last executing test programs: 2.730049646s ago: executing program 4 (id=3616): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0xc00e}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}]}, 0x30}}, 0x0) (async) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 2.551462437s ago: executing program 2 (id=3617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x50, 0x3, "cd4b6abe42031763d02899c77f99ff5fe87a9d3ac869f3a860917523679a5eb46131471826390d810593448ba1ecbf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537"}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000001600156f000000000000000009005000083c48fa5604e015f92b8c86faf92d2e75b11cb984b596e40328ed4a36cbb8fc78d8dc3b8d8c9880e44b106f98471d6ca070fad60c2f967c9fd0c210430b935e271ab41198cc346f9f30aeb3513b855e8f13f28b1ab6a3faf203c9e1bd5dc10fcc5493ccdd1b2201659019e5edd23b5d85e74aac038f378edc732e95d0754947b3e3e24f9e6ede5cbcc607ef0d5e93fc2e78c180a764ce7c2a852152924b00000000000000", @ANYRES32=0x0], 0x18}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x4c, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x400, 0x0, 0x0, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0xed3a, 0x9, 0x8, 0x0, 0x4701}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x9, 0x8de3, 0x56b, 0x3}}]}]}}}]}, 0x98}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'vcan0\x00', 0xc02}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000100000000000b5c06d0024a4cb011924a81e256fe1b76b4edf6f1e68423110baac5347c040e6dcd207c674a617803b153046207bbab3f02e8144e14b7f2dcbfd9a066e8c5fccdf54026768e60a08b3623f9ab8a1a4b13216e167d9627200"/107, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0xba01}, 0x0) 2.163190477s ago: executing program 0 (id=3620): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641101fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200649078020000"], 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x48, 0x2f, 0x0, @remote, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x4, 0x0, [], "0696b459"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x80}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2, {0xfffffff8, 0xfffe}}}}}}}}}, 0x0) 2.053032063s ago: executing program 2 (id=3623): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000019000109000000000000000002180000ffff00000000000008000100ac1414"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)={0x18, 0x2e, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x8, 0xf2, 0x0, 0x1, [@nested={0x4, 0x66}]}]}, 0x18}, {&(0x7f0000001500)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.890339085s ago: executing program 1 (id=3624): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fd55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d146"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x2040, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.604689476s ago: executing program 1 (id=3626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @local, 0xa86c}, 0x1c) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 32) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x69}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.525284001s ago: executing program 4 (id=3628): r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffa) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\b'], 0x20}}, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x3, 0x6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x30, 0x3f, 0x9, 0x0, 0x0, {0x3}, [@typed={0x4, 0x37fd}, @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newnexthop={0x2c, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_OIF={0x8}]}, 0x2c}}, 0x40000) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x80) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000040)="773d731ff5bd9cb823b95106c0349fc1", 0x10}, {0x0}], 0x2}}], 0x1, 0x2090) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)="acc8cdbe10f3a2df60877f1bcfbe9ad06eb5933894d30e71c5ea834f30d7320f3d5577e4af0476db2610e20c6f57905fd4d4012a9e5c35ea4f369816cb", 0x3d}, {&(0x7f00000003c0)="fa022aa4b7cce930e15b34371d2550090a9aeca41f4d05a76e921a63ceafabdfe3eca2d24a63453039789e241d38007ea00a2c3cc0827c470d0b0b31c2a25d093a285c53027e25382d7eb3a70cd26c0991516c4e6ee547f760034c70dbd3124030517096c636f6dc42b4b4e857dc0826fc5a3da6a5d8b7f7cf9b52bb7095b991e7b40c3973f491cb", 0x88}], 0x2}}], 0x1, 0x4000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) 1.401725384s ago: executing program 1 (id=3629): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0x1a, 0x0, &(0x7f0000002540)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r2, 0x26}, 0x10) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000140), &(0x7f0000000480)=@tcp=r3, 0x2}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x1}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d94c8f9e9390"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x5, 0xf}, {0xffe0, 0x8}}}, 0x24}}, 0x4040850) recvmmsg(r7, &(0x7f00000005c0)=[{{&(0x7f0000000280)=@in, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/56, 0x38}, {&(0x7f00000003c0)=""/36, 0x24}, {&(0x7f0000000400)=""/83, 0x53}], 0x3, &(0x7f0000000500)=""/169, 0xa9}, 0xd96c}], 0x1, 0x40000040, &(0x7f0000000600)={0x0, 0x3938700}) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8001}]}]}, 0xfc}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x33, 0x1, 0x0, 0x3504, 0x2, 0x2}, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x6, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) 1.349058369s ago: executing program 3 (id=3630): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r0}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket(0x28, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f00000000c0)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r4, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = accept4$inet(r3, &(0x7f0000000300), &(0x7f0000000340)=0x10, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="1b", 0x1}, {&(0x7f00000003c0)="1cbe0f77e43518403162da74d96b843a1685a69ab257c464923baca22ae93d37e5878fcdb93f7eecc9639dd724d48558296914fa9726a9e3d6f11ec46c7e684b238f8bf9d7f762bfb94297ecf43249ef9765000000", 0x55}, {&(0x7f0000000240)="0606bb0d83071e053c4ab72e7a4f13c2b80e2fa33801bd3a734ced1a1968b586bef9cb8f6ac75f9d5b6a50f2a6687ba215d08dab76d14c71a83d715829d36a9b249ee5f64f867db15f136f1c81732c1bbe0a9e0968350ff84cc268e5ee0f39901d76b6af37084216fff642fb8678e0848a02f6c9231688bcf3", 0x79}, {&(0x7f0000000440)="dcf47ea56dbc7d6d41b92636e9494d81f4dd59340ba4cdd323af8faeab885bf8252bac155357a46a3aef35f33c95031b115bc7cb579f7f3f87e9ed2756c1093f414ba9a0113314bb5ff0ad030b6eca4d3bbc968e3b982e4a6de2609e73d1479bb2c15c467f1c55b25cc139a819f48b0d5db1e8cecb", 0x75}, {&(0x7f00000004c0)="67d7fbed46773ce2df612728be3efe4bf710c76e10dac885ff3d31a34d3a8939dbbd8458060b292fabc23b8ffecf8cbd190931af2b1429d3bbdae306f8b91b82e65829e23db6288e4b917d7f2041bb98", 0x50}, {&(0x7f0000000540)="bcf8f5ab9e82325f95b474481300e7ac526be16fd74c37d397503148232e328da00bb78065cfdb5191783decdfcfbffa3e1b097faf93cbd58b9b2eaabc2d64b08c0e3667e9d8104a9082dd9b625b4aafac2b1b6e7f6188f4385dbe713b76a9a1bcac6a05d3b59dc1f46865f6eb0c6b9880c97046ce6c889466ebbd06670d990ad62995ef0828047c48037323fd129d1c4517710a78ad2ec44ed59621cd421245c1945aaef89e6ea1a50e07f101b09f78d9099d391f254b5ee3cda0e048b3750b556e6c83bfedb54858d67f8cac4f9c92d4a0e49bdf2470d7de4f29f36eb302793099c06292082483c89cd6", 0xeb}, {&(0x7f0000000640)="e87cf7799a257ab3fb79c1f45e9e3feedc23f1ab86809a0eeb37aa50457bb05096fdcd768a47085a2f", 0x29}], 0x7}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000700)="98a2f2cee788cd877123f6f8d4e9a41b89635f23d6dbf009e10089ab2676984bb38423fc06bdb0166c8aeac3c212e0220a72fa34aa26ccba02369838793c047fef397b480e5fef65737f37498e74918c5590cb555f75b6bb949af014750accfda7aaea0481e165b739d4068e64f2ff560663d0f2a269457dd2c0f149ef52d4234a84f5fdb2", 0x85}, {&(0x7f00000008c0)="e592b56e0db94b7aed16b5834cdf6831a09c611677acc40a97565a8beb3bec9dfda09d426b32d69cbaff13777e74615014a0ec01e05c1453656a02e4f1890b80639095ec05a7822c9bc945ac40ae0616eac96968e7685ffc3513f6e84e9173c118050da73e0f47468cd26723bdff0f0118265da0060c191f68779ac97435e4c729c15ddaeb989bf6699e9babea696e26b15461ac21623536980883a1de6e59f8f59df87e56c5f8cbab483898451abe97c3bff5cc32995f17f5a1c32c7dcd54fe48a24250b9df0cdfd080b2b835ee2eaf5fb29b40c83d085c62e12bfaff1ba31b6c20a8267b5ee2dc47382dc8a0e33cb0", 0xf0}, {&(0x7f00000009c0)="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", 0xff}, {&(0x7f0000000cc0)="14aa95606b34338650faa93a51a9c234dd065efa44736ab53098e225b6c7e6995341f7aa6086fbba", 0x28}], 0x4}}], 0x3, 0x2400c022) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="f8134b4006e5213b3f6ed2ddfb90e21a1633e719185247d99eea3a14c8d1314d73e0de56e04ee14a3075e2e55a70e6b71df17ac8e4ada6d616d3bc2d155c4570244e46714c89770b1c577f15a9740cdb149234ead86f49393465557e1bf9d7c8471d3dc58fd1a57e4e6ed5f386da456942c96de31d116079c2cd594902", 0x7d}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ffffffff000000000000000003200000", @ANYRES32=0x0, @ANYRES8=r5], &(0x7f0000000d40)='GPL\x00', 0xffffffff}, 0x94) 1.319485945s ago: executing program 0 (id=3631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x8, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000800}, 0x4004081) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f00000027c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002780)={&(0x7f0000000180)={0x25fc, 0x21, 0x2, 0x70bd2a, 0x25dfdbfc, {0x18}, [@typed={0x8, 0xb0, 0x0, 0x0, @pid=r2}, @nested={0x245, 0x55, 0x0, 0x1, [@typed={0x4, 0x2d}, @generic="1fd288280a423d81586e87298c69f11219f60075fade4053007228e479e2ea1655db115644b13b1f97d0b7a18ad669422f56b3068ea999f079a269a78019f34f94a2a5d74f34666e2e07d4a1fc34c6f150c44217d2b52120f755d313a04edb0ea025", @generic="effc92062fa112de6a946972096bc1c4befb738a87f17be3c85118efb5d55ce2f777808440e82087da010c76fbd8479ba0aaafc97d7fd3a3f54594aeaa4d196398ed351604ecbe697b2310e09a19237cdcff2fe0aef9c907b5fa406b91f5284a917db8e62c86caca39b39bb11076875f8c86341b58b712984bd7f8bdd67097766fede60dd382fdce7c8edae430ea219a8d04e3ce4ed476a0b79e2e5419b8356646e5ab45c723e34ed1a675f4597a5ec126a2383448ab528aaa239c4432c39dfbe3a0665e9755abe0be743d54513a37f1cc8d97bdf0a40511f3ddc23d89f777545ddf7c", @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast2}, @generic="1a1c9072a4791b985f50447950f3dd4124909599ab656a88a95c79f5e75af989c447060201fdcf9871cb5b60a87a5de5664da96b334a5e76f9d39b5cabb4a77e486f299bcc36520204c4567fd0ad05c0d181351569ad48e2c6bbfd2b65b6960b8a312fb5f4103d4a73680a55585905b292aa537c2e6c3e260fc46152da1d6142bad182c1f9d8e323b4951ca518cf00f45594091f03d57aedf9f107de1d9dff62195654eee48b59673f68884aef1c7e9e4e5a3060de3ffc98638266663659b50a7da7fa327d1f6c06f91117e87dab9a5548d5b18628c165449f4d2b5d52e13322ada4677d"]}, @nested={0x64, 0x3f, 0x0, 0x1, [@typed={0x5f, 0x13c, 0x0, 0x0, @binary="b471fbb5c0c47995f41102f9d7e00aff529abc63fa52a1451cdc968c348f5fc53f589047ddb44c740e7b957bbf63bab2bda6227991597ce891d86b40feef25d2ea0a426ad787cff529852799f3189faaeb901223d6861d1025cf92"}]}, @nested={0x10a0, 0x71, 0x0, 0x1, [@nested={0x4, 0xc4}, @typed={0x8, 0x14c, 0x0, 0x0, @fd=r3}, @generic="2ddbe5204449519ee582a2f20a9cfae4591f8ddcb746c27fc972d567ad1549692998460a6b760bd316670615be6a079c3902598c0426ee4c5e4d47233816d980682958aab1f7b4119c370472c46b31bb1e166f99777404e0b6aeffe84ad200ba221b0fe4a2cd40c840f530a136f91d7fdd416a31a60a9e67cfd1807e5429cbbb8c0fc27b", @typed={0xc, 0x42, 0x0, 0x0, @u64=0x80000001}, @generic="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"]}, @generic="c21871143eaa04ff54184cfd1c36273b9f028162ee8b057cd7d534915d7e5cabd0630b0f8f705a8705eea202389f0afea957743495986cc90d3f03daf78d75dbdfdb8f39586d4baf6ff25c645e15bfcc099ebdd19b002f472bf1bfda3b513dfec42a1dada3af86b8fbd887757eebe5c81f95ab7da32063266c23ad1042b6e541f5542c6d39b890aee3bb353216531b7d48d74b2014998cf35f5ed90a0cd8f544b0072c787ead49f8a6d70f26250edf04635236964b3eda98a54eba9e838dc2f8d8b0e11aa1c04159f534244d4ab72ff491f65df70a43f0818f04f5dc", @typed={0x1004, 0x90, 0x0, 0x0, @binary="db90c8fc9cde16343baa80e8e5a971db1f46dd18c6dcf7d6ae81b0926179681bdc2d567fd3084bc68cc84010f6489fb77915fe9ad1091fee6d51732d72b3d8d4ad4c6c7bb1d25e1301f386aef413637502529014a22e4babc2626570d1c9b187ee6521ee16fcf20d2b514ff37154a1d1b442fa81b5cfdbe4e7e336e2332c97a765c28f3f44518b89d0894512e4250d206d0d2d3e1302625787aefe9c812a4fd39380b2d5bf71d0ee67d16052f6e817e202c9627703d4fcef1594de637c89808739b7ff1bf0f110950e21c08a84cd593e89775d603da31b38888d9ccb343be7d6239bf728d8789664c1653752d8f65b7f34df50f01f6feaa02092f0dacf51468e2518a2a20ee228a210fe8ee6e06c5e538509d461cadf39266070702af2ca791845ddbf78088c837546f48f4baf140287e805d284526d9e5be52c908715da9c323dbf4da358c6f95fba917ea4d6996f8ad27b880d15c945ca384925e83b86edfb9729ab73a765bd59d633bc25d8c68362bebf9d5080ab693feaed6ac008affea6d0095a467fd206022086e6b74421b79c243d98c3d0a2d0e834a0ec5021749667a772fccf414ba16c56300673d017c2bc9da1c0b5afb7ff45ca46acf08b4f55639272bcbfdb62eabcbb1e339b34188aafcf65a9bff62b424d93d34cde37287ce0f6854fe5d5bb8f0101a7234848d85b4bfc90bea4381a2f7ca5b7ba63c011afeb2e189b862236c2051e69693bfae3ebd38285767bac1aba1ee7c005ba5f5f1aa84c2ce1e387efed182ac3c2a6c03e0953b0ea2b7a178c19456e1fa5716551d543e0dd3af6d29c24cd507623ee7e1f1e8cb4ccc3437f38e7024beb39ace0b9004b1b9a7825eb2bfd8175b9320a92ad620c427541714f9f3b6bda87c51e9e40e25f8f143e7058cb72f6072afe6109a76678bccea32b4f9fc1745494b4596a1cf665e990b949962fb5d1dcbb4fe06485ea98b937879ffe8df764cfbba1d83c829eb021be8fd7b2a1c52a97193a1d442d2009a58cf4718eb747d2a0f10066c8cbc0ef725ea4ed1181b412d6d9e530034449e9ee23c363e7381316b0ff43a47398abefccae657d160909964d0509b14bd7f4b2b4918f9f5a1f25d79afccce6c57a6b248a81a0666dbcafc93fa74b8a87b99da41fa98d1e87a32875a6c78ff7e1a8142deea81203f3adf0dbaaa5727e68c0d10a2330cd5a66bc3d45604051f240c5ae43a5566fd125a8daf800d9d11a193e0c8655effc420424515ef1e5e324d50bc6a7ea01ee4afed214816069d27532a0c7ca65629990ddf727572398b1133ba5d9a3370a72fbf249fe7b05d2388af3daa7c9e1729dce12dbfaed1b01a38b67518182c165ab2e04bbe6ce988ce1799fbfe55c70be0f10821ce1af1801da42cd43d4f01200d2734495ba675887a945888068e42d0a22758fe16ae9b3c32a07a599abf15cebf305ae89a46947b67214bb355449918c641535154ed3dcfaf59500a13a862470516b0245dce0f6ce9800fe4f2a3b8a33419692af09439c8b8682b2039993296f8f63da16a4291cc90fd8cf3df310bdac4c4b1e222a95926508329017ab0022bfb7f09028c25baeca7c4bd62b9831c91bd21bece0c6c1b80594307934e758b236d38432f23d7b21b38ca462de5f7792157c05d6171882a106da37c708e4a7a7a0596b2d02c577ce478630335a328d70fb4df233d94c4a663e7f1844f325c263599889f9105c6fa64d0c3638c95ec3f702d7fbcd3f27c0555eaa7fba821f7570ae2f68dcf413e8d91762e4ea33bb91bfb62c221305090efb0ce013627fe55275e654b9a444b346a403a48e8c8f316528e38af292a6ee7425e88faf9759e67507216317b7fa40e6ec16173ac321aae01218e2e0224a177dd2f73560ccbe3f9d992e20521847c2e01d82bc89c7fced88b7edd2769bed2c5529606d83707b2dc0bf232a635427b8789b9c16540a84ca6091b25f1210b5005c587ab042c5425023b269823fd79caa0669038f1be916d806023f555b285a67e343b1aa6e4c760b4d1fa4196fb3c7f3c327138442f7981208d875fabf276a4725b81f3ac7f6e29ed7e4e0cc739a0ed24c2338599957507a7ab2609c9cad4a6e4e558a72e141fe7148c5e64cd5cee2c1882a27d3dd20814c85d7093f0d5f044b37808b2a9e89c3d7f29b31b11e6c12800ee13497d3ed0949c7c513b567959f32cf48488e0be00d11f3cbd4128fae7875860006622f6f7cb657341631e63398a959e7c759e47d9811bde0e58c2675ddb170047b3cbee035a36ca8bca3af33833176a44789622373ed4973abf281004056730b9c7428b9c4c4be4c24385f79a3fb9572903217f6450aeed1e21d6157ec96f62bf17baf92f07dda56f30015efe1df4791ef86421f83aa017691a32f72cd8384ac52897aac4087c9fa6cf03891dd5c86283046145aa39834c88f668be8e9c5f6ef356a10f28f1367f3b7fbb95360cf8b52b768d2cd3ea92cb086e4ce8eebc69001e22ed5bfa175035e41eb23ede665628e045e9be50529f42531756c10247c1a7e07bc5ef9bc5148ede824e5f8b85ce74d604ddbc713ccac205d9cae77f20ed91d547ec7d53fd109f5a2d0e0ced538cae4ab861cb18ef22706647f0ddb478183704aac43183829d1740d089f2c7eebad7de58f9e3ec6871953fc7647f4e7c9d57948d615f154d9162dfd9d8527eeb57b5c9b4b0c829f3acce0b03bf05aba89e7ac8acbf538a1251d07b3c240ab6e6a68ed6051476dd18e17087745195db2c2fdc94d784d3f0d0c62ef49083e1c9e22ace51ad5f9f5d90047ec25cf45604955f8233f85509824032ae627a17641e8461d70a078305243b2c6d176f7d355fe66398fe2d352e9a545ac6c06e20c28f6ce0941ac507a4ccbef95a878b09feae0a98c7613475633f70d016a1ff09dd7574a3439b8ceb24197933628ba5bbef3ca057f1fa6faa52c418d7f0dbcf94af9e64064638f35c0c5468897ef42779ec3905e63f2b888a69dfe13c9314571de11277e010e9be93506f02bc403262b75b1ad8dcce215b87da8878d4c2c08630be726b6111e0853b7230347a4ea408d4bfd9d75b582becaba8939f66fe311976e88031371af056f488e4a5e060394da381d5ddf6ee42a1f327d113e36d3ab27799c8e28664552b09bc12c577f0de1ca097f73122e485a428ebeba984d6b258548e95bdec88955567b95a313d40d0489f963d7df720eec4f0a21cf1d09bad18be7b43545f8281525f3d594a7bc3e0f3554daac7b7b5ccb26fdbbd495e90198b1427d4767d2bdbc28a2f9cb2cd591d0abd8869c4e396aa3c9c14154ff86ed2473af1fc35558378879c7e4d66e3e05f18a8836c07742469164f5613b49e7d9db66648528f3ed6751536dabc7f239faa6b281028d41fc09cafae2f2583818ad270b232d0e94da2d2ff180907534aea9c9b7dbfef500d3669ccf28f7f50d3d46ba205c213667596008da7b497b60fdd3621f72b6098784bc5b488781b71bd3130c3406b6090b5c5373c85df9042a92324af31b616563a2ae1b68a1f09a42847daa66f2f834ef6fc99466c52ef98778fda715df0273438a52544b8e1cbbc11b88cf443567cd40ccd26034bddcafe7268000ebe89976320e46a1636400e1f69605474e51f2fc59609632c51cd6bb1b820fd0dd128bd33f8a11430cc0c6fdf612fd3247ecc1cdbabedae3d41c04f41bd0fde5f7c9ad86fce43a0ada636d2983da44e7feb37e04c9b9ef970cb0c151d1f160897b51452eb56900afa78764b9c85d59eb438ad94cc27ab5d87d3b7a858f61d309e5ffee338db38127d41dc11ef4416ba313b1c13e5a63639b5d956f7f8cfd80bd59e3ec7f995912e9af78795d45924245403199340b9520a5914f77ac7c1ff93f81e5b344d6ed710cf071e48751569b9655db42187782ab02d38ba5383e2dc40af6648f6dea712d934feffe25686a8a95169ee316e4f390c19cd9d87bc2c5af62086293473c24f6f193b1cf1be5bad2a87a8777c2dd7760f63d249057610378d050cec4052aa2bad8c183d76f0987a79419c66d6a9bc8e067bfa264dad20317862babc3a03fc9aa2aedf5ec22fdd5a288ccabfef27e24fa5ffeb0f715e6c1ea7a3bd85ffa8026841694c885563ad28911ccf898ac0172252852a153918f592d04c4ca2727862d1e7f99bf8f790c7d8547b905c2448bc53bfaefb8f4305dfa33f52b49713981a1f5c791bfd1b86765d9e621de0ce06c01ab65565b3f6c963f38f5c643bfdb3115601a8883a8b0c52a460463aef4471e031d628c80e61835fa20527154d042ebdd1f7a2bcb80b37684e8e566179af7c64a7a080f986b5f223ccdaa07cca86a9ba04fd8491e91f44ed5d1e369bf6b9ea39097bf4f8db5f9ae1804c6c3dbeddb658b93c8982ebed3dcdeaedfc34802b374f436219ef07c5ee8072ebd731c39b1f5ed1d2cf6db5e26f55ad35cbc9379046c122adee7caa4d3487ed58d7165223101c4c65dc3fe92edabeb0839cb2ed5b85a165949326b83a0d84aa3672357cbd83712b532e9199f49a48c8c75f08598e1e66110f29b9db3ab4909627c10678bbe29c5d0165d5ce2770ba2e232a9aa4e3bf2703902785210a2aac7ef5437670dc1496db153ecbb1408c9ef2b7c7fa0908255e7edde550209371198342c0351e282fb9f2bf2804e9edb5aa19e330433932ba64f797c109a4b0db0f74142c953963451d934298189f5b0f165820edba100b400bb46e027c0ca0e13481452c91c03418c159c88313315065049ae5aa106f3645d108d67543e66fd00a1e9a44352b5ec25a28885109d15e5c9729c455b57331ea585afba06ce5720eba4bcdbbe4fdab6286304be8fb6e6898d1b264f14e828ffa961bb03825456f3f124bc58079034005a14ef1acd0ada8d2880debd2e91c266a1177a74d54ef3714cbb13b820b425d8ab908bfee787c0b180ec922e280f5a09e32325cec65471c938f51c1e0a08a4cf627686cecafda84b7434d8bb4cd0130e336f9503f43f4ca462f7f3ef47a7c716b07466879ee57b16b496e0ed31c6966d47379a1bab747efcd58d97ca7d756c14cd9c160a3ce153b2738add6320d5330336fc3e8a85c1f58bf02a5b48519b7c32c961d6ce64cf7090385a4c7701bd642145a9772908184c4b01709c20ae7249df427c8bb932d5f1dd81e9864fbbde4a7c379faa971e7bfc3822961ca31104c1cebff45df8d897c3a6f5bd88269a2aee7e46c023534b45b094a192e1ea2b01c48d8b3d2a5331412732d2a0037fa10944a8f491358e0a4a68c294573d52d96843b754be4370503375e9cb2017cf4b9ab892ead66f72c98c5a0930567904944a415bcea981e9cc58421db4412fe74ce0c1ffe6bbc0b9394e9e8195189cfc1318a94a21e9a27f1c9389f030ee6ce474df88ae78c16601255290c5201612f054bc84bf33174df7778dec899eb8bf4074ccb15f85069e8f5d4c83fd7962de15cb2d967d70e74f2b469ac9bf7b1ba6dbe9e11dd219b73f2bd06e0682296c8650c9e33f60c1719cf877a7f3a6ec9fa4a054419eef2ebbf99b537de2a2d4c32b50a352129b556bc92b20132ced9ea4a4f84512b8c28a05d585b9a3a5d6ee0a1051429d6b7b93e2485587604c00dd50ed83f01f66219e19a47e91983e28d3bb4546d256f6694b7c16462b202f3135309c99a90d86e83c0478493fa853618e88fbd61f2650e1f6ee94ff29af16e82457a68eedbc4aeabd89ac033d234c3441719a367881e01b14d6d58dc314dbc70173d5ca8ed57f4a629c5e77cd0f04d6ac44"}, @nested={0x1b1, 0x15, 0x0, 0x1, [@generic="443a00afc667e259e5144ce956257fbad6ca48199c13d50bd4698d0598f832521e2be6de3ccaec06ea446b923e2bb66e0aee82b1f8cd467f3edd114b84bb18095ab8165f5187975b8c476df6a3c934836a2116c1566b8c45c6357da630552cb2274c26d655489894f64eed169f1c17f9edf593c244812360d33a552a33de303b82110fa7bfb1250b0b516dd4ac4e707a719cf53afea89d29d2d7538376c0125a0b01241cd32d09f51334c2275952c852d4ae", @generic="45dc9afc51e1024e491e16ae96000ea596a21942e045d943b87b0641d190b14ad528e7ddde4564551ed545f03b40bc2ad4ac4964e0d72cd76f1e3ec6af32d28cd308a50cafaa42f9d0f6c313f228512ca20aae7589dae3ee34672bb7d885410a94116442b26c8f070b66afa223aa091882ce96c50eb72c872d10ce4e32448f295eb38e8507d7f5836e1a23527fcd0b5f708fad81632fa211a4d12bf9af759b1e859ee55304d559804281f3c3deeec720db712bd5238201a4a9b80bc8f279bc53c530e7bf3ce8b6d51a38bed5d6d7b1945e38638ca3a85cac5c4bb7", @nested={0x4, 0x116}, @nested={0x4, 0x9b}, @typed={0x6, 0x11b, 0x0, 0x0, @str='+\x00'}, @typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x97}, @nested={0x4, 0x4e}]}]}, 0x25fc}, 0x1, 0x0, 0x0, 0x4008040}, 0x8894) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040811}, 0x8000) (async) getsockname$inet(r3, &(0x7f0000002900)={0x2, 0x0, @loopback}, &(0x7f0000002940)=0x10) (async) clock_gettime(0x0, &(0x7f0000006e80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000006d40)=[{{&(0x7f0000002980)=@tipc=@id, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002a00)=""/55, 0x37}], 0x1, &(0x7f0000002a80)=""/135, 0x87}, 0x4b}, {{&(0x7f0000002b40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002bc0)=""/127, 0x7f}, {&(0x7f0000002c40)=""/118, 0x76}, {&(0x7f0000002cc0)=""/239, 0xef}, {&(0x7f0000002dc0)=""/197, 0xc5}, {&(0x7f0000002ec0)=""/112, 0x70}, {&(0x7f0000002f40)}, {&(0x7f0000002f80)=""/219, 0xdb}], 0x7, &(0x7f0000003100)=""/121, 0x79}, 0xf}, {{&(0x7f0000003180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000005680)=[{&(0x7f0000003200)=""/133, 0x85}, {&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/208, 0xd0}, {&(0x7f00000034c0)=""/128, 0x80}, {&(0x7f0000003540)=""/143, 0x8f}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/45, 0x2d}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/5, 0x5}], 0x9, &(0x7f0000005740)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f00000068c0)=[{&(0x7f0000006740)=""/118, 0x76}, {&(0x7f00000067c0)=""/29, 0x1d}, {&(0x7f0000006800)=""/132, 0x84}], 0x3, &(0x7f0000006900)=""/237, 0xed}, 0x7fffffff}, {{&(0x7f0000006a00)=@phonet, 0x80, &(0x7f0000006c40)=[{&(0x7f0000006a80)=""/242, 0xf2}, {&(0x7f0000006b80)=""/159, 0x9f}], 0x2, &(0x7f0000006c80)=""/176, 0xb0}, 0x3}], 0x5, 0x43, &(0x7f0000006ec0)={r4, r5+60000000}) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000006f40), r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000006f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006fc0)=0x14) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000070c0)={&(0x7f0000006f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000007080)={&(0x7f0000007000)={0x5c, r6, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000007100), r1) (async) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000007380)={&(0x7f0000007140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000007340)={&(0x7f0000007180)={0x1a0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb8f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6f5, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc52}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1d3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6dd7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x392e}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8001}, 0x20000081) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000073c0)={0x0, r0}, 0x8) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007440), r1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000007480)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000007540)={&(0x7f0000007400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000007500)={&(0x7f00000074c0)={0x40, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async, rerun: 32) pipe(&(0x7f0000007580)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000075c0)={r10, r7, 0x25, 0x2, @void}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000007640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r10, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x28, r8, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xb7dc, 0x6a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008084) (async) sendmsg$kcm(r10, &(0x7f0000008a80)={&(0x7f0000007740)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000008940)=[{&(0x7f00000077c0)="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", 0x1000}, {&(0x7f00000087c0)="8e2587fdf800282d36869ac1f365a43acac8c5d4e5ad8406cfbef116287684ca382dd8e7d25720e303390bb07c1f56ae918d8adbfe920dcb02cc2bcfb9be5433a2619fdfed8f5c72ee4284089cb74d083d9f0f1d211f7516fae2bbc616b048a9c8d1f067375c9e3bf928a4ab1e023231c2f97ed70ca442d671", 0x79}, {&(0x7f0000008840)="1adb755e4e799741f0638f47231401fdab109387d80855886f9f5adfa95e16f2a956689d1eea459237595596ba80285d314e673a4ed22cc0fe2dd3010ec15dc5d0377ea588fe5c4315ce9344a5b2b1ea029c481943fe392226b786b1af31640316631d5ab6c5a3dcd921000e5e3c93381a275a34260748b206cc7eb085723d658f2b5ef1442c8ba693bea0f499365424084bef82f507e8868624503bcb1e695cc4a5f5e1048a92e2befa5af1d1", 0xad}, {&(0x7f0000008900)="d789eb857efacbe380c4726510bcd1e96d3053037c08c53a03266b5c9b6d7a4d0af6db89a5d0ad9bea0a6ef6caca8528", 0x30}], 0x4, &(0x7f0000008980)=[{0xd8, 0x111, 0x9, "f5bb15f5c2a5b721c36cb114cc7e98ccaeb332b37d9b0dcaafacc6d09d3fb76595194f82a30ecb38ea0f06c0655a0c92647b2509ea562e58cfef5ca59ed97d036901f9d8ed2e62d612225147ee7e3f740a74c738bafba3f8acffcbc500c5f61019c4d202c34e90a1fa8fd9aaa24f7368bf4c9c4275d49e5dddf021621c81a382c3ad53eda455e3577fe90e725c94c255af92631b68f4b875751d7e5e1c384f360adc5ad560fb1983c03c602554738c717c196f0d05c8e978d2b89683a711b92c02daec"}], 0xd8}, 0x24008005) (async, rerun: 32) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) r12 = openat$cgroup_ro(r10, &(0x7f0000008ac0)='cgroup.freeze\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r12, &(0x7f0000008bc0)={&(0x7f0000008b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000008b80)={&(0x7f0000008b40)={0x30, r8, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xf524, 0x5f}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) close(r0) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000008cc0)={&(0x7f0000008c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000008c80)={&(0x7f0000008c40)={0x20, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x801) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000008e00), &(0x7f0000008e40)=0x8) 1.181821009s ago: executing program 1 (id=3632): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000900), 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x10, 0x38dc55cb, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x21}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x0, 0x6, 0x0, {0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x800, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20040810) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x4, 0x4, 0x418, 0xffffffff, 0x278, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x180, 0x1a8, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x1, 0x1, [0x2, 0x8, 0x1, 0xff80, 0xb, 0xfff3, 0xff61, 0x0, 0x9, 0xfc00, 0x7, 0x6, 0x4d9c, 0xf01, 0x7, 0xff4e], 0x7}}, @common=@srh1={{0x90}, {0xff, 0x9, 0x1, 0x48, 0x6, @loopback, @local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0x0, 0xff], [0xffffff00, 0x0, 0xffffffff, 0x835a71402aa4f11a], [0xff, 0xffffff00, 0x3375609c8e6be76e, 0xff000000], 0xca0, 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0xffffffff], [0xff000000, 0x0, 0xffffff00], 'bridge_slave_0\x00', 'dvmrp1\x00', {}, {0xff}, 0x2e, 0x28, 0x3, 0x52}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 1.180802647s ago: executing program 4 (id=3633): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@allocspi={0x1f0, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20}, {@in6=@remote, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x4}, 0x4, 0x10}, 0x2, 0x1a0b1}, [@etimer_thresh={0x8, 0xc, 0xc4}, @offload={0xc}, @sa={0xe4, 0x6, {{@in6=@remote, @in6=@mcast2, 0x4e21, 0x1, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3c}, {@in=@private=0xa010100, 0x4d3, 0x6c}, @in=@broadcast, {0x7ff, 0x2, 0xfffffffffffffffb, 0x5ca42eb8, 0x8, 0xd, 0x101, 0x2}, {0x2, 0xdf, 0x6, 0x2}, {0x40000401, 0x2, 0x3}, 0x70bd28, 0x3506, 0x2, 0x1, 0xd1, 0x55}}]}, 0x1f0}}, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x29, &(0x7f0000000340)={0x1000, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0xfffffffffffffefc, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r3, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x36}, {0x5, 0x8e, 0x1}}]}, 0x4c}}, 0x8000) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x4, 0xf8}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee84400008f080000000019b0fb0bba", 0x41}, {&(0x7f0000000e80)="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", 0xfff8}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeb0e271dc700b581440284", 0xf}], 0x4}, 0x8011) 1.137907307s ago: executing program 3 (id=3634): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x25dfdbfe}, 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x10, 0x0, &(0x7f0000000280)) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="ecffffff", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.113539195s ago: executing program 0 (id=3635): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x0, 0x6, {{0x1d, 0x4, 0x0, 0xb, 0x74, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast2, @local, {[@rr={0x7, 0x1b, 0x23, [@broadcast, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010102]}, @timestamp={0x44, 0x1c, 0xca, 0x0, 0x5, [0x7ff, 0x4, 0x3, 0x9, 0x8001, 0x3]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0xa, "0feece8233961fae"}, @timestamp={0x44, 0x18, 0x88, 0x0, 0x5, [0x1ff, 0x3, 0x4, 0x314e, 0x5]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getqdisc={0x30, 0x26, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x0, 0x4}, {0xffff, 0x2}, {0xfff3}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x101) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3], 0x38}}, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f00000004c0)={0xffffffffffffffff, 0x1, 0xdd, r3, 0x1000}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x9c, 0x2c, 0x107, 0xfffffffc, 0x25dfdbff, {0x1, 0x7c}, [@nested={0xfffffffffffffd4c, 0x1, 0x0, 0x1, [@nested={0x0, 0xbb, 0x0, 0x1, [@typed={0x0, 0xcb, 0x0, 0x0, @u64=0x40}]}]}, @nested={0x7d, 0x2, 0x0, 0x1, [@nested={0x0, 0x132, 0x0, 0x1, [@typed={0x0, 0xc0, 0x0, 0x0, @ipv4=@multicast1}, @generic="6cd0382c109b6d164601f90ee11d62951dedd882", @typed={0x0, 0x126, 0x0, 0x0, @pid}, @generic="7c632d6f6120850b062b781d70e80ac0a08e5ae52c40c7314bc94c971e9f7ece84588e0c3bdc59eba4957349c867de3d5060aabbeaa0d698fa4ddd9e8197aa6aee24e1803a3ed0c00daba2ecdf94ad9e47cdbe98603cd2a48b57a2895a1755e1acdd"]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10000080}, 0xc010) r5 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="0a000000010001", 0x7) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="10000000", @ANYRES16=r11, @ANYBLOB="110725bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="0700000156cc06a65265680034eed40b255a061b38e3aa1faacf61352eed1542dc3a5bc3516756771303", @ANYRES16=r11, @ANYBLOB="00022dbd7000ffdbdf250a0000000c00018008000b007369700008000600780000002000038014000600fc02000000000000000000000000000008000300010000000800050003000000440003800800010000000000080003000200000008000500ffffffff060007004e20000008000500ac1414aa060007004e200000060007004e220000080001000000000010000180090006006c626c6300000000"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x48814) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FITHAW(r12, 0xc0045878) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f00000000c0), 0x8) splice(r5, 0x0, r7, 0x0, 0xf3c, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000bc0)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x8000, 0x7, {{0x4b, 0x4, 0x0, 0x9, 0x12c, 0x67, 0x0, 0x90, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x31, 0x2, [{0x0, 0x9, "bf2fd1ee259078"}, {0x5, 0x11, "4c76eb23ebad4676448116391c39af"}, {0x0, 0x9, "381a6879ca1d7f"}, {0x2, 0x8, "f1614999b35e"}]}, @cipso={0x86, 0x1e, 0x3, [{0x0, 0x2}, {0x0, 0x5, "9e4411"}, {0x6, 0x9, "d3e427ae9ec60c"}, {0x6, 0x8, "2a039dfdc44c"}]}, @ssrr={0x89, 0xb, 0x75, [@rand_addr=0x64010100, @local]}, @cipso={0x86, 0xb, 0xfffffffffffffffe, [{0x2, 0x5, "036e37"}]}, @timestamp_prespec={0x44, 0x44, 0xe1, 0x3, 0x5, [{@rand_addr=0x64010101, 0x2275}, {@multicast2, 0x9}, {@local, 0x3}, {@broadcast}, {@multicast1, 0x6}, {@local, 0xffffffbd}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x6}, {@broadcast, 0x7}]}, @lsrr={0x83, 0x17, 0xed, [@rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote]}, @cipso={0x86, 0x35, 0x2, [{0x5, 0x12, "d94f506fe04bd32af3b36333b3ca0000"}, {0x6, 0xf, "f35f4f86b6102a34033d00d36d"}, {0x5, 0xe, "b6e2a97c8ab348dc89535d46"}]}, @noop, @rr={0x7, 0x1f, 0x4d, [@loopback, @loopback, @multicast2, @multicast2, @local, @loopback, @rand_addr=0x64010101]}]}}}}}) 957.972438ms ago: executing program 3 (id=3636): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000900b490e288c86190893b5876678785c52f401b9ad6e01ca7223c712b2b926a7db6d4b37af426b3e29f73c64ad5a5ea047dc4a3ee2adfed22799b09240233125a0caaeac5e7246f981560d4b325b018a90c2d05811fc8c17e278fc456de18bc98ae3248dd0c7a21", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800140000000000"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @broadcast}, 0x10) 957.178509ms ago: executing program 1 (id=3637): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000280)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000001300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000a00)={0x880, r6, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4f}}}}, [@NL80211_ATTR_TID_CONFIG={0x2a8, 0x11d, 0x0, 0x1, [{0x1e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x1, 0x3, 0x8, 0x2b, 0x101, 0x10, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x26, 0x36, 0x60, 0x36, 0x36, 0x12, 0x1, 0x1b, 0x3, 0x6, 0xc, 0x4, 0x24, 0x16, 0x12, 0x1, 0x2, 0x1b, 0x1d, 0x0, 0x16, 0x18]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x8}, {0x6, 0xa}, {}, {0x6, 0x5}, {0x7, 0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x1, 0x3}, {0x2, 0x3}, {0x4}, {0x5, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x36, 0x18, 0xc, 0x18, 0x48, 0x9, 0x9, 0x0, 0x6, 0x1b, 0x2, 0x6e, 0x12, 0x24, 0x24, 0x48, 0xc, 0x6, 0x60, 0x16, 0x1b, 0x24, 0x4, 0x0, 0x5, 0x2, 0x0, 0x2]}]}, @NL80211_BAND_6GHZ={0xe4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x0, 0x3, 0x2, 0x4, 0x401, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x36, 0x60, 0x18, 0x24, 0x18, 0x5, 0x3, 0x3, 0x16, 0x9, 0x6c, 0x60, 0x60, 0x6c, 0x1b, 0x0, 0x1, 0x60, 0x12, 0x3, 0x4, 0xc795e9f8c0e2826a, 0x1b, 0x16, 0x1, 0x6, 0x9, 0x16, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x3, 0x5, 0x6, 0x8, 0x8, 0x29]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x2, 0x431, 0x7fff, 0x5, 0x3, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7f1e, 0x3, 0x8, 0x2, 0x96, 0x7, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x1, 0x3}, {0x7, 0x2}, {0x3, 0x2}, {0x1, 0x8}, {0x4, 0xa}, {0x6, 0x1}, {0x0, 0x6}, {0x5, 0x2}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x5}, {0x1, 0x1}, {0x2, 0x4}, {0x5, 0x3}, {0x1, 0xa}, {0x0, 0x7}, {0x2, 0x4}, {0x4, 0x6}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x1}, {0x7, 0xa}, {0x3, 0x1}, {0x2, 0x9}, {0x0, 0x1}, {0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x1}, {0x2, 0x9}, {0x5, 0x9}, {0x2, 0x5}, {0x4, 0x7}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x8}, {0x7, 0x7}, {0x6, 0x7}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x4, 0x1}, {0x7, 0x11}, {0x2, 0x3}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x4}, {0x0, 0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0xa}, {0x5, 0x9}, {0x3, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0x7}, {0x0, 0x2}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x13a2c71aedd271b5, 0x6, 0x60, 0x9, 0x16]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x1}, {0x6, 0x6}, {0x5, 0x7}, {0x4}, {0x4, 0x9}, {0x0, 0x7}, {0x5, 0x9}, {0x0, 0x4}, {0x5}, {0x0, 0x9}, {0x5, 0xa}, {0x2}, {0x4, 0x6}, {0x7, 0x9}, {0x6}, {0x1, 0x1}, {0x4, 0x2}, {0x0, 0x6}, {0x0, 0xa}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0x1}, {0x5, 0xa}, {0x4, 0x1}, {0x7, 0x4}, {0x3, 0x7}, {0x7, 0x4}, {0x3}, {0x0, 0x8}, {0x3, 0x8}, {0x0, 0x3}, {0x4, 0x9}, {0x2, 0x5}, {0x3, 0x2}, {0x5, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x7, 0x19}, {}, {0x5, 0x7}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x7}, {0x2, 0x3}, {0x4}, {0x6, 0x1}, {0x0, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffe}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x584, 0x6, 0x38fe, 0x100, 0xfffd, 0xa13, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x9a, 0xfee4, 0x8, 0xffff, 0x38, 0xfe00]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x0, 0x2, 0xff, 0x7, 0x7, 0x7, 0x401]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x5b8, 0x11d, 0x0, 0x1, [{0x3b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x384, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x73a, 0x9370, 0x3, 0xff, 0xfffc, 0x1a, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x8}, {0x1, 0x3}, {0x1}, {0x3, 0x2}, {0x5, 0x5}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x60, 0x6, 0x5, 0xb, 0x1b, 0x24, 0x5, 0x24, 0x4, 0x1b, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x0, 0x7, 0x401, 0xb, 0x79, 0x5, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1000, 0x2, 0x0, 0x5, 0x3, 0x4, 0x3b40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xff73, 0x40, 0x2, 0x0, 0xffff, 0x12e, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdf09, 0x1, 0x3, 0x51, 0x1, 0xaa2, 0x2, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x80, 0xe, 0x5, 0x2, 0xc6b1, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x10, 0x1000, 0xfff8, 0x4, 0x2, 0x5]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x8}, {0x7, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x8}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x4}, {0x1, 0x2}, {0x6, 0x7}, {0x5, 0x9}, {0x6, 0x5}, {0x0, 0x6}, {0x5, 0x9}, {0x5, 0x5}, {0x1, 0x4}, {0x2, 0x6}, {0x3, 0x1}, {0x7, 0x3}, {0x5, 0xa}, {0x3, 0x3}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x7}, {0x6, 0xa}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x2}, {0x3, 0x7}, {0x5, 0x9}, {0x5, 0x8}, {0x2}, {0x2, 0x6}, {0x7, 0x3}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x7, 0x9}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x3}, {0x5, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0xa}, {0x4}, {0x6, 0x2}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x2}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x3}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x2}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x9, 0x36, 0x3, 0x9, 0x16, 0x26, 0x12, 0x6c, 0x12, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x1, 0xd, 0x0, 0xc, 0xe, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x2}, {0x4, 0x5}, {0x1, 0x6}, {0x0, 0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x1}, {0x2, 0x9}, {0x5, 0x7}, {0x5, 0x8}, {0x6, 0x8}, {0x3, 0x2}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0xa}, {0x5, 0x8}, {0x2, 0x3}, {0x4, 0xa}, {0x5, 0x3}, {0x7, 0x7}, {0x6, 0x4}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0xa}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0x8}, {0x1}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x0, 0x2}, {0x0, 0x7}, {0x0, 0x6}, {0x4, 0x9}, {0x4, 0x8}, {0x4, 0xa}, {0x4, 0x1}, {0x2}, {0x0, 0x9}, {0x6, 0x9}, {0x4}, {0x0, 0x4}, {0x3, 0x1}, {0x6, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x24, 0x0, 0xc, 0x18, 0x60, 0x9, 0x16, 0x36, 0xc]}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x48, 0x4, 0xb, 0x2, 0x1b, 0x30, 0x18, 0x48, 0x1, 0x36, 0x60, 0x6, 0x2, 0x36, 0x6, 0x6, 0x16, 0x6, 0x48, 0x12]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0x4}, {0x3, 0x4}, {0x2, 0x6}, {0x7, 0xa}, {0x6, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x3, 0x7}, {0x4, 0x1}, {0x2}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x1, 0x9}, {0x4, 0x2}, {0x1, 0x3}, {0x5}, {0x2}, {0x5, 0x8}, {0x2, 0x8}, {0x5, 0x3}, {0x5, 0x4}, {0x3, 0x5}, {0x5, 0x8}, {0x5, 0x8}, {0x2, 0xa}, {0x4, 0x8}, {0x0, 0x3}, {0x4, 0x6}, {0x0, 0x8}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0xa}, {0x5, 0x1}, {0x4, 0x6}, {0x5, 0x9}, {0x7, 0x7}, {0x7}, {0x7, 0x3}, {0x0, 0xa}, {0x3, 0xa}, {0x6, 0x3}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0x8}, {0x7, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x1}, {0x6, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0xb, 0x4a, 0x1, 0x1, 0x12, 0x5b409a137c147b7f, 0x5, 0x36, 0x36, 0x1b, 0x5, 0x24, 0x2, 0x60, 0x6, 0x1, 0x30, 0x60, 0x6, 0xc, 0x6, 0x48, 0x16, 0x36, 0x3, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x40, 0x8, 0x2, 0xfffe, 0x1, 0x6, 0x1b02]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x2, 0x9}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0x7}, {0x5, 0x1}, {0x1, 0x8}, {0x6, 0x1}, {0x3, 0x3}, {0x7}, {0x5, 0x1}, {0x6, 0x1}, {0x1, 0x5}, {0x7, 0x4}, {0x4, 0x3}, {0x0, 0x6}, {0x3, 0x4}, {0x3, 0x1}, {0x3, 0x9}, {0x5, 0xa}, {0x6}, {0x1, 0x6}, {0x5, 0x8}, {0x7, 0x8}, {0x2, 0x7}, {0x3, 0x8}, {0x4, 0x2}, {0x2, 0x5}, {0x3, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x3, 0x8}, {0x2}, {0x2, 0x7}, {0x2, 0x3}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x2}, {0x5, 0x1}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x1}, {0x7, 0x9}, {0x4, 0x7}, {0x4}, {0x2, 0xa}, {0x3, 0x2}, {0x2, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x4}, {}, {0x4, 0x4}, {0x7, 0x4}, {0x0, 0x9}, {0x6, 0x5}, {0x5, 0x5}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x7}, {0x5, 0x9}, {0x4, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x7}, {0x4, 0xa}, {0x6, 0x4}, {0x6, 0x8}, {0x4, 0x8}, {0x3, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x1}, {0x4, 0x6}, {0x7, 0xa}, {0x7, 0x5}, {0x7, 0x7}, {0x0, 0x6}, {0x3, 0x6}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x6, 0x7}, {0x2, 0x7}, {0x1, 0x2}, {0x4, 0x3}, {0x6, 0x1}, {0x0, 0x2}, {0x1}, {0x6, 0x8}, {0x3, 0x6}, {0x5, 0x3}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0xa}, {0x4, 0x4}, {0x2, 0x8}, {0x1, 0xa}, {0x2, 0x2}, {0x4, 0x4}, {0x5, 0x7}, {0x4, 0x9}, {0x6, 0x4}, {0x7, 0x8}, {0x1, 0x4}, {0x0, 0x3}, {0x7, 0x8}, {0x6, 0xa}, {0x0, 0x1}, {0x7, 0x3}, {0x3}, {0x3, 0x8}, {0x4, 0x6}, {0x6, 0x2}, {0x3, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0xf, 0x7f, 0x324, 0x0, 0x4, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x43d3, 0x2, 0x4, 0x3, 0x7, 0x2362, 0x6, 0x8000]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x24}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x184, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x92, 0x7, 0x7, 0x9, 0x9d, 0xe44a]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x6, 0x12, 0x14, 0x3, 0x36, 0x9, 0x48, 0x5b, 0x2b, 0x36, 0xc]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5000, 0x101, 0x80, 0x8d, 0x3, 0xfeff, 0x6, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x0, 0x2, 0x2, 0xff, 0x46, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xa000, 0x88, 0x6, 0x1000, 0xfb, 0xfff8, 0x3]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x27f3, 0xf433, 0x1, 0xf, 0x8001, 0x9, 0xcb52, 0x2]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x3}, {0x4, 0x4}, {0x4, 0x2}, {0x1, 0x9}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x7}, {0x2, 0x5}, {0x5, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x8}, {0x1}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0xb, 0x64, 0x8, 0x4, 0x7fff, 0x7]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0xd999e3aff580f087}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa0db, 0x5, 0xe7, 0xa6d8, 0xe, 0x5, 0x9, 0xec0a]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x4}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0x2}, {0x4, 0x4}, {0x5, 0x3}, {0x3, 0x2}, {0x3, 0x2}, {0x6, 0x3}, {0x3, 0x4}, {0x4, 0x1}, {0x1, 0x3}, {0x3, 0xa}, {0x2}, {0x6, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x8}, {0x7, 0x6}, {0x1, 0x2}, {0x5, 0x6}, {0x5, 0xa}, {0x3, 0x2}, {0x6, 0x8}, {0x5, 0x5}, {0x4, 0x2}, {0x1, 0x9}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0x2}, {0x2, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x0, 0x6, 0x2, 0x8, 0x4, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x32}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7c, 0x0, 0x3be, 0x4, 0x4, 0x7f, 0xe]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3bd5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb0}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x880}, 0x1, 0x0, 0x0, 0x20008010}, 0x200c000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000440)=""/181, 0xb5, 0x0, &(0x7f0000000680)=""/63, 0x3f}}, 0x10) r9 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r9, 0x6a, 0x2, 0x20000000, 0x3) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r7}, &(0x7f0000000400), &(0x7f0000000500)=r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0x5ee, 0xf00, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r11) syz_extract_tcp_res(0x0, 0x6, 0x91ab) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 952.641284ms ago: executing program 4 (id=3638): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (fail_nth: 14) 850.283086ms ago: executing program 0 (id=3639): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="180000001600f1fff8ffffffffff00000a000003"], 0x18}}, 0x0) 766.597332ms ago: executing program 2 (id=3640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)="991347c388249d2e", 0x8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, 0x44, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 753.085997ms ago: executing program 3 (id=3641): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmmsg$sock(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000000)={0x8, 'ip6gretap0\x00', {'gre0\x00'}, 0x8dd}) getsockopt(r1, 0x28, 0x6, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) 728.230383ms ago: executing program 0 (id=3642): r0 = gettid() r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x890, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$netlink(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x1000, 0x5, 0x0, 0x9, 0x4, 0xe, 0xc7a]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="e98da7c3a60a"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe000}, @NL80211_ATTR_IE={0x32, 0x2a, [@supported_rates={0x1, 0x8, [{0x18}, {0x60, 0x1}, {0xc}, {0x2, 0x1}, {0x3, 0x1}, {0x36}, {0x1}, {0x30}]}, @sec_chan_ofs={0x3e, 0x1}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @supported_rates={0x1, 0x2, [{0xb}, {0x6c}]}, @ssid={0x0, 0x7, @random="5c55119d835a2a"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b42ca4a8133e"}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 669.938629ms ago: executing program 1 (id=3643): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa42123972"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000240)="283f0057950d7678de7263988b02ecc8000068", 0x13}], 0x3) socket(0x2b, 0x1, 0x1) 376.589437ms ago: executing program 2 (id=3644): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'veth1\x00', {}, 0x5}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x14) 369.506154ms ago: executing program 4 (id=3645): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b40)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4101}, {0xffff, 0xffff}, {0x7, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x560, 0x7, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x94, 0x8, 0x0, 0x8, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) (async) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async, rerun: 64) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x905a}, {r3, 0x1008}, {r1, 0x6000}, {r1, 0x115}, {r4}], 0x5, &(0x7f0000000100)={r5, r6+60000000}, &(0x7f0000000140), 0x8) 242.301383ms ago: executing program 2 (id=3646): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x4000003) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000001200000000000000000000000902000000000051"], &(0x7f00000005c0)=""/228, 0x40, 0xe4, 0x1}, 0x20) 212.782903ms ago: executing program 3 (id=3647): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0xfffffffe}]}]}}, &(0x7f00000000c0)=""/209, 0x3a, 0xd1, 0x1}, 0x28) 179.123881ms ago: executing program 2 (id=3648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x6) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c001c00244000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 78.030218ms ago: executing program 3 (id=3649): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpeername$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3], 0x7c}}, 0x20000000) 77.406587ms ago: executing program 0 (id=3650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) r5 = socket(0x1d, 0x2, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) close(r4) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 4 (id=3651): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = accept(r6, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) sendmsg$inet(r7, &(0x7f0000001e80)={&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="ec8f4be7d23cbdce77a1e0f892e3eb9b7958cb611f330494d3cc87ad996fed7f5f66b6157e6c199f0aa6856d5675af241912229cb8b54d284107f7364800e2f3b0fe70f679a4120c902dbbe3f5b09170f71810e3bcc6c78000ee1666b74358defde0929b276854f38bd7f684491c9a3ce2f512aa9f9eb06c7d7a18d6181ad55a1f351f0c687404536e526ab82b84295deca44d32", 0x94}, {&(0x7f0000001b40)='x', 0x1}, {&(0x7f0000001b80)="3442076b4ed8b01d450bc3fb270a9bd74da4997ec1764947c7bcfed1a5bb679c93a29a0b44737107268c791d8e501f77e8b5c6025e3a5c124e2228ee14c0c33ed9656a83ee0e48b951c563501ce3b2e2a3b31fac9283f76298a429e19b8747180137b3538e3fce4146186ce111625aa08c54", 0x72}, {&(0x7f0000001c00)="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", 0xfc}], 0x5, &(0x7f0000001d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x867}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x48, 0x0, 0x7, {[@generic={0x88, 0xa, "33df8fbf6e5e73fd"}, @cipso={0x86, 0x12, 0x3, [{0x5, 0xc, "a6c557cb6a0bacae54fb"}]}, @noop, @end, @ssrr={0x89, 0x17, 0xf6, [@private=0xa010101, @local, @local, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xf0}, 0x20000085) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="040025bd7000f9dbdf25020000000800040000000000530d802b3f970cfbcaf1e8f70c480e961aceb555f45bc4bc012e9df810f29e85c7c6251d710acc11a04d5f5a789a0269446c6a0b3060b10e204e7eeced99d7aeb4622c25f527b9d1570d113fa25c1cb40b29a47b04fc3eddef901e09b49da7fede4605fc2d0378b81249073c22fd71a88c571c6d4426d31647f55c86e4528b81bb47835b5374ced85179018085902d7aa01c6a5ca9a368710ed0cc0a75f1149ae10e037e6b8867f723b3a9ced79010ef85b8d39f1c4ddd4c19b73dfc0faa6ead4ed683b4ae20138618ad1c101f845068b8b400"/247], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000190001000000000000000000021800000000ff0000000000481f000000000000040008"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): an invalid length. [ 254.675211][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1888'. [ 254.720473][T12732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1888'. [ 255.417311][T12764] syzkaller0: entered promiscuous mode [ 255.427697][T12764] syzkaller0: entered allmulticast mode [ 255.436214][T12770] Cannot find set identified by id 65534 to match [ 255.563471][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.585661][T12782] netlink: 'syz.1.1906': attribute type 39 has an invalid length. [ 256.857990][T12782] hsr_slave_0: left promiscuous mode [ 256.865741][T12782] hsr_slave_1: left promiscuous mode [ 257.401431][T12813] ksmbd: Unknown IPC event: 3, ignore. [ 257.514667][T12827] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1919'. [ 257.618847][T12838] netlink: 'syz.2.1922': attribute type 29 has an invalid length. [ 257.632037][T12838] netlink: 'syz.2.1922': attribute type 29 has an invalid length. [ 257.664815][T12838] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1922'. [ 257.675268][T12838] unsupported nla_type 58 [ 257.767679][T12840] syzkaller0: entered promiscuous mode [ 257.776376][T12840] syzkaller0: entered allmulticast mode [ 257.828272][T12845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.048336][T12862] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1929'. [ 258.086964][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'. [ 258.257803][T12866] netlink: 'syz.0.1931': attribute type 1 has an invalid length. [ 258.277366][T12866] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1931'. [ 258.426914][T12876] netlink: 'syz.4.1934': attribute type 1 has an invalid length. [ 258.452924][T12878] netlink: 'syz.1.1935': attribute type 4 has an invalid length. [ 258.479656][T12884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1934'. [ 258.633124][T12876] 8021q: adding VLAN 0 to HW filter on device bond10 [ 258.702352][T12887] netlink: 'syz.3.1937': attribute type 3 has an invalid length. [ 258.728368][T12888] bond10: (slave bridge4): making interface the new active one [ 258.766708][T12888] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 258.963007][T12886] syzkaller0: entered promiscuous mode [ 258.982144][T12886] syzkaller0: entered allmulticast mode [ 259.337863][T12936] __nla_validate_parse: 4 callbacks suppressed [ 259.337880][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1948'. [ 259.428952][T12941] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1950'. [ 260.656036][T12925] vet: renamed from veth0_vlan (while UP) [ 260.703426][T12948] tipc: Started in network mode [ 260.726457][T12948] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 260.751399][T12948] tipc: Enabling of bearer rejected, failed to enable media [ 260.810109][T12957] ±ÿª¨úrBº“: renamed from lo [ 261.046777][T12973] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1961'. [ 261.305561][T12977] bond12: option lp_interval: invalid value (0) [ 261.350985][T12977] bond12: option lp_interval: allowed values 1 - 2147483647 [ 261.407613][T12977] bond12 (unregistering): Released all slaves [ 261.494257][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1968'. [ 261.688399][T13018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1971'. [ 261.793584][T12996] syzkaller0: entered promiscuous mode [ 261.800256][T12996] syzkaller0: entered allmulticast mode [ 263.379385][T13035] syzkaller0: entered promiscuous mode [ 263.384954][T13035] syzkaller0: entered allmulticast mode [ 263.500511][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 263.522121][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 265.133508][T13048] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1977'. [ 265.143001][T13049] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1977'. [ 265.634735][T13078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1985'. [ 265.975746][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1990'. [ 265.992865][T13095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1991'. [ 266.006250][T13084] syzkaller0: entered promiscuous mode [ 266.024079][T13084] syzkaller0: entered allmulticast mode [ 266.485289][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 268.346943][T13138] syzkaller1: entered promiscuous mode [ 268.352945][T13138] syzkaller1: entered allmulticast mode [ 268.880265][T13094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.087422][T13151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.169632][T13158] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2002'. [ 269.187879][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 269.287219][T13158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.315666][T13158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.338885][T13158] bond0 (unregistering): Released all slaves [ 269.365910][T13159] vxcan1 speed is unknown, defaulting to 1000 [ 269.380345][T13159] vxcan1 speed is unknown, defaulting to 1000 [ 269.422563][T13159] vxcan1 speed is unknown, defaulting to 1000 [ 269.570190][T13169] syzkaller0: entered promiscuous mode [ 269.576188][T13169] syzkaller0: entered allmulticast mode [ 269.722675][T13185] netlink: 'syz.0.2009': attribute type 1 has an invalid length. [ 269.768902][T13159] infiniband syz2: set active [ 269.777873][T13159] infiniband syz2: added vxcan1 [ 269.788783][T13186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.814769][T13186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2009'. [ 269.820412][T13159] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 269.839087][T13159] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 269.856558][T13159] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 269.889594][T13188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2009'. [ 269.929576][T13159] RDS/IB: syz2: added [ 269.939743][T13159] smc: adding ib device syz2 with port count 1 [ 269.952218][T13159] smc: ib device syz2 port 1 has pnetid SYZ1 (user defined) [ 271.327290][T13185] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 271.328399][ T5735] vxcan1 speed is unknown, defaulting to 1000 [ 271.426145][T13189] bridge11: entered allmulticast mode [ 271.446265][ T5728] vxcan1 speed is unknown, defaulting to 1000 [ 271.483094][T13159] vxcan1 speed is unknown, defaulting to 1000 [ 271.498705][T13210] syzkaller0: entered promiscuous mode [ 271.525634][T13210] syzkaller0: entered allmulticast mode [ 271.715166][T13218] netlink: 'syz.0.2015': attribute type 16 has an invalid length. [ 271.740979][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'. [ 271.772328][T13220] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2017'. [ 271.808776][T13220] bridge: RTM_NEWNEIGH with invalid ether address [ 271.843488][T13220] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2017'. [ 271.865102][T13220] bridge: RTM_NEWNEIGH with invalid ether address [ 272.297353][T13235] syzkaller0: entered promiscuous mode [ 272.314957][T13235] syzkaller0: entered allmulticast mode [ 272.797463][T13267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2025'. [ 273.909383][T13159] vxcan1 speed is unknown, defaulting to 1000 [ 273.919194][T13265] syzkaller0: left promiscuous mode [ 273.931151][T13265] syzkaller0: left allmulticast mode [ 274.005803][T13268] bridge_slave_0 (unregistering): left allmulticast mode [ 274.032237][T13268] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.132357][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2027'. [ 274.161283][T13272] bridge0: port 1(batadv1) entered blocking state [ 274.182996][T13272] bridge0: port 1(batadv1) entered disabled state [ 274.207459][T13272] batadv1: entered allmulticast mode [ 274.256509][T13272] batadv1: entered promiscuous mode [ 274.368787][T13279] syzkaller0: entered promiscuous mode [ 274.385979][T13279] syzkaller0: entered allmulticast mode [ 274.544050][T13159] vxcan1 speed is unknown, defaulting to 1000 [ 274.618033][T13290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2035'. [ 274.661095][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 274.671370][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 274.745382][T13299] syzkaller0: entered promiscuous mode [ 274.776526][T13299] syzkaller0: entered allmulticast mode [ 274.835458][T13301] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 275.005837][T13314] Cannot find del_set index 4 as target [ 275.178115][T13318] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2043'. [ 275.363090][T13159] vxcan1 speed is unknown, defaulting to 1000 [ 275.389271][T13331] syzkaller0: entered promiscuous mode [ 275.411095][T13331] syzkaller0: entered allmulticast mode [ 275.746993][ T5635] Bluetooth: hci4: link tx timeout [ 275.754245][ T5635] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 275.887320][T13348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2055'. [ 275.907816][T13349] netlink: 'syz.4.2056': attribute type 1 has an invalid length. [ 275.911120][T13159] vxcan1 speed is unknown, defaulting to 1000 [ 276.329595][T13370] syzkaller0: entered promiscuous mode [ 276.340102][T13370] syzkaller0: entered allmulticast mode [ 276.428393][T13372] syzkaller0: entered promiscuous mode [ 276.434345][T13372] syzkaller0: entered allmulticast mode [ 276.639894][T13376] syzkaller0: entered promiscuous mode [ 276.646265][T13376] syzkaller0: entered allmulticast mode [ 276.678338][T13383] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:0 [ 277.796441][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 278.546691][T13421] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2078'. [ 278.575161][T13419] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 278.604782][T13419] syzkaller1: linktype set to 823 [ 278.621913][T13420] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2078'. [ 278.645752][T13418] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 278.655173][T13418] syzkaller1: linktype set to 823 [ 278.978207][T13449] netlink: 'syz.4.2083': attribute type 1 has an invalid length. [ 279.105562][T13456] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2088'. [ 279.142666][T13449] bond13: entered promiscuous mode [ 279.162858][T13456] netlink: 'syz.0.2088': attribute type 1 has an invalid length. [ 279.177401][T13449] 8021q: adding VLAN 0 to HW filter on device bond13 [ 279.188988][T13456] netlink: 'syz.0.2088': attribute type 3 has an invalid length. [ 279.212111][T13456] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2088'. [ 279.297391][T13454] bond13: (slave bridge6): making interface the new active one [ 279.315911][T13454] bridge6: entered promiscuous mode [ 279.323691][T13454] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 279.377946][T13462] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 279.394164][T13462] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 279.435057][T13482] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2092'. [ 279.449509][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 279.620316][T13477] syzkaller0: entered promiscuous mode [ 279.638418][T13477] syzkaller0: entered allmulticast mode [ 279.698379][T13490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2094'. [ 280.627948][T13508] openvswitch: netlink: IP tunnel dst address not specified [ 281.462181][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 281.628180][T13528] netlink: 'syz.2.2104': attribute type 2 has an invalid length. [ 282.035837][T13546] syzkaller0: entered promiscuous mode [ 282.042298][T13553] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 282.049262][T13546] syzkaller0: entered allmulticast mode [ 282.121727][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2115'. [ 282.522385][T13583] netlink: 'syz.0.2121': attribute type 8 has an invalid length. [ 283.781424][T13573] veth0: entered promiscuous mode [ 283.823982][T13587] veth1: entered promiscuous mode [ 283.845746][T13587] veth1: entered allmulticast mode [ 283.880678][T13573] veth0: left promiscuous mode [ 283.943082][T13593] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2123'. [ 283.995246][T13593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2123'. [ 284.023090][T13598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'. [ 284.052714][T13598] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2124'. [ 284.072615][T13598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2124'. [ 284.094942][T13605] xt_ipcomp: unknown flags 1D [ 284.128436][T13598] netlink: 'syz.1.2124': attribute type 1 has an invalid length. [ 284.149304][T13598] netlink: 'syz.1.2124': attribute type 2 has an invalid length. [ 284.170267][T13598] netlink: 'syz.1.2124': attribute type 1 has an invalid length. [ 284.290694][T13615] netlink: 'syz.2.2129': attribute type 2 has an invalid length. [ 284.311901][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2129'. [ 284.397188][T13615] SET target dimension over the limit! [ 284.404933][T13628] syzkaller1: entered promiscuous mode [ 284.410527][T13628] syzkaller1: entered allmulticast mode [ 284.697917][T13634] syzkaller0: entered promiscuous mode [ 284.703945][T13634] syzkaller0: entered allmulticast mode [ 286.586009][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2148'. [ 286.625938][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2148'. [ 286.690283][T13685] erspan0: entered promiscuous mode [ 286.719418][T13685] erspan0: left promiscuous mode [ 286.725962][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2149'. [ 286.758047][T13696] xt_hashlimit: invalid interval [ 286.770581][T13686] erspan0: entered promiscuous mode [ 286.796980][T13686] erspan0: left promiscuous mode [ 286.839324][T13694] dvmrp0: entered allmulticast mode [ 286.971825][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2154'. [ 287.022565][T13708] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 287.363090][T13730] tipc: Enabling of bearer rejected, failed to enable media [ 287.505795][T13725] syzkaller0: entered promiscuous mode [ 287.526209][T13725] syzkaller0: entered allmulticast mode [ 287.575534][T13744] ip6gre2: entered allmulticast mode [ 288.915111][T13750] syzkaller0: entered promiscuous mode [ 288.926271][T13750] syzkaller0: entered allmulticast mode [ 289.138831][T13761] __nla_validate_parse: 3 callbacks suppressed [ 289.138845][T13761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2169'. [ 289.193779][T13765] netlink: 'syz.0.2168': attribute type 21 has an invalid length. [ 289.420507][T13777] netlink: 'syz.1.2173': attribute type 1 has an invalid length. [ 289.451125][T13777] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2173'. [ 289.504780][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 289.693308][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2178'. [ 289.716497][T13798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.792067][T13798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.190706][T13824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2184'. [ 290.291344][T13832] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 290.320242][T13832] ip6tnl0: Caught tx_queue_len zero misconfig [ 290.355411][T13832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2187'. [ 290.696319][T13858] x_tables: duplicate underflow at hook 2 [ 290.707492][T13858] netlink: 'syz.0.2195': attribute type 8 has an invalid length. [ 290.719225][T13860] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 290.794132][T13862] syzkaller0: entered promiscuous mode [ 290.815730][T13862] syzkaller0: entered allmulticast mode [ 290.868791][T13869] set match dimension is over the limit! [ 291.042529][T13875] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 291.068380][T13875] syzkaller0: entered promiscuous mode [ 291.086485][T13879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2205'. [ 291.314127][T13885] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2207'. [ 291.316214][T13879] netlink: 'syz.1.2205': attribute type 2 has an invalid length. [ 291.332010][T13885] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2207'. [ 291.332031][T13885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2207'. [ 291.426240][T13889] netlink: 'syz.3.2208': attribute type 4 has an invalid length. [ 291.445378][T13889] netlink: 'syz.3.2208': attribute type 4 has an invalid length. [ 291.674686][T13897] xt_hashlimit: size too large, truncated to 1048576 [ 292.205502][T13925] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20002 [ 292.697130][T13953] batadv0: entered promiscuous mode [ 292.709157][T13953] batadv0: left promiscuous mode [ 293.006277][T13973] syzkaller0: entered promiscuous mode [ 293.020971][T13973] syzkaller0: entered allmulticast mode [ 293.045241][T13974] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 293.180260][T13977] netlink: 'syz.1.2232': attribute type 4 has an invalid length. [ 293.223273][T13977] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 293.567362][T14007] geneve4: entered promiscuous mode [ 293.623478][ T6673] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 37305 - 0 [ 293.670038][ T6673] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 37305 - 0 [ 293.714986][ T3326] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 37305 - 0 [ 293.827691][ T3326] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 37305 - 0 [ 293.878588][T14027] openvswitch: netlink: IP tunnel dst address not specified [ 293.946607][T14032] netlink: 'syz.0.2246': attribute type 10 has an invalid length. [ 294.072268][T14039] netlink: 'syz.3.2249': attribute type 1 has an invalid length. [ 294.285914][T14053] __nla_validate_parse: 7 callbacks suppressed [ 294.285932][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2253'. [ 294.536201][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2262'. [ 294.607035][T14065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.875061][T14095] lo: Caught tx_queue_len zero misconfig [ 295.072030][T14104] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 295.091763][T14103] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 295.097649][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 295.292840][T14067] netlink: 'syz.0.2257': attribute type 4 has an invalid length. [ 295.335439][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2271'. [ 295.746839][T14144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2278'. [ 295.775461][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 295.818410][T14145] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 295.953243][T14154] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.964289][T14155] veth: renamed from veth0_vlan (while UP) [ 296.051273][T14156] ip6gre3: entered allmulticast mode [ 296.163976][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2285'. [ 296.242161][T14166] netlink: 'syz.3.2284': attribute type 1 has an invalid length. [ 296.761922][T14197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2295'. [ 296.817205][T14197] IPVS: Unknown mcast interface: macsec0 [ 296.977776][T14205] veth1_macvtap: renamed from bond0 (while UP) [ 296.989803][T14207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.039164][T14206] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 297.077018][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2300'. [ 297.078055][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2300'. [ 297.433725][T14238] gtp2: entered promiscuous mode [ 297.438854][T14238] gtp2: entered allmulticast mode [ 297.505968][T14240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.570426][T14240] syzkaller0: entered promiscuous mode [ 297.620428][T14240] syzkaller0: entered allmulticast mode [ 297.692037][T14249] netlink: 'syz.2.2312': attribute type 39 has an invalid length. [ 297.746154][T14256] netlink: 'syz.0.2315': attribute type 1 has an invalid length. [ 297.832265][T14249] hsr_slave_0: left promiscuous mode [ 297.840178][T14249] hsr_slave_1: left promiscuous mode [ 297.956102][T14266] 8021q: VLANs not supported on ip_vti0 [ 298.133199][T14272] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 298.625248][T14305] netlink: 'syz.0.2331': attribute type 4 has an invalid length. [ 298.847608][T14320] netlink: 'syz.0.2335': attribute type 1 has an invalid length. [ 298.865748][T14320] netlink: 'syz.0.2335': attribute type 9 has an invalid length. [ 299.518694][T14359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.526097][T14359] IPv6: NLM_F_CREATE should be set when creating new route [ 299.543715][T14360] __nla_validate_parse: 16 callbacks suppressed [ 299.543732][T14360] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2347'. [ 299.796454][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 299.878800][T14384] netlink: 592 bytes leftover after parsing attributes in process `syz.1.2354'. [ 300.077919][T14395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.093978][T14395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.113325][T14399] rdma_op ffff8880768789f0 conn xmit_rdma 0000000000000000 [ 300.317853][T14414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2364'. [ 300.327772][T14414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2364'. [ 300.375103][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 300.544747][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2369'. [ 300.819601][T14450] ipt_rpfilter: unknown options [ 300.927145][T14458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2377'. [ 300.940043][T14452] syzkaller0: entered promiscuous mode [ 300.948427][T14452] syzkaller0: entered allmulticast mode [ 300.958179][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2376'. [ 300.971068][T14458] xfrm2: entered promiscuous mode [ 300.976233][T14458] xfrm2: entered allmulticast mode [ 300.983467][T14458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2377'. [ 302.455823][T14455] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 302.694119][T14488] netlink: 'syz.2.2386': attribute type 7 has an invalid length. [ 302.727572][T14488] netlink: 'syz.2.2386': attribute type 8 has an invalid length. [ 302.821820][T14489] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 302.853910][T14496] netlink: 'syz.4.2388': attribute type 64 has an invalid length. [ 303.001824][T14500] vlan1: entered promiscuous mode [ 303.020452][T14500] hsr0: entered promiscuous mode [ 303.038719][T14500] vlan1: entered allmulticast mode [ 303.057942][T14500] hsr0: entered allmulticast mode [ 303.064095][T14500] hsr_slave_0: entered allmulticast mode [ 303.070147][T14500] hsr_slave_1: entered allmulticast mode [ 303.229302][T14515] netlink: 'syz.2.2395': attribute type 13 has an invalid length. [ 303.451139][T14529] netlink: 'syz.3.2398': attribute type 7 has an invalid length. [ 303.471044][T14529] netlink: 'syz.3.2398': attribute type 8 has an invalid length. [ 303.493271][T14518] netlink: 'syz.2.2395': attribute type 9 has an invalid length. [ 303.501433][T14518] netlink: 'syz.2.2395': attribute type 6 has an invalid length. [ 304.069280][T14551] lo: Caught tx_queue_len zero misconfig [ 304.124064][ T3375] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 304.143829][ T3375] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 304.172433][ T3375] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 304.201333][ T1176] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 304.404655][T14565] syzkaller0: entered promiscuous mode [ 304.421969][T14565] syzkaller0: entered allmulticast mode [ 304.436121][T14563] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 304.542395][T14576] xt_ecn: cannot match TCP bits for non-tcp packets [ 304.546295][T14578] netlink: 'syz.1.2415': attribute type 1 has an invalid length. [ 304.700606][T14587] __nla_validate_parse: 11 callbacks suppressed [ 304.700624][T14587] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2417'. [ 304.752596][T14589] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2417'. [ 306.008857][T14579] syzkaller0: entered promiscuous mode [ 306.014707][T14579] syzkaller0: entered allmulticast mode [ 306.123683][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2418'. [ 306.163316][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2418'. [ 306.174666][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2418'. [ 306.330215][T14601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2422'. [ 306.365859][T14602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2422'. [ 306.387893][T14598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2420'. [ 306.438884][T14605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2421'. [ 306.509566][ T36] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 306.519852][ T36] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 306.531856][ T5728] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 306.547138][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2424'. [ 306.670674][T14615] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 306.697057][T14621] x_tables: duplicate entry at hook 3 [ 306.708915][T14614] syzkaller0: entered promiscuous mode [ 306.725856][T14614] syzkaller0: entered allmulticast mode [ 306.745887][T14614] netlink: 'syz.1.2426': attribute type 3 has an invalid length. [ 306.911121][ T5728] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 306.942480][ T5728] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 307.223769][T14648] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 307.675906][T14672] syzkaller0: left promiscuous mode [ 307.697057][T14672] syzkaller0: left allmulticast mode [ 307.775065][T14675] netlink: 'syz.3.2446': attribute type 2 has an invalid length. [ 308.432170][T14703] openvswitch: netlink: Invalid VLAN frame [ 308.705999][T14715] veth0: entered promiscuous mode [ 308.726403][T14712] veth0: left promiscuous mode [ 309.059245][T14735] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 309.087751][T14735] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 309.511045][T14766] xt_hashlimit: size too large, truncated to 1048576 [ 309.581826][T14768] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 309.698111][T14774] netlink: 'syz.3.2480': attribute type 1 has an invalid length. [ 309.714061][T14764] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 309.822429][T14781] bond7: (slave ipip0): The slave device specified does not support setting the MAC address [ 309.853994][T14781] bond7: (slave ipip0): Error -95 calling set_mac_address [ 309.954469][T14783] veth1_to_bond: Caught tx_queue_len zero misconfig [ 310.156894][T14797] nbd: illegal input index 2958377 [ 310.168266][T14798] nbd: illegal input index 2958377 [ 310.199894][T14783] syzkaller0: entered promiscuous mode [ 310.225741][T14783] syzkaller0: entered allmulticast mode [ 310.237366][T14801] __nla_validate_parse: 8 callbacks suppressed [ 310.237386][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 310.327535][T14796] ksmbd: Unknown IPC event: 3, ignore. [ 310.549898][T14814] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.2491'. [ 310.670955][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 310.934488][T14837] netlink: 'syz.1.2497': attribute type 13 has an invalid length. [ 311.103404][T14842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2497'. [ 312.444177][T14835] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 313.010801][T14870] netlink: 'syz.3.2509': attribute type 3 has an invalid length. [ 313.304319][T14890] netlink: 'syz.0.2514': attribute type 1 has an invalid length. [ 313.330180][T14890] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2514'. [ 313.717096][T14912] ip6tnl0: Caught tx_queue_len zero misconfig [ 313.841935][T14922] xt_hashlimit: size too large, truncated to 1048576 [ 313.986915][T14925] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 314.010549][T14925] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 314.118407][T14931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2527'. [ 314.455140][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2532'. [ 314.714522][T14958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2534'. [ 314.735827][T14954] syzkaller0: entered promiscuous mode [ 314.742401][T14958] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2534'. [ 314.753004][T14954] syzkaller0: entered allmulticast mode [ 315.084792][T14979] netlink: 'syz.1.2538': attribute type 8 has an invalid length. [ 316.546809][T14975] lo: entered promiscuous mode [ 316.582475][T14975] tunl0: entered promiscuous mode [ 316.608229][T14975] gre0: entered promiscuous mode [ 316.645598][T14975] gretap0: entered promiscuous mode [ 316.786063][T14975] erspan0: entered promiscuous mode [ 316.813426][T14975] erspan0: left allmulticast mode [ 316.824439][T14975] ip_vti0: entered promiscuous mode [ 316.921488][T14998] tipc: Enabling of bearer rejected, failed to enable media [ 317.179293][T15013] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 317.203653][T15013] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 317.290635][T15020] SET target dimension over the limit! [ 317.320795][T15010] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 317.356565][T15010] bond8 (unregistering): Released all slaves [ 317.454676][T15030] sctp: [Deprecated]: syz.4.2552 (pid 15030) Use of int in max_burst socket option. [ 317.454676][T15030] Use struct sctp_assoc_value instead [ 317.476659][T15025] batadv_slave_0: Caught tx_queue_len zero misconfig [ 317.492809][T15028] syzkaller0: entered promiscuous mode [ 317.499112][T15020] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2548'. [ 317.510840][T15028] syzkaller0: entered allmulticast mode [ 317.740340][T15047] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.2556'. [ 317.770356][T15040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.785238][T15041] veth0: entered promiscuous mode [ 317.924569][T15039] veth0: left promiscuous mode [ 318.075044][T15064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.138352][T15069] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2564'. [ 318.224370][T15073] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 318.848024][T15114] netlink: 'syz.1.2577': attribute type 1 has an invalid length. [ 318.879803][T15114] netlink: 'syz.1.2577': attribute type 11 has an invalid length. [ 318.902072][T15114] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2577'. [ 319.186056][T15127] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ1 [ 319.212920][T15132] digital: digital_start_poll: Unknown protocol [ 319.239374][T15137] netlink: 'syz.3.2585': attribute type 7 has an invalid length. [ 319.289413][T15137] netlink: 'syz.3.2585': attribute type 7 has an invalid length. [ 319.298342][T15140] syzkaller0: entered promiscuous mode [ 319.319681][T15140] syzkaller0: entered allmulticast mode [ 319.438253][T15145] lo: Caught tx_queue_len zero misconfig [ 319.487424][T15150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.505495][T15150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.551247][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 319.681721][T15159] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.2591'. [ 319.718717][T15159] netlink: 'syz.1.2591': attribute type 75 has an invalid length. [ 320.000178][T15178] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2597'. [ 320.509278][T15201] netlink: 'syz.4.2605': attribute type 1 has an invalid length. [ 320.617241][T15207] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 320.628720][T15207] bond14: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 320.643238][T15207] bond14: (slave vxcan3): making interface the new active one [ 320.652331][T15207] bond14: (slave vxcan3): Enslaving as an active interface with an up link [ 320.674137][T15198] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address [ 320.696761][T15210] netlink: 'syz.3.2606': attribute type 8 has an invalid length. [ 320.705070][T15198] bond14: (slave vxcan5): Enslaving as a backup interface with an up link [ 320.714148][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2606'. [ 320.944957][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2608'. [ 321.238670][T15239] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2614'. [ 321.263198][T15241] sctp: [Deprecated]: syz.2.2615 (pid 15241) Use of int in max_burst socket option. [ 321.263198][T15241] Use struct sctp_assoc_value instead [ 321.289787][T15244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.465062][T15253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2618'. [ 321.678825][T15266] vlan0: entered promiscuous mode [ 321.950106][T15276] netlink: 'syz.1.2626': attribute type 62 has an invalid length. [ 323.268875][ T5749] IPVS: starting estimator thread 0... [ 323.371037][T15307] IPVS: using max 27 ests per chain, 64800 per kthread [ 323.669445][T15334] netlink: 'syz.2.2642': attribute type 2 has an invalid length. [ 324.021365][T15351] __nla_validate_parse: 3 callbacks suppressed [ 324.021379][T15351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2645'. [ 324.177698][T15359] mac80211_hwsim hwsim11 û: renamed from wlan1 (while UP) [ 324.424724][T15368] ip_vti0: entered promiscuous mode [ 324.438268][T15370] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2649'. [ 324.476814][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2649'. [ 324.893580][T15390] syzkaller1: entered promiscuous mode [ 324.911520][T15390] syzkaller1: entered allmulticast mode [ 325.067720][T15406] netlink: 'syz.2.2662': attribute type 16 has an invalid length. [ 325.094526][T15406] netlink: 'syz.2.2662': attribute type 17 has an invalid length. [ 325.129778][T15403] IPv6: sit1: Disabled Multicast RS [ 325.146129][T15411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2663'. [ 325.189414][T15413] netlink: 'syz.1.2664': attribute type 11 has an invalid length. [ 325.208187][T15413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2664'. [ 325.256212][T15413] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2664'. [ 325.398833][T15426] netlink: 'syz.0.2666': attribute type 1 has an invalid length. [ 325.455931][T15419] bond8 (unregistering): Released all slaves [ 325.615943][T15441] SET target dimension over the limit! [ 325.685003][T15426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.734501][T15421] bond2: (slave veth7): Enslaving as an active interface with a down link [ 325.749726][T15436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.757258][T15436] bond2: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 325.794408][T15450] netlink: 'syz.2.2671': attribute type 1 has an invalid length. [ 325.848152][T15444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'. [ 325.894349][T15454] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 325.993003][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2672'. [ 326.030252][T15448] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 326.198446][T15467] x_tables: duplicate underflow at hook 1 [ 326.356990][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2681'. [ 326.438482][T15478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2681'. [ 327.129142][T15481] syzkaller1: entered promiscuous mode [ 327.136985][T15481] syzkaller1: entered allmulticast mode [ 327.314107][T15502] block nbd3: Unsupported socket: should be TCP or UNIX. [ 327.653772][T15515] netlink: 'syz.0.2693': attribute type 9 has an invalid length. [ 327.663138][T15518] syzkaller0: entered promiscuous mode [ 327.678065][T15518] syzkaller0: entered allmulticast mode [ 328.050452][ T4947] block nbd3: Receive control failed (result -107) [ 328.176558][T15539] bond15: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 328.217714][T15539] bond15 (unregistering): Released all slaves [ 328.240438][T15555] --map-set only usable from mangle table [ 329.171508][T15606] __nla_validate_parse: 11 callbacks suppressed [ 329.171527][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2720'. [ 329.350199][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2722'. [ 329.668053][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2727'. [ 329.840274][T15638] xt_CONNSECMARK: invalid mode: 0 [ 330.006165][T15610] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 330.046693][T15610] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 330.084952][T15652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.109282][T15655] GUP no longer grows the stack in syz.3.2732 (15655): 200000003000-20000000a000 (200000001000) [ 330.147272][T15655] CPU: 0 UID: 0 PID: 15655 Comm: syz.3.2732 Not tainted syzkaller #0 PREEMPT(full) [ 330.147299][T15655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.147329][T15655] Call Trace: [ 330.147337][T15655] [ 330.147345][T15655] dump_stack_lvl+0xe8/0x150 [ 330.147374][T15655] __get_user_pages+0x2378/0x2720 [ 330.147402][T15655] ? __gup_longterm_locked+0xc4e/0x1630 [ 330.147442][T15655] ? __gup_longterm_locked+0xc4e/0x1630 [ 330.147465][T15655] ? down_read_killable+0x1bb/0x340 [ 330.147492][T15655] __gup_longterm_locked+0xdcf/0x1630 [ 330.147520][T15655] ? lock_acquire+0x106/0x350 [ 330.147562][T15655] gup_fast_fallback+0x1d84/0x20d0 [ 330.147618][T15655] ? __pfx_gup_fast_fallback+0x10/0x10 [ 330.147644][T15655] ? is_valid_gup_args+0x11f/0x200 [ 330.147669][T15655] ? get_user_pages_fast+0x4d/0xb0 [ 330.147694][T15655] __iov_iter_get_pages_alloc+0x370/0xa10 [ 330.147730][T15655] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 330.147763][T15655] iov_iter_get_pages2+0x5e/0xa0 [ 330.147794][T15655] __se_sys_vmsplice+0x7c7/0x1620 [ 330.147841][T15655] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 330.147870][T15655] ? __pfx_futex_wake+0x10/0x10 [ 330.147960][T15655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.147983][T15655] do_syscall_64+0x15f/0xf80 [ 330.148010][T15655] ? trace_irq_disable+0x3b/0x140 [ 330.148039][T15655] ? clear_bhb_loop+0x40/0x90 [ 330.148063][T15655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.148083][T15655] RIP: 0033:0x7f7607b9ce59 [ 330.148100][T15655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.148118][T15655] RSP: 002b:00007f7608a29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 330.148140][T15655] RAX: ffffffffffffffda RBX: 00007f7607e16090 RCX: 00007f7607b9ce59 [ 330.148154][T15655] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 330.148166][T15655] RBP: 00007f7607c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 330.148178][T15655] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 330.148189][T15655] R13: 00007f7607e16128 R14: 00007f7607e16090 R15: 00007ffd75c29bd8 [ 330.148222][T15655] [ 330.370387][T15610] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 330.376930][T15610] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 330.420436][T15610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 330.429503][T15610] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 330.452576][T15610] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 330.459108][T15610] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 330.534408][T15661] xt_bpf: check failed: parse error [ 330.557414][T15649] syzkaller0: entered promiscuous mode [ 330.563899][T15649] syzkaller0: entered allmulticast mode [ 330.805192][T15671] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2736'. [ 330.901123][T15674] Dead loop on virtual device ip6_vti0 (net 26), fix it urgently! [ 330.938275][T15674] team0: Caught tx_queue_len zero misconfig [ 331.103602][T15683] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2740'. [ 331.254611][T15689] vlan3: entered allmulticast mode [ 331.260105][T15689] bond0: entered allmulticast mode [ 331.471633][T15697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2743'. [ 331.502471][T15697] netlink: 'syz.2.2743': attribute type 7 has an invalid length. [ 331.513517][T15697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2743'. [ 331.955804][T15724] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2749'. [ 331.996272][T15724] openvswitch: netlink: Flow key attr not present in new flow. [ 332.407096][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2756'. [ 332.966018][T15789] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2763'. [ 332.979150][T15781] syzkaller1: entered promiscuous mode [ 332.988946][T15781] syzkaller1: entered allmulticast mode [ 333.413713][T15808] openvswitch: netlink: Flow key attribute not present in set flow. [ 333.433403][T15809] netlink: 'syz.2.2767': attribute type 11 has an invalid length. [ 333.649199][T15818] tipc: Can't bind to reserved service type 2 [ 333.974173][T15830] 8021q: adding VLAN 0 to HW filter on device bond15 [ 334.332463][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.363910][T15845] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 334.409195][T15844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.712710][T15857] veth0: entered promiscuous mode [ 334.737876][T15857] __nla_validate_parse: 5 callbacks suppressed [ 334.737891][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'. [ 334.820017][T15855] veth0: left promiscuous mode [ 334.859633][T15861] IPVS: length: 101 != 8 [ 335.073292][T15868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2781'. [ 335.125607][T15872] netlink: 'syz.3.2783': attribute type 1 has an invalid length. [ 335.208295][T15872] 8021q: adding VLAN 0 to HW filter on device bond8 [ 335.310689][T15886] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 335.820324][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2791'. [ 336.187408][T15924] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2794'. [ 336.825340][T15956] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2801'. [ 336.834574][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 337.095193][T15968] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.2803'. [ 337.128532][T15972] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2805'. [ 337.144876][T15971] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2806'. [ 337.172173][T15971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2806'. [ 337.199350][T15971] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2806'. [ 337.278053][T15971] netlink: 'syz.0.2806': attribute type 3 has an invalid length. [ 337.309774][T15971] netlink: 'syz.0.2806': attribute type 2 has an invalid length. [ 337.895650][T16014] netlink: 'syz.2.2815': attribute type 2 has an invalid length. [ 337.979586][T16015] netlink: 'syz.3.2816': attribute type 1 has an invalid length. [ 338.032157][T16015] 8021q: adding VLAN 0 to HW filter on device bond9 [ 338.199099][T16021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 338.331937][T16043] sctp: [Deprecated]: syz.1.2822 (pid 16043) Use of int in maxseg socket option. [ 338.331937][T16043] Use struct sctp_assoc_value instead [ 338.598053][T16056] openvswitch: netlink: VLAN attribute unexpected. [ 338.857822][T16074] netlink: 'syz.2.2832': attribute type 11 has an invalid length. [ 338.960540][T16078] openvswitch: netlink: Invalid VLAN frame [ 340.308471][T16116] syzkaller0: entered promiscuous mode [ 340.315298][T16116] syzkaller0: entered allmulticast mode [ 340.681881][T16153] __nla_validate_parse: 9 callbacks suppressed [ 340.681900][T16153] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2843'. [ 341.255263][T16175] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 341.390575][T16188] netlink: 'syz.2.2848': attribute type 23 has an invalid length. [ 343.328445][T16218] netlink: 'syz.2.2852': attribute type 11 has an invalid length. [ 343.355223][T16218] netlink: 'syz.2.2852': attribute type 11 has an invalid length. [ 343.385015][T16218] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2852'. [ 343.706585][T16231] bond10: option lp_interval: invalid value (0) [ 343.731764][T16231] bond10: option lp_interval: allowed values 1 - 2147483647 [ 343.748299][T16231] bond10 (unregistering): Released all slaves [ 343.796352][T16257] netlink: 'syz.1.2860': attribute type 13 has an invalid length. [ 343.826894][T16257] netlink: 'syz.1.2860': attribute type 58 has an invalid length. [ 343.838678][T16249] netlink: 'syz.4.2859': attribute type 1 has an invalid length. [ 343.851412][T16249] netlink: 'syz.4.2859': attribute type 1 has an invalid length. [ 343.869846][T16257] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2860'. [ 344.177808][T16276] bridge14: entered promiscuous mode [ 344.208629][T16276] bridge14: entered allmulticast mode [ 344.230193][T16269] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2863'. [ 344.307113][T16280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2865'. [ 344.395988][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'. [ 344.506744][T16288] syzkaller0: entered promiscuous mode [ 344.529653][T16288] syzkaller0: entered allmulticast mode [ 345.148496][T16322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2872'. [ 345.196955][T16322] netlink: 'syz.0.2872': attribute type 13 has an invalid length. [ 345.310167][T16332] tipc: Enabling of bearer rejected, failed to enable media [ 345.518356][T16345] netlink: 'syz.4.2879': attribute type 1 has an invalid length. [ 345.552368][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2879'. [ 345.568307][T16345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2879'. [ 345.595888][T16345] netlink: 'syz.4.2879': attribute type 2 has an invalid length. [ 345.606279][T16345] netlink: 'syz.4.2879': attribute type 2 has an invalid length. [ 345.621927][T16345] netlink: 'syz.4.2879': attribute type 2 has an invalid length. [ 345.630937][T16352] netlink: 'syz.1.2881': attribute type 3 has an invalid length. [ 346.158267][T16379] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2890'. [ 346.184409][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2891'. [ 346.266407][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2891'. [ 346.278174][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2893'. [ 346.308935][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2893'. [ 346.391308][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2893'. [ 346.419485][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2893'. [ 346.503209][T16407] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 346.629573][T16405] bond4: (slave bridge9): Enslaving as a backup interface with an up link [ 346.658086][T16413] macvlan0: entered promiscuous mode [ 346.666683][T16413] macvlan0: entered allmulticast mode [ 346.674502][T16413] bond4: entered promiscuous mode [ 346.680062][T16413] bridge9: entered promiscuous mode [ 346.690231][T16413] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 346.708760][T16413] bond4: left promiscuous mode [ 346.719726][T16413] bridge9: left promiscuous mode [ 346.830526][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2899'. [ 346.998466][T16440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2902'. [ 347.376787][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.394214][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.406363][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.426166][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.434800][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.493153][ T4947] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.501360][ T4947] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.508748][ T4947] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.518198][ T4947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.525786][ T4947] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.541572][T16461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2909'. [ 348.223513][ T1164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.253299][T16494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.267074][ T1164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.296124][ T1164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 348.557683][ T1164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.612847][ T1164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.653151][ T1164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 348.816123][ T1164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.849164][ T1164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.883338][ T1164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 348.918490][T16533] validate_nla: 1 callbacks suppressed [ 348.918505][T16533] netlink: 'syz.3.2927': attribute type 2 has an invalid length. [ 349.049405][ T1164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.061461][ T1164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.076448][ T1164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 349.213510][T16543] bond5: invalid ARP target 0.0.0.0 specified for addition [ 349.222037][T16543] bond5: option arp_ip_target: invalid value (0) [ 349.230526][T16543] bond5 (unregistering): Released all slaves [ 349.257659][T16454] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 349.317626][T16454] vxcan1 speed is unknown, defaulting to 1000 [ 349.633668][ T5635] Bluetooth: hci5: command tx timeout [ 349.899692][ T1164] veth1_to_bridge: left allmulticast mode [ 349.917425][ T1164] veth1_to_bridge: left promiscuous mode [ 349.939064][ T1164] bridge0: port 4(veth1_to_bridge) entered disabled state [ 349.996736][ T1164] gretap0: left allmulticast mode [ 350.019506][ T1164] gretap0: left promiscuous mode [ 350.043942][ T1164] bridge0: port 3(gretap0) entered disabled state [ 350.079074][ T1164] bridge_slave_1: left allmulticast mode [ 350.098388][ T1164] bridge_slave_1: left promiscuous mode [ 350.124502][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.406205][ T1164]  (unregistering): (slave ip6gre1): Releasing backup interface [ 350.414361][ T1164] ip6gre1 (unregistering): left promiscuous mode [ 351.277096][ T1164]  (unregistering): Released all slaves [ 351.293398][ T1164] bond1 (unregistering): Released all slaves [ 351.309306][ T1164] veth1_macvtap (unregistering): Released all slaves [ 351.338754][ T1164] bond0 (unregistering): Released all slaves [ 351.356174][ T1164] bond2 (unregistering): (slave veth7): Releasing active interface [ 351.366307][ T1164] bond2 (unregistering): Released all slaves [ 351.386786][ T1164] bond3 (unregistering): Released all slaves [ 351.433199][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 351.712456][ T5635] Bluetooth: hci5: command tx timeout [ 351.816659][T16619] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 351.889890][T16619] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 351.902950][T16632] netlink: 'syz.2.2953': attribute type 1 has an invalid length. [ 351.928129][T16619] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 351.977782][T16632] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 352.038652][T16633] pimreg: entered allmulticast mode [ 352.169285][T16637] bond1: (slave geneve2): Releasing active interface [ 352.226670][T16637] bond5: (slave geneve3): Releasing active interface [ 352.259636][T16637] bond6: (slave vcan1): Releasing backup interface [ 352.276384][T16637] vcan1: left promiscuous mode [ 352.291864][T16637] bond7: (slave vxcan1): Releasing backup interface [ 352.303476][T16637] bond10: (slave bridge4): Releasing active interface [ 352.318865][T16637] bond13: (slave bridge6): Releasing backup interface [ 352.326618][T16637] bridge6: left promiscuous mode [ 352.343100][T16637] bond14: (slave vxcan3): Releasing backup interface [ 352.353651][T16637] bond14: (slave vxcan5): making interface the new active one [ 352.368371][T16637] bond14: (slave vxcan5): Releasing backup interface [ 352.453781][ T3326] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 352.474712][ T3326] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 352.637400][ T3326] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 352.827902][ T3326] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 352.939825][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 353.200075][T16689] sctp: [Deprecated]: syz.2.2962 (pid 16689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.200075][T16689] Use struct sctp_sack_info instead [ 353.230354][T16454] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.239205][T16454] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.247487][T16454] bridge_slave_0: entered allmulticast mode [ 353.255815][T16454] bridge_slave_0: entered promiscuous mode [ 353.293825][T16454] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.304179][T16454] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.323014][T16454] bridge_slave_1: entered allmulticast mode [ 353.350351][T16454] bridge_slave_1: entered promiscuous mode [ 353.555506][T16454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.603705][T16696] syzkaller0: entered promiscuous mode [ 353.621829][T16696] syzkaller0: entered allmulticast mode [ 353.674460][T16706] __nla_validate_parse: 6 callbacks suppressed [ 353.674479][T16706] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2967'. [ 353.693439][T16454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.792060][ T5635] Bluetooth: hci5: command tx timeout [ 353.903827][T16715] netlink: 'syz.1.2968': attribute type 21 has an invalid length. [ 353.920236][T16699] syzkaller0: entered promiscuous mode [ 353.926743][T16715] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2968'. [ 353.936641][T16699] syzkaller0: entered allmulticast mode [ 354.039670][T16454] team0: Port device team_slave_0 added [ 354.056796][ T1164] hsr_slave_0: left promiscuous mode [ 354.072283][ T1164] hsr_slave_1: left promiscuous mode [ 354.128304][ T1164] veth1_vlan: left allmulticast mode [ 354.141494][ T1164] : left allmulticast mode [ 354.153122][ T1164] vet: left allmulticast mode [ 354.163666][ T1164] veth1_vlan: left promiscuous mode [ 354.847367][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 354.865819][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 355.871415][ T5635] Bluetooth: hci5: command tx timeout [ 356.429805][T16454] team0: Port device team_slave_1 added [ 356.458198][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 356.497439][T16739] tipc: Enabling of bearer rejected, failed to enable media [ 356.611887][T16454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.644273][T16454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.713115][T16454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.728918][T16454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.736653][T16454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.764035][T16454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.780258][T16753] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2974'. [ 356.839303][T16756] netlink: 'syz.4.2976': attribute type 1 has an invalid length. [ 357.155268][T16454] hsr_slave_0: entered promiscuous mode [ 357.169127][T16769] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2980'. [ 357.205822][T16454] hsr_slave_1: entered promiscuous mode [ 357.296146][ T1164] IPVS: stop unused estimator thread 0... [ 357.401612][T16778] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 357.426664][T16778] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 357.458054][T16778] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 357.721984][T16796] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2985'. [ 357.741964][T16796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2985'. [ 357.764785][T16796] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2985'. [ 357.936198][T16803] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2987'. [ 358.025900][T16803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2987'. [ 358.955056][T16454] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 358.968779][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 358.977160][T16454] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 358.993462][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.002273][T16454] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 359.025473][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.033717][T16454] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 359.078944][T16454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.148195][T16841] netlink: 'syz.2.2993': attribute type 3 has an invalid length. [ 359.399271][T16454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.460205][T16454] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.509791][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.517002][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.569897][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.577081][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.803502][T16869] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 360.753532][T16907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3006'. [ 360.786371][T16907] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3006'. [ 361.068270][T16920] netlink: 766 bytes leftover after parsing attributes in process `syz.2.3009'. [ 361.120296][T16920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'. [ 361.209235][T16454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.267040][T16925] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3011'. [ 361.368693][T16928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.460146][T16932] netlink: 'syz.4.3013': attribute type 8 has an invalid length. [ 361.470626][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3013'. [ 361.485247][T16454] veth0_vlan: entered promiscuous mode [ 361.523406][T16454] veth1_vlan: entered promiscuous mode [ 361.630387][T16454] veth0_macvtap: entered promiscuous mode [ 361.686126][T16454] veth1_macvtap: entered promiscuous mode [ 361.767476][T16454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.856388][T16454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.936476][ T1176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.980653][ T1176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.018966][ T1176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.046663][ T1176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.307943][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.349759][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.439616][T16967] vlan4: entered allmulticast mode [ 362.461703][T16967] bond0: entered allmulticast mode [ 362.538850][ T3375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.572837][ T3375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.701564][T16959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.764471][T16979] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 362.947573][T16984] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2903'. [ 362.989066][T16984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2903'. [ 363.018161][T16984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2903'. [ 363.117627][T16989] lo: entered allmulticast mode [ 363.142625][T16988] lo: left allmulticast mode [ 363.293533][ T4947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.315020][ T4947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.325638][ T4947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.343568][ T4947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.353956][ T4947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.049840][T17018] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.3032'. [ 364.550431][T17049] syzkaller1: entered promiscuous mode [ 364.590896][T17049] syzkaller1: entered allmulticast mode [ 364.746897][T16992] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 364.790035][T16992] vxcan1 speed is unknown, defaulting to 1000 [ 364.984144][T17071] tipc: Started in network mode [ 365.011950][T17071] tipc: Node identity 4eda490e95a5, cluster identity 4711 [ 365.039079][T17071] tipc: Enabled bearer , priority 0 [ 365.289127][T17064] syzkaller0: entered promiscuous mode [ 365.309913][T17064] syzkaller0: entered allmulticast mode [ 365.336268][T17064] tipc: Resetting bearer [ 365.391245][ T4947] Bluetooth: hci0: command tx timeout [ 365.613854][ T6673] tipc: Resetting bearer [ 365.637043][T17063] tipc: Resetting bearer [ 367.481143][ T4947] Bluetooth: hci0: command tx timeout [ 369.026318][T17063] tipc: Disabling bearer [ 369.039073][T17089] netlink: 'syz.3.3050': attribute type 1 has an invalid length. [ 369.055756][ T9] tipc: Node number set to 3682552078 [ 369.233483][T17139] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 369.302804][T17142] ipt_ECN: cannot use operation on non-tcp rule [ 369.471202][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 369.551993][ T5635] Bluetooth: hci0: command tx timeout [ 369.836537][T17156] syzkaller0: entered promiscuous mode [ 369.871958][T17156] syzkaller0: entered allmulticast mode [ 369.883653][T17172] __nla_validate_parse: 6 callbacks suppressed [ 369.883672][T17172] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3060'. [ 369.985715][T17172] bond5 (unregistering): Released all slaves [ 371.129132][T17189] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3063'. [ 371.140090][T17189] openvswitch: netlink: Message has 5 unknown bytes. [ 371.635469][ T5635] Bluetooth: hci0: command tx timeout [ 371.938999][T16992] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.948183][T16992] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.956404][T16992] bridge_slave_0: entered allmulticast mode [ 371.964597][T16992] bridge_slave_0: entered promiscuous mode [ 371.973909][T16992] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.982285][T16992] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.989536][T16992] bridge_slave_1: entered allmulticast mode [ 372.006877][T16992] bridge_slave_1: entered promiscuous mode [ 372.145853][T16992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.189311][T16992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.212439][T17217] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 372.265719][T16992] team0: Port device team_slave_0 added [ 372.274743][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3072'. [ 372.286140][T16992] team0: Port device team_slave_1 added [ 372.349680][T16992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.357271][T16992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.388434][T16992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.403050][T17230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3070'. [ 372.423503][T16992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.456493][T16992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.501885][T16992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.626444][T16992] hsr_slave_0: entered promiscuous mode [ 372.633789][T16992] hsr_slave_1: entered promiscuous mode [ 372.641277][T16992] debugfs: 'hsr0' already exists in 'hsr' [ 372.647131][T16992] Cannot create hsr debugfs directory [ 373.200583][T16992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.241974][T16992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.285820][T16992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 37305 - 0 [ 373.329443][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 373.349427][T17272] syz_tun: refused to change device tx_queue_len [ 373.419977][T17274] : entered promiscuous mode [ 373.540436][T16992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.570873][T16992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.602832][T16992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 37305 - 0 [ 373.788183][T16992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.802035][T16992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.814345][T16992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 37305 - 0 [ 373.994703][T16992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.029215][T16992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.055692][T16992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 37305 - 0 [ 374.117772][T17302] syzkaller1: entered promiscuous mode [ 374.131900][T17302] syzkaller1: entered allmulticast mode [ 374.162507][T17315] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 374.343911][T17326] openvswitch: netlink: EtherType 50a is less than min 600 [ 374.761455][T16992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 374.795703][T16992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 374.819692][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3103'. [ 374.820109][T16992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 374.857543][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3103'. [ 374.877423][T16992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.899030][T16992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.924142][T16992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.951719][T16992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.991414][T16992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.013556][T17351] macvlan0: entered promiscuous mode [ 375.260207][T16992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.360048][T16992] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.394818][ T6673] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.402062][ T6673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.484487][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.491678][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.727460][T17392] xt_hashlimit: size too large, truncated to 1048576 [ 375.802440][ C0] vcan0: j1939_tp_rxtimer: 0xffff88808190c800: rx timeout, send abort [ 376.302543][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801c3a7400: rx timeout, send abort [ 376.312028][ C0] vcan0: j1939_tp_rxtimer: 0xffff88808190c800: abort rx timeout. Force session deactivation [ 376.479772][T17417] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3119'. [ 376.514944][T17418] netlink: 'syz.3.3119': attribute type 30 has an invalid length. [ 376.524572][T17425] x_tables: duplicate underflow at hook 2 [ 376.640803][T17418] bond10: option arp_missed_max: invalid value (0) [ 376.647605][T17418] bond10: option arp_missed_max: allowed values 1 - 255 [ 376.679255][T17418] bond10 (unregistering): Released all slaves [ 376.692566][T17430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3122'. [ 376.748358][T16992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.810973][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801c3a7400: abort rx timeout. Force session deactivation [ 376.956868][T17436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3123'. [ 377.105085][T17447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3123'. [ 377.142960][T17441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3123'. [ 377.152775][T17440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.207909][T17440] netlink: 'syz.3.3125': attribute type 30 has an invalid length. [ 377.302687][T17452] Bluetooth: MGMT ver 1.23 [ 377.485368][T16992] veth0_vlan: entered promiscuous mode [ 377.522316][T16992] veth1_vlan: entered promiscuous mode [ 377.602233][T16992] veth0_macvtap: entered promiscuous mode [ 377.629290][T16992] veth1_macvtap: entered promiscuous mode [ 377.679573][T16992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.737797][T16992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.755235][T17465] sctp: [Deprecated]: syz.0.3132 (pid 17465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.755235][T17465] Use struct sctp_sack_info instead [ 377.792887][ T1164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.811124][ T1164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.836660][ T1164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.865048][ T1164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.125241][T17474] sctp: [Deprecated]: syz.3.3134 (pid 17474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.125241][T17474] Use struct sctp_sack_info instead [ 378.132816][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.200810][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.294167][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.328966][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.512184][T17485] xt_l2tp: v2 sid > 0xffff: 1114112 [ 378.534486][T17485] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3136'. [ 378.571397][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 378.852758][T17507] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 378.892601][T17507] netlink: 'syz.3.3140': attribute type 1 has an invalid length. [ 379.014001][ T4947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.025038][ T4947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.035404][ T4947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.055177][ T4947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.069840][ T4947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.375451][T17520] IPVS: set_ctl: invalid protocol: 7 172.20.20.34:20001 [ 379.662369][T17531] netlink: 'syz.3.3147': attribute type 1 has an invalid length. [ 379.729330][T17530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3145'. [ 379.917332][T17542] netlink: 'syz.0.3149': attribute type 1 has an invalid length. [ 380.008717][T17542] bond1: entered promiscuous mode [ 380.016219][T17542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.078672][T17546] netlink: 'syz.4.3150': attribute type 30 has an invalid length. [ 380.115502][T17542] bond1: (slave bridge1): making interface the new active one [ 380.146588][T17542] bridge1: entered promiscuous mode [ 380.168288][T17542] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 380.196964][T17546] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 380.209360][T17510] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 380.236584][T17510] vxcan1 speed is unknown, defaulting to 1000 [ 380.932947][T17585] netlink: 'syz.3.3162': attribute type 21 has an invalid length. [ 381.151550][ T5635] Bluetooth: hci4: command tx timeout [ 381.185162][T17594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3165'. [ 381.630200][T17510] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.643164][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3169'. [ 381.660026][T17510] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.693880][T17510] bridge_slave_0: entered allmulticast mode [ 381.716018][T17510] bridge_slave_0: entered promiscuous mode [ 381.732946][T17510] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.763967][T17510] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.784764][T17618] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 381.799288][T17510] bridge_slave_1: entered allmulticast mode [ 381.812904][T17510] bridge_slave_1: entered promiscuous mode [ 381.852744][T17615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.916961][T17615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.988626][T17620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.057361][T17510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.136393][T17510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.227137][T17646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.247131][T17510] team0: Port device team_slave_0 added [ 382.267214][T17510] team0: Port device team_slave_1 added [ 382.419896][T17510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.431357][T17510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.458860][T17510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.471736][T17656] nbd: couldn't find a device at index 0 [ 382.500461][T17510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.508610][T17510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.536136][T17510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.661915][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3179'. [ 382.682199][T17659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3179'. [ 382.712685][T17510] hsr_slave_0: entered promiscuous mode [ 382.723931][T17510] hsr_slave_1: entered promiscuous mode [ 382.743852][T17510] debugfs: 'hsr0' already exists in 'hsr' [ 382.765516][T17510] Cannot create hsr debugfs directory [ 382.793920][T17664] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3181'. [ 382.811468][T17664] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3181'. [ 382.978375][T17672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3183'. [ 383.003271][T17672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3183'. [ 383.095926][T17678] netlink: 'syz.3.3185': attribute type 1 has an invalid length. [ 383.124662][T17682] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 383.152395][T17686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3185'. [ 383.173192][T17686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3185'. [ 383.213268][T17678] bond10: entered promiscuous mode [ 383.218946][T17678] 8021q: adding VLAN 0 to HW filter on device bond10 [ 383.234647][ T5635] Bluetooth: hci4: command tx timeout [ 383.301508][T17695] netlink: 'syz.0.3186': attribute type 3 has an invalid length. [ 383.315183][T17689] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.323655][T17689] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.336228][T17695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3186'. [ 383.368608][T17692] bond10: (slave bridge7): making interface the new active one [ 383.389464][T17692] bridge7: entered promiscuous mode [ 383.408171][T17692] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 383.533485][T17702] netlink: zone id is out of range [ 383.538822][T17702] netlink: zone id is out of range [ 383.545278][T17702] netlink: zone id is out of range [ 383.550551][T17702] netlink: zone id is out of range [ 383.568438][T17702] netlink: zone id is out of range [ 383.574539][T17702] netlink: zone id is out of range [ 383.579766][T17702] netlink: zone id is out of range [ 383.585661][T17702] netlink: zone id is out of range [ 383.833764][T17510] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.847294][T17510] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.229781][T17510] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.263240][T17510] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.497561][T17510] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.508612][T17510] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.811932][T17510] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.832660][T17510] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.247710][T17783] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 385.312011][ T5635] Bluetooth: hci4: command tx timeout [ 385.449545][T17787] bond2: entered promiscuous mode [ 385.454920][T17787] bond2: entered allmulticast mode [ 385.460694][T17787] 8021q: adding VLAN 0 to HW filter on device bond2 [ 385.469986][T17510] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.487001][T17510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.519391][T17510] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.559052][T17510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.577868][T17510] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.620210][T17510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.702292][T17510] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.727583][T17510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.735219][T17800] syzkaller0: entered promiscuous mode [ 385.745343][T17800] syzkaller0: entered allmulticast mode [ 385.794471][T17800] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 386.017745][T17510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.074894][T17834] nbd: couldn't find device at index 0 [ 386.163696][T17510] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.182166][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.189377][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.237115][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.244329][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.532984][T17854] syzkaller1: entered promiscuous mode [ 386.546912][T17854] syzkaller1: entered allmulticast mode [ 386.759016][T17866] __nla_validate_parse: 7 callbacks suppressed [ 386.759034][T17866] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3232'. [ 386.776214][T17866] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3232'. [ 386.854093][T17867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3233'. [ 386.974728][T17873] syzkaller0: entered promiscuous mode [ 386.980409][T17873] syzkaller0: entered allmulticast mode [ 387.184112][T17510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.263254][T17510] veth0_vlan: entered promiscuous mode [ 387.293292][T17510] veth1_vlan: entered promiscuous mode [ 387.393902][T17510] veth0_macvtap: entered promiscuous mode [ 387.401690][ T5635] Bluetooth: hci4: command tx timeout [ 387.418778][T17510] veth1_macvtap: entered promiscuous mode [ 387.473410][T17510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.525384][T17510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.566138][ T1164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.610172][ T1164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.662171][ T1164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.693905][ T1164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.760234][T17900] can: request_module (can-proto-0) failed. [ 387.895809][ T6673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.917509][ T6673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.966883][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.979174][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.097404][T17911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3139'. [ 388.160359][T17915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3243'. [ 388.263495][T17920] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3245'. [ 388.374290][T17925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3247'. [ 388.385805][T17925] net_ratelimit: 6 callbacks suppressed [ 388.385849][T17925] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 388.413217][T17923] netlink: 'syz.4.3246': attribute type 1 has an invalid length. [ 388.985763][ T4947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 389.001324][ T4947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.010512][ T4947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.031650][ T4947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.040120][ T4947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.490339][T17959] can: request_module (can-proto-5) failed. [ 389.808881][T17965] syzkaller0: entered promiscuous mode [ 389.824081][T17965] syzkaller0: entered allmulticast mode [ 389.906857][T17987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3260'. [ 389.930594][T17979] netem: change failed [ 389.939879][T17980] netem: change failed [ 391.161336][ T4947] Bluetooth: hci1: command tx timeout [ 391.740237][T17943] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 391.756360][T17943] vxcan1 speed is unknown, defaulting to 1000 [ 391.864451][T18008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 391.958109][T18015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3266'. [ 391.992505][T18017] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3267'. [ 392.105259][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'. [ 392.115529][T18023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'. [ 392.207026][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'. [ 392.233737][ T3326] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.436796][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3273'. [ 392.449516][T18034] netlink: 50 bytes leftover after parsing attributes in process `syz.2.3273'. [ 392.464637][T18034] netlink: 50 bytes leftover after parsing attributes in process `syz.2.3273'. [ 392.527405][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3273'. [ 392.565769][T18034] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3273'. [ 392.995787][T17943] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.012829][T17943] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.034601][T17943] bridge_slave_0: entered allmulticast mode [ 393.054850][T17943] bridge_slave_0: entered promiscuous mode [ 393.091634][T17943] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.111221][T17943] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.123697][T17943] bridge_slave_1: entered allmulticast mode [ 393.131847][T17943] bridge_slave_1: entered promiscuous mode [ 393.231439][T17943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.238262][ T4947] Bluetooth: hci1: command tx timeout [ 393.265583][T17943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.407789][T17943] team0: Port device team_slave_0 added [ 393.432624][T17943] team0: Port device team_slave_1 added [ 393.486029][T17943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.503015][T17943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.566646][T17943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.588094][T17943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.603084][T17943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.659234][T17943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.845173][T17943] hsr_slave_0: entered promiscuous mode [ 393.890207][T17943] hsr_slave_1: entered promiscuous mode [ 393.897212][T17943] debugfs: 'hsr0' already exists in 'hsr' [ 393.903817][T17943] Cannot create hsr debugfs directory [ 394.108190][T18113] bond5: (slave bond_slave_1): Device is not our slave [ 394.117445][T18113] bond5: option active_slave: invalid value (bond_slave_1) [ 394.127337][T18113] bond5 (unregistering): Released all slaves [ 394.459232][T17943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 394.488439][T17943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 394.500345][T17943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.547675][T18131] macvlan0: entered allmulticast mode [ 394.555343][T18131] dummy0: entered allmulticast mode [ 394.564530][T18131] dummy0: entered promiscuous mode [ 394.674959][T17943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 394.700132][T17943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 394.714848][T17943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.731683][T18143] netlink: 'syz.1.3301': attribute type 5 has an invalid length. [ 394.752510][T18143] geneve3: entered promiscuous mode [ 394.757895][T18143] geneve3: entered allmulticast mode [ 394.771560][T18140] netlink: 'syz.2.3300': attribute type 19 has an invalid length. [ 394.789421][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 394.798819][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 394.828252][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 394.890571][T17943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 394.914743][T17943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 394.938054][T17943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.999469][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 395.025348][T18150] bridge0: port 3(batadv1) entered blocking state [ 395.032358][T18150] bridge0: port 3(batadv1) entered disabled state [ 395.039741][T18150] batadv1: entered allmulticast mode [ 395.049567][T18150] batadv1: entered promiscuous mode [ 395.122195][T17943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 395.146639][T17943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 395.158030][T17943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.311355][ T4947] Bluetooth: hci1: command tx timeout [ 395.522180][ T62] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 395.532163][ T62] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 395.752536][T18188] tipc: MTU too low for tipc bearer [ 395.782016][T18190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.929180][T17943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 395.953337][T17943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.972989][T17943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 395.994637][T17943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.011980][T17943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.046130][T17943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.084770][T17943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 396.129766][T17943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 396.277953][T17943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.329107][T17943] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.379721][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.386924][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.462540][ T3375] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.469732][ T3375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.570229][T18236] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 397.391331][ T4947] Bluetooth: hci1: command tx timeout [ 397.536737][T17943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.553760][T18285] __nla_validate_parse: 12 callbacks suppressed [ 397.553778][T18285] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3334'. [ 397.572567][T18285] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 397.680932][T17943] veth0_vlan: entered promiscuous mode [ 397.708360][T17943] veth1_vlan: entered promiscuous mode [ 397.759763][T17943] veth0_macvtap: entered promiscuous mode [ 397.778565][T17943] veth1_macvtap: entered promiscuous mode [ 397.832675][T17943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.840265][T18291] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3336'. [ 397.858485][T17943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.896035][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.928038][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.962581][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.013905][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.199101][T18310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3341'. [ 398.265198][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.292380][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.423913][ T6673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.454438][ T6673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.759561][T18336] Cannot find add_set index 0 as target [ 399.166706][T18361] syzkaller0: entered promiscuous mode [ 399.189314][T18361] syzkaller0: entered allmulticast mode [ 399.212224][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3352'. [ 399.305654][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 399.317943][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 399.333990][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 399.350978][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 399.359974][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 399.505295][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3353'. [ 399.530406][T18380] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 399.540017][T18380] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 399.828152][T18374] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 399.837400][T18374] vxcan1 speed is unknown, defaulting to 1000 [ 400.058058][T18398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3358'. [ 400.428139][T18374] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.435745][T18374] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.443428][T18374] bridge_slave_0: entered allmulticast mode [ 400.451359][T18374] bridge_slave_0: entered promiscuous mode [ 400.464798][T18374] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.472198][T18374] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.479337][T18374] bridge_slave_1: entered allmulticast mode [ 400.486866][T18374] bridge_slave_1: entered promiscuous mode [ 400.519016][T18374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.531350][T18374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.562376][T18374] team0: Port device team_slave_0 added [ 400.571840][T18374] team0: Port device team_slave_1 added [ 400.598234][T18374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.605306][T18374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.632009][T18374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.645467][T18374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.652696][T18374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.681666][T18374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.728001][T18374] hsr_slave_0: entered promiscuous mode [ 400.734669][T18374] hsr_slave_1: entered promiscuous mode [ 400.740887][T18374] debugfs: 'hsr0' already exists in 'hsr' [ 400.746656][T18374] Cannot create hsr debugfs directory [ 400.908354][T18374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.919040][T18374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 401.016170][T18374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.028789][T18374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 401.126655][T18374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.137449][T18374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 401.210099][T18374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.221665][T18374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 401.391927][ T5635] Bluetooth: hci3: command tx timeout [ 401.816354][T18349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.866435][T18374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.958660][T18374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.005406][T18374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 402.046683][T18374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.068018][T18374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 402.094849][T18374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.116864][T18374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 402.126841][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3365'. [ 402.142992][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3365'. [ 402.187912][T18374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.233051][T18422] bond1: entered allmulticast mode [ 402.527524][T18444] netlink: 'syz.0.3371': attribute type 7 has an invalid length. [ 402.609162][T18374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.703924][T18374] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.739291][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.746565][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.800427][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.807653][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.289810][T18477] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3377'. [ 403.328512][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 403.364321][T18477] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3377'. [ 403.390258][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 403.484270][ T5635] Bluetooth: hci3: command tx timeout [ 403.716398][T18491] syzkaller0: entered promiscuous mode [ 403.741745][T18491] syzkaller0: entered allmulticast mode [ 403.884310][T18491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3382'. [ 403.915981][T18491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3382'. [ 404.477775][T18374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.610287][T18539] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 404.664675][T18374] veth0_vlan: entered promiscuous mode [ 404.719089][T18374] veth1_vlan: entered promiscuous mode [ 404.859590][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3392'. [ 404.872429][T18545] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 404.882936][T18554] IPv6: NLM_F_CREATE should be specified when creating new route [ 404.898555][T18545] bond2 (unregistering): Released all slaves [ 404.983986][T18556] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 405.025264][T18374] veth0_macvtap: entered promiscuous mode [ 405.066341][T18374] veth1_macvtap: entered promiscuous mode [ 405.144833][T18374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.194941][T18374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.248999][ T1176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.293017][ T1176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.336435][ T1176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.358809][ T1176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.551070][ T5635] Bluetooth: hci3: command tx timeout [ 405.630408][T18580] netlink: 'syz.4.3401': attribute type 1 has an invalid length. [ 405.658100][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.680896][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.837354][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.884972][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.977553][T18592] netlink: 'syz.4.3402': attribute type 21 has an invalid length. [ 405.986309][T18594] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3403'. [ 406.011567][T18592] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3402'. [ 406.023007][T18594] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3403'. [ 406.049879][T18596] erspan0: entered promiscuous mode [ 406.075267][T18596] erspan0: entered allmulticast mode [ 406.104108][T18592] netlink: 'syz.4.3402': attribute type 49 has an invalid length. [ 406.311068][T18592] ip6gretap0: entered promiscuous mode [ 406.321611][T18592] ip6gretap0: entered allmulticast mode [ 406.482875][T18622] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 406.499370][T18622] syzkaller1: linktype set to 823 [ 406.528724][T18623] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 406.571314][T18623] syzkaller1: linktype set to 823 [ 407.135792][T18662] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 407.206298][T18662] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 407.246172][T18662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.549445][T18684] netlink: 'syz.3.3426': attribute type 83 has an invalid length. [ 407.560470][T18682] syzkaller0: entered promiscuous mode [ 407.566492][T18682] syzkaller0: entered allmulticast mode [ 407.579979][T18684] netlink: 'syz.3.3426': attribute type 83 has an invalid length. [ 407.588377][T18684] netlink: 'syz.3.3426': attribute type 83 has an invalid length. [ 407.606881][T18684] netlink: 'syz.3.3426': attribute type 83 has an invalid length. [ 407.615294][T18684] netlink: 'syz.3.3426': attribute type 83 has an invalid length. [ 407.623731][T18684] netlink: 'syz.3.3426': attribute type 83 has an invalid length. [ 407.633489][ T5635] Bluetooth: hci3: command tx timeout [ 407.639889][T18684] netlink: 'syz.3.3426': attribute type 83 has an invalid length. [ 407.649071][T18684] netlink: 'syz.3.3426': attribute type 83 has an invalid length. [ 407.657489][T18684] netlink: 'syz.3.3426': attribute type 83 has an invalid length. [ 407.665905][T18684] netlink: 'syz.3.3426': attribute type 83 has an invalid length. [ 407.769969][T18690] IPv6: sit1: Disabled Multicast RS [ 407.777360][T18690] sit1: entered allmulticast mode [ 408.361932][T18719] __nla_validate_parse: 4 callbacks suppressed [ 408.361951][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'. [ 408.830176][T18735] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3437'. [ 408.875969][T18735] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 408.897409][T18740] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3439'. [ 408.918839][T18741] syzkaller0: entered promiscuous mode [ 408.934424][ T9] IPVS: starting estimator thread 0... [ 408.941560][T18741] syzkaller0: entered allmulticast mode [ 409.042080][T18744] IPVS: using max 28 ests per chain, 67200 per kthread [ 409.139404][T18751] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3442'. [ 409.341912][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3443'. [ 409.464578][T18778] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3446'. [ 409.652483][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3449'. [ 409.700283][T18788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3448'. [ 409.711918][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3448'. [ 409.759581][T18790] Bluetooth: MGMT ver 1.23 [ 410.043592][T18799] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3452'. [ 410.063765][T18799] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 410.469247][T18813] syzkaller0: entered promiscuous mode [ 410.496620][T18813] syzkaller0: entered allmulticast mode [ 410.504887][T18817] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 410.539456][T18815] tipc: Started in network mode [ 410.553592][T18815] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 410.561720][T18815] tipc: Enabled bearer , priority 24 [ 410.617373][T18824] 8021q: VLANs not supported on gre0 [ 411.014982][T18851] : renamed from vlan0 (while UP) [ 411.115856][T18845] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 411.149023][T18845] vxcan1 speed is unknown, defaulting to 1000 [ 411.278160][T18861] netlink: Unknown conntrack attr (0) [ 411.748394][T18870] syzkaller1: entered promiscuous mode [ 411.755305][T18870] syzkaller1: entered allmulticast mode [ 411.767530][T18877] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 411.888639][ T9] tipc: Node number set to 10005162 [ 412.057567][T18883] syzkaller0: entered promiscuous mode [ 412.064875][T18883] syzkaller0: entered allmulticast mode [ 412.113513][T18894] ip6t_srh: unknown srh match flags 4000 [ 414.195062][T18923] veth0_to_bond: entered allmulticast mode [ 414.270673][T18929] __nla_validate_parse: 5 callbacks suppressed [ 414.301534][T18929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3484'. [ 414.313385][T18929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3484'. [ 414.354774][T18929] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3484'. [ 414.394106][T18929] netlink: ct family unspecified [ 414.779783][T18944] netlink: 65546 bytes leftover after parsing attributes in process `syz.4.3489'. [ 415.226496][T18960] syzkaller0: entered promiscuous mode [ 415.252991][T18960] syzkaller0: entered allmulticast mode [ 415.315146][T18965] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 415.388212][T18958] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 415.397284][ T5736] IPVS: starting estimator thread 0... [ 415.435982][T18972] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3496'. [ 415.454113][T18972] netlink: ct family unspecified [ 415.493154][T18970] IPVS: using max 32 ests per chain, 76800 per kthread [ 415.736342][T18985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3499'. [ 415.833918][T18990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.997359][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3506'. [ 416.025257][T18997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3506'. [ 416.059907][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3506'. [ 416.088071][T18997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3506'. [ 416.372098][T19014] syzkaller0: entered promiscuous mode [ 416.378272][T19014] syzkaller0: entered allmulticast mode [ 416.614090][T19028] pim6reg527: entered allmulticast mode [ 416.974490][ T5728] hsr0: entered promiscuous mode [ 417.190169][T19057] xt_hashlimit: size too large, truncated to 1048576 [ 417.372514][T19064] atomic_op ffff88807b6f8198 conn xmit_atomic 0000000000000000 [ 417.469379][T19069] syzkaller0: entered promiscuous mode [ 417.495658][T19069] syzkaller0: entered allmulticast mode [ 417.928771][T19086] validate_nla: 60 callbacks suppressed [ 417.928789][T19086] netlink: 'syz.3.3530': attribute type 12 has an invalid length. [ 418.082141][T19086] bond1: option primary_reselect: invalid value (255) [ 418.098445][T19086] bond1 (unregistering): Released all slaves [ 418.268841][T19105] tipc: Started in network mode [ 418.288234][T19105] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 418.329909][T19105] tipc: Enabling of bearer rejected, failed to enable media [ 418.479601][T19111] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 418.548187][T19114] netlink: 'syz.2.3537': attribute type 21 has an invalid length. [ 418.557195][T19113] syzkaller0: entered promiscuous mode [ 418.565903][T19113] syzkaller0: entered allmulticast mode [ 418.581233][T19114] netlink: 'syz.2.3537': attribute type 22 has an invalid length. [ 418.608477][T19114] netlink: 'syz.2.3537': attribute type 23 has an invalid length. [ 418.630991][T19114] netlink: 'syz.2.3537': attribute type 25 has an invalid length. [ 418.687577][T19119] xt_HMARK: proto mask must be zero with L3 mode [ 419.411559][T19172] __nla_validate_parse: 18 callbacks suppressed [ 419.411577][T19172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3553'. [ 419.519528][T19178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3554'. [ 419.568646][T19172] sch_tbf: burst 12 is lower than device bridge1 mtu (1514) ! [ 419.569748][T19182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3554'. [ 419.850175][T19195] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3561'. [ 419.967083][T19200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3562'. [ 419.980515][T19200] syz_tun: entered allmulticast mode [ 419.991980][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3562'. [ 420.055377][T19199] syz_tun: left allmulticast mode [ 420.085889][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'. [ 420.105544][T19203] ipt_REJECT: ECHOREPLY no longer supported. [ 420.127879][T19204] syzkaller0: entered promiscuous mode [ 420.145895][T19204] syzkaller0: entered allmulticast mode [ 420.519267][T19227] rdma_rxe: rxe_newlink: failed to add bond0 [ 420.564741][T19227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3570'. [ 420.580024][T19229] veth0_to_bond: entered allmulticast mode [ 420.832098][T19243] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 420.983285][T19251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3579'. [ 421.005499][T19251] openvswitch: netlink: Flow actions attr not present in new flow. [ 421.178008][T19263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3582'. [ 421.266698][T19270] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 421.777832][T19298] netlink: 'syz.0.3591': attribute type 3 has an invalid length. [ 421.994885][T19310] netlink: 'syz.0.3595': attribute type 21 has an invalid length. [ 422.014658][T19310] IPv6: NLM_F_CREATE should be specified when creating new route [ 422.202337][T19318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.242520][T19320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.584267][T19343] FAULT_INJECTION: forcing a failure. [ 422.584267][T19343] name failslab, interval 1, probability 0, space 0, times 0 [ 422.620339][T19343] CPU: 1 UID: 0 PID: 19343 Comm: syz.0.3603 Not tainted syzkaller #0 PREEMPT(full) [ 422.620376][T19343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 422.620398][T19343] Call Trace: [ 422.620408][T19343] [ 422.620416][T19343] dump_stack_lvl+0xe8/0x150 [ 422.620515][T19343] should_fail_ex+0x412/0x560 [ 422.620645][T19343] should_failslab+0xa8/0x100 [ 422.620700][T19343] __kmalloc_noprof+0xe8/0x760 [ 422.620736][T19343] ? ovs_nla_copy_actions+0x68/0x3d0 [ 422.620835][T19343] ovs_nla_copy_actions+0x68/0x3d0 [ 422.620871][T19343] ovs_packet_cmd_execute+0x648/0xea0 [ 422.620902][T19343] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 422.620928][T19343] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 422.620995][T19343] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 422.621023][T19343] genl_family_rcv_msg_doit+0x22a/0x330 [ 422.621050][T19343] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 422.621080][T19343] ? bpf_lsm_capable+0x9/0x20 [ 422.621121][T19343] ? security_capable+0x7e/0x2c0 [ 422.621210][T19343] genl_rcv_msg+0x61c/0x7a0 [ 422.621236][T19343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.621254][T19343] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 422.621277][T19343] ? __pfx_ref_tracker_free+0x10/0x10 [ 422.621342][T19343] netlink_rcv_skb+0x232/0x4b0 [ 422.621388][T19343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.621409][T19343] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.621449][T19343] ? down_read+0x270/0x2e0 [ 422.621489][T19343] ? genl_rcv+0xd/0x40 [ 422.621509][T19343] genl_rcv+0x28/0x40 [ 422.621526][T19343] netlink_unicast+0x75c/0x8e0 [ 422.621558][T19343] netlink_sendmsg+0x813/0xb40 [ 422.621600][T19343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.621629][T19343] ? aa_sock_msg_perm+0xf1/0x1b0 [ 422.621685][T19343] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 422.621713][T19343] ____sys_sendmsg+0x972/0x9f0 [ 422.621787][T19343] ? __might_fault+0xaf/0x130 [ 422.621816][T19343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.621851][T19343] ? import_iovec+0x73/0xa0 [ 422.621918][T19343] ___sys_sendmsg+0x2a5/0x360 [ 422.621943][T19343] ? __lock_acquire+0x6b5/0x2cf0 [ 422.621982][T19343] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.622041][T19343] ? __fget_files+0x2a/0x420 [ 422.622077][T19343] ? __fget_files+0x3a0/0x420 [ 422.622109][T19343] __x64_sys_sendmsg+0x1bd/0x2a0 [ 422.622139][T19343] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.622174][T19343] ? __pfx_ksys_write+0x10/0x10 [ 422.622209][T19343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.622249][T19343] do_syscall_64+0x15f/0xf80 [ 422.622319][T19343] ? trace_irq_disable+0x3b/0x140 [ 422.622360][T19343] ? clear_bhb_loop+0x40/0x90 [ 422.622384][T19343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.622402][T19343] RIP: 0033:0x7f178a79ce59 [ 422.622419][T19343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.622435][T19343] RSP: 002b:00007f17889f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.622456][T19343] RAX: ffffffffffffffda RBX: 00007f178aa15fa0 RCX: 00007f178a79ce59 [ 422.622469][T19343] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 422.622480][T19343] RBP: 00007f17889f6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.622492][T19343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.622503][T19343] R13: 00007f178aa16038 R14: 00007f178aa15fa0 R15: 00007ffcfec5f388 [ 422.622533][T19343] [ 423.422985][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 423.544354][T19373] ipvlan2: entered promiscuous mode [ 424.619308][T19453] xt_hashlimit: size too large, truncated to 1048576 [ 424.812983][T19466] netlink: 'syz.1.3624': attribute type 21 has an invalid length. [ 424.827132][T19466] netlink: 'syz.1.3624': attribute type 6 has an invalid length. [ 424.838121][T19466] __nla_validate_parse: 7 callbacks suppressed [ 424.838140][T19466] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3624'. [ 424.857043][T19466] netlink: 'syz.1.3624': attribute type 1 has an invalid length. [ 424.870146][T19468] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3625'. [ 424.895464][T19466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.914591][T19466] vlan2: entered allmulticast mode [ 424.919896][T19466] bond1: entered allmulticast mode [ 424.940939][T19466] bond1: (slave geneve2): making interface the new active one [ 424.947736][T19468] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 424.948574][T19466] geneve2: entered allmulticast mode [ 424.966691][T19466] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 425.260015][T19477] netlink: 'syz.4.3628': attribute type 9 has an invalid length. [ 425.414694][T19462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3623'. [ 425.537670][T19490] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 425.550320][T19493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3633'. [ 425.616899][T19496] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3635'. [ 425.742797][T19500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3636'. [ 425.767300][T19502] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3638'. [ 425.823068][T19502] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 425.866806][T19502] FAULT_INJECTION: forcing a failure. [ 425.866806][T19502] name failslab, interval 1, probability 0, space 0, times 0 [ 425.930112][T19502] CPU: 0 UID: 0 PID: 19502 Comm: syz.4.3638 Not tainted syzkaller #0 PREEMPT(full) [ 425.930138][T19502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 425.930150][T19502] Call Trace: [ 425.930158][T19502] [ 425.930166][T19502] dump_stack_lvl+0xe8/0x150 [ 425.930194][T19502] should_fail_ex+0x412/0x560 [ 425.930233][T19502] should_failslab+0xa8/0x100 [ 425.930263][T19502] ? skb_clone+0x212/0x3a0 [ 425.930387][T19502] kmem_cache_alloc_noprof+0x87/0x650 [ 425.930423][T19502] skb_clone+0x212/0x3a0 [ 425.930456][T19502] __netlink_deliver_tap+0x404/0x850 [ 425.930496][T19502] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.930525][T19502] netlink_deliver_tap+0x19c/0x1b0 [ 425.930554][T19502] netlink_sendskb+0x68/0x140 [ 425.930581][T19502] netlink_rcv_skb+0x2b6/0x4b0 [ 425.930608][T19502] ? __pfx_genl_rcv_msg+0x10/0x10 [ 425.930630][T19502] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 425.930676][T19502] ? down_read+0x270/0x2e0 [ 425.930694][T19502] ? genl_rcv+0xd/0x40 [ 425.930714][T19502] genl_rcv+0x28/0x40 [ 425.930732][T19502] netlink_unicast+0x75c/0x8e0 [ 425.930767][T19502] netlink_sendmsg+0x813/0xb40 [ 425.930804][T19502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.930835][T19502] ? aa_sock_msg_perm+0xf1/0x1b0 [ 425.930863][T19502] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.930905][T19502] ____sys_sendmsg+0x972/0x9f0 [ 425.930930][T19502] ? __might_fault+0xaf/0x130 [ 425.930960][T19502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.930995][T19502] ? import_iovec+0x73/0xa0 [ 425.931027][T19502] ___sys_sendmsg+0x2a5/0x360 [ 425.931052][T19502] ? __lock_acquire+0x6b5/0x2cf0 [ 425.931076][T19502] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.931137][T19502] ? __fget_files+0x2a/0x420 [ 425.931177][T19502] ? __fget_files+0x3a0/0x420 [ 425.931212][T19502] __x64_sys_sendmsg+0x1bd/0x2a0 [ 425.931244][T19502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.931283][T19502] ? __pfx_ksys_write+0x10/0x10 [ 425.931319][T19502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.931342][T19502] do_syscall_64+0x15f/0xf80 [ 425.931376][T19502] ? trace_irq_disable+0x3b/0x140 [ 425.931405][T19502] ? clear_bhb_loop+0x40/0x90 [ 425.931430][T19502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.931450][T19502] RIP: 0033:0x7ffae0f9ce59 [ 425.931469][T19502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.931486][T19502] RSP: 002b:00007ffae1e3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.931506][T19502] RAX: ffffffffffffffda RBX: 00007ffae1215fa0 RCX: 00007ffae0f9ce59 [ 425.931521][T19502] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 425.931534][T19502] RBP: 00007ffae1e3d090 R08: 0000000000000000 R09: 0000000000000000 [ 425.931545][T19502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 425.931557][T19502] R13: 00007ffae1216038 R14: 00007ffae1215fa0 R15: 00007ffe36682138 [ 425.931590][T19502] [ 426.322338][T19517] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3642'. [ 426.532252][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3643'. [ 426.536858][T19524] netem: change failed [ 426.777517][T19530] syzkaller0: entered promiscuous mode [ 426.797345][T19530] syzkaller0: entered allmulticast mode [ 426.805285][T19536] [ 426.807647][T19536] ====================================================== [ 426.814674][T19536] WARNING: possible circular locking dependency detected [ 426.821709][T19536] syzkaller #0 Not tainted [ 426.826127][T19536] ------------------------------------------------------ [ 426.833141][T19536] syz.3.3649/19536 is trying to acquire lock: [ 426.839199][T19536] ffff888027013418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 426.848675][T19536] [ 426.848675][T19536] but task is already holding lock: [ 426.856035][T19536] ffff888027012ef0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 426.866227][T19536] [ 426.866227][T19536] which lock already depends on the new lock. [ 426.866227][T19536] [ 426.876623][T19536] [ 426.876623][T19536] the existing dependency chain (in reverse order) is: [ 426.885633][T19536] [ 426.885633][T19536] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 426.894242][T19536] blk_alloc_queue+0x546/0x680 [ 426.899597][T19536] __blk_mq_alloc_disk+0x197/0x390 [ 426.905307][T19536] nbd_dev_add+0x499/0xb50 [ 426.910296][T19536] nbd_init+0x168/0x1f0 [ 426.915056][T19536] do_one_initcall+0x250/0x870 [ 426.920356][T19536] do_initcall_level+0x104/0x190 [ 426.925862][T19536] do_initcalls+0x59/0xa0 [ 426.930710][T19536] kernel_init_freeable+0x2a6/0x3e0 [ 426.936428][T19536] kernel_init+0x1d/0x1d0 [ 426.941306][T19536] ret_from_fork+0x514/0xb70 [ 426.946427][T19536] ret_from_fork_asm+0x1a/0x30 [ 426.951710][T19536] [ 426.951710][T19536] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 426.958926][T19536] fs_reclaim_acquire+0x71/0x100 [ 426.964409][T19536] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 426.970754][T19536] __alloc_skb+0x1d0/0x7d0 [ 426.975696][T19536] tcp_stream_alloc_skb+0x3f/0x580 [ 426.981397][T19536] tcp_sendmsg_locked+0x1345/0x5360 [ 426.987119][T19536] tcp_sendmsg+0x2f/0x50 [ 426.991893][T19536] sock_write_iter+0x406/0x4f0 [ 426.997184][T19536] vfs_write+0x61d/0xb90 [ 427.001958][T19536] ksys_write+0x150/0x270 [ 427.006815][T19536] do_syscall_64+0x15f/0xf80 [ 427.011939][T19536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.018350][T19536] [ 427.018350][T19536] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 427.026003][T19536] lock_sock_nested+0x41/0x100 [ 427.031288][T19536] inet_shutdown+0x6a/0x390 [ 427.036381][T19536] nbd_mark_nsock_dead+0x2e9/0x560 [ 427.042012][T19536] recv_work+0x1c2e/0x1d40 [ 427.046969][T19536] process_scheduled_works+0xb5d/0x1860 [ 427.053055][T19536] worker_thread+0xa53/0xfc0 [ 427.058169][T19536] kthread+0x388/0x470 [ 427.062758][T19536] ret_from_fork+0x514/0xb70 [ 427.067867][T19536] ret_from_fork_asm+0x1a/0x30 [ 427.073157][T19536] [ 427.073157][T19536] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 427.080832][T19536] __mutex_lock+0x1a3/0x1550 [ 427.085959][T19536] nbd_queue_rq+0x37b/0x1100 [ 427.091073][T19536] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 427.097218][T19536] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 427.104087][T19536] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 427.110609][T19536] blk_mq_run_hw_queue+0x348/0x4f0 [ 427.116243][T19536] blk_mq_dispatch_list+0xd16/0xe10 [ 427.121976][T19536] blk_mq_flush_plug_list+0x48d/0x570 [ 427.127883][T19536] __blk_flush_plug+0x3ed/0x4d0 [ 427.133281][T19536] __submit_bio+0x28d/0x580 [ 427.138309][T19536] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 427.144484][T19536] block_read_full_folio+0x599/0x830 [ 427.150302][T19536] filemap_read_folio+0x137/0x3b0 [ 427.155864][T19536] do_read_cache_folio+0x358/0x590 [ 427.161505][T19536] read_part_sector+0xb6/0x2b0 [ 427.166850][T19536] adfspart_check_ICS+0xb1/0x960 [ 427.172326][T19536] bdev_disk_changed+0x817/0x1770 [ 427.177876][T19536] blkdev_get_whole+0x380/0x510 [ 427.183298][T19536] bdev_open+0x31e/0xd30 [ 427.188077][T19536] blkdev_open+0x470/0x610 [ 427.193013][T19536] do_dentry_open+0x785/0x14e0 [ 427.198304][T19536] vfs_open+0x3b/0x340 [ 427.202895][T19536] path_openat+0x2e08/0x3860 [ 427.208010][T19536] do_file_open+0x23e/0x4a0 [ 427.213037][T19536] do_sys_openat2+0x113/0x200 [ 427.218235][T19536] __x64_sys_openat+0x138/0x170 [ 427.223609][T19536] do_syscall_64+0x15f/0xf80 [ 427.228734][T19536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.235152][T19536] [ 427.235152][T19536] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 427.242370][T19536] __mutex_lock+0x1a3/0x1550 [ 427.247484][T19536] nbd_queue_rq+0xc6/0x1100 [ 427.252514][T19536] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 427.258594][T19536] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 427.265451][T19536] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 427.271994][T19536] blk_mq_run_hw_queue+0x348/0x4f0 [ 427.277636][T19536] blk_mq_dispatch_list+0xd16/0xe10 [ 427.283367][T19536] blk_mq_flush_plug_list+0x48d/0x570 [ 427.289282][T19536] __blk_flush_plug+0x3ed/0x4d0 [ 427.294666][T19536] __submit_bio+0x28d/0x580 [ 427.299710][T19536] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 427.305880][T19536] block_read_full_folio+0x599/0x830 [ 427.311699][T19536] filemap_read_folio+0x137/0x3b0 [ 427.317268][T19536] do_read_cache_folio+0x358/0x590 [ 427.322938][T19536] read_part_sector+0xb6/0x2b0 [ 427.328234][T19536] adfspart_check_ICS+0xb1/0x960 [ 427.333711][T19536] bdev_disk_changed+0x817/0x1770 [ 427.339290][T19536] blkdev_get_whole+0x380/0x510 [ 427.344679][T19536] bdev_open+0x31e/0xd30 [ 427.349452][T19536] blkdev_open+0x470/0x610 [ 427.354395][T19536] do_dentry_open+0x785/0x14e0 [ 427.359709][T19536] vfs_open+0x3b/0x340 [ 427.364304][T19536] path_openat+0x2e08/0x3860 [ 427.369433][T19536] do_file_open+0x23e/0x4a0 [ 427.374490][T19536] do_sys_openat2+0x113/0x200 [ 427.379692][T19536] __x64_sys_openat+0x138/0x170 [ 427.385064][T19536] do_syscall_64+0x15f/0xf80 [ 427.390182][T19536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.396601][T19536] [ 427.396601][T19536] -> #1 (set->srcu){.+.+}-{0:0}: [ 427.403743][T19536] __synchronize_srcu+0xca/0x300 [ 427.409251][T19536] elevator_switch+0x1e8/0x7a0 [ 427.414541][T19536] elevator_change+0x2cc/0x450 [ 427.419840][T19536] elevator_set_default+0x36c/0x430 [ 427.425562][T19536] blk_register_queue+0x3e9/0x4e0 [ 427.431111][T19536] __add_disk+0x677/0xd50 [ 427.435969][T19536] add_disk_fwnode+0xfb/0x480 [ 427.441164][T19536] nbd_dev_add+0x72c/0xb50 [ 427.446098][T19536] nbd_init+0x168/0x1f0 [ 427.450782][T19536] do_one_initcall+0x250/0x870 [ 427.456082][T19536] do_initcall_level+0x104/0x190 [ 427.461546][T19536] do_initcalls+0x59/0xa0 [ 427.466399][T19536] kernel_init_freeable+0x2a6/0x3e0 [ 427.472125][T19536] kernel_init+0x1d/0x1d0 [ 427.476980][T19536] ret_from_fork+0x514/0xb70 [ 427.482093][T19536] ret_from_fork_asm+0x1a/0x30 [ 427.487383][T19536] [ 427.487383][T19536] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 427.495207][T19536] __lock_acquire+0x15a5/0x2cf0 [ 427.500583][T19536] lock_acquire+0x106/0x350 [ 427.505609][T19536] __mutex_lock+0x1a3/0x1550 [ 427.510742][T19536] elevator_change+0x1b3/0x450 [ 427.516038][T19536] elevator_set_none+0xb5/0x140 [ 427.521420][T19536] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 427.527747][T19536] nbd_start_device+0x17f/0xb10 [ 427.533121][T19536] nbd_genl_connect+0x165b/0x1cf0 [ 427.538669][T19536] genl_family_rcv_msg_doit+0x22a/0x330 [ 427.544741][T19536] genl_rcv_msg+0x61c/0x7a0 [ 427.549770][T19536] netlink_rcv_skb+0x232/0x4b0 [ 427.555059][T19536] genl_rcv+0x28/0x40 [ 427.559564][T19536] netlink_unicast+0x75c/0x8e0 [ 427.564855][T19536] netlink_sendmsg+0x813/0xb40 [ 427.570151][T19536] ____sys_sendmsg+0x972/0x9f0 [ 427.575443][T19536] ___sys_sendmsg+0x2a5/0x360 [ 427.580651][T19536] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.586117][T19536] do_syscall_64+0x15f/0xf80 [ 427.591237][T19536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.597673][T19536] [ 427.597673][T19536] other info that might help us debug this: [ 427.597673][T19536] [ 427.607913][T19536] Chain exists of: [ 427.607913][T19536] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 427.607913][T19536] [ 427.621669][T19536] Possible unsafe locking scenario: [ 427.621669][T19536] [ 427.629112][T19536] CPU0 CPU1 [ 427.634473][T19536] ---- ---- [ 427.639840][T19536] lock(&q->q_usage_counter(io)#53); [ 427.645229][T19536] lock(fs_reclaim); [ 427.651745][T19536] lock(&q->q_usage_counter(io)#53); [ 427.659673][T19536] lock(&q->elevator_lock); [ 427.664270][T19536] [ 427.664270][T19536] *** DEADLOCK *** [ 427.664270][T19536] [ 427.672416][T19536] 6 locks held by syz.3.3649/19536: [ 427.677609][T19536] #0: ffffffff8fe3f228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 427.685791][T19536] #1: ffffffff8fe3f060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 427.694752][T19536] #2: ffff88802702a9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 427.706178][T19536] #3: ffff88802702a8d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 427.717163][T19536] #4: ffff888027012ef0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 427.727811][T19536] #5: ffff888027012f28 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 427.738719][T19536] [ 427.738719][T19536] stack backtrace: [ 427.744620][T19536] CPU: 1 UID: 0 PID: 19536 Comm: syz.3.3649 Not tainted syzkaller #0 PREEMPT(full) [ 427.744638][T19536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 427.744648][T19536] Call Trace: [ 427.744654][T19536] [ 427.744661][T19536] dump_stack_lvl+0xe8/0x150 [ 427.744678][T19536] print_circular_bug+0x2e1/0x300 [ 427.744699][T19536] check_noncircular+0x12e/0x150 [ 427.744721][T19536] __lock_acquire+0x15a5/0x2cf0 [ 427.744746][T19536] ? elevator_change+0x1b3/0x450 [ 427.744766][T19536] lock_acquire+0x106/0x350 [ 427.744781][T19536] ? elevator_change+0x1b3/0x450 [ 427.744807][T19536] __mutex_lock+0x1a3/0x1550 [ 427.744830][T19536] ? elevator_change+0x1b3/0x450 [ 427.744852][T19536] ? rcu_is_watching+0x15/0xb0 [ 427.744871][T19536] ? work_grab_pending+0x3d1/0x990 [ 427.744888][T19536] ? elevator_change+0x1b3/0x450 [ 427.744909][T19536] ? __pfx___mutex_lock+0x10/0x10 [ 427.744930][T19536] ? enable_work+0x17f/0x230 [ 427.744952][T19536] ? lockdep_hardirqs_on+0x7a/0x110 [ 427.744976][T19536] ? __cancel_work_sync+0xf7/0x110 [ 427.744994][T19536] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 427.745009][T19536] elevator_change+0x1b3/0x450 [ 427.745033][T19536] elevator_set_none+0xb5/0x140 [ 427.745054][T19536] ? __pfx_elevator_set_none+0x10/0x10 [ 427.745078][T19536] ? xa_load+0x1db/0x210 [ 427.745101][T19536] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 427.745123][T19536] ? kernfs_add_one+0x477/0x5c0 [ 427.745180][T19536] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 427.745200][T19536] ? sysfs_add_file_mode_ns+0x259/0x300 [ 427.745219][T19536] nbd_start_device+0x17f/0xb10 [ 427.745238][T19536] ? device_create_file+0xf4/0x1b0 [ 427.745306][T19536] nbd_genl_connect+0x165b/0x1cf0 [ 427.745321][T19536] ? __pfx___nla_validate_parse+0x10/0x10 [ 427.745348][T19536] ? __pfx_nbd_genl_connect+0x10/0x10 [ 427.745365][T19536] ? rcu_is_watching+0x15/0xb0 [ 427.745382][T19536] ? trace_kmalloc+0x2a/0xf0 [ 427.745404][T19536] ? __nla_parse+0x40/0x60 [ 427.745426][T19536] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 427.745444][T19536] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 427.745463][T19536] genl_family_rcv_msg_doit+0x22a/0x330 [ 427.745481][T19536] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 427.745500][T19536] ? __lock_acquire+0x6b5/0x2cf0 [ 427.745519][T19536] genl_rcv_msg+0x61c/0x7a0 [ 427.745535][T19536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.745549][T19536] ? __pfx_nbd_genl_connect+0x10/0x10 [ 427.745569][T19536] netlink_rcv_skb+0x232/0x4b0 [ 427.745589][T19536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.745603][T19536] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.745628][T19536] ? down_read+0x270/0x2e0 [ 427.745640][T19536] ? genl_rcv+0xd/0x40 [ 427.745653][T19536] genl_rcv+0x28/0x40 [ 427.745666][T19536] netlink_unicast+0x75c/0x8e0 [ 427.745687][T19536] netlink_sendmsg+0x813/0xb40 [ 427.745711][T19536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.745732][T19536] ? aa_sock_msg_perm+0xf1/0x1b0 [ 427.745752][T19536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.745773][T19536] ____sys_sendmsg+0x972/0x9f0 [ 427.745795][T19536] ? __might_fault+0xaf/0x130 [ 427.745816][T19536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.745840][T19536] ? import_iovec+0x73/0xa0 [ 427.745863][T19536] ___sys_sendmsg+0x2a5/0x360 [ 427.745883][T19536] ? __lock_acquire+0x6b5/0x2cf0 [ 427.745899][T19536] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.745923][T19536] ? futex_wake+0x4ac/0x580 [ 427.745966][T19536] ? __fget_files+0x2a/0x420 [ 427.745983][T19536] ? __fget_files+0x3a0/0x420 [ 427.746004][T19536] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.746026][T19536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.746050][T19536] ? rcu_is_watching+0x15/0xb0 [ 427.746070][T19536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.746086][T19536] do_syscall_64+0x15f/0xf80 [ 427.746106][T19536] ? trace_irq_disable+0x3b/0x140 [ 427.746129][T19536] ? clear_bhb_loop+0x40/0x90 [ 427.746145][T19536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.746160][T19536] RIP: 0033:0x7f91b8d9ce59 [ 427.746174][T19536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.746186][T19536] RSP: 002b:00007f91b9c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.746202][T19536] RAX: ffffffffffffffda RBX: 00007f91b9015fa0 RCX: 00007f91b8d9ce59 [ 427.746213][T19536] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 427.746239][T19536] RBP: 00007f91b8e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 427.746249][T19536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.746259][T19536] R13: 00007f91b9016038 R14: 00007f91b9015fa0 R15: 00007fff0fabac38 [ 427.746278][T19536] [ 428.257958][ T5635] block nbd4: Receive control failed (result -32) [ 428.266355][ T5635] block nbd4: Receive control failed (result -32) [ 428.291800][T19536] nbd4: detected capacity change from 0 to 63 [ 428.314601][T17532] block nbd4: Dead connection, failed to find a fallback [ 428.345548][T17532] block nbd4: shutting down sockets [ 428.374498][T17532] blk_print_req_error: 138 callbacks suppressed [ 428.375607][T17532] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.448289][T17532] buffer_io_error: 138 callbacks suppressed [ 428.448307][T17532] Buffer I/O error on dev nbd4, logical block 0, async page read [ 428.463620][T17532] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.473533][T17532] Buffer I/O error on dev nbd4, logical block 1, async page read [ 428.490879][T17532] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.513663][T19545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3651'. [ 428.526138][T17532] Buffer I/O error on dev nbd4, logical block 2, async page read [ 428.535316][T17532] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.545670][T17532] Buffer I/O error on dev nbd4, logical block 3, async page read [ 428.554966][T17532] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.564926][T17532] Buffer I/O error on dev nbd4, logical block 0, async page read [ 428.575414][T17532] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.585377][T17532] Buffer I/O error on dev nbd4, logical block 1, async page read [ 428.594232][T17532] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.604219][T17532] Buffer I/O error on dev nbd4, logical block 2, async page read [ 428.612796][T17532] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.622729][T17532] Buffer I/O error on dev nbd4, logical block 3, async page read [ 428.632887][T17532] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.656328][T17532] Buffer I/O error on dev nbd4, logical block 0, async page read [ 428.664951][T17532] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.675643][T17532] Buffer I/O error on dev nbd4, logical block 1, async page read [ 428.686048][T17532] ldm_validate_partition_table(): Disk read failed. [ 428.694668][T17532] Dev nbd4: unable to read RDB block 0 [ 428.702374][T17532] nbd4: unable to read partition table [ 428.715457][T17532] ldm_validate_partition_table(): Disk read failed. [ 428.734115][T17532] Dev nbd4: unable to read RDB block 0 [ 428.752868][T17532] nbd4: unable to read partition table [ 428.875353][ T5291] veth0_macvtap: left promiscuous mode [ 434.750837][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!