last executing test programs: 6.729158578s ago: executing program 3 (id=5747): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}], 0x28, 0x10000000}}], 0x1, 0x0) 6.595546103s ago: executing program 3 (id=5749): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x8000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xdc}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) epoll_pwait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000300)={[0x6]}, 0x8) r11 = socket(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r12, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1fc, r14, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "55185a9f4768d299"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a1d4583ada5578986cef3c68ba7011a2c1e3245469ea78a81ee23ff19d9e973b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cb76409e898c1eca"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8a32652c8e685d0d38d350c567010f97"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="56dfa7d1f48c20e4835cc1ee00200422125a9ecc890bca52"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5137cae112c08868"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2048f194aeec0b08"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "479052db3b447e87"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "192f3794b7bcfed2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8c7828fe28f6a42e22404c5db6f32f39"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7fc6e075b872f8c13340c3020e251655"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7c263675a3cb1c1c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "28e29440f8cda20a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="08a8d2055b37d48937a419115b729d77"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x333}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="43bf0af4f52018c27c8925c9224c5f3c1e07503d152e619bbe7c497dae118e0c"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="774f0e26bb58444c07b9f281872d8f310416ed060b925804"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6b94d5e1101c7e5554f91d118ad3e73b1979633b775e8d142e42f2b114f02638"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "64baaff17e2e4c4b"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97af4e0464caba5a"}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r15, @ANYBLOB="00840700000004800c001a800800048004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001200010a667202d00000cf21a333"], 0x26}}, 0x0) setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xff, r10, 0x2}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 6.469840675s ago: executing program 3 (id=5751): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}, {&(0x7f0000000040)="53256a860975dd74", 0x8}, {&(0x7f0000000080)="5bda806c61ffe26a8ea77c5bf303d9d41b4ae694e94d7e5f81be1856efab1c2c2867b25b847230ac8124d689c9766252e2e731e8275967868cd12dcdb7cbcc9716ecc3e46fbf1a2a56324fcd957a8202d2641a3030d744dbf778f501529f2b77ae7b45e089f06ad81321b3954e5bf9e81ba569cb93d9f78ea0e36959349193356c5cc1e6", 0x84}, {&(0x7f0000001400)="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", 0x1000}], 0x4, 0x0, 0x0, 0x4a0f0000}, 0x0) 6.321710247s ago: executing program 3 (id=5754): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={0x0, 0x18, 0x4000}, 0x18) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a0000000088a8", 0x12, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 6.141951443s ago: executing program 3 (id=5758): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x0) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = getgid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000800000000000000ffff0800040000000000000000", 0x39}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) (async, rerun: 32) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x25dfdbfb, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x1, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0xa0, 0x2e}, 0x3}, [@migrate={0x50, 0x11, [{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.012521839s ago: executing program 3 (id=5759): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}], 0x28, 0x29000000}}], 0x1, 0x0) 1.743800642s ago: executing program 2 (id=5802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 1.50768957s ago: executing program 2 (id=5808): r0 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7dd5, @loopback, 0xc}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000002c0)={'veth0\x00', @random="8330f90acc93"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r3, 0x0, 0x21, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x51, 0xb619, '.\x00'}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x7c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_SEL={0x44, 0x5, {0x44, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0x8000, 0x65, [{0x7ffd, 0x20003fe, 0x80000000, 0x6}, {0x0, 0xe1, 0x8ad9, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}]}}]}, 0x7c}}, 0x20040054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x134, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x134}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x89a3, &(0x7f0000000100)) r10 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 1.258068407s ago: executing program 1 (id=5812): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) r5 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='T'], 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmmsg$unix(r8, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000480)="c8858b0407fc12a9be2eddb2", 0xc}], 0x1, 0x0, 0x0, 0x4000004}}], 0x1, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r7, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}}], 0x1, 0x40) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.007666237s ago: executing program 2 (id=5815): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x4024, 0x4) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000001340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000000100)={0x11cc, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x53, 0x19, "a92c85468fffdc7043521b2fd78564c1fb992b6c19dd8b71a73ee5011631c2e3395c5adc886c0514d49be7f6db888ed63e0ec3f2cfe1d87e8e7c5d98af676a7ce09825ec89938879131129193f66c4"}, @NFC_ATTR_SE_APDU={0xa4, 0x19, "4a6636303daaa4b58438361ad11df5343226be42aa159d3da75cb1d7d880ca7adf018dbccc456f2b6080631870fec974125452d5223c27a2c70e2805a5cc18ca32867ae66179ade97b5c851d189d02c437e526d87f8cb8b1fd0d14cfa3dd87a069a39ae75561122cae9db6de716181e7d57116aea1808e4248060304d08d161c6486457d7f5dd9216b1891c663a9aa19596420291524a3b80fb52914cd1b562a"}, @NFC_ATTR_SE_APDU={0xb3, 0x19, "525249affca4d5d8b90d9ae04e4d1079f9df289168a5c597c24d3563578e0201658a96fa978fa6caba189eb9f2900dcdf0b439792a27729f911f0a14d4da8786883ae1f60d8cca33ecc1904e96fe668ce240fbc523e3212684449e48b5ee2da83d968e703471bde0e048907544555d447357f65bd6e2c5a89655631bdfe94681fce99597215e71b8a6b419c1dacd941cd4be23bd8984c8ceed9660d3c1c641a9f8954032471d1328cdc4b0d56705ff"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "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"}]}, 0x11cc}, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x4c, r5, 0x6dcb067ac64e110b, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1536}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x3}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x9}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xb}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4e081}, 0xc015) (async) close(r4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000001500), r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000001540)=[@mss={0x2, 0x4}, @window={0x3, 0x3, 0x7}], 0x2) (async) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000001580)={0x32, 0x8, 0x0, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1a}]}, 0x48) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001640), r4) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0x9c, r7, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff9}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x810}, 0x4) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000017c0)={'batadv_slave_1\x00'}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001840), r4) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r9, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x34, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040004}, 0x2000) (async) r11 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r11, 0x10f, 0x82, &(0x7f0000001940), &(0x7f0000001980)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000019c0)={'vxcan0\x00'}) (async) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001a40), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001a80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001ac0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001b00)=0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000001c80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b40)={0xe8, r12, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_VENDOR_DATA={0xaa, 0x1f, "241c81486813e5ec2a879c261e87c7b38033a7c8abd00e902e2b727acd4108cc9bc850b084585bc0dd15bb3da4f968ef79c3e97845f6aa0e882b94441e6eb4f73d005beb7127abb4bc537420a55c39bf2b061d5503953a33f50ce3b76ff664b4d4e324af75fc5b51f27b6055bcfa4722016d4f277dbe5650f9d1043631ed40d444a8636a011b30b304d98e267cfbc5a023fee4977a9cecccd6d59840f53150ac96f5f8452437"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20020c14}, 0x8000) (async, rerun: 64) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001ec0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x4c, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (rerun: 64) 970.787283ms ago: executing program 0 (id=5816): r0 = socket(0x10, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000300)) (async) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000300)) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000400000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 932.328819ms ago: executing program 4 (id=5817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}}, 0x0) 848.334576ms ago: executing program 2 (id=5818): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x101, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffe92, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1, 0xe}, {0xfff1, 0xb}, {0x6, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x2}, {0x6}, 0x20, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="d453856108d08db1dda3e8fb146bede8089575a9b3e95749a62116aeeeb1bf342a258d49540ef99fd670278cad7c6ff1ae8b4c330f896fae5ce831e121770ebe04414bbb2ae2903bf406af22cf74e15a057c3a1a0fe4b28a93cccf490b300e7cafc887e870e7610ac3fe07dfee179d46d47ca30736276d6af9f6a50264d6896ec2a7e5576e9632d65eb43a035173895527fae7bba51e6fa0d934defd1c42a81ca4ca45529b13122d2781870cf7321c1cd02c628d39f5a302cf17fde894de4b2e01718536881b70cbb069764a9121055846b94678e486a7ab737bcef689b66ea18caccc5313e13f88fc144ea133dc7c8992e4179d0babd68cf4291c0a43d7b5d647148c30a287b87713a7c4918af5b6730879ae1374a30623b5cfd40118b60f0a62a2d475d7296a1eba48e3fd2d2f2948ba6a2c121fb9ecd5fa5c059c18905223e5af240cb8ab4ea54d3867521df52fd05ec7d4be1fb5f9bd739e6a050d10609d4bfba650edfec58f683b", 0x16a, 0x0, &(0x7f0000000280)={0x2, 0xc2, {0x1, 0xc, 0xaa, "65f11ca523a2a014a7ab94118932a5369d19d07e2fee0f96243c493f08ff0d10654a761f85b0ccf4b718c347dd4126c5fe8b654eaae92c9c0aebde428ed2814de7062666da264de9ffa09bd043c19e479083a52ba4004846fd2996e69b4930bbc3763e15fae962a8293784bee749640f20c4e8a3456a1012eef1a500c1ceaaf9c997fcd58a1235d92b7cc29d115288907d28e9e17bd1030029b75b401682ad40ba91d9ded714ac3d3385", 0xb, "524d4040bd2426db7fb72d"}, 0x3b, "c78378bacbd0ef99b64fe2e78916fd433f2a43f36912c264f34a51361cf752d07892eb5163a1f45201f634a238f3f0f4a87afe49a10323e329dc8e"}, 0x109}) 847.441964ms ago: executing program 1 (id=5819): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004400000000000000d9d0c0005400097"], 0xec}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x40002) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'sit0\x00', r6, 0x40, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x10b85, 0x49060}, [@IFLA_MTU={0x8, 0x4, 0xfffffff9}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0xd}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000480), 0x4) getsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x1, 'veth1_to_batadv\x00', {}, 0x5f10}) 830.439548ms ago: executing program 0 (id=5820): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x0, 0xfffffffffffffe38, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x79) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r4, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4087, 0xff7}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f0000000040)=""/234, 0xea}], 0x6}, 0x32120) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r3, r1, 0x4, r1}, 0x10) 792.304015ms ago: executing program 4 (id=5821): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001a000100000000000000000000000000000000000000ffff00000000ac141400"/64, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0200001000004d33c000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088"], 0x104}}, 0x0) r1 = socket(0x23, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x23}, 0x10, &(0x7f0000000100)={0x0, 0x64}, 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 599.929085ms ago: executing program 1 (id=5822): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000005001c0012800b00010067656e65766500000c00028005000a00000000001400030067656e6576653100"], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x348, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0x334, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x314, 0x20, 0x0, 0x1, [@typed={0x8, 0x88, 0x0, 0x0, @str='-(&\x00'}, @typed={0x75, 0x101, 0x0, 0x0, @binary="7f9b19bb61c454fc2cc397f712910db8fd89bb42859f0a3002cb0498978d536a527b6dfbc4f36df6883d981233a82ddceee15e43500e69da9f1c5633fe370dd0aeface21def496828e7784a54de579c2948fa1577f2080b4d39ec62378b0e5deedcfa622fe720a20674c29c076ba15b6d6"}, @nested={0x28e, 0xa1, 0x0, 0x1, [@typed={0x14, 0x20, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="e01ebd2a04c81412603b74917463ee549de1f1b0a281408af9b895f10d4d184b044d9669d6922c394ea90686a75bb7e4558a71a08f237dbff1be9a59f753d6bd69288cf850ef7d75dac2ac", @generic="dad636766dd44b8573aabb91b1284a58ce045ae3f22fc052", @nested={0x4, 0xcf}, @typed={0xe6, 0x88, 0x0, 0x0, @binary="cf0c828366ce0b616e442a53b9222c0531e416bd5f4ca0f38ee7a1d1366f66d73eba92aac4cb9a1e8071950083a46bd55dcc4220be1593549be0d5935b0aafea31a7101cb2e18aed7dc1041dfe88e0409c07284efa5da20ba90819c1b035fde90b04b8174de528ede81957fa4def3f6ba582770ed567893398a645e37a2a9da002fee9fe83da0e85d23c16906fe7d60f7c66ec0017b443bb503ff417b26d08a1bebad0391d581cfd7d9f22c4c5a9cde9dd2d912a1d3fb795429c2e06b277d6d99ca87079528303a4f7089a5a79b139b2d663376bb7eaf05e02bf320a752726660755"}, @generic="9a6819ef753e0eff80a73d3d23761f59fa33249feeed2d713db21de9122cbf35c9e7877ae5f16606d164fb4ac7b8ee0bccbfc03412eaa865f29c2aaf3aaadbc58b52b88a6b10d20866354983e91eb77e68275dc1158134cbe0a0af26471856f466dbb0c905dba6c8a6936c6519dfa422e5905211d6fc119b8222a7337efd28a6a441956c2b02b06ae5cff7260dd623c0001bc284d63cd19eaef591e1e97583df6796de53b429256bc1e1f27f801252932b20228f5204767866fb866cb4ea5309dfc9efdaf6a03cafc4bc2cdb5985a445bdf45a377a9c53065a854a5e03ff8b259cc8797e1e1cc9986d24fa7757104c1737426fa9465524d3fdb782f595bcb2", @typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0x54, 0x0, 0x0, @u64=0x8000}, @nested={0x4, 0xaa}, @nested={0x4, 0xfe}]}]}, @typed={0x14, 0x113, 0x0, 0x0, @ipv6=@empty}]}]}, 0x348}}, 0x400) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) r7 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_udp_int(r7, 0x11, 0x66, 0x0, &(0x7f0000000b80)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x11, &(0x7f00000000c0)=0xfffffffe, 0x4) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 591.455259ms ago: executing program 4 (id=5823): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) getpeername$qrtr(r0, 0x0, 0x0) 589.077966ms ago: executing program 0 (id=5824): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280140001006272696467650000200002800800080088a8ffff05000700070000000a0014000180c200000d0000"], 0x50}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) 531.658946ms ago: executing program 2 (id=5825): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x8917, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write(r1, &(0x7f0000000040)="bc6557f6b72d829df205bc87b5a9bb041d38da7595c05da3cb2068941716fb3027116dd9bc39555ae5ce130f2fa3b33fb7afceaedecee391cf35abdbe7075eaa43e954aee98e56781fb6d1d892665b5b3e6052aaade48cc760ff13da4872eb864c3b9203d336449b026bbe6ecaebb5970919f710688119c3bf2f54fe354602a1eb9dd635c89aee5a1b2c30ca9f1826852b41e7f96c0a4d41941621d3b70df12ef2896dc21b1a7707c6a1971b0b4b4827865b59de83e75a73d952cd0d34b6816592d152b18ca8e3a5ab", 0xc9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffe62}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) ioctl$SIOCAX25GETINFO(r0, 0x8917, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) write(r1, &(0x7f0000000040)="bc6557f6b72d829df205bc87b5a9bb041d38da7595c05da3cb2068941716fb3027116dd9bc39555ae5ce130f2fa3b33fb7afceaedecee391cf35abdbe7075eaa43e954aee98e56781fb6d1d892665b5b3e6052aaade48cc760ff13da4872eb864c3b9203d336449b026bbe6ecaebb5970919f710688119c3bf2f54fe354602a1eb9dd635c89aee5a1b2c30ca9f1826852b41e7f96c0a4d41941621d3b70df12ef2896dc21b1a7707c6a1971b0b4b4827865b59de83e75a73d952cd0d34b6816592d152b18ca8e3a5ab", 0xc9) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffe62}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) (async) 491.358229ms ago: executing program 4 (id=5826): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x255fdbbf, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e23}}]}, 0x24}}, 0x8800) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1703}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x8000) (rerun: 32) 466.074305ms ago: executing program 0 (id=5827): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x2, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, 0x0, 0x0, 0x2}, 0x94) r1 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r1, &(0x7f00000000c0), 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 382.956285ms ago: executing program 1 (id=5828): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "4bc7fb", 0x10, 0x21, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[], {{0x4e20, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x6, 0x1, "c8fd14", 0x7, "0ebb69"}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x48805}, 0xc000) 381.066051ms ago: executing program 2 (id=5829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}]}, 0x18}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000f02000000020000000000000e030000000000000000005f"], 0x0, 0x54}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="02000000835c0000300012800b000100697036677265000020000280050008000300000014000700fc00000000000000000000000000000308000a00", @ANYRES32], 0x58}}, 0x48010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r4, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ppoll(&(0x7f0000001b00)=[{r5, 0x1}], 0x1, &(0x7f0000001b80), 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f00000003c0)=0x90) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)={0x14, r1, 0x313, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) 292.660037ms ago: executing program 1 (id=5830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)={0x175c, 0x0, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [{{0x254, 0x1, {{0x3, 0x2}, 0x0, 0x3, 0xfffe, 0x32, 0x17, 'syz1\x00', "5a02071b15c4ea9c10109a9cc07f880d5eca15a0fdedc6561e4079e5ea53b887", "01bfeaca37be182eb8b27f9235c163afea89bbebcbcfb49770b16b7df269e507", [{0x2a5, 0x4}, {0xfffa, 0xe18, {0x2, 0xfffffffe}}, {0xb3, 0x0, {0x1, 0xfffffffd}}, {0x8, 0xc, {0x1, 0x4}}, {0x100, 0x5, {0x1, 0x4}}, {0x8, 0xffeb, {0x2, 0x2}}, {0x3, 0x8, {0x2, 0x1}}, {0x3990, 0x7, {0x0, 0x5}}, {0x7, 0x5518, {0x3, 0xb}}, {0x8000, 0xc, {0x3, 0x8001}}, {0x1, 0x5, {0x0, 0xf}}, {0x9, 0x0, {0x3, 0x5}}, {0xaac7, 0x7f, {0x0, 0xffffffff}}, {0x6, 0x6, {0x1, 0x8b1}}, {0x2, 0x0, {0x3, 0xfc9}}, {0x816d, 0xffff, {0x1, 0x3}}, {0x63c7, 0x7f, {0x5d0aa39b7d63811, 0x3}}, {0x3ff, 0xff, {0x3, 0x3f}}, {0xff, 0x6, {0x3, 0x3}}, {0x3, 0x0, {0x3, 0xff}}, {0xaa, 0x8273, {0x2, 0xf05}}, {0x5, 0x7a, {0x3, 0x6}}, {0x2, 0x1, {0x2, 0x7fff}}, {0x2, 0xfffa, {0x0, 0x5}}, {0x29, 0x7, {0x3, 0xa}}, {0x1, 0x7fff}, {0x768, 0x9, {0x0, 0x8}}, {0x3, 0x8, {0x1, 0x1}}, {0xfff8, 0x257, {0x1, 0x5}}, {0x8, 0x5, {0x3, 0x7}}, {0x29, 0xc, {0x0, 0x4}}, {0x1ff, 0x4, {0x0, 0x7}}, {0x101, 0x55, {0x1, 0x1}}, {0x4, 0x0, {0x2, 0x5cd7}}, {0x0, 0x9, {0x3, 0x3}}, {0x6, 0x6, {0x0, 0x9}}, {0x8000, 0x3ff, {0x3, 0x9}}, {0x800, 0x4, {0x0, 0x264}}, {0x4e21, 0x0, {0x0, 0x2}}, {0x4, 0x3, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0xfff}, 0x6, 0x40, 0x2, 0x81, 0x1f, 'syz1\x00', "9229cf558b6e6d02ebbd3ae6ceaabf35290964831efeae8d7c5a1b4c4450ea32", "ee1c2a9238abf0cc3e92d041b4d7c8a51c7764f63be8482b245b3e621e717aa9", [{0x9, 0x400, {0x1, 0x6}}, {0x2, 0xd, {0x3, 0x1000}}, {0x96, 0x3, {0x2}}, {0xa, 0xe0, {0x2, 0x7f}}, {0x6, 0x4, {0x0, 0x10}}, {0x6, 0x2, {0x1, 0x8}}, {0x2, 0x7d, {0x2, 0xfffffffb}}, {0x0, 0x9, {0x0, 0x1000}}, {0xa, 0x7, {0x2, 0x7}}, {0x2, 0x9300, {0x1, 0x1}}, {0x42fb, 0xfffb, {0x1, 0x8}}, {0x3, 0x5eed, {0x2, 0x255}}, {0x8, 0xffff, {0x0, 0x10000}}, {0xb, 0xf73, {0x1, 0x4}}, {0x1, 0x401, {0x2, 0x6}}, {0x4, 0x6, {0x2, 0x2}}, {0x2, 0x0, {0x1, 0x14}}, {0xc, 0x9, {0x3, 0x7ff}}, {0x6, 0xfff, {0x2, 0x4}}, {0x1, 0x4, {0x0, 0x3}}, {0x2, 0x40, {0x0, 0xc}}, {0xff, 0x5, {0x0, 0xc3a4}}, {0x1000, 0x3, {0x0, 0x4}}, {0x1d, 0xa, {0x1, 0xe17}}, {0xffff, 0xb6, {0x2, 0x1}}, {0x8, 0x401, {0x1, 0x2}}, {0x3, 0x7f, {0x2, 0x484}}, {0x4, 0x4}, {0x3, 0x0, {0x9407fa09de5d0931, 0x3c}}, {0x3, 0x0, {0x1, 0x401}}, {0x7, 0x6, {0x1, 0x5cf}}, {0x6, 0x7, {0x1, 0x4}}, {0x7a, 0x9, {0x0, 0xa7d}}, {0x9, 0xf897, {0x1, 0xe6}}, {0x8, 0xb, {0x0, 0x1}}, {0x7d1, 0x0, {0x0, 0xfffff8ea}}, {0x9, 0x6, {0x3, 0xcb3f}}, {0x1ff, 0x3, {0x0, 0x5}}, {0x1, 0x8, {0x2}}, {0x5, 0x5d3, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x795}, 0x6, 0x4, 0x6, 0x80, 0xb, 'syz1\x00', "25383af9c47f732ea36cac69650225dfe5ca3ebf29188cb033c6cd1b6395ad72", "921ef13014124f53bd5185116900769e5b9961e9d4db371c8aa277ca65004a89", [{0x9, 0x1, {0x0, 0x5}}, {0x9, 0x4, {0x3, 0x1000}}, {0x2, 0x6, {0x0, 0x3}}, {0x2, 0x2, {0x2, 0xc670}}, {0x6, 0x3, {0x3, 0x9}}, {0x838f, 0x6, {0x0, 0x4}}, {0x8001, 0x7ff, {0x3, 0x5}}, {0x8, 0x1, {0x3, 0x8}}, {0x10, 0xf, {0x0, 0x800}}, {0x9, 0x81, {0x3, 0x4}}, {0x7, 0x9, {0x2, 0x5}}, {0x1, 0x84e9, {0x3, 0x4}}, {0x8, 0x5, {0x3, 0x2}}, {0x8b2, 0x8, {0x0, 0x7}}, {0x9004, 0x7, {0x2, 0x4}}, {0x4, 0x8, {0x5, 0x8}}, {0x1c8, 0x0, {0x3, 0xffffffcc}}, {0x1, 0x2, {0x3, 0xfb}}, {0x3, 0xf9, {0x3, 0x4}}, {0xd, 0x1ff, {0x2, 0x3}}, {0x0, 0x28, {0x3, 0x644f}}, {0x6bb1, 0x6, {0x1, 0x9}}, {0xa, 0x5, {0x1, 0x3}}, {0x1, 0x8, {0x1, 0x1}}, {0xff, 0x2, {0x1, 0x81}}, {0x833e, 0xba, {0x0, 0x5}}, {0xfffd, 0x4, {0x0, 0x8}}, {0x10, 0xffc4, {0x2, 0x4}}, {0x8, 0x8, {0x2, 0x4}}, {0xc38e, 0x2be2, {0x2}}, {0x6, 0x1, {0x2, 0x2}}, {0x1, 0x2, {0x1, 0x5}}, {0x0, 0x6, {0x1}}, {0xe294, 0x4e, {0x1, 0x6}}, {0x7ff, 0xf800, {0x2, 0x4}}, {0x3, 0x6, {0x2, 0x1}}, {0xf, 0x7, {0x1, 0x80}}, {0x3ff, 0x81, {0x0, 0x67b}}, {0x7, 0x2, {0x2, 0x2}}, {0x7ff, 0x9cd, {0x1, 0x638}}]}}}, {{0x254, 0x1, {{0x1, 0x7fff}, 0xc, 0x9, 0xff, 0x2, 0x0, 'syz1\x00', "7629052cd262a426e9c26196fa1d623b689422c6beb7daf6acb396ecb00753ce", "19e74fbc1ae1843285e1644df44861d0cca9a4ff465e4c8905dc26de22325c09", [{0x0, 0x1, {0x0, 0x8}}, {0x7, 0x81, {0x2, 0x2}}, {0x2, 0x80, {0x2}}, {0x6, 0x6, {0x2, 0x5}}, {0x5, 0xfff8, {0x1, 0x400}}, {0x4, 0x2, {0x2, 0x1}}, {0x62ae, 0x3, {0x0, 0x7f}}, {0x7, 0xa, {0x3, 0x7}}, {0x4, 0x8, {0x0, 0xfa36}}, {0x1, 0x6, {0x0, 0x4}}, {0x8, 0x4, {0x1, 0x80}}, {0xc, 0x47, {0x2, 0x800}}, {0x200, 0x0, {0x0, 0x1}}, {0x8000, 0x8001, {0x2, 0x7fff}}, {0x7ff, 0x7, {0x3, 0x763}}, {0x2, 0x0, {0x0, 0x9}}, {0x8, 0x0, {0x2, 0xb}}, {0x3, 0x3, {0x1, 0x3}}, {0x7, 0x2, {0x1, 0xc}}, {0x3926, 0x9d8, {0x0, 0xfff}}, {0x9, 0xd, {0x0, 0x4aa}}, {0x7f, 0x2, {0x2}}, {0xf7a, 0x4, {0x1}}, {0x1380, 0xb3, {0x2, 0xfffffff0}}, {0x1, 0x8, {0x3, 0xd}}, {0x2, 0x3, {0x2, 0x3}}, {0x38a, 0x5, {0x2, 0x1}}, {0x7f, 0x7, {0x1}}, {0x1ff, 0xf, {0x3, 0x24a}}, {0xd, 0x200, {0x1, 0x1}}, {0x8, 0x4, {0x3, 0xfffffff8}}, {0x200, 0x4, {0x0, 0xa7e}}, {0x1, 0x1ff, {0x0, 0x7}}, {0x6, 0xbc97, {0x2}}, {0x1, 0x7fff, {0x3, 0xfffffffd}}, {0x80, 0x6, {0x3, 0x3}}, {0x101, 0x8001, {0x0, 0xa}}, {0x400, 0x3, {0x3, 0x5}}, {0x2f, 0x80, {0x1, 0xffffffff}}, {0x4, 0x7f32, {0x2, 0xc9}}]}}}, {{0x254, 0x1, {{0x1, 0xc}, 0xb, 0x3, 0x93, 0x1, 0x26, 'syz0\x00', "8c34367a52c1d36ead60804f88d975655d4a915259deadc0207fd350ee2a8193", "6b90ab781196fb30314abe92b53b5bd85854b18e2b1b5330e8b5b3408a2cd8b3", [{0x400, 0x47f7, {0x2, 0xf}}, {0x9, 0xf3c, {0x0, 0xfffffffc}}, {0x3, 0x8, {0x0, 0x9}}, {0x6, 0x0, {0x0, 0x7fffffff}}, {0x3, 0x1, {0x0, 0xffffffff}}, {0x873, 0x5, {0x0, 0x9}}, {0x7ff, 0x1, {0x1, 0x5}}, {0x4}, {0x800, 0x8, {0x0, 0x9}}, {0x55, 0x9, {0xf00842b80984004d, 0x80000001}}, {0x8bd2, 0x800, {0x1, 0x6}}, {0x100, 0x3, {0x2, 0x3}}, {0xe, 0xffff, {0x1, 0xffffff01}}, {0x3d, 0x1, {0x2, 0x3b4bba9d}}, {0x40, 0x81, {0x2, 0x3aa4}}, {0x4, 0xfff, {0x0, 0x7f}}, {0x9, 0x8, {0x2, 0xfb45}}, {0xf, 0x7, {0x3, 0xfffffff8}}, {0x1, 0x4, {0x0, 0x8}}, {0x0, 0x3, {0x0, 0x6}}, {0x836, 0x7ff, {0x2, 0x411c}}, {0x5, 0x100, {0x3, 0x101}}, {0x7, 0x0, {0x3, 0x8}}, {0x5, 0x6, {0x2, 0x6}}, {0xd, 0xee, {0x2, 0xfff}}, {0x7, 0x1, {0x3, 0xde}}, {0x3, 0x7, {0x3, 0x7fffffff}}, {0x3, 0x9, {0x3, 0x9}}, {0x101, 0x2, {0x2, 0x3}}, {0x7f, 0x4, {0x1, 0x1}}, {0x1, 0x0, {0x0, 0x6}}, {0x100, 0x2, {0x2, 0x886}}, {0x3, 0x7, {0x1, 0x800000}}, {0x9, 0x2, {0x2, 0x197}}, {0xe, 0x6, {0x6, 0x80000000}}, {0x3, 0x3ff, {0x3, 0x6}}, {0x2, 0x5, {0x3}}, {0x8, 0x8, {0x2, 0xc3}}, {0xcdf6, 0x3, {0x3, 0x48000}}, {0x7, 0xffc0, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0xfffffffe}, 0x91, 0x8, 0x37b0, 0x7ff, 0x25, 'syz1\x00', "f2ab25ad9a9667411c6101666db2aa699d7acec7c348728ebc5b00a0744e4563", "4da4b05385c7bdc7511098d605c189f333861828e8e1156105c08930b866b95b", [{0x101, 0x6b2, {0x3, 0x5f0dc984}}, {0x0, 0x55d3, {0x2, 0x9}}, {0x9, 0x9, {0x3, 0x2}}, {0x9, 0x8, {0x2, 0x2ccc}}, {0x9, 0x5}, {0x9, 0xfff, {0x0, 0xeb6b}}, {0x3, 0x1000, {0x1, 0xbed9}}, {0xb953, 0x800, {0x3, 0x1000}}, {0x401, 0x5, {0x3, 0x4}}, {0x7e4, 0x8, {0x207570a8984c52bf, 0x1}}, {0x7, 0x9, {0x3, 0x2}}, {0xe, 0x6, {0x0, 0x7fff}}, {0x8, 0x5, {0x1, 0x5}}, {0x1, 0x4, {0x1, 0x10}}, {0x4, 0x840e, {0x0, 0x4}}, {0x7ff, 0xc, {0x2, 0x8}}, {0x40, 0x9, {0x3, 0x5}}, {0xc15, 0x8c, {0x2, 0x5}}, {0x8, 0xa, {0x3}}, {0xffff, 0x2, {0x0, 0xffffe000}}, {0x2, 0x101, {0x2, 0x3000000}}, {0x6, 0xfff9, {0x2, 0x1}}, {0xfffa, 0x2, {0x0, 0x80dd0960}}, {0x4, 0x8, {0x0, 0x6}}, {0xe, 0x9, {0x3}}, {0xf0, 0x1, {0x3, 0x800}}, {0x8, 0x2, {0x0, 0xa9e8}}, {0x1, 0x101, {0x1, 0x8}}, {0x9, 0x5, {0x1, 0x2}}, {0x8, 0xdc49, {0x2, 0x4}}, {0x2, 0x0, {0x1}}, {0x1, 0x7, {0x3, 0xfffffffa}}, {0xffff, 0x9}, {0x6, 0x101, {0x3, 0x2}}, {0x5, 0x0, {0x2, 0x1}}, {0x0, 0x4, {0x3, 0x80}}, {0x3, 0xfff7, {0x3, 0x9d}}, {0xa3f, 0x5ba, {0x2, 0x4}}, {0x3, 0x746b, {0x0, 0x3}}, {0x3, 0xff, {0x3, 0xea}}]}}}, {{0x254, 0x1, {{0xaf87468eac4215b5, 0x4}, 0xce, 0xec, 0x4, 0xa, 0xb, 'syz0\x00', "14f6726c01238bf3001f47a42faef76e7ea031fa032d9feb09ce5b3426d8a5b4", "9caac20ab3b741d9ea410e5e78fdd74cc99cf9ae2c995de926491382a6e56d3b", [{0x4, 0x8, {0x1, 0x1}}, {0x6e3, 0x6, {0x2, 0x81}}, {0x9, 0x9, {0x2, 0x9}}, {0x2, 0xaf, {0x2, 0x81}}, {0xe7e7, 0xd2, {0x0, 0x7}}, {0xd, 0x401}, {0xfdc1, 0x101, {0x2, 0x3}}, {0x10, 0x7, {0x0, 0x4}}, {0xd10, 0x8, {0x2, 0x80000001}}, {0x6, 0x100, {0x0, 0x1}}, {0x6, 0xa, {0x1, 0x3}}, {0x85, 0xded, {0x1, 0xff}}, {0x8000, 0x3, {0x3, 0x400}}, {0x5927, 0x4, {0x3, 0x9}}, {0x6, 0x0, {0x3, 0x22c}}, {0x2, 0x6, {0x3, 0x7ff}}, {0x0, 0x3, {0x3, 0xc}}, {0x8, 0x7, {0x3, 0x5}}, {0x0, 0x98, {0x2, 0xb1be}}, {0xa76f, 0x401, {0x2}}, {0x1, 0x7, {0x0, 0xb9}}, {0x9, 0x9, {0x0, 0xd9}}, {0xca, 0x86e9, {0x3, 0x6cd}}, {0x7, 0xffff, {0x2, 0xfa1}}, {0xfff9, 0xb54, {0x0, 0xaa}}, {0x7f, 0x3, {0x1, 0x7}}, {0x2, 0x8, {0x2, 0x40}}, {0xcd7, 0x3, {0x0, 0x2}}, {0x28c2, 0x6, {0x3, 0x7}}, {0x5, 0x1, {0x0, 0x4}}, {0x2, 0x7, {0x1, 0x7f}}, {0x1000, 0x3, {0x0, 0xe}}, {0x40, 0x9f13, {0x1, 0x6}}, {0x0, 0x1ff, {0x1, 0x9}}, {0x0, 0xce, {0x0, 0x401}}, {0x400, 0x5, {0x0, 0x5}}, {0xfff, 0x0, {0x1, 0x7}}, {0x7, 0xa000, {0x3, 0x7}}, {0xcd7a, 0x4, {0x1, 0x5}}, {0x7, 0x0, {0x1, 0x8000}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x5, 0x5, 0x2, 0x0, 0x1, 'syz1\x00', "df5ece314f96ab73743031b2dc03501ff79bdf9631e99f4fbd05bcb309604e31", "095953c735796d8ade9d857ef1d937202bd37557a5221969789e6e24a58c11b8", [{0xdc1, 0x2, {0x2, 0x6}}, {0x9, 0x6, {0x0, 0x1}}, {0xa, 0x3, {0x0, 0x3}}, {0x7, 0x6, {0x3, 0x10}}, {0x401, 0xfff9, {0x3, 0x3}}, {0x3, 0x5, {0x0, 0x7}}, {0x6, 0x400, {0x2, 0x2}}, {0x4e77, 0x5994, {0x3, 0x8}}, {0x401, 0x6, {0x3, 0x8000}}, {0x6, 0x0, {0x2, 0x6}}, {0x7, 0x0, {0x2, 0x7}}, {0x2a1, 0x8001, {0x2, 0x2}}, {0x2, 0x2, {0x3, 0x80}}, {0xfff2, 0x1, {0x1}}, {0xffff, 0xff, {0x0, 0x800}}, {0x2, 0x100, {0x1, 0x1}}, {0x0, 0x5, {0x0, 0x3ff}}, {0xf3, 0x8, {0x3, 0x6}}, {0x9, 0xa000, {0x1, 0x7f}}, {0x9, 0x402, {0x2, 0x80000001}}, {0x2, 0x9, {0x1}}, {0xfffb, 0x7, {0x0, 0x7}}, {0x8, 0x0, {0x2, 0x4}}, {0x9, 0x3, {0x1, 0x9}}, {0x1, 0x80, {0x2, 0x5}}, {0x1, 0xd0b, {0x1, 0x9}}, {0x1, 0x9, {0x3, 0x5}}, {0x100, 0x0, {0x1, 0x759}}, {0x1, 0x2, {0x0, 0x8}}, {0x8, 0x10, {0x1, 0x3ff}}, {0x4, 0xb, {0x0, 0x9}}, {0xd, 0xffff, {0x3, 0x3}}, {0x3ff, 0x4, {0x0, 0x1}}, {0x9, 0x0, {0x0, 0x7f}}, {0x8, 0x5, {0x3, 0x1}}, {0x7, 0x101, {0x2, 0xd48b}}, {0xc, 0x6, {0x3, 0xfffff021}}, {0xf, 0xfffe, {0x3, 0x5}}, {0x0, 0x6, {0x3}}, {0x9, 0x200, {0x0, 0x10001}}]}}}, {{0x254, 0x1, {{0x6, 0xffffffff}, 0x5, 0x8, 0x7, 0x2, 0xf, 'syz1\x00', "26b91019392f549fa85e7ab047f4ed89cb8ee2be2ffbc03d9b27b943a3ae5740", "25b53a089f37aee0858fe56eaf0a021825895759b2db513a57dea0d91abd1825", [{0x3, 0x360, {0x0, 0x6}}, {0x7, 0x60, {0x2, 0xfffffff9}}, {0x794b, 0x163, {0x3}}, {0x401, 0x1, {0x3, 0xfffffffb}}, {0x1, 0x0, {0x0, 0x6}}, {0xfa2, 0x8e8b, {0x3, 0xab}}, {0x9eb, 0x4ee, {0x2, 0x80000001}}, {0xe389, 0xd6aa, {0x1, 0x8}}, {0x200, 0xfffb, {0x1, 0x80}}, {0x10, 0x6, {0x0, 0x10}}, {0x0, 0x4, {0x2, 0x7f}}, {0x3, 0x4, {0x2, 0xcb8f}}, {0xa223, 0x71, {0x2, 0x4}}, {0x4, 0x1, {0x2, 0x1000}}, {0xc, 0x9, {0x3, 0x7}}, {0x64, 0x5a24, {0x2, 0x86b}}, {0x3, 0x2, {0x0, 0x401}}, {0x945, 0x800, {0x0, 0xffff}}, {0xa, 0x6, {0x3, 0x5}}, {0x1, 0x5, {0x1, 0x82}}, {0x3, 0x9, {0x2, 0x4}}, {0x1, 0x74, {0x1, 0x9}}, {0xff55, 0x7f, {0x1, 0xd6}}, {0x2, 0x7, {0x2, 0x3}}, {0x8, 0x7fff, {0x3, 0x4}}, {0xa7, 0x1000, {0x1, 0x2}}, {0xc2, 0x200, {0x2, 0x38cb}}, {0x3, 0x1, {0x1, 0x8001}}, {0x101, 0x8, {0x1, 0xdf5}}, {0x4, 0x9, {0x1, 0x8001}}, {0xe, 0x5, {0x1, 0x80000001}}, {0x6, 0x1, {0x2, 0x8001}}, {0x2, 0xd02, {0x0, 0x8}}, {0x3, 0x47, {0x0, 0x7f}}, {0x3, 0x0, {0x0, 0x8d}}, {0x7fff, 0x8, {0x3, 0x5}}, {0x6, 0x401, {0x2, 0x8}}, {0x68, 0x7f, {0x1, 0x1ff}}, {0x6, 0xfff8, {0x3, 0x401}}, {0xe, 0x2, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x2, 0x5, 0x5, 0x1, 0x28, 'syz1\x00', "60e55b8428c186bba4c96adfbf4bd7eeee8c92a933f7527f062d32aad8149756", "4d559f48c5c920c746b380f6467771cd28702225bfabb1816b578f0d9828544f", [{0x3, 0x7, {0x2, 0x9}}, {0x3, 0x81, {0x3, 0x6}}, {0x2, 0x83, {0x1, 0x9}}, {0x4, 0x6, {0x2, 0x9}}, {0xa88, 0x334, {0x0, 0xa}}, {0x4, 0x395a, {0x3, 0x4}}, {0x1, 0x2, {0x1, 0x2}}, {0x6455, 0x7ff}, {0x0, 0xad, {0x2, 0x9}}, {0x8, 0x2, {0x2, 0x8}}, {0x8, 0x101, {0x3, 0x8}}, {0x2, 0xff, {0x2, 0x8}}, {0x800, 0xfff8, {0x0, 0x8001}}, {0x7, 0x3, {0x2, 0x5}}, {0x2, 0x9, {0x0, 0x7}}, {0x401, 0xc, {0x0, 0x2}}, {0x8d, 0x2, {0x3, 0x2}}, {0xfbff, 0x2, {0x0, 0x3}}, {0x8, 0x3, {0x1, 0x8}}, {0x3ff7, 0x9, {0x0, 0x101}}, {0x5, 0x1aae, {0x3, 0x80000000}}, {0x9, 0x6, {0x1, 0x6}}, {0xc34d, 0x9, {0x2, 0xffffffff}}, {0x2, 0x81, {0x2, 0x49093bf7}}, {0x1, 0x5, {0x0, 0x59}}, {0x6, 0x6f0f, {0x0, 0x2}}, {0xdc, 0x0, {0x2, 0x5}}, {0x4, 0x7, {0x1, 0x2}}, {0x4, 0x200, {0xf0020b64af908d7b, 0x4}}, {0x9, 0x3, {0x0, 0xffffdaca}}, {0x2, 0x6, {0x0, 0x7}}, {0x2, 0x7, {0x3, 0x1}}, {0x9, 0x81, {0x0, 0x9}}, {0xfffa, 0x8, {0x3, 0xffffff2e}}, {0x3, 0x6, {0x1, 0x65}}, {0x50d, 0x7, {0x1, 0xfff}}, {0x0, 0x8, {0x3, 0xc}}, {0x10, 0x85f2, {0x3, 0x1}}, {0x1, 0x0, {0x1, 0x4}}, {0x81, 0xd22, {0x2, 0x7}}]}}}]}, 0x175c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x18, 0x2, 0x3, &(0x7f0000000180)={0xffffffffffffffff}) write$bt_hci(r3, &(0x7f0000000280)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x9, 0xe2}}}, 0x6) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x100010, r2, 0x4c776000) getsockopt$rose(r2, 0x104, 0x7, 0x0, &(0x7f00000001c0)=0xfffffffffffffe3e) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x17c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10c2}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "f4e030a8dc68c6c46f8e3940a2a0f9cc331431252b01765e9a6e29"}}, @TIPC_NLA_NODE_ID={0xeb, 0x3, "05a46617d435317f1a78a69576d3baf38390069dffaa386c09bf5cae92ba5812867940d094a235220e6e14c223e7464bb09bffd3e9cfab2034745b0a56a3ddf7c1333f8e1f579cc59bee979037b397e436111abbc54f52e92b8ef2d67284425296560048bc58bc0eea734148b83c2c4e6ae9ce64ec3bba53e082222d82f39a2b0a0c18b5df8d9a774b3761500c709c3b4b89935aefffca006a501d4f4964bd4ecc2c7d9a1385be81e0322a92d53412369fa053404ee7db293e97a21983f7cbba2b4b2ad81b2565a96d8eaec9f6373b28d359419e0c6a168c616a825fa8431a96c0f15fc15c68cd"}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) 254.17859ms ago: executing program 4 (id=5831): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) accept4(r2, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000f40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xd58, r3, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x248, 0x11d, 0x0, 0x1, [{0x22c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x20c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x5, 0x6c, 0x12, 0x16, 0x6c, 0x60, 0x16, 0xc, 0xc, 0x2, 0x16, 0x12, 0xc, 0x60, 0x30, 0x6c, 0x1b, 0x2, 0x18, 0x6c, 0x1, 0x1b, 0x14, 0x30, 0x12, 0xb, 0x12, 0x5, 0x64]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x3, 0x3, 0x3ff, 0x8, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x8, 0x2, 0x2, 0x0, 0x1000, 0xfff7]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x0, 0x6c, 0x1, 0x24, 0x18, 0x16, 0x12, 0x36, 0xb, 0x36, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x1}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x1}, {0x7, 0xa}, {0x3, 0x3}, {0x5}, {0x0, 0x3}, {0x1, 0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x3}, {0x5, 0x5}, {0x1}, {0x4, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x5}, {0x1, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x0, 0x8}, {0x6, 0x9}, {0x4, 0xa}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x2}, {0x5, 0xa}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x6}, {0x1, 0x1}, {0x6, 0x5}, {0x3, 0x3}, {0x6}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x3, 0x1, 0xc, 0x9, 0x6c, 0xf48e8b7f8fc8a217, 0xc, 0x9]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x3}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x2}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0x6}, {0x3, 0xa}, {0x0, 0x1}, {0x3, 0x9}, {0x2, 0x5}, {0x6}, {0x0, 0x7}, {0x7, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x2}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x9}, {}, {0x3, 0x8}, {0x6, 0x7}, {0x1, 0x4}, {0x3}, {0x3, 0x1}, {0x0, 0xa}, {0x1, 0x1}, {0x3, 0x6}, {0x6, 0x8}, {0x7, 0x3}, {0x7, 0x4}, {0x5, 0x6}, {0x3, 0xa}, {0x2, 0x8}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x9}, {0x6}, {0x3, 0x1}, {0x0, 0x7}, {}, {0x3, 0x1}, {0x3, 0x4}, {0x4, 0x1}, {0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x7, 0x1}, {0x2}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x7}, {0x6, 0x3}, {0x2, 0x5}, {0x7, 0x6}, {0x7, 0x4}, {0x1, 0x2}, {}, {0x1, 0x5}, {0x3, 0x1}, {0x5, 0x7}, {0x6, 0xa}, {0x7, 0x8}, {0x2, 0x8}, {0x7, 0x9}, {0x3, 0x5}, {0x0, 0x9}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x3d85, 0x1, 0x3, 0x800, 0xfffc, 0x2, 0x3083]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x5, 0x29, 0x36, 0x51, 0x48, 0x1, 0x3, 0x9, 0x16, 0x6, 0x9, 0x2, 0x4, 0x5, 0x4, 0x36, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x2, 0x0, 0xfffe, 0x80, 0x0, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x16, 0x24, 0xc, 0x2, 0x5, 0x24, 0x60, 0xb, 0x1, 0x24, 0x60, 0x3, 0x48, 0x2, 0x3, 0x36, 0x0, 0x60, 0x44, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0x5, 0x6, 0x36, 0x9, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9c3, 0x7, 0x9, 0x1, 0x0, 0x4, 0x800]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x7c, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x28, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x18, 0x2, 0x73, 0x1b, 0x9, 0x2, 0xc, 0x4, 0x2, 0x6c, 0x0, 0x5, 0x9, 0x60, 0x4, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6d}]}]}, @NL80211_ATTR_TID_CONFIG={0x100, 0x11d, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x3, 0x4, 0xcc19, 0xffff, 0x7cd, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x19}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xef}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x698, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfb}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x45}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x69}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xeb}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x92}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbb}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}]}, {0x248, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x224, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x9}, {0x0, 0x3}, {0x6, 0x8}, {0x5, 0x4}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x6}, {0x3, 0x7}, {0x0, 0x8}, {0x5, 0x6}, {0x5, 0x9}, {0x2, 0x6}, {0x7, 0x9}, {0x7, 0x1}, {0x1}, {0x2, 0xa}, {0x6, 0x3}, {0x6, 0x4}, {0x2}, {0x2, 0x3}, {0x6, 0x7}, {0x2, 0x2}, {0x3, 0x2}, {0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x6}, {0x5, 0x5}, {0x1, 0x9}, {0x4, 0x1}, {0x7}, {0x0, 0x8}, {0x1, 0x2}, {0x0, 0x1}, {0x7, 0x8}, {0x3, 0x7}, {0x6, 0x3}, {0x3, 0xa}, {0x5}, {0x5}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0x5}, {0x2, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0xa}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0xc, 0x9, 0x2, 0x2, 0x6, 0x3, 0x16, 0x2, 0x65, 0x1b, 0x3, 0x1b, 0x16, 0x60, 0x6c, 0x1, 0x1b, 0x36, 0x36, 0x7e, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4e6, 0x40, 0x121, 0x4, 0x6, 0xd, 0x5, 0x6]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x3, 0x5}, {0x4, 0x1}, {0x4, 0x4}, {0x6, 0x6}, {0x6, 0x3}, {0x1, 0x6}, {0x2, 0x9}, {0x4, 0xa}, {0x7, 0x4}, {0x7}, {0x7, 0x2}, {0x3, 0x3}, {0x1}, {0x7, 0x6}, {0x0, 0x5}, {0x0, 0x6}, {0x6, 0x7}, {0x2, 0x6}, {0x7, 0x9}, {0x5, 0x8}, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0x5}, {0x1, 0x6}, {0x5, 0x7}, {0x3, 0x7}, {0x5}, {0x7, 0x1}, {0x5, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x5, 0x5}, {0x4, 0x6}, {0x1}, {0x3, 0xa}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x7}, {0x5, 0x7}, {0x3, 0x1}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0xa}, {0x3, 0x5}, {0x3, 0x9}, {0x4, 0x9}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x8}, {0x2, 0x4}, {0x6, 0x1}, {0x7, 0x8}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x8}, {0x2, 0x1}, {0x5, 0x5}, {0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x8}, {0x0, 0x6}, {0x4, 0x2}, {0x4, 0xa}, {0x0, 0xa}, {0x5, 0xa}, {0x2, 0x2}, {0x1, 0x5}, {0x5, 0x4}, {0x2, 0x4}, {0x7, 0x5}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x6, 0xa}, {0x5, 0x4}, {0x5, 0x4}, {0x6, 0x9}, {0x4, 0x7}, {0x3, 0x2}, {0x4}, {0x2, 0x1}, {0x4, 0x5}, {0x0, 0x3}, {0x7, 0x1}, {0x2, 0x6}, {0x2, 0x4}, {0x7, 0x4}, {0x1, 0x6}, {0x3, 0x2}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0x4}, {0x5, 0x5}, {0x5}, {0x5, 0x3}, {0x7, 0x1}, {0x3, 0x9}, {0x5, 0x7}, {0x6, 0x1}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0xa}, {0x2}, {0x2, 0x8}, {0x5, 0x6}, {0x5}, {0x1, 0x3}, {0x1}, {0x6}, {0x4, 0x3}, {0x6, 0x1}, {0x3, 0x1}, {0x1, 0x7}, {0x1, 0x8}, {0x4, 0x6}, {0x2, 0x1}, {0x7, 0x8}, {0x0, 0x8}, {0x5, 0x9}, {0x3, 0x2}, {0x3}, {0x7, 0x5}, {0x6, 0xa}, {0x7, 0x6}, {0x1, 0x7}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x400, 0x401, 0x3, 0x269, 0x1, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x3, 0x3, 0x7, 0x3, 0x6, 0x1]}}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x30, 0x6, 0x1b, 0x60, 0x16, 0x6c, 0x4, 0x5, 0x18, 0x4, 0x6c, 0x6, 0x15, 0x18, 0x9, 0x60, 0x36, 0x4, 0x0, 0x1, 0xd36344a987cda618, 0x2]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x7}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x3}, {0x7, 0x1}, {0x4, 0x5}, {0x6, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x1, 0x4}, {0x7}, {0x2, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x6, 0xa}, {0x1, 0xa}, {0x2, 0x7}, {0x6, 0x3}, {0x1, 0x1}, {0x5, 0x5}, {0x4, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0x9}, {0x1, 0x3}, {0x7, 0x9}, {0x3, 0x6}, {0x7, 0xa}, {0x0, 0x9}, {0x7, 0x8}, {0x4, 0x6}, {0x7, 0x6}, {0x4, 0x6}, {0x5, 0x3}, {0x1}, {0x3, 0x3}, {0x7, 0xa}, {0x0, 0x4}, {0x2, 0x5}, {0x3, 0x5}, {0x3, 0x2}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x24, 0x36, 0x12, 0x27, 0x18, 0xc, 0x24, 0x2, 0x36, 0x6, 0x24, 0x9, 0x1b, 0x2, 0x1b, 0x30, 0x45, 0x2, 0x5, 0x30, 0x48, 0xc, 0xde5b132e3299e457, 0x24, 0xb, 0x48, 0x9, 0x3]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x598, 0x6, 0xc6, 0x4cab, 0x9, 0x80, 0x85, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x3, 0x9, 0x0, 0xab2, 0x4, 0x9, 0x10]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4a}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x41}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x47}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}]}, {0x364, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x308, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x3}, {0x0, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xcf3b, 0x8, 0x2, 0xfffa, 0x0, 0x7, 0xb]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x6, 0x4}, {0x0, 0x5}, {0x2, 0x2}, {0x3, 0x1}, {0x7, 0x6}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0xa}, {0x6, 0x5}, {0x6, 0xa}, {0x3, 0x9}, {0x6, 0x6}, {0x4}, {0x5, 0x6}, {0x0, 0x4}, {0x4, 0x5}, {0x4, 0x9}, {0x4, 0x2}, {0x6, 0x5}, {0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x4, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x6}, {0x3, 0x2}, {0x4, 0x1}, {0x2, 0xa}, {0x0, 0x1}, {0x2, 0x9}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0xa}, {0x4}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x0, 0x3}, {0x2, 0x2}, {0x4, 0x6}, {0x7, 0x6}, {0x7, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0xd, 0x3, 0x4, 0x30, 0x6c, 0xc, 0xc, 0x24, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x81, 0xffff, 0x4, 0xafb7, 0x8, 0x1ff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x6, 0x12, 0x0, 0x4, 0xc, 0x18, 0x9, 0x5]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7, 0x4}, {0x4, 0x1}, {0x0, 0x5}, {0x1, 0xa}, {0x7, 0x6}, {0x6, 0x5}, {0x1, 0xa}, {0x1}, {0x0, 0x4}, {0x3, 0x1}, {0x2, 0xa}, {0x1, 0x2}, {0x6, 0x6}, {0x5, 0xa}, {0x0, 0x1}, {0x7}, {0x1}, {0x4, 0x5}, {0x5, 0x2}, {0x4, 0x2}, {0x5, 0x4}, {0x5, 0x7}, {0x5, 0x8}, {0x4, 0x8}, {0x1, 0x7}, {0x0, 0x8}, {0x1}, {0x3, 0x5}, {0x2, 0x5}, {0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x3}, {0x4, 0x6}, {0x2}, {0x0, 0x3}, {0x4, 0x3}, {0x0, 0x6}, {0x3, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x4}, {0x7, 0x9}, {0x1, 0x4}, {0x3, 0x4}, {0x6, 0x8}, {0x0, 0xa}, {0x6, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x5, 0x8}, {0x6, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x7, 0x5}, {0x7, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x2589, 0x2, 0x0, 0x3, 0x200, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0xb, 0x30, 0x48, 0x5, 0x1b, 0x6e, 0x24, 0x2, 0x24]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x49, 0x9, 0x2, 0x4, 0x1, 0xc688, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x40, 0x82c5, 0x1ff, 0x5, 0x3, 0x7]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x7}, {0x0, 0x6}, {0x1, 0x2}, {0x5, 0x4}, {0x0, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x2, 0x5}, {0x7, 0x1b}, {0x5, 0x8}, {0x0, 0x1}, {0x7, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x1, 0x1}, {0x7, 0x8}, {0x3, 0x3}, {0x5, 0x3}, {0x5}, {0x7, 0x1}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x4}, {0x3, 0x8}, {0x2, 0x3}, {0x7, 0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x5, 0x9}, {0x5, 0x7}, {0x1, 0x9}, {0x7, 0x2}, {0x4, 0x9}, {0x4, 0x6}, {0x1, 0x5}, {}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x78, 0x14, 0x60, 0x36, 0x9, 0x5, 0x48, 0x3, 0x18, 0x12]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x6, 0x16, 0x30, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0xb, 0x1, 0x24, 0x24, 0x24, 0x1, 0x4]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x48, 0x1, 0x5, 0x36, 0x36, 0x24, 0x24, 0x48, 0x12, 0x6, 0x1b, 0x14, 0x5, 0x36, 0x3, 0x18, 0x9, 0x2, 0x1b, 0xc, 0x24, 0x16, 0x3, 0x2, 0x3]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x5}, {0x5, 0x6}, {0x4, 0x3}, {0x5, 0x7}, {0x7, 0x7}, {0x6, 0x1}, {0x3, 0x7}, {0x6, 0x7}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x5}, {0x7, 0x4}, {0x1, 0x3}, {0x0, 0x7}, {0x7, 0x5}, {0x5, 0x2}, {0x6, 0x1}, {0x0, 0x8}, {0x0, 0x2}, {0x3, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x5, 0x8}, {0x5}, {0x6, 0x9}, {0x7, 0x1}, {0x3, 0xa}, {0x7, 0x7}, {0x7, 0x9}, {0x5, 0xa}, {0x6, 0x3}, {0x4, 0x4}, {}, {0x1, 0x3}, {0x5, 0x5}, {0x3, 0x3}, {0x1, 0x7}, {0x1}, {0x1, 0x6}, {0x3, 0x1}, {0x4, 0x5}, {0x0, 0x2}, {0x1}, {0x0, 0x6}, {0x1}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x7, 0x6}, {0x4, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x28, 0x1000, 0x3, 0xfffb, 0xc0d3, 0x395e, 0xfcb2, 0x7fff]}}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x4}, {0x6, 0xa}, {0x2}, {0x0, 0x2}, {0x1}, {0x5, 0x6}, {0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x1, 0x8}, {0x5, 0x5}, {0x0, 0xa}, {0x2, 0x5}, {0x5, 0x6}, {0x7, 0xa}, {0x4, 0x8}, {0x7, 0x8}, {0x0, 0x6}, {0x7, 0x5}, {0x0, 0x8}, {0x2, 0x6}, {0x6, 0x2}, {0x7, 0x6}, {0x7, 0x4}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x5, 0x6}, {0x7, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x44, 0x3, 0xfffc, 0x40, 0x6, 0x6, 0xffa8, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x4}, {0x7, 0xa}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x5}, {0x5, 0x6}, {0x5, 0x5}, {0x2, 0x3}, {0x6}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x2, 0x7}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x9}, {}, {0x1, 0x9}, {0x5, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x7}, {0x7, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x8}, {0x2, 0x8}, {0x6, 0x7}, {0x7, 0x1}, {0x3, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x7}, {0x2, 0x5}, {0x1, 0x5}, {0x3, 0x8}, {0x4}, {0x5, 0x6}, {0x6, 0x4}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0xff, 0x5, 0x1, 0x4000, 0x6, 0xfffb, 0x462b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2bf, 0x5, 0x8, 0x9, 0x9, 0x3b, 0x447a, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x0, 0xc, 0x7, 0xb, 0x2400, 0x8]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x8, 0x2, 0x4, 0xe, 0x846a, 0xff, 0xe]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xba}]}]}, @NL80211_ATTR_TID_CONFIG={0x26c, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x6c, 0x2, 0x5, 0x24, 0x5b, 0x2, 0x60, 0x1, 0x24, 0x60, 0x4, 0x6d, 0x18, 0x17, 0x4, 0x6, 0x6c, 0x24, 0xc, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd60, 0x1000, 0x2, 0x7, 0x4, 0x7fff, 0xf7cf, 0x3ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1}, {0x5, 0x7}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x5}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x5}, {0x4, 0x7}, {0x1, 0x3}, {0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x5}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x3, 0x8}, {0x6, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0x8}, {0x3, 0x1}, {0x7, 0x5}, {0x6, 0x9}, {0x2, 0x7}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7ff, 0x200, 0xff, 0x0, 0x7, 0x6, 0x7]}}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0xf, 0x7, 0xc, 0x6, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x6}, {0x0, 0x1}, {0x6, 0x5}, {0x5, 0x2}, {0x6, 0x7}, {}, {0x4, 0x4}, {0x2, 0x8}, {0x1, 0x5}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x3}, {0x7, 0xa}, {0x1, 0x4}, {0x6, 0x2}, {0x7, 0x8}, {0x2, 0x5}, {0x0, 0x5}, {0x3, 0x9}, {0x0, 0x2}, {0x6, 0x4}, {0x2}, {0x1, 0xa}, {0x1, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x4, 0x4}, {0x7, 0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0xc, 0x2, 0x1, 0x60, 0x23, 0x1b, 0x18, 0x2, 0x1, 0x12, 0x48, 0xc, 0x2, 0x9, 0x12, 0xc, 0x60, 0x12, 0x60, 0x4, 0x48, 0x24, 0x16, 0x6, 0x12, 0x1a, 0x18, 0x1, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xfe, 0xb, 0x3000, 0x3, 0x9, 0x0, 0x40]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x2, 0x6, 0xfff8, 0x10, 0x0, 0x2, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6c, 0x5, 0x2, 0x16, 0x12, 0x6c, 0x1b, 0x48, 0x0, 0x12, 0x48, 0x24, 0x16, 0x12, 0x1, 0xf7, 0x9, 0x16, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x76, 0x3, 0x1b, 0xc, 0x36, 0x24, 0x48, 0x0, 0x6, 0x5, 0x48, 0x30, 0x60, 0x4, 0xc, 0xb, 0x6, 0x1b, 0x5, 0x2, 0x60, 0xc, 0x63, 0x30, 0x3, 0xb, 0x6]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x885, 0x8, 0x200, 0x3, 0x4, 0xfff5, 0x8, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa925, 0x8, 0x3, 0xfff8, 0xe, 0x1, 0xfffc, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x56}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0xd58}, 0x1, 0x0, 0x0, 0x80}, 0x40) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) 251.253708ms ago: executing program 0 (id=5832): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fd55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}]}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'net'}, {0x0, 'cpuset'}, {0x2b, 'memory'}]}, 0x15) (async) socket(0x1f, 0x5, 0xa) 100.099998ms ago: executing program 0 (id=5833): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0002, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)) close(0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x54, r6, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x54}}, 0x20000000) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={r1, r2/1000+10000}, 0x10) 88.056465ms ago: executing program 4 (id=5834): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x48044}, 0x4080) socket$igmp(0x2, 0x3, 0x2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048850}, 0x24000000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000001540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001500)={&(0x7f0000000480)={0x1060, 0x1, 0x5, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0xe}, 0x1, 0x81, 0x3, 0x5, 0x22, 'syz1\x00', "efcfe7bd571010ad92f8818d31e6a90325371f40bc2cb94c4cb7753f4266f054", "9ca017b073dd302d5123305d493080941655b30b8f63841d539c7ee0123c1e8b", [{0x8, 0xfffd, {0x2, 0x7}}, {0x3, 0x537, {0x0, 0x1000}}, {0x7, 0xee, {0x1, 0x7}}, {0xf0, 0x3, {0x1, 0x15}}, {0x4, 0x2, {0x2, 0x1}}, {0x100, 0x9, {0x0, 0xfffffff8}}, {0xac4, 0x8, {0x2, 0xa3f2}}, {0x80, 0x2, {0x1, 0x1}}, {0x7f, 0x6, {0x2, 0xc0000000}}, {0xd, 0x9, {0x0, 0x8000}}, {0x7, 0x2, {0x3, 0x7}}, {0xcad, 0x380, {0x2, 0x5e05}}, {0x5, 0x1000, {0x3, 0x10000}}, {0x400, 0x1, {0x0, 0x2400000}}, {0x1, 0x3, {0x3, 0x5}}, {0x80, 0x1, {0x7943471a0affc411, 0xa0}}, {0xfffd, 0xd, {0x3, 0xfff}}, {0x7, 0x0, {0x3, 0x7}}, {0x7, 0x8001, {0x2, 0x5}}, {0x1, 0x9, {0x2}}, {0x2, 0xf800, {0x3, 0x7}}, {0x9, 0x81, {0x0, 0x2}}, {0x1000, 0x8, {0x0, 0x7}}, {0x40, 0xff0f, {0x2, 0x9}}, {0x3, 0x8, {0x3, 0x8}}, {0xfff6, 0x4, {0x2, 0x8000}}, {0x20, 0xd02, {0x1, 0x8001}}, {0xa, 0x0, {0x1, 0x7c}}, {0x2, 0x200, {0x1}}, {0x2, 0x1, {0x2, 0xcfed}}, {0xfc01, 0xff, {0x3}}, {0x5, 0xfff7, {0x2, 0x8}}, {0x3, 0x9, {0x0, 0x3}}, {0x100, 0x87, {0x3, 0x1ff}}, {0x7f, 0x9, {0x1, 0xdb3}}, {0x9, 0x1, {0x3, 0xffffffff}}, {0x0, 0xfff9, {0x2, 0x7fffffff}}, {0xffff, 0x9, {0x1, 0x3ff}}, {0xe, 0x5, {0x1, 0x7fffffff}}, {0x9, 0x3, {0x3, 0x65}}]}}}, {{0x254, 0x1, {{0x2}, 0x4, 0xff, 0x4, 0x5, 0x19, 'syz1\x00', "afedddc729a816b1de35cb5f3687bbdc52b7deab939cdcfd8ddc1dca1089b750", "ffcf5713802605b20e054866fa4890431f7a134e5c34a624788999b2158940ea", [{0x7, 0xd, {0x2, 0x5}}, {0x2, 0x7f, {0x2, 0xfff}}, {0x1, 0xff, {0x2, 0xfff}}, {0x9, 0x1, {0x0, 0x6}}, {0x433f, 0xd574, {0x2, 0x1}}, {0x1, 0x6, {0x2, 0x7}}, {0x3, 0x8, {0x2, 0x3}}, {0x66b, 0x3, {0x2, 0xe}}, {0x0, 0x8, {0x2, 0xd5}}, {0x1000, 0xf2, {0x2, 0x2}}, {0x500, 0x8, {0x0, 0xb171}}, {0x2, 0x6be1, {0x3, 0x2b}}, {0x65b, 0x2, {0x3, 0x6}}, {0x5, 0x8, {0x1, 0x1}}, {0x8, 0x2, {0x3, 0x6}}, {0x7, 0xfffe}, {0xfffe, 0x4, {0x1, 0x2}}, {0x7, 0x9, {0x0, 0xbbb}}, {0x197, 0x4, {0x3, 0x2}}, {0x5, 0x7, {0x0, 0xc19}}, {0x6, 0x5, {0x1, 0x5}}, {0x1314, 0x8, {0x2}}, {0xdd, 0x6}, {0x1, 0x8, {0x3, 0x6}}, {0x9, 0x4, {0x3, 0x81}}, {0x9, 0x200, {0x1, 0x9}}, {0x7, 0x8001, {0x2, 0x3}}, {0x800, 0x9, {0x1, 0x5}}, {0xffc9, 0x8, {0x0, 0xfffffffa}}, {0xc707, 0x200, {0x1, 0xfc36}}, {0x8190, 0x1, {0x0, 0x8}}, {0x1, 0xfffc, {0x2, 0x1}}, {0x2, 0x81, {0x0, 0x1000}}, {0x8, 0x7, {0x2, 0xe}}, {0x7, 0x4, {0x0, 0x4}}, {0xff40, 0x0, {0x0, 0x8001}}, {0x0, 0x8, {0x2}}, {0x8, 0x8, {0x1, 0x3}}, {0x1, 0x5, {0x2, 0x1ff}}, {0xd, 0x9719, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x10, 0xf2, 0x4, 0x6, 0x2, 'syz0\x00', "b670ada28d1cf6426bb891ab322b05e5a74a7bcdc2a8765024cdf7f84fe2ae8f", "10d309c43a666b4f5af94d88120065b13ff7796655d0392f42b37746913a2fa5", [{0xfffd, 0x4, {0x3, 0x6}}, {0xa, 0x5, {0x1, 0x1ff}}, {0x5, 0x2, {0x0, 0x9}}, {0x7, 0x8, {0x3, 0x22460a9b}}, {0x4, 0x0, {0x3, 0x3}}, {0x8, 0xf3e, {0x3, 0x4}}, {0x342, 0x2, {0x0, 0xffff8c50}}, {0x8, 0x4, {0x1, 0x3}}, {0xffff, 0x0, {0x1, 0x2}}, {0xccc, 0x61, {0x3, 0x7}}, {0x6, 0x4, {0x1, 0xc461}}, {0xfff7, 0x8001, {0x3, 0x8}}, {0x3ff, 0xfffa, {0x2, 0x4}}, {0x7, 0xc7e, {0x0, 0x5}}, {0x8001, 0xfff, {0x2, 0x8}}, {0x8, 0xe, {0x2, 0x7}}, {0xfffa, 0x1, {0x2, 0xdc51}}, {0x3, 0x5, {0x1, 0xbee}}, {0x2, 0x2, {0x0, 0x40}}, {0x1, 0x9, {0x0, 0x400}}, {0x2, 0x3af, {0x1, 0xa75}}, {0x8, 0xa7c0, {0x2, 0x2}}, {0x0, 0x2, {0x3, 0x4}}, {0x6, 0xfff, {0x0, 0x7}}, {0x7, 0x9, {0x3, 0x80000000}}, {0x4, 0x2, {0x0, 0xfff}}, {0x6, 0xedb, {0x0, 0x7}}, {0x0, 0x6d47, {0x2, 0x7fff}}, {0x7ff, 0xed5, {0x1, 0x80000001}}, {0x1, 0xf, {0x0, 0x9}}, {0x5, 0x5d47, {0x0, 0x81}}, {0x8, 0x2, {0x3, 0x2}}, {0x6, 0x9, {0x1, 0x5}}, {0x5, 0x8, {0x1, 0xdf4}}, {0x3, 0x1, {0x3, 0x5}}, {0x421b, 0x3, {0x1, 0x5}}, {0x6, 0x134, {0x2, 0x5df}}, {0xe50, 0x8, {0x1, 0xf4000000}}, {0xc127, 0x9, {0x2, 0x9}}, {0x40, 0x1000, {0x2, 0x9c0e}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x1, 0x5, 0x36, 0x6, 0x5, 'syz0\x00', "5042cd3e748ba10f6666dc58b8f4c3189387795452863651417c11680e4a4cf8", "774eed712287b7e36af82ec50eebbcee8256b9aabad806ab88d730903d7aa807", [{0x0, 0x3, {0x2, 0x1}}, {0x3, 0x5, {0x0, 0x7}}, {0x1, 0xffff, {0x1, 0xf571}}, {0x6, 0xfc8f, {0x1, 0x6}}, {0x1, 0x800, {0x2, 0x2}}, {0xd, 0x400, {0x3, 0x2}}, {0xfffa, 0xa69d, {0x2, 0xd60}}, {0x200, 0x906a, {0x1, 0x9}}, {0x0, 0x7f, {0x1, 0xc}}, {0x0, 0x4, {0x1, 0xfbe}}, {0x2, 0x9, {0x1, 0x8}}, {0x5, 0x80, {0x2, 0xe}}, {0x8001, 0x8, {0x3, 0x1}}, {0xf175, 0xfff8, {0x0, 0x3}}, {0x2dbb, 0x7f, {0x2, 0x3}}, {0x0, 0x1, {0x2, 0xa}}, {0xf801, 0x4, {0x2, 0x7f}}, {0x0, 0x9, {0x1, 0x400}}, {0x81, 0x3, {0x0, 0xc236}}, {0x6, 0x4, {0x1, 0x6}}, {0x1, 0x100, {0x0, 0x68}}, {0x8, 0x3, {0x4, 0x141b21f8}}, {0x2, 0x100, {0x2, 0x5}}, {0x0, 0xffff, {0x3, 0x52d}}, {0x5e, 0x2, {0x0, 0xa}}, {0xfcbc, 0x0, {0x2}}, {0x4, 0x2}, {0x8, 0x101, {0x3, 0x4}}, {0x7571, 0x7f, {0x0, 0x7}}, {0x2, 0x74a0, {0x0, 0x9}}, {0x8, 0x7f, {0x2, 0x7e4}}, {0x5, 0x4401, {0x0, 0x74}}, {0x7, 0x8, {0x2, 0x4ed}}, {0xfff2, 0x6, {0x1, 0x2d}}, {0x4, 0x7ff, {0x0, 0x749}}, {0xfff2, 0x0, {0x2, 0x1}}, {0x8, 0x2, {0x0, 0xbc}}, {0xbc9, 0x0, {0x3, 0x6}}, {0x9, 0x0, {0x1, 0x3}}, {0x2, 0x0, {0x1, 0x1000}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x6, 0x6, 0x3, 0x9, 0xa, 'syz0\x00', "f6e6bf0833aa726ed75c82a67c78aaf7c441c958b0540b59631ecc19093416ae", "11028019719ad430e5f483c5074df1aa9f92a29d10512a99e4a841de00b789f9", [{0x8000, 0x3, {0x0, 0xa}}, {0x1, 0x0, {0x1, 0x1}}, {0x3, 0xb0, {0x1}}, {0x7, 0xf, {0x3, 0x6}}, {0xc8, 0xf400, {0x2}}, {0xff, 0x5, {0x0, 0x7}}, {0x3000, 0x6, {0x1, 0x5}}, {0x8, 0x400, {0x0, 0x1de3f292}}, {0x7, 0x3, {0x2, 0xb133}}, {0x2ac3, 0x4, {0x2, 0x1}}, {0x8, 0x100, {0x1, 0x3}}, {0xffff, 0xfff9, {0x1, 0x2}}, {0x7, 0x4, {0x3, 0x49}}, {0x28b8, 0xfff2, {0x3, 0x9}}, {0x1000, 0xe9, {0x3, 0x1}}, {0x3, 0x4, {0x2, 0xb6}}, {0x9, 0x3, {0x3, 0xfffffc01}}, {0x6, 0x3, {0x3, 0x7}}, {0x8940, 0x101, {0x1, 0x3}}, {0x0, 0x5, {0x0, 0x431d}}, {0x3, 0x9, {0x3, 0x3}}, {0xc, 0x5, {0x0, 0x3}}, {0x9, 0x100, {0x1, 0x7ff}}, {0x9, 0x0, {0x0, 0x6}}, {0x7, 0x7, {0x0, 0xf54}}, {0x40, 0x400, {0x3, 0x7}}, {0x7, 0x2000, {0x1}}, {0x5, 0x4, {0x3, 0x1}}, {0x0, 0x5, {0x0, 0x2}}, {0x7fff, 0x7, {0x1, 0x7fffffff}}, {0xfffe, 0x6, {0x3, 0x1}}, {0xa83, 0x1, {0x1, 0xa0000}}, {0xff, 0x1000, {0x2, 0x200}}, {0x62, 0x3, {0x2, 0x2}}, {0xa0, 0x8001, {0x3, 0x9}}, {0x9, 0x0, {0x3}}, {0x4, 0x79e, {0x1, 0xdc8}}, {0x3, 0x52c9, {0x3, 0xb}}, {0x2, 0xf33, {0x0, 0x9}}, {0xc2b, 0x1, {0x1, 0x80000000}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x7, 0x6, 0x88, 0x0, 0x27, 'syz1\x00', "28e2c64b2b6310f3e8264077026b0745250f0ef98923ffb0e4c1036364bf056b", "0dbff94b95366b14f4384d92fc24c8cc12517cf8eaa69225fd4386a4eaaacdfd", [{0xa4, 0xe7be, {0x2}}, {0x8001, 0xcf, {0x3, 0xf}}, {0xfffe, 0x4, {0x0, 0x2b7b}}, {0x3ff, 0x9, {0x0, 0x1}}, {0x3, 0x0, {0x3, 0x1}}, {0x3, 0x10, {0x0, 0x8}}, {0x6, 0x8, {0x1, 0x2}}, {0x2, 0x3, {0x3, 0xffff8001}}, {0x0, 0x4b, {0x2, 0x8}}, {0xfffa, 0x5, {0x2, 0x10000}}, {0xff96, 0xff, {0x1, 0x7}}, {0x0, 0xffff, {0x1, 0xb}}, {0x7, 0x0, {0x3, 0x3}}, {0x9, 0x36ca, {0x2, 0x7fff}}, {0x7, 0x4, {0x1, 0x5}}, {0x8000, 0x200, {0x0, 0x6}}, {0x2, 0x100, {0x0, 0x9}}, {0x129c, 0x3, {0x2, 0x2}}, {0xa, 0x0, {0x3, 0x5}}, {0x5, 0x0, {0x2, 0x8}}, {0x1000, 0x1000, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0xff}}, {0x8, 0xffaa, {0x1, 0xc}}, {0x3, 0x3, {0x2, 0x60000000}}, {0x1, 0x3, {0x1, 0x2}}, {0x7ff4, 0xd, {0x1, 0x8}}, {0x8, 0x6, {0x1}}, {0x7, 0xd, {0x2, 0x3}}, {0x3, 0x5, {0x0, 0x5}}, {0x80, 0x1ffc, {0x3, 0x2}}, {0xea, 0x5, {0x1, 0x4}}, {0x10, 0x2, {0x1, 0x1}}, {0x3a3, 0x1, {0x0, 0x7}}, {0x3, 0x8, {0x0, 0x3}}, {0x77, 0x6, {0x2, 0x100}}, {0xff, 0x54cf, {0x3, 0x2}}, {0x5, 0x9, {0x2, 0xd}}, {0x3, 0x2f19, {0x3, 0x2}}, {0x9, 0x12, {0x1, 0xb}}, {0x4b, 0x4, {0x2, 0x8001}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0xb4, 0x3, 0x7, 0x400, 0x11, 'syz1\x00', "fb9a5f230596120a31658bf487c5360e55db3c7dbe20b4ee152a054cc19932c6", "d842da37fe309769695d10e400cf57ead2d4e6135f1a8ff1a3d32706a5efd991", [{0x7, 0x1ff, {0x2, 0xfffffff9}}, {0x4, 0xf8, {0x1, 0x5}}, {0x3, 0x8, {0x0, 0x2}}, {0x2, 0x9}, {0x3, 0x8, {0x2, 0x7}}, {0xd, 0xe2, {0x2, 0xd}}, {0x40, 0x4, {0x1, 0x78fd}}, {0x9, 0x4}, {0x9, 0x9, {0x2, 0xc13b}}, {0x3, 0x5, {0x2, 0x3}}, {0xffff, 0x9, {0x2, 0x1ff}}, {0xcdf, 0x82f5, {0x1, 0xb4}}, {0x1000, 0x9, {0x1, 0x4}}, {0xc1, 0x8, {0x1, 0x7}}, {0x2, 0x7, {0x0, 0xa44}}, {0x4, 0xa9, {0x3, 0x9}}, {0x80, 0x3, {0x2, 0x2}}, {0x9, 0x8, {0x2, 0x4}}, {0xc, 0xfffe, {0x3, 0x2}}, {0x1ff, 0xbf, {0x2, 0x40}}, {0x58da, 0x9, {0x3, 0x6}}, {0x3, 0xfff, {0x0, 0xf0e}}, {0x3, 0x2, {0x2, 0x4}}, {0xff00, 0x3, {0x2, 0x9}}, {0xf122, 0x2, {0x1, 0x1400}}, {0xe, 0x9, {0x2, 0xbf46}}, {0xfff, 0x3730, {0x1, 0x80}}, {0x6, 0x3, {0x2, 0x557b}}, {0x5154, 0xa3, {0x0, 0x7}}, {0x5, 0x0, {0x0, 0x7}}, {0x8, 0x0, {0x0, 0x83}}, {0xaa, 0xe, {0x1, 0x80000001}}, {0x101, 0x3ff, {0x1, 0x4}}, {0x7, 0x4, {0x2, 0x1}}, {0xe2, 0x0, {0x2, 0x8}}, {0x3ff, 0x7, {0x3, 0x800}}, {0x6, 0x6, {0x3, 0x6}}, {0x362, 0x5, {0x0, 0xa28}}, {0x1e, 0x9, {0x0, 0x8}}, {0x5, 0x3, {0x2, 0x6}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x2000c015}, 0x88c0) syz_genetlink_get_family_id$nbd(&(0x7f0000001580), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x1f) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x30, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x900280b}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x20, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000001a00)={r6, &(0x7f0000001900)='&,[}^!{\\(\x00', 0x1, &(0x7f0000001940)={@align=0x4bdc, {0xbefe, 0x1, 0xfffffff8, 0x6}}, 0x1ff, &(0x7f0000001980), &(0x7f00000019c0)=0xef04}) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000001a40)) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x78, 0x14, 0x8, 0x70bd28, 0x25dfdbfe, {0x6, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x61, 0x1, "690919ad1c9cd519ba61f55a7fb557e14521126c2aadf61923a0c8640120e5eb68fdc078b73f672922babc5d69b60bb3cbdd27cf86d239cdd4055375ca9a6d31191e2c648f3e1fe5a7440d76a637c2876e003c2242dbf6388b781e63a6"}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r10, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x50, 0x1410, 0x300, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r11, 0x8030942b, &(0x7f0000001d00)={0xff, {0x4, 0x9, 0x5, 0x7, 0xfffffffffffeffff}}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f0000002000)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001d80)={0x220, 0xd, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1dc, 0x3, 0x0, 0x1, [{0x1d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8c, 0x1, "5b36eb8b78e224599fc5d18fc892bf53f4a77638d3b66e4195373ce917de810d60c19b234634a1da9d6c607aed74dec1240e74f24341ff6f1c8c6fb0ba12fdec9de820b54480c7802cff150a803d9b70fb43f72fc8f1faa744f67bb4d9748314d216f647e22325165aa1b8d53b2ce40cf8c952895ca0bdbd07ab0b88ad3c1b8726e7f3615026aeae"}, @NFTA_DATA_VALUE={0xba, 0x1, "b8882b4813bd8f05d7f1dfa3509a1e510ddec32403cce84455f51b6913fec26925169ceb867cf2f8860767a632296f7c15e90d2925855681f9e31a0e1ec65375286191826098e1ea565465acce1ae988ab3a4c1f5c7728a414232b8238250543acc113593b8de24c551cf6217eb51c3562759ca870cb1a071501ec1ceb4da0dcc511a941215488385adb9806eef44a85ef2909ff5a4215fa85f414ce0410ee6a544ca8cdf3b54273993018bc5107befaea85f8e695e2"}, @NFTA_DATA_VALUE={0x17, 0x1, "c5fa28d875a4856c5a44e4f95ff3253734f625"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x220}, 0x1, 0x0, 0x0, 0x8001}, 0x34000080) getsockopt$nfc_llcp(r9, 0x118, 0x3, &(0x7f0000002040)=""/132, 0x84) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x200000c0) 0s ago: executing program 1 (id=5835): socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) close(0x3) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001ec0)={&(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x42b}], 0x1, &(0x7f0000001ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xb4, 0x0, 0x7}]}}}], 0x38}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x43, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r3) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r4, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xac\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x150}, 0x24040814) kernel console output (not intermixed with test programs): process `syz.0.3818'. [ 330.841093][T19993] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3822'. [ 330.887681][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 330.896008][ C0] lec:lec_tx_timeout: lec0 [ 330.900841][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 331.011265][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3826'. [ 331.034975][T20011] netlink: 'syz.3.3830': attribute type 10 has an invalid length. [ 331.065074][T20014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.189424][T20024] netlink: 'syz.2.3833': attribute type 4 has an invalid length. [ 331.262591][T20028] syzkaller0: entered promiscuous mode [ 331.268423][T20028] syzkaller0: entered allmulticast mode [ 331.412488][T20043] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3837'. [ 331.428001][T20043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3837'. [ 331.891812][T20076] syzkaller1: entered promiscuous mode [ 331.921309][T20076] syzkaller1: entered allmulticast mode [ 332.046820][T20087] x_tables: unsorted entry at hook 3 [ 332.099877][T20087] block nbd0: reconnected socket [ 332.107900][ T51] block nbd0: Receive control failed (result -107) [ 332.191220][T20102] netlink: 'syz.1.3856': attribute type 1 has an invalid length. [ 332.192186][T20099] netlink: 'syz.3.3854': attribute type 1 has an invalid length. [ 332.483755][T20111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.498376][T20111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.720161][ T136] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.748597][ T136] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.786487][ T136] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.804668][ T136] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.831806][T20149] macsec1: entered promiscuous mode [ 332.875880][T20149] tipc: Started in network mode [ 332.882440][T20149] tipc: Node identity c6f73322a59b, cluster identity 4711 [ 332.891242][T20149] tipc: Enabled bearer , priority 0 [ 332.899523][T20149] syzkaller0: entered promiscuous mode [ 332.905530][T20149] syzkaller0: entered allmulticast mode [ 332.958689][T20149] tipc: Resetting bearer [ 332.966699][T20145] tipc: Resetting bearer [ 332.990930][T20145] tipc: Disabling bearer [ 333.131721][T20167] SET target dimension over the limit! [ 333.306992][ T6060] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.316845][ T6060] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.337947][ T6060] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.346695][ T6060] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.378880][T20178] netlink: 'syz.4.3879': attribute type 2 has an invalid length. [ 333.408980][T20181] net_ratelimit: 54 callbacks suppressed [ 333.408999][T20181] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 333.524169][T20193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.888962][T20215] veth0: entered promiscuous mode [ 334.144977][T20235] sctp: [Deprecated]: syz.1.3898 (pid 20235) Use of int in max_burst socket option. [ 334.144977][T20235] Use struct sctp_assoc_value instead [ 334.275581][T20252] xt_hashlimit: invalid rate [ 334.391394][T20266] netlink: 'syz.4.3907': attribute type 13 has an invalid length. [ 334.405626][T20266] gretap0: refused to change device tx_queue_len [ 334.419910][T20266] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 334.603349][T20278] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 334.624260][T20279] IPv6: NLM_F_CREATE should be specified when creating new route [ 334.744581][T20288] netlink: 'syz.1.3915': attribute type 3 has an invalid length. [ 334.892688][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.928885][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.941624][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.953848][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.021654][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.047005][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.061401][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.094144][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.138998][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.179058][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.205974][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.233825][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.273264][T20302] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 335.295230][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.317772][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.343403][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.355738][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.394173][T20333] __nla_validate_parse: 22 callbacks suppressed [ 335.394190][T20333] netlink: 304 bytes leftover after parsing attributes in process `syz.1.3926'. [ 335.395963][T20302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.526795][T20357] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3932'. [ 335.599991][T20361] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3934'. [ 335.616846][T20361] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3934'. [ 335.636896][T20367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3936'. [ 335.704784][T20371] tipc: Started in network mode [ 335.712133][T20371] tipc: Node identity c6948a0f4a37, cluster identity 4711 [ 335.720251][T20371] tipc: Enabled bearer , priority 0 [ 335.789382][T20371] syzkaller0: entered promiscuous mode [ 335.794963][T20371] syzkaller0: entered allmulticast mode [ 335.808506][T20371] tipc: Resetting bearer [ 335.820471][T20376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3940'. [ 335.909025][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 335.917048][ C0] lec:lec_tx_timeout: lec0 [ 335.921634][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 337.189841][T20380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3940'. [ 337.248289][ T58] tipc: Resetting bearer [ 337.266994][T20370] tipc: Resetting bearer [ 337.366509][T20403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3947'. [ 338.518253][T20370] tipc: Disabling bearer [ 338.526799][T11416] tipc: Node number set to 2359527951 [ 338.541849][T20403] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 338.615159][T20412] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3948'. [ 338.633950][T20412] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3948'. [ 339.031109][T20449] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 339.044133][T20449] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 339.063549][T20449] gretap2: entered promiscuous mode [ 339.069160][T20449] gretap2: entered allmulticast mode [ 339.360662][T20473] wireguard0: entered promiscuous mode [ 339.366170][T20473] wireguard0: entered allmulticast mode [ 339.375673][T20473] team0: Device wireguard0 is of different type [ 339.443864][T20478] wireguard0: entered promiscuous mode [ 339.477788][T20478] wireguard0: entered allmulticast mode [ 339.509190][T20478] team0: Device wireguard0 is of different type [ 339.579636][T20488] syzkaller1: entered promiscuous mode [ 339.587091][T20488] syzkaller1: entered allmulticast mode [ 339.850241][T20504] syzkaller0: entered promiscuous mode [ 339.868854][T20504] syzkaller0: entered allmulticast mode [ 340.074571][T20517] bridge0: port 3(gretap0) entered blocking state [ 340.081309][T20517] bridge0: port 3(gretap0) entered disabled state [ 340.093595][T20517] gretap0: entered promiscuous mode [ 340.114919][T20519] sctp: [Deprecated]: syz.0.3984 (pid 20519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.114919][T20519] Use struct sctp_sack_info instead [ 340.526876][T20544] netlink: 'syz.0.3990': attribute type 3 has an invalid length. [ 340.937738][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 340.940068][T20563] syz_tun: entered allmulticast mode [ 340.945795][ C0] lec:lec_tx_timeout: lec0 [ 340.947327][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 340.974016][T20563] pimreg: entered allmulticast mode [ 341.005047][T20562] syz_tun: left allmulticast mode [ 341.035021][T20568] tipc: Enabling of bearer rejected, failed to enable media [ 341.050663][T20568] netlink: 'syz.2.3995': attribute type 2 has an invalid length. [ 341.190143][T20581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.263829][T20585] __nla_validate_parse: 8 callbacks suppressed [ 341.263847][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4005'. [ 341.299431][T20585] netlink: 'syz.2.4005': attribute type 1 has an invalid length. [ 341.325095][T20585] netlink: 'syz.2.4005': attribute type 2 has an invalid length. [ 341.503538][T20595] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 341.531140][T20595] bond3 (unregistering): Released all slaves [ 341.639888][T20607] bond2: Unable to set down delay as MII monitoring is disabled [ 341.662137][T20607] bond2 (unregistering): Released all slaves [ 341.994159][T20639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4020'. [ 342.058735][T20641] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 342.061746][T20644] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4022'. [ 342.067569][T16043] IPVS: starting estimator thread 0... [ 342.079720][T20644] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.089391][T20644] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.103756][T20644] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4022'. [ 342.113304][T20644] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.120496][T20644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.128019][T20644] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.135157][T20644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.146890][T20644] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4022'. [ 342.156685][T20644] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.163876][T20644] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.187509][T20643] IPVS: using max 33 ests per chain, 79200 per kthread [ 342.206916][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4023'. [ 342.235805][T20654] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4024'. [ 342.250030][T20654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.418990][T20665] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4029'. [ 342.901843][T20702] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4039'. [ 342.926760][T20706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'. [ 345.967223][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 345.975227][ C0] lec:lec_tx_timeout: lec0 [ 345.980264][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 351.767210][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 351.775248][ C0] lec:lec_tx_timeout: lec0 [ 351.780573][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 356.807243][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 356.815362][ C0] lec:lec_tx_timeout: lec0 [ 356.820153][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 361.827523][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 361.835525][ C0] lec:lec_tx_timeout: lec0 [ 361.840232][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 364.087394][ T29] page_pool_release_retry() stalled pool shutdown: id 149, 1 inflight 60 sec [ 366.847213][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 366.855230][ C0] lec:lec_tx_timeout: lec0 [ 366.859994][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 371.867538][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 371.875537][ C0] lec:lec_tx_timeout: lec0 [ 371.880136][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 376.887322][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 376.895361][ C0] lec:lec_tx_timeout: lec0 [ 376.900016][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 381.907472][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 381.915471][ C0] lec:lec_tx_timeout: lec0 [ 381.920261][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 386.927554][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 386.935551][ C0] lec:lec_tx_timeout: lec0 [ 386.940151][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 391.947166][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 391.955360][ C0] lec:lec_tx_timeout: lec0 [ 391.959965][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 394.000748][T10960] bond9 (unregistering): (slave gretap1): Releasing backup interface [ 394.034354][T10960] bridge0 (unregistering): left allmulticast mode [ 394.294867][T10960] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 394.303647][T10960] bond0 (unregistering): Released all slaves [ 394.313462][T10960] bond1 (unregistering): Released all slaves [ 394.326114][T10960] bond2 (unregistering): (slave batadv1): Releasing active interface [ 394.336805][T10960] bond2 (unregistering): Released all slaves [ 394.350991][T10960] bond3 (unregistering): Released all slaves [ 394.363135][T10960] bond4 (unregistering): Released all slaves [ 394.378020][T10960] bond5 (unregistering): Released all slaves [ 394.392227][T10960] bond6 (unregistering): Released all slaves [ 394.404360][T10960] bond7 (unregistering): Released all slaves [ 394.420961][T10960] bond8 (unregistering): Released all slaves [ 394.435943][T10960] bond9 (unregistering): (slave bond10): Releasing backup interface [ 394.444705][T10960] bond9 (unregistering): Released all slaves [ 394.459938][T10960] bond10 (unregistering): Released all slaves [ 394.476226][T10960] bond11 (unregistering): Released all slaves [ 394.489897][T10960] bond12 (unregistering): Released all slaves [ 394.584746][T10960] 9: left promiscuous mode [ 394.649680][T10960] : left promiscuous mode [ 394.715289][T10960] tipc: Left network mode [ 395.075258][T10960] hsr_slave_0: left promiscuous mode [ 395.097411][T10960] hsr_slave_1: left promiscuous mode [ 395.107735][T10960] veth1_macvtap: left promiscuous mode [ 395.113340][T10960] veth0_macvtap: left promiscuous mode [ 395.159899][T10960] pimreg3 (unregistering): left allmulticast mode [ 395.727745][T10960] IPVS: stop unused estimator thread 0... [ 396.967192][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 396.975360][ C0] lec:lec_tx_timeout: lec0 [ 396.979955][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 402.171261][T20724] __nla_validate_parse: 1 callbacks suppressed [ 402.171279][T20724] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4046'. [ 402.228804][T20726] syz_tun: entered promiscuous mode [ 402.234254][T20726] macvtap1: entered promiscuous mode [ 402.269531][T20726] syz_tun: left promiscuous mode [ 402.299227][T20736] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4047'. [ 402.300809][T20734] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4047'. [ 402.362544][T20736] bond1 (unregistering): Released all slaves [ 402.472686][T20734] bond1 (unregistering): Released all slaves [ 402.513014][T20754] netlink: 'syz.1.4052': attribute type 4 has an invalid length. [ 402.738774][T20769] syzkaller1: entered promiscuous mode [ 402.744554][T20769] syzkaller1: entered allmulticast mode [ 402.765061][T20772] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 402.774009][T20772] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 402.807143][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 402.815204][ C0] lec:lec_tx_timeout: lec0 [ 402.819953][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 402.869409][T20783] erspan0: entered promiscuous mode [ 402.878189][T20783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4060'. [ 402.878280][T20781] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4059'. [ 402.902315][T20784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4056'. [ 402.965863][T20788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4061'. [ 402.991454][T20788] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 403.053229][T20797] netlink: 'syz.0.4063': attribute type 11 has an invalid length. [ 403.070193][T20797] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.4063'. [ 403.161222][T20805] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4064'. [ 403.189814][T20808] sctp: [Deprecated]: syz.0.4067 (pid 20808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.189814][T20808] Use struct sctp_sack_info instead [ 403.216037][T20811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4064'. [ 403.285369][T20794] delete_channel: no stack [ 404.144548][T20878] siw: device registration error -23 [ 404.165447][T20874] geneve2: entered promiscuous mode [ 404.253797][T20881] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.294551][T20881] bond3: (slave bond_slave_1): Device is not our slave [ 404.303946][T20881] bond3: option active_slave: invalid value (bond_slave_1) [ 404.313109][T20881] bond3 (unregistering): Released all slaves [ 404.358699][T20885] netlink: 'syz.0.4088': attribute type 1 has an invalid length. [ 404.415006][T20885] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.530902][T20885] bond3: (slave veth5): Enslaving as an active interface with a down link [ 404.561884][T20889] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 404.578868][T20889] bond3: (slave batadv1): making interface the new active one [ 404.608215][T20889] batadv1: entered promiscuous mode [ 404.613680][T20889] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 404.719515][T20910] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 404.766761][T20912] tipc: Started in network mode [ 404.773230][T20912] tipc: Node identity 5a951f7fe1ca, cluster identity 4711 [ 404.797774][T20912] tipc: Enabled bearer , priority 0 [ 404.853184][T20917] netlink: 'syz.4.4100': attribute type 1 has an invalid length. [ 404.866636][T20917] netlink: 'syz.4.4100': attribute type 1 has an invalid length. [ 405.612451][T20978] netlink: 'syz.0.4121': attribute type 18 has an invalid length. [ 405.837716][ T58] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.857995][ T58] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.885428][ T58] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.900364][ T58] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.929457][ T24] tipc: Node number set to 3143573375 [ 406.803949][T21056] netlink: 'syz.3.4144': attribute type 1 has an invalid length. [ 406.884516][T21061] Cannot find del_set index 0 as target [ 407.025296][T21074] netlink: 'syz.3.4149': attribute type 32 has an invalid length. [ 407.143151][T21084] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 407.195790][T21088] __nla_validate_parse: 20 callbacks suppressed [ 407.195808][T21088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4153'. [ 407.445366][T21107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4158'. [ 407.456269][T21107] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4158'. [ 407.525162][T21113] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4158'. [ 407.600134][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4159'. [ 407.827605][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 407.835696][ C0] lec:lec_tx_timeout: lec0 [ 407.841965][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 407.880073][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4165'. [ 407.934880][T21138] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4166'. [ 407.960851][T21138] netlink: 'syz.3.4166': attribute type 9 has an invalid length. [ 408.015257][T21141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4167'. [ 408.039808][T21141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4167'. [ 408.182662][T21150] netdevsim netdevsim3: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 408.208155][T21149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4170'. [ 408.245611][T21155] pim6reg527: entered allmulticast mode [ 408.282225][T21157] bond2: Removing last ns target with arp_interval on [ 408.299128][T21151] syzkaller0: entered promiscuous mode [ 408.307703][T21151] syzkaller0: entered allmulticast mode [ 408.316101][T21158] tipc: Enabled bearer , priority 0 [ 408.493560][T21178] netlink: 'syz.3.4176': attribute type 1 has an invalid length. [ 408.999309][T21217] netlink: 'syz.4.4186': attribute type 1 has an invalid length. [ 409.014060][T21217] netlink: 'syz.4.4186': attribute type 1 has an invalid length. [ 409.043789][T21222] syzkaller0: entered promiscuous mode [ 409.049430][T21222] syzkaller0: entered allmulticast mode [ 409.371720][T21250] IPv6: NLM_F_CREATE should be specified when creating new route [ 409.514195][T21262] netlink: 'syz.3.4198': attribute type 1 has an invalid length. [ 409.568128][T21266] sit1: entered promiscuous mode [ 409.573404][T21266] sit1: entered allmulticast mode [ 409.621713][T21268] bond3: (slave bridge5): making interface the new active one [ 409.630077][T21268] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 409.687376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.753058][T21278] bond2: (slave bond_slave_1): Device is not our slave [ 409.763265][T21278] bond2: option active_slave: invalid value (bond_slave_1) [ 409.779845][T21278] bond2 (unregistering): Released all slaves [ 409.823430][T21287] rdma_op ffff8880296141f0 conn xmit_rdma 0000000000000000 [ 409.868817][T21289] syzkaller0: entered promiscuous mode [ 409.878194][T21289] syzkaller0: entered allmulticast mode [ 409.898484][T21289] tipc: Started in network mode [ 409.903379][T21289] tipc: Node identity 06ffc0501b62, cluster identity 4711 [ 409.922350][T21289] tipc: Enabled bearer , priority 0 [ 409.948581][T21288] tipc: Resetting bearer [ 409.988034][T21288] tipc: Disabling bearer [ 410.024687][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.415006][T21330] netem: change failed [ 411.047576][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.125765][T21382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.385444][T21402] syzkaller0: entered promiscuous mode [ 411.390993][T21402] syzkaller0: entered allmulticast mode [ 412.089920][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.250566][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.857642][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 412.865726][ C0] lec:lec_tx_timeout: lec0 [ 412.870615][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 412.913472][T21419] tipc: Enabling of bearer rejected, already enabled [ 412.922090][T21420] tap0: tun_chr_ioctl cmd 1074025676 [ 412.934674][T21420] tap0: owner set to 0 [ 412.958251][T21430] tipc: Resetting bearer [ 413.052644][T21439] __nla_validate_parse: 17 callbacks suppressed [ 413.052662][T21439] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4251'. [ 413.136605][T21444] netlink: 'syz.1.4255': attribute type 1 has an invalid length. [ 413.158414][T21446] tipc: Enabled bearer , priority 0 [ 413.166414][T21446] +: renamed from syzkaller0 [ 413.172009][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.181526][T21446] tipc: Disabling bearer [ 413.183574][T21452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.196822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.275919][T21444] bond2: entered promiscuous mode [ 413.288080][T21444] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.316863][T21454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4256'. [ 413.328023][T21461] netlink: 'syz.2.4256': attribute type 10 has an invalid length. [ 413.336843][T21454] netlink: 'syz.2.4256': attribute type 10 has an invalid length. [ 413.345759][T21461] : (slave wlan1): Opening slave failed [ 413.366175][T21464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.373899][T21464] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 413.384613][T21464] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 413.396802][T21464] bond2: (slave vti0): making interface the new active one [ 413.424594][T21464] vti0: entered promiscuous mode [ 413.435044][T21464] bond2: (slave vti0): Enslaving as an active interface with an up link [ 413.445531][T21454] : (slave wlan1): Opening slave failed [ 413.706182][T21483] vlan4: entered promiscuous mode [ 413.735762][T21488] netlink: 'syz.2.4268': attribute type 4 has an invalid length. [ 413.955128][T21504] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 413.974491][T21504] bond4: (slave lo): Enslaving as an active interface with an up link [ 413.998161][T21504] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 414.062028][T21505] bridge0: port 3(ipvlan2) entered blocking state [ 414.083951][T21505] bridge0: port 3(ipvlan2) entered disabled state [ 414.092509][T21505] ipvlan2: entered allmulticast mode [ 414.100710][T21505] ipvlan2: left allmulticast mode [ 414.265276][T21521] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4278'. [ 414.274524][T21521] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.281702][T21521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.289247][T21521] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.296388][T21521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.747329][T21543] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4287'. [ 415.046720][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.078234][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.093207][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 415.106888][ T12] bond0 (unregistering): Released all slaves [ 415.123304][ T12] bond1 (unregistering): Released all slaves [ 415.406126][ T12] tipc: Left network mode [ 415.427778][T21563] syzkaller1: entered promiscuous mode [ 415.471461][T21563] syzkaller1: entered allmulticast mode [ 415.588003][ T136] batadv1: left promiscuous mode [ 415.728687][T21588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4297'. [ 415.850000][T21588] bond4: Invalid ad_actor_system MAC address. [ 415.947694][T21588] bond4: option ad_actor_system: invalid value (1) [ 416.105014][T21588] bond4 (unregistering): Released all slaves [ 416.143509][ T12] IPVS: stopping backup sync thread 12397 ... [ 416.223466][T21602] netlink: 'syz.1.4303': attribute type 12 has an invalid length. [ 416.822376][T21616] tipc: Enabled bearer , priority 0 [ 416.847869][T21630] syzkaller0: entered promiscuous mode [ 416.853561][T21630] syzkaller0: entered allmulticast mode [ 416.888477][T21640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4311'. [ 417.033174][T21642] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 417.037923][T21616] tipc: Resetting bearer [ 417.102748][T21615] tipc: Resetting bearer [ 417.186812][T21615] tipc: Disabling bearer [ 417.500281][T21667] syzkaller0: entered promiscuous mode [ 417.510696][T21667] syzkaller0: entered allmulticast mode [ 417.551345][T11416] IPVS: starting estimator thread 0... [ 417.647325][T21673] IPVS: using max 28 ests per chain, 67200 per kthread [ 417.798618][T21681] netlink: 'syz.1.4321': attribute type 1 has an invalid length. [ 417.814098][T21682] netlink: 'syz.3.4320': attribute type 1 has an invalid length. [ 417.877821][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 417.885870][ C0] lec:lec_tx_timeout: lec0 [ 417.891904][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 417.943222][T21681] bond3: entered promiscuous mode [ 417.987828][T21681] 8021q: adding VLAN 0 to HW filter on device bond3 [ 418.057839][ T136] tipc: Subscription rejected, illegal request [ 418.181477][T21682] 8021q: adding VLAN 0 to HW filter on device bond4 [ 418.212502][T21693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4323'. [ 418.223498][T21693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4323'. [ 418.233842][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'. [ 418.244455][T21702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4325'. [ 418.265010][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4323'. [ 418.294850][T21705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4325'. [ 418.331813][ T12] veth1_macvtap: left promiscuous mode [ 418.338794][ T12] veth0_macvtap: left promiscuous mode [ 418.344609][ T12] º: left promiscuous mode [ 418.350731][ T12] veth0_vlan: left promiscuous mode [ 418.480101][T21714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.554681][T21715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.565989][ T12] team0 (unregistering): Port device team_slave_1 removed [ 418.580410][ T12] team0 (unregistering): Port device team_slave_0 removed [ 418.618927][T21714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.814017][T21721] netlink: 'syz.1.4330': attribute type 1 has an invalid length. [ 418.892510][T21721] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 418.905861][T21721] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 418.917001][T21721] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 418.954637][T21726] vcan1: entered promiscuous mode [ 418.959823][T21726] vcan1: entered allmulticast mode [ 419.032152][T21730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4334'. [ 419.072567][ T12] IPVS: stop unused estimator thread 0... [ 419.159697][T21734] netlink: 'syz.1.4335': attribute type 1 has an invalid length. [ 419.406040][T21760] netlink: 'syz.3.4344': attribute type 1 has an invalid length. [ 419.439199][T21760] 8021q: adding VLAN 0 to HW filter on device bond5 [ 419.472650][T21760] bond5: (slave gretap1): making interface the new active one [ 419.482644][T21760] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 419.529402][ T58] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 419.910008][T21795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4355'. [ 419.965602][T21799] tipc: New replicast peer: 255.255.255.255 [ 419.972827][T21799] tipc: Enabled bearer , priority 10 [ 420.060411][T21806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4359'. [ 420.170326][T21815] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4363'. [ 420.238158][T21815] netlink: 'syz.1.4363': attribute type 1 has an invalid length. [ 420.279496][T21815] 8021q: adding VLAN 0 to HW filter on device bond6 [ 420.368290][T21823] bond6: (slave veth3): Enslaving as an active interface with a down link [ 420.401172][T21815] bond6: (slave veth0_to_bond): making interface the new active one [ 420.451489][T21815] veth0_to_bond: entered promiscuous mode [ 420.472322][T21815] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 420.528764][T21823] bond6: (slave veth5): Enslaving as an active interface with a down link [ 420.537989][T21823] netlink: 'syz.1.4363': attribute type 1 has an invalid length. [ 420.546885][T21823] netlink: 'syz.1.4363': attribute type 2 has an invalid length. [ 420.838377][T21844] bond6: option all_slaves_active: invalid value (222) [ 420.853766][T21844] bond6 (unregistering): Released all slaves [ 421.012297][T21853] pim6reg1: entered promiscuous mode [ 421.018988][T21853] pim6reg1: entered allmulticast mode [ 421.152208][T21864] netlink: 'syz.2.4375': attribute type 8 has an invalid length. [ 421.383634][T21879] tipc: Enabling of bearer rejected, already enabled [ 421.501256][T21892] unsupported nla_type 33542 [ 421.720078][T21907] net_ratelimit: 1 callbacks suppressed [ 421.720095][T21907] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 421.746676][T21881] netlink: 'syz.4.4381': attribute type 16 has an invalid length. [ 421.756271][T21911] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 421.768384][T21881] netlink: 'syz.4.4381': attribute type 17 has an invalid length. [ 421.784015][T21881] erspan0: left promiscuous mode [ 421.812839][T21881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.852912][T21918] syzkaller0: entered promiscuous mode [ 421.858994][T21918] syzkaller0: entered allmulticast mode [ 421.869161][T21918] tipc: Enabled bearer , priority 0 [ 421.887408][T21917] tipc: Resetting bearer [ 421.951764][T21917] tipc: Disabling bearer [ 421.965129][T21920] sctp: [Deprecated]: syz.3.4391 (pid 21920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.965129][T21920] Use struct sctp_sack_info instead [ 422.035596][T21924] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 422.213041][T21930] tipc: Enabled bearer , priority 0 [ 422.233325][T21934] syzkaller0: entered promiscuous mode [ 422.257802][T21934] syzkaller0: entered allmulticast mode [ 422.268865][T21942] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 422.283630][T21930] tipc: Resetting bearer [ 422.305700][T21927] tipc: Resetting bearer [ 422.323019][T21927] tipc: Disabling bearer [ 422.349566][T21944] siw: device registration error -23 [ 422.381352][T21942] netlink: 'syz.1.4396': attribute type 3 has an invalid length. [ 422.738750][T21946] netem: change failed [ 422.908118][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 422.916171][ C0] lec:lec_tx_timeout: lec0 [ 422.919653][T21964] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 422.921576][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 423.143319][T21985] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 423.758740][T10960] nci: nci_ntf_packet: unknown ntf opcode 0x503 [ 423.773397][T22024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.795148][T22039] erspan0: entered promiscuous mode [ 423.825617][T22039] __nla_validate_parse: 15 callbacks suppressed [ 423.825639][T22039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4427'. [ 423.874874][T22017] sctp: [Deprecated]: syz.1.4422 (pid 22017) Use of int in maxseg socket option. [ 423.874874][T22017] Use struct sctp_assoc_value instead [ 424.149891][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4434'. [ 424.304365][T22068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4435'. [ 424.566851][T22088] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.590482][T22088] validate_nla: 3 callbacks suppressed [ 424.590498][T22088] netlink: 'syz.1.4445': attribute type 1 has an invalid length. [ 424.797388][T22097] tipc: Enabled bearer , priority 0 [ 424.842639][T22091] syzkaller0: entered promiscuous mode [ 424.848200][T22091] syzkaller0: entered allmulticast mode [ 424.879822][T22085] tipc: Resetting bearer [ 424.936893][T22085] tipc: Disabling bearer [ 425.018483][T22072] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4440'. [ 425.070809][T22118] tap0: tun_chr_ioctl cmd 1074025676 [ 425.076232][T22118] tap0: owner set to 0 [ 425.179398][T22122] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4453'. [ 425.218304][T22125] netlink: 'syz.4.4453': attribute type 4 has an invalid length. [ 425.236296][T22125] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4453'. [ 425.256347][T22122] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.263707][T22122] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.298555][T22125] `: renamed from bond0 (while UP) [ 425.350037][T22132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4455'. [ 425.398857][T22128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.413826][T22143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4457'. [ 425.443555][T22144] veth0_to_batadv: entered promiscuous mode [ 425.488207][T22144] veth0_to_batadv: entered allmulticast mode [ 425.562505][T22154] FAULT_INJECTION: forcing a failure. [ 425.562505][T22154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.589335][T22155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4460'. [ 425.603226][T22154] CPU: 1 UID: 0 PID: 22154 Comm: syz.1.4461 Not tainted syzkaller #0 PREEMPT(full) [ 425.603249][T22154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.603267][T22154] Call Trace: [ 425.603273][T22154] [ 425.603281][T22154] dump_stack_lvl+0xe8/0x150 [ 425.603316][T22154] should_fail_ex+0x412/0x560 [ 425.603340][T22154] _copy_from_user+0x2d/0xb0 [ 425.603365][T22154] ___sys_sendmsg+0x1c6/0x360 [ 425.603392][T22154] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.603448][T22154] ? __fget_files+0x2a/0x420 [ 425.603470][T22154] ? __fget_files+0x3a0/0x420 [ 425.603501][T22154] __x64_sys_sendmsg+0x1bd/0x2a0 [ 425.603528][T22154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.603559][T22154] ? __pfx_ksys_write+0x10/0x10 [ 425.603587][T22154] do_syscall_64+0x14d/0xf80 [ 425.603610][T22154] ? trace_irq_disable+0x3b/0x150 [ 425.603632][T22154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.603648][T22154] ? clear_bhb_loop+0x40/0x90 [ 425.603668][T22154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.603689][T22154] RIP: 0033:0x7f8a79b9c629 [ 425.603706][T22154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.603720][T22154] RSP: 002b:00007f8a7aa08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.603739][T22154] RAX: ffffffffffffffda RBX: 00007f8a79e15fa0 RCX: 00007f8a79b9c629 [ 425.603752][T22154] RDX: 0000000000044000 RSI: 0000200000000000 RDI: 0000000000000003 [ 425.603762][T22154] RBP: 00007f8a7aa08090 R08: 0000000000000000 R09: 0000000000000000 [ 425.603772][T22154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.603782][T22154] R13: 00007f8a79e16038 R14: 00007f8a79e15fa0 R15: 00007ffcd3237808 [ 425.603809][T22154] [ 425.847040][T22160] syzkaller0: entered promiscuous mode [ 425.860736][T22160] syzkaller0: entered allmulticast mode [ 425.902808][T22169] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4466'. [ 426.035796][T22175] netlink: 'syz.1.4465': attribute type 1 has an invalid length. [ 426.118416][T22158] tipc: Started in network mode [ 426.127137][T22158] tipc: Node identity fea20a03cff6, cluster identity 4711 [ 426.149481][T22158] tipc: Enabled bearer , priority 0 [ 426.161831][T22166] syzkaller0: entered promiscuous mode [ 426.173657][T22166] syzkaller0: entered allmulticast mode [ 426.224348][T22183] bond7: (slave bridge4): making interface the new active one [ 426.258419][T22183] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 426.279046][T22157] tipc: Resetting bearer [ 426.333581][T22157] tipc: Disabling bearer [ 427.026939][T22236] tipc: Enabled bearer , priority 0 [ 427.113166][T22240] syzkaller0: entered promiscuous mode [ 427.120768][T22240] syzkaller0: entered allmulticast mode [ 427.143102][T22234] tipc: Resetting bearer [ 427.198924][T22234] tipc: Disabling bearer [ 427.229390][T22254] nbd2: detected capacity change from 0 to 63 [ 427.274028][T22262] block nbd2: NBD_DISCONNECT [ 427.289881][T22262] block nbd2: Disconnected due to user request. [ 427.312736][T22262] block nbd2: shutting down sockets [ 427.341817][ C1] blk_print_req_error: 138 callbacks suppressed [ 427.341834][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.357765][ C1] buffer_io_error: 138 callbacks suppressed [ 427.357784][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 427.371583][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.381097][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 427.388926][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.398436][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 427.406236][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.415779][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 427.423658][T22005] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.448503][T22005] Buffer I/O error on dev nbd2, logical block 0, async page read [ 427.478885][T22005] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.509414][T22005] Buffer I/O error on dev nbd2, logical block 1, async page read [ 427.539307][T22005] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.560353][T22285] veth0: entered promiscuous mode [ 427.565901][T22285] veth0: left promiscuous mode [ 427.622972][T22005] Buffer I/O error on dev nbd2, logical block 2, async page read [ 427.660679][T22005] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.685681][T22295] netlink: 'syz.0.4497': attribute type 1 has an invalid length. [ 427.701862][T22005] Buffer I/O error on dev nbd2, logical block 3, async page read [ 427.728043][T22295] netlink: 'syz.0.4497': attribute type 4 has an invalid length. [ 427.744751][T22005] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.784867][T22005] Buffer I/O error on dev nbd2, logical block 0, async page read [ 427.810565][T22005] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 427.852431][T22005] Buffer I/O error on dev nbd2, logical block 1, async page read [ 427.871988][T22005] ldm_validate_partition_table(): Disk read failed. [ 427.885530][T22005] Dev nbd2: unable to read RDB block 0 [ 427.899472][T22005] nbd2: unable to read partition table [ 427.937612][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 427.945660][ C0] lec:lec_tx_timeout: lec0 [ 427.951307][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 427.966340][T22005] ldm_validate_partition_table(): Disk read failed. [ 427.993748][T22005] Dev nbd2: unable to read RDB block 0 [ 428.021888][T22005] nbd2: unable to read partition table [ 428.120900][T22317] tipc: Enabled bearer , priority 0 [ 428.161139][T22318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.271385][T22310] syzkaller0: entered promiscuous mode [ 428.277042][T22310] syzkaller0: entered allmulticast mode [ 428.337523][T22306] tipc: Resetting bearer [ 428.405854][T22306] tipc: Disabling bearer [ 428.618857][T22344] netlink: 'syz.3.4508': attribute type 4 has an invalid length. [ 428.811933][T22364] netlink: 'syz.4.4515': attribute type 1 has an invalid length. [ 428.862676][T22364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.871943][T22368] tipc: Enabling of bearer rejected, already enabled [ 428.914628][T22372] bond0: (slave veth0_to_bond): making interface the new active one [ 428.929142][T22372] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 428.946078][T22380] __nla_validate_parse: 4 callbacks suppressed [ 428.946093][T22380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4519'. [ 428.966104][T22380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4519'. [ 428.982344][T22380] gretap2: entered promiscuous mode [ 428.987905][T22380] gretap2: entered allmulticast mode [ 429.059245][T22364] bond0: (slave veth5): Enslaving as an active interface with a down link [ 429.094951][T22372] bond0: (slave veth7): Enslaving as an active interface with a down link [ 429.145456][T22372] netlink: 'syz.4.4515': attribute type 1 has an invalid length. [ 429.176355][T22372] netlink: 'syz.4.4515': attribute type 2 has an invalid length. [ 429.208340][T22394] syzkaller1: entered promiscuous mode [ 429.218686][T22394] syzkaller1: entered allmulticast mode [ 429.359726][T22406] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20001 [ 429.401794][T22406] sctp: [Deprecated]: syz.4.4525 (pid 22406) Use of int in max_burst socket option deprecated. [ 429.401794][T22406] Use struct sctp_assoc_value instead [ 429.641158][T22419] tipc: Enabled bearer , priority 0 [ 429.733987][T22426] syzkaller0: entered promiscuous mode [ 429.747548][T22438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4535'. [ 429.762676][T22426] syzkaller0: entered allmulticast mode [ 429.784506][T22445] netlink: 'syz.2.4537': attribute type 1 has an invalid length. [ 429.793892][T22418] tipc: Resetting bearer [ 429.831535][T22418] tipc: Disabling bearer [ 429.981909][T22451] dvmrp0: entered allmulticast mode [ 430.018496][T22456] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4540'. [ 430.030503][T22455] netlink: 'syz.0.4541': attribute type 1 has an invalid length. [ 430.103619][T22455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 430.141544][T22458] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4541'. [ 430.269041][T22468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4544'. [ 430.293003][T22471] tipc: Can't bind to reserved service type 1 [ 430.671261][T22484] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4548'. [ 430.820054][T22486] netlink: 'syz.4.4550': attribute type 10 has an invalid length. [ 430.946180][T22499] tipc: Enabling of bearer rejected, already enabled [ 431.223567][T22510] syzkaller0: entered promiscuous mode [ 431.240835][T22510] syzkaller0: entered allmulticast mode [ 431.678048][ T6060] veth0_to_bond: left promiscuous mode [ 431.724173][T22533] netlink: 'syz.3.4558': attribute type 1 has an invalid length. [ 431.756265][T22533] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4558'. [ 432.969604][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 432.977655][ C0] lec:lec_tx_timeout: lec0 [ 432.982565][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 433.777823][T22561] syzkaller0: entered promiscuous mode [ 433.783350][T22561] syzkaller0: entered allmulticast mode [ 433.793961][T22571] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 433.961125][T22584] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4568'. [ 434.103057][T22591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4571'. [ 434.276281][T22595] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 434.300768][T22595] bond5 (unregistering): Released all slaves [ 434.334786][T22609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4577'. [ 434.373867][T22605] team0: Device gtp1 is up. Set it down before adding it as a team port [ 434.462352][T22612] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4579'. [ 434.607689][T22622] tipc: Enabled bearer , priority 0 [ 434.682913][T22622] syzkaller0: entered promiscuous mode [ 434.702555][T22622] syzkaller0: entered allmulticast mode [ 434.710161][T22622] tipc: Resetting bearer [ 434.745481][T22624] ip6gre1: entered promiscuous mode [ 434.762712][T22626] tipc: Enabling of bearer rejected, failed to enable media [ 434.821105][T22621] tipc: Resetting bearer [ 436.698935][T22621] tipc: Disabling bearer [ 436.708260][T22631] syzkaller0: entered promiscuous mode [ 436.713744][T22631] syzkaller0: entered allmulticast mode [ 436.756415][T22646] xfrm1: entered allmulticast mode [ 436.782902][ T5899] tipc: Node number set to 1668035362 [ 437.031114][T22665] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4593'. [ 437.046214][T22675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4595'. [ 437.120191][T22682] IPVS: Unknown mcast interface: syzkaller1 [ 437.131826][T22680] syzkaller1: entered promiscuous mode [ 437.138150][T22680] syzkaller1: entered allmulticast mode [ 437.195944][T22684] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4600'. [ 437.206067][T22684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4600'. [ 437.294779][T22688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4602'. [ 437.313374][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4601'. [ 437.491907][T22695] siw: device registration error -23 [ 437.541162][T22698] netlink: 'syz.4.4607': attribute type 4 has an invalid length. [ 437.611015][T22705] xt_CT: You must specify a L4 protocol and not use inversions on it [ 438.196640][T22760] netlink: 'syz.4.4624': attribute type 1 has an invalid length. [ 438.224217][T22755] : renamed from hsr0 [ 438.313663][T22760] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.472917][T22776] wg1 speed is unknown, defaulting to 1000 [ 438.562874][T22785] erspan0: entered promiscuous mode [ 438.577139][T22785] erspan0: entered allmulticast mode [ 438.690481][T22799] netlink: 'syz.3.4636': attribute type 24 has an invalid length. [ 438.723603][T22797] wg1 speed is unknown, defaulting to 1000 [ 438.790527][T22804] sctp: [Deprecated]: syz.0.4639 (pid 22804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.790527][T22804] Use struct sctp_sack_info instead [ 438.807099][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 438.807127][ C0] lec:lec_tx_timeout: lec0 [ 438.808411][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 439.009207][T22804] xt_limit: Overflow, try lower: 271964/0 [ 439.198899][T22816] syzkaller0: entered promiscuous mode [ 439.204395][T22816] syzkaller0: entered allmulticast mode [ 439.515555][T22840] __nla_validate_parse: 10 callbacks suppressed [ 439.515573][T22840] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4649'. [ 439.684659][T22849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4651'. [ 439.916324][T22859] netlink: 'syz.1.4653': attribute type 17 has an invalid length. [ 439.965827][T22859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4653'. [ 439.973105][T22862] tipc: Enabled bearer , priority 11 [ 440.014155][T22859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4653'. [ 440.162397][T22868] netlink: 'syz.0.4655': attribute type 1 has an invalid length. [ 440.222888][T22868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4655'. [ 440.245936][T22868] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4655'. [ 440.305784][T22868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4655'. [ 440.598650][T22881] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4660'. [ 440.628336][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4659'. [ 440.805412][T22890] xt_CT: No such helper "pptp" [ 440.902721][T22896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4665'. [ 440.972946][T22896] bond7: Invalid ad_actor_system MAC address. [ 440.979971][T22896] bond7: option ad_actor_system: invalid value (1) [ 440.992038][T22896] bond7 (unregistering): Released all slaves [ 441.021487][T22906] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 441.043047][T22906] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 441.131370][T22906] team1: entered promiscuous mode [ 441.136627][T22906] team1: entered allmulticast mode [ 441.320295][T22931] sctp: [Deprecated]: syz.4.4674 (pid 22931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.320295][T22931] Use struct sctp_sack_info instead [ 441.329299][T22934] tipc: Enabling not permitted [ 441.343869][T22934] tipc: Enabling of bearer rejected, failed to enable media [ 441.660316][T22952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.700255][T22956] 8021q: adding VLAN 0 to HW filter on device bond5 [ 441.791758][T22965] 8021q: adding VLAN 0 to HW filter on device bond5 [ 441.809443][T22965] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 441.838894][T22965] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 441.870619][T22952] netlink: 'syz.4.4681': attribute type 1 has an invalid length. [ 441.942951][T22970] wg1 speed is unknown, defaulting to 1000 [ 442.125714][T22989] delete_channel: no stack [ 442.338902][T23007] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 442.670361][T23032] nbd: must specify at least one socket [ 442.925547][T23051] netlink: 'syz.3.4709': attribute type 1 has an invalid length. [ 443.008755][T23056] SET target dimension over the limit! [ 443.052363][T23057] geneve3: entered promiscuous mode [ 443.091425][T23057] geneve3: entered allmulticast mode [ 443.115892][T23062] netlink: 'syz.1.4706': attribute type 11 has an invalid length. [ 443.771572][T23091] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 443.826724][T23091] bond4: entered promiscuous mode [ 443.832616][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 443.832637][ C0] lec:lec_tx_timeout: lec0 [ 443.841478][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 443.841738][T23104] "syz.2.4724" (23104) uses obsolete ecb(arc4) skcipher [ 443.841799][T23104] "syz.2.4724" (23104) uses obsolete ecb(arc4) skcipher [ 443.841865][T23104] "syz.2.4724" (23104) uses obsolete ecb(arc4) skcipher [ 443.841930][T23104] "syz.2.4724" (23104) uses obsolete ecb(arc4) skcipher [ 443.841996][T23104] "syz.2.4724" (23104) uses obsolete ecb(arc4) skcipher [ 443.842065][T23104] "syz.2.4724" (23104) uses obsolete ecb(arc4) skcipher [ 443.842130][T23104] "syz.2.4724" (23104) uses obsolete ecb(arc4) skcipher [ 443.842194][T23104] "syz.2.4724" (23104) uses obsolete ecb(arc4) skcipher [ 443.842265][T23104] "syz.2.4724" (23104) uses obsolete ecb(arc4) skcipher [ 443.842332][T23104] "syz.2.4724" (23104) uses obsolete ecb(arc4) skcipher [ 443.930374][T23091] bond4: entered allmulticast mode [ 443.936836][T23091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 444.116317][T23114] openvswitch: netlink: EtherType 50a is less than min 600 [ 444.175594][T23113] wg1 speed is unknown, defaulting to 1000 [ 444.207023][T23115] wg1 speed is unknown, defaulting to 1000 [ 444.253280][T23121] netlink: 'syz.3.4729': attribute type 6 has an invalid length. [ 444.306041][T10960] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.306144][T23121] netlink: 'syz.3.4729': attribute type 6 has an invalid length. [ 444.348519][T10960] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.363204][T10960] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.382678][T10960] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.455307][T23130] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 444.651559][T23143] netlink: 'syz.3.4736': attribute type 8 has an invalid length. [ 445.166553][T23159] __nla_validate_parse: 19 callbacks suppressed [ 445.166571][T23159] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4741'. [ 445.281129][T23163] netlink: 'syz.3.4742': attribute type 29 has an invalid length. [ 445.320010][T23163] netlink: 'syz.3.4742': attribute type 29 has an invalid length. [ 445.329924][T23163] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4742'. [ 445.510285][T23172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4745'. [ 445.533892][T23171] netlink: 'syz.0.4746': attribute type 1 has an invalid length. [ 445.554960][T23177] tipc: Enabling of bearer rejected, already enabled [ 445.570475][T23177] tipc: Resetting bearer [ 445.578612][T23172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4745'. [ 445.651704][T23188] netlink: 'syz.1.4751': attribute type 1 has an invalid length. [ 445.806894][T23201] ipt_REJECT: TCP_RESET invalid for non-tcp [ 446.190865][T23228] wg1 speed is unknown, defaulting to 1000 [ 446.199680][T23231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4762'. [ 446.230198][T23231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4762'. [ 446.700936][T23231] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.708717][T23231] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.123721][T23260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4767'. [ 447.183792][T23264] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 [ 447.218055][T23231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.256154][T23231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.284902][T23231] tipc: Resetting bearer [ 447.360639][T23276] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 447.681628][T23231] tipc: Resetting bearer [ 447.779531][T23272] netlink: 'syz.3.4769': attribute type 1 has an invalid length. [ 447.799239][ T58] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.808370][ T58] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.816763][ T58] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.847152][ T58] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.875111][ T58] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.895443][ T58] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.915287][ T58] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.948923][ T58] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.953130][T23291] netlink: zone id is out of range [ 447.970635][T23291] netlink: zone id is out of range [ 447.995473][T23291] netlink: zone id is out of range [ 448.038385][T23291] netlink: zone id is out of range [ 448.043570][T23291] netlink: zone id is out of range [ 448.090853][T23288] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4771'. [ 448.125315][T23291] netlink: zone id is out of range [ 448.171894][T23291] netlink: zone id is out of range [ 448.215527][T23291] netlink: zone id is out of range [ 448.245210][T23291] netlink: zone id is out of range [ 448.253852][T23291] netlink: zone id is out of range [ 448.445483][T23322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4778'. [ 448.501914][T23322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4778'. [ 448.847602][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 448.855672][ C0] lec:lec_tx_timeout: lec0 [ 448.860883][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 449.253561][T23348] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 449.472812][T23354] geneve4: entered promiscuous mode [ 449.486759][T23354] geneve4: entered allmulticast mode [ 449.878218][T23383] syzkaller0: entered promiscuous mode [ 449.886497][T23383] syzkaller0: entered allmulticast mode [ 449.905198][T23383] tipc: Enabled bearer , priority 0 [ 449.923266][T23383] Bluetooth: MGMT ver 1.23 [ 449.950058][T23382] tipc: Resetting bearer [ 450.008935][T23382] tipc: Disabling bearer [ 450.234218][T23392] syzkaller0: entered promiscuous mode [ 450.280659][T23392] syzkaller0: entered allmulticast mode [ 450.465452][T23406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.594834][T23417] __nla_validate_parse: 2 callbacks suppressed [ 450.594857][T23417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4799'. [ 450.644725][T23417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4799'. [ 450.655777][T23417] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4799'. [ 450.682206][T23419] xt_cluster: node mask cannot exceed total number of nodes [ 452.142857][T23406] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.4797'. [ 452.283129][T23439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4803'. [ 452.300277][T23439] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4803'. [ 452.319434][T23443] netlink: 'syz.2.4805': attribute type 1 has an invalid length. [ 452.341682][T23443] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4805'. [ 452.372984][T23443] bridge0: port 4(ipvlan2) entered blocking state [ 452.387319][T23443] bridge0: port 4(ipvlan2) entered disabled state [ 452.394067][T23443] ipvlan2: entered allmulticast mode [ 452.401713][T23443] bridge0: entered allmulticast mode [ 452.414085][T23443] ipvlan2: left allmulticast mode [ 452.428161][T23443] bridge0: left allmulticast mode [ 452.481278][T23453] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4806'. [ 452.560273][T23454] netlink: 4336 bytes leftover after parsing attributes in process `syz.3.4806'. [ 452.851270][T23459] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4808'. [ 453.195131][T23481] C: renamed from lo [ 453.206782][T23481] net_ratelimit: 48 callbacks suppressed [ 453.206799][T23481] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 453.284149][T23491] Cannot find set identified by id 3 to match [ 453.380695][T23500] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 453.503977][T23507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.610234][T23519] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 453.651808][T23519] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 453.756189][T23527] tipc: Enabling of bearer rejected, failed to enable media [ 453.779039][T23529] netlink: 'syz.1.4831': attribute type 1 has an invalid length. [ 453.867574][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 453.871404][T23535] tipc: Enabling of bearer rejected, already enabled [ 453.875645][ C0] lec:lec_tx_timeout: lec0 [ 453.889444][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 454.092840][T23554] netlink: 'syz.1.4839': attribute type 1 has an invalid length. [ 454.105770][T23554] netlink: 'syz.1.4839': attribute type 2 has an invalid length. [ 454.600110][T23594] syzkaller1: entered promiscuous mode [ 454.605638][T23594] syzkaller1: entered allmulticast mode [ 455.046752][T23603] netlink: 'syz.0.4849': attribute type 1 has an invalid length. [ 455.171419][T23605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.255687][T23611] macsec2: entered promiscuous mode [ 455.431953][T23622] wg1: entered promiscuous mode [ 455.436922][T23622] wg1: entered allmulticast mode [ 455.549315][T23624] netlink: 'syz.3.4857': attribute type 1 has an invalid length. [ 455.623493][T23635] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 455.726249][T23644] __nla_validate_parse: 12 callbacks suppressed [ 455.726269][T23644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4861'. [ 455.952476][ T58] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.003032][ T58] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.014848][ T58] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.106801][ T58] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.131113][T23668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4866'. [ 457.029718][T23716] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4874'. [ 457.073510][T23718] x_tables: duplicate underflow at hook 2 [ 457.166616][T23726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4877'. [ 457.176183][T23726] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 458.232513][T23716] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4874'. [ 458.404348][T23743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4882'. [ 458.421102][T23746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4881'. [ 458.430454][T23743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.439232][T23746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4881'. [ 458.473662][T23743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.600948][T23756] netlink: 'syz.1.4886': attribute type 1 has an invalid length. [ 458.641010][T23756] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 458.656833][T23765] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4888'. [ 458.724975][T23771] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4889'. [ 458.755659][T23771] netlink: 'syz.3.4889': attribute type 5 has an invalid length. [ 458.799201][T23771] netlink: 'syz.3.4889': attribute type 6 has an invalid length. [ 458.898098][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 458.906498][ C0] lec:lec_tx_timeout: lec0 [ 458.912085][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 458.994090][T23776] syzkaller0: entered promiscuous mode [ 459.001051][T23776] syzkaller0: entered allmulticast mode [ 459.190170][T23808] tc_dump_action: action bad kind [ 459.310876][T23814] geneve2: entered promiscuous mode [ 459.316124][T23814] geneve2: entered allmulticast mode [ 459.357719][T23822] netlink: 'syz.4.4904': attribute type 2 has an invalid length. [ 459.373399][T23818] netlink: 'syz.1.4900': attribute type 5 has an invalid length. [ 459.398790][T23818] netlink: 'syz.1.4900': attribute type 17 has an invalid length. [ 459.513902][T23833] openvswitch: netlink: Flow key attr not present in new flow. [ 459.561666][T23832] veth11: entered promiscuous mode [ 459.864698][T23850] syzkaller0: entered promiscuous mode [ 459.874279][T23850] syzkaller0: entered allmulticast mode [ 460.169204][T23871] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 460.276584][T23878] netlink: 'syz.2.4920': attribute type 30 has an invalid length. [ 460.376450][T23878] bond6: option arp_missed_max: invalid value (0) [ 460.383791][T23878] bond6: option arp_missed_max: allowed values 1 - 255 [ 460.391282][T23883] IPVS: length: 24 != 12312 [ 460.401052][T23878] bond6 (unregistering): Released all slaves [ 460.762745][T23909] __nla_validate_parse: 20 callbacks suppressed [ 460.762766][T23909] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4929'. [ 460.781160][T23917] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4932'. [ 460.921650][T23926] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 460.928885][T23922] tipc: Enabled bearer , priority 0 [ 460.958303][T23926] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 460.989529][T23929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.068929][T23922] syzkaller0: entered promiscuous mode [ 461.076722][T23922] syzkaller0: entered allmulticast mode [ 461.084126][T23922] tipc: Resetting bearer [ 461.114172][T23921] tipc: Resetting bearer [ 461.118392][T23940] xt_NFQUEUE: number of total queues is 0 [ 461.132757][T23939] xt_NFQUEUE: number of total queues is 0 [ 461.274407][T23948] netlink: 'syz.0.4942': attribute type 23 has an invalid length. [ 462.694950][T23921] tipc: Disabling bearer [ 462.720009][T23958] tun0: tun_chr_ioctl cmd 1074025675 [ 462.725512][T23958] tun0: persist disabled [ 462.914275][T23980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4949'. [ 463.176450][T24001] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4956'. [ 463.215258][T24003] sctp: [Deprecated]: syz.1.4955 (pid 24003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.215258][T24003] Use struct sctp_sack_info instead [ 463.851096][T24047] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4970'. [ 463.864193][T24047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4970'. [ 463.916658][T24047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4970'. [ 463.927884][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 463.935932][ C0] lec:lec_tx_timeout: lec0 [ 463.941139][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 463.968991][T24045] tipc: Enabling of bearer rejected, already enabled [ 464.286553][T24070] syzkaller1: entered allmulticast mode [ 464.469658][T24079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4979'. [ 464.506859][T24079] netlink: 'syz.1.4979': attribute type 1 has an invalid length. [ 464.734732][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4984'. [ 464.900113][T24105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4986'. [ 464.918499][T24105] netlink: 'syz.1.4986': attribute type 4 has an invalid length. [ 465.621516][T24153] syzkaller0: entered promiscuous mode [ 465.628445][T24153] syzkaller0: entered allmulticast mode [ 465.730744][T24161] IPVS: sed: FWM 3 0x00000003 - no destination available [ 465.746791][T24162] erspan0: left allmulticast mode [ 465.758765][T24162] netlink: 'syz.3.5011': attribute type 3 has an invalid length. [ 465.775654][T24161] __nla_validate_parse: 4 callbacks suppressed [ 465.775674][T24161] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5010'. [ 465.931678][T24173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5013'. [ 465.941510][T24173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5013'. [ 466.489251][T24219] mac80211_hwsim hwsim38 ÿ: renamed from wlan1 [ 466.525412][T24219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5026'. [ 466.569974][T24217] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.654908][T24217] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.678125][T24229] netlink: 'syz.1.5031': attribute type 1 has an invalid length. [ 466.699247][T24229] bond8: entered promiscuous mode [ 466.704552][T24229] 8021q: adding VLAN 0 to HW filter on device bond8 [ 466.725976][T24229] bond8: (slave bridge7): making interface the new active one [ 466.733785][T24229] bridge7: entered promiscuous mode [ 466.740058][T24229] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 466.762117][T24217] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.815566][T24232] delete_channel: no stack [ 466.846212][T24217] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.928359][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.944746][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.961976][T10960] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.985055][T10960] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.364718][T24255] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5039'. [ 467.375962][T24255] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5039'. [ 467.388060][T24255] tipc: Cannot configure node identity twice [ 467.394238][T24255] tipc: Cannot configure node identity twice [ 467.428418][T24262] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5042'. [ 467.511362][T24267] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5043'. [ 467.520806][T24271] netlink: 'syz.0.5044': attribute type 1 has an invalid length. [ 467.572010][T24271] bond5: entered promiscuous mode [ 467.579121][T24272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5044'. [ 467.589276][T24271] 8021q: adding VLAN 0 to HW filter on device bond5 [ 467.596698][T24272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5044'. [ 467.662345][T24271] bond5: (slave bridge3): making interface the new active one [ 467.700605][T24271] bridge3: entered promiscuous mode [ 467.733703][T24271] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 467.758750][T24285] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 467.781279][T24272] bond5: (slave bridge4): Enslaving as a backup interface with an up link [ 468.292354][T24305] tipc: Cannot configure node identity twice [ 468.308501][T24305] tipc: Cannot configure node identity twice [ 468.444041][T24318] x_tables: duplicate underflow at hook 1 [ 468.484743][T24315] bond6: entered promiscuous mode [ 468.491832][T24315] bond6: entered allmulticast mode [ 468.499714][T24315] 8021q: adding VLAN 0 to HW filter on device bond6 [ 468.555353][T24325] : entered promiscuous mode [ 468.793370][T24343] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 468.855457][T24346] syzkaller0: entered promiscuous mode [ 468.865919][T24346] syzkaller0: entered allmulticast mode [ 468.958375][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 468.966411][ C0] lec:lec_tx_timeout: lec0 [ 468.971908][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 469.033964][T24360] IPVS: Unknown mcast interface: syzkaller1 [ 469.055664][T24360] tc_dump_action: action bad kind [ 469.159047][T24371] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 469.276404][T24383] netlink: 'syz.4.5072': attribute type 8 has an invalid length. [ 469.374277][T24387] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 469.402076][T24387] bond7 (unregistering): Released all slaves [ 469.580084][T24397] bond6: Invalid ad_actor_system MAC address. [ 469.591063][T24397] bond6: option ad_actor_system: invalid value (1) [ 469.649797][T24397] bond6 (unregistering): Released all slaves [ 469.756562][T24416] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.763799][T24416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.771312][T24416] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.778567][T24416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.814231][T24421] netlink: 'syz.3.5087': attribute type 1 has an invalid length. [ 469.915889][T24421] 8021q: adding VLAN 0 to HW filter on device bond7 [ 469.928281][T24427] bond7: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 470.024411][T24435] syzkaller1: entered promiscuous mode [ 470.035501][T24435] syzkaller1: entered allmulticast mode [ 470.059456][T24421] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 470.150575][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 470.271440][ T6058] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.286573][T24460] sctp: [Deprecated]: syz.2.5098 (pid 24460) Use of int in max_burst socket option. [ 470.286573][T24460] Use struct sctp_assoc_value instead [ 470.301517][ T36] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.301561][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 470.322751][T24460] 8021q: VLANs not supported on gre0 [ 470.392026][T24465] tipc: Enabled bearer , priority 10 [ 470.408095][T10958] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.422698][T10958] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 470.551150][ T6058] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.588109][T24484] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 470.597589][ T36] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.618961][T10960] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.710295][T24488] netlink: 'syz.0.5105': attribute type 1 has an invalid length. [ 470.742641][T10960] net_ratelimit: 1 callbacks suppressed [ 470.742655][T10960] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.764065][T10960] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 470.879432][T24502] __nla_validate_parse: 20 callbacks suppressed [ 470.879450][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5109'. [ 470.905441][T10958] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.938613][T10958] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.958593][T10960] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.977801][T10960] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 470.998566][T10958] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.006354][T10958] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 471.061543][T24510] xt_TPROXY: Can be used only with -p tcp or -p udp [ 471.130929][T24513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5111'. [ 471.141530][T10958] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.165922][T10958] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 471.398580][T24531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5117'. [ 471.604894][T24552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5123'. [ 471.704377][T24561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5126'. [ 471.786786][T24565] tap0: tun_chr_ioctl cmd 1074025678 [ 471.805023][T24565] tap0: group set to 0 [ 471.954095][T24586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.262031][T24614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5140'. [ 472.290288][T24616] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5141'. [ 472.308028][T24618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5137'. [ 472.324323][T24620] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5141'. [ 472.454855][T24635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5145'. [ 472.607879][T24645] tipc: Enabling of bearer rejected, media not registered [ 472.657861][T24650] geneve3: entered promiscuous mode [ 472.666338][T24650] geneve3: entered allmulticast mode [ 473.076800][T24680] netlink: 'syz.2.5159': attribute type 1 has an invalid length. [ 473.701339][T24723] syzkaller0: entered promiscuous mode [ 473.723034][T24723] syzkaller0: entered allmulticast mode [ 473.773096][T24731] netlink: 'syz.4.5178': attribute type 62 has an invalid length. [ 474.592576][T24772] netlink: 'syz.1.5191': attribute type 1 has an invalid length. [ 474.633107][T24774] netlink: 'syz.1.5192': attribute type 2 has an invalid length. [ 474.807149][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 474.815264][ C0] lec:lec_tx_timeout: lec0 [ 474.821205][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 474.974417][T24795] netlink: 'syz.1.5200': attribute type 64 has an invalid length. [ 475.169522][T24807] netlink: 'syz.4.5202': attribute type 11 has an invalid length. [ 475.494285][T24821] 0·: renamed from hsr_slave_1 (while UP) [ 475.534773][T24821] 0·: entered allmulticast mode [ 475.705216][T24836] syzkaller0: create flow: hash 163162610 index 1 [ 475.766589][T24849] net_ratelimit: 95 callbacks suppressed [ 475.766608][T24849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.767216][ T36] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 475.789222][T24849] syzkaller1: entered promiscuous mode [ 475.795502][T24849] syzkaller1: entered allmulticast mode [ 475.817198][ T6058] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 475.825074][ T6058] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 475.846763][T24847] tipc: Enabling of bearer rejected, already enabled [ 475.947299][ T136] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 475.966196][T24857] netlink: 'syz.1.5219': attribute type 2 has an invalid length. [ 475.975861][T24857] __nla_validate_parse: 19 callbacks suppressed [ 475.978935][ T136] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 475.986224][T24857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5219'. [ 476.007855][T24836] syzkaller0: delete flow: hash 163162610 index 1 [ 476.040306][ T136] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.067204][ T136] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.088037][ T136] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.127156][ T136] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.217916][T24873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5220'. [ 477.574914][T24865] tipc: Enabling of bearer rejected, already enabled [ 477.584872][T24873] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 477.666425][T24885] pimreg: entered allmulticast mode [ 477.839913][T24900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5230'. [ 477.855684][T24899] bond0: entered promiscuous mode [ 477.875532][T24899] bond_slave_0: entered promiscuous mode [ 477.882594][T24899] bond_slave_1: entered promiscuous mode [ 477.893393][T24899] batadv0: entered promiscuous mode [ 477.903195][T24899] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 477.913832][T24899] hsr1: entered promiscuous mode [ 477.920663][T24899] hsr1: entered allmulticast mode [ 477.926874][T24899] bond0: entered allmulticast mode [ 477.933323][T24899] bond_slave_0: entered allmulticast mode [ 477.939698][T24899] bond_slave_1: entered allmulticast mode [ 477.949958][T24899] batadv0: entered allmulticast mode [ 477.955749][T24899] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 477.964903][T24899] bond0: left promiscuous mode [ 477.970173][T24899] bond_slave_0: left promiscuous mode [ 477.975885][T24899] bond_slave_1: left promiscuous mode [ 477.984583][T24899] batadv0: left promiscuous mode [ 478.013370][T24901] bond0: entered promiscuous mode [ 478.021580][T24901] bond_slave_0: entered promiscuous mode [ 478.034464][T24901] bond_slave_1: entered promiscuous mode [ 478.043375][T24901] batadv0: entered promiscuous mode [ 478.050911][T24901] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 478.062758][T24901] hsr1: entered promiscuous mode [ 478.068529][T24901] hsr1: entered allmulticast mode [ 478.074249][T24901] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 478.085243][T24901] bond0: left promiscuous mode [ 478.092369][T24901] bond_slave_0: left promiscuous mode [ 478.098961][T24901] bond_slave_1: left promiscuous mode [ 478.105946][T24901] batadv0: left promiscuous mode [ 478.239822][T24923] netlink: 'syz.3.5237': attribute type 19 has an invalid length. [ 478.248418][T24923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5237'. [ 478.265804][T24923] netlink: 'syz.3.5237': attribute type 19 has an invalid length. [ 478.284683][T24923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5237'. [ 478.372547][T24936] netlink: 'syz.1.5243': attribute type 28 has an invalid length. [ 478.382501][T24936] netlink: 'syz.1.5243': attribute type 3 has an invalid length. [ 478.392494][T24936] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5243'. [ 478.566669][T24950] tipc: Enabling of bearer rejected, already enabled [ 478.668656][T24960] netlink: 'syz.1.5252': attribute type 10 has an invalid length. [ 478.707936][T24960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5252'. [ 478.969661][T24982] netlink: 'syz.3.5257': attribute type 1 has an invalid length. [ 478.980596][T24982] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5257'. [ 478.991449][T24984] netlink: 'syz.1.5258': attribute type 1 has an invalid length. [ 479.000760][T24984] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5258'. [ 479.194310][T24995] bond0: Device is already in use. [ 479.318173][T25003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5264'. [ 479.339431][T25004] tipc: Enabling of bearer rejected, already enabled [ 479.837682][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 479.845749][ C0] lec:lec_tx_timeout: lec0 [ 479.851150][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 479.860078][T25031] pim6reg1: entered promiscuous mode [ 479.865427][T25031] pim6reg1: entered allmulticast mode [ 480.016418][T25039] !: renamed from dummy0 [ 480.395904][T25056] tipc: Enabled bearer , priority 0 [ 480.434345][T25056] tipc: Resetting bearer [ 480.545154][T25063] netlink: 'syz.4.5280': attribute type 2 has an invalid length. [ 480.614726][T25051] syzkaller0: entered promiscuous mode [ 480.656654][T25051] syzkaller0: entered allmulticast mode [ 480.691526][T25048] tipc: Resetting bearer [ 480.777369][ T36] net_ratelimit: 146 callbacks suppressed [ 480.777389][ T36] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 480.797475][T25048] tipc: Disabling bearer [ 480.831680][ T36] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 480.867916][ T36] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 480.916226][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 481.027503][T25080] __nla_validate_parse: 2 callbacks suppressed [ 481.027522][T25080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5285'. [ 481.066940][T10958] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.078075][T25083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5287'. [ 481.087108][T10958] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 481.207612][T10960] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.215386][T10960] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 481.238480][T25091] netlink: 'syz.2.5288': attribute type 1 has an invalid length. [ 481.248329][T25093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5289'. [ 481.284536][T25093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5289'. [ 481.310307][T25094] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5290'. [ 481.347697][T25094] netlink: 'syz.0.5290': attribute type 1 has an invalid length. [ 481.357774][T10958] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.366360][T25097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5291'. [ 481.402583][T25097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5291'. [ 481.412239][T10958] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 481.418523][T25094] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5290'. [ 481.577830][T25107] netlink: 'syz.4.5293': attribute type 25 has an invalid length. [ 481.597225][T25107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5293'. [ 481.632756][T25107] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5293'. [ 481.738467][T25107] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.081514][T25129] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 482.141184][T25129] bond5 (unregistering): Released all slaves [ 482.494200][T25154] syzkaller0: entered promiscuous mode [ 482.512380][T25154] syzkaller0: entered allmulticast mode [ 482.659335][T25166] netlink: 'syz.3.5310': attribute type 14 has an invalid length. [ 482.766774][T25166] netlink: 'syz.3.5310': attribute type 14 has an invalid length. [ 482.922984][T25176] netlink: 'syz.4.5313': attribute type 25 has an invalid length. [ 483.016717][T25176] syzkaller0: entered promiscuous mode [ 483.022772][T25176] syzkaller0: entered allmulticast mode [ 483.520157][T25209] netlink: 'syz.2.5322': attribute type 1 has an invalid length. [ 483.621371][T25216] netlink: 'syz.4.5325': attribute type 6 has an invalid length. [ 483.677685][T25214] bridge8: port 1(veth7) entered blocking state [ 483.684299][T25214] bridge8: port 1(veth7) entered disabled state [ 483.692245][T25214] veth7: entered allmulticast mode [ 483.709125][T25214] veth7: entered promiscuous mode [ 483.742833][T25224] bond6: (slave veth0_to_bond): Releasing active interface [ 483.772906][T25224] bridge8: port 2(veth0_to_bond) entered blocking state [ 483.818055][T25224] bridge8: port 2(veth0_to_bond) entered disabled state [ 483.846460][T25224] veth0_to_bond: entered allmulticast mode [ 483.869445][T25224] veth0_to_bond: entered promiscuous mode [ 483.994952][T25235] netlink: 'syz.4.5333': attribute type 6 has an invalid length. [ 484.868317][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 484.876351][ C0] lec:lec_tx_timeout: lec0 [ 484.881652][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 484.882287][T25287] bond5: Unable to set down delay as MII monitoring is disabled [ 484.899992][T25287] bond5 (unregistering): Released all slaves [ 485.081055][T25303] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 485.099099][T25303] bond7 (unregistering): Released all slaves [ 485.442120][T25331] gretap0: entered promiscuous mode [ 485.456697][T25331] gretap0: left promiscuous mode [ 485.517256][T25344] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 485.706273][T25355] tipc: Enabling of bearer rejected, already enabled [ 485.792085][T25363] validate_nla: 8 callbacks suppressed [ 485.792104][T25363] netlink: 'syz.0.5374': attribute type 1 has an invalid length. [ 485.863495][T25363] 8021q: adding VLAN 0 to HW filter on device bond7 [ 485.877222][ T136] net_ratelimit: 114 callbacks suppressed [ 485.877241][ T136] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 485.942668][T10960] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 485.960770][T25369] bond7: (slave veth9): Enslaving as an active interface with a down link [ 485.967739][ T6058] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 485.996161][T25375] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 485.997286][T10960] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.004409][T25375] bond7: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 486.048239][ T6058] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.077201][ T6058] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.088556][T25376] bridge8: entered promiscuous mode [ 486.097671][T10958] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.117211][T10958] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.135893][T25376] bridge8: entered allmulticast mode [ 486.142329][T10958] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.182039][T10958] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 486.226522][T25384] __nla_validate_parse: 36 callbacks suppressed [ 486.226538][T25384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5379'. [ 486.258728][T25384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5379'. [ 486.270228][T25384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5379'. [ 486.298907][T25383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5378'. [ 486.309889][T25389] tipc: Enabling of bearer rejected, already enabled [ 486.318288][T25383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5378'. [ 486.338722][T25383] xt_TPROXY: Can be used only with -p tcp or -p udp [ 486.525352][T25401] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.5384'. [ 486.600405][T25401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5384'. [ 486.628049][T25401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5384'. [ 486.640064][T25401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5384'. [ 486.829385][T25426] bridge_slave_0: left allmulticast mode [ 486.835080][T25426] bridge_slave_0: left promiscuous mode [ 486.873452][T25426] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.930040][T25426] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.942669][T25435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5395'. [ 486.963471][T25426] bond0: (slave veth0_to_bond): Releasing active interface [ 486.977703][T25426] bond0: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 487.030244][T25426] `: (slave bond_slave_0): Releasing backup interface [ 487.059123][T25426] `: (slave bond_slave_1): Releasing backup interface [ 487.109485][T25426] team0: Port device team_slave_0 removed [ 487.137035][T25426] team0: Port device team_slave_1 removed [ 487.176892][T11416] syz1: Port: 1 Link DOWN [ 487.298100][T25465] netlink: 'syz.2.5402': attribute type 1 has an invalid length. [ 487.408965][T25459] bond6: entered promiscuous mode [ 487.440760][T25459] bond6: entered allmulticast mode [ 487.483480][T25459] 8021q: adding VLAN 0 to HW filter on device bond6 [ 487.616108][T25474] syzkaller1: entered promiscuous mode [ 487.623877][T25474] syzkaller1: entered allmulticast mode [ 487.663428][T25495] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 487.731905][T25495] bond8: entered promiscuous mode [ 487.737747][T25495] 8021q: adding VLAN 0 to HW filter on device bond8 [ 488.084085][T25520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 488.585462][T25556] sctp: [Deprecated]: syz.0.5428 (pid 25556) Use of int in maxseg socket option. [ 488.585462][T25556] Use struct sctp_assoc_value instead [ 488.824427][T25580] netlink: 'syz.0.5433': attribute type 18 has an invalid length. [ 489.024367][T25592] netlink: 'syz.0.5435': attribute type 1 has an invalid length. [ 489.059665][T25595] syzkaller0: entered promiscuous mode [ 489.079096][T25595] syzkaller0: entered allmulticast mode [ 489.297424][T25613] Cannot find del_set index 4 as target [ 489.319741][T25613] netlink: 'syz.2.5438': attribute type 21 has an invalid length. [ 489.643649][T25644] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 489.677839][T25644] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 489.696175][T25644] gretap2: entered promiscuous mode [ 489.704305][T25644] gretap2: entered allmulticast mode [ 489.897576][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 489.906159][ C0] lec:lec_tx_timeout: lec0 [ 489.934099][T25664] wg1 speed is unknown, defaulting to 1000 [ 490.566147][T25736] netlink: 'syz.1.5468': attribute type 33 has an invalid length. [ 490.851967][T25752] tipc: Enabling of bearer rejected, already enabled [ 490.864427][T25749] tipc: Enabled bearer , priority 0 [ 490.926860][T25754] TCP: TCP_TX_DELAY enabled [ 490.933951][T25749] syzkaller0: entered promiscuous mode [ 490.939575][T25749] syzkaller0: entered allmulticast mode [ 490.946000][T25749] tipc: Resetting bearer [ 490.952250][T25707] net_ratelimit: 120 callbacks suppressed [ 490.952264][T25707] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 490.973351][T25756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.989784][T25707] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.006969][T25756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.018489][T25704] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.043372][T25762] ip_vti0: entered promiscuous mode [ 491.049340][T25707] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.068726][T25704] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.085466][T25704] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 491.213072][T25704] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.226560][T25704] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 491.349707][T25704] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.375668][T25704] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 491.449936][T25738] tipc: Resetting bearer [ 491.471143][T25784] __nla_validate_parse: 28 callbacks suppressed [ 491.471160][T25784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5484'. [ 491.487947][T25784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5484'. [ 491.618330][T25791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5482'. [ 492.957787][T25738] tipc: Disabling bearer [ 492.981361][T25804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5486'. [ 492.998990][ T9] tipc: Node number set to 827591171 [ 493.005162][T25803] netlink: 'syz.2.5487': attribute type 1 has an invalid length. [ 493.037987][T25805] dvmrp0: left allmulticast mode [ 493.068172][T25801] netlink: 'syz.2.5487': attribute type 1 has an invalid length. [ 493.288654][T25829] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 493.325035][T25827] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 493.363988][T25829] tipc: Enabled bearer , priority 0 [ 493.374732][T25827] syzkaller0: entered promiscuous mode [ 493.384181][T25827] syzkaller0: entered allmulticast mode [ 493.410368][T25827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5494'. [ 493.428369][T25827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5494'. [ 493.473503][T25829] tipc: Resetting bearer [ 493.496087][T25826] tipc: Resetting bearer [ 493.524131][T25826] tipc: Disabling bearer [ 494.004334][T25876] netlink: 'syz.0.5503': attribute type 11 has an invalid length. [ 494.013546][T25876] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.5503'. [ 494.172491][T25888] netlink: 'syz.1.5508': attribute type 3 has an invalid length. [ 494.184928][T25888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5508'. [ 494.436744][T25901] syzkaller1: entered promiscuous mode [ 494.462394][T25901] syzkaller1: entered allmulticast mode [ 494.570769][T25916] netlink: 'syz.0.5517': attribute type 12 has an invalid length. [ 494.850860][T25940] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5524'. [ 495.200053][T25966] syzkaller1: entered promiscuous mode [ 495.201643][T25962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5532'. [ 495.205661][T25966] syzkaller1: entered allmulticast mode [ 495.392576][T25981] wg1: entered promiscuous mode [ 495.398088][T25981] wg1: entered allmulticast mode [ 495.411420][T25979] syzkaller0: entered promiscuous mode [ 495.416975][T25979] syzkaller0: entered allmulticast mode [ 495.851444][T25999] macvtap1: entered promiscuous mode [ 495.856920][T25999] vlan0: entered promiscuous mode [ 495.865321][T25999] macvtap1: entered allmulticast mode [ 495.871245][T25999] vlan0: entered allmulticast mode [ 495.876504][T25999] bond5: entered allmulticast mode [ 495.882280][T25999] bridge3: entered allmulticast mode [ 495.891356][T25992] tipc: Enabling of bearer rejected, already enabled [ 496.028550][T25706] net_ratelimit: 151 callbacks suppressed [ 496.028570][T25706] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 496.054615][T25706] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 496.084697][T26016] Unsupported ieee802154 address type: 0 [ 496.184306][T25707] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 496.200020][T25707] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 496.328753][T25707] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 496.336562][T25707] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 496.447464][T25707] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 496.455204][T25707] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 496.568463][T25703] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 496.576479][T25703] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 497.116017][T26045] __nla_validate_parse: 6 callbacks suppressed [ 497.116034][T26045] netlink: 484 bytes leftover after parsing attributes in process `syz.3.5563'. [ 497.148772][T26049] netlink: 484 bytes leftover after parsing attributes in process `syz.3.5563'. [ 497.204698][T26047] lo: entered allmulticast mode [ 497.232915][T26053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5565'. [ 497.372844][T26061] netlink: 'syz.0.5568': attribute type 83 has an invalid length. [ 497.588949][T26075] FAULT_INJECTION: forcing a failure. [ 497.588949][T26075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.605121][T26075] CPU: 0 UID: 0 PID: 26075 Comm: syz.0.5572 Not tainted syzkaller #0 PREEMPT(full) [ 497.605146][T26075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.605163][T26075] Call Trace: [ 497.605170][T26075] [ 497.605178][T26075] dump_stack_lvl+0xe8/0x150 [ 497.605207][T26075] should_fail_ex+0x412/0x560 [ 497.605232][T26075] _copy_from_user+0x2d/0xb0 [ 497.605256][T26075] __sys_bpf+0x229/0x950 [ 497.605282][T26075] ? __pfx___sys_bpf+0x10/0x10 [ 497.605320][T26075] ? ksys_write+0x242/0x270 [ 497.605339][T26075] ? __pfx_ksys_write+0x10/0x10 [ 497.605364][T26075] __x64_sys_bpf+0x7c/0x90 [ 497.605386][T26075] do_syscall_64+0x14d/0xf80 [ 497.605411][T26075] ? trace_irq_disable+0x3b/0x150 [ 497.605433][T26075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.605451][T26075] ? clear_bhb_loop+0x40/0x90 [ 497.605473][T26075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.605490][T26075] RIP: 0033:0x7fb65db9c629 [ 497.605507][T26075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.605522][T26075] RSP: 002b:00007fb65ea10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 497.605542][T26075] RAX: ffffffffffffffda RBX: 00007fb65de15fa0 RCX: 00007fb65db9c629 [ 497.605554][T26075] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 497.605564][T26075] RBP: 00007fb65ea10090 R08: 0000000000000000 R09: 0000000000000000 [ 497.605574][T26075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.605584][T26075] R13: 00007fb65de16038 R14: 00007fb65de15fa0 R15: 00007ffc6b79cb68 [ 497.605611][T26075] [ 497.784389][T26077] netlink: 'syz.1.5573': attribute type 2 has an invalid length. [ 498.064535][T26098] tipc: Failed to remove unknown binding: 66,0,0/1668035362:2422505837/2422505838 [ 498.076754][T26097] netlink: 'syz.1.5580': attribute type 2 has an invalid length. [ 498.080649][T26098] tipc: Failed to remove unknown binding: 66,0,0/1668035362:2422505837/2422505838 [ 498.250987][T26117] FAULT_INJECTION: forcing a failure. [ 498.250987][T26117] name failslab, interval 1, probability 0, space 0, times 0 [ 498.287445][T26117] CPU: 1 UID: 0 PID: 26117 Comm: syz.4.5586 Not tainted syzkaller #0 PREEMPT(full) [ 498.287472][T26117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.287482][T26117] Call Trace: [ 498.287489][T26117] [ 498.287497][T26117] dump_stack_lvl+0xe8/0x150 [ 498.287526][T26117] should_fail_ex+0x412/0x560 [ 498.287549][T26117] should_failslab+0xa8/0x100 [ 498.287569][T26117] __kmalloc_noprof+0xe8/0x760 [ 498.287586][T26117] ? bpf_test_init+0x9f/0x150 [ 498.287602][T26117] ? kstrtouint+0x6e/0xe0 [ 498.287622][T26117] bpf_test_init+0x9f/0x150 [ 498.287642][T26117] bpf_prog_test_run_xdp+0x529/0x1160 [ 498.287674][T26117] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 498.287698][T26117] ? __fget_files+0x2a/0x420 [ 498.287722][T26117] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 498.287742][T26117] bpf_prog_test_run+0x2c7/0x340 [ 498.287761][T26117] __sys_bpf+0x643/0x950 [ 498.287787][T26117] ? __pfx___sys_bpf+0x10/0x10 [ 498.287832][T26117] ? ksys_write+0x242/0x270 [ 498.287851][T26117] ? __pfx_ksys_write+0x10/0x10 [ 498.287875][T26117] __x64_sys_bpf+0x7c/0x90 [ 498.287896][T26117] do_syscall_64+0x14d/0xf80 [ 498.287919][T26117] ? trace_irq_disable+0x3b/0x150 [ 498.287940][T26117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.287955][T26117] ? clear_bhb_loop+0x40/0x90 [ 498.287975][T26117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.287991][T26117] RIP: 0033:0x7f0b1b79c629 [ 498.288007][T26117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.288020][T26117] RSP: 002b:00007f0b1c652028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 498.288038][T26117] RAX: ffffffffffffffda RBX: 00007f0b1ba15fa0 RCX: 00007f0b1b79c629 [ 498.288050][T26117] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 498.288059][T26117] RBP: 00007f0b1c652090 R08: 0000000000000000 R09: 0000000000000000 [ 498.288069][T26117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.288078][T26117] R13: 00007f0b1ba16038 R14: 00007f0b1ba15fa0 R15: 00007ffe1097a498 [ 498.288107][T26117] [ 498.575932][T26128] netlink: 'syz.0.5590': attribute type 75 has an invalid length. [ 498.837983][T26155] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 498.860231][T26155] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 498.882729][T26155] gretap1: entered promiscuous mode [ 498.894504][T26155] gretap1: entered allmulticast mode [ 498.962566][T26163] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5597'. [ 499.084631][T26169] netlink: 'syz.4.5599': attribute type 27 has an invalid length. [ 499.121878][T26170] ip6gre1: entered promiscuous mode [ 499.156598][T26174] netlink: 'syz.2.5601': attribute type 1 has an invalid length. [ 499.169316][T26172] Bluetooth: MGMT ver 1.23 [ 499.206244][T26174] bond7: entered promiscuous mode [ 499.211569][T26174] bond7: entered allmulticast mode [ 499.236313][T26174] 8021q: adding VLAN 0 to HW filter on device bond7 [ 499.245042][T26180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5603'. [ 499.262479][T26174] bridge2: entered promiscuous mode [ 499.270346][T26174] bridge2: entered allmulticast mode [ 499.276259][T26174] bond7: (slave bridge2): Enslaving as a backup interface with an up link [ 499.298816][T26180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5603'. [ 499.310074][T26183] bridge3: entered promiscuous mode [ 499.315559][T26183] bridge3: entered allmulticast mode [ 499.323477][T26183] bond7: (slave bridge3): Enslaving as a backup interface with a down link [ 499.344154][T26160] netlink: 'syz.0.5596': attribute type 1 has an invalid length. [ 499.352119][T26160] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5596'. [ 499.358180][T26157] lo: entered allmulticast mode [ 499.372676][T26156] lec:lec_atm_close: lec0: Shut down! [ 499.396586][T26180] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5603'. [ 499.499281][T26185] bond8: option all_slaves_active: invalid value (222) [ 499.514886][T26185] bond8 (unregistering): Released all slaves [ 499.808922][T26203] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 499.863478][T26203] bond8: (slave lo): Enslaving as an active interface with an up link [ 500.223378][T26240] bond0: (slave gre0): Error: Device type is different from other slaves [ 500.755681][T26293] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5629'. [ 500.902284][T26298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5631'. [ 501.128134][T25701] net_ratelimit: 100 callbacks suppressed [ 501.128152][T25701] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 501.147151][T25701] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 501.307433][T25698] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 501.341799][T25698] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 501.507925][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 501.537245][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 501.576754][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 501.596204][T26338] Cannot find del_set index 49151 as target [ 501.607649][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 501.629801][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 501.687355][T25700] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 501.772780][T26347] netlink: 'syz.2.5641': attribute type 4 has an invalid length. [ 502.154086][T26383] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 502.305295][T26394] __nla_validate_parse: 5 callbacks suppressed [ 502.305314][T26394] netlink: 13348 bytes leftover after parsing attributes in process `syz.0.5653'. [ 502.590718][T26408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5659'. [ 502.884584][T26410] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5660'. [ 502.914216][T26410] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5660'. [ 503.128439][T26427] netlink: 'syz.0.5663': attribute type 21 has an invalid length. [ 503.645132][T26460] wg1 speed is unknown, defaulting to 1000 [ 504.308027][T26484] netlink: 'syz.2.5675': attribute type 11 has an invalid length. [ 504.344818][T26496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5681'. [ 504.621782][T26506] netlink: 'syz.3.5685': attribute type 18 has an invalid length. [ 504.807100][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5440 ms [ 504.815160][ C0] lec:lec_tx_timeout: lec0 [ 504.820293][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 505.189408][T26549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5696'. [ 505.202670][T26550] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5695'. [ 505.235004][T26552] netlink: 13 bytes leftover after parsing attributes in process `syz.1.5698'. [ 505.502912][T26576] bond9: option mode: invalid value (133) [ 505.512085][T26576] bond9 (unregistering): Released all slaves [ 505.575138][T26586] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5709'. [ 505.640878][T26588] tipc: Enabled bearer , priority 0 [ 505.804105][T26588] syzkaller0: entered promiscuous mode [ 505.818737][T26588] syzkaller0: entered allmulticast mode [ 505.835376][T26588] tipc: Resetting bearer [ 505.864163][T26587] tipc: Resetting bearer [ 506.138158][T25706] net_ratelimit: 265 callbacks suppressed [ 506.138177][T25706] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.168300][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.169938][T26624] netlink: 'syz.3.5720': attribute type 1 has an invalid length. [ 506.193887][T26624] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5720'. [ 506.207430][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.237253][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.258663][T25706] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.288502][T25706] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.319846][T25707] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.349393][T25706] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.380477][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.412142][T25707] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.473019][T26587] tipc: Disabling bearer [ 507.491527][T26631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5723'. [ 507.613492][T26641] netlink: 'syz.3.5727': attribute type 4 has an invalid length. [ 507.753313][T26650] wg1 speed is unknown, defaulting to 1000 [ 507.872935][T26665] netlink: 'syz.2.5735': attribute type 10 has an invalid length. [ 507.910660][T26665] bridge_slave_1: left allmulticast mode [ 507.937218][T26665] bridge_slave_1: left promiscuous mode [ 507.943051][T26665] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.989892][T26665] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 508.167859][T26675] sctp: [Deprecated]: syz.1.5739 (pid 26675) Use of int in max_burst socket option deprecated. [ 508.167859][T26675] Use struct sctp_assoc_value instead [ 508.189656][T26678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5740'. [ 508.216790][T26681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5741'. [ 508.217269][T26677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5740'. [ 508.395019][T26695] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 508.463283][T26701] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 508.480273][T26657] netlink: 'syz.0.5728': attribute type 1 has an invalid length. [ 508.547612][T26657] 8021q: adding VLAN 0 to HW filter on device bond9 [ 508.904513][T26719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5749'. [ 508.980545][T26722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5750'. [ 509.024227][T26724] netlink: 'syz.3.5751': attribute type 21 has an invalid length. [ 509.033428][T26724] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5751'. [ 509.060270][T26724] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5751'. [ 509.198133][T26732] netlink: 'syz.3.5754': attribute type 12 has an invalid length. [ 509.322212][T26742] vlan1: entered allmulticast mode [ 509.758863][T26764] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5763'. [ 509.827601][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 509.835640][ C0] lec:lec_tx_timeout: lec0 [ 509.918130][T26780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 509.929478][T26780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 509.941214][T26780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 509.961268][T26780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 509.972311][T26780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.009991][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 510.018575][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 510.030341][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 510.038366][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 510.045971][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.258448][T26793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5768'. [ 510.394064][T26793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.462376][T26779] wg1 speed is unknown, defaulting to 1000 [ 510.464489][T26795] syzkaller0: entered promiscuous mode [ 510.474085][T26795] syzkaller0: entered allmulticast mode [ 510.813609][T26819] veth1_macvtap: left promiscuous mode [ 511.144586][T26831] syzkaller0: entered promiscuous mode [ 511.150362][T25706] net_ratelimit: 207 callbacks suppressed [ 511.150378][T25706] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.165051][T26831] syzkaller0: entered allmulticast mode [ 511.180762][T25706] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 511.244190][T26831] tipc: Enabled bearer , priority 0 [ 511.297241][T25701] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.327202][T25706] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.359627][T25706] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.385789][T26831] tipc: Resetting bearer [ 511.392255][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.431679][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.441235][T26831] tipc: Disabling bearer [ 511.457443][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.477283][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.497469][T25706] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.515923][T26779] chnl_net:caif_netlink_parms(): no params data found [ 511.528316][T26841] netlink: 'syz.1.5785': attribute type 9 has an invalid length. [ 511.536893][T26841] netlink: 'syz.1.5785': attribute type 11 has an invalid length. [ 511.548148][T26841] netlink: 'syz.1.5785': attribute type 12 has an invalid length. [ 511.739241][T26850] netlink: 'syz.0.5787': attribute type 6 has an invalid length. [ 512.090401][ T51] Bluetooth: hci0: command tx timeout [ 513.060403][T26854] __nla_validate_parse: 5 callbacks suppressed [ 513.060421][T26854] netlink: 280 bytes leftover after parsing attributes in process `syz.0.5788'. [ 513.275180][T26779] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.282759][T26779] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.294150][T26779] bridge_slave_0: entered allmulticast mode [ 513.303282][T26779] bridge_slave_0: entered promiscuous mode [ 513.316076][T26779] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.323883][T26779] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.331607][T26779] bridge_slave_1: entered allmulticast mode [ 513.339921][T26779] bridge_slave_1: entered promiscuous mode [ 513.376011][T26779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.389460][T26779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.428366][T26779] team0: Port device team_slave_0 added [ 513.466269][T26779] team0: Port device team_slave_1 added [ 513.597453][T26779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.615226][T26779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.697416][T26779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.725653][T26779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.759473][T26779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.786370][T26779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.907919][T26902] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5805'. [ 513.930981][T26902] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5805'. [ 513.979699][T26779] hsr_slave_0: entered promiscuous mode [ 513.992089][T26779] hsr_slave_1: entered promiscuous mode [ 514.000135][T26779] debugfs: 'hsr0' already exists in 'hsr' [ 514.006421][T26779] Cannot create hsr debugfs directory [ 514.167760][ T51] Bluetooth: hci0: command tx timeout [ 514.176789][T26925] netlink: 'syz.1.5812': attribute type 11 has an invalid length. [ 514.620020][T26779] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.679109][T26951] tunl0: entered promiscuous mode [ 514.684391][T26951] netlink: 'syz.2.5818': attribute type 3 has an invalid length. [ 514.693563][T26951] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5818'. [ 514.713504][T26955] gretap0: entered promiscuous mode [ 514.722517][T26779] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.820517][T26779] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.851811][T26961] netlink: 812 bytes leftover after parsing attributes in process `syz.1.5822'. [ 514.851902][T26958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5824'. [ 514.924544][T26779] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.038146][T26975] netlink: 'syz.0.5827': attribute type 1 has an invalid length. [ 515.054595][T26975] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5827'. [ 515.079284][T26975] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5827'. [ 515.101661][T26975] netlink: 'syz.0.5827': attribute type 1 has an invalid length. [ 515.118643][T26975] netlink: 'syz.0.5827': attribute type 8 has an invalid length. [ 515.126590][T26975] netlink: 606 bytes leftover after parsing attributes in process `syz.0.5827'. [ 515.240292][T26986] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5830'. [ 515.276179][T26779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 515.315367][T26983] wg1 speed is unknown, defaulting to 1000 [ 515.317916][T26779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 515.355904][T26779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 515.379262][T26779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 515.593253][T26779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.619357][T26779] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.635471][T25700] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.642697][T25700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.664805][T25700] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.672013][T25700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.699163][T26997] [ 515.701528][T26997] ====================================================== [ 515.708541][T26997] WARNING: possible circular locking dependency detected [ 515.715655][T26997] syzkaller #0 Not tainted [ 515.720067][T26997] ------------------------------------------------------ [ 515.727078][T26997] syz.0.5833/26997 is trying to acquire lock: [ 515.733137][T26997] ffff88802575e4f0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 515.742564][T26997] [ 515.742564][T26997] but task is already holding lock: [ 515.749927][T26997] ffff88802575dfb0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 515.760140][T26997] [ 515.760140][T26997] which lock already depends on the new lock. [ 515.760140][T26997] [ 515.770544][T26997] [ 515.770544][T26997] the existing dependency chain (in reverse order) is: [ 515.779557][T26997] [ 515.779557][T26997] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 515.788179][T26997] blk_alloc_queue+0x546/0x680 [ 515.793573][T26997] __blk_mq_alloc_disk+0x197/0x390 [ 515.799213][T26997] nbd_dev_add+0x499/0xb50 [ 515.804150][T26997] nbd_init+0x168/0x1f0 [ 515.808820][T26997] do_one_initcall+0x250/0x8d0 [ 515.814097][T26997] do_initcall_level+0x104/0x190 [ 515.819541][T26997] do_initcalls+0x59/0xa0 [ 515.824377][T26997] kernel_init_freeable+0x2a6/0x3e0 [ 515.830094][T26997] kernel_init+0x1d/0x1d0 [ 515.834934][T26997] ret_from_fork+0x51e/0xb90 [ 515.840037][T26997] ret_from_fork_asm+0x1a/0x30 [ 515.845309][T26997] [ 515.845309][T26997] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 515.852506][T26997] fs_reclaim_acquire+0x71/0x100 [ 515.857955][T26997] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 515.864363][T26997] __alloc_skb+0x1d0/0x7d0 [ 515.869290][T26997] tcp_stream_alloc_skb+0x3f/0x580 [ 515.874909][T26997] tcp_sendmsg_locked+0x1375/0x5490 [ 515.880617][T26997] tcp_sendmsg+0x2f/0x50 [ 515.885370][T26997] sock_write_iter+0x421/0x550 [ 515.890639][T26997] vfs_write+0x61d/0xb90 [ 515.895382][T26997] ksys_write+0x150/0x270 [ 515.900214][T26997] do_syscall_64+0x14d/0xf80 [ 515.905325][T26997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.911721][T26997] [ 515.911721][T26997] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 515.919504][T26997] lock_sock_nested+0x48/0x100 [ 515.925315][T26997] inet_shutdown+0x6a/0x390 [ 515.930339][T26997] nbd_mark_nsock_dead+0x2e9/0x560 [ 515.935967][T26997] recv_work+0x1c7f/0x1d90 [ 515.940899][T26997] process_scheduled_works+0xb02/0x1830 [ 515.946959][T26997] worker_thread+0xa50/0xfc0 [ 515.952066][T26997] kthread+0x388/0x470 [ 515.956686][T26997] ret_from_fork+0x51e/0xb90 [ 515.961794][T26997] ret_from_fork_asm+0x1a/0x30 [ 515.967118][T26997] [ 515.967118][T26997] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 515.974761][T26997] __mutex_lock+0x19f/0x1300 [ 515.979947][T26997] nbd_queue_rq+0x37b/0x1100 [ 515.985073][T26997] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 515.991129][T26997] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 515.997970][T26997] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 516.004474][T26997] blk_mq_run_hw_queue+0x348/0x4f0 [ 516.010096][T26997] blk_mq_dispatch_list+0xd16/0xe10 [ 516.015808][T26997] blk_mq_flush_plug_list+0x48d/0x570 [ 516.021690][T26997] __blk_flush_plug+0x3ed/0x4d0 [ 516.027065][T26997] __submit_bio+0x28d/0x580 [ 516.032071][T26997] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 516.038210][T26997] block_read_full_folio+0x599/0x830 [ 516.044001][T26997] filemap_read_folio+0x137/0x3b0 [ 516.049532][T26997] do_read_cache_folio+0x358/0x590 [ 516.055149][T26997] read_part_sector+0xb6/0x2b0 [ 516.060427][T26997] adfspart_check_ICS+0xa5/0xa40 [ 516.065876][T26997] bdev_disk_changed+0x7ba/0x1550 [ 516.071408][T26997] blkdev_get_whole+0x380/0x510 [ 516.076770][T26997] bdev_open+0x31e/0xd30 [ 516.081522][T26997] blkdev_open+0x470/0x610 [ 516.086439][T26997] do_dentry_open+0x785/0x14e0 [ 516.091715][T26997] vfs_open+0x3b/0x340 [ 516.096381][T26997] path_openat+0x2e08/0x3860 [ 516.101480][T26997] do_file_open+0x23e/0x4a0 [ 516.106489][T26997] do_sys_openat2+0x113/0x200 [ 516.111675][T26997] __x64_sys_openat+0x138/0x170 [ 516.117036][T26997] do_syscall_64+0x14d/0xf80 [ 516.122137][T26997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.128532][T26997] [ 516.128532][T26997] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 516.135726][T26997] __mutex_lock+0x19f/0x1300 [ 516.140817][T26997] nbd_queue_rq+0xc6/0x1100 [ 516.145827][T26997] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 516.151885][T26997] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 516.158732][T26997] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 516.165224][T26997] blk_mq_run_hw_queue+0x348/0x4f0 [ 516.170841][T26997] blk_mq_dispatch_list+0xd16/0xe10 [ 516.176550][T26997] blk_mq_flush_plug_list+0x48d/0x570 [ 516.182430][T26997] __blk_flush_plug+0x3ed/0x4d0 [ 516.187792][T26997] __submit_bio+0x28d/0x580 [ 516.192801][T26997] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 516.198942][T26997] block_read_full_folio+0x599/0x830 [ 516.204734][T26997] filemap_read_folio+0x137/0x3b0 [ 516.210349][T26997] do_read_cache_folio+0x358/0x590 [ 516.215965][T26997] read_part_sector+0xb6/0x2b0 [ 516.221236][T26997] adfspart_check_ICS+0xa5/0xa40 [ 516.226681][T26997] bdev_disk_changed+0x7ba/0x1550 [ 516.232222][T26997] blkdev_get_whole+0x380/0x510 [ 516.237584][T26997] bdev_open+0x31e/0xd30 [ 516.242333][T26997] blkdev_open+0x470/0x610 [ 516.247252][T26997] do_dentry_open+0x785/0x14e0 [ 516.252524][T26997] vfs_open+0x3b/0x340 [ 516.257101][T26997] path_openat+0x2e08/0x3860 [ 516.262192][T26997] do_file_open+0x23e/0x4a0 [ 516.267196][T26997] do_sys_openat2+0x113/0x200 [ 516.272384][T26997] __x64_sys_openat+0x138/0x170 [ 516.277759][T26997] do_syscall_64+0x14d/0xf80 [ 516.282880][T26997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.289285][T26997] [ 516.289285][T26997] -> #1 (set->srcu){.+.+}-{0:0}: [ 516.296399][T26997] __synchronize_srcu+0xca/0x3e0 [ 516.301852][T26997] elevator_switch+0x1e8/0x7a0 [ 516.307233][T26997] elevator_change+0x2cc/0x450 [ 516.312520][T26997] elevator_set_default+0x36c/0x430 [ 516.318287][T26997] blk_register_queue+0x366/0x430 [ 516.323842][T26997] __add_disk+0x677/0xd50 [ 516.328699][T26997] add_disk_fwnode+0xfb/0x480 [ 516.333886][T26997] nbd_dev_add+0x72c/0xb50 [ 516.338906][T26997] nbd_init+0x168/0x1f0 [ 516.343705][T26997] do_one_initcall+0x250/0x8d0 [ 516.348986][T26997] do_initcall_level+0x104/0x190 [ 516.354447][T26997] do_initcalls+0x59/0xa0 [ 516.359378][T26997] kernel_init_freeable+0x2a6/0x3e0 [ 516.365082][T26997] kernel_init+0x1d/0x1d0 [ 516.369915][T26997] ret_from_fork+0x51e/0xb90 [ 516.375011][T26997] ret_from_fork_asm+0x1a/0x30 [ 516.380283][T26997] [ 516.380283][T26997] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 516.388087][T26997] __lock_acquire+0x15a5/0x2cf0 [ 516.393446][T26997] lock_acquire+0xf0/0x2e0 [ 516.398365][T26997] __mutex_lock+0x19f/0x1300 [ 516.403468][T26997] elevator_change+0x1b3/0x450 [ 516.408747][T26997] elevator_set_none+0xb5/0x140 [ 516.414107][T26997] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 516.420415][T26997] nbd_start_device+0x17f/0xb10 [ 516.425778][T26997] nbd_genl_connect+0x165b/0x1cf0 [ 516.431310][T26997] genl_family_rcv_msg_doit+0x22a/0x330 [ 516.437373][T26997] genl_rcv_msg+0x61c/0x7a0 [ 516.442385][T26997] netlink_rcv_skb+0x232/0x4b0 [ 516.447657][T26997] genl_rcv+0x28/0x40 [ 516.452154][T26997] netlink_unicast+0x80f/0x9b0 [ 516.457449][T26997] netlink_sendmsg+0x813/0xb40 [ 516.462719][T26997] ____sys_sendmsg+0xa68/0xad0 [ 516.467989][T26997] ___sys_sendmsg+0x2a5/0x360 [ 516.473172][T26997] __x64_sys_sendmsg+0x1bd/0x2a0 [ 516.478630][T26997] do_syscall_64+0x14d/0xf80 [ 516.483732][T26997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.490221][T26997] [ 516.490221][T26997] other info that might help us debug this: [ 516.490221][T26997] [ 516.500518][T26997] Chain exists of: [ 516.500518][T26997] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 516.500518][T26997] [ 516.514249][T26997] Possible unsafe locking scenario: [ 516.514249][T26997] [ 516.521691][T26997] CPU0 CPU1 [ 516.527036][T26997] ---- ---- [ 516.532394][T26997] lock(&q->q_usage_counter(io)#53); [ 516.537759][T26997] lock(fs_reclaim); [ 516.544262][T26997] lock(&q->q_usage_counter(io)#53); [ 516.552154][T26997] lock(&q->elevator_lock); [ 516.556733][T26997] [ 516.556733][T26997] *** DEADLOCK *** [ 516.556733][T26997] [ 516.564857][T26997] 6 locks held by syz.0.5833/26997: [ 516.570046][T26997] #0: ffffffff8fc394f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 516.578257][T26997] #1: ffffffff8fc39308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 516.587236][T26997] #2: ffff8880261d19d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 516.598642][T26997] #3: ffff8880261d18d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 516.609599][T26997] #4: ffff88802575dfb0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 516.620232][T26997] #5: ffff88802575dfe8 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 516.631104][T26997] [ 516.631104][T26997] stack backtrace: [ 516.636971][T26997] CPU: 0 UID: 0 PID: 26997 Comm: syz.0.5833 Not tainted syzkaller #0 PREEMPT(full) [ 516.636990][T26997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.637000][T26997] Call Trace: [ 516.637006][T26997] [ 516.637014][T26997] dump_stack_lvl+0xe8/0x150 [ 516.637039][T26997] print_circular_bug+0x2e1/0x300 [ 516.637065][T26997] check_noncircular+0x12e/0x150 [ 516.637088][T26997] __lock_acquire+0x15a5/0x2cf0 [ 516.637114][T26997] lock_acquire+0xf0/0x2e0 [ 516.637131][T26997] ? elevator_change+0x1b3/0x450 [ 516.637155][T26997] __mutex_lock+0x19f/0x1300 [ 516.637168][T26997] ? elevator_change+0x1b3/0x450 [ 516.637190][T26997] ? rcu_is_watching+0x15/0xb0 [ 516.637211][T26997] ? elevator_change+0x1b3/0x450 [ 516.637232][T26997] ? __pfx___mutex_lock+0x10/0x10 [ 516.637245][T26997] ? enable_work+0x17f/0x230 [ 516.637266][T26997] ? lockdep_hardirqs_on+0x7a/0x110 [ 516.637289][T26997] ? __cancel_work_sync+0xf7/0x110 [ 516.637310][T26997] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 516.637326][T26997] elevator_change+0x1b3/0x450 [ 516.637349][T26997] elevator_set_none+0xb5/0x140 [ 516.637368][T26997] ? __pfx_elevator_set_none+0x10/0x10 [ 516.637391][T26997] ? xa_load+0x1db/0x210 [ 516.637406][T26997] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 516.637426][T26997] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 516.637447][T26997] ? kernfs_add_one+0x477/0x5c0 [ 516.637468][T26997] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 516.637487][T26997] ? sysfs_add_file_mode_ns+0x259/0x300 [ 516.637505][T26997] nbd_start_device+0x17f/0xb10 [ 516.637528][T26997] ? device_create_file+0xf4/0x1b0 [ 516.637549][T26997] nbd_genl_connect+0x165b/0x1cf0 [ 516.637572][T26997] ? __pfx_nbd_genl_connect+0x10/0x10 [ 516.637593][T26997] ? rcu_is_watching+0x15/0xb0 [ 516.637615][T26997] ? __nla_parse+0x40/0x60 [ 516.637634][T26997] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 516.637660][T26997] genl_family_rcv_msg_doit+0x22a/0x330 [ 516.637683][T26997] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 516.637710][T26997] ? __lock_acquire+0x6b5/0x2cf0 [ 516.637729][T26997] genl_rcv_msg+0x61c/0x7a0 [ 516.637751][T26997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.637776][T26997] ? __pfx_nbd_genl_connect+0x10/0x10 [ 516.637795][T26997] ? __lock_acquire+0x6b5/0x2cf0 [ 516.637816][T26997] netlink_rcv_skb+0x232/0x4b0 [ 516.637832][T26997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.637853][T26997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.637875][T26997] ? down_read+0x272/0x2e0 [ 516.637888][T26997] ? genl_rcv+0xd/0x40 [ 516.637908][T26997] genl_rcv+0x28/0x40 [ 516.637926][T26997] netlink_unicast+0x80f/0x9b0 [ 516.637943][T26997] ? __pfx_netlink_unicast+0x10/0x10 [ 516.637958][T26997] ? netlink_sendmsg+0x650/0xb40 [ 516.637974][T26997] ? skb_put+0x11b/0x210 [ 516.637994][T26997] netlink_sendmsg+0x813/0xb40 [ 516.638014][T26997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.638032][T26997] ? aa_sock_msg_perm+0xf1/0x1b0 [ 516.638049][T26997] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.638065][T26997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.638081][T26997] ____sys_sendmsg+0xa68/0xad0 [ 516.638105][T26997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.638128][T26997] ? import_iovec+0x73/0xa0 [ 516.638149][T26997] ___sys_sendmsg+0x2a5/0x360 [ 516.638171][T26997] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.638192][T26997] ? futex_wake+0x4ac/0x580 [ 516.638222][T26997] ? __fget_files+0x2a/0x420 [ 516.638241][T26997] ? __fget_files+0x3a0/0x420 [ 516.638264][T26997] __x64_sys_sendmsg+0x1bd/0x2a0 [ 516.638285][T26997] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.638309][T26997] ? rcu_is_watching+0x15/0xb0 [ 516.638332][T26997] do_syscall_64+0x14d/0xf80 [ 516.638353][T26997] ? trace_irq_disable+0x3b/0x150 [ 516.638374][T26997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.638389][T26997] ? clear_bhb_loop+0x40/0x90 [ 516.638405][T26997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.638420][T26997] RIP: 0033:0x7fb65db9c629 [ 516.638435][T26997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.638448][T26997] RSP: 002b:00007fb65ea10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.638465][T26997] RAX: ffffffffffffffda RBX: 00007fb65de15fa0 RCX: 00007fb65db9c629 [ 516.638476][T26997] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 516.638487][T26997] RBP: 00007fb65dc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 516.638496][T26997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.638505][T26997] R13: 00007fb65de16038 R14: 00007fb65de15fa0 R15: 00007ffc6b79cb68 [ 516.638522][T26997] [ 517.086735][ T51] Bluetooth: hci0: command tx timeout [ 517.105741][T25703] net_ratelimit: 170 callbacks suppressed [ 517.105758][T25703] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.137651][T25701] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.145528][T25701] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 517.171313][ T51] block nbd4: Receive control failed (result -32) [ 517.174365][T26780] block nbd4: Receive control failed (result -32) [ 517.181348][ T51] block nbd4: Receive control failed (result -32) [ 517.218092][T26997] nbd4: detected capacity change from 0 to 127 [ 517.225308][T26978] block nbd4: Dead connection, failed to find a fallback [ 517.238026][T26978] block nbd4: shutting down sockets [ 517.243260][T26978] blk_print_req_error: 138 callbacks suppressed [ 517.243274][T26978] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.260964][T26978] buffer_io_error: 138 callbacks suppressed [ 517.260978][T26978] Buffer I/O error on dev nbd4, logical block 0, async page read [ 517.267960][T25701] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.276983][T26978] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.293557][T26978] Buffer I/O error on dev nbd4, logical block 1, async page read [ 517.302076][T26978] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.314596][T26978] Buffer I/O error on dev nbd4, logical block 2, async page read [ 517.323075][T26978] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.333680][T26978] Buffer I/O error on dev nbd4, logical block 3, async page read [ 517.342777][T26978] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.347555][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.353098][T26978] Buffer I/O error on dev nbd4, logical block 0, async page read [ 517.369652][T26978] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.369916][T26779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.379755][T26978] Buffer I/O error on dev nbd4, logical block 1, async page read [ 517.393677][T25701] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.394716][T26978] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.412723][T26978] Buffer I/O error on dev nbd4, logical block 2, async page read [ 517.421196][T26978] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.431749][T26978] Buffer I/O error on dev nbd4, logical block 3, async page read [ 517.440110][T26978] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.449884][T25703] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.458145][T25703] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 517.465702][T26978] Buffer I/O error on dev nbd4, logical block 0, async page read [ 517.473602][T26978] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 517.483588][T26978] Buffer I/O error on dev nbd4, logical block 1, async page read [ 517.492786][T26978] ldm_validate_partition_table(): Disk read failed. [ 517.500272][T26978] Dev nbd4: unable to read RDB block 0 [ 517.500512][T26779] veth0_vlan: entered promiscuous mode [ 517.506107][T26978] nbd4: unable to read partition table [ 517.520655][T26978] ldm_validate_partition_table(): Disk read failed. [ 517.528136][T26978] Dev nbd4: unable to read RDB block 0 [ 517.532035][T26779] veth1_vlan: entered promiscuous mode [ 517.534024][T26978] nbd4: unable to read partition table [ 517.563137][T26779] veth0_macvtap: entered promiscuous mode [ 517.567672][T25700] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.573637][T26779] veth1_macvtap: entered promiscuous mode [ 517.587532][T25703] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.602082][T26779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.613659][T26779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.624937][T25701] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.634166][T25703] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.646576][T25703] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.658933][T25703] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.676824][T26779] ieee80211 phy49: Selected rate control algorithm 'minstrel_ht' [ 517.698374][T25700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.700173][T26779] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 517.706296][T25700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.734349][T25700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.742885][T25700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.884932][T16574] lec:lec_start_xmit: lec0:No lecd attached [ 519.127387][ T51] Bluetooth: hci0: command tx timeout [ 522.107499][T25701] net_ratelimit: 82 callbacks suppressed [ 522.107535][T25701] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.121705][T25701] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 522.237798][T25701] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.245550][T25701] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 522.357509][T25699] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.365272][T25699] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 522.477175][T25701] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.484944][T25701] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 522.597495][T25701] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.605328][T25701] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 522.897536][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 522.905556][ C0] lec:lec_tx_timeout: lec0