last executing test programs: 4m9.274762702s ago: executing program 3 (id=384): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x80) (async) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) r1 = socket(0x22, 0x2, 0x3) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) 4m8.784893234s ago: executing program 3 (id=390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x4000, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x32, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r2, r1, 0x4, r1}, 0x10) close(r0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x12) socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) 4m8.408991575s ago: executing program 3 (id=396): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x7f99, 0x4) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r2 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4058080) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) (rerun: 32) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000040)=0x1, 0x4) getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 4m7.939708561s ago: executing program 3 (id=402): socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0xd, 0xb, 0x5, 0x3ff, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='GPL\x00', 0x2179, 0x54, &(0x7f0000000680)=""/84, 0x41100, 0xa, '\x00', 0x0, @fallback=0x24, r4, 0x8, &(0x7f0000000700)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xc, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000780)=[{0x0, 0x1, 0x6, 0xc}, {0x2, 0x3, 0xc, 0x6}, {0x0, 0x3, 0x6, 0x3}, {0x48, 0x4, 0x10, 0x2}, {0x3, 0x5, 0xb, 0x9}, {0x2, 0x4, 0x8, 0x9}], 0x10, 0x6}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x200}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000540)={r5, 0x2, 0x20, 0x1000, 0x1}, &(0x7f0000000580)=0x18) (async, rerun: 32) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000000)) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0xfdef}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 4m6.85677544s ago: executing program 3 (id=419): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="10007d", @ANYRES8=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84081282}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000080)="1a00000002000000", 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x81}], 0x1}, 0x4048004) 4m6.686824631s ago: executing program 3 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYBLOB="140006000000004001f0ffff000010000000000014000200fe8000000000000000000000000000aafc846dbd4a2e2c0d8ae1678808232792a39cd8f42e874712ba4eb3d8fbcc5bf94e41f0cbf216650027552e9d08efada2bd719a7f004445ebb41f3e3442a7f4dbf68c0d7c3233194de58b7207d69067adbc651e5b6ce14dd188979ff7d9f3448d36dcf62cc12fead48b505500aae2d246468ce6a07bd6c32d4510f708d17bdb66731a9631"], 0x40}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x5, 0x2, 0x0, r3}]}, &(0x7f0000000200)='GPL\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x8]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x78}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) socket$netlink(0x10, 0x3, 0x9) 3m51.438281998s ago: executing program 32 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYBLOB="140006000000004001f0ffff000010000000000014000200fe8000000000000000000000000000aafc846dbd4a2e2c0d8ae1678808232792a39cd8f42e874712ba4eb3d8fbcc5bf94e41f0cbf216650027552e9d08efada2bd719a7f004445ebb41f3e3442a7f4dbf68c0d7c3233194de58b7207d69067adbc651e5b6ce14dd188979ff7d9f3448d36dcf62cc12fead48b505500aae2d246468ce6a07bd6c32d4510f708d17bdb66731a9631"], 0x40}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x5, 0x2, 0x0, r3}]}, &(0x7f0000000200)='GPL\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x8]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x78}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) socket$netlink(0x10, 0x3, 0x9) 2m34.42794323s ago: executing program 5 (id=1028): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000810}, 0x24044010) (async) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @loopback={0xffffffffffffff8d}, 0x16}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x40) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x80}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x48841) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) (async) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) (async) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030005ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000024c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002480)={&(0x7f0000000e00)={0x1664, r5, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x80}}}}, [@NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x77}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x56c, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xae}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x27c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0xf40c, 0xc000, 0x1, 0x0, 0x3, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1, 0x39, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x5, 0x0, 0x6, 0x1ff, 0xfff, 0x2]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x0, 0x1b, 0x5, 0x30, 0x48, 0x5, 0xb, 0x2b, 0x24, 0x24, 0x3, 0x3, 0x18, 0x1, 0x6, 0x3, 0x18, 0x30, 0x12, 0xb, 0x48, 0x6c]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x1}, {0x4, 0x9}, {0x6}, {0x1, 0xa}, {0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x6}, {0x4, 0x4}, {0x1, 0x2}, {0x6}, {0x4, 0x5}, {0x7}, {0x3, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x6, 0x9}, {0x4, 0x2}, {0x1, 0xa}, {0x5, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x3, 0x5}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x4}, {0x5, 0x2}, {0x1, 0x1}, {0x1, 0x4}, {0x6, 0x9}, {0x3, 0xa}, {0x6, 0x5}, {0x4}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0x9}, {0x3}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0xa}, {0x6, 0x1}, {0x5, 0x5}, {0x3, 0x4}, {0x6, 0x2}, {0x3, 0x4}, {0x0, 0x8}, {0x2, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x7, 0x5}, {0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x1ff, 0x3, 0x0, 0x0, 0xffff, 0x1]}}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x6}, {0x5, 0x4}, {0x2, 0x8}, {0x7, 0x1}, {0x6, 0x9}, {0x4, 0x8}, {0x5, 0x5}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x4}, {0x3, 0x5}, {0x7, 0xa}, {0x4, 0x8}, {0x1, 0x9}, {0x3, 0xa}, {0x3, 0x8}, {0x5, 0x1}, {0x6, 0x3}, {0x6, 0x8}, {0x7, 0x4}, {0x2, 0x3}, {0x2, 0x4}, {0x4, 0x4}, {0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x3, 0x7}, {0x1, 0x5}, {0x5, 0x1}, {0x4, 0x3}, {0x3, 0x2}, {0x4}, {0x3, 0xa}, {0x5, 0x3}, {0x1}, {0x2, 0x1}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x0, 0x6}, {0x3}, {0x3, 0x7}, {0x6, 0x7}, {0x1, 0x3}, {0x3, 0xa}, {0x6, 0xa}, {0x2, 0x1}, {0x7, 0x7}, {0x6, 0x5}, {0x4, 0x6}, {0x6}, {0x4, 0x4}, {0x4, 0x8}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x81, 0x80, 0x8, 0x3, 0x2bd7, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe281, 0x9, 0xffff, 0x6, 0x5, 0x9, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xb29, 0x5, 0x3, 0x651, 0x1, 0x4, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x36, 0x2, 0x60, 0x30, 0xb, 0x3, 0x1b, 0x2, 0x18, 0x60, 0x12, 0x4, 0x26, 0x3f, 0x30, 0x60, 0x7f, 0x30, 0x1b, 0x18, 0x5, 0x18, 0x48, 0x36, 0x36, 0x24]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0x1b, 0x60, 0x12, 0x3, 0x3, 0xc, 0x58179452b02d0cef, 0x6c, 0x6c, 0xc, 0x5, 0x36, 0x1, 0x6c, 0x3a, 0x5, 0x48, 0xb, 0x4, 0x36, 0x3, 0x48, 0x3, 0x24, 0x5, 0x48, 0x1, 0xc, 0x50]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x40, 0x0, 0xc, 0xb, 0x6, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x6, 0x65e, 0xef, 0x7f, 0x4800, 0x0, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0xc, 0x30, 0xc, 0x36, 0xc, 0x3, 0x5, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x1, 0x9, 0x30, 0x2, 0x60]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x6}, {0x7, 0x5}, {0x2, 0xa}, {0x6, 0x7}, {0x2, 0x5}, {0x1, 0x9}, {0x7, 0x4}, {0x6, 0x9}, {0x3, 0x1}, {0x0, 0x8}, {0x0, 0x4}, {0x5, 0x6}, {0x3, 0x9}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x3, 0x1}, {0x4, 0xa}, {0x7, 0x1}, {0x2, 0x8}, {0x0, 0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x7, 0x9}, {0x6, 0x6}, {0x3, 0x7}, {0x3, 0x6}, {0x6, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x3, 0x4}, {0x7}, {0x0, 0x5}, {0x7, 0x6}, {0x0, 0x5}, {0x7, 0x8}, {0x4}, {0x3, 0x3}, {0x3, 0x4}, {0x5, 0x9}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x1}, {0x4, 0x8}, {0x0, 0x9}, {0x3, 0x7}, {0x3, 0x3}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x2, 0x6}, {0x6, 0xa}, {0x4, 0x1}, {0x1, 0x3}, {0x3, 0x3}, {0x1, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0x2, 0x1, 0x5, 0xb, 0x36, 0x30, 0x4, 0x3d, 0x6c, 0x1, 0x6c, 0x1, 0x12, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, {0x1b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x17c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x400, 0x1, 0x5, 0x7, 0x5, 0xa0, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x2}, {0x1, 0x6}, {0x0, 0x9}, {0x4}, {0x5, 0x7}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x7}, {0x5, 0x2}, {0x4, 0x6}, {0x2, 0x8}, {0x4, 0x8}, {0x2, 0x8}, {0x7, 0x5}, {0x3, 0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x5}, {0x7}, {0x0, 0x4}, {0x3, 0x3}, {0x5, 0x5}, {0x7, 0x6}, {0x7, 0x1}, {0x7, 0x8}, {0x6}, {0x7, 0x7}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x7}, {0x2, 0x3}, {0x3, 0x4}]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x400, 0xffff, 0xcb96, 0x6, 0x401, 0x1, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6b20, 0x3, 0x4f80, 0xa, 0x3, 0x80, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x98fc, 0x5, 0x4, 0xfffe, 0x7, 0x8, 0x27, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0xa, 0xe, 0x6, 0x725, 0x4, 0x7, 0x3]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x6, 0x5, 0x3a, 0x8, 0x0, 0xa, 0x6]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0x6, 0x6c, 0x18]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0xa}, {0x3, 0x5}, {0x1, 0x5}, {0x4, 0x5}, {0x5, 0x6}, {0x1, 0x2}, {0x5, 0x9}, {0x7, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0xa}, {0x6, 0x7}, {0x3, 0x8}, {0x4, 0x1}, {0x7}, {0x1}, {0x2, 0x2}, {0x0, 0x3}, {0x7, 0x9}, {0x6, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x2, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x6}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0xa}, {0x4, 0x8}, {0x7, 0x8}, {0x2, 0x5}, {0x4, 0x6}, {0x5, 0x4}, {0x7, 0xa}, {0x3, 0x6}, {0x7, 0x8}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xb760, 0x4, 0xa1, 0x4, 0x9, 0x2, 0x1]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0xb3a9, 0xf, 0x2, 0x101, 0x74e, 0x1c0, 0xfffa]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3b09}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x18, 0x4, 0x65, 0x1b, 0x16, 0x1, 0x4, 0x16, 0x4, 0x24, 0x2, 0xc, 0x2d, 0x18, 0x6, 0xb, 0xb, 0x3, 0x30, 0x48, 0x18, 0x24, 0x0, 0x24, 0x1b, 0x3, 0x6, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x7a, 0x6, 0x8000, 0x8, 0xa5, 0x7c4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3, 0xfffb, 0x9, 0x4, 0x5, 0x4, 0x7, 0xb3]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x5, 0xa}, {0x3, 0x2}, {0x0, 0xa}, {0x7, 0x7}, {0x0, 0x9}, {0x6}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x8}, {0x3, 0x1}, {0x2, 0x2}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x1}, {0x1, 0x2}, {0x4, 0x6}, {0x0, 0xa}, {0x4, 0x5}, {0x7, 0x2}, {0x2, 0x2}, {0x0, 0x9}, {0x1}, {0x0, 0xa}, {0x6, 0x6}, {0x1, 0x9}, {0x2, 0x7}, {0x2, 0x6}, {0x0, 0x3}, {0x4, 0xa}, {0x2, 0x2}, {0x7, 0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x3, 0x3}, {0x6, 0x7}, {0x0, 0x7}, {0x2}, {0x7, 0x6}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x6}, {0x7, 0x8}, {0x1, 0x9}, {0x0, 0x3}, {0x6, 0x8}, {0x7, 0x9}, {0x5, 0x9}, {0x0, 0x5}, {0x5, 0x9}, {0x6}, {0x0, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x56}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa0}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffff54fc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfe}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}]}]}, @NL80211_ATTR_TID_CONFIG={0x1034, 0x11d, 0x0, 0x1, [{0x264, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x56}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x258, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x8, 0xfff, 0x2, 0x4, 0xcebe, 0x9, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x5, 0x4, 0x2, 0xffff, 0x0, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0xa2c5, 0x7, 0xcb, 0x2, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x876, 0x0, 0x9, 0x2, 0x3, 0x2, 0x180, 0x7f]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6ec0, 0xaf28, 0x5, 0x2, 0xeb8, 0x300, 0x1ff, 0x52]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfffb, 0x4, 0x6, 0x3, 0x9, 0xb1, 0xea9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x8001, 0xa639, 0xfffa, 0x8, 0x2, 0x7, 0x8615]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x2}, {0x5, 0x6}, {0x3, 0x3}, {0x2, 0x3}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x118b, 0xc, 0x9, 0x2, 0x5, 0xd, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x8000, 0x9, 0x1, 0xd390, 0x6, 0x800, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x7, 0xf97, 0xfff1, 0xfffe, 0x40, 0x4]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x5}, {}, {0x1, 0x7}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0x3}, {0x6}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x2}, {0x2, 0x5}, {0x0, 0x4}, {0x0, 0x7}, {0x3, 0xa}, {0x4, 0x8}, {0x6, 0x9}, {0x5, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x8}, {0x4, 0x8}, {0x3, 0x5}, {0x0, 0x9}, {0x6, 0xa}, {0x2, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x4, 0x1}, {0x6, 0x2}, {0x0, 0x5}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x3}, {0x7, 0xa}, {0x5, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x6}, {0x3, 0x7}, {0x2}, {0x7, 0x7}, {0x6, 0x6}, {0x7, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x2, 0x5}, {0x0, 0x2}, {0x2, 0x6}, {0x3, 0x4}, {0x1, 0x4}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x6}, {}, {0x0, 0x4}, {}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x0, 0x4, 0x7, 0x5, 0x48, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x100, 0x170d, 0x5, 0x4, 0x8, 0x5fa3, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x5}, {0x3, 0x1}, {0x4}, {0x4}, {0x6, 0xa}, {0x4, 0x4}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x0, 0x7}, {0x0, 0x9}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x1}, {0x3, 0x1}, {0x6, 0x4}, {0x7, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x2, 0x3}, {0x1, 0x4}, {0x4, 0xa}, {0x1}, {0x4, 0x4}, {0x6, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x3}, {0x5, 0x6}, {0x5, 0x2}, {0x6, 0x6}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x7}, {0x1, 0x8}, {0x2, 0x4}, {0x2, 0x8}, {0x6, 0x6}, {0x7}, {0x0, 0x5}, {0x1, 0x7}, {0x5, 0x9}, {0x6}, {0x6, 0x9}, {0x4, 0x5}, {0x3, 0x6}, {0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x9}, {0x6, 0x9}, {0x0, 0x6}, {0x6}, {0x7, 0x5}, {0x4, 0x9}, {0x2, 0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x7, 0x5, 0x6, 0x4, 0xffff, 0x400, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0x4}, {0x7, 0x5}, {0x5, 0x3}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0x6}, {0x2, 0xa}, {0x1, 0x2}, {0x7, 0x3}, {0x7, 0x3}, {0x0, 0x7}, {0x3, 0x8}, {0x4, 0x1}, {0x1, 0x4}, {0x6, 0x2}, {0x6, 0x4}, {0x3, 0x7}, {0x7, 0xa}, {0x0, 0x4}, {0x5, 0x3}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0xe62, 0x7, 0x8, 0xc8, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x4, 0x9, 0x5, 0xec77, 0x400, 0x6, 0x69c]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x280, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x51b, 0xd43, 0x10, 0x4000, 0x1000, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x4, 0xe66, 0x8, 0x9, 0x3, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x8, 0xb, 0x100, 0x1ff, 0xfffe, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x9, 0x3, 0x3, 0x20, 0x7, 0xaf52, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x12, 0x30, 0x18, 0x2b9dab3d6b7353aa, 0x4, 0x9, 0x29, 0x12, 0xb, 0x60, 0x2, 0xc, 0xb, 0xc, 0x60, 0x48, 0x60]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x2}, {0x5, 0x5}, {0x0, 0x5}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x1}, {0x1, 0x6}, {0x3, 0x7}, {0x4}, {0x6, 0x4}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x4}, {0x2, 0x5}, {0x0, 0x3}, {0x3, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x2, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x7, 0x7}, {0x7, 0x4}, {0x3, 0x3}, {0x2}, {0x5, 0xa}, {0x1, 0x1}, {0x2, 0x7}, {0x7, 0x9}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x3}, {0x0, 0x7}, {0x7, 0x6}, {0x3, 0x3}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0x3}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0xa}, {0x6, 0x1}, {0x0, 0x7}, {0x4, 0x3}, {0x7, 0x7}, {0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x4}, {0x0, 0x7}, {}, {0x5, 0x2}, {0x5, 0x9}, {0x3, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8b9, 0x2, 0x80, 0xd356, 0x8, 0x9, 0x81, 0x8]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x18e, 0x8, 0x7f, 0x8, 0x8, 0x7, 0x521, 0xfff]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0x18, 0xb, 0x12, 0x1, 0xc]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x9, 0xe, 0x7, 0x4, 0x5, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x36, 0x0, 0x60, 0x2, 0x60, 0x18, 0x30, 0x48, 0x18, 0x3, 0x1, 0x60, 0x6, 0x6c, 0x36, 0x3, 0x18, 0x2, 0x4, 0x36, 0x16, 0x24, 0x9, 0x60, 0x6, 0x24, 0x5, 0xc, 0xb, 0x48, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x200, 0x3, 0x5, 0x3c89, 0x400, 0x9, 0x696c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x3, 0x8a, 0x7, 0xfffa, 0x5, 0x6, 0x2]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x7}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x2}, {0x7, 0x5}, {0x1}, {0x5, 0x7}, {0x1, 0x7}, {0x1, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x9}, {0x7, 0x1}, {0x3, 0x2}, {0x2, 0x1}, {0x7, 0xa}, {0x7, 0x3}, {0x7, 0x8}, {0x3, 0x3}, {0x6, 0x2}, {0x6}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0xa}, {0x3, 0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x9}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x9}, {0x2, 0x6}, {0x5, 0xa}, {0x4, 0x7}, {0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x7, 0x8}]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x1af, 0x8, 0x4, 0x35, 0x80, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xff, 0x3ff, 0x6, 0x5, 0x6, 0xfff6]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x6}, {0x4, 0x2}, {0x7, 0x7}, {0x0, 0xa}, {0x3, 0x4}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0xa}, {0x2, 0x2}, {0x0, 0x6}, {0x4, 0x9}, {0x1, 0x6}, {0x3, 0x9}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x8}, {0x4, 0x6}, {0x5, 0x5}, {0x3, 0xa}, {0x0, 0x8}, {0x3, 0xa}, {0x4, 0x4}, {0x2, 0x8}, {0x2, 0x7}, {0x2, 0x1}, {0x7, 0x8}, {0x4, 0xa}, {0x1, 0x1}, {0x7, 0x6}, {0x0, 0x17}, {0x1, 0x2}, {0x5, 0x4}, {0x7, 0x2}, {0x6, 0x2}, {0x2, 0x5}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x3}, {0x1, 0x8}, {0x7, 0x4}, {0x6, 0x6}, {0x6}, {0x7, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x0, 0x8}, {0x2, 0xa}, {0x6, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf9}]}, {0x4b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x308, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x47, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x80, 0x8, 0x81, 0x7, 0x0, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0xb, 0x1, 0x4, 0xc, 0x36, 0x1b, 0xc, 0x9, 0x3, 0x30, 0x36, 0x3, 0x1, 0x48, 0x3, 0x6c, 0x1, 0x30, 0xb, 0x36, 0x2, 0x2, 0x60, 0x12, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x1ff, 0xa, 0x6, 0x3, 0x2, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x8}, {0x1}, {0x1, 0x3}, {0x4, 0x1}, {0x3, 0x7}, {0x5, 0x8}, {0x6, 0x6}, {0x1, 0x1}, {0x5, 0x3}, {0x7, 0x2}, {0x3, 0x1}, {0x3, 0x2}, {0x3, 0x6}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x17}, {0x1, 0x1}, {0x2, 0x8}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0x4}, {0x2, 0x4}, {0x1}, {0x0, 0x9}, {0x6, 0x6}, {0x2, 0x8}, {0x3, 0x7}, {0x7}, {0x5}, {0x0, 0x6}, {0x0, 0xa}, {0x7, 0x5}, {0x5, 0x1}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0x4}, {0x1}, {0x3, 0x2}, {0x4, 0xa}, {0x1, 0x1}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x61}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x7}, {0x1}, {0x0, 0x1}, {0x5, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x1}, {0x3, 0xa}, {0x3, 0x7}, {0x2, 0xa}, {0x6}, {0x6, 0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x2}, {0x7, 0x1}, {0x5, 0x4}, {0x5, 0x8}, {}, {0x6}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0xa}, {0x0, 0x4}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x2}, {0x1}, {}, {0x2, 0xa}, {0x0, 0x2}, {0x3, 0x3}, {0x6, 0x8}, {0x4, 0x7}, {0x7, 0x5}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x12, 0x48, 0x3, 0x9, 0x60, 0xb, 0xc, 0xc, 0x24, 0x9, 0x4, 0x5]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x443, 0x8, 0x3, 0x7, 0xca, 0x7, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x12, 0x4, 0x4]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1e, 0x8712, 0x7, 0x9, 0x1, 0x6, 0x615, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x998e, 0x2, 0x0, 0x0, 0x83b9, 0xff00, 0x200]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x625f, 0x1, 0x40, 0x5, 0x3, 0x4, 0x101, 0xfff]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0xa}, {0x5, 0x3}, {0x2, 0x9}, {0x4, 0x4}, {0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x4}, {0x2}, {0x5, 0x3}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x9}, {0x3, 0x2}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x5}, {0x7, 0x1}, {0x6, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x0, 0x3}, {0x2, 0x9}, {0x7, 0x9}, {0x1, 0x9}, {0x5, 0x4}, {0x1, 0x3}, {0x6, 0xa}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x36, 0xc, 0x3, 0x18, 0x4, 0x3, 0x1b, 0x3, 0x2, 0x36, 0x18, 0x4, 0x1, 0x6c, 0x1, 0x1, 0x16, 0x36, 0x48, 0x36, 0x24, 0x64, 0xb, 0x3, 0x30, 0x1b]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x6}, {0x0, 0x3}, {0x7, 0x9}, {0x7, 0x7}, {0x5, 0x6}, {0x3, 0x5}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x4}, {0x2, 0x7}, {0x5, 0x8}, {0x3, 0xa}, {0x6, 0x5}, {0x4, 0x3}, {0x6, 0x4}, {0x7, 0x1}, {0x5, 0x1}, {0x6, 0xa}, {0x7, 0x5}, {0x1, 0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x3, 0x2}, {0x6, 0x9}, {0x3, 0x4}, {0x5, 0x7}, {0x1, 0x3}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x5}, {0x5, 0x6}, {0x2, 0x2}, {0x2, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x2, 0x7}, {0x6, 0x9}, {0x2, 0x7}, {0x6}, {0x7, 0x1}, {0x2}, {0x6, 0x4}, {0x7, 0x4}, {0x0, 0x7}, {0x2, 0x4}, {0x4, 0x8}, {0x2}, {0x0, 0x7}, {0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x3, 0x6}, {0x5, 0xa}, {0x5, 0x9}]}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xab32, 0xb, 0x1, 0x563, 0x6, 0x95, 0x5044, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x4, 0x5, 0x1, 0xda1, 0x100, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4819, 0xff, 0x0, 0x11dd, 0x8, 0x4, 0x9, 0xc772]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2d74, 0x2, 0xe4, 0x7, 0x3, 0x7, 0x6, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x18, 0x12, 0x12, 0x44, 0x16, 0xc, 0x16, 0x4, 0x36, 0x119142a5518733e2, 0x16, 0x24, 0x0, 0x12, 0x18, 0x31, 0x16, 0x48, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x4, 0x8001, 0x800, 0xfff, 0x6, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x9, 0x0, 0xc9, 0x0, 0x1, 0xff7f]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x4}, {0x4, 0x3}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x9, 0x5cd9, 0x0, 0xfa85, 0x1000, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x9, 0x8000, 0x1, 0x2, 0xf15, 0x40]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x2, 0x18, 0x1, 0x3, 0x2, 0x60, 0x24, 0x3, 0x36, 0x30, 0x9, 0x6c, 0x24, 0x1b, 0x16, 0x48, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8000, 0xff09, 0x3, 0xebb9, 0x9, 0x2, 0x1]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0xc, 0x12, 0x3, 0x3, 0x16, 0x0, 0xb, 0xc, 0x16, 0x6c, 0x31cf1972dc80634a, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x7, 0x4, 0x6, 0xfe01, 0x8, 0xf503]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x12, 0xc, 0x6, 0xbcb222bce8d11ee9, 0xb, 0x6, 0x1, 0x2, 0x60, 0x6c, 0xb, 0xc, 0x12, 0x1, 0x36, 0x2, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0x3}, {0x6, 0x6}, {0x3, 0x9}, {0x2, 0x7}, {}, {0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0xb, 0x6c, 0xb, 0x16, 0x2, 0x48, 0x1b, 0x16, 0x3, 0x2, 0x1]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x4}, {0x6, 0x5}, {0x3, 0x9}, {0x3, 0x5}, {0x6, 0x3}, {0x3, 0x7}, {0x4, 0x5}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x0, 0x8}, {0x3, 0x5}, {0x1, 0x2}, {0x5, 0x5}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x3}, {0x5, 0xa}, {0x3, 0x8}, {0x1, 0x9}, {0x3, 0x5}, {0x0, 0xa}, {0x7, 0x4}, {0x5, 0x3}, {0x6}, {0x2, 0x9}, {0x1, 0x4}, {0x4, 0x4}, {0x6, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x6}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x3}, {}, {0x2, 0x7}, {0x6, 0x2}, {0x7, 0x2}, {0x0, 0x3}, {0x5, 0xa}, {0x5, 0x9}, {0x0, 0x8}, {0x4, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0x2}, {0x7, 0x7}, {0x6, 0x4}, {0x2, 0xa}, {0x3, 0x3}, {0x4}, {0x0, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x0, 0xa}, {0x2, 0x9}, {0x6, 0x4}, {0x3, 0x3}, {}, {0x7, 0xa}, {0x2, 0x5}, {0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x8}, {0x6, 0x1}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x4}, {0x2, 0x3}, {0x1, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x1}, {0x6, 0x8}, {0x0, 0x1}, {0x5, 0x6}, {0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x1, 0x6, 0xa940, 0x0, 0xc, 0x4]}}]}]}]}, {0x430, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x49}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x378, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xa2, 0x6, 0x2, 0xd, 0x63, 0x1, 0x6]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x3, 0x9}, {0x0, 0x6}, {0x2}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x8}, {0x2, 0x5}, {0x0, 0xa}, {0x2, 0x9}, {0x2, 0xa}, {0x3, 0x1}, {0x4}, {0x4}, {0x0, 0x4}, {0x2, 0x4}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x7}, {0x5, 0x5}, {0x2, 0x2}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x8, 0x5, 0x8, 0x7, 0x5, 0x1, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x0, 0x4, 0x4, 0x60, 0xb, 0xb, 0xb, 0x3, 0x4, 0xb, 0x5, 0x2, 0x30, 0x5, 0x31, 0x1, 0x24, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6a, 0xed, 0xe, 0xff, 0x8, 0x7, 0x3, 0x3]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x8}, {0x2, 0x9}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x9}, {0x4, 0x3}, {0x1}, {0x0, 0x7}, {0x6, 0x2}, {0x7, 0x5}, {0x2}, {0x6, 0x2}, {}, {0x2, 0x2}, {0x0, 0x5}, {0x2, 0x4}, {0x1, 0xa}, {0x5, 0x2}, {0x3, 0x3}, {0x7, 0xa}, {0x7, 0x3}, {0x0, 0x8}, {0x6, 0x5}, {0x3, 0x9}, {0x3, 0x5}, {0x0, 0x6}, {0x6, 0x1}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x54, 0xd, 0x7, 0x7, 0x81, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x1, 0x3ff, 0x7, 0x45a, 0xc, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x57, 0x5, 0x0, 0x0, 0xc447, 0x5, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0xb9a, 0x40, 0x5, 0xe, 0x50, 0x4, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x10, 0x18, 0x16, 0x36, 0xc, 0xb, 0x1, 0x36, 0x30, 0x2, 0x60, 0x2f, 0x48, 0x24, 0x2, 0x18, 0x1b, 0x4, 0x3, 0x2, 0x30, 0x2, 0x6c, 0x36, 0x4, 0x1, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x81, 0x7, 0x1, 0x9, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x16, 0x26, 0x12, 0x1b, 0x1b, 0x48, 0x2, 0x24, 0x24, 0xc, 0x6c, 0xc, 0x5, 0xc, 0x48, 0x1b, 0x18, 0x5, 0x5, 0x6c, 0x6, 0x18, 0x36, 0x5, 0x28, 0x36, 0x16, 0x5, 0x4, 0x24, 0x3]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x6}, {0x7}, {0x4, 0x9}, {0x5, 0x2}, {0x4, 0xa}, {0x4, 0x1}, {0x3, 0x9}, {0x3, 0x8}, {0x3, 0x3}, {0x2, 0x7}, {0x2, 0x9}, {0x0, 0x9}, {0x6, 0x8}, {0x5, 0x9}, {0x0, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x4, 0x9}, {0x1, 0x6}, {}, {0x5, 0x6}, {0x2, 0x8}, {0x2, 0x5}, {0x6, 0xa}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0xa}, {0x0, 0x2}, {0x4, 0x6}, {0x6, 0x8}, {0x1, 0x7}, {0x7, 0xa}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x7689, 0xb, 0x3, 0x5, 0xe, 0xb, 0x2]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x15, 0x18, 0x12, 0x16, 0x4d, 0x18, 0x36, 0x1, 0x6, 0x6c, 0xc, 0x1b, 0x1, 0x9, 0x4, 0x1b, 0x36, 0x1b, 0x1b, 0x4, 0x4, 0x36, 0x1b, 0x12, 0x4, 0x9, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5d3, 0x1, 0x19, 0x2, 0x5, 0x8, 0x4b, 0x81]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1998, 0x74, 0x71, 0x8, 0xfff8, 0x401, 0x8001]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x4}, {0x3, 0x3}, {0x1}, {0x5}, {0x0, 0x4}, {0x2, 0x3}, {0x1, 0x3}, {0x3, 0x5}, {0x0, 0x3}, {0x4}, {0x1, 0x8}, {}, {0x5, 0x4}, {0x4, 0x4}, {0x6, 0x7}, {0x2, 0x9}, {0x7, 0x3}, {0x2, 0x4}, {0x4, 0x3}, {0x7, 0x1}, {0x7, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0x8}, {0x1, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x60, 0xb, 0x24, 0x7, 0x18, 0x12, 0xb, 0x16, 0x24, 0x16, 0x0, 0x24, 0x0, 0x16, 0x18, 0x3, 0x6, 0x1, 0x24]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x30, 0x1, 0x24, 0x46ef76888d1395dd, 0x48, 0x49, 0x5d, 0x1b, 0x6, 0x60, 0x1, 0x24, 0x9, 0x48, 0x48, 0x1, 0x2, 0x12, 0x18, 0x16, 0x16, 0x24, 0x5, 0x6, 0x6, 0x30, 0x18, 0x30, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xea, 0x5, 0x7ff, 0x8, 0x6, 0x6, 0x1ff, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7a7, 0x3, 0x100, 0x8, 0x7, 0x6, 0x13, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1268, 0x3, 0x800, 0xff, 0x800, 0x2, 0x5a]}}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0xa}, {0x0, 0xa}, {0x1, 0x17}, {0x6, 0x3}, {0x3, 0xa}, {0x0, 0x2}, {0x4, 0x7}, {0x2, 0x8}, {0x1, 0x7}, {0x6, 0x4}, {0x2, 0xa}, {0x2, 0x7}, {0x4, 0x4}, {0x2}, {0x0, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x2, 0x6}, {0x5, 0x4}, {0x5, 0x7}, {0x7, 0x9}, {0x5, 0x9}, {0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x5}, {0x4, 0x1}, {0x7, 0x8}, {0x5}, {0x1, 0x8}, {0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x6}, {0x6, 0x9}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x1f}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x6}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x4, 0x2}, {0x2, 0x3}, {0x4, 0x2}, {0x6, 0x1}, {0x2, 0x4}, {0x2, 0x8}, {0x7, 0x2}, {0x3, 0x2}, {0x6, 0x8}, {0x3, 0x9}, {0x5, 0x1}, {0x6, 0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x7, 0x3}, {0x7, 0x2}, {0x7, 0x4}, {0x5, 0x1}, {0x4, 0x3}, {0x6, 0x5}, {0x7, 0x9}, {0x1, 0x9}, {0x1, 0xa}, {0x6, 0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x3, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0x8}, {0x3, 0x8}, {0x1, 0x6}, {0x5, 0x8}, {0x1, 0x2}, {0x6, 0x4}, {0x5, 0x7}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x8}, {0x1, 0x8}, {0x7, 0x5}, {0x2, 0x19}, {0x5}, {0x1, 0x7}, {0x2, 0x1}, {0x0, 0x2}, {0x6, 0x2}, {0x2, 0x6}, {0x3, 0x3}, {0x6, 0x8}, {0x6, 0x8}, {0x0, 0x1}, {0x7, 0x3}, {0x2, 0x4}, {0x5, 0x5}, {0x7, 0xa}, {0x6}, {0x5, 0x9}, {0x7, 0x2}, {0x7, 0x8}, {0x3, 0x6}, {0x7, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0x8}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x6}, {0x0, 0x8}, {0x2, 0x6}, {0x2, 0x1}, {0x0, 0x4}, {0x5, 0x4}, {0x1, 0x11}, {0x1, 0x1}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x5}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0x8}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x24, 0x5, 0x19, 0x30, 0x30, 0x4, 0x5, 0x48, 0x12, 0x16, 0x1, 0x6, 0x1, 0x3, 0x6, 0x16, 0x1, 0x3, 0x7, 0xb, 0x5, 0x6, 0x1, 0x30, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf5e9, 0xec80, 0x8, 0x7, 0x3, 0xa6cd, 0x4, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc5e6, 0x1, 0xd, 0xc, 0xe, 0x8, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x400, 0x5, 0xf1, 0xfffe, 0x7012, 0x7fff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x26}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x48}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x88}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x1e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x48, 0x5, 0x3, 0x1, 0x16, 0x3, 0x48, 0x16, 0x48, 0x6, 0x1b, 0x24, 0x6, 0xb, 0x16, 0x18, 0x24, 0x48, 0x5, 0x36, 0x6c, 0x30, 0x50, 0x9, 0x3, 0x60, 0x9, 0x60, 0x6c, 0x16, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x9}, {0x2, 0xa}, {0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x4}, {0x3, 0x5}, {0x5, 0x2}, {0x5, 0x3}, {0x0, 0x3}, {0x6, 0x8}, {0x7, 0x4}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1df, 0x5, 0xdfd0, 0x7, 0x5, 0xfff7, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x4}, {0x6, 0x4}, {0x6, 0x6}, {0x3, 0x3}, {0x6, 0x7}, {0x0, 0x3}, {0x6, 0x3}, {0x5, 0x5}, {0x2}, {0x7, 0x8}, {0x5}, {0x5, 0xa}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x4, 0xa}, {0x3}, {0x4, 0x4}, {0x5, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7f, 0xb, 0x0, 0x0, 0x1, 0x1, 0x3]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfffa, 0xd1f, 0x9, 0x4, 0x100, 0x31, 0x9]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x8}, {0x3, 0x4}, {0x6, 0xa}, {0x1, 0x7}, {0x2, 0x9}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0x4}, {0x3, 0x3}, {0x5, 0x8}, {0x0, 0xa}, {0x3, 0x6}, {0x1}, {0x7, 0x4}, {0x5, 0x5}, {0x5, 0x9}, {0x2, 0x1}, {0x1, 0x2}, {}, {0x2, 0x5}, {0x7, 0x4}, {0x5, 0x3}, {0x1}, {0x1, 0x5}, {0x7, 0x4}, {0x0, 0x5}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x9}, {0x7}, {0x1, 0x8}, {0x4}, {0x3, 0x5}, {0x4, 0x5}, {0x1, 0x9}, {0x3, 0x1}, {0x4, 0x9}, {0x6}, {0x7, 0x7}, {0x6, 0x5}, {0x1, 0x2}, {0x4, 0x4}, {0x7, 0x5}, {0x7, 0x2}, {0x5, 0x1}, {0x7, 0x9}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x5, 0x2}, {0x3, 0x9}, {0x0, 0x5}, {0x3}, {0x0, 0x8}, {0x7, 0x4}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0x5}, {0x7, 0x3}, {0x3, 0x5}, {0x4, 0x4}, {0x2, 0x8}, {0x6}, {0x5, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x0, 0x8}, {0x4, 0x2}, {0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0xa}, {0x3}, {0x0, 0x5}, {0x6, 0x1}, {0x3, 0x2}, {0x6, 0xa}, {0x3, 0x6}, {0x5}, {0x4, 0x7}, {0x2, 0x7}, {0x6, 0x9}, {0x4, 0x8}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x8}, {0x1, 0x2}, {0x7, 0x2}, {}, {0x6, 0x2}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0x5}, {0x4}, {0x3, 0xa}, {0x4, 0x6}, {0x7, 0x8}, {0x7, 0x3}, {0x5, 0x7}, {0x2, 0x8}, {0x1, 0x6}, {0x4, 0x7}, {0x6, 0x6}, {0x7, 0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x8}, {0x6, 0x9}, {0x1, 0x4}, {0x0, 0x7}, {0x4}, {0x2}, {0x3, 0x3}, {0x7, 0x6}, {0x3, 0xa}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0xa}, {0x3, 0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x0, 0x6}, {0x2}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x2, 0x8}, {0x5, 0x2}, {0x2, 0x6}, {0x0, 0x8}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x1}, {0x7, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x51}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x85}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}]}]}, 0x1664}, 0x1, 0x0, 0x0, 0xef6ed5f41b91b1e1}, 0x40) 2m34.34093392s ago: executing program 5 (id=1031): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x2, 0x0, 0x5, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x70}, 0x1, 0x7}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 2m34.246631309s ago: executing program 5 (id=1034): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x20000000) r0 = socket(0x1e, 0x4, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe59}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) close(0x3) 2m34.026250496s ago: executing program 5 (id=1039): r0 = socket$kcm(0x10, 0x2, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="354b0ad8d4c35c430c4c03b058e488ff92ce42f27824bdba8fa41c945e0ea80f0103829ac8ee472da5e9d53c9ac9415af81f8486e188cb79a4b9060da1a700995bff3ffd585bd1ffe7141e549efcc706220e19cc6406b7d80222d01dc530050da5707ef142e108d585c5bc4257c80ef7fbe87b48e1b6cca2a666531c2ca427c73f5635aa0255500d6b655bfeedbae2cdc6fce49861091f0037a22de5f4e8e59b9c", 0xa1}, {&(0x7f0000000200)="4b823bcbef4e733bde3186c9234a39662f81bc7e6f7ff7f068f8d0ed872d3a467849ca214050b311af4eeba90c9e01cd0a5fea1a75e1af6a0eae5f69c069f3caadb3635023f5d7bf6c28", 0x4a}], 0x2) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)=@phonet, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/169, 0xa9}], 0x1, &(0x7f0000000440)=""/139, 0x8b}, 0x92e0050c3590d976) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) 2m33.686015927s ago: executing program 5 (id=1045): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x40002, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffffe}]}}]}, 0x38}}, 0x40c4) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1d, 0x8, 0xa, 0x8, 0x10080, 0x1, 0x2, '\x00', r3, r4, 0x1, 0x5, 0x3, 0x0, @void, @value, @value=r5}, 0x50) 2m33.456632766s ago: executing program 5 (id=1048): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="07000000000000000000050000001c000380080004001a0000000800020020000000080005007180bbda180001801400020073797a5f74756e000000000000210000050006"], 0x50}, 0x1, 0x0, 0x0, 0x4000820}, 0x2000c000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$SIOCAX25ADDUID(r8, 0x89e1, &(0x7f0000000080)={0x3, @bcast}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000300)={0x7, 'batadv_slave_0\x00', {0x2}, 0x5}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@remote, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @dev={0xac, 0x14, 0x14, 0x23}}}}}, 0x0) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="933b207f", @ANYRES16=r7, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099004100000060000000080026009a030000"], 0x30}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0xfffffff0}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x900, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x1c, 0x5a, 0x10, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x932f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048441}, 0x4008045) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f00000002c0)=0x40, 0x4) 2m19.516342609s ago: executing program 4 (id=1258): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000040), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f0000000cc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="140000000000000000000000070000044404c34100000000"], 0x18}}], 0x1, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800147ca2ec688c0efc01d1d829e66ef8d1f3010e6e3c4664e9ec36f0c02e5a634cf8671ae12cbdcfa9d51cc6bcab16125f237a0c912054e62c99a6f560d471de4bbfbe8003a061d8f22d1a2997f81917b934b7f1aca6ecd13a5bc36acba7d02c4983a2ae70764bad438dd405f797b7f40dfd25465b7daa00"/132], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff1e, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32, @ANYBLOB="000500000000000000003f80090001"], 0x7c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800) syz_emit_ethernet(0x29b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0xc9100120, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x61) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) 2m19.336396669s ago: executing program 4 (id=1259): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0xa, 0x2) getsockopt$bt_hci(r1, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40004) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x4, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, 0x28}}, 0x20000000) 2m18.901351699s ago: executing program 4 (id=1262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0xc8, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc0f}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x80000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffffb, @rand_addr=' \x01\x00', 0x81}}}}]}]}, 0xc8}}, 0x4000044) 2m18.773355694s ago: executing program 4 (id=1264): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2d, 'net'}, {0x2b, 'net_cls'}, {0x2b, 'freezer'}, {0x2d, 'blkio'}, {0x2d, 'perf_event'}, {0x2b, 'perf_event'}]}, 0x36) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b322b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a080001"], 0x80}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xe, &(0x7f0000f59ffc)=0xc, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0x7, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 2m18.589682272s ago: executing program 4 (id=1265): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x4c, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x4}, @device_a, @from_mac=@broadcast}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x85}, 0x40014) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2m18.486392444s ago: executing program 4 (id=1266): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) syz_emit_ethernet(0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004b03007200000000002f907802000000e000000101071757ac1e0001ffffffffac1a14bbffffffffac1e0101248022eb000000001000080003d5000086dd080088be00000000100000000100000000000007080022eb0000000020000000020000000000000000000000080065580000000063126d6b34ee46d57bd7dda55e758fb4d93c6a39662b83c9e3c57356a18e58cbf1d59d579302226d3bfebab0e8665820d8f23a7a01b5b971a9fd88832643d15f23d46fa63ad0275642312256da9a0555c05e9a89ec0c71f8182a"], 0x0) 2m18.380009107s ago: executing program 33 (id=1048): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="07000000000000000000050000001c000380080004001a0000000800020020000000080005007180bbda180001801400020073797a5f74756e000000000000210000050006"], 0x50}, 0x1, 0x0, 0x0, 0x4000820}, 0x2000c000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$SIOCAX25ADDUID(r8, 0x89e1, &(0x7f0000000080)={0x3, @bcast}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000300)={0x7, 'batadv_slave_0\x00', {0x2}, 0x5}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@remote, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @dev={0xac, 0x14, 0x14, 0x23}}}}}, 0x0) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="933b207f", @ANYRES16=r7, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099004100000060000000080026009a030000"], 0x30}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0xfffffff0}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x900, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x1c, 0x5a, 0x10, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x932f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048441}, 0x4008045) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f00000002c0)=0x40, 0x4) 2m3.307508753s ago: executing program 34 (id=1266): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) syz_emit_ethernet(0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004b03007200000000002f907802000000e000000101071757ac1e0001ffffffffac1a14bbffffffffac1e0101248022eb000000001000080003d5000086dd080088be00000000100000000100000000000007080022eb0000000020000000020000000000000000000000080065580000000063126d6b34ee46d57bd7dda55e758fb4d93c6a39662b83c9e3c57356a18e58cbf1d59d579302226d3bfebab0e8665820d8f23a7a01b5b971a9fd88832643d15f23d46fa63ad0275642312256da9a0555c05e9a89ec0c71f8182a"], 0x0) 6.000421821s ago: executing program 2 (id=3041): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9b1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x80, 0x1, 0x0, 0xfffffffe}, {0x6, 0x0, 0x10}]}, 0x10) 5.767108129s ago: executing program 2 (id=3044): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x40000000015, 0x5, 0x0) close(r2) r3 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r5, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x38}}, 0x4001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000ff1b963c70", @ANYRES16=r1, @ANYBLOB="00082bbd7000ffdbdf250100000006000200010000000c0010001300000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r9, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a1", 0x4}], 0x1}, 0x9fc) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054) write$nci(r10, &(0x7f0000000500)=ANY=[@ANYRESDEC=r11], 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4004011) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000240)={0x2, 0x5c}) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r9, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x22, 0x3, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x76}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008040}, 0xc840) connect$phonet_pipe(r3, &(0x7f0000000080)={0x23, 0x8, 0x2, 0x4}, 0x10) 5.613569703s ago: executing program 0 (id=3045): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x2) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xfffb, 0x1}, 0x6) socket$key(0xf, 0x3, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000080)={0xf5, 0x28, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x80000001, 0x2, 0x0, 0x40, 0x100ad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000180c20000020800450000b0000000000011907800000000e0000001000017c1009c987801000000000000000b86593a76b6d632e9a5fe27d5ee934c69cb81002b26000000000000000000005e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce6a9f3a451dd71d8723c02c2a4a00f81073727f3ac9f91e284b975a3212904b133eebafc6d6170600000000002100"/190], 0x0) 2.610416568s ago: executing program 2 (id=3057): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1ff, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2.553534433s ago: executing program 0 (id=3058): openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xffffffffffffff8d}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40040) listen(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f79568c029e530c3899ae5d322348df7"}]}}}}}}}}, 0x0) 2.435974019s ago: executing program 0 (id=3060): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 1.953904962s ago: executing program 1 (id=3070): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x8000}}}}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0xfd96}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2100}]}}, &(0x7f0000000000)=""/144, 0x32, 0x90, 0x1}, 0x20) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001900)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000001a00)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001a40)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in=@remote, 0x4e22, 0xfffc, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x1d, r6, r7}, {0x8000, 0x7, 0x5, 0x4, 0x8, 0xfb7, 0x5, 0xdbff}, {0x10, 0x4996, 0x4a, 0x800}, 0x9, 0x0, 0x2, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x4d3, 0x6c}, 0xa, @in=@broadcast, 0x3507, 0x1, 0x2, 0x9, 0x6, 0x1ff, 0x3}}, 0xe8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000200)=0x8) r10 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r10, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x3c, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x3c}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.820011256s ago: executing program 6 (id=3072): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) close(r4) r5 = accept$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000240)=""/215, &(0x7f0000000340)=0xd7) 1.763713124s ago: executing program 7 (id=3073): socket$kcm(0x10, 0x3, 0x0) (async) r0 = socket$kcm(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) (async) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000400000e0000000001000000080002000300000008000100030000005af7481822dd8edc48172cd51c09000dcc66f95ffd6116a9cc65f16a9aa8e588348b4b12ac48040e91e3369f241e1c289121d8ba2bcd4cb5650554fd647b48a6531052343ffa829d8f6547e56e0063317c2ae88992b6196bf3a4537ce4dc9bc7f6d10025dfa72fdea5b2635eb4ae463040a52b7b24b59d21b9b18f46f063de47990770964cb1524ae003c7a829c436d348bc521c7f3768f25fe8e49f727612a469e1112b7f0c922b31c1c55f4b01aacc76e668d89cae8373b90dac1f7e5b3ff587896fb5b8d1329d7aa36b45eb7bd0af4b23560633dc12434935de7fc7a95bc83c0f46d30bfbbb1c1e863078bbf662e81cbee09c0e0ebd13bd68a06ef17eef7612ee307bf034b6e75e19b1a6bb1d1d219ca222e29fd234145982d296dd28c2a12aae"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00000000000000000700000000000000007f000001000000000000000000000000000000d8"], 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000003000), 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x5, 0x0) (async) r6 = socket(0x3, 0x5, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000f38f017eb057c8610009060000000000003698c18a1fe1bcd65a01c9fb7d4ec687e8a77cd5c797ada8c572e2bcbba04b8ec8be51ae3d9d19a763808965a6", @ANYRES32, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000f38f017eb057c8610009060000000000003698c18a1fe1bcd65a01c9fb7d4ec687e8a77cd5c797ada8c572e2bcbba04b8ec8be51ae3d9d19a763808965a6", @ANYRES32, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x30, 0x0, 0x0) (async) getsockopt$inet6_buf(r7, 0x29, 0x30, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000002f1ff00000000000000000017181200", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r9}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r9}, 0xc) sendto$inet(r6, &(0x7f0000000380)="13bf7245b74852ff5fc363eb4dafef1258a8203e1d0bf9c8cc1a52915dcad3fc53c117529cd4fd9a9b5ee609f52db7e42c5b6727f845c4fc8855839013b64db25504", 0x42, 0x4005, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt(r5, 0xc3d5, 0x81, &(0x7f00000007c0)="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", 0x22b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="017f00000000000000200300000004"], 0x18}}, 0x4000) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="017f00000000000000200300000004"], 0x18}}, 0x4000) r11 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 1.673483576s ago: executing program 1 (id=3074): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x0, 0x4, 0xfffffffc, 0x25dfdbfd}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000180)={{0x8f, @multicast2, 0x4e23, 0x1, 'fo\x00', 0x25, 0x1, 0x75}, {@remote, 0x4e24, 0x4, 0x1, 0xfb, 0xf3}}, 0x44) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0xb4, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xa0, 0x1, '\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc1\x9fz\x14T\xd5o\xdd\xf9m3vH\xf7\xcf\xc3\xc0A?\xc7\xce^\x12\xbc\xba\xd6\x80\xb7\xa9\xbc\xc9\x0e\x8ek\x83a\xdb\x14\xf7\xe8\xfb\xa0\f\x12\xf3R\xf8\xeb\xfb\xa7\xc0j_[\xc0\x1d}M\x81\xc2\x02\xbc\x84\xd4&RTP\xa7\xfb\xefe+\xfcuy\x832i\x87m\tB\x86\xf24S[\x89\x7f\xe23\xc6bj\xa7\xe4\x9c\x8eH\x86\xd9\xd4#\xa6\xda\x88\xbf\xf3\xe4\f\xf1jT\x80j\xcd\x1a\x1b\xd8^\xef\x99\x14\x8a*\xe6K\x87c\x93my\x18\xe8H\x103\xf0'}]}, 0xb4}}, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000200)) 1.599716671s ago: executing program 6 (id=3075): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000140)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000a00)={{r1}, "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"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'veth0\x00', &(0x7f0000000440)=@ethtool_eeprom={0x48, 0x6bf, 0x8}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000500)={0xf127, 0x1, 0x4, 0xffff, r9}, 0x10) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="33000000a83ce337e9607b3bdac2e7b9aaa2543a6ee2597aaf1cee7abb44108df5a9df4d9d2dc94bfeecd865394f03ca4034bda8fc0e17ee10ae51808b32d9f0831b670cf1073877d2210045", @ANYRES16=r7, @ANYBLOB="010829bd70000000000007000000050013000900000014000800"/42], 0x30}}, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x5}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010001", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0x4e24, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "f549fe853636"}}}}}}}, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5102000790800004"], 0x162) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r13, @ANYRES64, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES16=r8, @ANYBLOB="01"], 0x48}}, 0x0) 1.599240595s ago: executing program 7 (id=3076): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2b, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000000)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r0}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f00000005c0)={@remote, @random="001a00e100", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x42, 0xaa, "d4"}}}}}}, 0x0) 1.598680074s ago: executing program 2 (id=3077): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x80001, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@bridge_getvlan={0x30, 0x72, 0x800, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) (async) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1}, 0x60) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0x401) (async) getsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) listen(r6, 0x0) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) (async) shutdown(r6, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000300000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008900000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r1, 0x620ee000) (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x48, 0x2d, 0x1, 0x0, 0x0, "", [@generic="4411e98ea8e4e1b30d5de91d8d3342d080c1bd50f0635d99c9b008f7a1c4c7eb46cfc0d89f274bcd36c0789778479ce166da929c410ff4"]}, 0x48}], 0x1, 0x0, 0x0, 0x4040810}, 0x0) 1.39668189s ago: executing program 7 (id=3078): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000100)={r6, 0x0, 0x10, 0x20000000006, 0xb1aa}, &(0x7f0000000040)=0x18) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r3, 0x2f, 0x8, 0x4}, 0x20) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000080)={r8, 0x2}, 0x8) 1.392022289s ago: executing program 2 (id=3079): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000980)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x10001, &(0x7f0000000180)={@align=0x1, {0x7fff, 0x9, 0x7, 0x6}}, 0x0, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0x10}, 0x6, &(0x7f00000008c0)=[{0x1, 0x7ff, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="cd0045e68597bfa6532b29146b34a0f9ff2a948978e2454343779e37d95a390f420cd99c638d31791805cbe07d32e1096aa136633c7c76471ad55c866df95d5c5b7319f829a7684766a67b2dc498ca3cad02624761268863f2137f93dcd1069d1f80e7e3406cf8ad1533939c07df37686d416c39feacb22fe8b36217a5308efbf6948a816070f3ff1a9575abe68e1f8eda79f31055ea", 0x96, 0x2}, {0x1, 0x100, &(0x7f0000000380)='(%*.&J\x00', &(0x7f00000003c0)="0f6d8e67d95691d819cd5b247444639ce0f2ad49bee8c88a4f63821b11117f6aef5876cbdd85d8ec2e101041cad89d032405ec5c8531224e0ea6e8befce0169638d848644aafeb3ea415e4aabf494c4006eb3d6be0734a9cec53f09642f0d1c792d4121aa0db50", 0x67, 0x30}, {0x3, 0x7, &(0x7f0000000440)='$.-)^\x00', &(0x7f0000000480)="b6ce6d991ddb98e373d7c0bcaef213a72b388d95feb04a50aad7755f6752efb8886449e1cdadbe72aa47a5add50469a35aa63f8e71b9ef2c118502f54f6ad02cae8df85815b660784caa77a33e8e246df2d9f4b2d7ed47e60d88b812e773b32ccd79c93e15a02accc1fc890c3eef8cbad4612bde997f87e8df6fb6969a693389287c0a1bb6ac07c7a2fe1027480fe9895e8d145b95d13cb4b5095cf9204167ae", 0xa0, 0x22}, {0x3, 0x6e, &(0x7f0000000540)='H!+&}*O/(-)&\x00', &(0x7f0000000580)="cba91cc12d5c968bf99fba7d4be6c82c7f6ac6336e26135431fbd1134938168617de512cc7ebd3140333ffb0d4738a3b3c63ac7b3783cfb280a3735789c702e9d11a27b4a12a63221e77938f94ed4e149641ac29c7cb70237e313befecc24d708d53374bacc54875f2ad3565742b5b5e7bbd642d890a0112513e5dc8bfb250f2d10226efa99fdb57f93813d049ff9b37a5c445ba", 0x94, 0x8}, {0x2, 0x9ca, &(0x7f0000000640)='!/-]}{\x85-^\x00', &(0x7f0000000680)="bba6701cfaa603030d4a407a1d89e12fa54cc663ad3d8ebc910360cbf4516b0d5488a405981986e2ca819e0c271d6e7cde9d9d7369f1b3777d010363fae4361ce9deb36a79b81336987438f9391b64e6cecb8d8cb1a0ca838ecb20caab44767f0977fc0734f69dae162a752b36820042d815947e32d4887d6998b8a26442fc1d8fc6482009f2bb99acfbc6bcca3e72cef9991f307ae16f9d7f8ef4c48bc4a301008722a7acadb623c3a184bb91c9941f2f585141323615545e1afbf7a41eeee921d19f806fffe5e4aa51273735da084389bea7bf5f0389947dcd1f13cec75edfc8b76a1e83052112e928", 0xea, 0x10}, {0x2, 0x1000, &(0x7f0000000780)='&+-.(/\x00', &(0x7f00000007c0)="09b933290cfb66495070ec2c1a7765648ca98dd1f2f633f75a9c3282ba6bf2fea927deca7544809bae9bb1019c01dc8f17be8fb673d19fe810639afa7ae4ec622599bd7a87d9da7c9f43da5256c23cf092ac3072be6fc43c1e82afb1b2bebc773c08d947d085270941ce0d7198d282d3b511f6dc784ede2eefb4d59cd75bda575d48c4de2d4c447fe75df94c36d0edb40818bcbf741549bf382ec38b074f8a8d58cf95fc93cf03cbdc7d6f99c1cf969dcba924c26141ab98a26940190c994c7b8b5a5351", 0xc4, 0x6}]}) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x10, 0x3f8, 0x2, 0x70bd2c, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) (async, rerun: 32) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) (rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900a60d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x8, 0x8, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001780)={@cgroup=r2, r2, 0x2f, 0x2008, 0x4}, 0x20) 1.221613119s ago: executing program 0 (id=3080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86af7b66"], 0xffe) 1.216627765s ago: executing program 1 (id=3081): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x10000, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89ec, 0x0) 1.132782104s ago: executing program 6 (id=3082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000400), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}}}}, @NHA_OIF={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) getpid() r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@dellinkprop={0x2c, 0x6d, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x18022, 0x31000}, [@IFLA_PORT_SELF={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0xd}}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x8, 0x7, 0x40, 0x80000000}, {0x4, 0x63, 0x5, 0x80}, {0x9e6, 0x8, 0xd7, 0x7}, {0x2, 0x6, 0x9, 0x5}, {0x7f, 0x7, 0x7, 0x7}, {0x8, 0x9, 0x2, 0x2}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0x13}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r13 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r11, 0x3c}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="d4", 0x1}], 0x1}, 0x4011) socket$inet6(0xa, 0x1, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.132424034s ago: executing program 7 (id=3083): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x807) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="58020000", @ANYRES16=r2, @ANYBLOB="050407bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="c000028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000500000038"], 0x258}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) close(r0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x58) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) listen(r0, 0x807) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) (async) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="58020000", @ANYRES16=r2, @ANYBLOB="050407bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="c000028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000500000038"], 0x258}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) (async) close(r0) (async) 1.069318731s ago: executing program 1 (id=3084): r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008010}, 0x48007) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, 0x0, 0xe8469dacf6017451}, 0x20) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$nfc_llcp(r0, &(0x7f0000001600)={&(0x7f00000000c0)={0x27, r3, 0x1, 0x7, 0x88, 0x0, "82b8f7b201d4eac81342e5c61fec56f4680571abcf37a2fb1236798f1bce75249b0906fb2d02b3fce5820bc431245b428b2d190b6c3ae6b10356524be3c7ed", 0x24}, 0x60, &(0x7f0000001540)=[{&(0x7f0000000180)="98ddc0477e6b5c0905", 0x9}, {&(0x7f00000001c0)="aa937b4d14da8b10d1bffafb2bf43e0644bcd43a1732bf699448cc08bbd89f7d9e3982e958b9c16a09e6f8fbe00440a2a2cd35dd2fc7326cd00479fbf582792747440ee503781f5804cd7c2ac2d0081a9fc4d0e6ec38c171b1c1717930c5c50a9d4081e1612c64e0762297281241b411a3599879d71aef57f7c2a3de4887a486ebf53ce16ea581b56184ad30be26828d023399cbaa403af6ec5c13598f64da80b91329202ca19350b76966bc22318ce2c8d959ffccc86fef641b12", 0xbb}, {&(0x7f00000002c0)="86061fa8f8", 0x5}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="0a50bf41569ba5ac002059f3187071ea97d136912f83ca3f4bc5ef0e80c6f7714137cb463c8fabca8f784e02fef1e5246ba88d40dac097df7ba3f4731c09155e00e3f7fbe960fa444cfeb85491cb579a6b31c591a3c628ee32282e5e1667351909afe578ba93b52ecde114356edad84fffdb4bb0f89c0319eb09d480f7604315345522d5496d62d627641e265523c6cd1da63c78a40e08b0e47e517f87ae66b932046f63fe6f8d920f60727d0eea5e01a1921f0778ec", 0xb6}, {&(0x7f00000013c0)="98d3e68a6f84615de572ddf354406982af3181148b1367f93cf85032fead7110e52f3a1951a727b4aca424f5a66b88cd54555f7062fb4482e8b83b40fb4fbcb6b258f91b558b3cacd1d063229f71a8491e9f8be699fa7b73ebe905770c4d4f9561e4dd579283cec148c671a32b9215bbb976405384abe28351230b82", 0x7c}, {&(0x7f0000001440)="4d4c025d5de7cbae8b26741f8465a25bc5145751d525dc0c77fe514f853031dccfcc605a1f4ad42dbd2cf787e0312cfb6148ef1a2bb7b5af14597e4425d0db3de95590641dce0b7483c66fae5df7e486944bf6fd00bedbef83dbd06e2e2bcac89256abc697e0e7212ed48d1a4819997825ba6ff1b3cd1c44bf08492c0a22bb47491029404016ae11bf8e30853f69079568b7f209a2bc94281683ef0289ed965a525520413ede10f25faadb2fb7048077c9704a39c970d2d5de8faad6d72ab7d54ad181732c3e695bca841a7cb49840b9a6bc5b6b9653171bae3626", 0xdb}], 0x7, &(0x7f00000015c0)={0x40, 0x6, 0x3, "c65427c86e99f3fbd9285a71604ac5b049be8186f4e8587ea52be27ce2add89ef8656831637c84093e"}, 0x40, 0x20000004}, 0x40080) 1.000113251s ago: executing program 0 (id=3085): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xf, 0x0, &(0x7f0000000080)) (async, rerun: 64) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (rerun: 64) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000060008000000000006000a00000000000500070000000000"], 0x2c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005d40)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="34000000000000000000000007000000442420f9"], 0x38}}], 0x1, 0x0) 945.42238ms ago: executing program 2 (id=3086): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2b1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)="89e7ee0c7cdad9b4b47380c988cafbabf3bd80af82e0fac38c2205eaa7d2", 0x1e}], 0x1) 944.961944ms ago: executing program 7 (id=3087): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024000fa2353f12800c0001006d6163766c616e0014000280100005800a00040000000000"], 0x44}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}, 0x1, 0x0, 0x0, 0x20000014}, 0x24040081) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4c804}, 0x40) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010030bd7000ffdbdf250c00000008000300", @ANYRES32=r4, @ANYBLOB="0a00fb000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe", 0xa5}], 0x1}}], 0x1, 0x240080e4) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r6, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @null]}, 0x48) accept4$ax25(r1, &(0x7f00000001c0)={{0x3, @bcast}, [@rose, @netrom, @bcast, @bcast, @remote, @default, @bcast]}, &(0x7f0000000240)=0x48, 0x80800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x101, 0xfffd, 0x4}, 0xc) listen(r1, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010001184b1a000000002c00000011ffffff020000000000fad8800f095700000000000b00000000000000000100000d000000000000000003000000010000008f000000"], 0x0, 0x46, 0x0, 0xa}, 0x20) socket(0x27, 0x0, 0xffbfffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r6], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 853.521595ms ago: executing program 1 (id=3088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x7}, 0x8) (async) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x3fffff, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) accept4$vsock_stream(r3, &(0x7f0000000340)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "000000000000001c", "74c289bfa825c781bef1997d9e0a3345", "5ceff78f", "e1ec00"}, 0x28) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, 0x3fa, 0x300, 0x70bd2a, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x11, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}]}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 785.005996ms ago: executing program 1 (id=3089): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_genetlink_get_family_id$nl80211(0x0, r0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) close(0x3) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd7fd24001613802b}, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 705.393096ms ago: executing program 6 (id=3090): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x28}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="cd0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000010000000c00"/28], 0x50) (async) sendmsg$802154_dgram(r1, &(0x7f0000000cc0)={0x0, 0x48, &(0x7f0000000040)={&(0x7f00000002c0)="05000000b92ba9e375f3d5a1fc0751577daff448fb417eb76377c3075661e57f6a1ad88443faf85a902e03e4c4e68c258b10a733e428ae2cd65cf9e52e6a23541f4bc6970df209050bf052c6624effea5f1e99ad3d96ed78ff3f524af2c90d5643d563b4f469a937cccad6efa449da086721a42a6616eb56afdf6e1e977964a59a007754d9a22bf26ddb67fb3cd24af531bb3a42a0532ff51473993bd4fb62b7fae1a02f982796fe3df1f080196ff1db13e62950561bf6330ce41dde70f59450a43a0e5678b45689b989d46e9e242cc89f34cd04c4e22e5cc1f1035c5010fd47be95ca79f9a85bf56011d8397d00"/253, 0x1}}, 0x20000855) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000280)) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, 0x0) 676.362342ms ago: executing program 6 (id=3091): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x9b, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x90) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@remote, @default, @null, @remote, @bcast, @remote, @rose]}, &(0x7f0000000140)=0x48, 0x1000) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x7, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 615.373991ms ago: executing program 6 (id=3092): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0xfffffffffffffdae, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 619.907µs ago: executing program 7 (id=3093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) getgid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x3, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x81}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef98b", @ANYRES8], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 0s ago: executing program 0 (id=3094): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="7334ca", 0x3}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[], 0x12a0}}], 0x2, 0x4000041) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = accept(r5, &(0x7f0000000180)=@in, &(0x7f0000000200)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000340)='scalable', 0x8) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000000240)={'team_slave_1\x00', 0x3, 0x7}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xfc41}], 0x1}, 0x40000) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r1, r0}) close(r3) kernel console output (not intermixed with test programs): attributes in process `syz.2.1422'. [ 230.706634][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 230.803193][T11110] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1426'. [ 231.123084][T11132] xt_cgroup: invalid path, errno=-2 [ 231.302128][T11142] tipc: Started in network mode [ 231.306371][T11144] x_tables: duplicate underflow at hook 1 [ 231.307030][T11142] tipc: Node identity 2, cluster identity 4711 [ 231.326867][T11142] tipc: Node number set to 2 [ 231.517614][T11156] netlink: 'syz.6.1443': attribute type 5 has an invalid length. [ 231.521839][T11157] netlink: 'syz.0.1442': attribute type 9 has an invalid length. [ 231.620658][T11162] xt_l2tp: missing protocol rule (udp|l2tpip) [ 231.748977][T11168] netlink: 'syz.6.1448': attribute type 1 has an invalid length. [ 231.923708][T11175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.933663][T11175] bond1: (slave bond2): making interface the new active one [ 231.943061][T11175] bond1: (slave bond2): Enslaving as an active interface with an up link [ 231.991770][T11168] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 232.031292][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 232.346373][T11204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.375864][T11204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.406008][T11204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.645556][T11212] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 232.826580][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 232.857793][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 232.866878][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 232.876055][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 232.884334][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 232.996389][T11242] openvswitch: netlink: VXLAN extension 79 out of range max 1 [ 233.058149][T11246] __nla_validate_parse: 10 callbacks suppressed [ 233.058168][T11246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1466'. [ 233.575413][T11276] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1476'. [ 233.670783][T11283] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1478'. [ 233.774497][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 233.784085][T11287] ksmbd: Unknown IPC event: 0, ignore. [ 233.821566][T11292] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1480'. [ 233.831371][T11291] netlink: 'syz.6.1481': attribute type 1 has an invalid length. [ 233.907196][T11291] bond3: entered promiscuous mode [ 233.912748][T11291] bond3: entered allmulticast mode [ 233.918673][T11291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.943896][T11296] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1482'. [ 233.958428][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1481'. [ 233.976575][T11297] vlan2: entered allmulticast mode [ 233.984557][T11297] hsr0: entered allmulticast mode [ 233.989748][T11297] hsr_slave_0: entered allmulticast mode [ 233.995602][T11297] hsr_slave_1: entered allmulticast mode [ 234.003783][T11233] chnl_net:caif_netlink_parms(): no params data found [ 234.051029][T11291] macvlan2: entered promiscuous mode [ 234.066613][T11291] macvlan2: entered allmulticast mode [ 234.087231][T11296] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1482'. [ 234.197340][T11313] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1487'. [ 234.307763][T11320] IPVS: length: 239 != 24 [ 234.359624][T11323] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 234.366917][T11323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.383250][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1490'. [ 234.447074][T11233] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.454785][T11233] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.462404][T11233] bridge_slave_0: entered allmulticast mode [ 234.471980][T11233] bridge_slave_0: entered promiscuous mode [ 234.480699][T11233] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.487890][T11233] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.495519][T11233] bridge_slave_1: entered allmulticast mode [ 234.503650][T11233] bridge_slave_1: entered promiscuous mode [ 234.528928][T11334] openvswitch: netlink: EtherType 50a is less than min 600 [ 234.629144][T11323] bridge4: entered promiscuous mode [ 234.650747][T11323] bridge4: entered allmulticast mode [ 234.682049][T11233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.727427][T11233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.856935][T11348] xt_CT: No such helper "pptp" [ 234.883344][T11233] team0: Port device team_slave_0 added [ 234.895619][T11353] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 234.900203][T11233] team0: Port device team_slave_1 added [ 234.919708][ T5833] Bluetooth: hci7: command tx timeout [ 234.945700][T11353] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 234.969447][T11353] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 234.985173][T11233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.994845][T11353] netlink: 'syz.1.1500': attribute type 2 has an invalid length. [ 234.995330][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.031058][T11233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.049056][T11233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.059382][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.088719][T11233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.197634][T11373] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 235.261598][T11377] bridge_slave_0: left allmulticast mode [ 235.278601][T11377] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.306172][T11377] bond0: (slave bridge_slave_1): Releasing backup interface [ 235.335826][T11377] bond5: (slave veth0_to_bond): Releasing active interface [ 235.365451][T11377] bond0: (slave bond_slave_0): Releasing backup interface [ 235.384468][T11377] bond0: (slave bond_slave_1): Releasing backup interface [ 235.416938][T11377] team0: Port device team_slave_0 removed [ 235.446258][T11377] team0: Port device team_slave_1 removed [ 235.457337][T11377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.465573][T11377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.477394][T11377] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 235.505199][T11233] hsr_slave_0: entered promiscuous mode [ 235.519215][T11233] hsr_slave_1: entered promiscuous mode [ 235.540288][T11233] debugfs: 'hsr0' already exists in 'hsr' [ 235.553088][T11233] Cannot create hsr debugfs directory [ 235.558959][T11383] syzkaller1: entered promiscuous mode [ 235.565300][T11383] syzkaller1: entered allmulticast mode [ 235.642435][T11390] ipt_REJECT: TCP_RESET invalid for non-tcp [ 235.726072][T11396] syzkaller1: left promiscuous mode [ 235.734000][T11396] syzkaller1: left allmulticast mode [ 235.956037][T11413] netlink: 'syz.2.1518': attribute type 1 has an invalid length. [ 236.147442][T11233] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 236.173590][T11233] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 236.240614][T11233] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 236.268057][T11429] macvlan0: entered promiscuous mode [ 236.284956][T11233] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 236.335335][T11429] bond0: entered promiscuous mode [ 236.361898][T11429] bond_slave_0: entered promiscuous mode [ 236.367876][T11429] bond_slave_1: entered promiscuous mode [ 236.374759][T11429] bridge0: entered promiscuous mode [ 236.381981][T11429] bond0: left promiscuous mode [ 236.386800][T11429] bond_slave_0: left promiscuous mode [ 236.393120][T11429] bond_slave_1: left promiscuous mode [ 236.398715][T11429] bridge0: left promiscuous mode [ 236.599093][T11233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.638183][T11458] netlink: 'syz.1.1529': attribute type 6 has an invalid length. [ 236.652702][T11233] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.683292][ T7448] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.690500][ T7448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.729049][ T7448] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.736248][ T7448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.948896][T11473] block nbd0: Unsupported socket: should be TCP or UNIX. [ 236.994741][ T5833] Bluetooth: hci7: command tx timeout [ 237.338181][T11492] netlink: 'syz.6.1537': attribute type 10 has an invalid length. [ 237.352288][T11233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.376233][T11492] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 237.805202][T11521] netlink: 'syz.0.1545': attribute type 2 has an invalid length. [ 237.859920][T11526] SET target dimension over the limit! [ 237.883627][T11523] xt_TCPMSS: Only works on TCP SYN packets [ 238.004914][ T7448] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.034563][ T7448] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.054469][T11529] xt_addrtype: ipv6 does not support BROADCAST matching [ 238.083148][ T7448] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.097988][ T7448] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.135069][T11541] veth1_macvtap: left promiscuous mode [ 238.142601][T11541] macsec0: entered promiscuous mode [ 238.147898][T11541] macsec0: entered allmulticast mode [ 238.182085][T11539] vlan2: entered allmulticast mode [ 238.189079][T11546] __nla_validate_parse: 22 callbacks suppressed [ 238.189097][T11546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1551'. [ 238.211516][T11539] bridge_slave_0: entered allmulticast mode [ 238.217772][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1553'. [ 238.248584][T11542] veth1_macvtap: entered promiscuous mode [ 238.255153][T11542] veth1_macvtap: entered allmulticast mode [ 238.268872][T11542] macsec0: left promiscuous mode [ 238.276149][T11542] macsec0: left allmulticast mode [ 238.277050][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1551'. [ 238.282956][T11542] veth1_macvtap: left allmulticast mode [ 238.356489][T11545] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.387431][T11547] bond4: entered promiscuous mode [ 238.392783][T11547] bond4: entered allmulticast mode [ 238.399898][T11547] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.410931][T11547] team0: Port device bond4 added [ 238.452264][T11550] vxcan3: entered promiscuous mode [ 238.457690][T11550] bond4: (slave vxcan3): refused to change device type [ 238.512276][T11233] veth0_vlan: entered promiscuous mode [ 238.532881][T11233] veth1_vlan: entered promiscuous mode [ 238.643810][T11233] veth0_macvtap: entered promiscuous mode [ 238.687066][T11233] veth1_macvtap: entered promiscuous mode [ 238.727938][T11233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.730688][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1559'. [ 238.756030][T11233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.786610][ T7447] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.800969][ T7447] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.818661][ T7447] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.829435][T11575] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1560'. [ 238.847045][ T7447] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.006781][ T7455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.030943][ T7455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.063420][T11586] netlink: 'syz.6.1564': attribute type 3 has an invalid length. [ 239.072976][ T7447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.076094][ T5833] Bluetooth: hci7: command tx timeout [ 239.084037][ T7447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.109554][T11586] netlink: 'syz.6.1564': attribute type 3 has an invalid length. [ 239.130825][T11586] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1564'. [ 239.272408][T11599] netlink: 'syz.6.1567': attribute type 1 has an invalid length. [ 239.328762][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1567'. [ 239.367384][T11599] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1567'. [ 239.516622][T11618] netlink: 'syz.7.1573': attribute type 1 has an invalid length. [ 239.542433][T11618] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1573'. [ 239.566859][T11618] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1573'. [ 239.578910][T11618] netlink: 'syz.7.1573': attribute type 1 has an invalid length. [ 239.619202][T11618] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 239.683634][T11629] netlink: 'syz.6.1574': attribute type 8 has an invalid length. [ 240.210517][T11672] netlink: 'syz.0.1590': attribute type 1 has an invalid length. [ 240.425840][T11689] syzkaller1: entered promiscuous mode [ 240.433077][T11689] syzkaller1: entered allmulticast mode [ 240.752781][T11716] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 240.770266][T11716] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 240.793105][T11716] gretap1: entered promiscuous mode [ 240.804843][T11716] gretap1: entered allmulticast mode [ 241.155446][ T5833] Bluetooth: hci7: command tx timeout [ 241.159118][T11737] bond3: entered promiscuous mode [ 241.166474][T11737] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.334591][T11747] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 241.345125][T11747] syzkaller1: Refused to change device type [ 241.482563][T11760] x_tables: unsorted underflow at hook 2 [ 241.602338][T11772] openvswitch: netlink: IPv4 tunnel dst address is zero [ 241.698329][T11774] validate_nla: 3 callbacks suppressed [ 241.698346][T11774] netlink: 'syz.0.1619': attribute type 1 has an invalid length. [ 241.757857][T11782] netlink: 'syz.6.1622': attribute type 39 has an invalid length. [ 241.764848][T11774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.842416][T11774] bond4: (slave veth0_to_bond): making interface the new active one [ 241.858972][T11774] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 241.876947][T11783] bridge4: entered promiscuous mode [ 241.904488][T11783] bridge4: entered allmulticast mode [ 241.937715][T11785] bond4: entered promiscuous mode [ 241.952861][T11785] veth0_to_bond: entered promiscuous mode [ 241.966442][T11785] bond4: entered allmulticast mode [ 241.980274][T11785] veth0_to_bond: entered allmulticast mode [ 242.180553][T11799] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 242.322144][T11803] netlink: 'syz.7.1627': attribute type 4 has an invalid length. [ 242.920787][T11846] openvswitch: netlink: Invalid VLAN frame [ 242.929436][T11846] netlink: 'syz.2.1637': attribute type 5 has an invalid length. [ 242.945063][T11844] netlink: 'syz.1.1639': attribute type 11 has an invalid length. [ 243.104802][T11859] sctp: [Deprecated]: syz.6.1640 (pid 11859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.104802][T11859] Use struct sctp_sack_info instead [ 243.326841][T11872] sctp: [Deprecated]: syz.1.1645 (pid 11872) Use of int in maxseg socket option. [ 243.326841][T11872] Use struct sctp_assoc_value instead [ 243.579769][T11902] netlink: 'syz.7.1653': attribute type 2 has an invalid length. [ 243.619095][T11905] __nla_validate_parse: 25 callbacks suppressed [ 243.619114][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'. [ 243.938164][T11929] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1658'. [ 244.086896][T11940] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 244.100160][T11940] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1661'. [ 244.114071][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 244.124910][T11940] netlink: 'syz.1.1661': attribute type 26 has an invalid length. [ 244.133332][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 244.144904][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 244.154211][T11940] netlink: 'syz.1.1661': attribute type 26 has an invalid length. [ 244.170315][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 244.184105][T11944] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1661'. [ 244.203630][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1663'. [ 244.213244][T11946] openvswitch: netlink: Unknown nsh attribute 0 [ 244.282904][T11948] syzkaller0: entered promiscuous mode [ 244.288660][T11948] syzkaller0: entered allmulticast mode [ 244.315711][T11950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.320118][T11951] syzkaller1: entered promiscuous mode [ 244.354226][T11951] syzkaller1: entered allmulticast mode [ 245.124178][T12001] netlink: 'syz.0.1679': attribute type 21 has an invalid length. [ 245.431210][T12020] IPv6: sit1: Disabled Multicast RS [ 245.472896][T12026] netlink: 'syz.0.1686': attribute type 1 has an invalid length. [ 245.712244][ T7456] wlan0: Trigger new scan to find an IBSS to join [ 246.255951][T12086] can: request_module (can-proto-0) failed. [ 246.264387][T12087] netlink: 'syz.2.1701': attribute type 1 has an invalid length. [ 246.324799][T12086] can: request_module (can-proto-0) failed. [ 246.509034][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1705'. [ 246.553515][T12111] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 246.625464][T12111] nbd: must specify a size in bytes for the device [ 246.898270][T12128] bridge_slave_0: left allmulticast mode [ 246.907062][T12128] bridge_slave_0: left promiscuous mode [ 246.921979][T12128] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.965597][T12128] bridge_slave_1: left allmulticast mode [ 246.972614][T12128] bridge_slave_1: left promiscuous mode [ 246.984373][T12128] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.020393][T12128] bond0: (slave bond_slave_0): Releasing backup interface [ 247.049969][T12128] bond0: (slave bond_slave_1): Releasing backup interface [ 247.097292][T12128] team0: Port device team_slave_0 removed [ 247.117654][T12128] team0: Port device team_slave_1 removed [ 247.137214][T12128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.160793][T12128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.179052][T12128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.190952][T12128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.247393][T12128] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 247.508582][T12171] openvswitch: netlink: IP tunnel TTL not specified. [ 247.511936][T12161] bond11 (unregistering): Released all slaves [ 247.694277][T12178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.713796][T12178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.765580][T12178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.781719][T12178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.796609][T12187] Cannot find set identified by id 0 to match [ 247.829555][T12189] netlink: 'syz.6.1730': attribute type 1 has an invalid length. [ 247.999110][ T7451] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.020342][ T7451] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.042811][T12193] netlink: 'syz.6.1730': attribute type 4 has an invalid length. [ 248.064217][T12189] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.097860][T12195] 8021q: adding VLAN 0 to HW filter on device bond6 [ 248.108345][T12195] bond5: (slave bond6): making interface the new active one [ 248.116868][T12195] bond5: (slave bond6): Enslaving as an active interface with an up link [ 248.134742][ T7451] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.143327][ T7451] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.165854][ T7451] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.736560][T12239] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 248.750137][ T7455] wlan0: Trigger new scan to find an IBSS to join [ 248.757092][T12239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.946445][T12245] netlink: 'syz.7.1747': attribute type 1 has an invalid length. [ 248.992258][T12245] netlink: 'syz.7.1747': attribute type 1 has an invalid length. [ 249.062994][T12257] tipc: Started in network mode [ 249.078234][T12257] tipc: Node identity 080211000001, cluster identity 4711 [ 249.107327][T12257] tipc: Enabled bearer , priority 0 [ 249.679579][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.688265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.717840][T12280] __nla_validate_parse: 10 callbacks suppressed [ 249.717857][T12280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'. [ 250.138912][T12288] netlink: 'syz.1.1758': attribute type 4 has an invalid length. [ 250.216902][T12288] netlink: 'syz.1.1758': attribute type 4 has an invalid length. [ 250.229850][ T5905] tipc: Node number set to 134418688 [ 250.347660][T12288] tipc: Enabled bearer , priority 0 [ 250.356370][T12293] xt_hashlimit: size too large, truncated to 1048576 [ 250.431461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.435229][T12288] +: renamed from syzkaller0 [ 250.462837][T12288] tipc: Disabling bearer [ 250.764128][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1763'. [ 250.896616][T12317] gre0: entered promiscuous mode [ 250.914831][T12317] gre0: entered allmulticast mode [ 250.980748][T12323] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1769'. [ 250.995088][T12323] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1769'. [ 251.015332][T12324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1768'. [ 251.049554][T12328] Cannot find add_set index 0 as target [ 251.555671][T12352] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1776'. [ 252.499972][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'. [ 252.520697][T12399] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.544209][T12399] bond1: (slave lo): Enslaving as an active interface with an up link [ 252.640229][T12399] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 252.677161][T12358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 252.746320][T12412] pim6reg: entered allmulticast mode [ 252.752337][ T7453] wlan0: Trigger new scan to find an IBSS to join [ 252.795850][T12416] macsec1: entered promiscuous mode [ 252.863186][T12423] netlink: 'syz.1.1789': attribute type 1 has an invalid length. [ 252.886169][T12423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1789'. [ 252.918150][T12425] netlink: 'syz.6.1792': attribute type 62 has an invalid length. [ 252.927131][T12415] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 252.957016][T12415] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 253.101842][T12425] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 253.182643][T12425] bond7 (unregistering): Released all slaves [ 253.405811][ T5905] IPVS: starting estimator thread 0... [ 253.414688][T12449] netlink: 'syz.6.1798': attribute type 1 has an invalid length. [ 253.438907][ T5488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.519455][T12450] IPVS: using max 30 ests per chain, 72000 per kthread [ 253.693050][ T7454] wlan0: Creating new IBSS network, BSSID f6:f9:15:66:00:b4 [ 253.721897][T12470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1802'. [ 254.434015][T12522] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 254.451412][T12522] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 254.604886][T12528] netlink: 'syz.2.1814': attribute type 29 has an invalid length. [ 254.671148][ T5892] IPVS: starting estimator thread 0... [ 254.672484][T12536] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 254.746248][T12536] bridge1: entered promiscuous mode [ 254.757498][T12536] bridge1: entered allmulticast mode [ 254.793824][T12528] __nla_validate_parse: 4 callbacks suppressed [ 254.793842][T12528] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1814'. [ 254.802672][T12540] IPVS: using max 31 ests per chain, 74400 per kthread [ 254.838802][T12536] team0: Port device bridge1 added [ 254.847530][T12543] netlink: 'syz.2.1814': attribute type 29 has an invalid length. [ 254.863169][T12546] bridge0: port 1(team0) entered blocking state [ 254.870211][T12546] bridge0: port 1(team0) entered disabled state [ 254.898668][T12546] team0: entered allmulticast mode [ 254.963204][T12546] team0: entered promiscuous mode [ 255.052399][T12558] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 255.061125][T12555] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1818'. [ 255.087272][T12555] netlink: Conntrack attr has 3 unknown bytes [ 255.178476][T12566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1820'. [ 255.234205][T12569] xt_hashlimit: overflow, try lower: 3/0 [ 255.470013][T12531] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 255.516626][T12588] netlink: 'syz.0.1829': attribute type 1 has an invalid length. [ 255.553425][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.582839][T12588] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.604807][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1830'. [ 255.703615][T12605] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 255.729867][T12588] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1829'. [ 255.762216][T12610] netlink: 'syz.2.1833': attribute type 10 has an invalid length. [ 255.795005][T12596] bond5: (slave veth5): Enslaving as an active interface with a down link [ 255.813349][T12614] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1834'. [ 255.870213][T12610] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.877694][T12610] bridge_slave_1: left allmulticast mode [ 255.898833][T12610] bridge_slave_1: left promiscuous mode [ 255.915881][T12610] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.939276][T12610] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 256.246369][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880320ad000: rx timeout, send abort [ 256.326584][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1845'. [ 256.419023][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'. [ 256.432301][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1843'. [ 256.605253][T12665] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1851'. [ 256.635006][T12662] sctp: [Deprecated]: syz.2.1849 (pid 12662) Use of int in max_burst socket option. [ 256.635006][T12662] Use struct sctp_assoc_value instead [ 256.675882][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 256.747239][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880258d7400: rx timeout, send abort [ 256.756064][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880320ad000: abort rx timeout. Force session deactivation [ 256.811633][T12670] tipc: Started in network mode [ 256.823878][T12670] tipc: Node identity 010000000000000001, cluster identity 4711 [ 256.835690][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.844120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.916151][T12673] syz.0.1853 (12673) used greatest stack depth: 17472 bytes left [ 256.934869][T12688] netlink: 'syz.1.1856': attribute type 1 has an invalid length. [ 257.154130][T12695] veth1_macvtap: left promiscuous mode [ 257.198324][T12706] xt_socket: unknown flags 0x50 [ 257.255618][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880258d7400: abort rx timeout. Force session deactivation [ 257.470876][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.479726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.526727][T12729] Unsupported ieee802154 address type: 0 [ 257.618903][T12733] netlink: 'syz.7.1871': attribute type 15 has an invalid length. [ 257.813097][T12745] netlink: 'syz.7.1877': attribute type 4 has an invalid length. [ 258.110885][ T955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.749944][ T955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.902221][T12741] lec:lec_atm_close: lec0: Shut down! [ 259.795540][T12849] batadv_slave_0: entered promiscuous mode [ 259.821299][T12848] batadv_slave_0: left promiscuous mode [ 260.128748][T12872] macvlan0: entered promiscuous mode [ 261.150058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.789493][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 262.683724][T12843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.873936][T12891] Bluetooth: MGMT ver 1.23 [ 262.925527][T12900] __nla_validate_parse: 7 callbacks suppressed [ 262.925547][T12900] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1914'. [ 262.942461][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1914'. [ 262.953804][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1914'. [ 262.970810][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1914'. [ 263.019200][T12903] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 263.036776][T12903] syzkaller1: linktype set to 823 [ 263.105499][T12903] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 263.118661][T12909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.124836][T12914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 263.138944][T12903] syzkaller1: linktype set to 823 [ 263.152102][T12903] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 263.162073][T12903] syzkaller1: linktype set to 823 [ 263.227793][T12900] syzkaller0: entered promiscuous mode [ 263.241343][T12900] syzkaller0: entered allmulticast mode [ 263.248529][T12903] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 263.254956][T12903] syzkaller1: linktype set to 823 [ 263.264833][T12903] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 263.271352][T12903] syzkaller1: linktype set to 823 [ 263.276794][T12903] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 263.283372][T12903] syzkaller1: linktype set to 823 [ 263.293742][T12903] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 263.303827][T12903] syzkaller1: linktype set to 823 [ 263.417247][T12926] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 263.870411][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.878843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.655163][T12903] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 264.661485][T12903] syzkaller1: linktype set to 823 [ 264.672544][ T5488] lec:lec_start_xmit: lec0:No lecd attached [ 264.783409][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 264.820304][T12943] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1924'. [ 264.868821][T12943] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1924'. [ 264.887244][T12950] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 264.899844][T12943] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1924'. [ 264.914140][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1925'. [ 265.118661][T12963] geneve3: entered promiscuous mode [ 265.129857][T12963] geneve3: entered allmulticast mode [ 265.296173][T12973] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 265.340659][T12973] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 265.361398][T12973] gretap1: entered promiscuous mode [ 265.361437][T12959] nbd2: detected capacity change from 0 to 63 [ 265.366775][T12973] gretap1: entered allmulticast mode [ 265.427266][ T5821] block nbd2: Receive control failed (result -32) [ 265.427266][ T5833] block nbd2: Receive control failed (result -104) [ 266.104317][T13024] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 266.607857][T13066] validate_nla: 2 callbacks suppressed [ 266.607875][T13066] netlink: 'syz.2.1967': attribute type 29 has an invalid length. [ 266.636907][T13066] netlink: 'syz.2.1967': attribute type 29 has an invalid length. [ 266.658043][T13072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.659022][T13069] xt_cluster: node mask cannot exceed total number of nodes [ 266.666989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.747072][T13072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.754021][T13076] netlink: 'syz.2.1970': attribute type 1 has an invalid length. [ 266.755634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.763850][T13076] netlink: 'syz.2.1970': attribute type 3 has an invalid length. [ 266.804352][T13076] NCSI netlink: No device for ifindex 813332851 [ 266.814080][T13071] netlink: 'syz.7.1969': attribute type 10 has an invalid length. [ 266.826631][T13071] vxcan1: entered promiscuous mode [ 266.832392][T13071] vxcan1: entered allmulticast mode [ 266.849941][T13071] team0: Device vxcan1 is of different type [ 266.860325][T13082] netlink: 'syz.6.1973': attribute type 1 has an invalid length. [ 266.878001][T13076] macvlan0: left promiscuous mode [ 266.888190][T13076] netlink: 'syz.2.1970': attribute type 1 has an invalid length. [ 266.896495][T13076] netlink: 'syz.2.1970': attribute type 2 has an invalid length. [ 267.310939][T13112] netlink: 'syz.6.1982': attribute type 33 has an invalid length. [ 267.491036][T13131] xt_time: unknown flags 0xf4 [ 267.695645][T13149] netlink: 'syz.7.1990': attribute type 2 has an invalid length. [ 267.797068][T13155] openvswitch: netlink: Message has 6 unknown bytes. [ 267.852649][T13157] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 268.203424][T13194] __nla_validate_parse: 19 callbacks suppressed [ 268.203444][T13194] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2003'. [ 268.305796][T13201] bridge0: port 2(batadv1) entered blocking state [ 268.312597][T13201] bridge0: port 2(batadv1) entered disabled state [ 268.330521][T13201] batadv1: entered allmulticast mode [ 268.338807][T13201] batadv1: entered promiscuous mode [ 268.352186][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.587282][T13216] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2013'. [ 268.618355][T13218] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 268.646534][T13218] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 268.691982][T13224] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2015'. [ 268.799684][ T7455] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 268.809563][ T7455] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 269.157807][T13255] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2022'. [ 269.197776][T13255] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2022'. [ 269.264315][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2029'. [ 269.280299][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2030'. [ 269.365879][T13268] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 269.531334][T13281] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2035'. [ 269.709400][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 269.717858][ C1] lec:lec_tx_timeout: lec0 [ 269.722583][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 269.902533][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2040'. [ 269.912653][T13302] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2040'. [ 270.172756][T13313] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 270.183710][T13320] syz_tun: entered allmulticast mode [ 270.200181][T13320] syzkaller0: entered allmulticast mode [ 270.208464][T13319] syz_tun: left allmulticast mode [ 270.491817][T13336] syzkaller0: entered promiscuous mode [ 270.499761][T13336] syzkaller0: entered allmulticast mode [ 270.953365][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.962178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.459608][T13389] geneve2: entered promiscuous mode [ 271.475159][T13389] geneve2: entered allmulticast mode [ 271.502500][ T7454] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 271.526298][ T7454] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 271.589059][T13392] bond7: entered promiscuous mode [ 271.595530][T13392] 8021q: adding VLAN 0 to HW filter on device bond7 [ 271.606326][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.614712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.650323][ T7454] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 271.669273][ T7454] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 272.178550][T13423] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.196140][T13423] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.220375][T13423] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 272.446416][T13423] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.457505][T13423] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.470387][T13423] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 272.683791][T13423] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.699589][T13423] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.713463][T13423] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 272.828114][T13423] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.874892][T13423] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.901776][T13423] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 273.079612][ T7451] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.099503][ T7451] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 273.107639][ T7451] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 273.147225][ T7453] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.165553][ T7453] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 273.174341][ T7453] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 273.186277][T13475] openvswitch: netlink: Flow key attr not present in new flow. [ 273.211762][ T7455] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.229844][ T7455] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 273.241204][ T7455] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 273.277336][ T7455] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.286006][ T7455] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 273.294677][ T7455] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 273.321359][T13479] syzkaller0: entered promiscuous mode [ 273.326866][T13479] syzkaller0: entered allmulticast mode [ 273.382602][T13482] __nla_validate_parse: 14 callbacks suppressed [ 273.382622][T13482] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2092'. [ 273.401554][T13478] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2090'. [ 273.649506][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2096'. [ 273.687505][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2096'. [ 273.703742][T13512] netlink: 212 bytes leftover after parsing attributes in process `syz.7.2101'. [ 273.851849][T13518] 8021q: VLANs not supported on ip_vti0 [ 274.645284][T13570] validate_nla: 8 callbacks suppressed [ 274.645304][T13570] netlink: 'syz.7.2114': attribute type 1 has an invalid length. [ 274.671747][T13567] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 274.730315][T13579] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2114'. [ 274.739458][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 274.739531][ C1] lec:lec_tx_timeout: lec0 [ 274.748660][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 274.750326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.775718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.784271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.792808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.801330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.809808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.830505][T13574] syz_tun: entered allmulticast mode [ 274.909689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.995436][T13593] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2117'. [ 275.058137][T13593] bond0: entered promiscuous mode [ 275.071685][T13593] bond_slave_0: entered promiscuous mode [ 275.081630][T13593] bond_slave_1: entered promiscuous mode [ 275.091646][T13593] batadv0: entered promiscuous mode [ 275.110337][T13593] hsr1: entered promiscuous mode [ 275.129439][T13593] hsr1: entered allmulticast mode [ 275.134521][T13593] bond0: entered allmulticast mode [ 275.140095][T13593] bond_slave_0: entered allmulticast mode [ 275.145984][T13593] bond_slave_1: entered allmulticast mode [ 275.152125][T13593] batadv0: entered allmulticast mode [ 275.158151][T13593] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 275.173331][T13593] bond0: left promiscuous mode [ 275.178242][T13593] bond_slave_0: left promiscuous mode [ 275.185150][T13593] bond_slave_1: left promiscuous mode [ 275.192117][T13593] batadv0: left promiscuous mode [ 275.301503][T13562] syz_tun: left allmulticast mode [ 275.425911][T13603] gre0: left promiscuous mode [ 275.451822][T13603] gre0: left allmulticast mode [ 275.568860][T13603] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.576568][T13603] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.759893][T13603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.797623][T13603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.902610][T13603] macvlan0: left promiscuous mode [ 275.997764][T13603] veth0_macvtap: left allmulticast mode [ 276.012151][T13603] macvtap1: left allmulticast mode [ 276.018760][T13603] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 276.027577][T13603] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 276.078502][T13603] bond3: left promiscuous mode [ 276.095317][T13603] bond3: left allmulticast mode [ 276.111215][T13603] vlan2: left allmulticast mode [ 276.124034][T13603] hsr0: left allmulticast mode [ 276.128941][T13603] hsr_slave_0: left allmulticast mode [ 276.137151][T13603] hsr_slave_1: left allmulticast mode [ 276.137963][T13630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2125'. [ 276.153822][T13603] macvlan2: left promiscuous mode [ 276.158993][T13603] macvlan2: left allmulticast mode [ 276.177255][T13603] bond4: left promiscuous mode [ 276.182490][T13603] bond4: left allmulticast mode [ 276.196943][T13603] bridge4: left promiscuous mode [ 276.207316][T13603] bridge4: left allmulticast mode [ 276.223202][T13603] geneve2: left promiscuous mode [ 276.228335][T13603] geneve2: left allmulticast mode [ 276.236386][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2122'. [ 276.247793][ T7457] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.266946][ T7457] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 276.298509][ T7457] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 276.340249][ T7457] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.348689][ T7457] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 276.363868][ T7457] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 276.401757][ T7457] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.449296][ T7457] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 276.478070][ T7457] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 276.507297][ T7457] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.534553][ T7457] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 276.565253][ T7457] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 276.590502][T13642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2129'. [ 276.742704][T13649] netlink: 'syz.6.2132': attribute type 1 has an invalid length. [ 276.812232][T13654] ipt_REJECT: TCP_RESET invalid for non-tcp [ 276.932463][T13648] netlink: 'syz.1.2134': attribute type 1 has an invalid length. [ 277.126750][T13676] syz_tun: entered allmulticast mode [ 277.173646][T13683] bond1: entered promiscuous mode [ 277.178841][T13683] bond1: entered allmulticast mode [ 277.184833][T13683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.898480][T13673] syz_tun: left allmulticast mode [ 278.187257][T13736] netlink: 'syz.1.2148': attribute type 2 has an invalid length. [ 278.195492][T13736] netlink: 'syz.1.2148': attribute type 11 has an invalid length. [ 279.147589][T13740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.701470][T13649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.749349][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 279.757440][ C1] lec:lec_tx_timeout: lec0 [ 279.762435][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 279.865369][T13745] __nla_validate_parse: 4 callbacks suppressed [ 279.865388][T13745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2151'. [ 279.998038][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2155'. [ 280.009530][T13755] netlink: 'syz.1.2155': attribute type 62 has an invalid length. [ 280.217554][T13771] veth0: entered promiscuous mode [ 280.241579][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2160'. [ 280.315914][T13771] veth0 (unregistering): left promiscuous mode [ 280.535123][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2165'. [ 280.544257][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2165'. [ 280.762539][T13804] x_tables: duplicate underflow at hook 3 [ 280.916631][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2172'. [ 281.000173][T13831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2175'. [ 281.027551][T13831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2175'. [ 281.135407][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2172'. [ 281.179098][T13840] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2175'. [ 281.247848][T13842] netlink: 'syz.1.2177': attribute type 7 has an invalid length. [ 281.258336][T13842] netlink: 'syz.1.2177': attribute type 8 has an invalid length. [ 281.809971][T13853] netlink: 'syz.7.2180': attribute type 1 has an invalid length. [ 281.859305][T13853] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.140863][T13860] bond2: (slave geneve2): making interface the new active one [ 282.160733][T13860] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 282.182561][ T7458] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 282.214126][ T7458] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 282.260769][ T7457] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 282.367139][T13881] netlink: 'syz.7.2188': attribute type 1 has an invalid length. [ 282.507394][T13883] bond3: entered promiscuous mode [ 282.540357][T13883] bond3: entered allmulticast mode [ 282.575851][T13883] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.652379][T13881] bridge2: entered promiscuous mode [ 282.681945][T13881] bridge2: entered allmulticast mode [ 282.699302][T13881] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 282.731188][ T7453] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 282.910444][ T7455] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 283.766780][ T7457] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 284.769372][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 284.777471][ C1] lec:lec_tx_timeout: lec0 [ 284.782159][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 284.805901][T13973] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 285.273172][T14021] netlink: 'syz.0.2227': attribute type 4 has an invalid length. [ 285.461497][T14034] netlink: 'syz.1.2233': attribute type 1 has an invalid length. [ 285.481756][T14037] netlink: 'syz.6.2232': attribute type 15 has an invalid length. [ 285.514811][T14037] __nla_validate_parse: 6 callbacks suppressed [ 285.514828][T14037] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2232'. [ 285.547066][T14042] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.734184][ T7451] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.743969][ T7451] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.763662][ T7451] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 285.789695][ T7451] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.802589][ T7451] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.816799][ T7451] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 285.827697][T14053] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2237'. [ 285.841462][ T7451] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.842767][T14051] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2236'. [ 285.850818][ T7451] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.859788][T14051] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2236'. [ 285.868964][ T7451] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 285.889927][ T7451] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.898877][ T7451] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.908360][ T7451] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 285.982670][T14055] netlink: 'syz.0.2238': attribute type 1 has an invalid length. [ 285.990695][T14055] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2238'. [ 286.001755][T14055] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2238'. [ 286.011675][T14055] netlink: 'syz.0.2238': attribute type 8 has an invalid length. [ 286.021055][T14055] netlink: 622 bytes leftover after parsing attributes in process `syz.0.2238'. [ 286.300203][T14075] syzkaller0: entered promiscuous mode [ 286.313292][T14075] syzkaller0: entered allmulticast mode [ 286.341668][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 286.362098][T14075] TC_ACT_REPEAT abuse ? [ 286.382210][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2245'. [ 286.622842][T14090] bond7: Unable to set up delay as MII monitoring is disabled [ 286.644541][T14090] bond7 (unregistering): Released all slaves [ 287.074153][ T5821] Bluetooth: hci7: link tx timeout [ 287.081940][ T5821] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.103757][ T5833] Bluetooth: hci7: link tx timeout [ 287.108971][ T5833] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.328750][T14134] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 287.353277][T14134] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 287.500557][T14137] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2262'. [ 287.617079][T14115] gretap2: entered promiscuous mode [ 287.632015][T14115] batman_adv: batadv0: Adding interface: gretap2 [ 287.638515][T14115] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 287.661094][T14115] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 287.674591][T14141] veth1_to_bond: entered allmulticast mode [ 287.690142][T14145] veth1_to_bond: left allmulticast mode [ 287.842420][T14149] netlink: 'syz.6.2265': attribute type 3 has an invalid length. [ 287.951965][T14153] syzkaller1: entered promiscuous mode [ 287.965774][T14153] syzkaller1: entered allmulticast mode [ 288.000500][T14153] netlink: 'syz.7.2267': attribute type 10 has an invalid length. [ 288.032175][T14153] team0: Device vxcan1 is of different type [ 288.079209][T14160] delete_channel: no stack [ 288.438405][T14189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.930629][T14222] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 288.958409][T14225] netlink: 'syz.7.2288': attribute type 21 has an invalid length. [ 289.015051][T14225] netlink: 'syz.7.2288': attribute type 4 has an invalid length. [ 289.030929][T14225] netlink: 'syz.7.2288': attribute type 5 has an invalid length. [ 289.149471][ T5833] Bluetooth: hci7: command 0x0406 tx timeout [ 289.250665][T14241] tap0: tun_chr_ioctl cmd 1074025678 [ 289.271940][T14241] tap0: group set to 0 [ 289.639993][T14279] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20004 [ 289.789493][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 289.797525][ C1] lec:lec_tx_timeout: lec0 [ 289.802555][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 292.191998][T14241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.308826][T14287] validate_nla: 3 callbacks suppressed [ 292.308844][T14287] netlink: 'syz.7.2304': attribute type 32 has an invalid length. [ 292.504196][T14302] __nla_validate_parse: 14 callbacks suppressed [ 292.504214][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2310'. [ 292.842709][T14318] netlink: 'syz.0.2314': attribute type 2 has an invalid length. [ 292.860471][T14318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2314'. [ 293.057772][T14335] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2318'. [ 293.076194][T14337] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2319'. [ 293.150361][T14347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.232578][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2319'. [ 293.245558][T14342] IPVS: sh: FWM 3 0x00000003 - no destination available [ 293.262084][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2319'. [ 293.274999][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2319'. [ 293.285509][T14352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2322'. [ 293.295481][T14352] block nbd3: Unsupported socket: should be TCP or UNIX. [ 293.341050][T14352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2322'. [ 293.350497][T14352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2322'. [ 293.417864][T14357] openvswitch: netlink: Tunnel attr 12 has unexpected len 256 expected 16 [ 293.511281][T14365] netlink: 'syz.6.2327': attribute type 1 has an invalid length. [ 293.553973][T14365] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 293.761670][T14383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.805822][T14386] delete_channel: no stack [ 293.887452][T14390] netlink: 'syz.2.2334': attribute type 5 has an invalid length. [ 293.979782][T14397] syzkaller1: entered promiscuous mode [ 293.998320][T14397] syzkaller1: entered allmulticast mode [ 294.530089][T14429] tun0: tun_chr_ioctl cmd 1074025675 [ 294.535444][T14429] tun0: persist disabled [ 294.553870][T14430] ip6gre1: entered promiscuous mode [ 294.574883][T14432] netlink: 'syz.0.2348': attribute type 1 has an invalid length. [ 294.718269][T14436] bond7: (slave gretap2): making interface the new active one [ 294.732769][T14436] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 294.809378][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 294.817470][ C1] lec:lec_tx_timeout: lec0 [ 294.822785][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 295.151789][T14469] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 295.479067][T14506] delete_channel: no stack [ 295.616344][T14514] netlink: 'syz.6.2372': attribute type 21 has an invalid length. [ 295.872008][ T5212] block nbd2: Connection timed out, retrying (0/2 alive) [ 295.881543][ T5212] block nbd2: Connection timed out, retrying (0/2 alive) [ 295.888706][ T5212] block nbd2: Connection timed out, retrying (0/2 alive) [ 295.890155][T14537] syzkaller0: entered promiscuous mode [ 295.896571][ T5212] block nbd2: Connection timed out, retrying (0/2 alive) [ 295.908964][ T5212] block nbd2: Dead connection, failed to find a fallback [ 295.916995][ T5212] block nbd2: shutting down sockets [ 295.923862][ T5212] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 295.934805][ T5212] Buffer I/O error on dev nbd2, logical block 3, async page read [ 295.943146][ T5212] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 295.953448][ T5212] Buffer I/O error on dev nbd2, logical block 2, async page read [ 295.961328][ T5212] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 295.971155][ T5212] Buffer I/O error on dev nbd2, logical block 1, async page read [ 295.978910][ T5212] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 295.988848][ T5212] Buffer I/O error on dev nbd2, logical block 0, async page read [ 296.000014][T12378] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 296.002201][T14537] syzkaller0: entered allmulticast mode [ 296.014329][T12378] Buffer I/O error on dev nbd2, logical block 0, async page read [ 296.024241][T12378] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 296.034232][T12378] Buffer I/O error on dev nbd2, logical block 1, async page read [ 296.042136][T12378] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 296.052044][T12378] Buffer I/O error on dev nbd2, logical block 2, async page read [ 296.060714][T12378] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 296.070791][T12378] Buffer I/O error on dev nbd2, logical block 3, async page read [ 296.079831][T12378] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 296.089671][T12378] Buffer I/O error on dev nbd2, logical block 0, async page read [ 296.097460][T12378] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 296.107551][T12378] Buffer I/O error on dev nbd2, logical block 1, async page read [ 296.116344][T12378] ldm_validate_partition_table(): Disk read failed. [ 296.123984][T12378] Dev nbd2: unable to read RDB block 0 [ 296.125302][T14541] tc action pedit offset must be on 32 bit boundaries [ 296.130170][T12378] nbd2: unable to read partition table [ 296.149800][T12378] ldm_validate_partition_table(): Disk read failed. [ 296.157224][T12378] Dev nbd2: unable to read RDB block 0 [ 296.175152][T12378] nbd2: unable to read partition table [ 296.218756][T14537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.341707][T14553] batadv_slave_0: entered promiscuous mode [ 296.382283][T14551] batadv_slave_0: left promiscuous mode [ 296.524916][T14571] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20000 [ 296.608314][T14579] openvswitch: netlink: IPv4 tun info is not correct [ 296.640450][T14580] netlink: 'syz.7.2389': attribute type 2 has an invalid length. [ 297.776123][T14656] __nla_validate_parse: 19 callbacks suppressed [ 297.776143][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2407'. [ 297.853784][T14660] netlink: 'syz.2.2409': attribute type 16 has an invalid length. [ 297.953209][T14662] netlink: 'syz.2.2409': attribute type 16 has an invalid length. [ 297.961336][T14660] netlink: 'syz.2.2409': attribute type 17 has an invalid length. [ 297.992279][T14662] netlink: 'syz.2.2409': attribute type 17 has an invalid length. [ 298.063374][T14672] netlink: 'syz.1.2411': attribute type 21 has an invalid length. [ 298.082511][T14672] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2411'. [ 298.121946][T14676] netlink: 'syz.6.2412': attribute type 1 has an invalid length. [ 298.134462][T14662] bridge4: port 1(erspan0) entered disabled state [ 298.168689][T14677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2410'. [ 298.178084][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2410'. [ 298.248718][T14662] bridge0: port 1(0x9) entered disabled state [ 298.322424][T14662] veth0: left promiscuous mode [ 298.327248][T14662] veth0: left allmulticast mode [ 298.498006][T14662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.717394][T14662] syzkaller1: left promiscuous mode [ 298.727624][T14662] syzkaller1: left allmulticast mode [ 298.738480][T14662] bridge1: left promiscuous mode [ 298.746570][T14662] bridge1: left allmulticast mode [ 298.784606][T14662] vlan2: left allmulticast mode [ 298.792862][T14662] bridge4: left allmulticast mode [ 298.833265][T14662] geneve2: left promiscuous mode [ 298.838379][T14662] geneve2: left allmulticast mode [ 298.868153][T14662] bond7: left promiscuous mode [ 298.972862][T14672] netlink: 'syz.1.2411': attribute type 4 has an invalid length. [ 298.981979][T14672] netlink: 'syz.1.2411': attribute type 5 has an invalid length. [ 298.982215][T14688] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2413'. [ 298.992573][T14672] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2411'. [ 299.031333][T14676] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 299.034387][T14690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2413'. [ 299.038075][T14677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2410'. [ 299.081280][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2410'. [ 299.113338][ T35] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.124063][ T35] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.135202][ T35] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 299.145322][ T35] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.175714][ T35] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.189392][ T35] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 299.198077][ T35] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.210470][ T35] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.223037][ T35] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 299.315196][T14698] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2415'. [ 299.372030][ T35] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.408278][ T35] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.450300][ T35] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 299.450857][T14702] xt_TCPMSS: Only works on TCP SYN packets [ 299.839371][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 299.847476][ C1] lec:lec_tx_timeout: lec0 [ 299.852583][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 299.921913][ T7452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 299.960451][ T7452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 300.009418][ T7452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 300.049683][ T7452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 300.194396][T14748] bond0: entered promiscuous mode [ 300.213734][T14748] bond_slave_0: entered promiscuous mode [ 300.248209][T14748] bond_slave_1: entered promiscuous mode [ 300.266555][T14748] bond0: left promiscuous mode [ 300.272229][T14748] bond_slave_0: left promiscuous mode [ 300.277850][T14748] bond_slave_1: left promiscuous mode [ 300.454571][T14764] sctp: [Deprecated]: syz.1.2430 (pid 14764) Use of int in maxseg socket option. [ 300.454571][T14764] Use struct sctp_assoc_value instead [ 300.455817][T14767] netlink: 'syz.2.2432': attribute type 1 has an invalid length. [ 301.826252][ T7452] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.834673][ T7452] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.917133][T14848] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 301.975221][ T7452] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.994981][ T7452] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.135694][T14860] syzkaller0: entered promiscuous mode [ 302.156287][T14860] syzkaller0: entered allmulticast mode [ 302.261941][T14871] netlink: 'syz.2.2458': attribute type 10 has an invalid length. [ 303.919272][T14883] __nla_validate_parse: 17 callbacks suppressed [ 303.919286][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2460'. [ 304.035954][T14917] validate_nla: 1 callbacks suppressed [ 304.035974][T14917] netlink: 'syz.6.2466': attribute type 21 has an invalid length. [ 304.051078][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2466'. [ 304.405034][T14937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2472'. [ 304.626456][T14951] bond1: entered allmulticast mode [ 304.631991][T14951] vcan1: entered allmulticast mode [ 304.641409][T14951] bond1: left allmulticast mode [ 304.646297][T14951] vcan1: left allmulticast mode [ 304.859399][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 304.867451][ C1] lec:lec_tx_timeout: lec0 [ 304.872861][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 305.396975][T14887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.412489][T14958] netlink: 'syz.0.2479': attribute type 10 has an invalid length. [ 305.440747][T14958] netlink: 396 bytes leftover after parsing attributes in process `syz.0.2479'. [ 305.563154][T14973] netlink: 'syz.1.2480': attribute type 1 has an invalid length. [ 305.830771][T14973] 8021q: adding VLAN 0 to HW filter on device bond13 [ 305.853017][T14996] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2484'. [ 305.896633][T14996] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2484'. [ 306.258043][T15012] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2487'. [ 306.316402][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2489'. [ 306.428326][T15027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.517171][T15032] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2492'. [ 306.551134][ T35] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 306.607025][ T35] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 306.633083][ T35] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 306.649673][ T35] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 306.655362][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2498'. [ 306.913898][T15062] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 306.944354][T15062] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 306.988355][T15062] netlink: 'syz.0.2500': attribute type 11 has an invalid length. [ 307.163282][T15089] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 307.303914][T15095] bond8: entered allmulticast mode [ 307.611641][T15128] veth1_macvtap: left promiscuous mode [ 307.617303][T15128] macsec0: entered promiscuous mode [ 307.639063][T15128] macsec0: entered allmulticast mode [ 307.691460][T15133] veth1_macvtap: entered promiscuous mode [ 307.715801][T15133] veth1_macvtap: entered allmulticast mode [ 307.740015][T15133] macsec0: left promiscuous mode [ 307.758425][T15133] macsec0: left allmulticast mode [ 307.774485][T15133] veth1_macvtap: left allmulticast mode [ 307.875387][T15147] netlink: 'syz.7.2520': attribute type 10 has an invalid length. [ 308.534348][T15199] netlink: 'syz.6.2530': attribute type 1 has an invalid length. [ 308.605705][T15199] netlink: 'syz.6.2530': attribute type 2 has an invalid length. [ 308.629686][T15199] netlink: 'syz.6.2530': attribute type 1 has an invalid length. [ 308.699884][T15205] xt_TPROXY: Can be used only with -p tcp or -p udp [ 308.839533][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 308.866508][T15222] bridge_slave_0: left allmulticast mode [ 308.894504][T15222] bridge_slave_0: left promiscuous mode [ 308.901873][T15222] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.034551][T15222] bridge_slave_1: left allmulticast mode [ 309.041794][T15222] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.091722][T15222] bond0: (slave bond_slave_0): Releasing backup interface [ 309.112763][T15222] bond_slave_0: left allmulticast mode [ 309.129803][T15222] bond0: (slave bond_slave_1): Releasing backup interface [ 309.142185][T15222] bond_slave_1: left allmulticast mode [ 309.162181][T15222] team0: Port device team_slave_0 removed [ 309.173094][T15222] team0: Port device team_slave_1 removed [ 309.182290][T15222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.191742][T15222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.200632][T15222] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 309.221761][T15224] syzkaller1: entered promiscuous mode [ 309.227532][T15224] syzkaller1: entered allmulticast mode [ 309.340819][T15260] dvmrp0: entered allmulticast mode [ 309.373579][T15263] __nla_validate_parse: 3 callbacks suppressed [ 309.373598][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2543'. [ 309.409814][T15263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2543'. [ 309.424409][T15266] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 309.568170][T15273] netlink: 'syz.0.2546': attribute type 16 has an invalid length. [ 309.591170][T15273] netlink: 'syz.0.2546': attribute type 3 has an invalid length. [ 309.609051][T15273] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2546'. [ 309.638983][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2543'. [ 309.700181][T15281] netlink: 'syz.0.2547': attribute type 30 has an invalid length. [ 309.736174][T15278] bond8: option xmit_hash_policy: invalid value (64) [ 309.748431][T15278] bond8 (unregistering): Released all slaves [ 309.879387][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 309.887430][ C1] lec:lec_tx_timeout: lec0 [ 309.892017][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 311.855437][T15229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.247863][T15326] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2554'. [ 312.264188][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2554'. [ 312.314745][T15317] team0 (unregistering): Port device bond4 removed [ 312.335579][T15331] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2559'. [ 312.541095][T15337] syzkaller0: entered promiscuous mode [ 312.551799][T15337] syzkaller0: entered allmulticast mode [ 312.592905][T15316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.810916][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 312.821835][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 312.834312][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 312.845553][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 312.854814][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 313.057803][T15347] pim6reg1: entered promiscuous mode [ 313.063410][T15347] pim6reg1: entered allmulticast mode [ 313.099280][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'. [ 313.413830][ T5824] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 313.539482][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 313.539507][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 313.539524][ T5824] Call Trace: [ 313.539532][ T5824] [ 313.539540][ T5824] dump_stack_lvl+0xe8/0x150 [ 313.539567][ T5824] dump_header+0xd3/0x4c0 [ 313.539589][ T5824] oom_kill_process+0x3ab/0x970 [ 313.539614][ T5824] out_of_memory+0x106c/0x1410 [ 313.539633][ T5824] ? percpu_ref_put+0x19/0x180 [ 313.539654][ T5824] ? __pfx___mutex_lock+0x10/0x10 [ 313.539684][ T5824] ? __pfx_out_of_memory+0x10/0x10 [ 313.539700][ T5824] ? do_raw_spin_unlock+0xf5/0x210 [ 313.539729][ T5824] try_charge_memcg+0xc53/0x1560 [ 313.539770][ T5824] ? __pfx_try_charge_memcg+0x10/0x10 [ 313.539802][ T5824] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 313.539828][ T5824] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 313.539852][ T5824] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 313.539877][ T5824] __swap_cache_prepare_and_add+0xe8/0x760 [ 313.539910][ T5824] ? page_rmappable_folio+0x9a/0x170 [ 313.539941][ T5824] swap_cache_alloc_folio+0xf1/0x240 [ 313.539971][ T5824] swap_cluster_readahead+0x369/0x690 [ 313.539992][ T5824] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 313.540026][ T5824] ? get_vma_policy+0x27b/0x3c0 [ 313.540049][ T5824] swapin_readahead+0x196/0xc50 [ 313.540065][ T5824] ? filemap_map_pages+0x185/0x2050 [ 313.540095][ T5824] ? __pfx_swapin_readahead+0x10/0x10 [ 313.540113][ T5824] ? swap_table_get+0x1e/0x260 [ 313.540135][ T5824] ? swap_table_get+0x1e/0x260 [ 313.540158][ T5824] ? swap_table_get+0x1e/0x260 [ 313.540183][ T5824] ? swap_table_get+0x216/0x260 [ 313.540209][ T5824] ? swap_cache_get_folio+0x513/0x520 [ 313.540238][ T5824] do_swap_page+0x56f/0x5a20 [ 313.540286][ T5824] ? do_swap_page+0x127/0x5a20 [ 313.540308][ T5824] ? __pfx_do_swap_page+0x10/0x10 [ 313.540331][ T5824] ? __pte_offset_map+0x1ae/0x240 [ 313.540353][ T5824] ? pte_offset_map_rw_nolock+0xea/0x160 [ 313.540373][ T5824] handle_mm_fault+0x12d2/0x3310 [ 313.540411][ T5824] ? handle_mm_fault+0xee/0x3310 [ 313.540443][ T5824] ? __pfx_handle_mm_fault+0x10/0x10 [ 313.540466][ T5824] ? lock_vma_under_rcu+0x45a/0x500 [ 313.540508][ T5824] do_user_addr_fault+0xa73/0x1340 [ 313.540537][ T5824] ? rcu_is_watching+0x15/0xb0 [ 313.540561][ T5824] ? trace_page_fault_user+0x84/0x210 [ 313.540585][ T5824] exc_page_fault+0x6a/0xc0 [ 313.540607][ T5824] asm_exc_page_fault+0x26/0x30 [ 313.540624][ T5824] RIP: 0033:0x7fc957c6a837 [ 313.540651][ T5824] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 80 af ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 79 ae ed 00 48 01 d1 39 7c 24 [ 313.540665][ T5824] RSP: 002b:00007ffebbcafa20 EFLAGS: 00010202 [ 313.540688][ T5824] RAX: 0000001b30224000 RBX: 00000000000006a7 RCX: 000000000004c6a8 [ 313.540699][ T5824] RDX: 0000000003a1088e RSI: 00007ffebbcafab0 RDI: 000000000000000b [ 313.540711][ T5824] RBP: 00007ffebbcafa5c R08: 7fffffffffffffff R09: 3fffffffffffffff [ 313.540721][ T5824] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 313.540732][ T5824] R13: 00000000000927c0 R14: 000000000004c6c5 R15: 00007ffebbcafab0 [ 313.540759][ T5824] [ 313.540767][ T5824] memory: usage 307200kB, limit 307200kB, failcnt 540 [ 313.870314][ T5824] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 313.878839][ T5824] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 313.892702][ T5824] Memory cgroup stats for /syz1: [ 313.892993][ T5824] cache 0 [ 313.914385][ T5824] rss 0 [ 313.929386][ T5824] rss_huge 0 [ 313.932633][ T5824] shmem 0 [ 313.935577][ T5824] mapped_file 0 [ 313.939038][ T5824] dirty 0 [ 313.966176][ T5824] writeback 0 [ 313.997479][T15368] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2568'. [ 314.019446][ T5824] workingset_refault_anon 0 [ 314.025599][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2567'. [ 314.039607][ T5824] workingset_refault_file 1 [ 314.044143][ T5824] swap 217088 [ 314.076742][ T5824] swapcached 217088 [ 314.131404][T15343] chnl_net:caif_netlink_parms(): no params data found [ 314.157050][ T5824] pgpgin 85740 [ 314.185459][ T5824] pgpgout 85740 [ 314.245606][ T5824] pgfault 126751 [ 314.249204][ T5824] pgmajfault 4 [ 314.279503][ T5824] inactive_anon 0 [ 314.314239][ T5824] active_anon 0 [ 314.370436][T15343] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.383269][ T5824] inactive_file 0 [ 314.387616][ T5824] active_file 0 [ 314.402151][T15343] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.410948][ T5824] unevictable 0 [ 314.424217][ T5824] hierarchical_memory_limit 314572800 [ 314.438250][T15343] bridge_slave_0: entered allmulticast mode [ 314.451916][ T5824] hierarchical_memsw_limit 9223372036854771712 [ 314.458126][ T5824] total_cache 0 [ 314.464190][T15387] __nla_validate_parse: 2 callbacks suppressed [ 314.464208][T15387] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2572'. [ 314.471214][T15343] bridge_slave_0: entered promiscuous mode [ 314.486390][ T5824] total_rss 0 [ 314.496520][ T5824] total_rss_huge 0 [ 314.500401][ T5824] total_shmem 0 [ 314.503872][ T5824] total_mapped_file 0 [ 314.518256][T15390] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.2572'. [ 314.527966][T15343] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.537700][ T5824] total_dirty 0 [ 314.542291][ T5824] total_writeback 0 [ 314.546123][ T5824] total_workingset_refault_anon 0 [ 314.551676][T15343] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.559036][T15343] bridge_slave_1: entered allmulticast mode [ 314.565103][T15390] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 314.577960][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2572'. [ 314.587016][ T5824] total_workingset_refault_file 1 [ 314.593245][ T5824] total_swap 217088 [ 314.597071][ T5824] total_swapcached 217088 [ 314.602499][T15387] xt_ecn: cannot match TCP bits for non-tcp packets [ 314.611455][ T5824] total_pgpgin 85740 [ 314.625185][T15343] bridge_slave_1: entered promiscuous mode [ 314.631809][ T5824] total_pgpgout 85740 [ 314.635808][ T5824] total_pgfault 126751 [ 314.689389][ T5824] total_pgmajfault 4 [ 314.695002][ T5824] total_inactive_anon 0 [ 314.699182][ T5824] total_active_anon 0 [ 314.712637][T15392] netlink: 'syz.2.2574': attribute type 1 has an invalid length. [ 314.739641][ T5824] total_inactive_file 0 [ 314.743855][ T5824] total_active_file 0 [ 314.747832][ T5824] total_unevictable 0 [ 314.785093][T15395] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2575'. [ 314.796000][ T7454] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 314.809846][ T5824] anon_cost 0 [ 314.813161][ T5824] file_cost 0 [ 314.816549][ T5824] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2555,pid=15315,uid=0 [ 314.832295][ T5824] Memory cgroup out of memory: OOM victim 15315 (syz.1.2555) is already exiting. Skip killing the task [ 314.847688][T15392] bond8: entered promiscuous mode [ 314.866230][T15392] 8021q: adding VLAN 0 to HW filter on device bond8 [ 314.888957][T15343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.909530][ T5821] Bluetooth: hci8: command tx timeout [ 314.915307][T15398] bond8: (slave bridge6): making interface the new active one [ 314.923628][T15398] bridge6: entered promiscuous mode [ 314.930124][T15398] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 314.944345][T15343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.161745][T15343] team0: Port device team_slave_0 added [ 315.165315][T15414] netlink: 'syz.1.2577': attribute type 1 has an invalid length. [ 315.167778][T15413] netlink: 16215 bytes leftover after parsing attributes in process `syz.6.2579'. [ 315.211213][T15343] team0: Port device team_slave_1 added [ 315.473231][T15343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.518635][T15343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.622588][T15343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.661133][T15343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.676447][T15343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.709512][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 315.717593][ C1] lec:lec_tx_timeout: lec0 [ 315.723639][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 315.750064][T15343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.886878][T15343] hsr_slave_0: entered promiscuous mode [ 315.918295][T15343] hsr_slave_1: entered promiscuous mode [ 315.935536][T15343] debugfs: 'hsr0' already exists in 'hsr' [ 315.960198][T15343] Cannot create hsr debugfs directory [ 315.996959][T15442] netlink: 'syz.2.2587': attribute type 2 has an invalid length. [ 316.019445][T15442] netlink: 'syz.2.2587': attribute type 8 has an invalid length. [ 316.039448][T15442] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2587'. [ 316.191162][T15449] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2589'. [ 316.230396][T15452] netlink: 'syz.7.2591': attribute type 1 has an invalid length. [ 316.247288][T15452] netlink: 212 bytes leftover after parsing attributes in process `syz.7.2591'. [ 316.252481][T15449] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2589'. [ 316.265703][T15449] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2589'. [ 316.356390][T15455] dvmrp0: entered allmulticast mode [ 316.497598][T15343] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 316.654600][T15343] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 316.702381][T15468] syzkaller0: entered promiscuous mode [ 316.707946][T15468] syzkaller0: entered allmulticast mode [ 316.774290][T15343] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 316.921852][T15343] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 316.993303][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.996849][ T5821] Bluetooth: hci8: command tx timeout [ 317.007909][ T1300] aoe: packet could not be sent on bond1. consider increasing tx_queue_len [ 317.230440][ T5892] IPVS: starting estimator thread 0... [ 317.238253][T15504] IPVS: set_ctl: invalid protocol: 51 172.30.1.3:20004 [ 317.274496][T15343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 317.301757][T15343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 317.319702][T15506] IPVS: using max 30 ests per chain, 72000 per kthread [ 317.330512][T15343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 317.344051][T15343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 317.423060][T15520] netlink: 'syz.6.2605': attribute type 11 has an invalid length. [ 317.483235][T15523] bond14: option min_links: invalid value (18446744073709551614) [ 317.491359][T15523] bond14: option min_links: allowed values 0 - 2147483647 [ 317.500923][T15523] bond14 (unregistering): Released all slaves [ 317.527286][T15526] netlink: 'syz.2.2610': attribute type 1 has an invalid length. [ 317.552692][T15526] 8021q: adding VLAN 0 to HW filter on device bond9 [ 317.594204][T15526] bond9: (slave veth7): Enslaving as an active interface with a down link [ 317.722991][T15533] gretap1: entered promiscuous mode [ 317.728952][T15533] batman_adv: batadv0: Adding interface: gretap1 [ 317.735597][T15533] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.761565][T15533] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 319.069775][ T5821] Bluetooth: hci8: command tx timeout [ 320.213937][T15507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.372461][T15556] x_tables: duplicate underflow at hook 2 [ 320.452720][T15343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.528636][T15571] __nla_validate_parse: 5 callbacks suppressed [ 320.528656][T15571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2616'. [ 320.563452][T15343] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.633708][ T7447] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.640922][ T7447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.655235][T15577] syzkaller0: entered promiscuous mode [ 320.661942][T15577] syzkaller0: entered allmulticast mode [ 320.693272][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.700448][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.713835][T15577] netlink: 'syz.7.2620': attribute type 1 has an invalid length. [ 320.739361][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 320.747455][ C1] lec:lec_tx_timeout: lec0 [ 320.752748][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 320.778595][T15584] openvswitch: netlink: IPv6 tunnel dst address is zero [ 320.791413][T15584] netlink: 'syz.6.2622': attribute type 28 has an invalid length. [ 320.799757][T15584] netlink: 'syz.6.2622': attribute type 3 has an invalid length. [ 320.808547][T15584] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2622'. [ 320.878141][T15584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.990960][T15593] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2627'. [ 321.001086][T15593] netlink: 'syz.1.2627': attribute type 2 has an invalid length. [ 321.139177][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2630'. [ 321.150652][T15606] netlink: 'syz.2.2631': attribute type 1 has an invalid length. [ 321.158604][ T5821] Bluetooth: hci8: command tx timeout [ 321.437731][T15343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.469099][T15626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2636'. [ 321.506854][T15630] netlink: 'syz.6.2638': attribute type 1 has an invalid length. [ 321.562201][T15343] veth0_vlan: entered promiscuous mode [ 321.592060][T15343] veth1_vlan: entered promiscuous mode [ 321.614219][T15635] netlink: 'syz.2.2639': attribute type 1 has an invalid length. [ 321.700680][T15635] 8021q: adding VLAN 0 to HW filter on device bond10 [ 321.761621][T15641] bond10: (slave veth9): Enslaving as an active interface with a down link [ 321.781376][T15343] veth0_macvtap: entered promiscuous mode [ 321.804698][T15343] veth1_macvtap: entered promiscuous mode [ 321.873893][T15343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.914884][T15343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.949597][ T7454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.975287][ T7454] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.013840][ T7454] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.045019][ T7454] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.061820][T15655] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2646'. [ 322.088504][T15660] syzkaller0: entered promiscuous mode [ 322.094394][T15660] syzkaller0: entered allmulticast mode [ 322.106749][T15655] IPVS: length: 239 != 24 [ 322.245781][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2650'. [ 322.273882][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.279583][T15671] netlink: 'syz.6.2650': attribute type 30 has an invalid length. [ 322.293263][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.307521][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2650'. [ 322.366383][T15670] gtp0: entered promiscuous mode [ 322.375176][T15670] gtp0: entered allmulticast mode [ 322.440244][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.457640][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.727593][T15698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2560'. [ 322.807553][T15709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2660'. [ 322.907076][T15714] netlink: 'syz.0.2662': attribute type 3 has an invalid length. [ 322.974914][T15711] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 323.085652][T15721] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 323.094622][T15721] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 323.405550][T15749] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 323.444279][T15752] bond14: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 323.467700][T15752] bond14: (slave lo): Enslaving as an active interface with an up link [ 323.481765][T15752] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 323.603063][T15761] sctp: [Deprecated]: syz.0.2676 (pid 15761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.603063][T15761] Use struct sctp_sack_info instead [ 323.714500][T15773] netlink: 'syz.7.2680': attribute type 3 has an invalid length. [ 324.448699][T15817] x_tables: unsorted underflow at hook 3 [ 324.809300][T15846] xt_addrtype: ipv6 does not support BROADCAST matching [ 324.845350][T15848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.164584][T15868] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20002 [ 325.313781][T15874] erspan0: entered promiscuous mode [ 325.449732][T15880] nbd: nbd64 already in use [ 325.537673][T15887] __nla_validate_parse: 18 callbacks suppressed [ 325.537692][T15887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2715'. [ 325.769874][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 325.773701][T15904] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 325.777952][ C1] lec:lec_tx_timeout: lec0 [ 325.795655][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 325.847467][T15909] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2719'. [ 325.863172][T15904] bond8: (slave lo): Enslaving as an active interface with an up link [ 325.910618][T15904] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 326.011859][T15920] 8021q: adding VLAN 0 to HW filter on device bond15 [ 326.124044][T15920] xt_hashlimit: size too large, truncated to 1048576 [ 326.211223][T15943] netlink: 'syz.6.2727': attribute type 3 has an invalid length. [ 326.231591][T15943] netlink: 'syz.6.2727': attribute type 3 has an invalid length. [ 326.246323][T15943] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2727'. [ 326.450508][T15951] netlink: 'syz.7.2730': attribute type 3 has an invalid length. [ 326.501715][T15953] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2728'. [ 326.543584][T15953] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2728'. [ 326.565474][T15953] netem: invalid attributes len -24 [ 326.592055][T15953] netem: change failed [ 326.597941][T15961] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2732'. [ 326.611369][T15949] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2728'. [ 326.642325][T15949] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 326.660923][T15969] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2733'. [ 326.857149][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2734'. [ 326.936062][T15984] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2738'. [ 327.188237][T16000] netlink: 'syz.2.2743': attribute type 5 has an invalid length. [ 327.196949][T16000] netlink: 'syz.2.2743': attribute type 6 has an invalid length. [ 327.224378][T16003] sctp: [Deprecated]: syz.7.2744 (pid 16003) Use of int in max_burst socket option. [ 327.224378][T16003] Use struct sctp_assoc_value instead [ 327.562458][T16019] delete_channel: no stack [ 327.625748][T16026] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 327.886171][T16037] openvswitch: netlink: Actions may not be safe on all matching packets [ 328.217397][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 328.230352][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 328.238498][T16048] netlink: 'syz.2.2754': attribute type 1 has an invalid length. [ 328.256613][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 328.267134][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 328.276038][T16051] netlink: 'syz.0.2755': attribute type 1 has an invalid length. [ 328.315161][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.387147][T16056] xt_policy: output policy not valid in PREROUTING and INPUT [ 328.406492][T16048] 8021q: adding VLAN 0 to HW filter on device bond11 [ 328.434859][T16060] No such timeout policy "syz0" [ 328.436806][T16055] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 328.640453][T16067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.088019][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.107823][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.127091][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 329.182625][T16102] veth0_to_team: entered promiscuous mode [ 329.189748][T16102] veth0_to_team: left promiscuous mode [ 329.286224][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.301425][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.332092][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 329.378373][T16118] netlink: 'syz.7.2777': attribute type 14 has an invalid length. [ 329.384991][T16122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.389594][T16118] netlink: 'syz.7.2777': attribute type 13 has an invalid length. [ 329.475966][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.501175][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.513721][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 329.605271][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.616199][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.627611][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 329.687592][T16135] netlink: 'syz.6.2782': attribute type 2 has an invalid length. [ 329.713221][T16135] 9: entered promiscuous mode [ 329.962988][T16045] chnl_net:caif_netlink_parms(): no params data found [ 330.352538][ T5821] Bluetooth: hci1: command tx timeout [ 330.601645][T16183] __nla_validate_parse: 16 callbacks suppressed [ 330.601665][T16183] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.2789'. [ 330.625131][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2789'. [ 330.718374][ T35] bond7 (unregistering): (slave geneve3): Releasing active interface [ 330.737410][ T35] bond4 (unregistering): (slave geneve2): Releasing active interface [ 330.819400][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 330.827456][ C1] lec:lec_tx_timeout: lec0 [ 330.832803][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 330.874449][ T35] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 330.882965][ T35] bridge2 (unregistering): left promiscuous mode [ 330.976429][ T35] bond0 (unregistering): Released all slaves [ 330.987561][ T35] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 331.000980][ T35] bond1 (unregistering): Released all slaves [ 331.014542][ T35] bond2 (unregistering): Released all slaves [ 331.027306][ T35] bond3 (unregistering): Released all slaves [ 331.041581][ T35] bond4 (unregistering): Released all slaves [ 331.057119][ T35] bond5 (unregistering): (slave veth7): Releasing active interface [ 331.075150][ T35] bond5 (unregistering): Released all slaves [ 331.093801][ T35] bond6 (unregistering): Released all slaves [ 331.107207][ T35] bond7 (unregistering): Released all slaves [ 331.120330][ T35] bond8 (unregistering): Released all slaves [ 331.134901][ T35] bond9 (unregistering): Released all slaves [ 331.147316][ T35] bond10 (unregistering): Released all slaves [ 331.167665][ T35] bond11 (unregistering): Released all slaves [ 331.184897][ T35] bond12 (unregistering): Released all slaves [ 331.197593][ T35] bond13 (unregistering): Released all slaves [ 331.216316][ T35] bond14 (unregistering): (slave lo): Releasing backup interface [ 331.227483][ T35] bond14 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 331.240667][ T35] bond14 (unregistering): Released all slaves [ 331.253740][ T35] bond15 (unregistering): Released all slaves [ 331.464403][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2791'. [ 331.475215][T16045] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.482872][T16199] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2791'. [ 331.495783][T16045] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.505285][T16045] bridge_slave_0: entered allmulticast mode [ 331.513656][T16045] bridge_slave_0: entered promiscuous mode [ 331.528642][ T35] tipc: Left network mode [ 331.541426][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2791'. [ 331.558495][T16199] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2791'. [ 331.560295][T16045] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.576580][T16045] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.584212][T16045] bridge_slave_1: entered allmulticast mode [ 331.593051][T16045] bridge_slave_1: entered promiscuous mode [ 331.645569][T16045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.662338][T16045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.677942][T16204] netlink: 'syz.6.2793': attribute type 21 has an invalid length. [ 331.687192][T16204] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2793'. [ 331.725981][T16204] netlink: 'syz.6.2793': attribute type 5 has an invalid length. [ 331.733936][T16204] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2793'. [ 331.761265][T16045] team0: Port device team_slave_0 added [ 331.772341][T16045] team0: Port device team_slave_1 added [ 331.836965][T16045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.844740][T16045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.871076][T16045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.883845][T16045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.891583][T16045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.918496][T16045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.037508][T16210] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2795'. [ 332.053935][T16045] hsr_slave_0: entered promiscuous mode [ 332.060988][T16045] hsr_slave_1: entered promiscuous mode [ 332.067351][T16045] debugfs: 'hsr0' already exists in 'hsr' [ 332.075169][T16045] Cannot create hsr debugfs directory [ 332.250288][T16212] bond8: (slave lo): Releasing backup interface [ 332.257454][T16212] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 332.267938][T16212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.426517][ T35] hsr_slave_0: left promiscuous mode [ 332.430041][ T5821] Bluetooth: hci1: command tx timeout [ 332.442494][ T35] hsr_slave_1: left promiscuous mode [ 332.462020][ T35] veth1_vlan: left promiscuous mode [ 332.467615][ T35] veth0_vlan: left promiscuous mode [ 332.598538][ T35] pim6reg (unregistering): left allmulticast mode [ 332.652032][ T35] team0 (unregistering): Port device batadv1 removed [ 333.288947][ T35] IPVS: stop unused estimator thread 0... [ 333.517970][T16178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.553274][T16045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 333.625414][T16045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 333.676296][T16045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 333.713220][T16045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 333.719703][T16224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2799'. [ 333.987566][T16252] bridge0: port 1(team0) entered disabled state [ 334.003461][T16252] team0 (unregistering): left allmulticast mode [ 334.024292][T16252] team0 (unregistering): left promiscuous mode [ 334.037717][T16252] bridge0: port 1(team0) entered disabled state [ 334.055426][T16252] team0 (unregistering): Port device bridge1 removed [ 334.078254][T16262] xt_ecn: cannot match TCP bits for non-tcp packets [ 334.090931][T16260] bond0: entered allmulticast mode [ 334.096250][T16260] bond_slave_0: entered allmulticast mode [ 334.127530][T16260] bond_slave_1: entered allmulticast mode [ 334.213717][T16045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.260325][T16045] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.296948][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.304170][ T7452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.364143][ T7447] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.371348][ T7447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.490662][T16284] netlink: 'syz.7.2813': attribute type 6 has an invalid length. [ 334.503079][T16045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.509936][ T5821] Bluetooth: hci1: command tx timeout [ 335.094176][T16045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.259241][T16045] veth0_vlan: entered promiscuous mode [ 335.317803][T16045] veth1_vlan: entered promiscuous mode [ 335.448958][T16045] veth0_macvtap: entered promiscuous mode [ 335.505840][T16045] veth1_macvtap: entered promiscuous mode [ 335.597072][T16045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.616854][T16342] netlink: 'syz.6.2822': attribute type 1 has an invalid length. [ 335.695587][T16342] bond9: entered promiscuous mode [ 335.747613][T16342] 8021q: adding VLAN 0 to HW filter on device bond9 [ 335.781542][T16354] __nla_validate_parse: 9 callbacks suppressed [ 335.781559][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2822'. [ 335.782627][T16045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.839641][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 335.847718][ C1] lec:lec_tx_timeout: lec0 [ 335.852687][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 336.162628][T16342] 8021q: adding VLAN 0 to HW filter on device bond9 [ 336.170034][T16342] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 336.181104][T16342] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 336.197319][T16342] bond9: (slave ip6gre1): making interface the new active one [ 336.205273][T16342] ip6gre1: entered promiscuous mode [ 336.212911][T16342] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 336.224232][ T7453] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.234538][ T7453] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.292674][ T7453] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.338644][ T7446] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.410031][T16377] netlink: 'syz.0.2827': attribute type 21 has an invalid length. [ 336.417895][T16377] netlink: 'syz.0.2827': attribute type 15 has an invalid length. [ 336.592078][ T5821] Bluetooth: hci1: command tx timeout [ 336.598648][ T7452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.620505][ T7452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.690274][ T7452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.698141][ T7452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.753837][T16399] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2832'. [ 336.805213][T16398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2833'. [ 336.892493][T16412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2836'. [ 336.912147][T16414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2836'. [ 337.332348][T16434] IPVS: persistence engine module ip_vs_pe_ not found [ 337.384425][T16451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2847'. [ 337.480005][T16453] netlink: 175008 bytes leftover after parsing attributes in process `syz.7.2848'. [ 337.556988][T16455] block nbd3: Unsupported socket: should be TCP or UNIX. [ 337.570640][T16457] bond12: option arp_all_targets: invalid value (18446744073709551613) [ 337.591175][T16457] bond12 (unregistering): Released all slaves [ 337.746980][T16470] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2853'. [ 338.379690][T16506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2864'. [ 338.477769][T16515] veth11: entered allmulticast mode [ 338.482443][T16517] sctp: [Deprecated]: syz.0.2868 (pid 16517) Use of int in maxseg socket option. [ 338.482443][T16517] Use struct sctp_assoc_value instead [ 338.579571][T16521] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2870'. [ 338.682172][T16525] vlan3: entered allmulticast mode [ 338.687347][T16525] bridge_slave_0: entered allmulticast mode [ 338.886093][T16532] bond12: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 338.965401][T16532] bond12 (unregistering): Released all slaves [ 339.250197][T16558] netlink: 'syz.7.2882': attribute type 4 has an invalid length. [ 339.337906][T16574] netlink: 'syz.7.2886': attribute type 10 has an invalid length. [ 339.508064][T16583] netlink: 'syz.6.2888': attribute type 10 has an invalid length. [ 339.535885][T16583] bridge_slave_1: entered allmulticast mode [ 339.571917][T16583] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 339.826805][T16610] batadv_slave_1: entered promiscuous mode [ 339.896534][T16617] netlink: 'syz.1.2894': attribute type 24 has an invalid length. [ 339.897898][T16612] batadv_slave_1: left promiscuous mode [ 340.156716][T16629] tipc: Started in network mode [ 340.181154][T16629] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 340.229664][T16629] tipc: Enabled bearer , priority 24 [ 340.870548][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 340.878657][ C1] lec:lec_tx_timeout: lec0 [ 340.883560][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 342.233096][T16691] __nla_validate_parse: 10 callbacks suppressed [ 342.233114][T16691] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2909'. [ 342.280075][ T5933] tipc: Node number set to 10005162 [ 342.554035][T16724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2915'. [ 342.612294][T16724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'. [ 342.637596][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2916'. [ 342.660550][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2916'. [ 342.669730][T16734] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2916'. [ 342.721335][T16734] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2916'. [ 342.886230][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2922'. [ 342.944353][T16753] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2923'. [ 343.237325][T16776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2932'. [ 343.311425][T16779] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.375007][T16790] IPv6: sit1: Disabled Multicast RS [ 343.450755][T16796] netlink: 'syz.0.2935': attribute type 11 has an invalid length. [ 343.759941][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.760913][T16807] netlink: 'syz.0.2940': attribute type 13 has an invalid length. [ 343.777641][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.782092][T16813] netlink: 'syz.1.2942': attribute type 1 has an invalid length. [ 343.786278][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.802412][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.810235][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.820529][T16807] veth0_macvtap: left promiscuous mode [ 343.840915][T16807] macvtap0: entered allmulticast mode [ 343.847934][T16818] netlink: 'syz.1.2942': attribute type 1 has an invalid length. [ 343.888029][T16807] macvtap0: refused to change device tx_queue_len [ 344.096062][T16832] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 344.124685][ T7452] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.143388][T16836] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 344.164806][ T7452] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.179463][ T7452] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.208112][ T7452] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.283226][T16843] sctp: [Deprecated]: syz.1.2951 (pid 16843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.283226][T16843] Use struct sctp_sack_info instead [ 344.333706][T16843] netlink: 'syz.1.2951': attribute type 1 has an invalid length. [ 344.674143][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 344.765365][T16871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.772690][T16871] IPv6: NLM_F_CREATE should be set when creating new route [ 344.779991][T16871] IPv6: NLM_F_CREATE should be set when creating new route [ 344.787224][T16871] IPv6: NLM_F_CREATE should be set when creating new route [ 344.850202][T16871] netlink: 'syz.1.2960': attribute type 1 has an invalid length. [ 344.997882][T16885] netlink: 'syz.1.2963': attribute type 10 has an invalid length. [ 345.092352][T16808] chnl_net:caif_netlink_parms(): no params data found [ 345.295611][T16902] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 345.360255][T16808] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.367555][T16808] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.375396][T16808] bridge_slave_0: entered allmulticast mode [ 345.383379][T16808] bridge_slave_0: entered promiscuous mode [ 345.394513][T16808] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.408059][T16808] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.418055][T16808] bridge_slave_1: entered allmulticast mode [ 345.428895][T16808] bridge_slave_1: entered promiscuous mode [ 345.525435][T16808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.573447][T16808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.635737][T16924] veth0: entered promiscuous mode [ 345.651099][T16808] team0: Port device team_slave_0 added [ 345.670251][T16808] team0: Port device team_slave_1 added [ 345.677883][T16923] veth0: left promiscuous mode [ 345.837595][T16808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.872488][ T5821] Bluetooth: hci2: command tx timeout [ 345.881533][T16808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.908863][T16808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.923723][T16808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.931249][T16808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.958541][T16808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.073877][T16946] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 346.123433][T16808] hsr_slave_0: entered promiscuous mode [ 346.141491][T16808] hsr_slave_1: entered promiscuous mode [ 346.160952][T16808] debugfs: 'hsr0' already exists in 'hsr' [ 346.167883][T16808] Cannot create hsr debugfs directory [ 346.281512][T16967] netlink: 'syz.6.2987': attribute type 1 has an invalid length. [ 346.345090][T16967] 8021q: adding VLAN 0 to HW filter on device bond10 [ 346.406954][T16975] xt_TPROXY: Can be used only with -p tcp or -p udp [ 346.669349][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 346.677462][ C1] lec:lec_tx_timeout: lec0 [ 346.682587][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 346.752056][T16994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.264680][T16808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 347.337550][T16808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 347.357489][T16808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 347.372499][T16808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 347.397090][T17029] __nla_validate_parse: 20 callbacks suppressed [ 347.397108][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3007'. [ 347.445939][T17029] macsec2: entered promiscuous mode [ 347.459692][T17040] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 347.479394][T17029] bridge0: entered promiscuous mode [ 347.484740][T17029] macsec2: entered allmulticast mode [ 347.493890][T17029] bridge0: entered allmulticast mode [ 347.503933][T17029] bridge0: port 1(macsec2) entered blocking state [ 347.510930][T17029] bridge0: port 1(macsec2) entered disabled state [ 347.523218][T17029] bridge0: left allmulticast mode [ 347.528340][T17029] bridge0: left promiscuous mode [ 347.614687][T16808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.672751][T16808] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.695968][T17048] : entered promiscuous mode [ 347.707679][ T7450] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.714913][ T7450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.776256][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.783490][ T7452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.950191][ T5821] Bluetooth: hci2: command tx timeout [ 348.136333][T17072] netlink: 'syz.0.3019': attribute type 2 has an invalid length. [ 348.213243][T16808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.323418][T16808] veth0_vlan: entered promiscuous mode [ 348.361309][T16808] veth1_vlan: entered promiscuous mode [ 348.397450][T17082] netlink: 'syz.7.3022': attribute type 3 has an invalid length. [ 348.452245][T16808] veth0_macvtap: entered promiscuous mode [ 348.484664][T16808] veth1_macvtap: entered promiscuous mode [ 348.541537][T16808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.583368][T16808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.611525][ T7453] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.639389][ T7453] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.715750][ T7453] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.727414][ T7453] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.738313][T17097] syzkaller0: entered promiscuous mode [ 348.745569][T17097] syzkaller0: entered allmulticast mode [ 348.788738][T17103] syzkaller0: entered promiscuous mode [ 348.800231][T17103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3028'. [ 348.968023][ T7453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.996217][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3029'. [ 349.012072][ T7453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.126159][ T7453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.138744][ T7453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.258573][T17114] netlink: 220 bytes leftover after parsing attributes in process `syz.7.3032'. [ 349.275673][T17122] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3033'. [ 349.282735][T17114] netlink: 220 bytes leftover after parsing attributes in process `syz.7.3032'. [ 349.343672][T17124] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2937'. [ 349.569224][T17136] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3036'. [ 349.757604][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3039'. [ 349.870394][T17148] netlink: 'syz.7.3040': attribute type 32 has an invalid length. [ 349.904208][T17148] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3040'. [ 350.031724][ T5821] Bluetooth: hci2: command tx timeout [ 350.050302][T17159] mac80211_hwsim hwsim25 syzkaller0: Caught tx_queue_len zero misconfig [ 350.801092][T17188] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 350.809474][ T796] IPVS: starting estimator thread 0... [ 350.899528][T17191] IPVS: using max 33 ests per chain, 79200 per kthread [ 351.709676][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 351.717778][ C1] lec:lec_tx_timeout: lec0 [ 351.722638][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 352.110445][ T5821] Bluetooth: hci2: command tx timeout [ 353.060593][T17161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.240063][T17214] __nla_validate_parse: 2 callbacks suppressed [ 353.240082][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 353.942189][T17253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 354.013862][T17253] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3070'. [ 354.225672][T17271] IPVS: set_ctl: invalid protocol: 143 224.0.0.2:20003 [ 354.243769][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3074'. [ 354.706726][T17306] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3083'. [ 354.729593][T17306] netlink: 320 bytes leftover after parsing attributes in process `syz.7.3083'. [ 354.804034][T17311] pim6reg: entered allmulticast mode [ 354.820519][T17311] pim6reg: left allmulticast mode [ 354.867304][T17318] netlink: 'syz.7.3087': attribute type 251 has an invalid length. [ 354.887009][T17319] tipc: Started in network mode [ 354.893151][T17319] tipc: Node identity 7209e59b17db, cluster identity 4711 [ 354.903378][T17319] tipc: Enabled bearer , priority 0 [ 354.974801][T17319] syzkaller0: entered promiscuous mode [ 354.980943][T17319] syzkaller0: entered allmulticast mode [ 354.988495][T17319] tipc: Resetting bearer [ 355.018828][T17317] tipc: Resetting bearer [ 355.825598][T17346] netlink: 'syz.0.3094': attribute type 7 has an invalid length. [ 356.030235][ T30] INFO: task syz.5.1048:9774 blocked for more than 143 seconds. [ 356.037947][ T30] Not tainted syzkaller #0 [ 356.043291][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.052051][ T30] task:syz.5.1048 state:D stack:26120 pid:9774 tgid:9773 ppid:8191 task_flags:0x400040 flags:0x00080002 [ 356.064599][ T30] Call Trace: [ 356.067946][ T30] [ 356.071181][ T30] __schedule+0x15dd/0x52d0 [ 356.076403][ T30] ? __pfx___schedule+0x10/0x10 [ 356.081320][ T30] ? schedule+0x90/0x360 [ 356.085573][ T30] schedule+0x164/0x360 [ 356.090039][ T30] schedule_preempt_disabled+0x13/0x30 [ 356.095545][ T30] __mutex_lock+0x7fe/0x1300 [ 356.100469][ T30] ? __mutex_lock+0x5ac/0x1300 [ 356.105256][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 356.111700][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 356.117070][ T30] ? stack_trace_save+0xa9/0x100 [ 356.122741][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 356.128233][ T30] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 356.134837][ T30] ? kasan_save_track+0x4f/0x80 [ 356.140110][ T30] ? kasan_save_track+0x3e/0x80 [ 356.145105][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 356.150639][ T30] ? __alloc_skb+0x2c1/0x7d0 [ 356.155382][ T30] ? netlink_dump+0x1ef/0xe80 [ 356.160659][ T30] ? __netlink_dump_start+0x5cb/0x7e0 [ 356.166463][ T30] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 356.172437][ T30] ? genl_rcv_msg+0x5e8/0x7a0 [ 356.177123][ T30] ? netlink_rcv_skb+0x232/0x4b0 [ 356.182319][ T30] ? genl_rcv+0x28/0x40 [ 356.186474][ T30] ? netlink_unicast+0x80f/0x9b0 [ 356.191885][ T30] ? netlink_sendmsg+0x813/0xb40 [ 356.196865][ T30] ? ____sys_sendmsg+0x972/0x9f0 [ 356.202001][ T30] ? ___sys_sendmsg+0x2a5/0x360 [ 356.206892][ T30] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 356.212349][ T30] ? do_syscall_64+0x14d/0xf80 [ 356.217218][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.223617][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 356.230329][ T30] ? rcu_is_watching+0x15/0xb0 [ 356.235133][ T30] ? trace_kmalloc+0x2a/0x110 [ 356.240148][ T30] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 356.246776][ T30] genl_dumpit+0x10b/0x1b0 [ 356.251477][ T30] netlink_dump+0x722/0xe80 [ 356.256010][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 356.261123][ T30] ? genl_start+0x499/0x6c0 [ 356.266107][ T30] __netlink_dump_start+0x5cb/0x7e0 [ 356.271735][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 356.277647][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 356.284368][ T30] ? genl_get_cmd+0x4a8/0x930 [ 356.289071][ T30] ? __pfx_genl_start+0x10/0x10 [ 356.294033][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 356.298984][ T30] ? __pfx_genl_done+0x10/0x10 [ 356.304037][ T30] genl_rcv_msg+0x5e8/0x7a0 [ 356.308545][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.313882][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 356.320447][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 356.325389][ T30] netlink_rcv_skb+0x232/0x4b0 [ 356.330498][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.335566][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.341204][ T30] ? down_read+0x272/0x2e0 [ 356.345643][ T30] ? genl_rcv+0xd/0x40 [ 356.349808][ T30] genl_rcv+0x28/0x40 [ 356.353822][ T30] netlink_unicast+0x80f/0x9b0 [ 356.358598][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 356.364195][ T30] ? netlink_sendmsg+0x650/0xb40 [ 356.369838][ T30] ? skb_put+0x11b/0x210 [ 356.374122][ T30] netlink_sendmsg+0x813/0xb40 [ 356.378899][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.384312][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 356.389706][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.395073][ T30] ____sys_sendmsg+0x972/0x9f0 [ 356.400234][ T30] ? futex_unqueue+0x211/0x240 [ 356.405067][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.410456][ T30] ? import_iovec+0x73/0xa0 [ 356.415081][ T30] ___sys_sendmsg+0x2a5/0x360 [ 356.420088][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.425339][ T30] ? futex_wait+0x29a/0x380 [ 356.430249][ T30] ? __fget_files+0x2a/0x420 [ 356.434882][ T30] ? __fget_files+0x3a0/0x420 [ 356.439632][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 356.444651][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.450605][ T30] do_syscall_64+0x14d/0xf80 [ 356.455230][ T30] ? trace_irq_disable+0x3b/0x150 [ 356.460600][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.466671][ T30] ? clear_bhb_loop+0x40/0x90 [ 356.471937][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.478006][ T30] RIP: 0033:0x7f7eb3f9c819 [ 356.482728][ T30] RSP: 002b:00007f7eb4e5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.491476][ T30] RAX: ffffffffffffffda RBX: 00007f7eb4215fa0 RCX: 00007f7eb3f9c819 [ 356.499496][ T30] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000005 [ 356.507467][ T30] RBP: 00007f7eb4032c91 R08: 0000000000000000 R09: 0000000000000000 [ 356.515907][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.524177][ T30] R13: 00007f7eb4216038 R14: 00007f7eb4215fa0 R15: 00007ffedb432218 [ 356.532476][ T30] [ 356.542756][ T30] [ 356.542756][ T30] Showing all locks held in the system: [ 356.550895][ T30] 3 locks held by kworker/0:1/10: [ 356.555966][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 356.567240][ T30] #1: ffffc900000f7c40 ((work_completion)(&tn->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 356.579944][ T30] #2: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: tipc_net_finalize_work+0x1e/0x90 [ 356.590756][ T30] 1 lock held by khungtaskd/30: [ 356.595617][ T30] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 356.605967][ T30] 2 locks held by getty/5576: [ 356.610970][ T30] #0: ffff8880375f00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 356.620871][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 356.631359][ T30] 3 locks held by kworker/0:3/5872: [ 356.636560][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 356.647906][ T30] #1: ffffc90004677c40 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 356.661704][ T30] #2: ffffffff8fee9c08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 356.673658][ T30] 2 locks held by syz.3.425/7433: [ 356.679108][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 356.687428][ T30] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 356.697990][ T30] 3 locks held by kworker/u8:19/7452: [ 356.703681][ T30] #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 356.715396][ T30] #1: ffffc9000c9dfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 356.726624][ T30] #2: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 356.736029][ T30] 3 locks held by syz.5.1048/9774: [ 356.739401][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 356.741172][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 356.749175][ C1] lec:lec_tx_timeout: lec0 [ 356.749386][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 356.757835][ T30] #1: ffff8880532706f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 356.778910][ T30] #2: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 356.789897][ T30] 3 locks held by syz.4.1266/10519: [ 356.795088][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 356.803561][ T30] #1: ffff8880561a26f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 356.814980][ T30] #2: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 356.825929][ T30] 2 locks held by syz.2.3086/17317: [ 356.831623][ T30] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 356.840820][ T30] #1: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 356.852154][ T30] 1 lock held by syz.1.3089/17331: [ 356.857266][ T30] #0: ffffffff8fee9c08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 356.867425][ T30] 2 locks held by syz.1.3089/17332: [ 356.872663][ T30] #0: ffffffff8fee9c08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x19a/0x5a0 [ 356.883592][ T30] #1: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_rfkill_set_block+0x1e/0x50 [ 356.893720][ T30] 1 lock held by syz.6.3092/17342: [ 356.898837][ T30] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 356.908450][ T30] 2 locks held by syz.7.3093/17344: [ 356.913992][ T30] #0: ffff88806055e6f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 356.924475][ T30] #1: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 356.933356][ T30] 1 lock held by syz.7.3093/17347: [ 356.938487][ T30] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 356.948395][ T30] 3 locks held by syz.7.3093/17349: [ 356.953650][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 356.961920][ T30] #1: ffffffff8fc3dc88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 356.971188][ T30] #2: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_new_nm+0x703/0x19e0 [ 356.980293][ T30] 1 lock held by syz.7.3093/17352: [ 356.985764][ T30] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 356.998234][ T30] 1 lock held by syz.0.3094/17346: [ 357.003774][ T30] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0x12b/0x250 [ 357.013541][ T30] [ 357.022599][ T30] ============================================= [ 357.022599][ T30] [ 357.037037][ T30] NMI backtrace for cpu 0 [ 357.037058][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 357.037074][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.037080][ T30] Call Trace: [ 357.037085][ T30] [ 357.037091][ T30] dump_stack_lvl+0xe8/0x150 [ 357.037128][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 357.037198][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 357.037231][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 357.037250][ T30] sys_info+0x135/0x170 [ 357.037271][ T30] watchdog+0xfd9/0x1030 [ 357.037294][ T30] ? watchdog+0x21a/0x1030 [ 357.037309][ T30] kthread+0x388/0x470 [ 357.037326][ T30] ? __pfx_watchdog+0x10/0x10 [ 357.037334][ T30] ? __pfx_kthread+0x10/0x10 [ 357.037343][ T30] ret_from_fork+0x51e/0xb90 [ 357.037364][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 357.037375][ T30] ? __switch_to+0xc7d/0x1450 [ 357.037399][ T30] ? __pfx_kthread+0x10/0x10 [ 357.037408][ T30] ret_from_fork_asm+0x1a/0x30 [ 357.037429][ T30] [ 357.037437][ T30] Sending NMI from CPU 0 to CPUs 1: [ 357.148091][ C1] NMI backtrace for cpu 1 [ 357.148107][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 357.148123][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.148132][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 357.148156][ C1] Code: ce 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f2 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 357.148168][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 357.148182][ C1] RAX: 0000000000129b93 RBX: ffffffff819a91fa RCX: 0000000080000001 [ 357.148192][ C1] RDX: 0000000000000001 RSI: ffffffff8defadf3 RDI: ffffffff8c27d100 [ 357.148202][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 357.148212][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 357.148222][ C1] R13: 1ffff11003b59000 R14: 0000000000000001 R15: 1ffff11003b59000 [ 357.148232][ C1] FS: 0000000000000000(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 357.148243][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.148253][ C1] CR2: 000000110c3b1fdb CR3: 0000000075966000 CR4: 00000000003526f0 [ 357.148266][ C1] Call Trace: [ 357.148273][ C1] [ 357.148278][ C1] default_idle+0x9/0x20 [ 357.148298][ C1] default_idle_call+0x72/0xb0 [ 357.148319][ C1] do_idle+0x36a/0x5f0 [ 357.148361][ C1] ? __pfx_do_idle+0x10/0x10 [ 357.148381][ C1] ? do_idle+0x5c5/0x5f0 [ 357.148400][ C1] cpu_startup_entry+0x43/0x60 [ 357.148419][ C1] start_secondary+0x101/0x110 [ 357.148436][ C1] common_startup_64+0x13e/0x147 [ 357.148458][ C1] [ 357.323404][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 357.330292][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 357.339391][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.349436][ T30] Call Trace: [ 357.352730][ T30] [ 357.355648][ T30] vpanic+0x56c/0xa60 [ 357.359621][ T30] ? __pfx___schedule+0x10/0x10 [ 357.364460][ T30] ? __pfx_vpanic+0x10/0x10 [ 357.368959][ T30] ? __pfx_console_unlock+0x10/0x10 [ 357.374179][ T30] panic+0xc5/0xd0 [ 357.377891][ T30] ? __pfx_panic+0x10/0x10 [ 357.382306][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 357.387715][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 357.393872][ T30] watchdog+0x1023/0x1030 [ 357.398197][ T30] ? watchdog+0x21a/0x1030 [ 357.402605][ T30] kthread+0x388/0x470 [ 357.406666][ T30] ? __pfx_watchdog+0x10/0x10 [ 357.411332][ T30] ? __pfx_kthread+0x10/0x10 [ 357.415909][ T30] ret_from_fork+0x51e/0xb90 [ 357.420493][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 357.425592][ T30] ? __switch_to+0xc7d/0x1450 [ 357.430266][ T30] ? __pfx_kthread+0x10/0x10 [ 357.434846][ T30] ret_from_fork_asm+0x1a/0x30 [ 357.439614][ T30] [ 357.442776][ T30] Kernel Offset: disabled [ 357.447097][ T30] Rebooting in 86400 seconds..