0x420 [ 733.573729][T15870] __x64_sys_sendmsg+0x1bd/0x2a0 [ 733.573751][T15870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 733.573782][T15870] ? __pfx_ksys_write+0x10/0x10 [ 733.573817][T15870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.573836][T15870] do_syscall_64+0x174/0x580 [ 733.573853][T15870] ? trace_irq_disable+0x3b/0x140 [ 733.573877][T15870] ? clear_bhb_loop+0x40/0x90 [ 733.573896][T15870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.573914][T15870] RIP: 0033:0x7fbd0d59ce59 [ 733.573932][T15870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.573947][T15870] RSP: 002b:00007fbd0e443028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.573966][T15870] RAX: ffffffffffffffda RBX: 00007fbd0d815fa0 RCX: 00007fbd0d59ce59 [ 733.573979][T15870] RDX: 00000000240280d1 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 733.573990][T15870] RBP: 00007fbd0e443090 R08: 0000000000000000 R09: 0000000000000000 [ 733.574002][T15870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 733.574010][T15870] R13: 00007fbd0d816038 R14: 00007fbd0d815fa0 R15: 00007ffef1be40f8 [ 733.574038][T15870] [ 733.908375][T15877] x_tables: duplicate underflow at hook 1 [ 734.509913][T15897] veth1_to_bond: entered allmulticast mode [ 734.546180][T15897] veth1_to_bond (unregistering): left allmulticast mode [ 734.778441][T15910] sit0: Caught tx_queue_len zero misconfig [ 734.803993][T15905] netlink: 'syz.0.2639': attribute type 21 has an invalid length. [ 735.055327][T15914] netlink: 'syz.3.2641': attribute type 1 has an invalid length. [ 735.109099][T15915] veth5: entered allmulticast mode [ 735.297094][T15926] tipc: Resetting bearer [ 735.325366][T15926] vlan0: entered promiscuous mode [ 735.353275][T15926] bond4: entered promiscuous mode [ 735.382007][T15926] geneve3: entered promiscuous mode [ 735.469775][T15930] netlink: 'syz.3.2647': attribute type 2 has an invalid length. [ 735.986111][T15954] netlink: 'syz.5.2654': attribute type 1 has an invalid length. [ 736.011270][T15954] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 736.297012][T15967] __nla_validate_parse: 41 callbacks suppressed [ 736.297034][T15967] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2660'. [ 736.655897][T15984] syzkaller1: entered promiscuous mode [ 736.664633][T15984] syzkaller1: entered allmulticast mode [ 736.795570][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2669'. [ 736.856364][T16000] netlink: 'syz.3.2669': attribute type 30 has an invalid length. [ 736.933436][ T6884] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 736.966369][T16006] block nbd1: Unsupported socket: should be TCP or UNIX. [ 736.975767][ T6884] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.034903][ T6884] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.081651][ T6884] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.149442][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'. [ 737.196113][T16018] netlink: 83 bytes leftover after parsing attributes in process `syz.2.2673'. [ 737.501421][T16028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2678'. [ 737.558119][T16033] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2680'. [ 737.559166][T16034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2679'. [ 737.571906][T16033] xt_policy: neither incoming nor outgoing policy selected [ 737.615655][T16034] netlink: 'syz.3.2679': attribute type 7 has an invalid length. [ 737.874849][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2684'. [ 737.908238][T16048] tunl0: Caught tx_queue_len zero misconfig [ 737.934852][T16048] netlink: 48845 bytes leftover after parsing attributes in process `syz.3.2684'. [ 738.091557][T16053] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 738.557742][ T5697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.583780][ T5697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.879272][T16082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 738.949694][T16085] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2700'. [ 740.085970][ T4950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 740.100829][ T4950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 740.125262][ T4950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 740.139377][ T4950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 740.149409][ T4950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 740.205655][T16121] bond5: entered promiscuous mode [ 740.283258][T16126] macvlan0: entered promiscuous mode [ 740.292500][T16126] macvlan0: entered allmulticast mode [ 740.301110][T16126] bond5: (slave macvlan0): Opening slave failed [ 740.770663][T16123] lo speed is unknown, defaulting to 1000 [ 741.222573][T16123] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.230578][T16123] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.238946][T16123] bridge_slave_0: entered allmulticast mode [ 741.248162][T16123] bridge_slave_0: entered promiscuous mode [ 741.257070][T16123] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.283063][T16123] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.292612][T16123] bridge_slave_1: entered allmulticast mode [ 741.300003][T16123] bridge_slave_1: entered promiscuous mode [ 741.335543][T16123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.355071][T16123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.391301][T16123] team0: Port device team_slave_0 added [ 741.401370][T16123] team0: Port device team_slave_1 added [ 741.435341][T16123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.442448][T16123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.471590][T16123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.485226][T16123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.492323][T16123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.518750][T16123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.569714][T16123] hsr_slave_0: entered promiscuous mode [ 741.576370][T16123] hsr_slave_1: entered promiscuous mode [ 741.988194][T16123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.000216][T16123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.138605][T16123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.149250][T16123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.218848][ T4950] Bluetooth: hci3: command tx timeout [ 742.276148][T16123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.289063][T16123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.833390][T16112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.886198][T16123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 742.975804][T16123] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 743.001137][T16123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 743.065101][T16123] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.066838][T16177] x_tables: duplicate underflow at hook 2 [ 743.094922][T16123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 743.108163][T16179] __nla_validate_parse: 5 callbacks suppressed [ 743.108181][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2717'. [ 743.146122][T16123] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 743.169703][T16123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 743.203222][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2716'. [ 743.217678][T16123] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 743.474353][T16202] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 743.680524][T16123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.716437][T16207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.772933][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2722'. [ 743.786523][T16123] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.814712][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2722'. [ 743.822507][T16211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2724'. [ 743.869961][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.877711][ T6884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.916395][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.923686][ T6884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.304945][ T4950] Bluetooth: hci3: command tx timeout [ 744.458345][T16228] geneve1: entered promiscuous mode [ 744.511789][T16235] macvtap1: entered promiscuous mode [ 744.527785][T16235] macvtap1: entered allmulticast mode [ 744.542195][T16235] veth1_vlan: entered allmulticast mode [ 744.640075][T16226] macvtap2: entered promiscuous mode [ 744.645684][T16226] macvtap2: entered allmulticast mode [ 744.886658][T16252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2736'. [ 744.916997][T16250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.072354][T16262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2740'. [ 745.269094][T16265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2741'. [ 745.494767][T16123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.762667][T16123] veth0_vlan: entered promiscuous mode [ 745.845632][T16123] veth1_vlan: entered promiscuous mode [ 746.017107][T16123] veth0_macvtap: entered promiscuous mode [ 746.063488][T16123] veth1_macvtap: entered promiscuous mode [ 746.175644][T16123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.211168][T16123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.255684][T13957] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.289498][T13957] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.333142][T13957] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.377807][ T4950] Bluetooth: hci3: command tx timeout [ 746.386156][T13957] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.689124][T14471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.721475][T14471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.826553][T16335] netlink: 'syz.4.2760': attribute type 29 has an invalid length. [ 746.893866][T13957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.947144][T13957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.182988][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.269204][T16349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2762'. [ 747.451078][T16352] syzkaller0: entered promiscuous mode [ 747.457445][T16352] syzkaller0: entered allmulticast mode [ 747.482192][T16357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.509842][T16358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.014467][T16374] bond6: option lp_interval: invalid value (0) [ 748.029311][T16374] bond6: option lp_interval: allowed values 1 - 2147483647 [ 748.044823][T16374] bond6 (unregistering): Released all slaves [ 748.409402][T16394] netlink: 'syz.0.2771': attribute type 7 has an invalid length. [ 748.457849][ T4950] Bluetooth: hci3: command tx timeout [ 748.474506][T10921] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.474522][T16394] netlink: 'syz.0.2771': attribute type 7 has an invalid length. [ 748.510875][T16398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2773'. [ 748.515910][T10921] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.534226][T10921] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.554562][T10921] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.583504][T16399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2774'. [ 748.781101][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'. [ 748.899083][T16417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2779'. [ 748.951375][T16417] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 748.983432][T16417] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2779'. [ 749.079153][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'. [ 749.404886][T16445] Bluetooth: MGMT ver 1.23 [ 752.343422][T10921] gretap0: left allmulticast mode [ 752.348868][T10921] bridge0: port 1(gretap0) entered disabled state [ 752.368358][T10921] veth0_to_bond: left allmulticast mode [ 752.374066][T10921] veth0_to_bond: left promiscuous mode [ 752.381284][T10921] bridge6: port 2(veth0_to_bond) entered disabled state [ 752.398901][T10921] veth5: left allmulticast mode [ 752.403823][T10921] veth5: left promiscuous mode [ 752.408971][T10921] bridge6: port 1(veth5) entered disabled state [ 752.423299][T10921] dvmrp0: left allmulticast mode [ 752.431055][T10921] tipc: Resetting bearer [ 752.805548][T10921] tipc: Disabling bearer [ 753.036139][T10921] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 753.084626][T10921] team0: Port device geneve1 removed [ 753.560936][T10921] bond1 (unregistering): Released all slaves [ 753.580380][T10921] bond0 (unregistering): Released all slaves [ 753.593916][T10921] bond2 (unregistering): Released all slaves [ 753.611523][T10921] bond3 (unregistering): (slave bond4): Releasing backup interface [ 753.623634][T10921] bond3 (unregistering): Released all slaves [ 753.645170][T10921] bond4 (unregistering): Released all slaves [ 753.659340][T10921] bond5 (unregistering): Released all slaves [ 753.677789][T10921] bond6 (unregistering): Released all slaves [ 753.703606][T10921] bond7 (unregistering): Released all slaves [ 753.720616][T10921] bond8 (unregistering): Released all slaves [ 753.745600][T10921] bond9 (unregistering): Released all slaves [ 753.783400][T10921] bond10 (unregistering): Released all slaves [ 754.123068][T10921] tipc: Left network mode [ 756.012343][T10921] hsr_slave_0: left promiscuous mode [ 756.019956][T10921] hsr_slave_1: left promiscuous mode [ 756.034552][T10921] veth1_vlan: left allmulticast mode [ 756.040480][T10921] veth1_macvtap: left promiscuous mode [ 756.045990][T10921] veth0_macvtap: left promiscuous mode [ 756.051851][T10921] veth1_vlan: left promiscuous mode [ 756.057140][T10921] veth0_vlan: left promiscuous mode [ 756.365457][T10921] team0 (unregistering): Port device team_slave_1 removed [ 756.386499][T10921] team0 (unregistering): Port device team_slave_0 removed [ 756.886335][T10921] IPVS: stop unused estimator thread 0... [ 773.393704][T16566] xt_CT: You must specify a L4 protocol and not use inversions on it [ 773.417048][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2793'. [ 773.421045][T16564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 773.562128][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2793'. [ 773.912126][T16595] netlink: 816 bytes leftover after parsing attributes in process `syz.5.2800'. [ 774.086103][T16601] netlink: 'syz.2.2802': attribute type 10 has an invalid length. [ 774.122833][T16601] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2802'. [ 774.304022][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2806'. [ 774.983930][T16647] netem: change failed [ 775.462280][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2821'. [ 775.509903][T16673] netlink: 'syz.4.2821': attribute type 14 has an invalid length. [ 775.540426][T16673] netlink: 'syz.4.2821': attribute type 13 has an invalid length. [ 775.565182][T16679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2821'. [ 776.194854][T16687] erspan0: entered allmulticast mode [ 776.323025][T16695] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 776.638730][T16715] netlink: 'syz.2.2828': attribute type 1 has an invalid length. [ 776.698052][T16715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2828'. [ 777.431385][T16750] syzkaller0: entered promiscuous mode [ 777.458438][T16750] syzkaller0: entered allmulticast mode [ 778.121757][T16787] netlink: 'syz.2.2845': attribute type 8 has an invalid length. [ 778.153691][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 778.182242][T16791] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2847'. [ 779.053378][T16830] __nla_validate_parse: 2 callbacks suppressed [ 779.053398][T16830] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2859'. [ 779.123007][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2860'. [ 779.464991][T16846] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 780.104463][T16883] nbd: must specify at least one socket [ 780.290860][T16896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 780.691758][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2884'. [ 780.921781][T16931] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2889'. [ 781.286424][T16943] netlink: 'syz.2.2893': attribute type 18 has an invalid length. [ 781.339481][ T3316] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.353247][T16943] netlink: 'syz.2.2893': attribute type 18 has an invalid length. [ 781.373773][ T5697] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.433876][ T5697] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.486963][ T5697] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.515585][T16950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2896'. [ 781.542556][T16945] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2894'. [ 781.587439][T16945] netlink: ct family unspecified [ 782.002144][T16967] netlink: 'syz.5.2899': attribute type 39 has an invalid length. [ 782.754560][T16988] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2903'. [ 782.895519][T16988] 0·: renamed from hsr0 (while UP) [ 782.968140][T16988] 0·: entered allmulticast mode [ 782.981313][T16988] hsr_slave_0: entered allmulticast mode [ 782.988410][T16988] hsr_slave_1: entered allmulticast mode [ 783.022270][T16997] netlink: 'syz.0.2903': attribute type 1 has an invalid length. [ 783.036541][T16988] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 783.085702][T16999] Cannot find del_set index 3 as target [ 783.849535][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2914'. [ 784.247851][T17010] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.264132][T17010] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.800627][T17010] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.851453][T17010] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.923682][T17058] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 785.249301][T17010] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.292579][T17010] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.320241][T17072] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2925'. [ 785.552108][T17082] netlink: 'syz.2.2926': attribute type 1 has an invalid length. [ 785.708600][T17087] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2926'. [ 785.896525][T17010] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.993435][T17010] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.202642][T17087] 0·: renamed from hsr0 [ 786.235190][T17087] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 786.278054][T17087] 0·: entered allmulticast mode [ 786.298290][ T5674] Bluetooth: hci3: command 0x0405 tx timeout [ 786.324999][T17087] hsr_slave_0: entered allmulticast mode [ 786.374123][T17087] 8021q: adding VLAN 0 to HW filter on device c0· [ 786.413743][T17087] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 786.565342][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2932'. [ 787.042539][T17121] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2935'. [ 787.142926][T17124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2936'. [ 787.300390][ T5699] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.331105][ T5699] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.514223][ T5699] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.554037][ T5699] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.954084][ T5697] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.005204][ T5697] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.145869][ T6884] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.197781][ T6884] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.343227][T17145] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 788.847917][T17157] macvtap1: entered promiscuous mode [ 788.871626][T17161] netlink: 'syz.5.2946': attribute type 1 has an invalid length. [ 788.881936][T17157] macvtap1: entered allmulticast mode [ 788.895939][T17157] veth1_vlan: entered allmulticast mode [ 788.990496][T17133] bond0: (slave gre0): refused to change device type [ 789.026030][T17161] bond6: entered promiscuous mode [ 789.032243][T17161] 8021q: adding VLAN 0 to HW filter on device bond6 [ 789.505472][T17182] xt_hashlimit: size too large, truncated to 1048576 [ 790.186108][T17199] Cannot find del_set index 3 as target [ 790.416315][T17213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2956'. [ 790.556220][T17221] netlink: 'syz.0.2956': attribute type 32 has an invalid length. [ 790.573483][T17211] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.2960'. [ 790.592506][ T5674] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 790.626230][T17220] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.2960'. [ 790.641043][T17221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 790.660703][ T5674] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 790.674341][ T5674] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 790.690052][ T5674] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 790.705229][ T5674] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 790.996332][T17221] bond1: option coupled_control: invalid value (40) [ 791.041915][T17221] bond1 (unregistering): Released all slaves [ 791.505925][T17241] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2965'. [ 791.522962][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'. [ 791.562639][T17245] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2965'. [ 791.776784][T17253] netlink: 'syz.3.2968': attribute type 39 has an invalid length. [ 791.892060][T17255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2965'. [ 791.908763][T13957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.921155][T13957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.347509][T13957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.404747][T13957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.431136][ T29] audit: type=1800 audit(1780974733.564:6): pid=17255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2965" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 792.455426][T17255] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 792.503244][T17255] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 792.571956][T17255] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 792.777771][ T4950] Bluetooth: hci4: command tx timeout [ 792.808848][T13957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.831761][T13957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.019607][T17279] veth1_vlan (unregistering): left allmulticast mode [ 793.294877][T17287] can: request_module (can-proto-0) failed. [ 793.667448][T17296] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2977'. [ 794.068602][T17217] lo speed is unknown, defaulting to 1000 [ 794.726100][T17304] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.733846][T17304] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.805938][T17325] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 794.858702][ T4950] Bluetooth: hci4: command 0x041b tx timeout [ 794.975900][T17304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.995823][T17304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.024255][T17304] 0·: left allmulticast mode [ 795.031638][T17304] hsr_slave_0: left allmulticast mode [ 795.037153][T17304] hsr_slave_1: left allmulticast mode [ 795.216113][T17304] veth1_vlan: left allmulticast mode [ 795.227445][T17304] macvtap1: left promiscuous mode [ 795.237488][T17304] macvtap1: left allmulticast mode [ 795.306691][T10922] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.350689][T10922] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.385133][T10922] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.445692][T10922] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.576756][T10922] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.637919][T10922] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.675537][T17342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2990'. [ 795.706178][T10922] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.730615][T10922] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.921036][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2991'. [ 796.044442][T17354] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2994'. [ 796.421488][T17366] netlink: 'syz.2.2995': attribute type 10 has an invalid length. [ 796.430441][T17366] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2995'. [ 796.486512][T17368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2996'. [ 796.506027][T17366] team0: entered allmulticast mode [ 796.513280][T17366] gtp0: entered allmulticast mode [ 796.531321][T17366] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 796.680434][T17379] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.2997'. [ 796.707813][T17379] netlink: Unknown conntrack attr (type=2304, max=9) [ 796.909893][T13957] tipc: Resetting bearer [ 796.938480][ T4950] Bluetooth: hci4: command 0x041b tx timeout [ 797.093980][T17389] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.3001'. [ 797.830452][T13957] bond0 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 797.845696][T13957] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 798.155649][T13957] tipc: Disabling bearer [ 798.926386][T13957] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.944461][T13957] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.954878][T13957] .` (unregistering): Released all slaves [ 798.971219][T13957] bond1 (unregistering): Released all slaves [ 799.005782][T13957] bond2 (unregistering): Released all slaves [ 799.017485][ T4950] Bluetooth: hci4: command 0x041b tx timeout [ 799.054210][T13957] bond3 (unregistering): Released all slaves [ 799.075632][T13957] bond4 (unregistering): Released all slaves [ 799.103661][T13957] bond5 (unregistering): Released all slaves [ 799.141364][T13957] bond6 (unregistering): Released all slaves [ 799.164052][T13957] bond0 (unregistering): Released all slaves [ 799.316536][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5 [ 799.756807][T13957] tipc: Left network mode [ 800.011165][T17437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3013'. [ 800.145019][T17444] tipc: Enabling of bearer rejected, media not registered [ 800.239339][T17443] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 800.695943][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3018'. [ 801.098809][ T4950] Bluetooth: hci4: command 0x041b tx timeout [ 801.607814][T17490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3023'. [ 801.696132][T17490] netlink: 'syz.2.3023': attribute type 1 has an invalid length. [ 801.735826][T17490] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3023'. [ 801.867403][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'. [ 801.896833][T17217] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.950186][T17217] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.981291][T17217] bridge_slave_0: entered allmulticast mode [ 802.023773][T17217] bridge_slave_0: entered promiscuous mode [ 802.073985][T17505] syzkaller0: entered promiscuous mode [ 802.101723][T17505] syzkaller0: entered allmulticast mode [ 802.170043][T17502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3025'. [ 802.306721][T17516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3027'. [ 802.342859][T17217] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.392925][T17217] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.459618][T17217] bridge_slave_1: entered allmulticast mode [ 802.513336][T17217] bridge_slave_1: entered promiscuous mode [ 802.979741][T17217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.000230][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6 [ 803.094189][T17530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 803.101527][T17530] IPv6: NLM_F_CREATE should be set when creating new route [ 803.108838][T17530] IPv6: NLM_F_CREATE should be set when creating new route [ 803.454707][T17217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.556929][T17541] x_tables: duplicate underflow at hook 4 [ 803.755707][T17548] netlink: 'syz.2.3035': attribute type 1 has an invalid length. [ 804.056364][T17534] syzkaller1: entered promiscuous mode [ 804.074324][T17534] syzkaller1: entered allmulticast mode [ 804.372227][T17548] bond7: entered promiscuous mode [ 804.447785][T17548] 8021q: adding VLAN 0 to HW filter on device bond7 [ 804.478144][T17548] netlink: 'syz.2.3035': attribute type 1 has an invalid length. [ 804.510837][T17563] netlink: 'syz.5.3039': attribute type 3 has an invalid length. [ 804.525900][T17563] netlink: 'syz.5.3039': attribute type 1 has an invalid length. [ 804.536551][T17563] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3039'. [ 804.571602][T17217] team0: Port device team_slave_0 added [ 804.715862][T13957] hsr_slave_0: left promiscuous mode [ 804.775687][T13957] hsr_slave_1: left promiscuous mode [ 804.781730][T17565] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3040'. [ 804.813902][T13957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.846692][T13957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.945357][T13957] veth1_macvtap: left promiscuous mode [ 804.967361][T13957] veth0_macvtap: left promiscuous mode [ 804.994978][T13957] veth1_vlan: left promiscuous mode [ 805.007807][T13957] veth0_vlan: left promiscuous mode [ 805.382579][T13957] pim6reg (unregistering): left allmulticast mode [ 805.435218][T13957] team0 (unregistering): Port device batadv1 removed [ 806.129294][T17593] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 806.186199][T13957] team0 (unregistering): Port device team_slave_1 removed [ 806.207669][T13957] team0 (unregistering): Port device team_slave_0 removed [ 806.400421][T17217] team0: Port device team_slave_1 added [ 806.452500][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'. [ 806.559352][T17217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.602038][T17217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.727442][T17217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.835530][T17601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.909867][T17217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.945920][T17217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.062167][T17217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.269567][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3050'. [ 807.604691][T17217] hsr_slave_0: entered promiscuous mode [ 807.636516][T17217] hsr_slave_1: entered promiscuous mode [ 807.807012][T17629] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3054'. [ 807.968339][T17627] tipc: Started in network mode [ 808.033478][T17627] tipc: Node identity ae813be335a6, cluster identity 4711 [ 808.112124][T17627] tipc: Enabled bearer , priority 0 [ 808.138499][T17630] syzkaller0: entered promiscuous mode [ 808.185407][T17647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3057'. [ 808.205419][T17630] syzkaller0: entered allmulticast mode [ 808.306176][T13957] IPVS: stop unused estimator thread 0... [ 808.385153][T17627] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3053'. [ 808.423136][T17630] tipc: Resetting bearer [ 808.483319][T17626] tipc: Resetting bearer [ 808.635147][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.666088][T17626] tipc: Disabling bearer [ 808.689536][T17656] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3059'. [ 808.795581][T17658] netlink: 'syz.3.3060': attribute type 30 has an invalid length. [ 809.155659][T17658] bond7: option arp_missed_max: invalid value (0) [ 809.187336][T17658] bond7: option arp_missed_max: allowed values 1 - 255 [ 809.226165][T17658] bond7 (unregistering): Released all slaves [ 809.616053][ T5295] 8021q: adding VLAN 0 to HW filter on device eth7 [ 811.578948][T17733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3075'. [ 811.664189][T17721] vlan1: entered promiscuous mode [ 811.691501][T17730] netlink: 'syz.2.3075': attribute type 4 has an invalid length. [ 812.136711][T17749] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3078'. [ 812.317948][T17755] block nbd1: server does not support multiple connections per device. [ 812.369080][T17755] block nbd1: shutting down sockets [ 812.957122][T17774] syzkaller1: entered promiscuous mode [ 812.986961][T17774] syzkaller1: entered allmulticast mode [ 813.294948][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3087'. [ 813.762664][T17797] tipc: Failed to remove unknown binding: 66,1,1/2263758838:4039346692/4039346694 [ 813.946939][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3092'. [ 814.107925][T17217] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 814.206822][T17217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 814.253857][T17217] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 814.308118][T17217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 814.321194][T17812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.340075][T17217] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 814.414990][T17217] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 814.459803][T17816] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3094'. [ 814.533088][T17816] tipc: Enabling of bearer rejected, failed to enable media [ 814.591822][T17217] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 814.624443][T17825] openvswitch: netlink: Key 11 has unexpected len 16 expected 2 [ 814.670045][T17217] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 815.304509][T17217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.355456][T17850] netlink: 'syz.5.3102': attribute type 33 has an invalid length. [ 815.502064][T17217] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.587119][ T5697] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.594397][ T5697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.646723][T17857] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 815.692340][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.699733][ T6341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.789493][T17857] 8021q: VLANs not supported on sit0 [ 816.019792][T17863] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3105'. [ 816.350561][T17871] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3107'. [ 816.752484][T17885] netlink: 'syz.5.3111': attribute type 3 has an invalid length. [ 817.252232][T17900] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 817.334771][T17906] netlink: 'syz.2.3117': attribute type 4 has an invalid length. [ 817.839519][T17920] syzkaller1: entered promiscuous mode [ 817.870074][T17920] syzkaller1: entered allmulticast mode [ 818.112254][T17932] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3121'. [ 818.470910][T17942] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3124'. [ 818.606382][T17949] netlink: 'syz.3.3125': attribute type 10 has an invalid length. [ 818.649416][T17217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.668260][T17949] ipvlan0: entered allmulticast mode [ 818.735306][T17949] team0: Device ipvlan0 failed to register rx_handler [ 818.773077][T17949] tipc: Resetting bearer [ 819.846034][T17217] veth0_vlan: entered promiscuous mode [ 819.915032][T17217] veth1_vlan: entered promiscuous mode [ 820.015948][T17217] veth0_macvtap: entered promiscuous mode [ 820.034074][T17217] veth1_macvtap: entered promiscuous mode [ 820.083041][T17217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.113815][T17217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.134602][T14471] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.154030][T14471] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.188979][T14471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.201898][T14471] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.723041][T17920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 821.300885][ T6879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.364819][ T6879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.911763][T14471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.921287][T18033] sctp: [Deprecated]: syz.2.3135 (pid 18033) Use of int in maxseg socket option. [ 821.921287][T18033] Use struct sctp_assoc_value instead [ 821.928371][T14471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.461841][T18047] IPv6: Can't replace route, no match found [ 822.539856][T18053] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 822.559053][T17331] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 822.941328][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3142'. [ 822.987882][T18064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3142'. [ 823.010771][T18064] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3142'. [ 823.156717][ T5674] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 823.173954][ T5674] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 823.189071][ T5674] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 823.204307][ T5674] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 823.222421][ T5674] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 823.578615][T17334] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 823.631375][T14471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.781724][T14471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.877058][T14471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.944255][T18068] lo speed is unknown, defaulting to 1000 [ 824.030900][T14471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.513265][T18017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 824.625493][T14471] dvmrp0: left allmulticast mode [ 824.659582][T14471] lo: left allmulticast mode [ 824.851511][T14471] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 824.921195][T14471] bond4 (unregistering): (slave ip6gretap0): Releasing active interface [ 825.267783][ T5674] Bluetooth: hci2: command tx timeout [ 825.560171][T14471] gtp0 (unregistering): left allmulticast mode [ 825.570119][T14471] team0: Port device gtp0 removed [ 825.866489][T14471] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 826.023804][T14471] bond0 (unregistering): Released all slaves [ 826.037197][T14471] bond1 (unregistering): Released all slaves [ 826.056311][T14471] bond2 (unregistering): Released all slaves [ 826.098227][T14471] bond3 (unregistering): Released all slaves [ 826.142481][T14471] bond4 (unregistering): Released all slaves [ 826.163629][T14471] bond5 (unregistering): Released all slaves [ 826.193611][T14471] bond6 (unregistering): Released all slaves [ 826.213493][T14471] bond7 (unregistering): Released all slaves [ 826.585266][T18115] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3149'. [ 826.594460][T14471] tipc: Disabling bearer [ 826.665407][T14471] tipc: Left network mode [ 827.339351][ T5674] Bluetooth: hci2: command tx timeout [ 827.896526][T18156] netlink: 'syz.3.3157': attribute type 1 has an invalid length. [ 827.925331][T18156] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3157'. [ 827.957637][T18156] netlink: 'syz.3.3157': attribute type 1 has an invalid length. [ 827.984578][T18156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3157'. [ 828.059263][T18153] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3156'. [ 828.922758][T18186] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3164'. [ 828.955699][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5 [ 829.022722][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3165'. [ 829.358327][T18190] netlink: 'syz.0.3165': attribute type 5 has an invalid length. [ 829.367630][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3165'. [ 829.417409][ T5674] Bluetooth: hci2: command tx timeout [ 829.455781][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 829.469538][T18202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3168'. [ 829.485008][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 829.730887][T18068] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.738521][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 829.771611][T18068] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.787782][T18068] bridge_slave_0: entered allmulticast mode [ 829.847377][T18068] bridge_slave_0: entered promiscuous mode [ 829.885736][T18068] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.924365][T18068] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.969227][T18068] bridge_slave_1: entered allmulticast mode [ 830.042961][T18068] bridge_slave_1: entered promiscuous mode [ 830.140774][T18228] netlink: 'syz.5.3174': attribute type 8 has an invalid length. [ 830.388966][T14471] hsr_slave_0: left promiscuous mode [ 830.410692][T18234] openvswitch: netlink: IP tunnel dst address not specified [ 830.627953][T18246] sctp: [Deprecated]: syz.3.3176 (pid 18246) Use of int in maxseg socket option. [ 830.627953][T18246] Use struct sctp_assoc_value instead [ 831.137676][ T3316] smc: removing ib device sz1 [ 831.181722][ T3316] smbdirect: ib_dev[sz1] removed [ 831.301807][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6 [ 831.373859][T18068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.399694][T18068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.510789][ T5674] Bluetooth: hci2: command tx timeout [ 831.874280][T18068] team0: Port device team_slave_0 added [ 832.029546][T18272] syzkaller0: entered promiscuous mode [ 832.045962][T18272] syzkaller0: entered allmulticast mode [ 832.160948][T18068] team0: Port device team_slave_1 added [ 832.275655][T18292] __nla_validate_parse: 4 callbacks suppressed [ 832.275675][T18292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3186'. [ 836.334804][T18289] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 836.374383][T18289] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 836.399742][T18289] gretap1: entered promiscuous mode [ 836.417876][T18289] gretap1: entered allmulticast mode [ 836.472528][T18068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.526261][T18068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.563518][T18068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.644353][ T5295] 8021q: adding VLAN 0 to HW filter on device eth7 [ 836.812122][T18068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.822070][T18068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.861204][T18068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.934902][T14471] IPVS: stop unused estimator thread 0... [ 836.945494][T18324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3191'. [ 837.109706][T18339] xt_socket: unknown flags 0xe4 [ 837.146241][T18068] hsr_slave_0: entered promiscuous mode [ 837.149933][T18339] netlink: 'syz.4.3195': attribute type 11 has an invalid length. [ 837.168678][T18068] hsr_slave_1: entered promiscuous mode [ 837.177401][T18068] debugfs: 'hsr0' already exists in 'hsr' [ 837.191538][T18339] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3195'. [ 837.205414][T18068] Cannot create hsr debugfs directory [ 837.750944][T18360] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3201'. [ 837.821466][T18362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3202'. [ 837.870139][T18371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3204'. [ 838.153281][T18389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3207'. [ 838.191267][T18390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3207'. [ 838.283650][T18393] netlink: 'syz.4.3208': attribute type 1 has an invalid length. [ 838.324646][T18393] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3208'. [ 838.522174][T18405] netlink: 'syz.3.3211': attribute type 1 has an invalid length. [ 838.579009][T18405] netlink: 'syz.3.3211': attribute type 1 has an invalid length. [ 838.892752][T18422] IPv6: NLM_F_CREATE should be specified when creating new route [ 839.047522][T18427] tipc: Enabling of bearer rejected, failed to enable media [ 839.098298][T18429] netlink: 'syz.5.3217': attribute type 11 has an invalid length. [ 839.133187][T18429] netlink: 'syz.5.3217': attribute type 11 has an invalid length. [ 839.296538][T18428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.475509][T18448] xt_hashlimit: size too large, truncated to 1048576 [ 839.512968][T18452] xt_hashlimit: size too large, truncated to 1048576 [ 839.934650][T18068] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 839.963918][T18068] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 840.006446][T18068] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 840.070715][T18068] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 840.163978][T18476] bond1 (unregistering): Released all slaves [ 840.285028][T18068] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 840.336951][T18068] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 840.360434][T18068] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 840.412780][T18068] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 840.736382][T18512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3234'. [ 840.757160][T18512] tipc: Invalid UDP bearer configuration [ 840.761134][T18512] tipc: Enabling of bearer rejected, failed to enable media [ 840.819891][T18068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.030641][T18532] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3239'. [ 841.051107][T18068] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.077858][T18532] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3239'. [ 841.104476][ T513] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.111715][ T513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.200593][ T513] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.207812][ T513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.216655][T18539] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3241'. [ 841.294104][T18539] veth1_virt_wifi: entered allmulticast mode [ 841.345104][T18539] pim6reg: left allmulticast mode [ 841.873146][T18569] IPVS: length: 188 != 24 [ 842.316578][T18592] openvswitch: netlink: Flow key attr not present in new flow. [ 842.498232][T18600] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 842.833711][T18612] xt_SECMARK: invalid mode: 9 [ 842.961982][T18068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.152137][T18068] veth0_vlan: entered promiscuous mode [ 843.250622][T18068] veth1_vlan: entered promiscuous mode [ 843.398529][T18639] netlink: 'syz.3.3265': attribute type 1 has an invalid length. [ 843.409040][T18068] veth0_macvtap: entered promiscuous mode [ 843.433526][T18068] veth1_macvtap: entered promiscuous mode [ 843.528978][T18068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.595510][T18068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.639802][ T5699] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.681313][ T5699] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.740231][ T5699] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.768921][T18661] __nla_validate_parse: 5 callbacks suppressed [ 843.768939][T18661] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3271'. [ 843.782393][ T5699] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.066292][T13957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.114519][T13957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.381850][ T5697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.412998][ T5697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.560922][T18698] netlink: 'syz.5.3279': attribute type 1 has an invalid length. [ 844.574504][T18698] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3279'. [ 844.599948][T18698] netlink: 658 bytes leftover after parsing attributes in process `syz.5.3279'. [ 844.622614][T18698] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3279'. [ 845.264118][ T4950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 845.279363][ T4950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 845.291218][ T4950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 845.307687][ T4950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 845.322993][ T4950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 845.637758][T18726] bond1: entered promiscuous mode [ 845.679476][T18726] bond1: entered allmulticast mode [ 845.715631][T18726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 845.995649][T18745] openvswitch: netlink: Unknown key attributes 2 [ 846.031417][T18745] block nbd4: not configured, cannot reconfigure [ 846.282394][T18755] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3291'. [ 846.509443][T18773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3296'. [ 846.674579][T18782] netlink: 'syz.4.3298': attribute type 1 has an invalid length. [ 846.875155][T18795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3300'. [ 846.927538][T18790] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 847.017797][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 847.227091][T18816] sctp: [Deprecated]: syz.2.3305 (pid 18816) Use of int in max_burst socket option. [ 847.227091][T18816] Use struct sctp_assoc_value instead [ 847.429074][ T5674] Bluetooth: hci0: command tx timeout [ 847.940842][T18841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 847.950494][T18721] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.994459][T18721] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.014745][T18721] bridge_slave_0: entered allmulticast mode [ 848.026071][T18721] bridge_slave_0: entered promiscuous mode [ 848.036294][T18721] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.058032][T18721] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.069103][T18721] bridge_slave_1: entered allmulticast mode [ 848.092392][T18721] bridge_slave_1: entered promiscuous mode [ 848.106581][T18853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 848.248809][T18721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.291817][T18721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.327022][T18859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3317'. [ 848.368380][T18863] netlink: 'syz.2.3319': attribute type 1 has an invalid length. [ 848.394153][T18863] netlink: 'syz.2.3319': attribute type 2 has an invalid length. [ 848.421044][T18865] netlink: 'syz.2.3319': attribute type 1 has an invalid length. [ 848.453877][T18865] netlink: 'syz.2.3319': attribute type 2 has an invalid length. [ 848.476428][T18869] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3320'. [ 848.494923][T18721] team0: Port device team_slave_0 added [ 848.515409][T18721] team0: Port device team_slave_1 added [ 848.614395][T18867] syzkaller0: entered promiscuous mode [ 848.620041][T18867] syzkaller0: entered allmulticast mode [ 848.628482][T18880] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3322'. [ 848.654104][T18877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 848.835264][T18887] Cannot find add_set index 46338 as target [ 848.931491][T18889] __nla_validate_parse: 1 callbacks suppressed [ 848.931505][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3324'. [ 849.497452][ T5674] Bluetooth: hci0: command tx timeout [ 851.589165][ T4950] Bluetooth: hci0: command tx timeout [ 851.667143][ T4950] Bluetooth: hci5: command 0x0405 tx timeout [ 852.923864][T18721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.930904][T18721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.957985][T18721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.970867][T18721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.977963][T18721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.006056][T18721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.241947][T18892] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.249696][T18892] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.332003][T18892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.345346][T18892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.536789][T18912] netlink: 'syz.4.3331': attribute type 4 has an invalid length. [ 853.557894][T18912] netlink: 'syz.4.3331': attribute type 1 has an invalid length. [ 853.568244][T18912] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3331'. [ 853.578900][ T3278] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.599560][ T3278] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.651653][ T3278] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.661805][ T5674] Bluetooth: hci0: command tx timeout [ 853.694876][ T3278] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.744538][T18721] hsr_slave_0: entered promiscuous mode [ 853.760105][T18721] hsr_slave_1: entered promiscuous mode [ 853.769335][T18721] debugfs: 'hsr0' already exists in 'hsr' [ 853.775276][T18721] Cannot create hsr debugfs directory [ 853.940576][T18931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3336'. [ 854.095162][T18937] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3340'. [ 854.180028][T18936] syzkaller0: entered promiscuous mode [ 854.207326][T18936] syzkaller0: entered allmulticast mode [ 854.502451][T18955] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 854.559674][T18721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.572821][T18721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.586835][T18721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 854.665093][T18946] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004 [ 854.915257][T18721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.944379][T18721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.967473][T18721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 855.158622][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3353'. [ 855.173684][T18721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.206346][T18721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.218148][T18721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 855.483342][T18721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.496283][T18721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.507567][T18721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 855.643477][ T513] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x17 [ 855.777074][T19007] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3358'. [ 855.891200][T19015] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.3361'. [ 855.915551][T19015] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.3361'. [ 856.275839][T18721] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 856.471173][T18721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.502493][T18721] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 856.539494][T18721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.558532][T18721] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 856.588480][T18721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.607860][T18721] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 856.735907][T18721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.752974][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3369'. [ 856.767701][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3369'. [ 856.834978][T19059] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3371'. [ 856.995544][T18721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.048952][T19062] syzkaller0: entered promiscuous mode [ 857.054606][T19062] syzkaller0: entered allmulticast mode [ 857.075144][T18721] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.143711][ T5697] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.151001][ T5697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.167139][ T3278] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.174397][ T3278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.732389][T19096] IPVS: Unknown mcast interface: vcan0 [ 857.862777][T19102] netlink: 163952 bytes leftover after parsing attributes in process `syz.5.3381'. [ 858.339811][T18721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.445757][T19136] syzkaller0: entered promiscuous mode [ 858.457921][T19136] syzkaller0: entered allmulticast mode [ 858.766416][T18721] veth0_vlan: entered promiscuous mode [ 858.847889][T18721] veth1_vlan: entered promiscuous mode [ 858.984793][T18721] veth0_macvtap: entered promiscuous mode [ 859.035282][T18721] veth1_macvtap: entered promiscuous mode [ 859.099874][T19158] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 859.117960][T19162] __nla_validate_parse: 5 callbacks suppressed [ 859.117979][T19162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3397'. [ 859.176655][T18721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.252436][T18721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.399144][T10921] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.479058][T10921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.514660][T10921] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.583840][T10921] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.938923][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3405'. [ 860.084454][ T513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.104858][ T513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.275925][ T5697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.302097][ T5697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.514237][T19205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3410'. [ 860.545050][T19206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3410'. [ 860.584785][T19205] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3410'. [ 860.613470][T19206] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3410'. [ 860.715279][T19205] veth3: entered promiscuous mode [ 860.726196][T19210] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 861.549506][T19206] veth5: entered promiscuous mode [ 861.693955][T19234] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 861.752553][T19234] batman_adv: batadv0: Adding interface: wlan0 [ 861.774147][T19234] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.802122][T19234] batman_adv: batadv0: Interface activated: wlan0 [ 862.082935][T19256] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3427'. [ 862.150694][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3429'. [ 862.210068][T19265] vlan2: entered allmulticast mode [ 862.231097][T19265] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 862.467003][T19293] xt_TCPMSS: Only works on TCP SYN packets [ 862.473303][T19293] : renamed from vlan0 [ 862.492355][T19289] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3435'. [ 862.501595][T19293] xt_TCPMSS: Only works on TCP SYN packets [ 862.836681][T19314] syzkaller0: entered promiscuous mode [ 862.842468][T19314] syzkaller0: entered allmulticast mode [ 863.372770][T19325] netem: change failed [ 863.408956][T19323] netlink: 200080 bytes leftover after parsing attributes in process `syz.5.3442'. [ 865.332272][T19281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 865.772689][T19376] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 865.983355][T19387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3456'. [ 866.183583][T19397] netlink: 'syz.3.3458': attribute type 2 has an invalid length. [ 866.253636][T19397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 866.440699][T19415] xt_nat: multiple ranges no longer supported [ 866.625932][T19413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.641286][T19413] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.681626][T19413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.712173][T19432] nftables ruleset with unbound chain [ 866.745625][T19413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.759414][T19413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.773800][T19413] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 866.791598][T19413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 866.806782][T19413] veth1_vlan: left promiscuous mode [ 866.813114][T19413] veth0_vlan: left promiscuous mode [ 866.820367][T19413] veth0_vlan: entered promiscuous mode [ 866.828684][T19413] veth1_vlan: entered promiscuous mode [ 866.843240][T19413] veth1_macvtap: left promiscuous mode [ 866.849842][T19413] veth0_macvtap: left promiscuous mode [ 866.856563][T19413] veth0_macvtap: entered promiscuous mode [ 866.864508][T19413] veth1_macvtap: entered promiscuous mode [ 866.875367][T19413] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 866.883932][T19413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 866.892270][T19413] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 866.900430][T19413] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 866.913765][T19413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 866.975613][T14471] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.982852][T14471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.020019][ T5674] Bluetooth: hci3: command 0x0405 tx timeout [ 867.032983][T14471] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.040209][T14471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.199330][ T6341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.222441][ T6341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.282569][T19458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3475'. [ 867.358384][ T6341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.414356][ T6341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.479127][T17331] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 867.799231][ T5697] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 867.801631][T19476] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3481'. [ 867.815709][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3485'. [ 867.831369][T19478] syzkaller1: entered promiscuous mode [ 867.837932][T19480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3484'. [ 867.859418][T19478] syzkaller1: entered allmulticast mode [ 867.866286][T19485] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 867.908748][T19480] xt_hashlimit: size too large, truncated to 1048576 [ 868.027507][T17331] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 868.091336][T19501] netlink: 'syz.4.3487': attribute type 17 has an invalid length. [ 868.113950][T19501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3487'. [ 868.123766][T19501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3487'. [ 868.714685][T19515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3491'. [ 868.771909][T19522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3491'. [ 868.871861][ T513] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 868.876322][T19539] netlink: 'syz.2.3496': attribute type 10 has an invalid length. [ 868.907176][ T513] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 869.012647][T19539] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.063997][T17331] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 869.077640][T19539] bond0: (slave team0): Enslaving as an active interface with an up link [ 869.136002][T19547] batadv1: entered allmulticast mode [ 869.316964][T19547] batadv1: entered allmulticast mode [ 869.322178][T19559] openvswitch: netlink: IP tunnel dst address not specified [ 869.490978][T19547] batadv1: entered allmulticast mode [ 869.538619][T19571] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 869.645371][T19547] batadv1: entered allmulticast mode [ 869.836174][T19547] batadv1: entered allmulticast mode [ 869.853822][T19585] syzkaller0: entered promiscuous mode [ 869.859713][T19585] syzkaller0: entered allmulticast mode [ 869.992451][T19585] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 870.002079][ T5786] IPVS: starting estimator thread 0... [ 870.063315][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.109459][T19596] IPVS: using max 30 ests per chain, 72000 per kthread [ 870.556696][T19621] openvswitch: netlink: Message has 8 unknown bytes. [ 870.574038][T19621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.622432][T19628] netlink: 'syz.5.3522': attribute type 1 has an invalid length. [ 871.065865][T19650] netlink: 'syz.2.3530': attribute type 1 has an invalid length. [ 871.085048][T19650] __nla_validate_parse: 40 callbacks suppressed [ 871.085066][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3530'. [ 871.254904][T19655] bond7: option resend_igmp: invalid value (32767) [ 871.288838][T19655] bond7: option resend_igmp: allowed values 0 - 255 [ 871.512915][T19655] bond7 (unregistering): Released all slaves [ 871.621451][T19672] 8021q: VLANs not supported on lo [ 871.801219][T19681] vlan2: entered promiscuous mode [ 871.823282][T19681] bridge0: entered promiscuous mode [ 871.835018][T19687] netlink: 'syz.0.3539': attribute type 1 has an invalid length. [ 872.173103][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3545'. [ 872.420003][T19713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3548'. [ 872.604476][T19717] tipc: Failed to remove unknown binding: 66,0,0/0:962187706/962187708 [ 872.621809][T19717] tipc: Failed to remove unknown binding: 66,0,0/0:962187706/962187707 [ 872.644882][T19717] tipc: Failed to remove unknown binding: 66,0,0/0:962187706/962187708 [ 872.664635][T19717] tipc: Failed to remove unknown binding: 66,0,0/0:962187706/962187707 [ 872.687501][T19717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3548'. [ 872.717811][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3548'. [ 872.739040][T19717] netlink: 'syz.2.3548': attribute type 12 has an invalid length. [ 872.748363][T19717] netlink: 'syz.2.3548': attribute type 11 has an invalid length. [ 872.836572][T19716] netlink: 'syz.2.3548': attribute type 5 has an invalid length. [ 872.873009][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3548'. [ 873.153533][T19723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3551'. [ 873.339598][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 873.366697][T19741] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3557'. [ 873.385206][T19744] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.391731][T19741] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3557'. [ 873.406477][T19741] netlink: 'syz.5.3557': attribute type 5 has an invalid length. [ 873.416100][T19741] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3557'. [ 873.428337][T19741] netlink: 'syz.5.3557': attribute type 5 has an invalid length. [ 873.436375][T19745] macvlan0: entered promiscuous mode [ 873.860242][T19769] netlink: 'syz.4.3567': attribute type 4 has an invalid length. [ 873.949807][T19764] bond1: entered promiscuous mode [ 873.972915][T19764] bond1: entered allmulticast mode [ 874.003284][T19764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 874.211557][T19796] block nbd1: Unsupported socket: should be TCP or UNIX. [ 874.365689][T19805] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 874.406102][T19805] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 874.427292][T19805] gretap1: entered promiscuous mode [ 874.444815][T19805] gretap1: entered allmulticast mode [ 874.952793][T19845] sctp: [Deprecated]: syz.0.3585 (pid 19845) Use of int in max_burst socket option deprecated. [ 874.952793][T19845] Use struct sctp_assoc_value instead [ 875.399493][T19858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.168238][T19898] __nla_validate_parse: 9 callbacks suppressed [ 876.168259][T19898] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3602'. [ 876.242705][T19898] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3602'. [ 876.325894][T19898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3602'. [ 876.344877][T19911] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3606'. [ 876.420191][T19911] geneve4: entered promiscuous mode [ 876.456109][ T5699] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0 [ 876.503320][ T5699] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 876.550271][ T5699] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 876.588874][ T5699] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 876.645773][T19903] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 876.695588][T19919] netlink: 'syz.5.3608': attribute type 1 has an invalid length. [ 877.223200][T19950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3617'. [ 877.235807][T19951] netlink: 'syz.2.3618': attribute type 29 has an invalid length. [ 877.296514][T19953] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3619'. [ 877.674874][T19967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3624'. [ 877.714519][T19968] pim6reg1: entered promiscuous mode [ 877.727788][T19968] pim6reg1: entered allmulticast mode [ 877.750468][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3624'. [ 877.962833][T10922] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.006306][T10922] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.042801][T10922] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.073003][T10922] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.343543][T20002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3631'. [ 878.383444][T20000] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3630'. [ 879.365978][T20051] IPv6: sit1: Disabled Multicast RS [ 879.381025][T20051] sit1: entered allmulticast mode [ 879.712372][T20071] geneve2: entered allmulticast mode [ 879.981517][T20091] syzkaller0: entered promiscuous mode [ 879.987340][T20091] syzkaller0: entered allmulticast mode [ 880.501938][T20069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 880.666964][T20096] openvswitch: netlink: IP tunnel dst address not specified [ 881.251625][T20132] __nla_validate_parse: 8 callbacks suppressed [ 881.251646][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3669'. [ 881.280265][T20133] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3671'. [ 881.303347][T20138] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3669'. [ 881.320665][T20135] netlink: 'syz.3.3670': attribute type 2 has an invalid length. [ 881.501294][T20148] netlink: 'syz.4.3672': attribute type 1 has an invalid length. [ 881.729537][T20148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 881.956803][ T513] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 882.218616][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 884.782552][T20156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 885.044345][T20213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 885.452931][T20236] ip6gretap1: entered allmulticast mode [ 885.489080][T20243] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3695'. [ 885.523295][T20243] xt_policy: neither incoming nor outgoing policy selected [ 885.808294][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3701'. [ 886.082564][T20267] netlink: 'syz.0.3704': attribute type 2 has an invalid length. [ 886.123174][T20267] netlink: 'syz.0.3704': attribute type 8 has an invalid length. [ 886.153612][T20267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3704'. [ 886.183570][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3706'. [ 886.254828][T20275] syzkaller0: entered promiscuous mode [ 886.281463][T20275] syzkaller0: entered allmulticast mode [ 886.423045][T20285] C: renamed from lo [ 886.432688][T20285] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 886.607953][T20299] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 886.633360][T20301] netlink: 'syz.2.3715': attribute type 58 has an invalid length. [ 886.664716][T20301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3715'. [ 886.693546][T20304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3715'. [ 886.747781][T20308] xt_hashlimit: overflow, try lower: 3/0 [ 886.756631][T20306] syzkaller0: entered promiscuous mode [ 886.765442][T20306] syzkaller0: entered allmulticast mode [ 886.779151][T20306] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 887.057923][T20322] netlink: 'syz.3.3721': attribute type 4 has an invalid length. [ 887.096818][T20322] xt_bpf: check failed: parse error [ 887.245838][T20336] netlink: 'syz.4.3725': attribute type 1 has an invalid length. [ 887.255346][T20336] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3725'. [ 887.365990][T20344] netlink: 'syz.2.3727': attribute type 39 has an invalid length. [ 887.651944][T20352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3731'. [ 887.662278][T20352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3731'. [ 887.878522][T20362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3734'. [ 887.918911][T20360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3734'. [ 888.156016][T20374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3737'. [ 888.253796][ T5674] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 888.274033][ T5674] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 888.286177][ T5674] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 888.304003][ T5674] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 888.314651][ T5674] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 888.334674][T20379] netlink: 'syz.3.3738': attribute type 268 has an invalid length. [ 888.444884][T20385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3739'. [ 888.486887][T20379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3738'. [ 888.627315][T20384] netlink: 'syz.2.3739': attribute type 1 has an invalid length. [ 888.900289][T20402] netlink: 'syz.2.3742': attribute type 1 has an invalid length. [ 889.043595][T20401] bond2: (slave geneve3): making interface the new active one [ 889.055668][T20401] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 889.067107][ T3278] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 889.082474][ T5697] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 889.132297][ T5697] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 889.173739][ T5697] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 889.605286][T20429] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 889.642878][T20429] bond0: (slave lo): Error: Device can not be enslaved while up [ 889.683044][T20436] v: renamed from ip6_vti0 [ 889.729334][T20435] syzkaller0: entered promiscuous mode [ 889.735980][T20435] syzkaller0: entered allmulticast mode [ 890.218785][T20462] netlink: 'syz.0.3761': attribute type 27 has an invalid length. [ 890.379315][ T5674] Bluetooth: hci1: command tx timeout [ 890.712101][T20375] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.729395][T20375] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.752970][T20375] bridge_slave_0: entered allmulticast mode [ 890.761051][T20375] bridge_slave_0: entered promiscuous mode [ 890.771314][T20375] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.807359][T20375] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.818065][T20375] bridge_slave_1: entered allmulticast mode [ 890.835267][T20375] bridge_slave_1: entered promiscuous mode [ 891.186467][T20375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.201866][T20375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.262080][T20521] netlink: zone id is out of range [ 891.316674][T20521] netlink: zone id is out of range [ 891.328943][T20521] netlink: zone id is out of range [ 891.340942][T20521] netlink: del zone limit has 4 unknown bytes [ 891.363918][T20375] team0: Port device team_slave_0 added [ 891.387164][T20375] team0: Port device team_slave_1 added [ 891.392948][ T5699] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.423503][ T5699] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.459018][ T5699] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.588337][ T5699] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.629827][T20375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.657882][T20375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.703483][T20375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.723850][T20548] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 891.732239][T20548] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 891.752051][T20537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 891.767504][T20375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.791198][T20375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.879209][T20375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.900913][T20557] __nla_validate_parse: 6 callbacks suppressed [ 891.900932][T20557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3788'. [ 891.945873][T20557] sctp: [Deprecated]: syz.0.3788 (pid 20557) Use of int in maxseg socket option. [ 891.945873][T20557] Use struct sctp_assoc_value instead [ 892.101551][T20375] hsr_slave_0: entered promiscuous mode [ 892.116547][T20375] hsr_slave_1: entered promiscuous mode [ 892.128476][T20375] debugfs: 'hsr0' already exists in 'hsr' [ 892.142080][T20375] Cannot create hsr debugfs directory [ 892.458417][ T4950] Bluetooth: hci1: command tx timeout [ 892.642856][T20593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3797'. [ 892.713269][T20375] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.733948][T20375] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 893.031269][T20612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3803'. [ 893.048211][T20612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3803'. [ 893.073940][T20375] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.099779][T20612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3803'. [ 893.118954][T20375] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 893.145527][T20612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3803'. [ 893.159570][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3806'. [ 893.161382][T20622] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3806'. [ 893.321486][T20625] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3804'. [ 893.392606][T20375] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.420548][T20375] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 893.424949][T20631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3808'. [ 893.555464][T20375] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.605203][T20375] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 893.686924][T20631] 8021q: adding VLAN 0 to HW filter on device bond4 [ 893.716193][T20631] bond4 (unregistering): Released all slaves [ 893.746618][T20646] validate_nla: 2 callbacks suppressed [ 893.746718][T20646] netlink: 'syz.3.3812': attribute type 5 has an invalid length. [ 893.761490][T20646] netlink: 'syz.3.3812': attribute type 6 has an invalid length. [ 893.930856][T20648] xt_l2tp: missing protocol rule (udp|l2tpip) [ 894.190427][T17331] IPVS: starting estimator thread 0... [ 894.196368][T20655] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 894.308882][T20668] IPVS: using max 40 ests per chain, 96000 per kthread [ 894.429246][T20678] batadv_slave_1: entered promiscuous mode [ 894.544375][ T5674] Bluetooth: hci1: command tx timeout [ 894.568458][T20375] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 894.612478][T20375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 894.688775][T20688] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 894.722467][T11814] team_slave_0: entered promiscuous mode [ 894.730075][T11814] team_slave_1: entered promiscuous mode [ 894.756051][T20680] batadv_slave_1: left promiscuous mode [ 894.764148][T20375] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 894.800981][T20375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 894.842064][T20375] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 894.891149][T20375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 894.983021][T20702] bond3: (slave gretap0): Device is not bonding slave [ 894.999517][T20702] bond3: option active_slave: invalid value (gretap0) [ 895.012462][T20702] bond3 (unregistering): Released all slaves [ 895.153902][T20703] bond3: (slave gretap0): Device is not bonding slave [ 895.162011][T20703] bond3: option active_slave: invalid value (gretap0) [ 895.199342][T20703] bond3 (unregistering): Released all slaves [ 895.221976][T20375] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 895.232111][T20375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 895.240988][T20719] netlink: 'syz.0.3832': attribute type 4 has an invalid length. [ 895.463509][T20741] netlink: 'syz.2.3836': attribute type 1 has an invalid length. [ 895.475608][T20736] tc_dump_action: action bad kind [ 895.534190][T20741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 895.632565][T20744] bond3: (slave geneve4): making interface the new active one [ 895.674987][T20744] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 895.726776][T20756] sch_tbf: burst 46 is lower than device syzkaller0 mtu (1514) ! [ 895.768173][T20756] syzkaller0: entered promiscuous mode [ 895.780174][T20756] syzkaller0: entered allmulticast mode [ 895.801156][T20375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.958374][T20375] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.012873][ T3278] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.020363][ T3278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.083161][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.090421][ T6341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.618034][ T5674] Bluetooth: hci1: command tx timeout [ 896.825207][T20808] : entered promiscuous mode [ 897.351330][T20839] __nla_validate_parse: 9 callbacks suppressed [ 897.351350][T20839] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3860'. [ 897.455648][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3863'. [ 897.505443][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3863'. [ 897.537131][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3863'. [ 897.560732][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3863'. [ 897.576242][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3863'. [ 897.748678][T20375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.985979][T20870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3870'. [ 898.033568][T20870] xfrm1: entered promiscuous mode [ 898.047606][T20870] xfrm1: entered allmulticast mode [ 898.153170][T20881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3872'. [ 898.695497][T20375] veth0_vlan: entered promiscuous mode [ 898.829228][T20375] veth1_vlan: entered promiscuous mode [ 898.996862][T20375] veth0_macvtap: entered promiscuous mode [ 899.019538][T20375] veth1_macvtap: entered promiscuous mode [ 899.031919][T20938] x_tables: duplicate underflow at hook 1 [ 899.064736][T20375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.084609][T20375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.123760][ T5699] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.133639][ T5699] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.148442][T10921] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.183009][T10921] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.497403][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 901.914934][T20930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 902.108558][ T3316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.146179][ T3316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.239522][ T3278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.281054][ T3278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.409427][T20977] netlink: 'syz.2.3893': attribute type 9 has an invalid length. [ 903.374898][T21018] SET target dimension over the limit! [ 903.832169][T21039] tipc: Enabling of bearer rejected, failed to enable media [ 904.003723][T21043] netlink: 'syz.5.3911': attribute type 1 has an invalid length. [ 904.006192][T21045] xt_hashlimit: size too large, truncated to 1048576 [ 904.043041][T21043] netlink: 'syz.5.3911': attribute type 2 has an invalid length. [ 904.062253][T21048] tap0: tun_chr_ioctl cmd 1074025673 [ 904.079956][T21043] netlink: 'syz.5.3911': attribute type 1 has an invalid length. [ 904.153256][T21043] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3911'. [ 904.261030][T21063] netlink: 'syz.0.3916': attribute type 2 has an invalid length. [ 904.540234][T21077] netlink: 'syz.3.3922': attribute type 2 has an invalid length. [ 904.711562][T21083] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 904.766841][T21081] bond0: (slave bond_slave_1): Releasing backup interface [ 904.780503][T21086] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3923'. [ 904.812159][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3924'. [ 904.947652][T21096] netlink: 'syz.3.3925': attribute type 12 has an invalid length. [ 904.966036][T21096] netlink: 'syz.3.3925': attribute type 29 has an invalid length. [ 905.010765][T21096] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3925'. [ 905.038830][T21096] netlink: 'syz.3.3925': attribute type 3 has an invalid length. [ 905.050350][T21096] netlink: 'syz.3.3925': attribute type 2 has an invalid length. [ 905.058884][T21096] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3925'. [ 905.134901][T21110] IPv6: NLM_F_CREATE should be specified when creating new route [ 905.194385][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3931'. [ 905.204661][T21109] bond3: (slave geneve2): making interface the new active one [ 905.227635][T21109] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 905.250381][T10922] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 905.280093][T21111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 905.320763][T21110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 905.350308][T21119] bond2: option coupled_control: invalid value (192) [ 905.370321][T21119] bond2 (unregistering): Released all slaves [ 905.404049][T10922] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 905.414483][T10922] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 905.426889][T10921] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 905.858155][T21141] ip6gretap0: entered promiscuous mode [ 905.863847][T21141] ip6gretap0: entered allmulticast mode [ 905.883684][T21143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3937'. [ 905.917695][T21145] syzkaller0: entered promiscuous mode [ 905.923690][T21145] syzkaller0: entered allmulticast mode [ 905.931732][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3937'. [ 906.089788][T21149] ip6t_srh: unknown srh invflags 4000 [ 906.308715][T21157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3939'. [ 906.758997][T21188] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.3946'. [ 906.900840][ T29] audit: type=1804 audit(1780974848.034:7): pid=21193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3947" name="/newroot/175/cgroup.controllers" dev="tmpfs" ino=911 res=1 errno=0 [ 906.940450][ T29] audit: type=1800 audit(1780974848.034:8): pid=21193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3947" name="cgroup.controllers" dev="tmpfs" ino=911 res=0 errno=0 [ 907.303087][T21213] syzkaller0: entered promiscuous mode [ 907.309955][T21213] syzkaller0: entered allmulticast mode [ 909.207297][T21172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 909.741209][T21243] validate_nla: 8 callbacks suppressed [ 909.741230][T21243] netlink: 'syz.0.3955': attribute type 1 has an invalid length. [ 912.355061][T21257] syzkaller1: entered promiscuous mode [ 912.394644][T21257] syzkaller1: entered allmulticast mode [ 912.478144][T21265] syzkaller1: left promiscuous mode [ 912.494974][T21265] syzkaller1: left allmulticast mode [ 912.524063][T21260] __nla_validate_parse: 4 callbacks suppressed [ 912.524081][T21260] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3960'. [ 912.631751][T21274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3965'. [ 912.692186][T21274] netlink: 'syz.3.3965': attribute type 3 has an invalid length. [ 912.768211][T21276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3966'. [ 912.981140][T21292] netlink: 'syz.0.3973': attribute type 24 has an invalid length. [ 913.007976][T21291] pimreg3: entered allmulticast mode [ 913.040102][T21292] pim6reg1: entered promiscuous mode [ 913.055687][T21292] pim6reg1: entered allmulticast mode [ 913.107369][ T4950] Bluetooth: hci4: command 0x041b tx timeout [ 913.152278][T21303] xt_hashlimit: size too large, truncated to 1048576 [ 913.411528][T21312] netlink: 'syz.0.3976': attribute type 14 has an invalid length. [ 913.448789][T21312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3976'. [ 913.491856][T21312] netlink: 'syz.0.3976': attribute type 14 has an invalid length. [ 913.491959][T21313] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.3976'. [ 913.564701][T21318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3977'. [ 913.585030][T21312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3976'. [ 913.636435][T21313] 0ªX¹¦Dö»: renamed from gretap0 [ 913.666254][T21313] 0ªX¹¦Dö»: entered allmulticast mode [ 913.694356][T21323] netlink: 'syz.4.3979': attribute type 2 has an invalid length. [ 914.216897][T21345] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3987'. [ 914.333103][T21349] netlink: 'syz.4.3988': attribute type 61 has an invalid length. [ 914.495024][T21361] tipc: Started in network mode [ 914.518981][T21361] tipc: Node identity 024306c7a84, cluster identity 4711 [ 914.551493][T21361] tipc: Enabled bearer , priority 0 [ 914.579098][T21366] syzkaller0: entered promiscuous mode [ 914.598252][T21366] syzkaller0: entered allmulticast mode [ 914.810409][T21366] tipc: Resetting bearer [ 914.850649][T21358] tipc: Resetting bearer [ 914.898732][T21358] tipc: Disabling bearer [ 915.149254][T21390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4000'. [ 915.355956][T21399] tipc: Started in network mode [ 915.369011][T21399] tipc: Node identity ac14140f, cluster identity 4711 [ 915.396214][T21399] tipc: New replicast peer: 255.255.255.255 [ 915.431051][T21399] tipc: Enabled bearer , priority 10 [ 915.456800][T21408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4004'. [ 915.479305][T21409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 915.809065][T21423] netlink: 'syz.4.4011': attribute type 1 has an invalid length. [ 915.901399][T21424] bond4: (slave bridge4): making interface the new active one [ 915.912849][T21424] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 916.080550][T21428] tipc: Resetting bearer [ 916.114224][T21440] netlink: 'syz.5.4015': attribute type 1 has an invalid length. [ 916.134535][T21440] netlink: 'syz.5.4015': attribute type 3 has an invalid length. [ 916.164704][T21440] NCSI netlink: No device for ifindex 813332851 [ 916.181488][T21428] batman_adv: batadv0: Interface deactivated: wlan0 [ 916.350062][T21455] Bluetooth: MGMT ver 1.23 [ 916.586256][ T5779] tipc: Node number set to 2886997007 [ 916.714109][T21470] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 916.740753][T21470] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 916.749097][T21470] gretap1: entered promiscuous mode [ 916.755367][T21470] gretap1: entered allmulticast mode [ 916.785296][T21471] macvlan0: entered promiscuous mode [ 916.879568][T21481] netlink: 'syz.0.4026': attribute type 29 has an invalid length. [ 917.128837][T21488] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 917.177544][T21488] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 917.499548][T21503] netlink: 'syz.4.4032': attribute type 1 has an invalid length. [ 917.561469][T21504] netlink: 'syz.3.4034': attribute type 3 has an invalid length. [ 917.856189][T21488] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 917.876605][T21488] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 918.045716][T21488] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 918.062188][T21488] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 918.124627][T21524] lo: entered allmulticast mode [ 918.172834][T21488] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 918.185787][T21488] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 918.269066][T21488] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 918.292655][T21533] tc_dump_action: action bad kind [ 918.301816][T21488] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 918.325521][T21529] ------------[ cut here ]------------ [ 918.331383][T21529] workqueue: cannot queue hci_tx_work on wq hci1 [ 918.337764][T21529] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd3f/0x1040, CPU#1: syz.5.4040/21529 [ 918.347665][T21529] Modules linked in: [ 918.352048][T21529] CPU: 1 UID: 0 PID: 21529 Comm: syz.5.4040 Not tainted syzkaller #0 PREEMPT(full) [ 918.361460][T21529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 918.371538][T21529] RIP: 0010:__queue_work+0xd67/0x1040 [ 918.376949][T21529] Code: a6 0e 49 8d 7d 18 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 0a de a3 00 49 8b 75 18 49 81 c7 70 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef [ 918.396583][T21529] RSP: 0018:ffffc900057475a0 EFLAGS: 00010082 [ 918.402683][T21529] RAX: 1ffff1100b21298a RBX: 0000000000000008 RCX: 0000000000080000 [ 918.410689][T21529] RDX: ffff8880377ed170 RSI: ffffffff8a9a5c90 RDI: ffffffff903333b0 [ 918.418693][T21529] RBP: 0000000000000000 R08: ffff888059094c3f R09: 1ffff1100b212987 [ 918.426695][T21529] R10: dffffc0000000000 R11: ffffed100b212988 R12: dffffc0000000000 [ 918.434693][T21529] R13: ffff888059094c38 R14: ffffffff903333b0 R15: ffff8880377ed170 [ 918.442792][T21529] FS: 00007f45a7ca66c0(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000 [ 918.451757][T21529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 918.458406][T21529] CR2: 00007f9e6bb29e9c CR3: 0000000041512000 CR4: 00000000003526f0 [ 918.466398][T21529] Call Trace: [ 918.469688][T21529] [ 918.472708][T21529] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 918.478531][T21529] ? rcu_is_watching+0x15/0xb0 [ 918.483303][T21529] queue_work_on+0x106/0x1d0 [ 918.487897][T21529] l2cap_send_conn_req+0x243/0x370 [ 918.493017][T21529] ? __pfx_l2cap_send_conn_req+0x10/0x10 [ 918.498650][T21529] ? do_raw_spin_unlock+0xf5/0x210 [ 918.503856][T21529] ? l2cap_chan_check_security+0x303/0x570 [ 918.509666][T21529] l2cap_do_start+0x63e/0x810 [ 918.514442][T21529] ? __pfx_l2cap_do_start+0x10/0x10 [ 918.519662][T21529] l2cap_chan_connect+0xa9d/0xed0 [ 918.524700][T21529] ? __pfx_l2cap_chan_connect+0x10/0x10 [ 918.530247][T21529] ? l2cap_sock_connect+0x15d/0x7f0 [ 918.535459][T21529] ? bacmp+0xe/0x30 [ 918.539276][T21529] l2cap_sock_connect+0x5ea/0x7f0 [ 918.544324][T21529] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 918.549885][T21529] ? do_raw_spin_lock+0x12b/0x2f0 [ 918.554939][T21529] ? kernel_connect+0xf1/0x1c0 [ 918.559712][T21529] kernel_connect+0x141/0x1c0 [ 918.564398][T21529] ? __pfx_kernel_connect+0x10/0x10 [ 918.569613][T21529] ? rfcomm_dlc_open+0x5e1/0x1210 [ 918.574648][T21529] rfcomm_dlc_open+0x61d/0x1210 [ 918.579687][T21529] ? reacquire_held_locks+0x104/0x190 [ 918.585064][T21529] ? release_sock+0x2f/0x260 [ 918.589657][T21529] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 918.595408][T21529] ? __local_bh_enable_ip+0xd0/0x130 [ 918.600702][T21529] rfcomm_sock_connect+0x2f7/0x640 [ 918.605831][T21529] __sys_connect+0x312/0x450 [ 918.610435][T21529] ? __pfx___sys_connect+0x10/0x10 [ 918.615573][T21529] ? rcu_is_watching+0x15/0xb0 [ 918.620352][T21529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.626525][T21529] __x64_sys_connect+0x7a/0x90 [ 918.631398][T21529] do_syscall_64+0x174/0x580 [ 918.635992][T21529] ? trace_irq_disable+0x3b/0x140 [ 918.641030][T21529] ? clear_bhb_loop+0x40/0x90 [ 918.645712][T21529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.651607][T21529] RIP: 0033:0x7f45a6d9ce59 [ 918.656027][T21529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.675641][T21529] RSP: 002b:00007f45a7ca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 918.684062][T21529] RAX: ffffffffffffffda RBX: 00007f45a7015fa0 RCX: 00007f45a6d9ce59 [ 918.692036][T21529] RDX: 000000000000000a RSI: 0000200000000040 RDI: 0000000000000009 [ 918.700012][T21529] RBP: 00007f45a6e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 918.707991][T21529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.715976][T21529] R13: 00007f45a7016038 R14: 00007f45a7015fa0 R15: 00007ffd21e89618 [ 918.723966][T21529] [ 918.727005][T21529] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 918.734285][T21529] CPU: 1 UID: 0 PID: 21529 Comm: syz.5.4040 Not tainted syzkaller #0 PREEMPT(full) [ 918.743826][T21529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 918.753883][T21529] Call Trace: [ 918.757169][T21529] [ 918.760105][T21529] vpanic+0x56c/0xa60 [ 918.764096][T21529] ? __pfx__printk+0x10/0x10 [ 918.768693][T21529] ? __pfx_vpanic+0x10/0x10 [ 918.773198][T21529] ? is_bpf_text_address+0x292/0x2b0 [ 918.778483][T21529] ? is_bpf_text_address+0x26/0x2b0 [ 918.783698][T21529] panic+0xc5/0xd0 [ 918.787430][T21529] ? __pfx_panic+0x10/0x10 [ 918.791864][T21529] __warn+0x315/0x4c0 [ 918.795851][T21529] ? __queue_work+0xd3f/0x1040 [ 918.800618][T21529] ? __queue_work+0xd3f/0x1040 [ 918.805393][T21529] __report_bug+0x29a/0x540 [ 918.809917][T21529] ? __queue_work+0xd3f/0x1040 [ 918.814685][T21529] ? __pfx___report_bug+0x10/0x10 [ 918.819710][T21529] ? __pfx_hci_tx_work+0x10/0x10 [ 918.824688][T21529] report_bug_entry+0x19a/0x290 [ 918.829643][T21529] ? __queue_work+0xd67/0x1040 [ 918.834414][T21529] ? __queue_work+0xd6c/0x1040 [ 918.839442][T21529] handle_bug+0xce/0x200 [ 918.843734][T21529] exc_invalid_op+0x1a/0x50 [ 918.848252][T21529] asm_exc_invalid_op+0x1a/0x20 [ 918.853102][T21529] RIP: 0010:__queue_work+0xd67/0x1040 [ 918.858488][T21529] Code: a6 0e 49 8d 7d 18 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 0a de a3 00 49 8b 75 18 49 81 c7 70 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef [ 918.878102][T21529] RSP: 0018:ffffc900057475a0 EFLAGS: 00010082 [ 918.884175][T21529] RAX: 1ffff1100b21298a RBX: 0000000000000008 RCX: 0000000000080000 [ 918.892147][T21529] RDX: ffff8880377ed170 RSI: ffffffff8a9a5c90 RDI: ffffffff903333b0 [ 918.900138][T21529] RBP: 0000000000000000 R08: ffff888059094c3f R09: 1ffff1100b212987 [ 918.908116][T21529] R10: dffffc0000000000 R11: ffffed100b212988 R12: dffffc0000000000 [ 918.916092][T21529] R13: ffff888059094c38 R14: ffffffff903333b0 R15: ffff8880377ed170 [ 918.924123][T21529] ? __pfx_hci_tx_work+0x10/0x10 [ 918.929074][T21529] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 918.934915][T21529] ? rcu_is_watching+0x15/0xb0 [ 918.939700][T21529] queue_work_on+0x106/0x1d0 [ 918.944305][T21529] l2cap_send_conn_req+0x243/0x370 [ 918.949419][T21529] ? __pfx_l2cap_send_conn_req+0x10/0x10 [ 918.955054][T21529] ? do_raw_spin_unlock+0xf5/0x210 [ 918.960260][T21529] ? l2cap_chan_check_security+0x303/0x570 [ 918.966076][T21529] l2cap_do_start+0x63e/0x810 [ 918.970759][T21529] ? __pfx_l2cap_do_start+0x10/0x10 [ 918.976055][T21529] l2cap_chan_connect+0xa9d/0xed0 [ 918.981089][T21529] ? __pfx_l2cap_chan_connect+0x10/0x10 [ 918.986638][T21529] ? l2cap_sock_connect+0x15d/0x7f0 [ 918.991847][T21529] ? bacmp+0xe/0x30 [ 918.995654][T21529] l2cap_sock_connect+0x5ea/0x7f0 [ 919.000687][T21529] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 919.006238][T21529] ? do_raw_spin_lock+0x12b/0x2f0 [ 919.011272][T21529] ? kernel_connect+0xf1/0x1c0 [ 919.016057][T21529] kernel_connect+0x141/0x1c0 [ 919.020756][T21529] ? __pfx_kernel_connect+0x10/0x10 [ 919.025996][T21529] ? rfcomm_dlc_open+0x5e1/0x1210 [ 919.031043][T21529] rfcomm_dlc_open+0x61d/0x1210 [ 919.035937][T21529] ? reacquire_held_locks+0x104/0x190 [ 919.041333][T21529] ? release_sock+0x2f/0x260 [ 919.045930][T21529] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 919.051229][T21529] ? __local_bh_enable_ip+0xd0/0x130 [ 919.056527][T21529] rfcomm_sock_connect+0x2f7/0x640 [ 919.061651][T21529] __sys_connect+0x312/0x450 [ 919.066251][T21529] ? __pfx___sys_connect+0x10/0x10 [ 919.071377][T21529] ? rcu_is_watching+0x15/0xb0 [ 919.076154][T21529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.082233][T21529] __x64_sys_connect+0x7a/0x90 [ 919.087009][T21529] do_syscall_64+0x174/0x580 [ 919.091634][T21529] ? trace_irq_disable+0x3b/0x140 [ 919.096853][T21529] ? clear_bhb_loop+0x40/0x90 [ 919.101533][T21529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.107427][T21529] RIP: 0033:0x7f45a6d9ce59 [ 919.111841][T21529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.131450][T21529] RSP: 002b:00007f45a7ca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 919.139879][T21529] RAX: ffffffffffffffda RBX: 00007f45a7015fa0 RCX: 00007f45a6d9ce59 [ 919.147856][T21529] RDX: 000000000000000a RSI: 0000200000000040 RDI: 0000000000000009 [ 919.156001][T21529] RBP: 00007f45a6e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 919.164084][T21529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 919.172052][T21529] R13: 00007f45a7016038 R14: 00007f45a7015fa0 R15: 00007ffd21e89618 [ 919.180041][T21529] [ 919.183375][T21529] Kernel Offset: disabled [ 919.187700][T21529] Rebooting in 86400 seconds..