last executing test programs: 4.520680796s ago: executing program 3 (id=5752): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x4e20, @local}}}, 0x88) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071119700000000e784100000020000008500000000000000e1c2c46c02bd85b1759e23f89a944f950133005ec592ff662516a03f92ccb9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 4.401591399s ago: executing program 3 (id=5755): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x1403, 0x20, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x20000011) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=@flushsa={0x27c, 0x1c, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@tmpl={0x184, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d6, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3507, 0x2, 0x0, 0x86, 0x2d61, 0x3}, {{@in6=@loopback, 0x4d3, 0x6c}, 0x2, @in=@empty, 0x3507, 0x0, 0x3, 0x3, 0x8, 0x400, 0x6}, {{@in=@loopback, 0x4d4, 0x33}, 0xa, @in6=@loopback, 0x3505, 0x4, 0x1, 0x40, 0x10000, 0x1, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d4, 0xff}, 0x2, @in6=@loopback, 0x3503, 0x4, 0x2, 0x9, 0x3, 0x1, 0xa}, {{@in=@multicast2, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010101, 0x3504, 0x1, 0x0, 0x88, 0x4, 0x2, 0x123}, {{@in=@private=0xa010102, 0x4d6, 0x2b}, 0xa, @in=@remote, 0x3502, 0x3, 0x3, 0xdd, 0x9, 0x7, 0x8}]}, @sec_ctx={0xa7, 0x8, {0xa3, 0x8, 0x0, 0x2, 0x9b, "b537a2bc7303800a8d5d3c88e1b0cceedccdda2817035661f15752a3d972b09b8609969068e003d2307d05d4438f71bcd2e42a1fa418610460f662c16f0eeb5d54882e74d207aef608d7e86b0c7906ca93e92199c560cf039e4d37c85470396dbe065e805cc8bb62fa3ea14966cb1ad1e66dfec6f1b3e5a404ec703f334df946b08af6ed39f9e80ce85ebbe123ad1b9e040a383dd731f725481746"}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd2a, 0x70bd28, 0x70bd25, 0x70bd25, 0x10, [0x10000, 0x2, 0x2]}}, @mark={0xc, 0x15, {0x350759, 0xb9}}, @etimer_thresh={0x8, 0xc, 0xfff}]}, 0x27c}, 0x1, 0x0, 0x0, 0x80}, 0x4000840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r3, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6b}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000051}, 0x4000800) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x15}, 0x40011) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x15}, 0x40011) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000740)="d046d77e7c3264771bc72404c1710ecc0c0a5e33b2720199092acdec55d6580a0dd5826d0214a67b943f406a19dfe378d8b9383e73d1928265fadef2d09e15fc5ae490c04cd8d9793a88026e6e5db603ff878f195cc682e6f5db056b2898c12a025e81ea76e4cf111272669ae79a6f498b3ad96cacb9322bb3bbf7fdabcb7a1792fe2fde1799a70ff6685b9a19d6598218fb98976ef1c24a6880b9d726d242349f4b7d3ffe509bc1617b7aa76052214a2bec9842bfef7cc75056de543d73397cd6be49a34717c15de06fb449d2e6eadadf3575668843e2c14046", 0xda) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000740)="d046d77e7c3264771bc72404c1710ecc0c0a5e33b2720199092acdec55d6580a0dd5826d0214a67b943f406a19dfe378d8b9383e73d1928265fadef2d09e15fc5ae490c04cd8d9793a88026e6e5db603ff878f195cc682e6f5db056b2898c12a025e81ea76e4cf111272669ae79a6f498b3ad96cacb9322bb3bbf7fdabcb7a1792fe2fde1799a70ff6685b9a19d6598218fb98976ef1c24a6880b9d726d242349f4b7d3ffe509bc1617b7aa76052214a2bec9842bfef7cc75056de543d73397cd6be49a34717c15de06fb449d2e6eadadf3575668843e2c14046", 0xda) syz_genetlink_get_family_id$fou(&(0x7f0000000880), r2) (async) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000880), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000008c0)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5c094}, 0x8051) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040114}, 0x40000000) ioctl$XFS_IOC_GET_RESBLKS(r4, 0x80105873, &(0x7f0000000ac0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x140, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000b40)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000b40)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}) r8 = accept4$x25(0xffffffffffffffff, &(0x7f0000000b80)={0x9, @remote}, &(0x7f0000000bc0)=0x12, 0x800) ioctl$SIOCX25SSUBSCRIP(r8, 0x89e1, &(0x7f0000000c00)={'pimreg1\x00', 0x8, 0x8}) (async) ioctl$SIOCX25SSUBSCRIP(r8, 0x89e1, &(0x7f0000000c00)={'pimreg1\x00', 0x8, 0x8}) r9 = socket(0xf, 0x9adcf1c5388670ee, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={0xffffffffffffffff, 0x0, 0x6c, 0x28, &(0x7f0000000d00)="0edf41cbc4066eeb4b8d800a027cd6c85279ecf5bc2a3d2945608d1f958d03f78ec5b8146869bc681b3988a20369f876243fd07aa6c1eec2698b43048a699d7f287ff5dd3c46547aae2ec5f6410a914e32d0a7b108004e292a0ae5e3553f42c39063acce658a07f8237b74f4", &(0x7f0000000d80)=""/40, 0x2, 0x0, 0xa, 0xcc, &(0x7f0000000dc0)="d10d19c78987be61447b", &(0x7f0000000e00)="691b2272e1b587ef18fe75adf6fb5ec91c8e8ffa959d48301ad70117940bfb1025a01491f9692e3e3002224dcdd16be38361c9698733f773df84b828e3f64aeeab5bead1acaf0b218ef5a10308be7d39d1a06c4c03100e9af409da150641b4fecbe13227b8b5edaa8cf86f834604f9621449ade1b23f87d704bd6dcc3c6b474e467cb1e5e498012bcd1669d1b1d50461367a3d97d1ad908d4afb29b56531ba49fd0386dd68dfba7982e7b26623f68b6b5fde95f8f745d41ca15a7b2d7e99b459827c65928f9d495cf5a613ce", 0x0, 0x0, 0x1}, 0x50) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x58, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x7c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11d3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11c5}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1197}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7f3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x990}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x8040) recvmmsg(r4, &(0x7f00000012c0)=[{{&(0x7f00000010c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/96, 0x60}], 0x1, &(0x7f0000001200)=""/153, 0x99}, 0x1}], 0x1, 0x40002041, &(0x7f0000001300)={0x77359400}) (async) recvmmsg(r4, &(0x7f00000012c0)=[{{&(0x7f00000010c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/96, 0x60}], 0x1, &(0x7f0000001200)=""/153, 0x99}, 0x1}], 0x1, 0x40002041, &(0x7f0000001300)={0x77359400}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000001340)) sendmsg$nl_route(r9, &(0x7f0000001440)={&(0x7f0000001380), 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@ipv6_deladdr={0x2c, 0x15, 0x300, 0x70bd26, 0x25dfdbff, {0xa, 0x80, 0x80, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x3) (async) sendmsg$nl_route(r9, &(0x7f0000001440)={&(0x7f0000001380), 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@ipv6_deladdr={0x2c, 0x15, 0x300, 0x70bd26, 0x25dfdbff, {0xa, 0x80, 0x80, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x3f, &(0x7f00000014c0)=0x100, 0x4) (async) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x3f, &(0x7f00000014c0)=0x100, 0x4) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, r3, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x40011) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002780)={0x11, 0x5, &(0x7f0000001600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffc890}, [@alu={0x4, 0x1, 0x1a, 0x0, 0x6, 0x40, 0x8}, @alu={0x7, 0x1, 0x1, 0x8, 0xb, 0x2, 0xfffffffffffffff0}]}, &(0x7f0000001640)='GPL\x00', 0xfff, 0x1000, &(0x7f0000001680)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002680)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000026c0)={0x2, 0x6, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002700)=[r9, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000002740)=[{0x4, 0x4, 0x2}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003a40)={r11, 0x0, 0xd6, 0x42, &(0x7f0000002840)="22c30a00155d533cf020d0068b5ac6d20a4b679b9d0db1e3b2aa7cd81036df1c939f661cd56ed0c6f1bf22cae82e5b069edfc761986081669aad3f9ab2e85fca08dfd77ab3b62709ae3d2117e3898917379cb603ef9baaf8fd0e5f3a0f97b1982b1ea57e8c895976cb378476626a73d5a2c750fcd1fd3fbf779606affd154408bd8172982edeb01214357e2ede6012aa3c43041098236c7d5cc51c95d27b0dbd1c2d91c8eb32826d87993fa0ecceec779d3d2bad31a6f7d3ec32c6847fa8ac627d30065bffb0132982bb3fc8b4998281675bd9813164", &(0x7f0000002940)=""/66, 0x2, 0x0, 0x1000, 0x5c, &(0x7f00000029c0)="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", &(0x7f00000039c0)="912c6db78aa8fee3c94eca64738cffcaae342288b76ec3e4d09ea1c8405969e6d140408d862a3f3b73574ebb91f935433495fa547634fdddf68462c62b5490dca07a990578f39efbc39143b544cdfd47231a0d7ccbaaa909b8c98003", 0x0, 0x0, 0x7fff}, 0x50) 4.135573636s ago: executing program 3 (id=5760): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000040)={&(0x7f0000000200)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x20040000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0xb}]}, {0x0, [0x0, 0x2e, 0x0]}}, &(0x7f0000000100)=""/46, 0x29, 0x2e, 0x0, 0x4d}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x25}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x2, '\x00', r3, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3, 0x7}, {0xc, 0x4}, {0xffe2, 0x8}}, ["", "", ""]}, 0x24}}, 0x0) 3.992665664s ago: executing program 0 (id=5763): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000001", @ANYRES16=r3, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020001000000"], 0x24}}, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r4 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) 3.74713342s ago: executing program 3 (id=5767): syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90806071907800e701fe05f989c2080a0000d98d00000007"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) unshare(0x2040400) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000000)=0xffffff80, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f00000003c0)=0x5, 0x4) 3.745916476s ago: executing program 0 (id=5768): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0xf) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) syz_emit_ethernet(0x36, &(0x7f0000000b00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a00a6", 0x0, 0x0, 0x0, @private0, @remote}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) sendmsg$NFT_BATCH(r0, 0x0, 0x801) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x44, r3, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r5, &(0x7f00000009c0)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc9, 0x5}}}, 0x7) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x8000000, 0x3, {0x6, 0x7c}}, 0x14}}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) poll(&(0x7f0000000040), 0x55, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000e80)={&(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0}, 0x20000000) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x0, @private}}) 3.60621956s ago: executing program 3 (id=5771): r0 = socket$inet(0xa, 0x801, 0x10000000) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x80800) 3.509668928s ago: executing program 3 (id=5773): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000023d5ad66200000000000000000000000d000300686173683a6e65740000000005000400080000000900020073797a3100000000040007800500050002000000050001000600000065d09d9a48425f033f5f07274d8498c2db3c9d6354ff30e239a600dbd0e2283213be9552cda4010496bb13255e3ea18e2f2cf55c8874"], 0x4c}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2.90715861s ago: executing program 4 (id=5777): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x1a8, 0x0, 0x1a8, 0x90, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x6, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r11 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) (async) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SEQ_NR={0x6, 0x5, 0x2c3c}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x40}, 0x1, 0xba01}, 0x0) 2.487475816s ago: executing program 1 (id=5779): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000040)) 2.48178881s ago: executing program 4 (id=5780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (rerun: 64) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0), 0x8) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r4 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xbdea46afeab7b972}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c}}, @TCA_RATE={0x6, 0x5, {0xc, 0xbc}}]}, 0xff35}, 0x1, 0x0, 0x0, 0x8848}, 0x80c0) 2.395507405s ago: executing program 1 (id=5782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22680, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000d00000002000004000000000000080003000001000000000b00000005000000100000000000000b0500000005f7000000000008040000000c0000000000000c04000000002e2e005f00"], &(0x7f00000003c0)=""/223, 0x66, 0xdf, 0x1, 0x1000}, 0x20) r4 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'macvlan0\x00', {}, 0xffff}) socket$inet(0x2, 0x3, 0x7) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="00006003ffffffffffff8bc600250000810010f187"], 0x19) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) 2.337539398s ago: executing program 0 (id=5783): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000080)=""/247, 0x2000, 0x1000, 0x6, 0x2}, 0x20) (async) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) connect$llc(r0, &(0x7f0000000300)={0x1a, 0x326, 0x2, 0x40, 0x3, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x10) 2.057496919s ago: executing program 0 (id=5785): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@multicast2, 0x6, 0x4, 0x3, 0x0, 0x2}]}]}, 0xfc}}, 0x804) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$key(0xf, 0x3, 0x2) 1.990592064s ago: executing program 4 (id=5786): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001047ec8845b58ab1cf00", @ANYRES32=0x0, @ANYBLOB="2b030000000000001800128008000100736974000c000280080002007f00000108001f0009000000"], 0x40}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) ioctl(r1, 0x8b25, &(0x7f0000000040)) 1.811078378s ago: executing program 4 (id=5787): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160009000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.807276592s ago: executing program 1 (id=5788): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.65399338s ago: executing program 1 (id=5789): r0 = socket(0x10, 0xb, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000000000008000900000000000600020001e0000008000a0000000000080017"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3a9c}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @dev}], 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 1.427342838s ago: executing program 4 (id=5791): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xb) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="2000000000000000840000000200000004004100"], 0x20, 0x4048800}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="0bd61eb8ab4b", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xffff}}}}}}, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) 1.426720651s ago: executing program 1 (id=5792): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x1, 0x709d2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@bridge_delneigh={0x38, 0x1d, 0x100, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x2, 0x40}, [@NDA_PROBES={0x8, 0x4, 0xd106}, @NDA_VLAN={0x6}, @NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4041}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r4 = socket$kcm(0xa, 0x2, 0x0) pwritev(r4, 0x0, 0x0, 0x9, 0xbb) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000108000000000000000200000004", @ANYRES32=0x0, @ANYBLOB="000000009002010014001a80100002800600018008001b000600000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000400)={r0, &(0x7f00000000c0)=',\x00', 0x80, &(0x7f0000000100)={@_ha_fsid={[0x0, 0xfffffffe]}, {0xc, 0x9c5, 0x800, 0xffffffffffffffff}}, 0x6, &(0x7f0000000380), &(0x7f00000003c0)=0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x10, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r8}, 0x38) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x20, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @jmp={0x5, 0x0, 0x6, 0x9, 0x7, 0x6, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x200, 0xf8, &(0x7f0000000280)=""/248, 0x41100, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000440)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x5, 0xfffffffa, 0x4}, 0x10, 0x1de43, 0xffffffffffffffff, 0xa, &(0x7f0000000540)=[r6, r7, r8, r9], &(0x7f0000000580)=[{0x0, 0x4, 0xb, 0xc}, {0x4, 0x3, 0xd, 0x3}, {0x1, 0x4, 0xb, 0x8}, {0x4, 0x3, 0x2, 0x7}, {0x4, 0x4, 0xe, 0x7}, {0x5, 0x2, 0x8, 0x3}, {0x2, 0x2, 0x0, 0xb}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x5, 0x9, 0x8}, {0x5, 0x5, 0x6, 0x4}], 0x10, 0x10001}, 0x94) socket$netlink(0x10, 0x3, 0x1) 1.09534612s ago: executing program 2 (id=5795): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffd7, &(0x7f0000000600)=""/4111, 0x100f}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffd7, &(0x7f0000000600)=""/4111, 0x100f}, 0x10000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) 1.015134116s ago: executing program 1 (id=5796): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000002080)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000020c0)=0x28) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r1, 0x58, &(0x7f0000002600)}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) unshare(0x40000600) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x109, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x200000d4) sendto$inet(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000002140)=""/19, 0x13, 0x2161, 0x0, 0x0) syz_emit_ethernet(0x2056, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x2020, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x200, "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"}, {0x0, 0x200, "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"}, {0x1, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0) 990.204443ms ago: executing program 0 (id=5797): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x14, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x1, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x400000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000007}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x2}}}}]}]}, 0x70}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x8002}}, {{0xa, 0xfffd, 0xea, @remote, 0xfffffffc}}}, 0x108) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r4 = socket$kcm(0xa, 0x3, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) close(r2) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x25dfdbfe}, 0x18}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x9c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xe, 0x1a, ',\x04/:,)%)\\\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="7e5ada56c322"}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x36d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9b3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, '+]r%^)\x00'}}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x2, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xfffffffe}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001840)={&(0x7f0000000980)={0xea4, r9, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_TID_CONFIG={0x720, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x300, 0x65d, 0x2, 0x7, 0x0, 0x9, 0xc2, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x8}, {0x1, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x2, 0x7}, {0x2, 0x3}, {0x6}, {0x0, 0x8}, {0x7, 0x7}, {0x6, 0x9}, {0x1, 0x3}, {0x6, 0xa}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x5}, {0x1, 0x7}, {0x2, 0x5}, {0x4}, {0x3}, {0x3, 0x9}, {0x0, 0x5}, {0x0, 0x7}, {0x5}, {0x2, 0x2}, {0x1, 0xa}, {0x1, 0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x4, 0x9}, {0x1, 0x6}, {0x7, 0x7}, {0x7, 0x6}, {0x1}, {0x0, 0x6}, {0x3, 0x9}, {0x5, 0x4}, {0x4, 0x2}, {0x2, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x8, 0x3ff, 0xc5, 0xd, 0x3, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x2, 0x0, 0x1, 0xd6a, 0x5, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x18, 0x36, 0x6, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x7}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x7}, {0x3, 0x2}, {0x2, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x1}, {0x2, 0x1}, {0x2, 0x2}, {0x6, 0x6}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x2}, {0x6, 0x9}, {0x1}, {0x6, 0x9}, {0x5, 0x4}, {0x7}, {0x1}, {0x2, 0x6}, {0x1, 0x11}, {0x1, 0x2}, {0x6, 0x7}, {0x4}, {0x0, 0x8}, {0x5, 0x2}, {0x0, 0x9}, {0x3, 0x2}, {0x0, 0x2}, {0x5, 0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xdb, 0x3, 0x7fff, 0x57d0, 0x2, 0xfeff, 0x90c4]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x0, 0x9, 0x2, 0x4, 0xb, 0x5, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbf3d, 0x3, 0x9da9, 0x1, 0xfffe, 0x371, 0x6, 0x67]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0xa}, {0x4, 0x8}, {0x2, 0x3}, {0x4, 0x1}, {0x1, 0x9}, {0x6, 0x6}, {0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x7, 0x4}, {0x5, 0x1}, {0x3, 0xa}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0x3}, {0x1, 0x9}, {0x3, 0x6}, {0x0, 0x9}, {0x3, 0x1}, {0x5, 0xa}, {0x0, 0x3}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0x3}, {0x1, 0x5}, {0x6, 0x8}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0x4}, {0x5, 0x3}, {0x1, 0x9}, {0x0, 0x5}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x2}, {0x1, 0x3}, {0x7, 0x9}, {0x5, 0x4}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x3}, {0x6}, {0x2, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {}, {0x7}, {0x3, 0x3}, {0x2, 0xa}, {0x2, 0x8}, {0x7, 0xa}, {0x3}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x8}, {0x3, 0x5}, {0x6, 0xa}, {0x7, 0xa}, {0x7, 0xa}, {0x7, 0x4}, {0x2, 0x6}, {0x0, 0x8}, {0x6, 0x8}, {0x1, 0x1}, {0x0, 0xa}, {0x3, 0x7}, {0x2, 0xa}, {0x0, 0x5}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x7}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x5, 0x7f, 0xff, 0x4, 0xcefa, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x18, 0x1b, 0x1, 0x1b, 0x3, 0x3, 0x24, 0x1, 0x18, 0x2, 0xc, 0x1b, 0x36, 0x16, 0x3, 0x4, 0x30, 0x36, 0x6, 0x6, 0x1b, 0x60, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x4, 0x802, 0x9, 0x1, 0xb84, 0x8001, 0x7fff]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x9}, {0x1, 0x9}, {0x3, 0x4}, {0x6, 0xa}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x9}, {0x3, 0x1}, {0x2, 0x4}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x3, 0x6000, 0xb86, 0x73ce, 0x6, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x2, 0x8001, 0x401, 0xff, 0xfffe, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x101}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x3e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x15, 0x2, 0x0, 0x0, 0xd, 0x7ff, 0x4b]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x9}, {0x0, 0x2}, {0x7, 0x6}, {0x2, 0x1}, {0x3, 0x3}, {0x1, 0xa}, {0x2, 0x3}, {0x0, 0x3}, {0x4, 0x4}, {0x4, 0x9}, {0x4, 0x3}, {0x7, 0x8}, {0x4, 0x3}, {0x5, 0x7}, {0x5, 0xa}, {0x7, 0x9}, {0x1, 0xa}, {0x2}, {0x5, 0x3}, {0x4, 0x9}, {0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x4, 0x5}, {0x7, 0x3}, {0x0, 0x7}, {0x3, 0xa}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x6c, 0x36, 0x9, 0xd8, 0x0, 0x1b, 0x2]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x6, 0x6, 0x7f, 0x8001, 0xc, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x60, 0xc45d6efe9c105e50, 0x16, 0x28, 0x1, 0x2, 0x6c, 0x48, 0x12, 0x5, 0x0, 0x5, 0x24, 0x2, 0x5, 0x2, 0x36, 0x6c, 0x36, 0x36, 0x63]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x6}, {0x2, 0x3}, {0x1, 0x3}, {0x6, 0x3}, {0x4, 0x2}, {0x6, 0x2}, {0x3, 0x4}, {0x5, 0x8}, {0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x1, 0x2}, {0x6, 0x6}, {0x3, 0x8}, {0x2, 0x2}, {0x7, 0x4}, {0x7, 0x4}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x7}, {0x7, 0x1}, {0x4}, {0x3, 0x6}, {0x4}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x6}, {0x7, 0x5}, {0x0, 0x4}, {0x6, 0xd}, {0x4, 0xa}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x2}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x7}, {0x2, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x4}, {0x5, 0x2}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0xb, 0x6c, 0x36, 0x12, 0x6c, 0x18, 0x30, 0x9, 0xc, 0xc, 0x18, 0x6, 0x18, 0xb, 0x60, 0x9, 0x269a042d7d59a012, 0x24, 0x16, 0x3, 0x48, 0x2, 0x3d, 0x3, 0x6, 0x16, 0x48, 0x3, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xede7, 0x40d, 0x0, 0x9, 0x9, 0x50d, 0x6, 0xb8c8]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x7}, {0x0, 0x9}, {0x3, 0xa}, {0x2, 0x4}, {0x4, 0x9}, {0x7}, {0x4, 0x2}, {0x5, 0x4}, {0x6, 0x1}, {0x5, 0x5}, {0x6, 0x2}, {0x2, 0x6}, {0x0, 0xa}, {0x3, 0x8}, {0x2}, {0x5}, {0x0, 0xa}, {0x2, 0xa}, {0x6, 0xa}, {0x4, 0x7}, {0x0, 0xa}, {0x0, 0x3}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x6, 0x40, 0xc, 0x9, 0xe9d, 0x9a, 0x7]}}]}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x4, 0x6}, {0x5, 0xa}, {0x1, 0x4}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x9}, {0x2, 0x9}, {0x5, 0x2}, {0x4, 0xa}, {0x1, 0xa}, {0x7, 0x2}, {0x3}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x6}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x2}, {0x5, 0x1}, {0x3, 0x5}, {0x5}, {0x1, 0x9}, {0x0, 0x9}, {0x4, 0x1}, {0x5, 0x9}, {0x6, 0x7}, {0x2, 0x1d}, {0x3, 0x5}, {0x7}, {0x2, 0x1}, {0x4, 0x3}, {0x7, 0x3}, {0x0, 0x7}, {0x6, 0x6}, {0x6, 0xa}, {0x6, 0x9}, {0x5, 0x8}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x2, 0xa}, {0x1, 0x9}, {0x0, 0x8}, {0x5}, {0x2, 0x1}, {0x4, 0x8}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x9}, {0x2, 0x7}, {0x2, 0x5}, {0x2}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x5, 0x6c, 0x16, 0xc, 0xc, 0x9, 0x16, 0x1b, 0xb, 0xc, 0x11, 0x30, 0x6, 0x5, 0xb, 0x36, 0x5, 0x1b, 0xc, 0x18, 0x3, 0x9, 0xc, 0xc, 0x30, 0x4, 0x6c, 0x24, 0x24, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x5, 0x2, 0x3, 0x6, 0x5, 0x5]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x8}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x5}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0x2}, {0x7, 0x6}, {0x6, 0x7}, {0x4, 0x9}, {0x0, 0x7}, {0x7, 0x6}, {0x7, 0x2}, {0x2, 0x8}, {0x7, 0x9}, {0x2, 0x2}, {0x4}, {0x5, 0x5}, {0x4, 0x3}, {}, {0x2, 0x8}, {0x1, 0x3}, {0x3, 0x4}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x2, 0x4}, {0x3}, {0x7, 0x2}, {0x4, 0xa}, {0x1, 0xa}, {0x3, 0x8}, {0x4, 0x2}, {0x5, 0x8}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x4, 0x4}, {0x6, 0x2}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0x2}, {0x4}, {0x4, 0x4}, {0x0, 0x1}, {0x3, 0x7}, {0x7, 0x6}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x3}, {0x7, 0x8}]}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x1b, 0x24, 0xb427cb9b4ed963fa, 0x9, 0x6c, 0x24, 0x5, 0x5, 0x12, 0x24, 0xb, 0x16, 0x60, 0x12]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x8}, {0x6, 0x4}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0xa}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x2}, {0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x6, 0x7}, {0x2, 0x8}, {0x4, 0x4}, {0x1, 0xa}, {0x5, 0x1}, {0x4, 0x5}, {0x3, 0x3}, {0x5, 0x2}, {0x6}, {0x4, 0x4}, {0x6, 0x7}, {0x3, 0x1}, {0x7, 0x3}, {0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x3}, {0x1, 0x5}, {0x3, 0x6}, {0x3, 0x4}, {0x3, 0x2}, {}, {0x0, 0x3}, {0x1, 0x5}, {0x3}, {0x3, 0x3}, {0x1, 0xa}, {0x4, 0x2}, {0x1, 0x1}, {0x6, 0x1}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x2, 0xa}, {0x5, 0x3}, {0x4, 0x4}, {0x4, 0x6}, {0x0, 0x9}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0xa}, {0x7, 0x9}, {}, {0x0, 0x5}, {0x1, 0x2}, {0x3, 0xa}, {0x2, 0xa}, {0x2, 0x6}, {0x4, 0x5}, {0x6, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x2, 0x16, 0x400, 0x7, 0x9, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0xff00, 0x4, 0x9, 0x101, 0x401, 0x4]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x1}, {0x5, 0x5}, {0x4}, {0x2, 0x5}, {0x6, 0x4}, {0x1, 0x9}, {0x2, 0x2}, {0x7, 0x15}, {0x0, 0x6}, {0x1, 0x5}, {0x2, 0x1}, {0x3, 0x4}, {0x3, 0x3}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0x8}, {0x2, 0x8}, {0x2, 0x6}, {0x0, 0x4}, {0x6, 0x7}, {0x6, 0x4}, {0x5, 0x8}, {0x2, 0x8}, {0x5, 0x2}]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xeb353e1b446c3d9c}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xe, 0x6, 0x3, 0x6, 0x224, 0x7, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x71, 0x2, 0xb74b, 0x3, 0x7, 0x8, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x101, 0x5, 0x7f, 0x12, 0x3, 0xfff7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x60, 0x6, 0x24, 0xb, 0x60, 0x6, 0x3, 0x3, 0x24, 0x3, 0x3, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1000, 0x2, 0xfffc, 0x5, 0x8, 0x458]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x8, 0x6, 0x0, 0xc, 0x2, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x0, 0xffff, 0xf, 0x1, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x30, 0xb, 0x1, 0xf82e221b66ce8113, 0x2, 0x0, 0x60, 0x18, 0x6, 0x16, 0x12, 0x36, 0x30, 0x36, 0x12, 0x24, 0xb, 0x6, 0x36, 0x1, 0x16, 0x24, 0x60, 0x24, 0x16, 0x1, 0x24, 0xc, 0x30, 0x16]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x1}, {0x1, 0x8}, {0x7, 0x9}, {0x1, 0x8}, {0x5, 0x7}, {0x6, 0x1}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0x16, 0x48, 0xb, 0x1e, 0x19, 0x36, 0x5, 0x24, 0x60, 0x18, 0x1b, 0x60, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x88b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x40}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x84}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe7}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x4}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x6f8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x3d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8cf}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3a0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x80, 0x17b4, 0x0, 0x0, 0xc, 0x2ed2, 0x81]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x10, 0x7, 0x1, 0x8, 0x2, 0xc]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0xb, 0x5, 0x36, 0x4, 0x6, 0x2]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8000, 0xc, 0x7f, 0x9, 0x4, 0x9, 0x415]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0x2}, {0x1, 0x6}, {0x2}, {0x2, 0x6}, {0x3}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x3}, {0x1, 0x8}, {0x0, 0x6}, {0x7, 0x8}, {0x5, 0x7}, {0x6, 0x6}, {0x2}, {0x6, 0x1}, {0x1, 0x2}, {0x7, 0x6}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0x8}, {0x4, 0xa}, {0x3, 0x4}, {0x0, 0x8}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x6}, {0x2, 0x6}, {0x1, 0x2}, {0x4}, {0x0, 0x1}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x5, 0x7}, {0x4}, {0x5, 0x3}, {0x1}, {0x7, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x6, 0xa}, {0x3, 0x3}, {0x7, 0x4}, {0x6, 0x5}, {0x6, 0x2}, {0x0, 0x4}, {0x1}, {0x7}, {0x2}, {0x5, 0x5}, {0x5, 0x7}, {0x5, 0x6}, {0x6, 0x4}, {0x6, 0x9}, {0x6, 0x5}, {0x0, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x6, 0x9, 0x6c, 0xec8bf6838832c868, 0x6, 0x1, 0x12, 0x30, 0x12, 0x2, 0x1, 0x12, 0x9, 0x30, 0xb, 0x3, 0x5, 0x3, 0x16, 0x1, 0x60, 0x36, 0x4, 0x3, 0x30, 0x18, 0x18, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xedb, 0x8c0b, 0x1, 0x0, 0x300, 0x3, 0x7, 0x9]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x7, 0x0, 0xde20, 0xfff, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0xf, 0x9, 0xd, 0x31, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x2, 0x9, 0x6c, 0x36, 0x16, 0x4, 0x31, 0x36, 0x5, 0x0, 0x6, 0x30, 0x5, 0x6, 0x3, 0xc, 0xb, 0x6c, 0x1, 0x60, 0x3, 0xc, 0x1b, 0x12, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x110, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x1}, {0x5, 0x2}, {0x0, 0xa}, {0x2, 0x6}, {0x1, 0x7}, {0x4, 0x1}, {0x4, 0x7}, {0x4}, {0x1, 0x1}, {0x5, 0x5}, {0x1}, {0x0, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x2, 0x3}, {0x7, 0x7}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x3}, {0x5, 0x5}, {0x6, 0x9}, {0x0, 0x4}, {}, {0x1, 0x7}, {0x1, 0x4}, {0x6, 0x6}, {0x4, 0x9}, {0x7, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x6, 0x6}, {0x1, 0x3}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x6}, {0x2, 0x4}, {0x2, 0x8}, {0x1, 0x7}, {0x6, 0x9}, {0x5, 0x2}, {0x5, 0x6}, {0x7, 0xa}, {0x1, 0x5}, {0x6, 0x5}, {0x6, 0x7}, {0x0, 0x7}, {0x4, 0x8}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x4}, {0x3}, {0x3, 0xa}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x1, 0x8}, {0x3, 0x5}, {0x4, 0x6}, {0x7, 0x8}, {0x2, 0x3}, {0x5, 0x9}, {0x2}, {0x0, 0x5}, {0x6, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0x4}, {0x3, 0x8}, {0x3, 0x3}, {}, {0x1}, {0x4, 0x6}, {0x0, 0x7}, {0x2, 0x5}, {0x3, 0x8}, {0x4, 0x3}, {0x0, 0x3}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x6, 0x2}, {0x7, 0x4}, {0x7, 0x7}, {0x2, 0xa}, {0x2, 0x6}, {0x3, 0x4}, {0x4, 0x3}, {0x4, 0x6}, {0x3}, {0x2, 0x7}, {0x6, 0x3}, {0x1, 0x4}, {0x7, 0x3}, {0x1, 0x7}, {0x7, 0x5}, {0x4, 0x7}, {0x3, 0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3, 0x9}, {0x0, 0x2}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {}, {0x7, 0x4}, {0x2, 0x8}, {0x1, 0x5}, {0x6, 0x1}, {0x3, 0x3}, {0x7, 0x4}, {0x4, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x0, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x4}, {0x6, 0x3}, {0x1, 0x4}, {0x1, 0x4}, {0x5, 0x4}, {0x7, 0xa}, {0x6, 0x4}, {0x6}, {0x7, 0xa}, {0x6, 0x2}, {0x0, 0x6}, {0x4, 0x6}, {0x2, 0x5}, {0x7, 0x4}, {0x7, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x4}, {0x6, 0x9}, {0x1, 0x9}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0x6}, {0x3, 0x1}, {0x4, 0x5}, {0x0, 0x6}, {0x0, 0x3}, {0x2}, {0x5, 0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x7, 0x9}, {0x6, 0x9}, {0x2, 0x4}, {0x0, 0x3}, {0x5, 0x1}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x35, 0x18, 0x30, 0x4, 0x16, 0x9, 0x36, 0x30, 0x6, 0x12, 0x24, 0x6, 0x12, 0x36, 0x24, 0x6c, 0x18, 0x4d, 0x9, 0x60, 0x3, 0x60, 0x48, 0x36, 0x2, 0x6, 0x5, 0x6c, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x7}, {0x0, 0x4}, {0x6, 0x7}, {0x7, 0x8}, {0x2, 0x9}, {0x0, 0x9}, {0x0, 0x8}, {0x3, 0x7}, {0x4, 0x1}, {0x2, 0x3}, {0x4}, {0x4, 0x3}, {0x1, 0x8}, {}, {0x6, 0x8}, {0x2, 0x1}, {0x3, 0x4}, {0x4, 0x3}, {0x4, 0x1}, {0x2, 0xa}, {0x5, 0x2}, {0x7}, {0x3, 0x3}, {0x4, 0x6}, {0x1, 0x5}, {0x5, 0x6}, {0x6, 0x5}, {0x2, 0x7}, {0x3, 0x7}, {0x5, 0x2}, {0x7, 0xa}, {0x2, 0x7}, {0x6, 0x5}, {}, {0x5, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x0, 0x1}, {0x5, 0x9}, {0x1, 0x5}, {0x2, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0x3}, {}, {0x5, 0x2}, {0x3, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x400, 0xfffe, 0xd, 0x5, 0x1c0, 0xa3e7]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x8, 0x4, 0x0, 0x80, 0x9, 0x569]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x1}, {0x3, 0x6}, {0x4, 0x5}, {0x1}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x6}, {0x2, 0x8}, {0x5}, {0x3, 0x11}, {0x5, 0x8}, {0x2, 0x8}, {0x3, 0x8}, {0x6, 0x5}, {0x5, 0x6}, {0x0, 0x2}, {0x4, 0x6}, {0x4, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x98e, 0x7, 0xde, 0x1000, 0xd0b, 0x5, 0xac6e]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x7, 0x6, 0x9, 0x100, 0x4, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xf9, 0x7, 0x2, 0x5, 0x5, 0x7, 0xc]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x9}, {0x4, 0x2}, {0x4}, {0x4, 0xa}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x5}, {0x7, 0x7}, {}, {0x3, 0x6}, {0x7}, {0x2, 0x2}, {0x4, 0x3}, {0x0, 0x8}, {0x6, 0x7}, {0x3, 0x3}, {0x1, 0x9}, {0x7, 0x8}, {0x3, 0x2}, {0x5}, {0x3, 0x5}, {0x1}, {0x6, 0x8}, {0x2, 0x2}, {0x3, 0x5}, {0x0, 0x2}, {0x4, 0x2}, {0x3, 0x5}, {0x1, 0x8}, {0x7, 0x5}, {0x1, 0x1}, {0x2, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xeb}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0x2dc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2d8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x3e2a, 0x8, 0x2, 0x7fff, 0x7, 0x0, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x16, 0x60, 0x60, 0x18, 0xb, 0x4, 0x6c, 0x1b, 0x12, 0x1b, 0x48, 0x60, 0x60, 0x3, 0x30, 0x36, 0x24, 0x16, 0x5, 0x5, 0x1b, 0x12, 0xc, 0x1b, 0x1]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xf]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x27fe, 0xe, 0x5, 0x435, 0x4, 0xf, 0x7]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xfe84f8c5eb1783d3, 0x18, 0x1b, 0x1, 0x66, 0x1b, 0x36, 0x1b, 0x9, 0x18, 0x9c1417a1a57027ef, 0x16, 0x48, 0x36, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0xa1a, 0x4, 0x5, 0xfd4, 0x8b3b, 0x9, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x101, 0xa3b3, 0xfff9, 0x2, 0x2, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xac2, 0x8, 0x8, 0x80, 0x4, 0x5460, 0x3, 0x67]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x2, 0x5}, {0x4, 0x6}, {0x4, 0x1}, {0x2, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x0, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0x2}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x8}, {0x7, 0x4}, {0x5}, {0x1, 0x5}, {0x3}, {0x1, 0x3}, {0x6, 0x6}, {0x7, 0x3}, {0x3, 0x8}, {0x5, 0x5}, {}, {0x5, 0x5}, {0x7, 0x5}, {0x7, 0x3}, {0x7, 0x6}, {0x6, 0x9}, {0x0, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x7}, {0x0, 0x5}, {0x5, 0x3}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x7}, {0x5, 0x8}, {0x7, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x4, 0x9}, {0x7, 0x1}, {0x2, 0x5}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x3}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x60, 0x9, 0xb, 0x1, 0x12, 0x48, 0x1, 0x1b]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0xb, 0x6c, 0x9, 0x48, 0x39, 0x24, 0xc, 0x36, 0x36, 0xb, 0xc, 0x16, 0x24, 0x12, 0x1b, 0x6, 0xb, 0x5, 0x6, 0x12, 0x12, 0x6, 0x18, 0x36, 0x3, 0xb, 0x9, 0x4, 0x9, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xe8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x9, 0xb, 0xc, 0x24, 0x24, 0x12, 0x16, 0x5, 0x30, 0x24, 0x48, 0x6c, 0xb, 0x36, 0x24, 0x9, 0x60, 0x12, 0x60, 0x48, 0x16, 0x1b, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x18, 0x12, 0x36, 0x5, 0x1b, 0x18, 0x36, 0x18, 0x6, 0x1b, 0x1b, 0x1, 0x3, 0x1b, 0x1921c55ba0cf6f75, 0x1, 0x4, 0xc, 0x24, 0x36, 0x66, 0x18, 0xe, 0x5, 0x4, 0xb, 0x6c, 0x60]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1}, {0x1, 0x5}, {0x7, 0x1}, {0x2, 0x6}, {0x6, 0x5}, {0x7, 0x1}, {0x3, 0x2}, {0x5, 0xa}, {0x6, 0x1}, {0x0, 0x2}, {0x7, 0x8}, {0x2, 0x2}, {0x7, 0x1}, {0x5, 0x6}, {0x4, 0x5}, {}, {0x4, 0x8}, {0x1, 0xa}, {0x0, 0x1}, {0x0, 0x9}, {0x3, 0x8}, {0x5, 0x3}, {0x4, 0x5}, {0x2, 0x2}, {0x3, 0x9}, {0x3, 0x7}, {0x5, 0x1}, {}, {0x0, 0x9}, {0x4, 0x6}, {0x7, 0x2}, {0x4, 0x8}, {0x0, 0x1}, {0x2, 0x2}, {0x3, 0x3}, {0x1, 0x5}, {0x2}, {0x3, 0x9}, {0x0, 0x9}, {0x3, 0x3}, {0x3, 0x5}, {0x2, 0x5}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x1}, {0x6, 0x5}, {0x2, 0x2}, {0x1, 0xe}, {0x5, 0x2}, {0x6, 0x5}, {0x4, 0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x7, 0x4}, {0x0, 0x5}, {0x5, 0x8}, {0x0, 0xa}, {0x4, 0x6}, {0x4, 0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x0, 0xa}, {}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x2}, {0x0, 0x8}, {0x5, 0x14}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x1, 0x48]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x2}, {0x5, 0x4}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0x7}, {0x6, 0x7}, {0x2, 0x1}, {0x1, 0x3}, {0x5, 0x8}, {0x2, 0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x3, 0x9}, {0x0, 0x5}, {0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0x7}, {0x7, 0x2}, {0x3}, {0x4, 0x8}, {0x7, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0xa}, {0x5, 0x7}, {0x4, 0x8}, {0x0, 0x4}, {0x3, 0x6}, {0x3, 0x9}, {0x7, 0x7}, {0x3, 0x9}, {0x1, 0x6}, {0x4, 0x6}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x2}, {0x7, 0x5}, {0x0, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x16e0, 0x4, 0x7, 0x3, 0x10, 0xa, 0xfbaf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x16, 0xb, 0x36, 0x6, 0x30, 0x5, 0x3, 0x12, 0x24, 0x3, 0x1, 0x6, 0x1b, 0x6, 0x4, 0x48, 0x3, 0xc, 0x4, 0x2, 0x3, 0x60, 0x1, 0x48, 0xc, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0xea4}, 0x1, 0x0, 0x0, 0x81}, 0x40044) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x8, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="000000000000000096c964f8eb7cec5840", 0x11}], 0x1, 0x0, 0x0, 0x900}, 0x60) 840.719211ms ago: executing program 2 (id=5798): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x48, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='macvlan\x00', 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000004c0)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000480)=0x8f72, 0x4) sendmsg$inet6(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="f9b5f70759279793a8d4181210e59dfafbf69f157d2cc4887c493edf35dc119005ac5f20380fc262f848c1e67d40229eb5e75a8b02e4a1db634a4a422d8c09cd38558fec00e237a9d94dfa35e6471bdb0dcc27c5b95c37592f3c291de0f0da1ad2f14a77f2c9c5aa84fc783de3dd69036f44358a0239e62c8f55e94e6e2bf72dccade4ad393c4b944051204a91b23e", 0x8f}, {&(0x7f0000000340)="cd63b0c7b21fc781d6ba115287c7cd763f7f36782a3b6d4f18ce5fd1fcca1b31386493b88de24eb1a026bdd0e8086f3a51a835a3ff8d26468e124ca80fb74630a843f260aebdaa4cf8439157df2815bff629cb9d3545700e7b54d5da7764238c7a92dfaf7c9b68949cba29fb751a71ce174c1d386e954d08812c93da4d1ead501d6a95bd43b70a613b3bf1d22e51cff1e4adce0782c0e6cb109a0c662a62147a1f9840445c3ef853eae4aa446c413e", 0xaf}, {&(0x7f0000000400)="03e1e9056054e84b240036fe8c2e1aa5a0afed6ae735fd812356361f0bc22eb2dd8a04a8a68de44cd05c9650620df8840238b8ff528e0b9976f5a798b92400eb8121895f30735a96297d7b2a7ee38fcceab8a82448081c36b75d4c3d6b97", 0x5e}], 0x3, &(0x7f0000000140)}, 0x4008085) 603.672285ms ago: executing program 0 (id=5799): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000300)={0x4, 0xf9}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006c6f67001400028006000140000000000600a0f2000900000900010073797a30000000000900020073797a3200000000140000001100010000"], 0x78}}, 0x0) 603.170782ms ago: executing program 2 (id=5800): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @multicast, 'veth1_to_bond\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000140)) 451.361135ms ago: executing program 4 (id=5801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000240)="11", 0x1, 0x8010, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 450.848218ms ago: executing program 2 (id=5802): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0xffffffc0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000040), &(0x7f00000000c0)=""/109}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000040), &(0x7f00000000c0)=""/109}, 0x20) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xd1, &(0x7f0000000140)=0xfffffffb, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d3, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r7) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r7) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x2000c000) 214.648696ms ago: executing program 2 (id=5803): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100000000000000000000a38000000080a"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, @in6={0xa, 0x4e22, 0x7ff, @empty, 0x7}], 0x38) 0s ago: executing program 2 (id=5804): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c}, 0x20) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="210329bd7000a7dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000400)=""/4083, 0xff3}], 0x2}, 0x8}], 0x4, 0x180, 0x0) kernel console output (not intermixed with test programs): reated IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.961028][ T8159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.206723][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3215'. [ 369.445955][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.456065][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.464887][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.469949][T18013] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3333'. [ 369.491025][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.498732][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.002806][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3338'. [ 370.346342][T18053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'. [ 370.357520][T18065] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3345'. [ 370.393206][T18053] hsr_slave_1 (unregistering): left promiscuous mode [ 370.419068][T18010] chnl_net:caif_netlink_parms(): no params data found [ 370.455566][T18067] netlink: 'syz.0.3348': attribute type 1 has an invalid length. [ 370.606185][T18010] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.626458][T18079] netlink: 'syz.4.3352': attribute type 1 has an invalid length. [ 370.632849][T18010] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.645519][T18010] bridge_slave_0: entered allmulticast mode [ 370.654670][T18010] bridge_slave_0: entered promiscuous mode [ 370.669777][T18010] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.690273][T18010] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.697530][T18010] bridge_slave_1: entered allmulticast mode [ 370.731679][T18010] bridge_slave_1: entered promiscuous mode [ 370.815567][T18082] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.835311][T18082] bridge_slave_0 (unregistering): left allmulticast mode [ 370.842634][T18082] bridge_slave_0 (unregistering): left promiscuous mode [ 370.850126][T18082] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.888617][T18010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.918350][T18010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.988960][T18010] team0: Port device team_slave_0 added [ 370.999468][T18010] team0: Port device team_slave_1 added [ 371.071771][T18010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.081296][T18010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.129829][T18010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.142905][T18010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.149872][T18010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.195042][T18116] set match dimension is over the limit! [ 371.211353][T18010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.345562][T18010] hsr_slave_0: entered promiscuous mode [ 371.352770][T18010] hsr_slave_1: entered promiscuous mode [ 371.359222][T18010] debugfs: 'hsr0' already exists in 'hsr' [ 371.377220][T18010] Cannot create hsr debugfs directory [ 371.397050][T18123] veth0_to_bond: entered allmulticast mode [ 371.475001][T18128] ip6gre1: entered allmulticast mode [ 371.592025][ T5823] Bluetooth: hci2: command tx timeout [ 371.686775][T18010] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.763741][T18010] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.795030][T18145] syzkaller0: entered promiscuous mode [ 371.802036][T18145] syzkaller0: entered allmulticast mode [ 371.882790][T18010] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.978096][T18010] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.994772][T18153] netlink: 'syz.2.3375': attribute type 1 has an invalid length. [ 372.004762][T18151] block nbd0: not configured, cannot reconfigure [ 372.239164][T18158] hsr_slave_1 (unregistering): left promiscuous mode [ 372.252109][T18010] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.264309][T18010] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.275189][T18010] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 372.291168][T18010] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 372.498312][T18176] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 372.516001][T18176] tipc: Started in network mode [ 372.541899][T18176] tipc: Node identity 4ebb4383195, cluster identity 4711 [ 372.549238][T18176] tipc: Enabled bearer , priority 0 [ 372.661706][T18176] tipc: Resetting bearer [ 372.678388][T18010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.758002][T18010] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.785098][ T9936] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.792328][ T9936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.841135][T18175] tipc: Disabling bearer [ 372.863527][ T9936] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.870720][ T9936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.484748][T18010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.670352][ T5823] Bluetooth: hci2: command tx timeout [ 373.768569][T18010] veth0_vlan: entered promiscuous mode [ 373.825704][T18010] veth1_vlan: entered promiscuous mode [ 373.914665][T18010] veth0_macvtap: entered promiscuous mode [ 373.958509][T18010] veth1_macvtap: entered promiscuous mode [ 374.049481][T18010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.132338][T18010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.238304][ T8151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.254532][ T8151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.343462][ T8151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.365032][ T8151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.409205][T18276] xt_l2tp: wrong L2TP version: 0 [ 374.523789][T18283] __nla_validate_parse: 12 callbacks suppressed [ 374.523808][T18283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3413'. [ 374.632785][T18283] macvtap1: entered promiscuous mode [ 374.638160][T18283] vlan0: entered promiscuous mode [ 374.643727][T18283] macvtap1: entered allmulticast mode [ 374.649115][T18283] vlan0: entered allmulticast mode [ 374.654705][T18283] veth0_vlan: entered allmulticast mode [ 374.709500][ T8151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.732098][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3414'. [ 374.754155][ T8151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.820689][ T9943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.828561][ T9943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.852476][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3414'. [ 374.888881][T18299] syzkaller0: entered promiscuous mode [ 374.902406][T18303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3419'. [ 374.906824][T18299] syzkaller0: entered allmulticast mode [ 375.109161][T18309] sit0: entered promiscuous mode [ 375.128912][T18309] netlink: 'syz.4.3420': attribute type 1 has an invalid length. [ 375.137441][T18309] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3420'. [ 375.306644][T18326] IPv6: sit1: Disabled Multicast RS [ 375.323511][T18326] sit1: entered allmulticast mode [ 375.398008][T18330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3428'. [ 375.410501][T18330] netlink: 'syz.4.3428': attribute type 7 has an invalid length. [ 375.450563][T18330] netlink: 'syz.4.3428': attribute type 8 has an invalid length. [ 375.473217][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3428'. [ 375.506735][T18339] vlan2: entered allmulticast mode [ 375.520377][T18339] bond0: entered allmulticast mode [ 375.526956][T18339] bond_slave_0: entered allmulticast mode [ 375.533397][T18339] bond_slave_1: entered allmulticast mode [ 375.557599][T18330] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3428'. [ 375.579326][ T8151] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 375.605536][T18351] syzkaller1: entered promiscuous mode [ 375.636828][T18351] syzkaller1: entered allmulticast mode [ 375.739182][T18330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.750651][ T5823] Bluetooth: hci2: command tx timeout [ 375.783362][T18330] bond_slave_0: left allmulticast mode [ 375.857381][T18330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.867041][T18330] bond_slave_1: left allmulticast mode [ 375.876951][T18330] bond0 (unregistering): Released all slaves [ 376.105471][T18371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3436'. [ 376.141536][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3436'. [ 376.473078][T18387] ip6t_srh: unknown srh match flags 5F28 [ 376.958054][T18411] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 377.271166][T18438] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 377.339314][T18442] block nbd0: not configured, cannot reconfigure [ 377.559099][T18458] tipc: Enabling of bearer rejected, failed to enable media [ 377.575422][T18457] veth1_to_bond: entered allmulticast mode [ 377.614674][T18457] veth1_to_bond: left allmulticast mode [ 377.821609][T18479] openvswitch: netlink: IP tunnel dst address not specified [ 377.831181][ T5823] Bluetooth: hci2: command tx timeout [ 378.555029][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.563699][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 378.931869][T18549] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 378.952517][T18548] syzkaller0: entered promiscuous mode [ 378.958354][T18548] syzkaller0: entered allmulticast mode [ 379.304442][T18572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.830150][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms [ 383.838235][ C0] lec:lec_tx_timeout: lec0 [ 403.591250][ T6303] lec:lec_start_xmit: lec0:No lecd attached [ 408.870190][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5280 ms [ 408.878251][ C0] lec:lec_tx_timeout: lec0 [ 431.858455][T18586] __nla_validate_parse: 15 callbacks suppressed [ 431.858476][T18586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3501'. [ 432.271948][T18618] netlink: 'syz.0.3508': attribute type 2 has an invalid length. [ 432.460000][T18635] syzkaller0: entered promiscuous mode [ 432.482932][T18635] syzkaller0: entered allmulticast mode [ 432.853039][T18656] syzkaller0: entered promiscuous mode [ 432.879257][T18656] syzkaller0: entered allmulticast mode [ 433.058901][T18667] netlink: 'syz.3.3519': attribute type 3 has an invalid length. [ 433.127511][T18675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3520'. [ 433.202729][T18678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3520'. [ 433.249707][T18681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3523'. [ 433.261086][T18681] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3523'. [ 433.396779][ T5823] block nbd0: Receive control failed (result -107) [ 433.450783][T18685] nbd0: detected capacity change from 0 to 127 [ 433.484754][T18625] block nbd0: Dead connection, failed to find a fallback [ 433.540429][T18625] block nbd0: shutting down sockets [ 433.552463][T18625] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.566778][T18625] Buffer I/O error on dev nbd0, logical block 0, async page read [ 433.587691][T18625] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.607639][T18625] Buffer I/O error on dev nbd0, logical block 1, async page read [ 433.622273][T18625] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.632273][T18625] Buffer I/O error on dev nbd0, logical block 2, async page read [ 433.641985][T18625] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.651921][T18625] Buffer I/O error on dev nbd0, logical block 3, async page read [ 433.659954][T18625] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.671068][T18625] Buffer I/O error on dev nbd0, logical block 0, async page read [ 433.678901][T18625] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.708666][T18702] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3530'. [ 433.719060][T18625] Buffer I/O error on dev nbd0, logical block 1, async page read [ 433.752236][T18625] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.778101][T18625] Buffer I/O error on dev nbd0, logical block 2, async page read [ 433.794553][T18715] syzkaller0: entered promiscuous mode [ 433.800275][T18625] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.809773][T18625] Buffer I/O error on dev nbd0, logical block 3, async page read [ 433.830474][T18715] syzkaller0: entered allmulticast mode [ 433.857341][T18625] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.884953][T18625] Buffer I/O error on dev nbd0, logical block 0, async page read [ 433.905367][T18625] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 433.917114][T18625] Buffer I/O error on dev nbd0, logical block 1, async page read [ 433.930749][T18625] ldm_validate_partition_table(): Disk read failed. [ 433.941358][T18625] Dev nbd0: unable to read RDB block 0 [ 433.953503][T18625] nbd0: unable to read partition table [ 433.963130][T18722] syzkaller0: entered promiscuous mode [ 434.008889][T18625] ldm_validate_partition_table(): Disk read failed. [ 434.027974][T18625] Dev nbd0: unable to read RDB block 0 [ 434.038930][T18625] nbd0: unable to read partition table [ 434.190843][T18743] netlink: 'syz.3.3542': attribute type 1 has an invalid length. [ 434.206662][T18743] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3542'. [ 434.525482][T18753] bond1: (slave gre0): Device is not bonding slave [ 434.545479][T18753] bond1: option active_slave: invalid value (gre0) [ 434.602024][T18753] bond1 (unregistering): Released all slaves [ 434.716404][T18769] netlink: 'syz.2.3547': attribute type 1 has an invalid length. [ 434.856306][T18772] gretap1: entered promiscuous mode [ 434.881839][T18772] bond4: (slave gretap1): making interface the new active one [ 434.892451][T18772] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 434.923683][T18769] macvlan2: entered promiscuous mode [ 434.929046][T18769] macvlan2: entered allmulticast mode [ 434.938725][T18774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3548'. [ 434.978468][T18769] bond4: entered promiscuous mode [ 434.989553][T18769] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 434.999985][T18769] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 435.016846][T18769] bond4: left promiscuous mode [ 435.037177][T18776] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3549'. [ 435.067304][T18780] netlink: 'syz.0.3549': attribute type 3 has an invalid length. [ 435.157048][T18753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3545'. [ 435.258815][T18795] netlink: 'syz.0.3554': attribute type 16 has an invalid length. [ 435.289691][T18795] netlink: 'syz.0.3554': attribute type 17 has an invalid length. [ 435.305688][T18794] x_tables: duplicate underflow at hook 2 [ 435.369264][T18795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.441393][T18794] syzkaller0: entered promiscuous mode [ 435.447340][T18794] syzkaller0: entered allmulticast mode [ 435.518189][T18801] hsr_slave_1 (unregistering): left promiscuous mode [ 437.162845][T18803] netlink: 'syz.0.3557': attribute type 2 has an invalid length. [ 437.462673][T18828] __nla_validate_parse: 2 callbacks suppressed [ 437.462691][T18828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3565'. [ 437.531926][T18835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3568'. [ 437.687867][T18848] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3571'. [ 437.717560][T18848] nbd: illegal input index -8454144 [ 437.749010][T18848] netlink: 'syz.4.3571': attribute type 2 has an invalid length. [ 437.894255][T18861] syzkaller0: entered promiscuous mode [ 437.913153][T18861] syzkaller0: entered allmulticast mode [ 437.967333][T18861] openvswitch: netlink: IP tunnel dst address not specified [ 439.993480][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.001333][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 440.668824][T18848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 440.830887][T18887] sctp: [Deprecated]: syz.2.3582 (pid 18887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 440.830887][T18887] Use struct sctp_sack_info instead [ 440.926102][T18894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3584'. [ 440.963771][T18900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3585'. [ 441.023477][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3585'. [ 441.043739][T18905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3587'. [ 441.048913][T18906] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3586'. [ 441.066010][T18906] netlink: 'syz.2.3586': attribute type 3 has an invalid length. [ 441.091927][T18906] netlink: 'syz.2.3586': attribute type 3 has an invalid length. [ 441.162652][T18916] syzkaller0: entered promiscuous mode [ 441.168181][T18916] syzkaller0: entered allmulticast mode [ 441.262807][T18909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3585'. [ 441.271879][T18923] IPVS: set_ctl: invalid protocol: 23 172.20.20.13:20002 [ 441.334613][T18916] netlink: 'syz.0.3585': attribute type 10 has an invalid length. [ 441.363389][T18916] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 441.403432][T18931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3595'. [ 441.484934][T18929] syzkaller0: entered promiscuous mode [ 441.491847][T18939] xt_l2tp: missing protocol rule (udp|l2tpip) [ 441.498975][T18929] syzkaller0: entered allmulticast mode [ 443.329236][T18967] __nla_validate_parse: 2 callbacks suppressed [ 443.329255][T18967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3606'. [ 443.454306][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3608'. [ 443.702087][T18998] netlink: 'syz.2.3617': attribute type 2 has an invalid length. [ 443.723991][T18991] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3615'. [ 443.897936][T19008] syzkaller0: entered promiscuous mode [ 443.905493][T19008] syzkaller0: entered allmulticast mode [ 443.928458][T19009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3619'. [ 443.940450][T19006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3619'. [ 443.985497][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3621'. [ 444.136217][T19022] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 444.356207][T19032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3627'. [ 444.393315][T19032] netlink: 'syz.3.3627': attribute type 1 has an invalid length. [ 444.411205][T19032] netlink: 'syz.3.3627': attribute type 2 has an invalid length. [ 444.473065][T19036] syzkaller1: entered promiscuous mode [ 444.489913][T19036] syzkaller1: entered allmulticast mode [ 444.526578][T19047] xt_l2tp: missing protocol rule (udp|l2tpip) [ 445.010325][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 445.018417][ C0] lec:lec_tx_timeout: lec0 [ 445.113250][T19079] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3640'. [ 445.492343][T19100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3647'. [ 445.544972][T19104] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 445.668115][T19111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3650'. [ 445.737703][T19117] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 445.773923][T19117] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 445.842748][T19122] gretap1: entered promiscuous mode [ 445.868576][T19122] gretap1: entered allmulticast mode [ 446.214775][T19141] hsr_slave_1 (unregistering): left promiscuous mode [ 446.475767][T19163] syzkaller0: entered promiscuous mode [ 446.490190][T19163] syzkaller0: entered allmulticast mode [ 446.645456][T19167] sctp: [Deprecated]: syz.4.3667 (pid 19167) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.645456][T19167] Use struct sctp_sack_info instead [ 446.943045][T19196] pimreg3: entered allmulticast mode [ 447.609757][T19233] netlink: 'syz.2.3688': attribute type 28 has an invalid length. [ 447.618470][T19233] netlink: 'syz.2.3688': attribute type 3 has an invalid length. [ 447.712237][T19239] syzkaller0: entered promiscuous mode [ 447.726133][T19239] syzkaller0: entered allmulticast mode [ 447.773457][T19244] netlink: 'syz.0.3693': attribute type 1 has an invalid length. [ 447.786136][T19244] netlink: 'syz.0.3693': attribute type 4 has an invalid length. [ 447.976807][T19256] syzkaller0: entered promiscuous mode [ 447.991125][T19256] syzkaller0: entered allmulticast mode [ 448.238531][T19274] dvmrp0: entered allmulticast mode [ 448.375699][T19287] __nla_validate_parse: 20 callbacks suppressed [ 448.375719][T19287] netlink: 827 bytes leftover after parsing attributes in process `syz.0.3707'. [ 448.494923][T19293] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3709'. [ 448.520682][T19300] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3712'. [ 448.591481][T19297] netlink: 'syz.0.3710': attribute type 21 has an invalid length. [ 448.599354][T19297] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3710'. [ 448.619451][T19297] netlink: 'syz.0.3710': attribute type 5 has an invalid length. [ 448.637432][T19297] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3710'. [ 448.651441][T19308] Cannot find set identified by id 65534 to match [ 448.673055][T19308] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 448.723837][T19310] syzkaller0: entered promiscuous mode [ 448.729350][T19310] syzkaller0: entered allmulticast mode [ 448.746351][T19310] netlink: 'syz.1.3715': attribute type 21 has an invalid length. [ 448.759828][T19310] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3715'. [ 448.770218][T19310] netlink: 'syz.1.3715': attribute type 5 has an invalid length. [ 448.778113][T19310] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3715'. [ 448.962597][T19326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3718'. [ 448.975739][T19323] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3719'. [ 449.182364][T19336] netlink: 'syz.0.3724': attribute type 33 has an invalid length. [ 449.207379][T19341] vlan2: entered promiscuous mode [ 449.213600][T19341] vlan2: entered allmulticast mode [ 449.218748][T19341] hsr_slave_1: entered allmulticast mode [ 449.328699][T19348] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3728'. [ 449.345518][T19348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.348417][T19344] xt_hashlimit: size too large, truncated to 1048576 [ 450.475990][T19414] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 450.505450][T19414] bond3 (unregistering): Released all slaves [ 450.708019][T19428] netlink: 'syz.3.3749': attribute type 1 has an invalid length. [ 450.724153][T19428] netlink: 'syz.3.3749': attribute type 1 has an invalid length. [ 450.738678][T19429] netlink: 'syz.1.3750': attribute type 142 has an invalid length. [ 450.908631][T19441] syzkaller0: entered promiscuous mode [ 450.932140][T19441] syzkaller0: entered allmulticast mode [ 451.203413][T19458] syzkaller0: entered promiscuous mode [ 451.209237][T19458] syzkaller0: entered allmulticast mode [ 451.375787][T19473] syzkaller1: entered promiscuous mode [ 451.390915][T19473] syzkaller1: entered allmulticast mode [ 451.432047][T19477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.848317][T19502] block nbd1: NBD_DISCONNECT [ 451.999212][T19520] syzkaller1: entered promiscuous mode [ 452.004907][T19520] syzkaller1: entered allmulticast mode [ 452.114242][T19511] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 452.132453][T19511] bond0: (slave gre0): Error -95 calling set_mac_address [ 452.327232][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 452.693311][T19568] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 452.995149][T19595] syzkaller0: entered promiscuous mode [ 453.001003][T19595] syzkaller0: entered allmulticast mode [ 453.515458][T19621] netlink: 'syz.1.3807': attribute type 1 has an invalid length. [ 453.677013][T19635] __nla_validate_parse: 50 callbacks suppressed [ 453.677031][T19635] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.3811'. [ 453.804552][T19633] syzkaller0: entered promiscuous mode [ 453.839769][T19633] syzkaller0: entered allmulticast mode [ 453.878305][T19657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3818'. [ 453.887558][T19657] netlink: 'syz.4.3818': attribute type 7 has an invalid length. [ 453.896207][T19657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3818'. [ 453.897733][T19654] netlink: 'syz.3.3817': attribute type 4 has an invalid length. [ 453.938214][T19655] netlink: 'syz.3.3817': attribute type 4 has an invalid length. [ 455.479641][T19661] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3819'. [ 455.756557][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3827'. [ 455.876565][T19684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3828'. [ 455.887509][T19684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.896392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.905574][T19684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.924349][ T8159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.940204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.993699][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.002242][ T8159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.012617][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.030304][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.373814][T19706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3838'. [ 456.426547][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3838'. [ 456.448484][T19711] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3839'. [ 456.476287][T19712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3836'. [ 456.630388][ C0] net_ratelimit: 2 callbacks suppressed [ 456.630408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.645010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.654031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.662652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.670895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.679096][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.687347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.695474][ T8151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.703914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.712070][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.438731][T19772] hsr_slave_0: left promiscuous mode [ 457.631731][T19784] syzkaller0: entered promiscuous mode [ 457.648620][T19784] syzkaller0: entered allmulticast mode [ 457.722105][T19783] syzkaller1: entered promiscuous mode [ 457.738335][T19783] syzkaller1: entered allmulticast mode [ 458.322998][T19834] syzkaller0: entered promiscuous mode [ 458.338882][T19834] syzkaller0: entered allmulticast mode [ 458.737406][T19871] __nla_validate_parse: 13 callbacks suppressed [ 458.737425][T19871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3888'. [ 458.773796][T19866] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3884'. [ 458.800878][T19877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3886'. [ 458.810522][T19877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3886'. [ 458.932694][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3889'. [ 458.952551][T19882] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 459.076784][T19886] vlan2: entered promiscuous mode [ 459.130128][T19886] bridge0: entered promiscuous mode [ 459.171632][T19903] syzkaller0: entered promiscuous mode [ 459.177243][T19903] syzkaller0: entered allmulticast mode [ 459.509455][T19915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3899'. [ 459.549808][T19915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3899'. [ 459.653125][T19923] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3901'. [ 459.677110][T19923] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3901'. [ 459.904316][T19939] syzkaller0: entered promiscuous mode [ 459.909835][T19939] syzkaller0: entered allmulticast mode [ 460.048764][T19947] can: request_module (can-proto-0) failed. [ 460.181812][T19957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3913'. [ 460.345869][T19954] syzkaller0: entered promiscuous mode [ 460.360732][T19954] syzkaller0: entered allmulticast mode [ 461.753339][ T8159] net_ratelimit: 26 callbacks suppressed [ 461.753360][ T8159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.768760][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.802995][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.179393][T19994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.233042][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.371223][T20011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.390733][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.401668][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.423776][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.593919][T19994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.623220][T20008] batadv_slave_1: entered promiscuous mode [ 462.690889][T19993] batadv_slave_1: left promiscuous mode [ 463.094236][T20040] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 463.125412][T20043] netlink: 'syz.0.3936': attribute type 2 has an invalid length. [ 463.271727][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.434974][T20070] netlink: 'syz.1.3947': attribute type 1 has an invalid length. [ 463.457106][T20070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.465059][T20073] syzkaller0: entered promiscuous mode [ 463.471459][T20073] syzkaller0: entered allmulticast mode [ 463.502976][T20070] veth3: entered promiscuous mode [ 463.513089][T20070] bond1: (slave veth3): Enslaving as an active interface with a down link [ 463.556237][T20070] vlan4: entered allmulticast mode [ 463.561852][T20070] bond1: entered allmulticast mode [ 463.569069][T20070] bond1: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 463.804045][T20088] __nla_validate_parse: 9 callbacks suppressed [ 463.804062][T20088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3953'. [ 463.823251][T20090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3953'. [ 463.846047][T20088] : entered promiscuous mode [ 463.977838][T20099] bond3: invalid ARP target 0.0.0.0 specified for addition [ 463.985482][T20099] bond3: option arp_ip_target: invalid value (0) [ 464.002711][T20099] bond3 (unregistering): Released all slaves [ 464.116647][T20111] netlink: 'syz.1.3958': attribute type 12 has an invalid length. [ 464.257753][T20111] bond2: option primary_reselect: invalid value (255) [ 464.326784][T20111] bond2 (unregistering): Released all slaves [ 464.330923][T20129] netlink: 'syz.4.3965': attribute type 1 has an invalid length. [ 464.492518][T20134] bond1: (slave geneve3): making interface the new active one [ 464.554091][T20134] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 464.564905][ T63] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 464.574852][ T63] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 464.596909][T20143] netlink: 'syz.1.3968': attribute type 21 has an invalid length. [ 464.604967][T20143] IPv6: NLM_F_CREATE should be specified when creating new route [ 464.614408][ T63] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 464.626062][ T63] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 464.626286][T20143] netlink: 'syz.1.3968': attribute type 1 has an invalid length. [ 464.662540][T20143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3968'. [ 464.674712][T20144] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3968'. [ 464.684709][T20143] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3968'. [ 464.849682][T20154] syzkaller0: entered promiscuous mode [ 464.863763][T20154] syzkaller0: entered allmulticast mode [ 465.119404][T20175] netlink: 'syz.4.3973': attribute type 39 has an invalid length. [ 466.696881][T20171] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 467.233992][ T8159] bond6 (unregistering): (slave geneve2): Releasing active interface [ 467.432701][ T5889] net_ratelimit: 7 callbacks suppressed [ 467.432715][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.484691][ T8159] bond9 (unregistering): (slave bridge4): Releasing active interface [ 467.556145][ T8159] bond0 (unregistering): Released all slaves [ 467.566332][ T8159] bond1 (unregistering): Released all slaves [ 467.579115][ T8159] bond2 (unregistering): Released all slaves [ 467.593612][ T8159] bond3 (unregistering): Released all slaves [ 467.612923][ T8159] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 467.623250][ T8159] bond4 (unregistering): Released all slaves [ 467.637681][ T8159] bond5 (unregistering): Released all slaves [ 467.658428][ T8159] bond6 (unregistering): Released all slaves [ 467.670299][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 467.674535][ T8159] bond7 (unregistering): Released all slaves [ 467.691998][ T8159] bond8 (unregistering): Released all slaves [ 467.704632][ T8159] bond9 (unregistering): Released all slaves [ 467.724500][T20199] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 468.054753][T20235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3986'. [ 468.104808][ T8159] : left promiscuous mode [ 468.204934][ T8159] tipc: Disabling bearer [ 468.247717][T20256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3993'. [ 468.317189][ T8159] tipc: Left network mode [ 468.362362][T20266] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3995'. [ 468.371730][T20262] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3995'. [ 468.414325][T20272] netlink: 'syz.3.3994': attribute type 11 has an invalid length. [ 468.470408][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.478579][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.778191][T20291] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4001'. [ 468.845754][T20300] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 468.867229][T20291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.117206][T20291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.213441][T20291] bond0 (unregistering): Released all slaves [ 469.253097][T20289] IPv6: sit1: Disabled Multicast RS [ 469.259609][T20289] sit1: entered allmulticast mode [ 469.300772][T20309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4006'. [ 469.354214][T20309] netlink: 42 bytes leftover after parsing attributes in process `syz.3.4006'. [ 469.380220][T20309] netlink: 42 bytes leftover after parsing attributes in process `syz.3.4006'. [ 469.510337][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.000176][ T5889] IPVS: starting estimator thread 0... [ 470.122287][T20370] IPVS: using max 38 ests per chain, 91200 per kthread [ 470.180300][ T8159] hsr_slave_0: left promiscuous mode [ 470.237283][T20383] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4018'. [ 470.256895][ T8159] vlan0: left allmulticast mode [ 470.261921][ T8159] veth0_vlan: left allmulticast mode [ 470.268118][ T8159] vlan0: left promiscuous mode [ 470.281943][ T6303] lec:lec_start_xmit: lec0:No lecd attached [ 470.290790][ T8159] veth1_vlan: left promiscuous mode [ 470.296193][ T8159] veth0_vlan: left promiscuous mode [ 470.450595][T20395] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4022'. [ 470.460930][T20395] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4022'. [ 470.561503][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.351600][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.511258][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.563581][ T8159] pimreg3 (unregistering): left allmulticast mode [ 471.592183][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.738506][ T9943] smc: removing ib device syz1 [ 471.847388][ T1541] syz1: Port: 1 Link DOWN [ 471.927583][T20425] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 472.106530][T20436] pimreg3: entered allmulticast mode [ 472.132383][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4024'. [ 472.143600][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4024'. [ 472.163466][T20438] syzkaller0: entered promiscuous mode [ 472.179587][T20438] syzkaller0: entered allmulticast mode [ 472.647147][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.790629][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 473.398882][T20397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.418602][T20403] tipc: Enabling of bearer rejected, failed to enable media [ 473.702884][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.077365][T20504] netlink: 10236 bytes leftover after parsing attributes in process `syz.4.4038'. [ 474.100283][T20504] nbd: must specify at least one socket [ 474.160496][ T8159] IPVS: stop unused estimator thread 0... [ 474.444991][T20530] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.4042'. [ 474.558049][ T1541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.703953][T20548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.713247][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.722045][T20548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.732363][T20548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.741552][T20548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.751221][T20549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4047'. [ 474.772980][T20548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.784212][T20549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4047'. [ 474.801843][T20555] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4050'. [ 474.877487][T20550] netlink: 'syz.1.4048': attribute type 2 has an invalid length. [ 474.879786][T20555] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.952770][T20560] IPVS: set_ctl: invalid protocol: 137 100.1.1.2:20002 [ 475.015017][T20564] netlink: 54 bytes leftover after parsing attributes in process `syz.4.4051'. [ 475.024750][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4051'. [ 475.060962][T20568] bridge0: port 1(ipvlan2) entered blocking state [ 475.067752][T20568] bridge0: port 1(ipvlan2) entered disabled state [ 475.077028][T20568] ipvlan2: entered allmulticast mode [ 475.082953][T20568] bridge0: entered allmulticast mode [ 475.090870][T20568] ipvlan2: left allmulticast mode [ 475.102130][T20568] bridge0: left allmulticast mode [ 475.355674][T20584] openvswitch: netlink: IP tunnel dst address not specified [ 475.474355][T20595] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.558745][T20603] netlink: 'syz.0.4063': attribute type 16 has an invalid length. [ 475.566842][T20603] netlink: 'syz.0.4063': attribute type 17 has an invalid length. [ 475.706628][T20605] macvtap2: entered promiscuous mode [ 475.721898][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4061'. [ 475.738834][T20605] macvtap2: entered allmulticast mode [ 475.755722][T20605] veth1_vlan: entered allmulticast mode [ 475.832943][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5550 ms [ 475.841063][ C0] lec:lec_tx_timeout: lec0 [ 475.922650][T20619] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4069'. [ 475.963927][T20624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4071'. [ 476.010620][T20625] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 476.130558][T20637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4075'. [ 476.171595][T20635] syzkaller0: entered promiscuous mode [ 476.177151][T20635] syzkaller0: entered allmulticast mode [ 476.253688][T20640] bridge_slave_1: left allmulticast mode [ 476.259433][T20640] bridge_slave_1: left promiscuous mode [ 476.265472][T20640] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.277965][T20640] bridge_slave_0: left allmulticast mode [ 476.286791][T20640] bridge_slave_0: left promiscuous mode [ 476.300345][T20640] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.672685][T20676] #ÿ: renamed from bond_slave_0 [ 476.865962][T20684] Bluetooth: MGMT ver 1.23 [ 477.001091][T20691] lo: entered promiscuous mode [ 477.010742][T20691] tunl0: entered promiscuous mode [ 477.018621][T20691] gre0: entered promiscuous mode [ 477.061576][T20691] gretap0: entered promiscuous mode [ 477.071768][T20691] erspan0: entered promiscuous mode [ 477.091818][T20691] ip_vti0: entered promiscuous mode [ 477.832477][ T5889] net_ratelimit: 7 callbacks suppressed [ 477.832495][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.990757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.679709][T20762] netlink: 'syz.0.4112': attribute type 13 has an invalid length. [ 478.870516][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.712187][T20762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 479.829437][T20780] netlink: 'syz.1.4117': attribute type 3 has an invalid length. [ 479.910706][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.124520][T20808] __nla_validate_parse: 4 callbacks suppressed [ 480.124539][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4127'. [ 480.173776][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4129'. [ 480.175369][T20816] netlink: 'syz.2.4128': attribute type 2 has an invalid length. [ 480.190983][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4128'. [ 480.444236][T20825] pim6reg: entered allmulticast mode [ 480.548141][T20837] netlink: 'syz.2.4137': attribute type 1 has an invalid length. [ 480.613542][T20837] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4137'. [ 480.670308][T20837] netlink: Conntrack attr has 3 unknown bytes [ 480.695170][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.956408][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.976917][T20860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4143'. [ 480.988546][T20863] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4144'. [ 481.155851][T20877] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4148'. [ 481.735375][T20916] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4158'. [ 481.990316][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.997912][T20932] syzkaller1: entered promiscuous mode [ 482.017350][T20932] syzkaller1: entered allmulticast mode [ 482.059323][T20941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4165'. [ 482.248362][T20954] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4168'. [ 482.350720][T20959] syzkaller0: entered promiscuous mode [ 482.399675][T20959] syzkaller0: entered allmulticast mode [ 482.827336][T20993] C: renamed from lo (while UP) [ 482.873937][T20993] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 483.030411][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 483.039409][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.102468][T21021] netlink: 'syz.0.4190': attribute type 1 has an invalid length. [ 483.124728][T21021] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 483.752904][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.074402][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.125268][T21101] tipc: Started in network mode [ 484.132408][T21101] tipc: Node identity 6a7143d1e564, cluster identity 4711 [ 484.139705][T21101] tipc: Enabled bearer , priority 0 [ 484.153482][T21101] syzkaller0: entered promiscuous mode [ 484.190669][T21101] syzkaller0: entered allmulticast mode [ 484.202727][T21111] netlink: 'syz.1.4215': attribute type 30 has an invalid length. [ 484.290884][T21111] bond3: option arp_missed_max: invalid value (0) [ 484.297498][T21111] bond3: option arp_missed_max: allowed values 1 - 255 [ 484.317357][T21111] bond3 (unregistering): Released all slaves [ 484.341984][T21117] netlink: 'syz.1.4215': attribute type 29 has an invalid length. [ 484.350270][T21119] netlink: 'syz.3.4218': attribute type 12 has an invalid length. [ 484.362031][T21122] tipc: Resetting bearer [ 484.403475][T21099] tipc: Resetting bearer [ 484.447916][T21099] tipc: Disabling bearer [ 484.554212][T21138] netlink: 'syz.1.4222': attribute type 2 has an invalid length. [ 484.562407][T21138] netlink: 'syz.1.4222': attribute type 1 has an invalid length. [ 485.110749][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.191237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.130311][T21144] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 486.156284][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.287017][T21167] __nla_validate_parse: 8 callbacks suppressed [ 486.287034][T21167] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4230'. [ 486.316001][T21167] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4230'. [ 486.560627][ T5823] Bluetooth: hci2: command tx timeout [ 486.760374][T21204] tipc: Enabled bearer , priority 0 [ 486.792531][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.855153][T21204] +: renamed from syzkaller0 [ 486.866982][T21204] tipc: Disabling bearer [ 486.942571][T21216] netlink: 'syz.2.4243': attribute type 3 has an invalid length. [ 487.064027][T21229] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4247'. [ 487.191623][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.624960][T21272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4257'. [ 487.649711][T21272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4257'. [ 487.737084][T21275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4259'. [ 488.025417][T21282] netlink: 'syz.0.4262': attribute type 6 has an invalid length. [ 488.185749][T21293] dvmrp6: entered allmulticast mode [ 488.230336][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.325078][T21300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4266'. [ 488.618307][T21312] syzkaller1: entered promiscuous mode [ 488.634678][T21312] syzkaller1: entered allmulticast mode [ 488.800670][T21324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4275'. [ 489.019441][T21334] netlink: 'syz.0.4280': attribute type 1 has an invalid length. [ 489.041664][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4279'. [ 489.086035][T21334] bond0: option resend_igmp: invalid value (32767) [ 489.093729][T21334] bond0: option resend_igmp: allowed values 0 - 255 [ 489.103212][T21334] bond0 (unregistering): Released all slaves [ 489.135405][T21337] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.143099][T21337] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.262734][T21343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4282'. [ 489.275598][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.354981][T21351] netlink: 'syz.0.4284': attribute type 8 has an invalid length. [ 489.845078][ T1541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.320226][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.637154][T21392] netlink: 'syz.0.4293': attribute type 1 has an invalid length. [ 490.742728][T21396] macvlan0: entered promiscuous mode [ 490.748080][T21396] macvlan0: entered allmulticast mode [ 490.758210][T21396] bond0: entered promiscuous mode [ 490.765157][T21396] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 490.780150][T21396] bond0: left promiscuous mode [ 490.825685][T21391] macvlan0: entered promiscuous mode [ 490.840173][T21391] macvlan0: entered allmulticast mode [ 490.851488][T21391] bond0: entered promiscuous mode [ 490.868619][T21391] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 490.904423][T21391] bond0: left promiscuous mode [ 491.195405][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.356168][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.391115][T21414] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.398555][T21414] bridge0: port 2(bridge_slave_1) entered listening state [ 491.406062][T21414] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.413281][T21414] bridge0: port 1(bridge_slave_0) entered listening state [ 491.508111][T21414] __nla_validate_parse: 4 callbacks suppressed [ 491.508132][T21414] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4299'. [ 492.396920][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.804516][T21430] lo: left promiscuous mode [ 492.834178][T21430] tunl0: left promiscuous mode [ 492.842289][T21430] gre0: left promiscuous mode [ 492.851290][T21430] gretap0: left promiscuous mode [ 492.857340][T21430] erspan0: left promiscuous mode [ 492.881761][T21430] ip_vti0: left promiscuous mode [ 492.913564][T21435] ip6_vti0 speed is unknown, defaulting to 1000 [ 492.922415][T21435] ip6_vti0 speed is unknown, defaulting to 1000 [ 492.929736][T21435] ip6_vti0 speed is unknown, defaulting to 1000 [ 493.013185][T21448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.146124][T21455] netlink: 'syz.2.4308': attribute type 1 has an invalid length. [ 493.371527][T21470] openvswitch: netlink: IP tunnel TTL not specified. [ 493.421605][T21472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 493.431641][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.475864][T21479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4310'. [ 493.737546][T21435] infiniband syz2: set down [ 493.742273][ T795] ip6_vti0 speed is unknown, defaulting to 1000 [ 493.803342][T21435] infiniband syz2: added ip6_vti0 [ 493.829169][T21499] netlink: 'syz.3.4316': attribute type 1 has an invalid length. [ 493.866230][T21435] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 493.873108][T21435] infiniband syz2: Couldn't open port 1 [ 493.981185][T21435] RDS/IB: syz2: added [ 493.985276][T21435] smc: adding ib device syz2 with port count 1 [ 494.000259][T21435] smc: ib device syz2 port 1 has no pnetid [ 494.241129][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.470454][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.530665][T21499] bond2: entered promiscuous mode [ 494.536043][T21499] bond2: entered allmulticast mode [ 494.542365][T21499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.562059][T21501] macvlan2: entered promiscuous mode [ 494.567478][T21501] macvlan2: entered allmulticast mode [ 494.575282][T21501] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 494.715348][ T5882] ip6_vti0 speed is unknown, defaulting to 1000 [ 494.799081][T21512] sctp: [Deprecated]: syz.2.4319 (pid 21512) Use of int in maxseg socket option. [ 494.799081][T21512] Use struct sctp_assoc_value instead [ 494.891658][T21435] ip6_vti0 speed is unknown, defaulting to 1000 [ 495.012298][T21521] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4323'. [ 495.147905][T21521] bond6 (unregistering): Released all slaves [ 495.158351][T21536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4325'. [ 495.179787][T21537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.188788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.465365][T21435] ip6_vti0 speed is unknown, defaulting to 1000 [ 495.483645][T21544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4326'. [ 495.510509][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.848191][T21435] ip6_vti0 speed is unknown, defaulting to 1000 [ 496.420649][T21435] ip6_vti0 speed is unknown, defaulting to 1000 [ 496.434814][T21554] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4330'. [ 496.551717][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.776080][T21568] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.797344][T21568] bridge_slave_0 (unregistering): left allmulticast mode [ 496.806694][T21568] bridge_slave_0 (unregistering): left promiscuous mode [ 496.814662][T21568] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.864151][T21435] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.106983][T21435] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.271082][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.322246][T21435] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.548082][T21435] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.591310][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.003927][T21536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.013823][T21540] netlink: 'syz.2.4326': attribute type 1 has an invalid length. [ 498.021910][T21540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4326'. [ 498.031576][T21540] netlink: 'syz.2.4326': attribute type 1 has an invalid length. [ 498.182811][T21584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4338'. [ 498.260507][T21584] netlink: 'syz.3.4338': attribute type 1 has an invalid length. [ 498.268366][T21584] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4338'. [ 498.657522][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.748638][T21609] SET target dimension over the limit! [ 498.982561][T21622] vlan4: entered promiscuous mode [ 498.987780][T21622] bridge0: entered promiscuous mode [ 499.212025][T21640] ipt_REJECT: TCP_RESET invalid for non-tcp [ 499.395366][T21650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4356'. [ 499.397080][T21651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4357'. [ 499.490337][T21620] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4348'. [ 499.499642][T21653] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4348'. [ 499.589602][T21657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4358'. [ 499.676119][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.103619][T21680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.176824][T21680] netlink: 'syz.0.4367': attribute type 1 has an invalid length. [ 500.181477][T21683] ip6_vti0 speed is unknown, defaulting to 1000 [ 500.227927][T21680] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 500.311076][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.389976][T21695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4372'. [ 500.415155][T21698] nbd: must specify an index to disconnect [ 500.422706][T21698] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4373'. [ 500.537018][T21702] lo: Caught tx_queue_len zero misconfig [ 500.681781][T21707] syzkaller0: entered promiscuous mode [ 500.687738][T21707] syzkaller0: entered allmulticast mode [ 500.712420][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.941008][T21714] syzkaller0: entered promiscuous mode [ 500.970250][T21714] syzkaller0: entered allmulticast mode [ 501.098211][T21730] netlink: 'syz.3.4385': attribute type 64 has an invalid length. [ 501.122471][ T5939] IPVS: starting estimator thread 0... [ 501.220693][T21731] IPVS: using max 35 ests per chain, 84000 per kthread [ 501.364088][T21747] netlink: 'syz.0.4391': attribute type 1 has an invalid length. [ 501.370005][T21748] netlink: get zone limit has 4 unknown bytes [ 501.439785][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.472090][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 501.612214][T21760] 8021q: adding VLAN 0 to HW filter on device bond3 [ 501.630861][T21769] team0: No ports can be present during mode change [ 501.640611][T21760] netlink: 'syz.0.4393': attribute type 4 has an invalid length. [ 501.726306][T21778] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 501.751267][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.850377][T21784] sctp: [Deprecated]: syz.4.4402 (pid 21784) Use of int in maxseg socket option. [ 501.850377][T21784] Use struct sctp_assoc_value instead [ 502.037082][T21798] xt_bpf: check failed: parse error [ 502.042544][T21799] xt_bpf: check failed: parse error [ 502.077820][T21798] netlink: 'syz.1.4406': attribute type 1 has an invalid length. [ 502.085892][T21798] netlink: 'syz.1.4406': attribute type 2 has an invalid length. [ 502.094472][T21798] netlink: 'syz.1.4406': attribute type 1 has an invalid length. [ 502.456074][T21827] syzkaller0: entered promiscuous mode [ 502.483800][T21827] syzkaller0: entered allmulticast mode [ 502.740502][T21851] netem: change failed [ 502.794591][T21856] bond4: ARP target 1.0.0.0 is already present [ 502.802351][T21856] bond4: option arp_ip_target: invalid value (1) [ 502.802877][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.841830][T21856] bond4 (unregistering): Released all slaves [ 502.948114][T21868] sctp: [Deprecated]: syz.1.4426 (pid 21868) Use of int in maxseg socket option. [ 502.948114][T21868] Use struct sctp_assoc_value instead [ 503.063544][T21874] __nla_validate_parse: 12 callbacks suppressed [ 503.063622][T21874] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4427'. [ 503.097295][T21874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4427'. [ 503.171841][T21877] syzkaller0: entered promiscuous mode [ 503.194394][T21877] syzkaller0: entered allmulticast mode [ 503.236548][T21885] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4431'. [ 503.316646][T21896] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4432'. [ 503.501238][T21912] openvswitch: netlink: Tunnel attr 204 out of range max 16 [ 503.681775][T21925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4444'. [ 503.783061][T21925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4444'. [ 503.831117][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.856739][T21937] netlink: 'syz.3.4449': attribute type 11 has an invalid length. [ 503.902160][T21937] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4449'. [ 503.967336][T21942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4451'. [ 504.012018][T21942] bridge2: entered promiscuous mode [ 504.017293][T21942] bridge2: entered allmulticast mode [ 504.111766][T21954] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4452'. [ 504.123055][T21953] netlink: 'syz.1.4455': attribute type 21 has an invalid length. [ 504.131660][T21953] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4455'. [ 504.155284][T21953] netlink: 'syz.1.4455': attribute type 5 has an invalid length. [ 504.488841][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.580260][T21982] netlink: 'syz.1.4465': attribute type 1 has an invalid length. [ 504.652378][T21984] gretap0: entered promiscuous mode [ 504.657715][T21984] vlan3: entered promiscuous mode [ 504.702363][T21988] netlink: 'syz.2.4468': attribute type 1 has an invalid length. [ 504.705183][T21993] syzkaller1: entered promiscuous mode [ 504.717225][T21993] syzkaller1: entered allmulticast mode [ 504.758001][T21988] 8021q: adding VLAN 0 to HW filter on device bond6 [ 504.815321][T21988] bond6: (slave veth5): Enslaving as an active interface with a down link [ 504.836042][T21993] netlink: 'syz.1.4469': attribute type 29 has an invalid length. [ 504.870318][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.879403][T21988] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 504.903431][T21988] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 504.960308][T22004] netlink: 'syz.3.4472': attribute type 1 has an invalid length. [ 505.418901][T22013] macsec1: entered promiscuous mode [ 505.440266][T22013] macsec1: entered allmulticast mode [ 505.445617][T22013] bridge0: entered allmulticast mode [ 505.463233][T22013] bridge0: port 3(macsec1) entered blocking state [ 505.469862][T22013] bridge0: port 3(macsec1) entered disabled state [ 505.535223][T22013] bridge0: left allmulticast mode [ 505.912548][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.967927][T22050] netlink: 'syz.2.4486': attribute type 7 has an invalid length. [ 506.390339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.510445][T22094] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20004 [ 506.811005][T22102] ip6gretap0: entered promiscuous mode [ 506.831488][T22102] macvtap1: entered promiscuous mode [ 506.861937][T22102] macvtap1: entered allmulticast mode [ 506.870102][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5400 ms [ 506.874098][T22102] ip6gretap0: entered allmulticast mode [ 506.878153][ C0] lec:lec_tx_timeout: lec0 [ 506.960476][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.174473][T22121] syzkaller0: entered promiscuous mode [ 507.181851][T22121] syzkaller0: entered allmulticast mode [ 507.373142][T22128] veth0_to_bridge: entered promiscuous mode [ 507.379983][T22129] batman_adv: batadv0: Adding interface: dummy0 [ 507.386630][T22129] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.412267][T22129] batman_adv: batadv0: Interface activated: dummy0 [ 507.423992][T22132] batadv0: mtu less than device minimum [ 507.438209][T22132] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 507.450343][T22132] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 507.462091][T22132] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 507.526393][T22127] veth0_to_bridge: left promiscuous mode [ 507.616076][ T30] audit: type=1107 audit(1773297085.753:7): pid=22140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 507.620961][ T30] audit: type=1107 audit(1773297085.763:8): pid=22140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 507.726834][T22143] netlink: 'syz.3.4515': attribute type 29 has an invalid length. [ 507.862672][T22143] tls_set_device_offload_rx: netdev not found [ 507.996777][T22154] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 508.013589][T22158] netlink: 'syz.2.4522': attribute type 1 has an invalid length. [ 508.022374][T22154] syzkaller0: entered promiscuous mode [ 508.030478][T22154] syzkaller0: entered allmulticast mode [ 508.068856][T22158] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 508.121292][T22167] Bluetooth: MGMT ver 1.23 [ 508.125044][T22162] __nla_validate_parse: 13 callbacks suppressed [ 508.125064][T22162] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4521'. [ 508.131179][T22167] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 508.213498][T22169] syz_tun: entered promiscuous mode [ 508.219367][T22169] macvtap1: entered promiscuous mode [ 508.228929][T22169] syz_tun: left promiscuous mode [ 508.266226][T22177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4526'. [ 508.384845][T22183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4529'. [ 508.399962][T22183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4529'. [ 508.415593][T22177] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 508.649558][T22203] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.4536'. [ 508.659180][T22203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4536'. [ 508.858109][T22212] syzkaller1: entered promiscuous mode [ 508.877087][T22212] syzkaller1: entered allmulticast mode [ 508.909849][T22212] validate_nla: 3 callbacks suppressed [ 508.909868][T22212] netlink: 'syz.2.4539': attribute type 1 has an invalid length. [ 508.966236][T22224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4539'. [ 509.000874][T22212] 8021q: adding VLAN 0 to HW filter on device bond7 [ 509.012440][T22212] netlink: 'syz.2.4539': attribute type 1 has an invalid length. [ 509.022669][T22212] netlink: 'syz.2.4539': attribute type 2 has an invalid length. [ 509.040609][ T5939] net_ratelimit: 19 callbacks suppressed [ 509.040625][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.077374][T22226] netlink: 'syz.4.4543': attribute type 1 has an invalid length. [ 509.224868][ T5831] IPVS: starting estimator thread 0... [ 509.360172][T22243] IPVS: using max 38 ests per chain, 91200 per kthread [ 509.420770][T22188] lec:lec_atm_close: lec0: Shut down! [ 509.518351][T22258] netlink: 'syz.2.4549': attribute type 5 has an invalid length. [ 509.713984][T22268] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.4551:22268 [ 509.813657][T22265] netlink: 'syz.4.4552': attribute type 13 has an invalid length. [ 509.847731][T22265] netlink: 'syz.4.4552': attribute type 27 has an invalid length. [ 510.086678][T22298] netlink: 'syz.3.4560': attribute type 1 has an invalid length. [ 510.101830][T22295] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4558'. [ 510.189118][T22292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4555'. [ 510.244673][T22302] bond4: (slave veth7): Enslaving as an active interface with a down link [ 510.298907][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4560'. [ 510.352196][T22268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.382850][T22298] 8021q: adding VLAN 0 to HW filter on device bond4 [ 510.559545][T22313] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 510.593074][T22313] netlink: 'syz.4.4565': attribute type 10 has an invalid length. [ 510.637010][T22313] veth0_macvtap: left promiscuous mode [ 510.852785][T22332] ip6_vti0 speed is unknown, defaulting to 1000 [ 511.068248][T22354] netlink: 'syz.1.4577': attribute type 6 has an invalid length. [ 511.368265][T22374] xt_l2tp: unknown flags: 10 [ 511.728112][T22391] gretap0: refused to change device tx_queue_len [ 511.760784][T22391] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 511.832018][ T8159] wlan0: Trigger new scan to find an IBSS to join [ 511.914562][T22397] batman_adv: batadv0: Adding interface: dummy0 [ 511.943311][T22397] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.002004][T22397] batman_adv: batadv0: Interface activated: dummy0 [ 512.048594][T22403] batadv0: mtu less than device minimum [ 512.061603][T22403] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 512.073388][T22403] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 512.085198][T22403] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 512.096973][T22403] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 512.108728][T22403] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 512.445716][T22419] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 512.469557][T22428] syzkaller0: entered promiscuous mode [ 512.506530][T22428] syzkaller0: entered allmulticast mode [ 512.703734][T22438] bond2 (unregistering): Released all slaves [ 512.979668][T22451] syzkaller0: entered promiscuous mode [ 512.988565][T22451] syzkaller0: entered allmulticast mode [ 513.219537][T22479] __nla_validate_parse: 17 callbacks suppressed [ 513.219555][T22479] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4619'. [ 514.683638][T22480] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 514.692763][T22484] net_ratelimit: 23 callbacks suppressed [ 514.692777][T22484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.791800][ T8155] wlan0: Trigger new scan to find an IBSS to join [ 514.841538][T22502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4623'. [ 514.854796][T22502] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4623'. [ 514.870180][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms [ 514.878272][ C0] lec:lec_tx_timeout: lec0 [ 514.886906][T22498] delete_channel: no stack [ 514.995349][T22517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.141653][T22527] validate_nla: 4 callbacks suppressed [ 515.141672][T22527] netlink: 'syz.0.4634': attribute type 10 has an invalid length. [ 515.142506][T22530] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4632'. [ 515.153861][T22527] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.157250][T22524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4633'. [ 515.173158][T22527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4634'. [ 515.262442][T22534] netlink: 'syz.4.4635': attribute type 1 has an invalid length. [ 515.274448][T22534] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.4635'. [ 515.329468][T22532] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4636'. [ 515.368986][T22537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4637'. [ 515.378362][T22537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4637'. [ 515.463443][T22541] bond8: option miimon: invalid value (18446744073709551585) [ 515.472685][T22541] bond8: option miimon: allowed values 0 - 2147483647 [ 515.483027][T22541] bond8 (unregistering): Released all slaves [ 515.526398][T22544] netlink: 'syz.4.4638': attribute type 3 has an invalid length. [ 515.535529][T22544] netlink: 'syz.4.4638': attribute type 1 has an invalid length. [ 515.802498][T22563] netlink: 'syz.0.4645': attribute type 2 has an invalid length. [ 515.852496][T22560] bond2: (slave gre0): Device is not bonding slave [ 515.859028][T22560] bond2: option active_slave: invalid value (gre0) [ 515.890285][T22560] bond2 (unregistering): Released all slaves [ 516.103516][T22586] netlink: 'syz.3.4652': attribute type 1 has an invalid length. [ 516.125594][T22586] netlink: 'syz.3.4652': attribute type 3 has an invalid length. [ 516.145893][T22586] netlink: 'syz.3.4652': attribute type 7 has an invalid length. [ 516.159827][T22592] openvswitch: netlink: Flow key attr not present in new flow. [ 516.180310][T22586] netlink: 'syz.3.4652': attribute type 8 has an invalid length. [ 516.188927][T22586] NCSI netlink: No device for ifindex 131092 [ 516.601242][T22616] netlink: 'syz.1.4659': attribute type 5 has an invalid length. [ 516.617501][T22615] xt_hashlimit: max too large, truncated to 1048576 [ 516.735166][T22620] bond2: entered promiscuous mode [ 516.740973][T22620] 8021q: adding VLAN 0 to HW filter on device bond2 [ 516.755292][T22623] bond2: (slave bridge3): making interface the new active one [ 516.839681][T22623] bridge3: entered promiscuous mode [ 516.874328][T22623] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 517.055091][T22643] sch_fq: defrate 0 ignored. [ 517.512862][T22627] lec:lec_atm_close: lec0: Shut down! [ 517.586128][T22675] ipt_REJECT: ECHOREPLY no longer supported. [ 517.831564][ T63] wlan0: Trigger new scan to find an IBSS to join [ 518.507842][T22741] __nla_validate_parse: 16 callbacks suppressed [ 518.507862][T22741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4700'. [ 518.568153][T22753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4705'. [ 518.607809][T22753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4705'. [ 518.625667][T22755] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4707'. [ 518.648906][T22755] C: renamed from lo (while UP) [ 518.658372][T22755] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 518.687663][T22757] syzkaller1: entered allmulticast mode [ 518.727064][T22759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4708'. [ 518.750444][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.756035][T22759] gtp0: entered promiscuous mode [ 518.763038][T22759] gtp0: entered allmulticast mode [ 519.052421][T22777] block nbd0: NBD_DISCONNECT [ 519.057561][T22777] block nbd0: Send disconnect failed -32 [ 519.091177][T22780] delete_channel: no stack [ 519.335506][T22800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4723'. [ 519.389533][T22800] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4723'. [ 519.531864][T22813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4728'. [ 519.597931][T22820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4729'. [ 519.689527][T22823] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4730'. [ 519.736073][T22827] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 519.764858][T22823] bridge_slave_1: left allmulticast mode [ 519.790853][T22823] bridge_slave_1: left promiscuous mode [ 519.796942][T22823] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.863361][T22823] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 519.880373][T22836] vlan0: entered promiscuous mode [ 519.903661][T22836] geneve1: entered promiscuous mode [ 519.914153][T22836] vlan0: entered allmulticast mode [ 519.919337][T22836] geneve1: entered allmulticast mode [ 520.058134][T22853] x_tables: duplicate underflow at hook 2 [ 520.464767][T22887] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 520.553168][T22893] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 521.201356][T22935] bond3: (slave gretap0): Device is not bonding slave [ 521.212108][T22935] bond3: option active_slave: invalid value (gretap0) [ 521.231462][T22935] bond3 (unregistering): Released all slaves [ 521.481827][T22958] validate_nla: 5 callbacks suppressed [ 521.481845][T22958] netlink: 'syz.4.4772': attribute type 15 has an invalid length. [ 521.517741][T22958] netlink: 'syz.4.4772': attribute type 15 has an invalid length. [ 521.520196][ T86] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 521.557811][ T86] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 521.611595][ T86] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 521.623298][ T86] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 521.654107][T22966] xt_hashlimit: size too large, truncated to 1048576 [ 521.911702][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 522.586951][T23022] delete_channel: no stack [ 522.599163][T23022] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 522.656260][T23025] ip6t_srh: unknown srh match flags 4000 [ 522.707164][T23030] openvswitch: netlink: Missing valid actions attribute. [ 522.716910][T23030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.740177][T23032] netlink: 'syz.3.4798': attribute type 21 has an invalid length. [ 522.759341][T23033] syz_tun: entered allmulticast mode [ 522.828629][T23025] syz_tun (unregistering): left allmulticast mode [ 522.870106][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 522.878153][ C0] lec:lec_tx_timeout: lec0 [ 522.932136][T23043] openvswitch: netlink: Message has 8 unknown bytes. [ 523.454547][T23073] syzkaller0: entered promiscuous mode [ 523.462640][T23073] syzkaller0: entered allmulticast mode [ 523.584770][T23080] __nla_validate_parse: 20 callbacks suppressed [ 523.584790][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4817'. [ 523.602296][T23080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4817'. [ 523.622962][T23082] netlink: 'syz.3.4818': attribute type 12 has an invalid length. [ 523.631685][T23080] netlink: 'syz.1.4817': attribute type 14 has an invalid length. [ 523.637354][T23082] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4818'. [ 523.639957][T23080] netlink: 'syz.1.4817': attribute type 13 has an invalid length. [ 523.661025][T23086] openvswitch: netlink: Duplicate or invalid key (type 0). [ 523.668423][T23086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.817864][T23095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4823'. [ 523.898864][T23102] netlink: 'syz.2.4825': attribute type 2 has an invalid length. [ 523.917476][T23102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4825'. [ 523.928235][T23102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4825'. [ 524.136112][T23119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4830'. [ 524.555194][T23147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4840'. [ 524.633472][T23147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4840'. [ 524.865947][T23163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.946569][T23172] syzkaller0: entered promiscuous mode [ 524.964904][T23172] syzkaller0: entered allmulticast mode [ 524.982694][T23177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4848'. [ 526.694956][T23192] netlink: 'syz.3.4851': attribute type 3 has an invalid length. [ 526.798401][T23201] netlink: 'syz.0.4854': attribute type 1 has an invalid length. [ 527.225795][T23222] netlink: 'syz.2.4860': attribute type 10 has an invalid length. [ 527.239377][T23222] team0: Device ipvlan1 failed to register rx_handler [ 527.335141][T23226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.397587][T23226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.446599][T23225] tipc: Enabling of bearer rejected, failed to enable media [ 527.461754][T23228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.627367][T23232] syzkaller0: entered promiscuous mode [ 527.640206][T23232] syzkaller0: entered allmulticast mode [ 527.833062][T23239] netlink: 'syz.3.4865': attribute type 10 has an invalid length. [ 529.144404][T23252] __nla_validate_parse: 5 callbacks suppressed [ 529.144422][T23252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4869'. [ 529.219990][T23251] netlink: 'syz.4.4869': attribute type 21 has an invalid length. [ 529.229168][T23251] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4869'. [ 529.248799][T23239] batman_adv: batadv0: Interface deactivated: dummy0 [ 529.258352][T23239] batman_adv: batadv0: Removing interface: dummy0 [ 529.293185][T23239] team0: Port device dummy0 added [ 529.404544][T23258] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4872'. [ 529.429925][T23264] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4871'. [ 529.473700][T23264] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4871'. [ 529.541688][T23267] ip6t_REJECT: ECHOREPLY is not supported [ 529.554542][T23274] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4877'. [ 529.565147][T23275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4871'. [ 529.585454][T23274] netlink: 'syz.3.4877': attribute type 1 has an invalid length. [ 529.834386][T23299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4879'. [ 529.895343][T23304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4884'. [ 532.669534][T23282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 532.822669][T23332] syzkaller0: entered promiscuous mode [ 532.828193][T23332] syzkaller0: entered allmulticast mode [ 532.853995][T23335] smc: net device wlan1 applied user defined pnetid SYZ2 [ 533.091811][T23351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4902'. [ 533.209324][T23371] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 533.438636][T23385] syzkaller0: entered promiscuous mode [ 533.450375][T23385] syzkaller0: entered allmulticast mode [ 533.512992][T23390] x_tables: duplicate entry at hook 3 [ 533.514475][T23388] syzkaller0: entered promiscuous mode [ 533.540440][T23388] syzkaller0: entered allmulticast mode [ 533.561128][ T6303] lec:lec_start_xmit: lec0:No lecd attached [ 533.626959][T23399] tipc: Started in network mode [ 533.634374][T23399] tipc: Node identity 5, cluster identity 4711 [ 533.643016][T23399] tipc: Node number set to 5 [ 534.168762][T23439] __nla_validate_parse: 3 callbacks suppressed [ 534.168783][T23439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4927'. [ 534.226424][T23442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4929'. [ 534.313494][T23452] veth0: entered promiscuous mode [ 534.319637][T23449] veth0: left promiscuous mode [ 534.577068][T23468] netlink: 'syz.1.4934': attribute type 1 has an invalid length. [ 534.602180][T23468] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4934'. [ 534.628491][T23468] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4934'. [ 534.649357][T23468] netlink: 'syz.1.4934': attribute type 1 has an invalid length. [ 534.659477][T23468] netlink: 'syz.1.4934': attribute type 8 has an invalid length. [ 534.667859][T23468] netlink: 606 bytes leftover after parsing attributes in process `syz.1.4934'. [ 534.808584][T23479] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 534.979675][T23498] netlink: 'syz.4.4941': attribute type 1 has an invalid length. [ 535.105890][T23502] syzkaller0: entered promiscuous mode [ 535.145464][T23502] syzkaller0: entered allmulticast mode [ 536.995355][T23539] syzkaller0: entered promiscuous mode [ 537.001382][T23542] block nbd2: not configured, cannot reconfigure [ 537.009416][T23542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4952'. [ 537.018742][T23539] syzkaller0: entered allmulticast mode [ 537.030405][T23542] block nbd2: not configured, cannot reconfigure [ 537.285066][T23545] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 537.605379][T23580] netlink: 'syz.0.4962': attribute type 1 has an invalid length. [ 537.689732][T23590] netlink: 'syz.3.4965': attribute type 1 has an invalid length. [ 537.710935][T23590] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4965'. [ 537.782839][T23590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4965'. [ 537.901471][T23597] netlink: 'syz.0.4966': attribute type 3 has an invalid length. [ 537.924010][T23597] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4966'. [ 538.112136][T23607] ip6_vti0 speed is unknown, defaulting to 1000 [ 538.118385][T23617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.213826][T23622] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 538.234182][T23622] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 538.243118][T23622] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 538.345547][T23628] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 538.870074][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5310 ms [ 538.878198][ C0] lec:lec_tx_timeout: lec0 [ 540.793560][T23593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.919988][T23646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4977'. [ 540.936242][T23645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4977'. [ 541.005999][T23656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4981'. [ 541.032394][T23655] ip6_vti0 speed is unknown, defaulting to 1000 [ 541.040306][T23654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4980'. [ 541.040843][T23647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4978'. [ 541.049993][T23656] netlink: 'syz.4.4981': attribute type 7 has an invalid length. [ 541.075084][T23658] xt_hashlimit: invalid rate [ 541.091087][T23656] netlink: 'syz.4.4981': attribute type 8 has an invalid length. [ 541.097818][T23647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4978'. [ 541.113562][T23656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4981'. [ 541.119541][T23647] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 541.151616][T23659] netlink: 'syz.0.4982': attribute type 1 has an invalid length. [ 541.212634][T23660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4982'. [ 541.568411][T23661] bond5: (slave gretap1): making interface the new active one [ 541.579022][T23661] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 541.691668][T23668] netlink: 512 bytes leftover after parsing attributes in process `syz.4.4984'. [ 541.777194][T23674] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4983'. [ 541.988511][T23667] delete_channel: no stack [ 542.361603][T23717] netlink: 'syz.0.4994': attribute type 10 has an invalid length. [ 542.853592][T23724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.871761][T23724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.938150][T23734] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 543.222612][T23758] netlink: 'syz.1.5013': attribute type 18 has an invalid length. [ 543.585077][T23787] can: request_module (can-proto-0) failed. [ 543.961142][T23816] IPVS: set_ctl: invalid protocol: 10176 0.32.0.0:45064 [ 544.020242][T23821] netlink: 'syz.3.5031': attribute type 21 has an invalid length. [ 544.083550][T23821] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 544.178921][T23821] bond6 (unregistering): Released all slaves [ 544.368841][T23847] netlink: 'syz.0.5039': attribute type 1 has an invalid length. [ 544.378013][T23847] netlink: 'syz.0.5039': attribute type 1 has an invalid length. [ 544.598124][T23858] syzkaller0: entered promiscuous mode [ 544.603862][T23858] syzkaller0: entered allmulticast mode [ 544.641354][T23863] netlink: 'syz.2.5046': attribute type 4 has an invalid length. [ 546.346855][T23889] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 546.511579][T23898] netlink: 'syz.4.5054': attribute type 11 has an invalid length. [ 546.550720][T23898] netlink: 'syz.4.5054': attribute type 11 has an invalid length. [ 546.570141][T23898] __nla_validate_parse: 15 callbacks suppressed [ 546.570158][T23898] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5054'. [ 546.666926][T23913] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 546.710371][T23917] openvswitch: netlink: Message has 8 unknown bytes. [ 546.732106][T23917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.061431][T23926] syzkaller1: entered promiscuous mode [ 547.081866][T23926] syzkaller1: entered allmulticast mode [ 548.290216][T24014] netlink: 808 bytes leftover after parsing attributes in process `syz.4.5078'. [ 548.581298][T24026] IPv6: NLM_F_CREATE should be specified when creating new route [ 548.673084][T24032] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5085'. [ 548.712115][T24032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5085'. [ 548.755738][T24032] vlan3: entered promiscuous mode [ 548.797940][T24032] bond0: entered promiscuous mode [ 548.828226][T24032] bond_slave_0: entered promiscuous mode [ 548.852361][T24041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5085'. [ 548.870455][T24032] bond_slave_1: entered promiscuous mode [ 548.936082][T24041] vlan4: entered allmulticast mode [ 548.945765][T24050] netlink: 'syz.0.5089': attribute type 39 has an invalid length. [ 549.133823][T24061] bond0: (slave rose0): Error: Device can not be enslaved while up [ 549.148597][T24064] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 549.159734][T24066] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 549.252015][T24069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5094'. [ 549.306070][T24069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5094'. [ 549.335862][T24069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5094'. [ 549.345024][T24069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5094'. [ 549.354258][T24077] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 549.369924][T24078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5098'. [ 549.459703][T24082] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 549.625430][T24096] syzkaller0: entered promiscuous mode [ 549.657680][T24096] syzkaller0: entered allmulticast mode [ 550.367735][T24126] syzkaller0: entered promiscuous mode [ 550.373425][T24126] syzkaller0: entered allmulticast mode [ 550.723481][T24149] netlink: 'syz.1.5121': attribute type 32 has an invalid length. [ 550.745608][T24149] netlink: 'syz.1.5121': attribute type 1 has an invalid length. [ 550.770345][T24149] netlink: 'syz.1.5121': attribute type 1 has an invalid length. [ 551.352315][ T8159] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 551.457732][T24199] syzkaller0: entered promiscuous mode [ 551.463903][T24199] syzkaller0: entered allmulticast mode [ 551.477697][T24206] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 551.708044][T24221] __nla_validate_parse: 5 callbacks suppressed [ 551.708062][T24221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5140'. [ 551.990148][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.997476][ C0] bridge0: topology change detected, propagating [ 553.699062][T24234] ip6_vti0 speed is unknown, defaulting to 1000 [ 553.931968][T24260] : renamed from dummy0 (while UP) [ 554.201242][T24276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5155'. [ 554.292873][T24280] syzkaller0: entered promiscuous mode [ 554.298401][T24280] syzkaller0: entered allmulticast mode [ 554.851301][T24300] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5162'. [ 556.391762][T24309] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.5163'. [ 556.566737][T24327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.582028][T24325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5166'. [ 556.591535][T24330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.197921][T24340] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5171'. [ 557.352121][T24344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5173'. [ 557.361543][T24344] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5173'. [ 557.371446][T24344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5173'. [ 557.538789][T24357] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5176'. [ 557.956111][T24401] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 557.956293][T24400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5189'. [ 558.630368][T24375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.739403][T24418] syzkaller0: entered promiscuous mode [ 558.745209][T24418] syzkaller0: entered allmulticast mode [ 559.183587][T24449] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5203'. [ 559.211569][T24453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5204'. [ 559.222618][T24453] netlink: 'syz.1.5204': attribute type 1 has an invalid length. [ 559.344855][T24457] netlink: 'syz.1.5206': attribute type 4 has an invalid length. [ 559.357108][T24462] syz_tun: refused to change device tx_queue_len [ 559.913141][T24498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5216'. [ 560.034350][T24506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5217'. [ 560.166752][T24521] openvswitch: netlink: Flow key attr not present in new flow. [ 560.990880][T24546] set match dimension is over the limit! [ 562.875797][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 563.024219][T24511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.251551][T24564] netlink: 'syz.1.5232': attribute type 11 has an invalid length. [ 563.265770][T24564] __nla_validate_parse: 3 callbacks suppressed [ 563.265788][T24564] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5232'. [ 563.302804][T24568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5233'. [ 563.483574][T24579] openvswitch: netlink: Flow actions attr not present in new flow. [ 563.496441][T24583] netlink: 'syz.1.5239': attribute type 1 has an invalid length. [ 563.608510][T24583] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 563.630885][T24581] ip6_vti0 speed is unknown, defaulting to 1000 [ 563.712787][T24601] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5242'. [ 563.952669][T24613] netlink: 'syz.1.5244': attribute type 11 has an invalid length. [ 564.045364][T24623] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 564.108577][T24627] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5249'. [ 564.225043][T24641] syzkaller0: entered promiscuous mode [ 564.233577][T24641] syzkaller0: entered allmulticast mode [ 564.283290][T24643] xt_hashlimit: size too large, truncated to 1048576 [ 564.781040][T24660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5257'. [ 564.956649][T24671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.034704][T24673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5260'. [ 565.184408][T24671] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 565.206472][T24671] team0: Device macvlan2 is already an upper device of the team interface [ 565.327535][T24687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5263'. [ 565.350169][T24673] netlink: 'syz.0.5260': attribute type 3 has an invalid length. [ 565.686826][T24687] vlan2: entered promiscuous mode [ 565.702367][T24687] gretap0: entered promiscuous mode [ 566.102536][T24714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5272'. [ 566.165812][T24723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5272'. [ 566.204573][T24714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5272'. [ 566.997719][T24742] netlink: 'syz.4.5281': attribute type 7 has an invalid length. [ 567.045882][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.060138][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.388028][T24760] openvswitch: netlink: Flow key attr not present in new flow. [ 567.435265][T24760] openvswitch: netlink: Flow key attr not present in new flow. [ 567.455280][T24765] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 567.470673][T24765] 8021q: VLANs not supported on ip_vti0 [ 567.790213][T24787] netlink: 'syz.4.5291': attribute type 1 has an invalid length. [ 567.834458][T24787] netlink: 'syz.4.5291': attribute type 1 has an invalid length. [ 567.872396][T24787] netlink: 'syz.4.5291': attribute type 4 has an invalid length. [ 567.890075][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 567.898148][ C0] lec:lec_tx_timeout: lec0 [ 568.500328][T24823] netlink: 'syz.3.5303': attribute type 1 has an invalid length. [ 568.541763][T24825] netlink: 'syz.1.5305': attribute type 1 has an invalid length. [ 568.576597][T24823] 8021q: adding VLAN 0 to HW filter on device bond6 [ 568.584615][T24830] __nla_validate_parse: 6 callbacks suppressed [ 568.584635][T24830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5304'. [ 568.585767][T24825] netlink: 'syz.1.5305': attribute type 3 has an invalid length. [ 568.618074][T24825] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5305'. [ 568.910893][T24846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5311'. [ 569.116524][T24858] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5313'. [ 569.142575][T24858] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5313'. [ 569.249648][T24862] IPVS: Unknown mcast interface: lo [ 569.450662][T24877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5320'. [ 569.538651][T24879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5321'. [ 569.585628][T24881] netlink: 'syz.0.5322': attribute type 29 has an invalid length. [ 569.593750][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5322'. [ 569.605335][T24881] netlink: 'syz.0.5322': attribute type 29 has an invalid length. [ 569.613772][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5322'. [ 569.855331][T24900] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5329'. [ 570.122786][T24911] openvswitch: netlink: IP tunnel dst address not specified [ 570.488126][T24949] validate_nla: 5 callbacks suppressed [ 570.488139][T24949] netlink: 'syz.3.5344': attribute type 14 has an invalid length. [ 570.505487][T24949] netlink: 'syz.3.5344': attribute type 13 has an invalid length. [ 570.552213][T24939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.627310][T24957] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 570.807313][T24971] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 571.265138][T25015] netlink: 'syz.3.5361': attribute type 9 has an invalid length. [ 572.030373][T25087] veth5: entered allmulticast mode [ 572.293090][T25109] syzkaller0: entered promiscuous mode [ 572.301844][T25109] syzkaller0: entered allmulticast mode [ 572.339082][T25115] mac80211_hwsim hwsim42 ÿ: renamed from wlan1 [ 572.348488][T25112] netlink: 'syz.3.5388': attribute type 1 has an invalid length. [ 572.379531][T25112] bond7: entered promiscuous mode [ 572.405203][T25112] 8021q: adding VLAN 0 to HW filter on device bond7 [ 572.447193][T25117] bond7: (slave bridge4): making interface the new active one [ 572.455740][T25117] bridge4: entered promiscuous mode [ 572.465916][T25117] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 572.508516][T25112] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 572.523877][T25112] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 572.552068][ T5882] IPVS: starting estimator thread 0... [ 572.602624][T25121] ip6_vti0 speed is unknown, defaulting to 1000 [ 572.640203][T25128] IPVS: using max 35 ests per chain, 84000 per kthread [ 572.708181][T25132] bond8: Removing last ns target with arp_interval on [ 572.987197][T25154] netlink: 'syz.2.5397': attribute type 11 has an invalid length. [ 573.316056][T25171] syzkaller0: entered promiscuous mode [ 573.322497][T25171] syzkaller0: entered allmulticast mode [ 573.483117][T25181] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 575.056523][T25182] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 575.066844][T25182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.139574][T25197] __nla_validate_parse: 16 callbacks suppressed [ 575.139597][T25197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5406'. [ 575.280610][T25197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5406'. [ 575.303028][T25206] netlink: 'syz.2.5409': attribute type 1 has an invalid length. [ 575.765822][T25242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5422'. [ 575.854859][T25245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5420'. [ 575.996882][T25252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5423'. [ 576.007638][T25252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5423'. [ 576.145917][T25266] netlink: 'syz.0.5429': attribute type 1 has an invalid length. [ 576.206246][T25266] 8021q: adding VLAN 0 to HW filter on device bond6 [ 576.246649][T25266] netlink: 'syz.0.5429': attribute type 2 has an invalid length. [ 576.262107][T25266] bond6: (slave geneve3): making interface the new active one [ 576.272715][T25266] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 576.283799][T25272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5432'. [ 576.507347][T25289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5435'. [ 576.563960][T25289] netlink: 'syz.0.5435': attribute type 1 has an invalid length. [ 576.590147][T25289] netlink: 'syz.0.5435': attribute type 1 has an invalid length. [ 576.591819][T25297] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5437'. [ 576.612652][T25289] netlink: 'syz.0.5435': attribute type 2 has an invalid length. [ 576.621039][T25289] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5435'. [ 576.892935][T25317] tipc: Enabling of bearer rejected, media not registered [ 577.017835][T25322] netlink: 'syz.4.5442': attribute type 21 has an invalid length. [ 577.072621][T25328] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 577.181762][T25328] bond8: entered promiscuous mode [ 577.187299][T25328] 8021q: adding VLAN 0 to HW filter on device bond8 [ 577.199033][T25328] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 577.541469][T25351] SET target dimension over the limit! [ 578.119170][T25389] netlink: 'syz.4.5458': attribute type 1 has an invalid length. [ 578.419865][T25411] erspan2: entered allmulticast mode [ 578.619073][T25427] netlink: 'syz.0.5470': attribute type 12 has an invalid length. [ 579.059617][T25467] block nbd2: not configured, cannot reconfigure [ 579.679586][T25515] bond9: Invalid ad_actor_system MAC address. [ 579.687388][T25515] bond9: option ad_actor_system: invalid value (1) [ 579.695374][T25515] bond9 (unregistering): Released all slaves [ 580.278039][T25561] __nla_validate_parse: 18 callbacks suppressed [ 580.278059][T25561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5510'. [ 580.295969][T25561] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5510'. [ 580.306393][T25561] netlink: 21 bytes leftover after parsing attributes in process `syz.0.5510'. [ 580.316270][T25561] netlink: 21 bytes leftover after parsing attributes in process `syz.0.5510'. [ 580.345900][T25562] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 580.392224][T25565] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5510'. [ 580.538245][T25576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5515'. [ 580.739283][T25587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5517'. [ 580.891203][T25601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5521'. [ 580.965560][T25601] team0: Device vxcan1 is of different type [ 580.998237][T25605] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5524'. [ 581.127746][T25616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5525'. [ 581.199202][T25618] validate_nla: 6 callbacks suppressed [ 581.199218][T25618] netlink: 'syz.3.5527': attribute type 2 has an invalid length. [ 581.269382][T25622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.317813][T25620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.329505][T25631] netlink: 'syz.3.5531': attribute type 3 has an invalid length. [ 581.351727][T25620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.408995][T25622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.444144][T25620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.459583][T25622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.472346][T25620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.487301][T25644] netlink: 'syz.3.5535': attribute type 10 has an invalid length. [ 581.532510][T25644] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 581.557849][T25644] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 581.932779][T25666] netlink: 'syz.3.5542': attribute type 1 has an invalid length. [ 581.956078][T25666] netlink: zone id is out of range [ 581.962029][T25666] netlink: zone id is out of range [ 581.968262][T25666] netlink: zone id is out of range [ 581.976887][T25666] netlink: zone id is out of range [ 581.982571][T25666] netlink: zone id is out of range [ 581.987846][T25666] netlink: zone id is out of range [ 581.993717][T25666] netlink: zone id is out of range [ 581.998998][T25666] netlink: zone id is out of range [ 582.005155][T25666] netlink: zone id is out of range [ 582.073636][T25670] netlink: 'syz.0.5543': attribute type 11 has an invalid length. [ 582.289168][T25684] netlink: 'syz.0.5548': attribute type 10 has an invalid length. [ 582.304612][T25684] bridge_slave_1: left allmulticast mode [ 582.313279][T25684] bridge_slave_1: left promiscuous mode [ 582.319061][T25684] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.352473][ T9936] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 585.627605][T25721] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.776901][T25793] Cannot find set identified by id 65534 to match [ 585.802669][T25796] __nla_validate_parse: 8 callbacks suppressed [ 585.802693][T25796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5575'. [ 585.819872][T25796] netlink: 'syz.3.5575': attribute type 1 has an invalid length. [ 585.932557][T25804] bond10: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 585.945816][T25804] bond10 (unregistering): Released all slaves [ 585.991304][T25806] vlan4: entered allmulticast mode [ 585.996458][T25806] bond0: entered allmulticast mode [ 586.587169][T25840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5588'. [ 586.623910][T25843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5589'. [ 586.650314][T25840] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5588'. [ 586.708872][T25848] netlink: 'syz.3.5590': attribute type 1 has an invalid length. [ 586.907175][T25868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5596'. [ 586.936053][T25865] netlink: 'syz.1.5593': attribute type 10 has an invalid length. [ 586.949398][T25865] team0: Device vxcan1 is of different type [ 587.091005][T25881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5599'. [ 587.106031][T25872] IPVS: Scheduler module ip_vs_sip not found [ 587.288723][T25891] netlink: 'syz.3.5603': attribute type 21 has an invalid length. [ 587.300295][T25893] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5602'. [ 587.457266][T25898] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 587.555202][T25899] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 587.573498][T25899] bond4 (unregistering): Released all slaves [ 587.747385][T25911] IPVS: Unknown mcast interface: dvmrp1 [ 587.822501][T25917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5609'. [ 588.038077][T25930] team0: Device ip6gre1 is of different type [ 588.167784][T25945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5619'. [ 588.203743][T25947] netlink: 'syz.3.5620': attribute type 83 has an invalid length. [ 588.224059][T25947] veth0: entered promiscuous mode [ 588.231663][T25947] netlink: 'syz.3.5620': attribute type 10 has an invalid length. [ 588.332670][T25946] veth0: left promiscuous mode [ 588.574059][T25963] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5627'. [ 588.599697][T25965] tipc: Enabling of bearer rejected, failed to enable media [ 588.643050][T25969] syzkaller0: entered promiscuous mode [ 588.655419][T25969] syzkaller0: entered allmulticast mode [ 588.813866][ T5882] IPVS: starting estimator thread 0... [ 588.900355][T25978] IPVS: using max 35 ests per chain, 84000 per kthread [ 589.206352][T26012] xfrm0: entered promiscuous mode [ 589.211644][T26012] xfrm0: entered allmulticast mode [ 589.620432][T26026] bond10: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 589.722467][T26026] bond10 (unregistering): Released all slaves [ 590.035788][T26052] netlink: 'syz.1.5654': attribute type 7 has an invalid length. [ 590.068345][T26052] erspan0: entered promiscuous mode [ 590.087601][T26052] gretap0: entered promiscuous mode [ 590.101705][T26052] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 590.113219][T26052] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 590.150882][ T5839] Bluetooth: hci2: command 0x0405 tx timeout Stopping sshd: stopped /usr/sbin/sshd (pid 5579) OK Stopping crond: stopped /usr/sbin/crond (pid 5564) OK [ 590.547726][T26080] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 591.695558][T26130] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 591.725428][T26127] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 591.848068][T26143] __nla_validate_parse: 19 callbacks suppressed [ 591.848087][T26143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5674'. [ 591.864372][T26144] syzkaller0: left promiscuous mode [ 591.901078][T26144] syzkaller0: left allmulticast mode [ 591.929241][T26152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5677'. [ 591.951937][T26153] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5676'. [ 591.952706][T26152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5677'. [ 591.990422][T26153] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5676'. Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5485) Stopping network: [ 592.849459][T26207] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5687'. [ 593.054837][T26215] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 593.144097][T26219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5689'. [ 593.476596][T26227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5692'. [ 593.572381][T26235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5694'. [ 593.918967][T26255] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5699'. OK Stopping iptables: OK Stopping system message bus: done [ 595.708040][T26324] 8021q: adding VLAN 0 to HW filter on device bond9 [ 595.805211][T26335] FAULT_INJECTION: forcing a failure. [ 595.805211][T26335] name failslab, interval 1, probability 0, space 0, times 0 [ 595.833297][T26335] CPU: 0 UID: 0 PID: 26335 Comm: syz.1.5708 Not tainted syzkaller #0 PREEMPT(full) [ 595.833324][T26335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 595.833340][T26335] Call Trace: [ 595.833419][T26335] [ 595.833459][T26335] dump_stack_lvl+0xe8/0x150 [ 595.833593][T26335] should_fail_ex+0x412/0x560 [ 595.833708][T26335] should_failslab+0xa8/0x100 [ 595.833756][T26335] __kmalloc_noprof+0xe8/0x760 [ 595.833782][T26335] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 595.833866][T26335] tomoyo_realpath_from_path+0xe3/0x5d0 [ 595.833901][T26335] ? tomoyo_path_number_perm+0x219/0x630 [ 595.833921][T26335] tomoyo_path_number_perm+0x246/0x630 [ 595.833945][T26335] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 595.833968][T26335] ? __lock_acquire+0x6b5/0x2cf0 [ 595.834024][T26335] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 595.834127][T26335] ? __fget_files+0x2a/0x420 [ 595.834170][T26335] ? __fget_files+0x2a/0x420 [ 595.834193][T26335] ? __fget_files+0x3a0/0x420 [ 595.834216][T26335] ? __fget_files+0x2a/0x420 [ 595.834244][T26335] security_file_ioctl+0xc3/0x2a0 [ 595.834289][T26335] __se_sys_ioctl+0x47/0x170 [ 595.834319][T26335] do_syscall_64+0x14d/0xf80 [ 595.834359][T26335] ? trace_irq_disable+0x3b/0x150 [ 595.834399][T26335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.834436][T26335] ? clear_bhb_loop+0x40/0x90 [ 595.834459][T26335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.834480][T26335] RIP: 0033:0x7fdf0439c799 [ 595.834533][T26335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.834548][T26335] RSP: 002b:00007fdf051eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.834596][T26335] RAX: ffffffffffffffda RBX: 00007fdf04616180 RCX: 00007fdf0439c799 [ 595.834609][T26335] RDX: 0000200000000140 RSI: 000000000000541b RDI: 0000000000000004 [ 595.834620][T26335] RBP: 00007fdf051eb090 R08: 0000000000000000 R09: 0000000000000000 [ 595.834631][T26335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.834641][T26335] R13: 00007fdf04616218 R14: 00007fdf04616180 R15: 00007fffcffd7208 [ 595.834672][T26335] [ 595.834680][T26335] ERROR: Out of memory at tomoyo_realpath_from_path. [ 595.975778][T26330] 8021q: adding VLAN 0 to HW filter on device bond10 [ 595.983397][T26297] lec:lec_atm_close: lec0: Shut down! [ 596.371171][T26349] netlink: 'syz.2.5716': attribute type 21 has an invalid length. [ 596.508304][T26355] SET target dimension over the limit! [ 596.548934][T26358] netlink: 'syz.3.5717': attribute type 61 has an invalid length. [ 596.901842][T26375] gtp0: entered promiscuous mode [ 596.923208][T26375] gtp0: entered allmulticast mode [ 597.018912][T26382] __nla_validate_parse: 5 callbacks suppressed Stopping klogd: [ 597.018930][T26382] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5724'. [ 597.068761][T26385] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5724'. [ 597.090864][T26382] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5724'. [ 597.115962][T26382] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5724'. [ 597.134836][T26382] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5724'. [ 597.164339][T26382] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5724'. [ 597.180435][T26382] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5724'. [ 597.199966][T26382] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5724'. [ 597.249716][T26382] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5724'. [ 597.273245][T26382] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5724'. OK [ 597.392952][T26367] lec:lec_atm_close: lec0: Shut down! [ 597.442563][T26401] : renamed from hsr0 (while UP) [ 597.460467][T26405] netlink: 'syz.1.5729': attribute type 2 has an invalid length. [ 597.468685][T26406] netlink: 'syz.1.5729': attribute type 2 has an invalid length. Stopping acpid: [ 597.877866][T26425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.951799][T26425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.978586][T26437] xt_TPROXY: Can be used only with -p tcp or -p udp [ 598.036929][T26429] sit0: entered promiscuous mode [ 598.234306][T26454] sctp: [Deprecated]: syz.3.5745 (pid 26454) Use of int in maxseg socket option. [ 598.234306][T26454] Use struct sctp_assoc_value instead [ 598.283874][T26457] nbd: must specify a size in bytes for the device [ 598.323452][T26461] net_ratelimit: 54 callbacks suppressed [ 598.323471][T26461] openvswitch: netlink: IP tunnel dst address not specified [ 598.365840][T26462] openvswitch: netlink: IP tunnel dst address not specified [ 598.707980][T26485] syzkaller1: entered promiscuous mode [ 598.748354][T26485] syzkaller1: entered allmulticast mode OK [ 598.811449][T26498] netlink: 'syz.4.5759': attribute type 4 has an invalid length. Stopping syslogd: stopped /sbin/syslogd (pid 5172) OK [ 599.562743][T26536] bond11 (unregistering): Released all slaves umount: can't remount debugfs read-only [ 599.929287][T26559] syzkaller1: entered promiscuous mode [ 600.037185][T26528] lec:lec_atm_close: lec0: Shut down! [ 600.268655][T26574] x_tables: duplicate entry at hook 3 [ 601.066411][T26601] block nbd2: not configured, cannot reconfigure [ 601.265497][T26610] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.314509][T26610] bridge_slave_0 (unregistering): left allmulticast mode [ 601.336737][T26610] bridge_slave_0 (unregistering): left promiscuous mode [ 601.360634][T26610] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.125310][T26651] nbd: must specify at least one socket [ 602.194654][T26651] netlink: 'syz.0.5797': attribute type 2 has an invalid length. [ 602.215655][T26651] netlink: 'syz.0.5797': attribute type 2 has an invalid length. [ 602.320546][T26657] ip6_vti0 speed is unknown, defaulting to 1000 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.176 closed by remote host. Sent SIGKILL to all processes Requesting system poweroff [ 604.490130][T24091] ================================================================== [ 604.498297][T24091] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300 [ 604.505468][T24091] Read of size 8 at addr ffff888085ecc0a8 by task khidpd_00065508/24091 [ 604.513791][T24091] [ 604.516118][T24091] CPU: 0 UID: 0 PID: 24091 Comm: khidpd_00065508 Not tainted syzkaller #0 PREEMPT(full) [ 604.516137][T24091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 604.516144][T24091] Call Trace: [ 604.516149][T24091] [ 604.516154][T24091] dump_stack_lvl+0xe8/0x150 [ 604.516171][T24091] print_report+0xba/0x230 [ 604.516189][T24091] ? __mutex_lock+0x812/0x1300 [ 604.516199][T24091] kasan_report+0x117/0x150 [ 604.516212][T24091] ? __mutex_lock+0x812/0x1300 [ 604.516222][T24091] __mutex_lock+0x812/0x1300 [ 604.516232][T24091] ? __mutex_lock+0x5ac/0x1300 [ 604.516242][T24091] ? l2cap_unregister_user+0x6a/0x1b0 [ 604.516309][T24091] ? __pfx___mutex_lock+0x10/0x10 [ 604.516321][T24091] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 604.516363][T24091] ? lockdep_hardirqs_on+0x7a/0x110 [ 604.516378][T24091] l2cap_unregister_user+0x6a/0x1b0 [ 604.516388][T24091] hidp_session_thread+0x3cb/0x440 [ 604.516442][T24091] ? __pfx_hidp_session_thread+0x10/0x10 [ 604.516452][T24091] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 604.516465][T24091] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 604.516475][T24091] ? __kthread_parkme+0x7a/0x1f0 [ 604.516497][T24091] ? __kthread_parkme+0x19c/0x1f0 [ 604.516510][T24091] kthread+0x388/0x470 [ 604.516519][T24091] ? __pfx_hidp_session_thread+0x10/0x10 [ 604.516529][T24091] ? __pfx_kthread+0x10/0x10 [ 604.516538][T24091] ret_from_fork+0x51e/0xb90 [ 604.516560][T24091] ? __pfx_ret_from_fork+0x10/0x10 [ 604.516572][T24091] ? __switch_to+0xc7d/0x1450 [ 604.516589][T24091] ? __pfx_kthread+0x10/0x10 [ 604.516598][T24091] ret_from_fork_asm+0x1a/0x30 [ 604.516616][T24091] [ 604.516619][T24091] [ 604.677235][T24091] The buggy address belongs to the physical page: [ 604.683659][T24091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888085ecfa80 pfn:0x85ecc [ 604.693705][T24091] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 604.700806][T24091] raw: 00fff00000000000 ffffea0001331308 ffff8880b8640c40 0000000000000000 [ 604.709373][T24091] raw: ffff888085ecfa80 0000000000000000 00000000ffffffff 0000000000000000 [ 604.717948][T24091] page dumped because: kasan: bad access detected [ 604.724363][T24091] page_owner tracks the page as freed [ 604.729716][T24091] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 18010, tgid 18010 (syz-executor), ts 369426733602, free_ts 604484679030 [ 604.747931][T24091] post_alloc_hook+0x231/0x280 [ 604.752712][T24091] get_page_from_freelist+0x24dc/0x2580 [ 604.758248][T24091] __alloc_frozen_pages_noprof+0x18d/0x380 [ 604.764044][T24091] alloc_pages_mpol+0x232/0x4a0 [ 604.768886][T24091] ___kmalloc_large_node+0x4e/0x150 [ 604.774072][T24091] __kmalloc_large_node_noprof+0x18/0x90 [ 604.779696][T24091] __kmalloc_noprof+0x3e8/0x760 [ 604.784532][T24091] hci_alloc_dev_priv+0x28/0x2060 [ 604.789636][T24091] vhci_create_device+0x120/0x650 [ 604.794716][T24091] vhci_write+0x3ce/0x4a0 [ 604.799035][T24091] vfs_write+0x61d/0xb90 [ 604.803279][T24091] ksys_write+0x150/0x270 [ 604.807609][T24091] do_syscall_64+0x14d/0xf80 [ 604.812186][T24091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.818064][T24091] page last free pid 26657 tgid 26649 stack trace: [ 604.824546][T24091] __free_frozen_pages+0xc2b/0xdb0 [ 604.829642][T24091] bt_host_release+0x82/0x90 [ 604.834280][T24091] device_release+0x9e/0x1d0 [ 604.838933][T24091] kobject_put+0x228/0x560 [ 604.843366][T24091] vhci_release+0x15a/0x1a0 [ 604.847859][T24091] __fput+0x44f/0xa70 [ 604.851831][T24091] task_work_run+0x1d9/0x270 [ 604.856423][T24091] do_exit+0x70f/0x23c0 [ 604.860569][T24091] do_group_exit+0x21b/0x2d0 [ 604.865144][T24091] get_signal+0x1284/0x1330 [ 604.869636][T24091] arch_do_signal_or_restart+0xbc/0x830 [ 604.875174][T24091] exit_to_user_mode_loop+0x86/0x480 [ 604.880447][T24091] do_syscall_64+0x32d/0xf80 [ 604.885021][T24091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.890899][T24091] [ 604.893208][T24091] Memory state around the buggy address: [ 604.898875][T24091] ffff888085ecbf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 604.906926][T24091] ffff888085ecc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 604.915013][T24091] >ffff888085ecc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 604.923055][T24091] ^ [ 604.928403][T24091] ffff888085ecc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 604.936446][T24091] ffff888085ecc180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 604.944485][T24091] ================================================================== [ 604.953264][T24091] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 604.960480][T24091] CPU: 0 UID: 0 PID: 24091 Comm: khidpd_00065508 Not tainted syzkaller #0 PREEMPT(full) [ 604.970282][T24091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 604.980329][T24091] Call Trace: [ 604.983602][T24091] [ 604.986519][T24091] vpanic+0x56c/0xa60 [ 604.990497][T24091] ? __pfx_vpanic+0x10/0x10 [ 604.994996][T24091] panic+0xc5/0xd0 [ 604.998705][T24091] ? __pfx_panic+0x10/0x10 [ 605.003115][T24091] ? __mutex_lock+0x812/0x1300 [ 605.007874][T24091] ? __mutex_lock+0x812/0x1300 [ 605.012625][T24091] check_panic_on_warn+0x89/0xb0 [ 605.017558][T24091] ? __mutex_lock+0x812/0x1300 [ 605.022314][T24091] end_report+0x73/0x180 [ 605.026548][T24091] ? __mutex_lock+0x812/0x1300 [ 605.031294][T24091] kasan_report+0x128/0x150 [ 605.035786][T24091] ? __mutex_lock+0x812/0x1300 [ 605.040542][T24091] __mutex_lock+0x812/0x1300 [ 605.045126][T24091] ? __mutex_lock+0x5ac/0x1300 [ 605.049875][T24091] ? l2cap_unregister_user+0x6a/0x1b0 [ 605.055242][T24091] ? __pfx___mutex_lock+0x10/0x10 [ 605.060259][T24091] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 605.066061][T24091] ? lockdep_hardirqs_on+0x7a/0x110 [ 605.071255][T24091] l2cap_unregister_user+0x6a/0x1b0 [ 605.076442][T24091] hidp_session_thread+0x3cb/0x440 [ 605.081542][T24091] ? __pfx_hidp_session_thread+0x10/0x10 [ 605.087168][T24091] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 605.093396][T24091] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 605.099647][T24091] ? __kthread_parkme+0x7a/0x1f0 [ 605.104580][T24091] ? __kthread_parkme+0x19c/0x1f0 [ 605.109602][T24091] kthread+0x388/0x470 [ 605.113687][T24091] ? __pfx_hidp_session_thread+0x10/0x10 [ 605.119306][T24091] ? __pfx_kthread+0x10/0x10 [ 605.123880][T24091] ret_from_fork+0x51e/0xb90 [ 605.128460][T24091] ? __pfx_ret_from_fork+0x10/0x10 [ 605.133558][T24091] ? __switch_to+0xc7d/0x1450 [ 605.138223][T24091] ? __pfx_kthread+0x10/0x10 [ 605.142798][T24091] ret_from_fork_asm+0x1a/0x30 [ 605.147559][T24091] [ 605.150900][T24091] Kernel Offset: disabled [ 605.155213][T24091] Rebooting in 86400 seconds..