last executing test programs: 1m22.498679328s ago: executing program 0 (id=5450): setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f00000007c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[], 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x60040050) 1m22.415136944s ago: executing program 1 (id=5452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1m22.308469449s ago: executing program 1 (id=5454): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002000)={0x20, r2, 0x421, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 1m22.091504399s ago: executing program 1 (id=5456): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x3, 0x8) (fail_nth: 3) 1m21.427397752s ago: executing program 1 (id=5460): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/170, 0xaa}], 0x1}}], 0x1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/132], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m21.372035084s ago: executing program 0 (id=5461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}]}]}}}, @IFLA_LINK={0x8}]}, 0x78}}, 0x0) (fail_nth: 3) 1m21.248560249s ago: executing program 2 (id=5463): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)) 1m21.248033479s ago: executing program 3 (id=5464): r0 = socket(0x2000000015, 0x80005, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111b8000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111b8000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x44, 0x10, &(0x7f0000000040)}, 0x48) 1m21.219714161s ago: executing program 0 (id=5465): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x541b, 0x0) 1m21.182981162s ago: executing program 3 (id=5466): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) (fail_nth: 3) 1m21.148904857s ago: executing program 2 (id=5467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002c40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003600)={0x34, r1, 0x51b, 0x7, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000000) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) 1m21.044807063s ago: executing program 2 (id=5468): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) (fail_nth: 4) 1m21.044217636s ago: executing program 3 (id=5469): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xf8}, {&(0x7f0000001440)=ANY=[@ANYBLOB="6c10000027002000f6000000ffdbdf254a0076800800aa004000000098e8e379ace7daba3bdc55c8e9b7b24e41c4a0f017fd0e01c88f4f7954142a804fd99db94eef2fc3ed94ecf754e585ec5c535a7ee0c008004400", @ANYRES32=0x0, @ANYBLOB="000010101280cb49fde5e349306c50702a3c9261f332ab4fef02e6a03f5fa3ef8c199b3d1d714c6938d66c9340dfae7c64942d7570c245dff3adad00110676251805cb52babafc0262ee36bf752c29b585f58f86556acada3ba0ac20f52dd76a4e03e5774c0ae2f89d2c1d2b02a5a61074a3d57738dd9ede7ebc349919d5c1e79f38c5c0a9dff24c77445a73978f07f1b045b3f57f07867a26bcb0b699b8103d30d00738906e9607b3ce5b9fa58f129066b7bb6b8c1dc831fc8869ba82670dfc961bbee2c52ddf43e84876b53624644452342d57c2aa9872a64ae3be66768b14d872a23d454b4f8cc49cb6812e2e8afa7408265a209c131cbbc1d4df7df5f2b971815d4f64580b9457b6be7b160e4374dbb4f294c2532de360211f56e53d71a08dc8f5c140ca2dabe15e53ba8a2792ae082487d618d20d399bd464d4b60743a2ccd977fb51a7b7d2e8882a1e128144eac104d898fad07e12aa8c7b491254abf4af46112565733f016657d23f6e514d0f9fbc3fceebedc796d5eb83f4fb4250eb9ac9040d670e54641f61ea9ade97cd10dab6ccbdbd58d0fb4d2848692671e09d209fce57118072876c16d81cb74af158e934ad259c27a6d828f79e395d1a41f39a554e97df2ad63af3691f389ea78cd09f3b1c46b6fb46758137ab4a22f6eb2bbf26c82472b3bee49b4fed0bb02d21585686756948bea64684fb349f65a8da71d42f4302b0e886cbce0a02997f6e0defc7724aed9eddad20bfd7069719d05c33a39ea28680b9a713694c7d73b0631d31127099fe0c73de04c67cb0959d341a49e5f6903ebe8555742de16cdbba34ab40193eea3de3ceaf8ca7784c10f963c4b0166c379b65c61a7bf88dd5acb563c4d53041a8055810c32e044df8129f1241d9283afa5d403857006c427ec4d4aabeb580c83e75d0aced4712cd61fba155bce615a6098678b95b33ea83e8bd964f266593b02623c2dc5aad281836cd4a8eb43f5bcfabf9307f1f44054523a0de042ab5976fcc87757e0854f72802380e608f2b0864fbc626a847bdb9dcab42da2ae79b71721c482cf92ee4a04b0586c3c16a52295dbe05d8dec55914df9ad92e77394029909ad020781a825338c485018d6aa30a85540f1a7d219668358d3cbc7d14af67d0f66431192c4d5e4c0be3e93c78f5a3b4addf4a5c00a3a07cfddfc3282f8f520c51b0dbd1a1113501c0ead1aced1cc2778d4e96ee63074365f3631e3cd7a0650900f9ee93aa7a9d18e4bbe92703529e2503e8d086bba58d5708823a31c049feb010132f4d72f3d4d01635cb174c8a8ef8c4901d887ed5d03ceb747ce6407deaee3e0356f6cc05bf65cdfa114244d5aca4d68b9702ddc105fa58a51e979e53fc9a9d96e7f715f52f883a1ee22ff0c57e9c7d3395cae328b6e1c2e1d0dc706ae2d522b81ff6a495e60246d2b3bac7083b3fca2ec89e809afb7967bdd0b5195486d6835a2c7eb7ee51b318f8f46f6bd39677277afaf6b30dec7371632c8d5d0ade27cc0a0b60f3a3cd1480af33a7a9d3d530f46818f0fdc79c4b57bc110b94ce7b191ef59df0a2859ed51b62879e9904be950e0199619d701b389a4059de9bb58f0c642b2c440f22de49fd0c347a6f7b3e078f81b395a713c71a8b941f075915c338240f5cae8a82213eeda6b7557ba6408eeecf9885c29fd441abd069775766c97936a75ecc14264e1d4ce5d7419756ea2189a4ca7072c4939512835dd618741654aa2e9c5a31e10efd0df8b76071c78ef6f7dece3ef78237ae4c0ec8a1e4708ebd114ddf8212f5f518dd64378dc28610eb5b9b727a2a8e19cec0dc22da205ab861638d0a224ca8b33146b24b84f5752331cfb3d94cc3bc347454f7fc1f24024362fe9df8034baa35efac80c3bcb8666fdaedf2b3531ead7f79575ad91b431a46f279216246d59e12a2d21b7d7b5dbd2c3a1ff6d4624ab76438af4adac0dfc39459652f7ab3e4f0a9dfbd9bcdc481a63be41c7fa94dda78586c86b98a4829d74c346bc19bdfe20560d3fd75d097fcfcca71176f6c5c512bfe1e1db0cee6e4cdb3923fcaa03996f7a0952b7c7d57931ade57c7cc96c2d3578c42806b22afe1fc5feb1b773875eb0fdc7750fbab6129b79a1a3d7bb458ffbe391680482978a96f779f0a272b4032cc534de31826152c7368524d2ed55e58e232e18d5a4b770bad744fefb2913f7fe9f4e6c9d11e66b0ccff8eedfa8fe7e351a30bd76549ead8f10fc1c8b7abef41f2446e923727ede5a39ec0969467db2b028bf8d07c5d33269a3b92930ce958e804afc54b0b15a1237e5a112042bfe2e1d0177a5fa2d197d0e493b0944b758b519b6a7d30a3b94594753abcd360252dc1d0641a42ea292ace60cd07ef28e09cf0a88cd81bb961331cff08419d84b199a67f51b8900e8165667816e867b55f0fe1f0001a81a54f68eaa263c193d82b3ea9b2303bd5845b180c23274383f411a5e4b2a08a4fb4e5912a2003ef6dce0ddf88b329680c70020476ecefbf2999293fda21fd26bd389da51eeafe666ea2acede0060dff1e4d8f7e7cf5ec9ef9acfbe985a7ff7fc6649be2cdf5cffef3ba230303127f066a27a837dbc721aabd8955c0c9f24fb1048ec5bab166e8079f97f6a37179a1917c5bd80b5d7360b00d751779d0201a695d070a1fba3686972d068714e601d36fa16de536fcdce0be9e2a650b8b94025e2cab27c60cf41563646e9838488510be752dc2de47d7d83959cb6371d7f7bf119b06a6e1913e3bbbfaa37bff496f21e333f5d4a44e62f28262ffca8738b92224d30d8adf2293b335df3b18a9c64628af645b662e2b7efcc9f00d8c0f2e5292eed7a248dcbe470743c32c41eb1d3c1e2743d9fd0f6977546fb108aef0e5e88627dedc07ff01415d072e96f57b6ad9401ad78b1f8273d17c3d300fdb43e5809c387c9ba423985a4db46b8f6fce4111e980eae8147dde2de1ea762b2f0f13e08acf011588d2ee76e15e2572e1557f0309cff92d066f292905f22fcbd82870c4c685a9a370047fc6c5aedee2d46f5c0201a7c3a87f15cd2f85754abf4606fddbe89c41c0d49502fc6acdb92e12495c2fa0d9c37696ffb81cb6dd1b0f5dd92b8df3a2f59c1aa781e6976ecec1a68e7363ef8f8df83acd7ccdd1cfc8e4fb6403f8356def4897f823a97312c421e2ac57503481c6a5a55bc3b643488154c7694531c459521ea1faa4663bcf29163a4ddf936dd5d800cd173d8c4ff76ca3c93293aa153ae0a40d190f72b8f2f363a1546f37a016365f426e78172ac5bc8ea5d76b6af4c1bf26f30925d6930f165c4d85f515bc71bdd7b4b146bf9ed0a87c355381e29c3835d07a3f9de11c4eb9830bb7c23c4996400419ffbedd350bf74fb1bb767c2ac60897d3255928907394dcb8b82f7dc3e5d23821edfa6c65bf5bd9cc59165c82c70c5e8a4c0b9c2d792f6ec24a197ce153c3eaf7af5d24a728560eefdc3bace0a46789304866a123567412b3cf52cc1e70fecda8781be296a5e4e53a76ae8ecc4d979818f4030264fed54ff8e266d768d7dbd47e93d40467123d292d6d4059ae612dee6bb150d91aa7b6198c10ee55ef398715fce8d27ca0949a8c8712449ea409db7fe25e5678484a9ae7a212a2b58e482fb5495b7c01f41bf1beeada0e915b7424c13f65012b4c0900d4386b1d9419581d26551e8821a0841da36b7bd88703931405b473f94e0361fdea6852909f09df1232e0e3b6f251ce576773f0a04864277348031a401ce464a1edcb1b94b7970151271a46f6d666c182701f9e38cbb64081775cb9484721d04ecaa80d6b00dc6cb020dc687aec86a3a45e7dd62aa34ce3684bbce6253e83cc9a38646edf457cdad26ef859716b9352214c3a23941951c7136fd2273ee0907488b8559779b0358ff516ade5248978afbe1b55f6bd4e73a997af6a81903fd120414f72899ce13371d7c3ee24cd06b736b714f3b79de1f8e5d6a2bd7ecf6aeb6e55411bfa75342e3201154c5e2b2747102e954ba60bd7227d91c6ad6d04f014b83cd46a412a42132219c91d021b4573cd5ec83d7e9ce1ee6c77be20f984c3f0c99b58f04b0f455ddc93e11df10049456f05c61dfcfda6d9ea841f4cf0566fe44431f9bce327415f9b86b5b67c326be1a1f246c537868879572845313f1d8ae57c1dcff615b4f43d73173629a279e618ca4d831e2aef0738113d2a607a4a973b4027af163f1273398de7824a7bc35b497b1c4bf4dbeb0a0c8471a693528102df282eda056aa058ff2400345ccd94a39fec4e54126cf3fc7842ee8063b9815102a71d80656f739fa237938f5f9f24fa6d5b9e91e5ae367d869bfb070b54c5f15c2c486ae34684bb52f7b37e1ad860650fcf5490b8ca894281c5ca1a0a506190261d5f2778b17d73aefd520f5a82716b0251e26a42ab9bd8a44010857b6ddc36ed2ae7ebd82bd38c1b758273a7f27624588b56226a34e9b34e385c754073694893df57a8d9bfb18bee099fce7bc8f14a8ad6031bd3ca7482b6845cc51ab8a77e75e2752ab2e2cba0e1967d7d63b961bd0e031f894bce9db8885279cba922f17c4815b4b5d6afc9f9e74b441d0e166c9b6592a89aa0b788779aacd5eb9d8b97a8bfeb68e7668992820b5dab8cec8928e7c461994e783d365798809b5ceea514b574eeb6f7627e6ccf682863cae8dda608f5a7069b579012c0820b824f75840629040161939f0bf3b2575809f3617dc058447e79838e775fd683656686a659b9f1da9788a927317abed177dc78002edad940e438b51d3500f11d46acbd91ebc1428c43a054f3df8dcf4a7b04ffa94974936ca53edaa3760dcc72f11740f2765d6193adcc711de06918e6504da9d46c9ab159c275a24ee497d3097fd04d3b7fb80502c7aa6e5dfd0d88a5d04e79c836fe1b4cd3abb2a94fc4b90d59559e77e87d5187a95b10d45a14fa941b3396bcaa6b36eb4ddcd2b1d455a3e36c6a900d648551e0968b647dc7f9e81221628b67cff77949b2312e1eed110bda34a3dccb0a140e64e2318f642c3273cbafb7c4ff678b2d7fc172d5215286a5e1a653c3453374e1481d561ddb69034b4d6a8dcdcb39e04fa4204c556e8a16ff36c9ff9c45e3809f8173587eed2fcf5ffa839ac3533afc59dd29ec9b151b2df201bff74031817fdc815e659e2491d5a228b1d60b843723286bbb74cc03295c136a45830f546e3bd0bfb410222027315fc4256f311952dc6c30e73e843ba622eadeb06b58f935fdc0ceb9e9ed54cc5846d05b8f2bcfacebbb56e431ec1af9d6b1c8b555c9e7a56ceb4533be84de7cdbe02e8fcdfd91ed0cd6dddeccc645be0e6332f091740926f2ff1642f5b592626043ad823ae658ffae0f27e4b25f2ff24aaf6c6fe77c440f4e6c5cbedde410ea8df3a257b106962cc82211846b7c5e01e4bbc5447a60e7f1e4d44234774984eb4b6df025c361dab1ceda74f0b8f7d564e19ef822562b5963e19f3a0d08b3de000d215de155ec266ecb44011ac1d1bc238667e096e0896867f0714894204f1982eb961b658ae01dd78a758488f9bc2e375158adab004c908b60272acc4f13d8f7dcb46c7339e48d14c77f4f39379e9980feb4c52aab168ad243b604b99066b6b665f462ba296b86d40e3da4066e072355bd768d7d18201690ef78fff73925cca7c8202ccdb5ff135b38d990830e62faec494dd146cfbf73ee4e9f83aa50eaa7aed6f4b4809965e0a4d74bc18ce5449a2a3669c37dd076651105b1d7d2520f5c3c7aef7fbbe9b0b3422a9b4008718633d5a39a4df7f528ef147e4fcc6d9540d77208003200ac1414bb04001980"], 0x106c}], 0x2}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async) listen(r2, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x1c) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x269}, 0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) (async) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) (async) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 1m21.031248674s ago: executing program 0 (id=5470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2) (fail_nth: 2) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1m20.642630007s ago: executing program 3 (id=5472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m20.251863242s ago: executing program 2 (id=5474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f0000000040)=[{r1, 0x44de}, {r0, 0x400}, {r0, 0x4180}], 0x3, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x5c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x204}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xac}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4088010}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="21040400009b47f98d6aecc76f25696c6cdb", @ANYRES32=r2, @ANYBLOB="04005b00"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 1m20.07959913s ago: executing program 2 (id=5475): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000003b80)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r1, 0xa1) close(r1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) 1m20.077242078s ago: executing program 1 (id=5476): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) poll(&(0x7f0000000040), 0x1e, 0x0) 1m20.037104482s ago: executing program 0 (id=5477): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100), 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x8000001, @mcast2, 0x4}}, 0x0, 0x0, 0xf, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000010008", 0x4d}], 0x1) 1m20.034411496s ago: executing program 3 (id=5478): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x1c, 0x68, 0x162ceceb15c17209, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x1}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008090) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x83, &(0x7f0000000140), &(0x7f0000000100)=0x10) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x41) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}]}, 0x2c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) (async) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$NS_GET_OWNER_UID(r9, 0xb704, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x140, 0x1a, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x4, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x3501, 0xa, 0x1, 0x1}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x80, "25cac521"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20}, 0x0) 1m19.716720105s ago: executing program 1 (id=5479): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xef, &(0x7f0000000000)={&(0x7f0000000300)={0x1c, 0x42, 0xb, 0x70ad23, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 1m19.716451758s ago: executing program 0 (id=5480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0xef, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) 1m19.278042495s ago: executing program 32 (id=5480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0xef, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) 1m19.270922737s ago: executing program 33 (id=5479): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xef, &(0x7f0000000000)={&(0x7f0000000300)={0x1c, 0x42, 0xb, 0x70ad23, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 1m19.26574117s ago: executing program 2 (id=5483): syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_create(0x81) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e4ff000000000000000000630100000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) 1m19.10877386s ago: executing program 34 (id=5483): syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_create(0x81) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e4ff000000000000000000630100000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) 1m19.103524042s ago: executing program 3 (id=5484): bpf$PROG_LOAD(0x3f9, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1m19.102126153s ago: executing program 35 (id=5484): bpf$PROG_LOAD(0x3f9, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.476699672s ago: executing program 8 (id=6402): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)="d64e04200aeba851e086cfa7b6fb1689546716ad765c506d92251ff242c76227103dd0a0851094d07838bed0f0bbb94eef64531d6e89b8eabce00da8f0ddb93d516fa758569c162645b0be04230a65d173cd9fa46a3e65a6bdfee3e7f139017947a5f9bca02680b933a0b9ffed2d0b6d0845a18161e0da64701fd2fbb1b40009779dbc8be30f824350cb8c09d89d654c179f2c28e5c532b1ec6d644a6fd4a8c3f00f94d1cab2a745d0823bce4c691c", 0xaf}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) 2.024673506s ago: executing program 6 (id=6406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r1, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) 1.939883968s ago: executing program 8 (id=6408): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000001900ff0000000000185100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.806463255s ago: executing program 6 (id=6410): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x100, @private0, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x400401c, 0x0, 0x0) 1.792497507s ago: executing program 8 (id=6411): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept$alg(r2, 0x0, 0x0) recvmsg(r3, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f00000002c0)=""/50, 0x32}], 0x1}, 0x40010002) sendmmsg$alg(r3, &(0x7f00000007c0), 0x0, 0x24040884) sendmmsg$inet(r3, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x8058) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r1, 0x701}, 0x14}}, 0x0) 1.745235989s ago: executing program 7 (id=6412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) 1.620572825s ago: executing program 6 (id=6415): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x22004040) close(0xffffffffffffffff) sendmmsg$alg(r0, &(0x7f00000051c0)=[{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000300)}, {0x0}, {&(0x7f0000000480)}], 0x4, 0x0, 0x0, 0x4040000}], 0x1, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005340)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x20000041) 1.526436194s ago: executing program 6 (id=6417): sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd8, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x4}, @NFC_ATTR_LLC_SDP={0xc0, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan1\x00'}]}, {0x4c, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0x8, 0x1, '!!%%'}, {0xa, 0x1, 'wpan1\x00'}, {0x7, 0x1, '*-%'}, {0x7, 0x1, ')%^'}]}, {0x10, 0x0, 0x0, 0x1, [{0x6, 0x1, '!/'}, {0x4}]}, {0x28, 0x0, 0x0, 0x1, [{0x5, 0x1, ']'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan1\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan1\x00'}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20002015}, 0x20000081) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r3, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31c}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x2, 0x6]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20000814) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x800) nanosleep(&(0x7f0000000600)={0x0, 0x3938700}, 0x0) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f0000000680)="b6d0a1eca12ca2999c1a5c0ab171b6b1cd443136c6b21ddd5203e635795629055ccf805af9aa8e4088602a148c0ddc114aee3f6abf6ac9b8cce31ce77520bb3f8a3cc51e8a8043221e6778d1108f5b66ce53eb411364a83941d41a643b0aa11cea1fe5254a5108c8015119cf6eac9e89bfdf17933a14dce92cb7f583f6b1a4df7c394f84550612e9dd1d7194f1b23a122ae7e2d160ff09f70410e69d8d2ff9b6f3b6a2abd0ea399eb887521135d572b3905022fcd52d122cb36a27edbd3ef05e14571d56f33a81fbb41715d7207981d69b93", 0xd2}, {&(0x7f0000000780)="aff3d1e31d5743729a87939f7965d63cb040a88d9227d13126341e0e08c5556a9ddb1e6de643e1351357635f2b4e05870bd7b4f159ba3928e234973fb5507238a315cd902d0f6e1112165253cd775c06f0ce77429fc11874a22b91b75cd2c6fa04d99d1c12da80df51a5e0ec6b2d518d3586d74b657055364f47218355f2ed726796414b51e3132843c59c62575b55c4f998f4bd276042f1e865bdb3021d", 0x9e}], 0x2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$unix(r6, &(0x7f0000001b00)={&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000001c40)={&(0x7f0000001b40), 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x74, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004010}, 0x81) ioctl$SIOCPNADDRESOURCE(r10, 0x89e0, &(0x7f0000001c80)=0x8) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r9) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000003440)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003400)={&(0x7f0000001d40)={0x1698, r11, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x3e8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x3e, 0x8, 0x96fd, 0x7, 0x5, 0x6, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x40}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x54}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x74, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x48, 0x5, 0x48, 0x2, 0xaee632b53f3098b7, 0x16, 0x1, 0x18, 0x24, 0x18, 0x12, 0x6c, 0x0, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff0, 0xfff8, 0x16, 0x1, 0x0, 0xfc, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff3, 0x2, 0x0, 0x3, 0x3, 0x0, 0x3ff, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0xffff, 0x5, 0x4, 0x4, 0x5, 0x2]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0xa}, {0x5, 0x2}, {0x0, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x1}, {0x7, 0x5}, {0x0, 0xa}, {}, {0x5, 0x8}, {0x7, 0x6}, {0x2, 0xa}, {0x4}, {0x7, 0x9}, {0x5}, {0x7, 0x7}, {0x7, 0x1}, {0x6, 0x7}, {0x3, 0x8}, {0x3, 0x5}, {0x3, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x6}, {0x6, 0x7}, {0x1, 0x5}, {0x7, 0x7}, {0x1, 0xa}, {0x6}, {0x0, 0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x3, 0xa}, {0x6, 0x8}, {0x3, 0xa}, {0x5, 0x6}, {0x1, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x1, 0x9}, {0x0, 0x4}, {0x6, 0x3}, {0x5, 0x3}, {0x3, 0x3}, {0x3}, {0x1, 0x5}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0x8}, {0x5, 0x6}, {0x5, 0x2}, {0x4, 0x1}, {0x6, 0x9}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x7, 0x8, 0x7, 0xb, 0x2, 0xfffc, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x75, 0x3, 0xf, 0x2, 0x385b, 0x9, 0x8801]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x5}, {0x3, 0x9}, {0x2}, {0x3, 0x1}, {0x0, 0xa}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x4}, {0x2}, {0x3, 0x3}, {0x0, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x5c, 0x4, 0x80, 0x3, 0xff, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x6}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x18, 0x2, 0x4, 0x36, 0xb, 0x6, 0xb, 0x30, 0x1b, 0x36, 0x2, 0x4, 0x9, 0xb, 0x4, 0x6c, 0x12, 0xc, 0x6c, 0x5, 0x9, 0xd, 0x6, 0x12, 0x3, 0x24, 0x6c, 0x16, 0x16, 0xb05777cf6deada7]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x3, 0xc, 0x2, 0xc, 0x2, 0x1, 0x18, 0x48, 0x76, 0x6, 0x1, 0x16, 0x60, 0x22, 0x2, 0x12, 0x30, 0x1, 0x3, 0x12, 0x24, 0x9, 0x2, 0x60, 0x48, 0x1, 0x18, 0x12, 0x3, 0x9]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb, 0x100, 0xd12a, 0x6, 0xd, 0x81, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x7}, {0x4, 0x2}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x4}, {0x3, 0x1}, {0x4, 0x6}, {0x0, 0x4}, {0x6, 0x5}, {0x1, 0xa}, {0x1}, {0x6, 0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x2, 0x9}, {0x2, 0x3}, {0x2, 0x8}, {0x2, 0x5}, {0x0, 0x3}, {0x5, 0xa}, {0x1}, {0x3, 0xe}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0x8}, {0x5, 0x4}, {0x4, 0x7}, {0x6, 0x6}, {0x5, 0x9}, {0x2, 0x3}, {0x0, 0x3}, {}, {0x6, 0x4}, {0x1, 0x6}, {0x5}, {0x5, 0x7}, {0x3, 0xa}, {0x7, 0x7}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x6, 0x1}, {0x7, 0x5}, {0x0, 0x2}, {0x3, 0x4}, {0x1, 0x3}, {0x5, 0x6}, {0x3}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x2, 0x4}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x6c, 0x9]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0x1e, 0x36, 0xb, 0x0, 0x6, 0x36, 0x16, 0x36, 0x24, 0x1b, 0x32, 0x24, 0x9, 0xbb90eddba82a8cf0, 0xb, 0x16, 0x6, 0x2, 0x6, 0x3, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x28c, 0x11d, 0x0, 0x1, [{0x258, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x150, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xbd, 0xb0e, 0x6, 0x1, 0x9, 0x6, 0x9]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x27, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8001, 0x1, 0xb, 0x2, 0x7, 0x5, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x9, 0xe, 0x8001, 0x3ff, 0x3, 0x8, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x5, 0x464c, 0x355, 0x0, 0x4, 0x7ff, 0xffff]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x3}, {0x1, 0xa}, {0x3, 0x5}, {0x4}, {0x0, 0x3}, {0x4}, {0x3, 0x9}, {0x1, 0x1}, {0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x4, 0x8}, {0x0, 0x4}, {0x3, 0x1}, {0x7, 0x3}, {0x4, 0x2}, {0x5, 0x8}, {}, {0x5, 0xa}, {0x4, 0x9}, {0x1, 0x9}, {0x2, 0x8}, {0x2, 0x3}, {0x5}, {0x3, 0x9}, {0x1, 0x6}, {0x3, 0x9}, {0x2, 0x6}, {0x2, 0x5}, {0x3, 0x3}, {0x0, 0xa}, {0x7, 0x9}, {0x7, 0x6}, {0x5, 0x8}, {0x0, 0x5}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x6}, {0x0, 0x4}, {}, {0x2, 0x7}, {0x6, 0x8}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x7, 0x3}, {0x1, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x0, 0x7}, {0x7, 0xa}, {0x0, 0x4}, {0x7, 0x6}, {0x4, 0x2}, {0x2}, {0x0, 0x6}, {0x0, 0x9}, {0x1, 0x6}, {0x3}, {0x5, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x6}, {0x0, 0x9}, {0x6, 0x4}, {0x3}, {0x4, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x4}, {0x4, 0x4}, {0x4, 0x3}, {0x6, 0x9}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0x4}, {0x2, 0x5}, {0x7, 0x1}, {0x7, 0x8}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x6}, {0x1, 0x1}, {0x3}, {0x6, 0x3}, {0x3}, {0x0, 0x3}, {0x5, 0x4}, {0x2}, {0x5, 0x2}, {0x0, 0x2}, {0x1, 0xa}, {0x5, 0xa}, {0x3, 0x9}, {0x2, 0x6}, {0x2, 0x9}, {0x3}, {0x5, 0x3}, {0x3, 0x9}, {0x3, 0x9}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x6, 0x0, 0x4, 0xd2, 0x7f, 0x5]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x9, 0x1, 0x1, 0x4, 0x3, 0x7]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x9}, {0x2, 0x2}, {0x2, 0xa}, {0x1, 0x2}, {}, {0x2}, {0x7, 0x1}, {0x4, 0x1}, {0x7, 0x8}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0xa}, {0x1}, {0x4, 0x7}, {0x2, 0x5}, {0x4, 0x5}, {0x5, 0x6}, {0x2, 0x6}, {0x0, 0x6}, {0x3, 0x9}, {0x5, 0x8}, {0x1, 0x3}, {0x6, 0x1}, {0x7, 0x9}, {0x4, 0x6}, {0x7, 0x4}, {0x1}, {0x1, 0x7}, {0x4, 0x2}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0x9}, {0x2, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x3, 0x23, 0x1, 0x7fff, 0x3, 0xfff]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0x3, 0x12, 0x6, 0x3, 0xc]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x6, 0x0, 0xce, 0x9, 0x5, 0x6]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x30, 0x30, 0x24, 0x12, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xec00, 0x6, 0x7f, 0x7, 0x8, 0xee, 0x556]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7, 0x6, 0x3, 0x963e, 0x4, 0x7, 0x8001]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}]}]}, @NL80211_ATTR_TID_CONFIG={0x3f0, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}]}, {0x398, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x10}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x66}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x344, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x128, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x7, 0x5}, {0x4, 0xa}, {0x0, 0x6}, {0x4, 0x8}, {0x1}, {0x1, 0x5}, {0x7, 0x6}, {0x0, 0xa}, {0x2}, {0x4, 0x2}, {0x5, 0x9}, {0x7, 0x3}, {0x7, 0x2}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x5}, {0x1, 0x9}, {0x4, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x3, 0xa}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x3, 0x5}, {0x4, 0x8}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0xa}, {0x6, 0x9}, {0x4, 0x5}, {0x6, 0xa}, {0x6, 0x9}, {0x4, 0x1}, {0x2, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0x3}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x3}, {0x3}, {0x1, 0x2}, {0x4, 0x9}, {0x7, 0x1}, {0x3}, {0x6, 0xa}, {0x6, 0x2}, {0x4, 0x6}, {0x6, 0x3}, {0x6, 0xa}, {0x6, 0x2}, {0x4, 0xa}, {0x6, 0x8}, {0x2, 0xa}, {0x1, 0x2}, {0x4, 0x1}, {0x3, 0x5}, {0x3, 0x3}, {0x5, 0x1}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x9}, {0x3}, {0x1, 0x3}, {0x6, 0x2}, {0x4, 0x5}, {0x3, 0xa}, {0x3, 0x8}, {0x3, 0x6}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0x9}, {0x3, 0x4}, {0x4}, {0x5, 0x8}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0x6}, {0x5, 0x2}, {0x3, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x4}, {0x5, 0x1}, {0x5, 0x4}, {0x3, 0xa}, {0x1, 0x9}, {0x7, 0x1}, {0x7, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa68c, 0x5, 0x5, 0x0, 0xae2a, 0x10, 0x5, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xa, 0x7a, 0x4000, 0x1, 0x5, 0x9, 0xfff6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0xe45f, 0xb, 0x0, 0x101, 0x3, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x5, 0x60, 0x5, 0x24, 0x18, 0x1b, 0x9, 0x36, 0xb]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x1}, {0x6, 0x2}, {0x5, 0x1c}, {0x0, 0x1}, {0x5, 0x5}, {0x2}, {0x3, 0x6}, {0x2, 0x3}, {0x6, 0x4}, {0x6, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x1, 0x4}, {0x2, 0x7}, {0x0, 0x8}, {0x5, 0x8}, {0x1, 0xa}, {0x2, 0x2}, {0x2}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x8}, {0x1, 0x9}, {0x7, 0x6}, {0x0, 0x2}, {0x5, 0x6}, {0x5, 0x2}, {0x7, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x8}, {0x4, 0x5}, {0x6}, {0x1, 0x8}, {0x7, 0x3}, {}, {0x3, 0xa}, {0x3}, {0x5, 0x7}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x3}, {0x3, 0x2}, {0x5, 0x2}, {0x3, 0x6}, {0x3, 0x3}, {0x0, 0x8}, {0x7, 0x9}, {0x6, 0x2}, {0x2, 0xa}, {0x7, 0xa}, {0x7, 0x6}, {0x5, 0x6}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x5}, {0x5, 0x4}, {0x1, 0x3}, {0x4, 0x9}, {0x1, 0x4}, {0x6, 0x9}, {0x6, 0x7}, {0x5, 0x9}, {0x4, 0x2}, {0x0, 0x7}, {0x6}, {0x5, 0x5}, {0x3, 0x6}, {0x3, 0x5}, {0x4, 0x8}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0xa}, {0x2, 0x9}]}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd260, 0x2d, 0x8, 0xf, 0x1, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x4, 0x9, 0xdec, 0x40, 0x5, 0x3]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x1, 0x6, 0x48, 0x48, 0x0, 0x18, 0x2, 0x16, 0x0, 0x4, 0x4, 0x48, 0x60, 0x60, 0x24, 0x36, 0x24, 0x2, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x7, 0x800, 0x5, 0x3, 0x7ff, 0x6, 0x2]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x8}, {0x3, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x7, 0x5}, {0x3, 0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2}, {0x5, 0x6}, {0x7, 0x16}, {0x1, 0x2}, {0x4, 0xa}, {0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x7}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x9}, {0x6, 0x6}, {0x3, 0x5}, {0x7, 0x9}, {0x5, 0x8}, {0x1, 0x9}, {0x0, 0x5}, {0x3}, {0x3, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x5}, {0x5, 0x4}, {0x1}, {0x5, 0x7}, {0x1, 0x4}, {0x7, 0xa}, {0x2, 0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x401, 0x5, 0xf53, 0x1, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x12, 0x6, 0x5, 0x4, 0xc]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x12, 0xb, 0x60, 0x6, 0x6c, 0x12, 0xc, 0x24, 0x5, 0x24, 0x18, 0x16, 0x18, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x18, 0x12, 0x12, 0x30, 0x60, 0x30, 0x4, 0xc, 0x1, 0x1, 0xcbe7cac66429b64f, 0x48, 0x2, 0x2, 0x24, 0x24, 0x6, 0x60, 0x24, 0x6c, 0x1, 0x48, 0x3, 0x48, 0x6, 0xb, 0x7c, 0xc, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x6, 0x78, 0x400, 0x4, 0x6, 0xa7a, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x9391, 0x8e3, 0x3dd3, 0x0, 0x8001, 0xd75e, 0x1148]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x8, 0x6, 0x2a1b, 0x2, 0x0, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x5, 0x1, 0x7, 0x2, 0x1, 0x5, 0x6]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7c, 0x8001, 0xfa9b, 0x0, 0x0, 0xc, 0x1]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x9}, {0x7, 0x7}, {0x0, 0x4}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x3}, {0x5, 0x7}, {0x3, 0x4}, {0x4, 0x7}, {0x1, 0x9}, {0x4, 0x4}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x4}, {0x2, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0x6}, {0x1, 0x4}, {0x4, 0xa}, {0x5, 0x4}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {}, {0x2, 0x2}, {0x2, 0x4}, {0x4, 0x6}, {0x6, 0x1}, {0x4, 0xa}, {0x0, 0x6}, {0x7, 0x1}, {0x3, 0x5}, {0x3, 0x9}, {0x2, 0x9}, {0x4, 0x7}, {0x4, 0x1}, {0x7, 0xa}, {0x3, 0x8}, {0x1, 0x9}, {0x2, 0x6}, {0x2}, {0x2, 0x5}, {0x7, 0xa}, {0x4, 0x5}, {0x4, 0x6}, {0x5, 0x6}, {0x7, 0x7}, {0x6}, {0x3, 0x2}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x30, 0xb, 0x2, 0x9, 0xb, 0x30, 0x2, 0x1a, 0x48, 0x12, 0x24, 0x60, 0xc, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x400, 0x7b6, 0x400, 0x32, 0x1, 0x0, 0xfffd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x18d, 0xfff, 0x9a99, 0x8, 0x0, 0x9, 0xc1, 0x9f5a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x800, 0x8, 0x3, 0x1, 0x9, 0x6, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x2ac, 0x11d, 0x0, 0x1, [{0x22c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x7, 0x6, 0xfffe, 0x6, 0x9, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xfff9, 0x4, 0x506, 0xd808, 0x8, 0x20bc, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd6f, 0x52d1, 0x1, 0x7, 0x0, 0x4, 0xffff, 0x5]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0xa}, {0x0, 0xa}, {0x1, 0x8}, {0x1}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0xa}, {}, {0x5, 0x6}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x8, 0x8, 0x6, 0x8, 0x4, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x4, 0x8, 0xb, 0xc, 0x48, 0x1b, 0x2, 0x4, 0x6, 0x1, 0x4, 0xc, 0x5, 0x2, 0x60, 0x6c, 0x4, 0x0, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0xc, 0x36, 0x1b, 0x1b, 0x3, 0x60, 0x1b, 0xb, 0x1b, 0x24, 0x18, 0x4, 0x0, 0x48, 0x18, 0x9, 0x48, 0x3, 0x40, 0x9, 0x2, 0x6c, 0x30]}]}, @NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x6, 0x24f1, 0xd98f, 0x8001, 0x5, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0xa}, {0x2, 0x1}, {0x4, 0x6}, {0x3, 0x2}, {0x0, 0x2}, {0x2, 0x8}, {0x2, 0x9}, {0x3, 0xa}, {0x7, 0x3}, {0x5}, {0x6, 0x7}, {0x7, 0x3}, {}, {0x6, 0x4}, {0x7}, {}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x6}, {0x1, 0x4}, {0x7}, {0x2, 0x7}, {0x6, 0x6}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x4}, {0x6, 0x5}, {0x0, 0x1}, {0x4, 0x6}, {0x1, 0x9}, {0x7, 0x3}, {0x3, 0x7}, {0x5, 0x5}, {0x2, 0x7}, {0x3, 0xa}, {0x7, 0x4}, {0x3, 0x4}, {0x5, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x2, 0x6}, {0x2, 0x8}, {0x4, 0x2}, {0x5, 0x8}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x213, 0x2, 0xb3b4, 0x8, 0xd, 0x5, 0xc59, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x111d, 0x6, 0x0, 0x6, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x12, 0x34, 0x30, 0x3, 0x24, 0x12]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x1}, {0x2, 0x4}, {0x1, 0x4}, {0x6}, {0x3, 0x3}, {0x0, 0x7}, {0x3, 0x7}, {0x0, 0x6}, {0x1, 0x7}, {}, {0x2, 0x5}, {}, {0x7, 0x6}, {0x5, 0x6}, {0x4, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x7, 0x4}, {0x6, 0x4}, {0x4, 0x5}, {0x1, 0x2}, {0x5}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x4}, {0x2}, {0x0, 0x8}, {0x1, 0x2}, {0x3, 0x5}, {0x3, 0x6}, {0x5, 0xa}, {0x3, 0x9}, {0x6, 0x4}, {0x6, 0x4}, {0x2, 0x4}, {0x2}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0x7}, {0x2, 0x2}, {0x1, 0x6}, {0x2, 0x3}, {0x4, 0x1}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x4, 0x4}, {0x1, 0x8}, {0x2, 0x7}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x3, 0x7}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x6}, {0x0, 0x5}, {0x2, 0x4}, {0x6, 0xa}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x6}, {}, {0x3, 0x9}, {0x3, 0x6}, {0x4, 0x9}, {0x4, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x3, 0x6}, {0x6}, {0x1, 0x5}, {0x7, 0x4}, {0x2, 0x8}, {0x3, 0xa}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x2, 0x9}, {0x5, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0x5}, {0x5, 0x5}, {0x1, 0xa}, {0x2, 0x4}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0x2}, {0x4, 0x8}, {0x6, 0x1}, {0x3, 0x3}, {0x2, 0x8}, {0x1, 0xa}, {0x4, 0x4}, {0x3, 0x1}, {0x4, 0xa}, {0x6, 0x2}, {0x7, 0xa}, {0x0, 0x4}, {0x1}, {0x0, 0x9}, {0x5, 0x9}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0xa}, {0x4, 0x7}, {0x3, 0x1}, {0x6, 0x7}, {0x7, 0x1}, {0x0, 0x4}, {0x6, 0xa}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x8}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x250, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb1a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x9, 0x60, 0x60, 0x12, 0x5, 0xc, 0x9, 0x69, 0x1b, 0x3, 0x6d, 0x1, 0x7, 0x16, 0x5, 0x18, 0x18, 0x9, 0x16, 0x5, 0x5, 0x9, 0x12, 0xc, 0x6, 0x12, 0x5, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x4, 0x6}, {0x2, 0x6}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0xa}, {0x7, 0x9}, {0x0, 0xb}, {0x7, 0x6}, {0x0, 0x3}, {0x4, 0x6}, {0x3, 0x4}, {0x4, 0x9}, {0x2, 0x4}, {0x1, 0x1}, {0x6, 0x9}, {0x1}, {0x4, 0x4}, {0x6, 0x2}, {0x7, 0x5}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x8}, {0x6}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x7}, {0x1, 0x6}, {0x7, 0x3}, {0x1, 0xa}, {0x5, 0x1}, {0x2, 0x7}, {0x3, 0x1}, {0x3}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0x5}, {0x6, 0x7}, {0x3, 0x2}, {0x3, 0x2}, {0x5, 0x8}, {0x7, 0x2}, {0x3, 0xa}, {0x3, 0x1}, {0x5, 0x5}, {0x3, 0x4}, {0x2, 0x5}, {0x4, 0x4}, {0x6, 0x1}, {}, {0x7, 0x9}, {0x7, 0xa}, {0x3, 0xa}, {0x7, 0x7}, {0x5, 0x5}, {0x6, 0x9}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x9}, {0x0, 0x6}, {0x2, 0x1}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x7}, {0x6, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x2, 0x1}, {0x7, 0xa}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x30, 0x3, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x38a9, 0x0, 0xfc2, 0x6, 0x100, 0x4, 0x3, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x5, 0xf000, 0x0, 0x3, 0x6, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x5, 0x5, 0x9, 0x30, 0x6, 0x1b, 0x5, 0x9, 0x9, 0x48, 0x16, 0x24, 0x48, 0xb, 0x0, 0x60, 0xc, 0x24, 0x30, 0x6c, 0x6, 0xc, 0x18, 0x2, 0x30, 0x36, 0x6, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9b, 0xc, 0x2, 0x3, 0x9c, 0x1, 0x7, 0x40]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x4, 0x9}, {0x5, 0x1}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x4, 0x4}, {0x1, 0x1}, {0x7, 0xa}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x3, 0x60, 0x69, 0x16, 0x48, 0x5, 0xb, 0x1, 0x34, 0x60, 0x1b, 0x6, 0xb, 0x1, 0x2, 0x60, 0x9, 0x24, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x9, 0x63, 0xd409, 0x154, 0x9, 0xfff2]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x9}, {0x3, 0x6}, {0x5, 0x3}, {0x3}, {0x2, 0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x3, 0x9}, {0x6, 0x6}, {0x1, 0x1}, {0x1}, {0x2, 0xa}, {0x6, 0xa}, {0x7, 0x1}, {0x5, 0x4}, {0x6, 0x2}, {0x1, 0x3}, {0x2, 0x1}, {0x5}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x8}, {0x5, 0x7}, {0x5, 0x9}, {0x1, 0x7}, {0x2, 0x2}, {0x4, 0x4}, {0x7, 0x7}, {0x7, 0x7}, {0x6, 0x3}, {0x7, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x5}, {0x2, 0x3}, {0x5, 0x6}, {0x2, 0x1}, {0x5, 0x8}, {0x2, 0x4}, {}, {0x6, 0x2}, {0x3, 0xa}, {0x0, 0xa}, {0x1, 0x9}, {0x5, 0x6}, {0x5, 0x8}, {0x2, 0x7}, {0x4, 0x1}, {0x6, 0x8}, {0x2, 0x5}, {0x5, 0x1}, {0x1, 0x9}, {0x1, 0x1}, {0x3, 0x4}, {0x2, 0x6}, {0x0, 0x8}, {0x6, 0x9}, {0x3, 0x7}, {0x7, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x6, 0x8}, {0x1, 0x6}, {0x6, 0x4}, {0x4, 0x8}, {0x6, 0x7}, {0x5, 0x3}, {0x5, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x724, 0x11d, 0x0, 0x1, [{0x3a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x384, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x60, 0x5, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x0, 0x9, 0x1, 0xfffa, 0x87, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x48, 0x80, 0x5, 0x0, 0x3, 0x10, 0x9, 0xfffb]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x12, 0x60, 0x3, 0x24, 0x1, 0x4, 0x30, 0x6c, 0x17, 0xb, 0x9, 0x4, 0xb, 0x5, 0x1, 0x30, 0x1, 0x6c, 0x1b, 0x3, 0x37, 0x1, 0x4, 0x25, 0x5, 0x66]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x60, 0x60, 0x48, 0x3, 0x2, 0x1, 0x48, 0x3, 0x30, 0x1b, 0x6, 0x6c, 0xb, 0x48, 0xc, 0x2, 0x0, 0x3, 0x1b, 0x2, 0x9, 0x3, 0x3, 0x18, 0x24, 0x2, 0x16, 0x24, 0x12, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x4, 0x1, 0x4, 0x2, 0x8, 0x80]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x2, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x3, 0x5}, {0x4, 0x3}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0x8}, {0x3, 0xa}, {0x2, 0x3}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0xa}, {0x2, 0x6}, {0x4, 0xa}, {0x2, 0x8}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x4, 0x2}, {0x3}, {0x3, 0x1}, {0x7, 0x8}, {0x1, 0x6}, {0x4, 0x7}, {0x2, 0x9}, {0x7, 0x6}, {0x7, 0x1}, {0x2, 0x8}, {0x3, 0x5}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x8}, {0x5, 0x8}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x2}, {0x7, 0x8}, {0x5, 0x3}, {0x0, 0x6}, {0x4, 0x6}, {0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xea, 0x6, 0x2, 0xf970, 0x6588, 0x8, 0xa7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8f47, 0x8000, 0x1f16, 0x0, 0x0, 0x5, 0xc29c, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xabd5, 0xfffa, 0x1, 0x1, 0x400, 0x1, 0x7a74]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x0, 0x18b, 0x0, 0x3, 0x7fff, 0x6]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x3}, {0x3, 0x3}, {0x4, 0x2}, {0x4, 0x4}, {0x5, 0x4}, {0x2, 0x7}, {0x5, 0x6}, {}, {0x2, 0x4}, {0x7, 0x5}, {0x5, 0x9}, {0x3, 0xa}, {0x2, 0x5}, {0x6, 0x9}, {0x2, 0x2}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x7}, {0x5, 0x1}, {0x4, 0x2}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xb, 0x5ec9, 0xff, 0x2, 0xf, 0x1, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x30, 0x12, 0x3, 0x30, 0x18, 0x4, 0x30, 0x1b, 0x3, 0x5, 0x6, 0x9, 0x16, 0x18, 0x24, 0xb, 0x6c, 0x18, 0xc, 0xb, 0x30, 0x6c, 0x1]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x4}, {0x6, 0x1}, {0x7, 0x1}, {0x6, 0x1}, {0x5, 0x6}, {0x1, 0x2}, {0x5, 0x7}, {0x6, 0xa}, {0x6, 0x4}, {0x5, 0x3}, {0x5, 0x5}, {0x7, 0x6}, {0x2, 0x5}, {0x1, 0x6}, {0x4, 0x8}, {0x2, 0x9}, {0x1, 0x9}, {0x4}, {0x3, 0x8}, {0x6, 0x2}, {0x6}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x4, 0x9}, {0x3, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x9}, {0x5, 0x4}, {0x4, 0x9}, {0x4, 0x5}, {0x7}, {0x2, 0x5}, {0x1, 0x1}, {0x3, 0x7}, {0x5, 0x16}, {0x1, 0x4}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0x3}, {0x7, 0x4}, {0x5, 0x9}, {0x3, 0x9}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x60, 0x4, 0x5, 0x6c, 0x9, 0x48, 0x18, 0x12, 0x0]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x2}, {0x4, 0x6}, {0x5, 0x9}, {0x5, 0xa}, {0x3, 0xa}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x5}, {0x2, 0x4}, {0x2, 0x7}, {0x5}, {0x0, 0x3}, {0x5}, {0x0, 0x3}, {0x7}, {0x5, 0x5}, {0x5, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x0, 0x3}, {0x5, 0x6}, {0x3, 0x6}, {0x7, 0x3}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x5, 0x3}, {0x3, 0x1}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x87, 0x7, 0x8000, 0x4, 0x9, 0xf3c2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x1, 0x18, 0x2c, 0x10, 0x1b, 0xb, 0xc, 0x30, 0x9, 0xb29c6da921f3b1b5, 0x4, 0x18, 0xc, 0x6]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd84, 0x1, 0x7, 0x8001, 0x3ff, 0x9d00, 0x3f24, 0x3]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x12, 0x9, 0x24, 0x6, 0xb, 0x5, 0x6, 0x16, 0x30, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff80, 0xd2a, 0x1, 0x400, 0x1, 0x1a, 0x400, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x9, 0x6c, 0x48, 0x4, 0x1, 0x9, 0x6c, 0x2, 0x2, 0x5, 0x16, 0x24, 0x2, 0x16, 0x6, 0xb, 0x60, 0x12, 0x6, 0x6, 0x24, 0xc, 0x2, 0x5c, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1000, 0x3, 0x7ff, 0x9, 0x1, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xed7, 0x7, 0x8, 0x7, 0x1, 0x1ff, 0x5, 0x507c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0xdeab, 0x99, 0x7, 0x9, 0x6, 0x216]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd5ba, 0x1, 0x1, 0xffff, 0x401, 0x2, 0x32d, 0x15b5]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x6, 0x7}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x9}, {0x0, 0x2}, {0x6, 0x5}, {0x0, 0x7}, {0x2, 0x9}, {0x5, 0x8}, {0x2, 0x8}, {0x2, 0x5}, {0x6, 0x1}, {0x4, 0x8}, {0x7, 0x9}, {0x6, 0x1}, {0x6, 0x1}, {0x7, 0x2}, {0x3, 0x9}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x2, 0x8}, {0x5, 0x7}, {0x7, 0x3}, {0x3, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x7, 0x6}, {0x0, 0x7}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x5}, {0x1, 0x3}, {0x3, 0x8}, {0x3, 0x6}, {0x7}, {}, {0x4, 0x3}, {0x7, 0x4}, {0x2, 0x1}, {0x3, 0x3}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x4}, {0x7}, {0x3}, {0x6, 0x5}, {0x6, 0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x3, 0x1}, {0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x4}, {0x1, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x100, 0x5, 0x8000, 0x4, 0x6, 0x5, 0x8001]}}]}]}]}, {0x37c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x368, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x1}, {0x7, 0x4}, {}, {0x7, 0x5}, {0x2, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {}, {0x1}, {0x4, 0x5}, {0x1, 0x3}, {0x7, 0x7}, {0x2, 0x7}, {0x4, 0x6}, {0x1}, {0x0, 0x4}, {0x7, 0x5}, {0x5, 0x6}, {0x6, 0x6}, {0x6}, {0x3, 0xa}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x7}, {0x3}, {0x2, 0x6}, {0x7, 0x8}, {0x4}, {0x1, 0x8}, {0x6}, {0x1, 0x3}, {0x3, 0xa}, {0x2, 0x9}, {0x4, 0x6}, {0x4, 0xa}, {0x1, 0x6}, {0x2, 0x7}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0x7}, {0x2, 0x9}, {0x2, 0x7}, {}, {0x5, 0x4}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0x8}, {0x7, 0x7}, {0x4, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x6, 0x7}, {0x3, 0x2}, {0x6, 0x1}, {0x0, 0x1}, {0x7}, {0x2, 0x1}, {0x2, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x8}, {0x7, 0x7}, {0x5, 0x9}, {0x0, 0x5}, {0x2, 0xa}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc, 0x73, 0xff51, 0x3, 0x40, 0x20, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x48, 0x1, 0x67, 0x3, 0x6c, 0x12, 0x30, 0xc, 0x18, 0x3, 0xd, 0x18, 0xb, 0x36, 0x60, 0x1b, 0x5, 0x5, 0x60, 0xb, 0x30, 0x48, 0x6, 0x5e, 0x60, 0x2, 0x6c, 0x9, 0x5]}]}, @NL80211_BAND_5GHZ={0xf8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0xc, 0x1b, 0x16, 0x4, 0x12, 0x1, 0x24, 0x36, 0x48, 0x5, 0xc, 0x12, 0xfb525a1909056d49]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x5}, {0x4}, {0x1, 0xa}, {0x1, 0xa}, {0x4}, {0x5, 0x2}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x2, 0x5}, {0x1}, {0x7, 0xa}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0x1}, {0x6, 0x8}, {0x4, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0x3}, {0x6, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x7}, {0x7, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x6, 0xa}, {0x3, 0xa}, {0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x6}, {0x0, 0xa}, {0x7, 0x7}, {0x1, 0x8}, {0x3, 0x6}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0x8}, {0x6, 0x7}, {0x4, 0x9}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0xa}, {0x7, 0x4}, {0x3, 0x2}, {0x1, 0x8}, {0x3, 0x2}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x3}, {0x6, 0x3}, {0x0, 0xa}, {0x7, 0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0xa}, {0x4, 0x7}, {0x3, 0x6}, {0x7, 0x3}, {0x5, 0x8}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x8}, {0x0, 0x2}, {0x6, 0x6}, {0x3, 0xa}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x7}, {0x0, 0x2}, {0x4}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x9}, {0x1, 0x3}, {0x4, 0x6}, {0x2, 0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x4}, {0x5, 0x2}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {0x3, 0xa}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x9}, {0x7, 0x4}, {0x0, 0x7}, {0x4, 0x3}, {0x0, 0xa}, {0x6}, {0x4, 0x1}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xabc, 0xc, 0x5fbe, 0x0, 0xe, 0x6, 0xf61]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x5}, {0x2, 0xa}, {0x4, 0x1}, {0x6, 0x2}, {0x4}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x3, 0xa}, {0x4, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x2}, {0x5, 0x8}, {0x7, 0x4}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x4}, {0x5, 0x6}, {0x6, 0x7}, {0x0, 0x8}, {0x4, 0x2}, {0x6, 0x4}, {0x4, 0x5}, {0x4, 0x5}, {0x5, 0x6}, {0x6, 0x4}, {0x2, 0x9}, {0x2, 0x6}, {0x7, 0x8}, {0x7, 0x7}, {0x4, 0x5}, {0x3}, {0x4, 0x6}, {0x5, 0x4}, {0x3, 0x5}, {0x3, 0x4}, {0x7, 0x5}, {0x1}, {0x0, 0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x6, 0x8}, {0x3, 0x2}, {0x3}, {0x4, 0x8}, {0x4, 0x6}, {0x7, 0x1}, {0x3, 0x6}, {0x7, 0x5}, {0x4}, {0x6, 0x7}, {0x2, 0x7}, {0x0, 0x2}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x4}, {0x3, 0x8}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x100, 0x90d, 0x2, 0x81, 0x6, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6}, {0x4, 0x7}, {0x2, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x3}, {0x2, 0x7}, {0x7, 0x9}, {0x5, 0x8}, {0x4, 0x5}, {0x5, 0x3}, {0x5}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x4}, {0x2, 0x3}, {0x2, 0x9}, {0x5, 0x7}, {0x1, 0x6}, {0x5, 0x2}, {0x1, 0x6}, {0x3, 0x1}, {0x5, 0x9}, {0x5, 0x9}, {0x6, 0x3}, {0x3, 0x1}, {0x1, 0x8}, {0x3, 0xa}, {0x0, 0x8}, {0x5}, {0x0, 0x6}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0xdc7f, 0x9, 0x401, 0x3ff, 0x410c, 0xfff]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x6, 0x2, 0x4, 0x3, 0x7, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x84, 0xfb, 0x9, 0x5b8, 0x5, 0x81, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x60, 0xb, 0x1, 0x6c, 0x4, 0x2]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x5, 0x8001, 0x80, 0x0, 0x1, 0x4]}}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x8000, 0x0, 0xe21, 0x7, 0x1, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xd093, 0x8000, 0xb4ae, 0xd26, 0x0, 0x6, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x5}, {0x3}, {0x4, 0x8}, {0x5, 0x1}, {0x7, 0x5}, {0x7, 0x1}, {0x5, 0x6}, {0x3, 0x13}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x5}, {0x5, 0x9}, {}, {0x6, 0x1}, {0x5, 0x5}, {0x4, 0xa}, {0x0, 0x3}, {0x3}, {0x6, 0x4}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x9}, {0x4}, {0x1, 0x3}, {0x3, 0x4}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x5}, {0x4, 0x1}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x6}, {0x2, 0x7}, {0x5, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x19, 0xc, 0x48, 0xc, 0x60, 0xc, 0x60, 0x30, 0x35, 0x3, 0x18]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x37c019b6dbdf2df1, 0x9, 0x5, 0x6, 0x24, 0x30, 0x8, 0x16, 0x30, 0x2, 0x9, 0x60, 0x36, 0x18, 0x5, 0x3, 0x36, 0x1b, 0x24, 0x48, 0x16, 0x6, 0x60, 0x2, 0x9, 0x6, 0x6, 0x6c, 0x6, 0x5]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x3, 0x1b, 0x12, 0x2, 0x2, 0x6f, 0x6c, 0x18, 0x24, 0x1, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x7, 0xffc0, 0x7, 0x2ea, 0x46e, 0x8]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x1698}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000034c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000035c0)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003580)={&(0x7f0000003500)={0x48, r3, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x6, 0x18}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6_vti0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xe}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000003600)={r6, 0x1, 0xffffffffffffffff, 0x2}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000003680)={'wg2\x00', 0x0}) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000036c0)={0x0, @multicast1, @initdev}, &(0x7f0000003700)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000003740)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r13, &(0x7f0000003880)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003840)={&(0x7f0000003780)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r14}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r15}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r16}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r17, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003980)={&(0x7f0000003900)={0x68, 0x0, 0xed091b34951414cd, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x32, 0x5b, "7fa8e6bf328e18849b514c0c72e157d395342cd70ef71233764f81648fcdc509d23853384f6baf143ca97442713e"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xc}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048814}, 0x40054) socket$netlink(0x10, 0x3, 0xe) r18 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003a40), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x2c, r18, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9a}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 1.480805001s ago: executing program 4 (id=6418): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) pipe(&(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x700) 1.444970791s ago: executing program 7 (id=6419): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x400000000010, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0xfff1, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "418a5c362acdead6db6a51fe74925113"}]}}]}, 0x50}}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xc, 0x103ba, 0x1}, 0x48) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0xfffc, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}]}}}}}}}}, 0x0) 1.426359363s ago: executing program 4 (id=6420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x1, 0xc5, 0x5, 0x2, 0x9, 0xf7, 0xbd1e3ba, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.315236515s ago: executing program 7 (id=6422): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x1d, 0x3, 'dh\x00', 0x0, 0x4, 0x73}, 0x2c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e20, 0x3, 'lc\x00', 0xb, 0x323b, 0x79}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 1.265253358s ago: executing program 4 (id=6424): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'geneve0\x00'}}, 0x1e) close(r0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'P#\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000100)=0x80, 0x80000) socket$netlink(0x10, 0x3, 0x13) setsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000140)="93197feb32191c8d959cbeb4d1b7", 0xe) 1.114049042s ago: executing program 5 (id=6425): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 1.064670049s ago: executing program 4 (id=6426): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x2009) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x1e, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fbdbdf253a00000008000300", @ANYRES32=r8, @ANYBLOB="04000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) close(r6) listen(r5, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$netlink(0x10, 0x3, 0x9bb44460a73d68a8) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) recvmmsg(r0, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0) 983.610334ms ago: executing program 7 (id=6427): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x22004040) close(0xffffffffffffffff) sendmmsg$alg(r0, &(0x7f00000051c0)=[{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000300)}, {0x0}, {&(0x7f0000000480)}], 0x4, 0x0, 0x0, 0x4040000}], 0x1, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005340)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x20000041) 963.15448ms ago: executing program 4 (id=6428): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x5, 0x1, 0x0, 0x0, 0xc, 0xffff}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b32, &(0x7f0000000040)) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(cipher_null)\x00'}, 0x58) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000300)={0x0, 0x4}, 0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) 907.27483ms ago: executing program 7 (id=6429): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000000)={r1, 0x7fff, 0x2, "fcb56caa41edfea42a746278ec07"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x20000000, 0x8000002}}) 883.631194ms ago: executing program 5 (id=6430): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240)={0x8000001}, 0x8) close(r1) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000ac0)=0xb3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r3, 0xb03}, 0x14}}, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000080)=0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x70bd28, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xee}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) 800.635924ms ago: executing program 8 (id=6431): r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="90000000", @ANYRES32=0x0, @ANYBLOB="8b04040000"], 0x90}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x33cd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001010}, 0x40000) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173) 692.642218ms ago: executing program 7 (id=6432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r1}, 0x94) r3 = socket(0x15, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1}}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) getsockopt(r3, 0x200000000114, 0x5, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) socket(0x840000000002, 0x3, 0x100) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 686.636806ms ago: executing program 8 (id=6433): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000001900ff0000000000185100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 613.836451ms ago: executing program 5 (id=6434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x1, 0xc5, 0x5, 0x2, 0x9, 0xf7, 0xbd1e3ba, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 544.989103ms ago: executing program 8 (id=6435): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc00000000000fffac1414bb00000000000000000000000000000400000000000a0060003b00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000600"/112], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/78, 0x4e, 0x40000000, &(0x7f0000000200)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/110], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0xff03, 0x0) write$nci(r5, &(0x7f0000000280)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x96, {0x3, 0xf8, "88473a62c1807a08638f9f14e73831ba8d261390dc0531c6ddf9b537b6665ad492e7d7ff8b3ecdfc231d2e714a0df63e073077cef11e7c2591fe3df7a3d088b746b6a88fc800b328ca62000e34048ae7ba4693e769bd2d8192735ee2455571fdedafccd3feb06057f22443721716"}}, 0x73) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/112], 0xb8}}, 0x4000) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/112], 0xb8}}, 0x4000) 439.793479ms ago: executing program 6 (id=6436): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x258, r1, 0x310, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7c}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0x87, 0x2a, [@chsw_timing={0x68, 0x4, {0x1, 0x101}}, @preq={0x82, 0x78, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x8, 0xf, 0xe2d, @device_a, 0xfffffff5, @value=@broadcast, 0x100, 0x1b, 0x8, [{{0x0, 0x0, 0x1}, @broadcast, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x5}, {{}, @device_a, 0x4b9}, {{0x1, 0x0, 0x1}, @device_b, 0xe9}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{}, @broadcast, 0x7fff}, {{0x1}, @broadcast, 0x8}, {{0x1}, @device_a, 0x9}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_IE={0x110, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0xaf48, @void, @val=0x25, @val="bf95f2c36efd05daae6db048d992d6c6"}}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x3, 0x0, {0x7, 0x61f, 0x0, 0x398, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x5, 0x40}}, @gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0x9e, {0x23, 0x69, 0xdd, "3d391f164c06bfa469df614c4b469b942734572cadcb653cb2f4becc0b424cdfd02f163396a030b134226d087406f268a02718f9690ebd0e01eb553fe89edf653ec663e3355eeb25d18c69f2d98821c725f482a218ac69a5198567bc0f79bd33012cd7c57204e91880505ac71dfd6c65ba1efb97e9a7b314838dbb9174ba7b78d519dc229422bb9ca1cc506d59226f7cbc995ce153e0a4016329ea"}}, @mesh_chsw={0x76, 0x6, {0x9, 0x0, 0x13, 0x4}}, @chsw_timing={0x68, 0x4, {0x8, 0x6}}, @peer_mgmt={0x75, 0x18, {0x0, 0x400, @val=0x6, @val=0x3f, @val="80bb9fd9af8d51240cc9a812f8c188d3"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x96, 0x2a, [@link_id={0x65, 0x12}, @cf={0x4, 0x6, {0x9, 0x0, 0xd, 0x10}}, @random_vendor={0xdd, 0x5e, "2994a8182e72ae61de9c77264bb36e817b4c052535e20e664828fc136950617207164878911272d4a6cd8c7af3a7bbb000d181a196cd8248be8cd6bc126adc55616a70292a39c4577d52b283f2e7b9c95ece7d75a9cc3acc6a75f45a33c5"}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x4, 0x3, 0x120, 0x1}}, @peer_mgmt={0x75, 0x4, {0x0, 0xa6a, @void, @void, @void}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x130, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x62}}}}, [@NL80211_ATTR_KEYS={0xec, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, {0x4}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "31d5251690"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9dabd1c9f772f94b8af3a26729"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d67c502fd191501ef870a4b5f2"}, @NL80211_KEY_SEQ={0x5, 0x4, "c7"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cdaec494bcac0e69b64c2c23dc"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, @NL80211_ATTR_HIDDEN_SSID={0xc, 0x7e, @random="48bda748bba70392"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0xb}, {0x12, 0x1}, {0x5, 0x1}, {0x6}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xf0, 0x1, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1f}}]}, @CTA_EXPECT_MASK={0x94, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0xf0}, 0x1, 0x0, 0x0, 0x45}, 0x881) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'gre0\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x40, 0x7, 0x8, 0x0, {{0x37, 0x4, 0x0, 0x7, 0xdc, 0x66, 0x0, 0x1, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x44, 0xeb, 0x1, 0x3, [{@multicast1, 0x100}, {@multicast2, 0x4}, {@empty}, {@broadcast, 0x8}, {@empty, 0x6}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x1}, {@empty, 0x3}]}, @timestamp_addr={0x44, 0x24, 0x1b, 0x1, 0x4, [{@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0x5}, {@loopback}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x6, "b7c13136"}, @generic={0x89, 0x9, "2d55ac4f22101c"}, @rr={0x7, 0x13, 0x3c, [@private=0xa010101, @rand_addr=0x64010100, @rand_addr=0x64010101, @multicast2]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x9e, 0x3, 0x5, [{@loopback}, {@broadcast}, {@local}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xe1, 0x1, 0xb, [{@private=0xa010102, 0x1}, {@multicast1, 0x2}]}]}}}}}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000980)={'ip6gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'bond_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000b00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xac, r4, 0x10, 0xffff, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001300)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000012c0)={&(0x7f0000000b80)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0x80000001}, 0x2b, 0x7b, 0x1, 0x0, 0x1f, 'syz1\x00', "9b4735e8267b9ac01b080e99f16e0802f72dc6d4fd61327112851b163d285689", "ee2788b79746abe1c1193b0986e316612de36bc79339fb242a0fc044d681ab5c", [{0xfff, 0x3, {0x3, 0x2}}, {0x5, 0x7, {0x0, 0x23}}, {0x9, 0x9, {0x0, 0x8}}, {0x0, 0x1, {0x0, 0x9}}, {0x7, 0xc8f, {0x2, 0x8394}}, {0x1000, 0x5, {0x1, 0x5}}, {0x9, 0xf, {0x2, 0x6}}, {0x56e9, 0x9, {0x1, 0x9}}, {0x2, 0x4, {0x3, 0xe}}, {0x4, 0x1d, {0x0, 0x4}}, {0x893c, 0x1a00, {0x1, 0xfffffb06}}, {0x3, 0xff, {0x0, 0x9}}, {0xf30b, 0x57, {0x0, 0x5}}, {0x2ec6, 0x9, {0x2, 0x80000001}}, {0xf61, 0x1d5, {0x1, 0x7f}}, {0x1000, 0x101, {0x3, 0x5}}, {0x1dc, 0x4, {0x0, 0xdf}}, {0x7, 0x3, {0x3, 0x8000}}, {0x6, 0x0, {0x1, 0xbc8}}, {0x0, 0x7, {0x0, 0x336}}, {0x5, 0x1, {0x2, 0x6}}, {0x5831, 0x81, {0x1, 0x6}}, {0x9, 0x2, {0x3, 0x7}}, {0x5f, 0x2, {0x1, 0x5}}, {0xf4, 0x40, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x8000}}, {0x5, 0xfb40, {0x3, 0x7fff}}, {0x3000, 0x2, {0x1, 0x4}}, {0x3, 0x8001, {0x0, 0x530000}}, {0x9, 0x3, {0x2, 0x1}}, {0xa17, 0x377, {0x3, 0x10001}}, {0x8000, 0xa5f, {0x3, 0x1000}}, {0x3, 0x1, {0x0, 0x7}}, {0x4, 0x8, {0x3, 0xf49}}, {0x5, 0x4cc3, {0x3, 0x2}}, {0xd1, 0x8, {0x0, 0x1}}, {0x7, 0x6, {0x1, 0x8001}}, {0x8956, 0x9a, {0x1, 0x7}}, {0x7, 0x6, {0x2, 0x5c9}}, {0x7, 0x800, {0x1, 0x66ff}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x9e, 0xf, 0x1, 0x8, 0x1c, 'syz0\x00', "5775cbd89687f2da5883100e2868c702dd7fe68c0fd9e1ec7d2b33a38a0ec421", "9ce4e294f01798a4cdfa4679f20f38a0418563ee3d51860579f0144d38179630", [{0x4, 0x0, {0x3, 0x80000000}}, {0xa, 0x16, {0x3, 0x6}}, {0xd74a, 0xcb4d, {0x0, 0xffffffff}}, {0xf2, 0x1ff, {0x2, 0x7f}}, {0x7, 0x265, {0x0, 0x6}}, {0x5, 0x3, {0x1, 0x2}}, {0x1000, 0xff93, {0x1, 0xe5}}, {0x5, 0x6, {0x3, 0xfffffff9}}, {0x0, 0x6, {0x2, 0x2}}, {0x8, 0x7fff, {0x3, 0x9}}, {0xe8f9, 0x6, {0x3, 0x2}}, {0x6, 0x559, {0x2, 0xea0}}, {0x3ff, 0xffff, {0x1, 0x8b}}, {0x3, 0x2, {0x3, 0x4}}, {0x8, 0x6, {0x1, 0x6}}, {0x9, 0xfff8, {0x0, 0x6}}, {0x4, 0x6, {0x1, 0xfffffff9}}, {0x387, 0xfff8, {0x1, 0x3298}}, {0x6f, 0x8000, {0x0, 0x6}}, {0x1, 0x4, {0x2, 0xfffffffa}}, {0xf, 0x5, {0x2, 0xcf84}}, {0x800, 0x60, {0x0, 0x7}}, {0x0, 0x7, {0x2, 0x1}}, {0x2, 0x8, {0x3, 0x4fa}}, {0x5, 0x1, {0x3, 0x6}}, {0x822, 0xc, {0x3, 0x9}}, {0x1ff, 0x1, {0x0, 0x9}}, {0x80, 0x6, {0x2, 0x2}}, {0x4, 0xd, {0x1, 0x7}}, {0x101, 0x7, {0x1, 0x8000}}, {0xffff, 0x3, {0x3, 0x6}}, {0x9, 0x1, {0x2, 0x9}}, {0x3, 0x8001, {0x1, 0x2}}, {0xa, 0x1, {0x0, 0x3ff}}, {0x1, 0x7, {0x2, 0x2}}, {0xd, 0x4, {0x3, 0x3}}, {0x3, 0x5, {0x1, 0x1000}}, {0x6f0, 0x45, {0x2}}, {0xa, 0x4, {0x1, 0x400}}, {0x10, 0x6, {0x2, 0xff}}]}}}, {{0x254, 0x1, {{0x3, 0xa}, 0x0, 0x9, 0x10, 0xc, 0x1, 'syz0\x00', "6e4c855ea59ad8d07b558bdff3c44886b29ee3e3519146afd6907cdbb03fd548", "efb9cda0070430ac8803fa4432a63c535802faf6ccb9cf9b1f2f7a5629540e38", [{0x3, 0x4, {0x3, 0x100}}, {0x6, 0xb2b}, {0x5, 0xb1, {0x1, 0x7}}, {0x1000, 0xf, {0x0, 0x6}}, {0x8, 0x2, {0x3}}, {0x4, 0x9, {0x0, 0x6}}, {0x1, 0x8, {0x1, 0x9c}}, {0x2, 0xff80, {0x0, 0xfffffff8}}, {0xffeb, 0x1, {0x1, 0x96e}}, {0x200, 0x5, {0x3, 0x1}}, {0x6, 0x8, {0x1, 0x5}}, {0x6, 0x6, {0x0, 0x6}}, {0x5, 0x0, {0x3, 0x7282}}, {0xfffa, 0x7, {0x0, 0x4}}, {0x9, 0x3, {0x2, 0x48cd}}, {0x9, 0xfffa, {0x1, 0x80000001}}, {0x2, 0xe, {0x2}}, {0x3275, 0x6, {0x1, 0x9403}}, {0x8, 0xff, {0x2, 0xffffffff}}, {0x46, 0x5, {0x1, 0x7}}, {0x400, 0x2e5, {0x2, 0x94b8}}, {0xa7, 0xccf, {0x3}}, {0x3, 0x4, {0x2, 0x192c}}, {0x3, 0x4, {0x0, 0x5}}, {0x3, 0x8, {0x0, 0x2c4b}}, {0x7, 0x8, {0x3, 0x3}}, {0x0, 0x8000, {0x631ac58cf683c424, 0x3}}, {0x1, 0x2, {0x0, 0x1}}, {0x0, 0x0, {0x0, 0x80}}, {0x5, 0x7cb4, {0x2, 0xfffffffe}}, {0x953, 0x1, {0x3}}, {0xf9b, 0x3, {0x2, 0x9}}, {0x3, 0x1, {0x3, 0x3}}, {0xb, 0x2, {0x2, 0x1}}, {0xfe01, 0x1000, {0x1, 0xaaf}}, {0x400, 0x4, {0x2, 0x5}}, {0x5, 0x17, {0x3, 0xff}}, {0x5, 0x56, {0x2, 0x5}}, {0x7, 0xffff, {0x3, 0x4}}, {0x2, 0x6, {0x2, 0x7fff}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000010}, 0x400c000) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r8, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r9, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x404000c) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x80000, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000015c0)={'veth0_to_hsr\x00', 0x100}) (async) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001640), r3) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x30, r11, 0x800, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0xc054}, 0x20044000) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001780), r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000017c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000001800)=[0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f0000001880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001900), &(0x7f0000001940), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000001980)}}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001c00)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)={0xb4, r12, 0x2, 0x70bd2d, 0x5, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r13}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48894}, 0x1) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000001c40)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001c80)={'veth0_vlan\x00'}) (async) socketpair(0xd, 0x3, 0x10001, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_NETID(r14, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000000) 372.770491ms ago: executing program 4 (id=6437): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="010000"], 0x3c}}, 0x0) 305.96545ms ago: executing program 5 (id=6438): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) (fail_nth: 2) 236.653315ms ago: executing program 6 (id=6439): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x22004040) close(0xffffffffffffffff) sendmmsg$alg(r0, &(0x7f00000051c0)=[{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000300)}, {0x0}, {&(0x7f0000000480)}], 0x4, 0x0, 0x0, 0x4040000}], 0x1, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005340)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x20000041) 31.571439ms ago: executing program 5 (id=6440): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 0s ago: executing program 5 (id=6441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): I: 0000000000000004 RDI: 0000000000000004 [ 411.783658][T19665] RBP: 00007fb7ea5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 411.783671][T19665] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 411.783683][T19665] R13: 00007fb7ec5b6038 R14: 00007fb7ec5b5fa0 R15: 00007fffe779a958 [ 411.783717][T19665] [ 412.516903][T19675] netlink: 'syz.4.5459': attribute type 11 has an invalid length. [ 412.563212][T19675] netlink: 'syz.4.5459': attribute type 11 has an invalid length. [ 412.574111][T19675] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5459'. [ 412.585519][T19680] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5460'. [ 412.605468][T19679] netlink: 'syz.4.5459': attribute type 7 has an invalid length. [ 412.616105][T19673] netlink: 'syz.4.5459': attribute type 11 has an invalid length. [ 412.663526][T19673] netlink: 'syz.4.5459': attribute type 11 has an invalid length. [ 412.702594][T19673] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5459'. [ 412.843498][T19694] FAULT_INJECTION: forcing a failure. [ 412.843498][T19694] name failslab, interval 1, probability 0, space 0, times 0 [ 412.919921][T19694] CPU: 1 UID: 0 PID: 19694 Comm: syz.2.5468 Not tainted syzkaller #0 PREEMPT(full) [ 412.919948][T19694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.919960][T19694] Call Trace: [ 412.919968][T19694] [ 412.919977][T19694] dump_stack_lvl+0x189/0x250 [ 412.920005][T19694] ? __pfx____ratelimit+0x10/0x10 [ 412.920032][T19694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.920056][T19694] ? __pfx__printk+0x10/0x10 [ 412.920087][T19694] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 412.920113][T19694] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.920144][T19694] should_fail_ex+0x414/0x560 [ 412.920175][T19694] should_failslab+0xa8/0x100 [ 412.920205][T19694] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 412.920233][T19694] ? __alloc_skb+0x112/0x2d0 [ 412.920267][T19694] __alloc_skb+0x112/0x2d0 [ 412.920300][T19694] create_monitor_ctrl_open+0x156/0x880 [ 412.920339][T19694] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 412.920382][T19694] ? bpf_lsm_capable+0x9/0x20 [ 412.920419][T19694] hci_sock_ioctl+0x2f2/0x910 [ 412.920454][T19694] sock_do_ioctl+0xd9/0x300 [ 412.920481][T19694] ? __pfx_sock_do_ioctl+0x10/0x10 [ 412.920502][T19694] ? __lock_acquire+0xab9/0xd20 [ 412.920547][T19694] sock_ioctl+0x576/0x790 [ 412.920573][T19694] ? __pfx_sock_ioctl+0x10/0x10 [ 412.920596][T19694] ? __fget_files+0x2a/0x420 [ 412.920624][T19694] ? __fget_files+0x3a0/0x420 [ 412.920651][T19694] ? __fget_files+0x2a/0x420 [ 412.920683][T19694] ? bpf_lsm_file_ioctl+0x9/0x20 [ 412.920707][T19694] ? __pfx_sock_ioctl+0x10/0x10 [ 412.920730][T19694] __se_sys_ioctl+0xfc/0x170 [ 412.920756][T19694] do_syscall_64+0xfa/0x3b0 [ 412.920782][T19694] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.920808][T19694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.920827][T19694] ? clear_bhb_loop+0x60/0xb0 [ 412.920851][T19694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.920870][T19694] RIP: 0033:0x7f94c3f8ebe9 [ 412.920887][T19694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.920904][T19694] RSP: 002b:00007f94c4d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.920928][T19694] RAX: ffffffffffffffda RBX: 00007f94c41b5fa0 RCX: 00007f94c3f8ebe9 [ 412.920943][T19694] RDX: 0000000000000000 RSI: 00000000800448d3 RDI: 0000000000000004 [ 412.920955][T19694] RBP: 00007f94c4d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 412.920967][T19694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.920978][T19694] R13: 00007f94c41b6038 R14: 00007f94c41b5fa0 R15: 00007ffe1211d948 [ 412.921010][T19694] [ 413.201955][T19706] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5470'. [ 413.215328][T19702] FAULT_INJECTION: forcing a failure. [ 413.215328][T19702] name failslab, interval 1, probability 0, space 0, times 0 [ 413.264451][T19702] CPU: 0 UID: 0 PID: 19702 Comm: syz.0.5470 Not tainted syzkaller #0 PREEMPT(full) [ 413.264480][T19702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.264492][T19702] Call Trace: [ 413.264501][T19702] [ 413.264510][T19702] dump_stack_lvl+0x189/0x250 [ 413.264538][T19702] ? __pfx____ratelimit+0x10/0x10 [ 413.264564][T19702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.264585][T19702] ? __pfx__printk+0x10/0x10 [ 413.264617][T19702] ? __pfx___might_resched+0x10/0x10 [ 413.264639][T19702] should_fail_ex+0x414/0x560 [ 413.264668][T19702] should_failslab+0xa8/0x100 [ 413.264696][T19702] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 413.264722][T19702] ? __alloc_skb+0x112/0x2d0 [ 413.264752][T19702] __alloc_skb+0x112/0x2d0 [ 413.264782][T19702] netlink_dump+0x1b7/0xe90 [ 413.264807][T19702] ? __pfx__copy_to_iter+0x10/0x10 [ 413.264823][T19702] ? __skb_try_recv_from_queue+0x58f/0x730 [ 413.264851][T19702] ? __pfx_netlink_dump+0x10/0x10 [ 413.264899][T19702] netlink_recvmsg+0x676/0xa30 [ 413.264934][T19702] ? __pfx_netlink_recvmsg+0x10/0x10 [ 413.264966][T19702] ? aa_sock_msg_perm+0xf1/0x1d0 [ 413.264995][T19702] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 413.265014][T19702] ? security_socket_recvmsg+0x7e/0x2e0 [ 413.265054][T19702] ? __pfx_netlink_recvmsg+0x10/0x10 [ 413.265099][T19702] sock_recvmsg+0x229/0x270 [ 413.265128][T19702] ____sys_recvmsg+0x1c9/0x460 [ 413.265157][T19702] ? __pfx_____sys_recvmsg+0x10/0x10 [ 413.265193][T19702] ? import_iovec+0x74/0xa0 [ 413.265218][T19702] ___sys_recvmsg+0x1b5/0x510 [ 413.265243][T19702] ? __pfx____sys_recvmsg+0x10/0x10 [ 413.265289][T19702] ? __fget_files+0x3a0/0x420 [ 413.265329][T19702] __x64_sys_recvmsg+0x198/0x260 [ 413.265353][T19702] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 413.265382][T19702] ? __pfx_ksys_write+0x10/0x10 [ 413.265405][T19702] ? rcu_is_watching+0x15/0xb0 [ 413.265428][T19702] ? do_syscall_64+0xbe/0x3b0 [ 413.265460][T19702] do_syscall_64+0xfa/0x3b0 [ 413.265490][T19702] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.265515][T19702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.265533][T19702] ? clear_bhb_loop+0x60/0xb0 [ 413.265556][T19702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.265574][T19702] RIP: 0033:0x7f9043d8ebe9 [ 413.265591][T19702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.265608][T19702] RSP: 002b:00007f9044c52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 413.265628][T19702] RAX: ffffffffffffffda RBX: 00007f9043fb5fa0 RCX: 00007f9043d8ebe9 [ 413.265642][T19702] RDX: 0000000000000002 RSI: 00002000000006c0 RDI: 0000000000000004 [ 413.265654][T19702] RBP: 00007f9044c52090 R08: 0000000000000000 R09: 0000000000000000 [ 413.265666][T19702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.265676][T19702] R13: 00007f9043fb6038 R14: 00007f9043fb5fa0 R15: 00007ffc48acb148 [ 413.265707][T19702] [ 413.559095][T19707] tipc: Enabled bearer , priority 0 [ 413.625624][T19707] tipc: Resetting bearer [ 413.646952][T19705] tipc: Disabling bearer [ 414.821817][T19731] FAULT_INJECTION: forcing a failure. [ 414.821817][T19731] name failslab, interval 1, probability 0, space 0, times 0 [ 414.897221][T19731] CPU: 0 UID: 0 PID: 19731 Comm: syz.4.5485 Not tainted syzkaller #0 PREEMPT(full) [ 414.897250][T19731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.897263][T19731] Call Trace: [ 414.897271][T19731] [ 414.897281][T19731] dump_stack_lvl+0x189/0x250 [ 414.897311][T19731] ? __pfx____ratelimit+0x10/0x10 [ 414.897341][T19731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.897367][T19731] ? __pfx__printk+0x10/0x10 [ 414.897404][T19731] ? __pfx___might_resched+0x10/0x10 [ 414.897422][T19731] ? fs_reclaim_acquire+0x7d/0x100 [ 414.897460][T19731] should_fail_ex+0x414/0x560 [ 414.897493][T19731] should_failslab+0xa8/0x100 [ 414.897527][T19731] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 414.897557][T19731] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 414.897583][T19731] ? __alloc_skb+0x112/0x2d0 [ 414.897619][T19731] __alloc_skb+0x112/0x2d0 [ 414.897655][T19731] rtmsg_ifinfo_build_skb+0x84/0x260 [ 414.897692][T19731] rtnetlink_event+0x1b7/0x270 [ 414.897727][T19731] notifier_call_chain+0x1b3/0x3e0 [ 414.897759][T19731] netif_set_mac_address+0x37c/0x4c0 [ 414.897789][T19731] ? __pfx_netif_set_mac_address+0x10/0x10 [ 414.897813][T19731] ? down_write+0x162/0x1f0 [ 414.897835][T19731] ? netdev_name_node_lookup+0xdf/0x120 [ 414.897870][T19731] dev_set_mac_address_user+0x137/0x270 [ 414.897909][T19731] dev_ioctl+0x7b4/0x1150 [ 414.897949][T19731] sock_do_ioctl+0x22c/0x300 [ 414.897979][T19731] ? __pfx_sock_do_ioctl+0x10/0x10 [ 414.898002][T19731] ? __lock_acquire+0xab9/0xd20 [ 414.898052][T19731] sock_ioctl+0x576/0x790 [ 414.898080][T19731] ? __pfx_sock_ioctl+0x10/0x10 [ 414.898105][T19731] ? __fget_files+0x2a/0x420 [ 414.898136][T19731] ? __fget_files+0x3a0/0x420 [ 414.898166][T19731] ? __fget_files+0x2a/0x420 [ 414.898203][T19731] ? bpf_lsm_file_ioctl+0x9/0x20 [ 414.898230][T19731] ? __pfx_sock_ioctl+0x10/0x10 [ 414.898255][T19731] __se_sys_ioctl+0xfc/0x170 [ 414.898283][T19731] do_syscall_64+0xfa/0x3b0 [ 414.898312][T19731] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.898340][T19731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.898361][T19731] ? clear_bhb_loop+0x60/0xb0 [ 414.898387][T19731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.898408][T19731] RIP: 0033:0x7feeb1b8ebe9 [ 414.898426][T19731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.898445][T19731] RSP: 002b:00007feeb297c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.898467][T19731] RAX: ffffffffffffffda RBX: 00007feeb1db5fa0 RCX: 00007feeb1b8ebe9 [ 414.898483][T19731] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000009 [ 414.898497][T19731] RBP: 00007feeb297c090 R08: 0000000000000000 R09: 0000000000000000 [ 414.898509][T19731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.898520][T19731] R13: 00007feeb1db6038 R14: 00007feeb1db5fa0 R15: 00007ffc39250fa8 [ 414.898562][T19731] [ 415.267351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.459985][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.477873][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.485952][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.494585][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.503067][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.536568][T19736] netlink: 'syz.4.5487': attribute type 1 has an invalid length. [ 415.548116][T19736] netlink: 'syz.4.5487': attribute type 1 has an invalid length. [ 415.560701][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 415.570432][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 415.581537][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 415.588861][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 415.610805][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 415.617910][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 415.628373][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 415.635576][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 415.644575][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 415.645152][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.741062][T19741] tipc: Enabling of bearer rejected, already enabled [ 415.782060][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.795452][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.804332][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.812966][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.820946][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 416.082302][T19754] FAULT_INJECTION: forcing a failure. [ 416.082302][T19754] name failslab, interval 1, probability 0, space 0, times 0 [ 416.109359][T19754] CPU: 1 UID: 0 PID: 19754 Comm: syz.4.5490 Not tainted syzkaller #0 PREEMPT(full) [ 416.109385][T19754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.109397][T19754] Call Trace: [ 416.109404][T19754] [ 416.109413][T19754] dump_stack_lvl+0x189/0x250 [ 416.109442][T19754] ? __pfx____ratelimit+0x10/0x10 [ 416.109469][T19754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.109497][T19754] ? __pfx__printk+0x10/0x10 [ 416.109527][T19754] ? __lock_acquire+0xab9/0xd20 [ 416.109566][T19754] should_fail_ex+0x414/0x560 [ 416.109597][T19754] should_failslab+0xa8/0x100 [ 416.109627][T19754] kmem_cache_alloc_noprof+0x73/0x3c0 [ 416.109653][T19754] ? skb_clone+0x212/0x3a0 [ 416.109678][T19754] skb_clone+0x212/0x3a0 [ 416.109702][T19754] __netlink_deliver_tap+0x404/0x850 [ 416.109744][T19754] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.109774][T19754] netlink_deliver_tap+0x19c/0x1b0 [ 416.109803][T19754] netlink_unicast+0x7fa/0x9e0 [ 416.109837][T19754] ? __pfx_netlink_unicast+0x10/0x10 [ 416.109865][T19754] ? netlink_sendmsg+0x642/0xb30 [ 416.109892][T19754] ? skb_put+0x11b/0x210 [ 416.109924][T19754] netlink_sendmsg+0x805/0xb30 [ 416.109962][T19754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.109995][T19754] ? aa_sock_msg_perm+0xf1/0x1d0 [ 416.110027][T19754] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.110048][T19754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.110078][T19754] __sock_sendmsg+0x219/0x270 [ 416.110106][T19754] ____sys_sendmsg+0x505/0x830 [ 416.110137][T19754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.110167][T19754] ? import_iovec+0x74/0xa0 [ 416.110193][T19754] ___sys_sendmsg+0x21f/0x2a0 [ 416.110216][T19754] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.110276][T19754] ? __fget_files+0x2a/0x420 [ 416.110304][T19754] ? __fget_files+0x3a0/0x420 [ 416.110345][T19754] __x64_sys_sendmsg+0x19b/0x260 [ 416.110367][T19754] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.110398][T19754] ? __pfx_ksys_write+0x10/0x10 [ 416.110420][T19754] ? rcu_is_watching+0x15/0xb0 [ 416.110446][T19754] ? do_syscall_64+0xbe/0x3b0 [ 416.110478][T19754] do_syscall_64+0xfa/0x3b0 [ 416.110504][T19754] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.110529][T19754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.110548][T19754] ? clear_bhb_loop+0x60/0xb0 [ 416.110572][T19754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.110590][T19754] RIP: 0033:0x7feeb1b8ebe9 [ 416.110607][T19754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.110623][T19754] RSP: 002b:00007feeb297c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.110644][T19754] RAX: ffffffffffffffda RBX: 00007feeb1db5fa0 RCX: 00007feeb1b8ebe9 [ 416.110658][T19754] RDX: 0000000000040094 RSI: 0000200000000100 RDI: 0000000000000003 [ 416.110670][T19754] RBP: 00007feeb297c090 R08: 0000000000000000 R09: 0000000000000000 [ 416.110682][T19754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.110705][T19754] R13: 00007feeb1db6038 R14: 00007feeb1db5fa0 R15: 00007ffc39250fa8 [ 416.110734][T19754] [ 416.473008][T19732] chnl_net:caif_netlink_parms(): no params data found [ 416.613764][T19760] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5492'. [ 416.676030][T19758] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5492'. [ 416.754294][T19737] chnl_net:caif_netlink_parms(): no params data found [ 416.781011][T19732] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.788551][T19732] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.795762][T19732] bridge_slave_0: entered allmulticast mode [ 416.803477][T19732] bridge_slave_0: entered promiscuous mode [ 416.839311][T19732] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.846636][T19732] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.860889][T19732] bridge_slave_1: entered allmulticast mode [ 416.869108][T19732] bridge_slave_1: entered promiscuous mode [ 416.931390][T19732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.953016][T19732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.008513][T19734] chnl_net:caif_netlink_parms(): no params data found [ 417.020612][T19770] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5493'. [ 417.030152][T19767] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5493'. [ 417.087054][T19732] team0: Port device team_slave_0 added [ 417.096764][T19732] team0: Port device team_slave_1 added [ 417.145379][T19737] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.158135][T19737] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.168019][T19737] bridge_slave_0: entered allmulticast mode [ 417.175945][T19737] bridge_slave_0: entered promiscuous mode [ 417.240371][T19737] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.248381][T19737] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.255581][T19737] bridge_slave_1: entered allmulticast mode [ 417.263559][T19737] bridge_slave_1: entered promiscuous mode [ 417.337684][T19737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.348261][T19732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.355234][T19732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.381802][T19732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.393819][T19742] chnl_net:caif_netlink_parms(): no params data found [ 417.431611][T19737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.457948][T19732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.464925][T19732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.491340][T19732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.550367][T19737] team0: Port device team_slave_0 added [ 417.577989][ T5871] Bluetooth: hci0: command tx timeout [ 417.605526][T19734] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.612904][T19734] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.621013][T19734] bridge_slave_0: entered allmulticast mode [ 417.630141][T19734] bridge_slave_0: entered promiscuous mode [ 417.640287][T19737] team0: Port device team_slave_1 added [ 417.647798][T19734] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.654959][T19734] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.668249][T19734] bridge_slave_1: entered allmulticast mode [ 417.676105][T19734] bridge_slave_1: entered promiscuous mode [ 417.737719][ T5871] Bluetooth: hci2: command tx timeout [ 417.737974][ T5867] Bluetooth: hci3: command tx timeout [ 417.773827][T19732] hsr_slave_0: entered promiscuous mode [ 417.781094][T19732] hsr_slave_1: entered promiscuous mode [ 417.787874][T19732] debugfs: 'hsr0' already exists in 'hsr' [ 417.793629][T19732] Cannot create hsr debugfs directory [ 417.829877][T19734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.843047][T19734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.890209][T19742] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.900919][T19742] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.905560][ T5867] Bluetooth: hci4: command tx timeout [ 417.908912][T19742] bridge_slave_0: entered allmulticast mode [ 417.922142][T19742] bridge_slave_0: entered promiscuous mode [ 417.930228][T19737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.937825][T19737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.964225][T19737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.979821][T19737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.986869][T19737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.013050][T19737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.053178][T19742] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.060531][T19742] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.068971][T19742] bridge_slave_1: entered allmulticast mode [ 418.076578][T19742] bridge_slave_1: entered promiscuous mode [ 418.140298][T19734] team0: Port device team_slave_0 added [ 418.174967][T19742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.188410][T19734] team0: Port device team_slave_1 added [ 418.229189][T19742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.341069][T19734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.352475][T19734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.380180][T19734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.399347][T19737] hsr_slave_0: entered promiscuous mode [ 418.406279][T19737] hsr_slave_1: entered promiscuous mode [ 418.413270][T19737] debugfs: 'hsr0' already exists in 'hsr' [ 418.419890][T19737] Cannot create hsr debugfs directory [ 418.433319][T19742] team0: Port device team_slave_0 added [ 418.440343][T19734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.448209][T19734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.476236][T19734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.497349][T19742] team0: Port device team_slave_1 added [ 418.609315][T19742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.616328][T19742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.643713][T19742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.689100][T19742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.696192][T19742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.722718][T19742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.745313][T19734] hsr_slave_0: entered promiscuous mode [ 418.752455][T19734] hsr_slave_1: entered promiscuous mode [ 418.758944][T19734] debugfs: 'hsr0' already exists in 'hsr' [ 418.764703][T19734] Cannot create hsr debugfs directory [ 418.912306][T19742] hsr_slave_0: entered promiscuous mode [ 418.919082][T19742] hsr_slave_1: entered promiscuous mode [ 418.925321][T19742] debugfs: 'hsr0' already exists in 'hsr' [ 418.933285][T19742] Cannot create hsr debugfs directory [ 419.131818][T19732] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 419.160316][T19732] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 419.206478][T19732] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 419.221258][T19732] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 419.402833][T19737] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 419.418071][T19737] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 419.429473][T19737] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 419.453699][T19737] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 419.547459][T19734] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 419.562225][T19734] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 419.574970][T19734] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 419.586474][T19734] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 419.657542][ T5867] Bluetooth: hci0: command tx timeout [ 419.688240][T19742] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 419.711922][T19742] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 419.723311][T19742] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 419.770330][T19742] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 419.802885][T19732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.823760][ T5867] Bluetooth: hci3: command tx timeout [ 419.827533][ T5871] Bluetooth: hci2: command tx timeout [ 419.905973][T19732] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.934919][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.942136][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.977014][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.977388][ T5871] Bluetooth: hci4: command tx timeout [ 419.984232][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.176277][T19737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.220638][T19734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.256113][T19742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.302512][T19737] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.320715][T19734] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.350009][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.357263][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.375310][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.382548][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.431174][T19742] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.446860][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.454079][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.485182][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.492443][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.518497][T19839] netlink: ct family unspecified [ 420.542841][T19839] openvswitch: netlink: Actions may not be safe on all matching packets [ 420.564316][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.571593][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.589744][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.596947][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.743410][T19732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.814025][T19742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.356342][T19742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.380998][T19737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.459936][T19734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.641180][T19732] veth0_vlan: entered promiscuous mode [ 421.700030][T19732] veth1_vlan: entered promiscuous mode [ 421.738862][ T5871] Bluetooth: hci0: command tx timeout [ 421.879828][T19732] veth0_macvtap: entered promiscuous mode [ 421.904572][ T5871] Bluetooth: hci2: command tx timeout [ 421.910964][ T5867] Bluetooth: hci3: command tx timeout [ 421.940412][T19732] veth1_macvtap: entered promiscuous mode [ 422.046822][T19732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.057490][ T5871] Bluetooth: hci4: command tx timeout [ 422.101688][T19732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.133878][ T1169] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.201545][ T1169] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.212324][ T1169] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.246175][ T1169] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.346153][T19737] veth0_vlan: entered promiscuous mode [ 422.396759][T19742] veth0_vlan: entered promiscuous mode [ 422.443980][T19737] veth1_vlan: entered promiscuous mode [ 422.462718][T19734] veth0_vlan: entered promiscuous mode [ 422.480294][ T274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.488870][ T274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.511299][T19734] veth1_vlan: entered promiscuous mode [ 422.526582][T19742] veth1_vlan: entered promiscuous mode [ 422.566039][ T274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.592060][ T274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.647102][T19737] veth0_macvtap: entered promiscuous mode [ 422.685910][T19742] veth0_macvtap: entered promiscuous mode [ 422.710337][T19742] veth1_macvtap: entered promiscuous mode [ 422.721174][T19737] veth1_macvtap: entered promiscuous mode [ 422.791461][T19737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.803519][T19734] veth0_macvtap: entered promiscuous mode [ 422.826353][T19737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.848355][T19742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.866648][ T6364] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.879476][T19734] veth1_macvtap: entered promiscuous mode [ 422.889185][T19898] syzkaller0: entered promiscuous mode [ 422.894780][T19898] syzkaller0: entered allmulticast mode [ 422.902838][ T6364] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.914353][ T6364] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.925976][T19742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.936495][T19898] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 422.954807][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.006758][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.020987][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.046339][T19734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.063430][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.079481][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.115663][T10242] IPVS: starting estimator thread 0... [ 423.121087][T19905] netlink: 'syz.8.5513': attribute type 1 has an invalid length. [ 423.133825][T19734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.146409][T19905] netlink: 'syz.8.5513': attribute type 2 has an invalid length. [ 423.191070][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.200640][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.207384][T19906] IPVS: using max 33 ests per chain, 79200 per kthread [ 423.233141][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.242800][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.311045][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.320214][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.429551][ T6364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.440918][ T6364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.536726][ T274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.552588][ T274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.620193][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.640546][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.669572][T19915] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 423.683718][T19915] FAULT_INJECTION: forcing a failure. [ 423.683718][T19915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.712561][T19915] CPU: 0 UID: 0 PID: 19915 Comm: syz.5.5481 Not tainted syzkaller #0 PREEMPT(full) [ 423.712591][T19915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.712605][T19915] Call Trace: [ 423.712613][T19915] [ 423.712622][T19915] dump_stack_lvl+0x189/0x250 [ 423.712653][T19915] ? __pfx____ratelimit+0x10/0x10 [ 423.712682][T19915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.712707][T19915] ? __pfx__printk+0x10/0x10 [ 423.712751][T19915] should_fail_ex+0x414/0x560 [ 423.712784][T19915] _copy_to_user+0x31/0xb0 [ 423.712810][T19915] simple_read_from_buffer+0xe1/0x170 [ 423.712845][T19915] proc_fail_nth_read+0x1b3/0x220 [ 423.712873][T19915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.712900][T19915] ? rw_verify_area+0x2a6/0x4d0 [ 423.712925][T19915] ? __lock_acquire+0xab9/0xd20 [ 423.712952][T19915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.712978][T19915] vfs_read+0x200/0xa30 [ 423.713003][T19915] ? fdget_pos+0x247/0x320 [ 423.713026][T19915] ? __pfx___mutex_lock+0x10/0x10 [ 423.713057][T19915] ? __pfx_vfs_read+0x10/0x10 [ 423.713085][T19915] ? __fget_files+0x2a/0x420 [ 423.713121][T19915] ? __fget_files+0x3a0/0x420 [ 423.713150][T19915] ? __fget_files+0x2a/0x420 [ 423.713192][T19915] ksys_read+0x145/0x250 [ 423.713232][T19915] ? __pfx_ksys_read+0x10/0x10 [ 423.713254][T19915] ? rcu_is_watching+0x15/0xb0 [ 423.713279][T19915] ? do_syscall_64+0xbe/0x3b0 [ 423.713311][T19915] do_syscall_64+0xfa/0x3b0 [ 423.713336][T19915] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.713371][T19915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.713390][T19915] ? clear_bhb_loop+0x60/0xb0 [ 423.713414][T19915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.713432][T19915] RIP: 0033:0x7f147398d5fc [ 423.713450][T19915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 423.713467][T19915] RSP: 002b:00007f1474833030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.713488][T19915] RAX: ffffffffffffffda RBX: 00007f1473bb5fa0 RCX: 00007f147398d5fc [ 423.713502][T19915] RDX: 000000000000000f RSI: 00007f14748330a0 RDI: 0000000000000003 [ 423.713514][T19915] RBP: 00007f1474833090 R08: 0000000000000000 R09: 0000000000000000 [ 423.713525][T19915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.713536][T19915] R13: 00007f1473bb6038 R14: 00007f1473bb5fa0 R15: 00007fff72432478 [ 423.713568][T19915] [ 423.994991][ T5871] Bluetooth: hci0: command tx timeout [ 424.000607][ T5871] Bluetooth: hci2: command tx timeout [ 424.006043][ T5871] Bluetooth: hci3: command tx timeout [ 424.099010][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.106870][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.120209][T19926] syzkaller0: entered promiscuous mode [ 424.130785][T19926] syzkaller0: entered allmulticast mode [ 424.137912][ T5867] Bluetooth: hci4: command tx timeout [ 424.178601][ T274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.186467][ T274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.230409][T19924] syzkaller0: entered promiscuous mode [ 424.235934][T19924] syzkaller0: entered allmulticast mode [ 424.352083][T19932] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 424.464188][T19934] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5482'. [ 424.568932][T19939] FAULT_INJECTION: forcing a failure. [ 424.568932][T19939] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 424.611707][T19939] CPU: 1 UID: 0 PID: 19939 Comm: syz.7.5491 Not tainted syzkaller #0 PREEMPT(full) [ 424.611736][T19939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 424.611749][T19939] Call Trace: [ 424.611757][T19939] [ 424.611766][T19939] dump_stack_lvl+0x189/0x250 [ 424.611797][T19939] ? __pfx____ratelimit+0x10/0x10 [ 424.611827][T19939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.611854][T19939] ? __pfx__printk+0x10/0x10 [ 424.611886][T19939] ? fs_reclaim_acquire+0x7d/0x100 [ 424.611930][T19939] should_fail_ex+0x414/0x560 [ 424.611964][T19939] prepare_alloc_pages+0x213/0x610 [ 424.611994][T19939] __alloc_frozen_pages_noprof+0x123/0x370 [ 424.612021][T19939] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 424.612063][T19939] alloc_pages_bulk_noprof+0x560/0x710 [ 424.612086][T19939] ? rcu_is_watching+0x15/0xb0 [ 424.612109][T19939] ? trace_kmalloc+0x1f/0xd0 [ 424.612134][T19939] ? __kmalloc_noprof+0x29b/0x4f0 [ 424.612162][T19939] ? copy_splice_read+0x143/0xa50 [ 424.612197][T19939] copy_splice_read+0x173/0xa50 [ 424.612241][T19939] ? __pfx_copy_splice_read+0x10/0x10 [ 424.612269][T19939] ? look_up_lock_class+0x74/0x170 [ 424.612302][T19939] ? register_lock_class+0x51/0x320 [ 424.612339][T19939] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 424.612377][T19939] ? alloc_pipe_info+0x374/0x4d0 [ 424.612407][T19939] ? __pfx_copy_splice_read+0x10/0x10 [ 424.612436][T19939] splice_direct_to_actor+0x4a9/0xcc0 [ 424.612501][T19939] ? __pfx_direct_splice_actor+0x10/0x10 [ 424.612548][T19939] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 424.612585][T19939] do_splice_direct+0x181/0x270 [ 424.612614][T19939] ? __pfx_do_splice_direct+0x10/0x10 [ 424.612642][T19939] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 424.612677][T19939] ? rw_verify_area+0x255/0x4d0 [ 424.612704][T19939] do_sendfile+0x4da/0x7e0 [ 424.612732][T19939] ? __pfx_do_sendfile+0x10/0x10 [ 424.612763][T19939] __se_sys_sendfile64+0xd9/0x190 [ 424.612795][T19939] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 424.612822][T19939] ? rcu_is_watching+0x15/0xb0 [ 424.612844][T19939] ? do_syscall_64+0xbe/0x3b0 [ 424.612892][T19939] do_syscall_64+0xfa/0x3b0 [ 424.612918][T19939] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.612944][T19939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.612963][T19939] ? clear_bhb_loop+0x60/0xb0 [ 424.612987][T19939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.613006][T19939] RIP: 0033:0x7f92a298ebe9 [ 424.613024][T19939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.613041][T19939] RSP: 002b:00007f92a3883038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 424.613062][T19939] RAX: ffffffffffffffda RBX: 00007f92a2bb5fa0 RCX: 00007f92a298ebe9 [ 424.613077][T19939] RDX: 0000200000000040 RSI: 0000000000000004 RDI: 0000000000000004 [ 424.613089][T19939] RBP: 00007f92a3883090 R08: 0000000000000000 R09: 0000000000000000 [ 424.613101][T19939] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 424.613112][T19939] R13: 00007f92a2bb6038 R14: 00007f92a2bb5fa0 R15: 00007ffcb97de958 [ 424.613144][T19939] [ 425.360414][T19963] netlink: 'syz.4.5528': attribute type 13 has an invalid length. [ 425.623788][T19974] syzkaller0: entered promiscuous mode [ 425.629873][T19974] syzkaller0: entered allmulticast mode [ 425.641243][T19974] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 425.699678][T19975] syzkaller0: entered promiscuous mode [ 425.705203][T19975] syzkaller0: entered allmulticast mode [ 425.715465][T19975] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 425.759201][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5535'. [ 426.036022][ T30] audit: type=1800 audit(1755618944.768:3): pid=19980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5535" name="memory.events" dev="tmpfs" ino=5892 res=0 errno=0 [ 426.089238][T19992] FAULT_INJECTION: forcing a failure. [ 426.089238][T19992] name failslab, interval 1, probability 0, space 0, times 0 [ 426.102233][T19992] CPU: 1 UID: 0 PID: 19992 Comm: syz.8.5539 Not tainted syzkaller #0 PREEMPT(full) [ 426.102260][T19992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.102273][T19992] Call Trace: [ 426.102282][T19992] [ 426.102292][T19992] dump_stack_lvl+0x189/0x250 [ 426.102323][T19992] ? __pfx____ratelimit+0x10/0x10 [ 426.102354][T19992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.102380][T19992] ? __pfx__printk+0x10/0x10 [ 426.102407][T19992] ? do_syscall_64+0xfa/0x3b0 [ 426.102454][T19992] should_fail_ex+0x414/0x560 [ 426.102489][T19992] should_failslab+0xa8/0x100 [ 426.102523][T19992] kmem_cache_alloc_noprof+0x73/0x3c0 [ 426.102551][T19992] ? fdb_create+0x1b8/0x14c0 [ 426.102577][T19992] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 426.102609][T19992] fdb_create+0x1b8/0x14c0 [ 426.102645][T19992] ? fdb_find_rcu+0x6e3/0x770 [ 426.102677][T19992] ? br_fdb_find+0x82/0x210 [ 426.102703][T19992] ? __pfx_fdb_create+0x10/0x10 [ 426.102735][T19992] ? br_fdb_find+0x82/0x210 [ 426.102759][T19992] ? br_fdb_find+0x82/0x210 [ 426.102781][T19992] ? br_fdb_find+0x82/0x210 [ 426.102813][T19992] fdb_add_local+0x128/0x250 [ 426.102845][T19992] br_fdb_changeaddr+0x2a9/0x420 [ 426.102881][T19992] br_device_event+0x637/0x910 [ 426.102908][T19992] ? __pfx_br_device_event+0x10/0x10 [ 426.102944][T19992] notifier_call_chain+0x1b3/0x3e0 [ 426.102978][T19992] netif_set_mac_address+0x37c/0x4c0 [ 426.103010][T19992] ? __pfx_netif_set_mac_address+0x10/0x10 [ 426.103034][T19992] ? down_write+0x162/0x1f0 [ 426.103058][T19992] ? netdev_name_node_lookup+0xdf/0x120 [ 426.103094][T19992] dev_set_mac_address_user+0x137/0x270 [ 426.103135][T19992] dev_ioctl+0x7b4/0x1150 [ 426.103171][T19992] sock_do_ioctl+0x22c/0x300 [ 426.103208][T19992] ? __pfx_sock_do_ioctl+0x10/0x10 [ 426.103232][T19992] ? __lock_acquire+0xab9/0xd20 [ 426.103284][T19992] sock_ioctl+0x576/0x790 [ 426.103313][T19992] ? __pfx_sock_ioctl+0x10/0x10 [ 426.103340][T19992] ? __fget_files+0x2a/0x420 [ 426.103372][T19992] ? __fget_files+0x3a0/0x420 [ 426.103403][T19992] ? __fget_files+0x2a/0x420 [ 426.103440][T19992] ? bpf_lsm_file_ioctl+0x9/0x20 [ 426.103468][T19992] ? __pfx_sock_ioctl+0x10/0x10 [ 426.103493][T19992] __se_sys_ioctl+0xfc/0x170 [ 426.103523][T19992] do_syscall_64+0xfa/0x3b0 [ 426.103553][T19992] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.103582][T19992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.103609][T19992] ? clear_bhb_loop+0x60/0xb0 [ 426.103637][T19992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.103658][T19992] RIP: 0033:0x7fdef318ebe9 [ 426.103677][T19992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.103696][T19992] RSP: 002b:00007fdef4011038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.103719][T19992] RAX: ffffffffffffffda RBX: 00007fdef33b5fa0 RCX: 00007fdef318ebe9 [ 426.103735][T19992] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000009 [ 426.103748][T19992] RBP: 00007fdef4011090 R08: 0000000000000000 R09: 0000000000000000 [ 426.103762][T19992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.103774][T19992] R13: 00007fdef33b6038 R14: 00007fdef33b5fa0 R15: 00007ffccc02aff8 [ 426.103810][T19992] [ 426.423101][ T30] audit: type=1804 audit(1755618944.768:4): pid=19980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5535" name="/newroot/1164/memory.events" dev="tmpfs" ino=5892 res=1 errno=0 [ 426.706610][T20011] netlink: 'syz.5.5548': attribute type 21 has an invalid length. [ 426.720665][T20011] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5548'. [ 426.730292][T20006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5544'. [ 426.799690][T20015] FAULT_INJECTION: forcing a failure. [ 426.799690][T20015] name failslab, interval 1, probability 0, space 0, times 0 [ 426.817839][T20015] CPU: 0 UID: 0 PID: 20015 Comm: syz.8.5552 Not tainted syzkaller #0 PREEMPT(full) [ 426.817864][T20015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.817876][T20015] Call Trace: [ 426.817884][T20015] [ 426.817892][T20015] dump_stack_lvl+0x189/0x250 [ 426.817920][T20015] ? __pfx____ratelimit+0x10/0x10 [ 426.817947][T20015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.817970][T20015] ? __pfx__printk+0x10/0x10 [ 426.818004][T20015] ? __pfx___might_resched+0x10/0x10 [ 426.818022][T20015] ? fs_reclaim_acquire+0x7d/0x100 [ 426.818058][T20015] should_fail_ex+0x414/0x560 [ 426.818088][T20015] should_failslab+0xa8/0x100 [ 426.818128][T20015] __kmalloc_noprof+0xcb/0x4f0 [ 426.818153][T20015] ? iter_file_splice_write+0x1cb/0x10b0 [ 426.818186][T20015] iter_file_splice_write+0x1cb/0x10b0 [ 426.818242][T20015] ? __pfx_iter_file_splice_write+0x10/0x10 [ 426.818273][T20015] ? rcu_read_lock_any_held+0xb3/0x120 [ 426.818295][T20015] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 426.818325][T20015] ? __pfx_iter_file_splice_write+0x10/0x10 [ 426.818354][T20015] direct_splice_actor+0xfe/0x160 [ 426.818386][T20015] splice_direct_to_actor+0x5a8/0xcc0 [ 426.818435][T20015] ? __pfx_direct_splice_actor+0x10/0x10 [ 426.818463][T20015] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 426.818502][T20015] do_splice_direct+0x181/0x270 [ 426.818534][T20015] ? __pfx_do_splice_direct+0x10/0x10 [ 426.818563][T20015] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 426.818601][T20015] ? rw_verify_area+0x255/0x4d0 [ 426.818630][T20015] do_sendfile+0x4da/0x7e0 [ 426.818658][T20015] ? __pfx_do_sendfile+0x10/0x10 [ 426.818692][T20015] __se_sys_sendfile64+0xd9/0x190 [ 426.818733][T20015] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 426.818761][T20015] ? rcu_is_watching+0x15/0xb0 [ 426.818792][T20015] ? do_syscall_64+0xbe/0x3b0 [ 426.818828][T20015] do_syscall_64+0xfa/0x3b0 [ 426.818855][T20015] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.818882][T20015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.818901][T20015] ? clear_bhb_loop+0x60/0xb0 [ 426.818925][T20015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.818945][T20015] RIP: 0033:0x7fdef318ebe9 [ 426.818963][T20015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.818980][T20015] RSP: 002b:00007fdef4011038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 426.819000][T20015] RAX: ffffffffffffffda RBX: 00007fdef33b5fa0 RCX: 00007fdef318ebe9 [ 426.819015][T20015] RDX: 0000200000000040 RSI: 0000000000000004 RDI: 0000000000000004 [ 426.819027][T20015] RBP: 00007fdef4011090 R08: 0000000000000000 R09: 0000000000000000 [ 426.819039][T20015] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 426.819050][T20015] R13: 00007fdef33b6038 R14: 00007fdef33b5fa0 R15: 00007ffccc02aff8 [ 426.819082][T20015] [ 427.132403][T20022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5550'. [ 427.141684][T20022] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5550'. [ 427.150697][T20022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5550'. [ 427.159850][T20022] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5550'. [ 427.168876][T20022] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5550'. [ 427.179943][T20022] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5550'. [ 427.191157][T20022] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 427.246008][T14605] IPVS: starting estimator thread 0... [ 427.323295][T20029] openvswitch: netlink: Flow key attr not present in new flow. [ 427.348100][T20023] IPVS: using max 27 ests per chain, 64800 per kthread [ 427.595816][T20038] veth21: entered allmulticast mode [ 427.853467][T20055] tipc: Started in network mode [ 427.858553][T20055] tipc: Node identity dae959fcac79, cluster identity 4711 [ 427.865998][T20055] tipc: Enabled bearer , priority 0 [ 428.068354][T20057] tipc: MTU too low for tipc bearer [ 428.082837][T20061] tipc: Resetting bearer [ 428.199345][T20054] tipc: Disabling bearer [ 428.320117][T20069] veth3: entered allmulticast mode [ 428.415087][T20077] syzkaller0: entered promiscuous mode [ 428.454784][T20077] syzkaller0: entered allmulticast mode [ 428.803706][T20100] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 428.869290][T20106] tipc: Enabled bearer , priority 0 [ 428.907967][T20106] tipc: Resetting bearer [ 428.981842][T20104] tipc: Disabling bearer [ 429.206650][T20124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.235455][T20123] syzkaller0: entered promiscuous mode [ 429.259342][T20123] syzkaller0: entered allmulticast mode [ 429.295246][T20123] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 429.376468][T20129] syzkaller0: entered promiscuous mode [ 429.382547][T20129] syzkaller0: entered allmulticast mode [ 429.443510][T20133] tipc: Enabling of bearer rejected, already enabled [ 429.503535][T20133] tipc: Resetting bearer [ 429.650279][T20144] __nla_validate_parse: 4 callbacks suppressed [ 429.650298][T20144] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5596'. [ 429.825703][T20156] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5600'. [ 429.843606][T20156] netlink: 272 bytes leftover after parsing attributes in process `syz.8.5600'. [ 429.852970][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5600'. [ 430.087959][T20169] tipc: Resetting bearer [ 430.266829][T20174] syzkaller0: entered promiscuous mode [ 430.284746][T20174] syzkaller0: entered allmulticast mode [ 430.366752][T20177] tipc: Enabling of bearer rejected, already enabled [ 430.450236][T20179] netlink: 88 bytes leftover after parsing attributes in process `syz.8.5609'. [ 430.542367][T20183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5611'. [ 430.709865][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5610'. [ 430.729912][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 430.736380][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.744383][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.752258][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.760249][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.768093][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.776047][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.783945][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.791953][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.799819][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.807809][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.815644][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.823623][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.831582][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.839599][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.847449][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.855361][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.863234][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.871450][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.879334][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.887308][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.895131][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.903098][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.910951][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.918911][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.926727][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.934725][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.942591][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.950566][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.958455][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.966423][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.974287][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.982271][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 430.990139][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 430.998128][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.005961][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.013943][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.021806][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.029768][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.037619][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.045566][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.053434][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.061459][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.069337][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.077287][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.085115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.093077][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.100926][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.108942][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.116784][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.124783][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.132641][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.140604][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.148452][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.156399][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.164275][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.172257][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.180131][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.188121][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.195945][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.203962][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.211832][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.219819][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.227687][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.235639][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.243551][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.251564][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.259436][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.267387][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.275202][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.283164][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.291017][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.298992][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.306829][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.314815][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.322692][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.330668][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.338537][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.346471][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.354343][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.362310][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.370185][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.378150][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.385974][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.393959][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.401830][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.409799][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.417654][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.425569][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.433424][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.450741][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.458625][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.466532][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.474390][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.482339][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.490200][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.498195][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.506019][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.513992][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.521862][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.529851][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.537708][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.545647][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.553523][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.561513][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.569382][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.577334][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.585156][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.593099][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.600959][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.608902][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.616731][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.624694][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.632577][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.640513][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.648539][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.656439][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.664319][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.672272][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.680150][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.688074][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.695947][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.704931][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.712831][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.720781][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.728625][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.736521][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.744388][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.752352][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.760223][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.768164][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.775989][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.783961][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.791829][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.799775][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.807636][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.815537][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.823405][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.831359][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.839231][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.847189][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.850184][T20210] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5617'. [ 431.855007][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.855105][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.879713][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.887671][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.895492][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.903421][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.911279][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.919247][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.927071][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.935011][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.942868][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.950810][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.958655][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.966530][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.974380][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.982331][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 431.990214][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 431.998276][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.006101][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.014094][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.021963][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.029921][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.037798][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.045704][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.053598][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.061551][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.069423][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.077335][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.085145][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.093051][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.100887][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.108811][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.116629][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.124566][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.132415][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.140344][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.148182][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.156048][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.163904][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.171866][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.179732][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.187664][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.195485][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.203424][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.211275][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.219227][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.227047][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.235019][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.242862][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.250817][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.258681][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.266667][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.274505][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.282518][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.290379][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.298345][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.306164][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.314106][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.321974][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.329928][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.337782][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.345695][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.353561][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.361504][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.369361][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.377299][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.385115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.393059][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.400919][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.408852][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.416674][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.424620][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.432517][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.440465][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.448314][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.456201][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 432.464044][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 432.554326][T20208] FAULT_INJECTION: forcing a failure. [ 432.554326][T20208] name failslab, interval 1, probability 0, space 0, times 0 [ 432.577257][T20208] CPU: 1 UID: 0 PID: 20208 Comm: syz.7.5616 Not tainted syzkaller #0 PREEMPT(full) [ 432.577284][T20208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.577294][T20208] Call Trace: [ 432.577302][T20208] [ 432.577310][T20208] dump_stack_lvl+0x189/0x250 [ 432.577337][T20208] ? __pfx____ratelimit+0x10/0x10 [ 432.577363][T20208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.577385][T20208] ? __pfx__printk+0x10/0x10 [ 432.577432][T20208] ? __pfx___might_resched+0x10/0x10 [ 432.577452][T20208] ? fs_reclaim_acquire+0x7d/0x100 [ 432.577487][T20208] should_fail_ex+0x414/0x560 [ 432.577519][T20208] should_failslab+0xa8/0x100 [ 432.577550][T20208] __kmalloc_cache_noprof+0x70/0x3d0 [ 432.577576][T20208] ? alloc_netdev_mqs+0xb90/0x11b0 [ 432.577598][T20208] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 432.577622][T20208] alloc_netdev_mqs+0xb90/0x11b0 [ 432.577653][T20208] rtnl_create_link+0x31f/0xd10 [ 432.577684][T20208] rtnl_newlink_create+0x25c/0xb00 [ 432.577708][T20208] ? __mutex_lock+0x5b6/0x1360 [ 432.577743][T20208] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 432.577766][T20208] ? __pfx___mutex_lock+0x10/0x10 [ 432.577806][T20208] ? ns_capable+0x8a/0xf0 [ 432.577830][T20208] rtnl_newlink+0x16d6/0x1c70 [ 432.577859][T20208] ? netlink_sendmsg+0x805/0xb30 [ 432.577901][T20208] ? __pfx_rtnl_newlink+0x10/0x10 [ 432.578019][T20208] ? __lock_acquire+0xab9/0xd20 [ 432.578077][T20208] ? __pfx_rtnl_newlink+0x10/0x10 [ 432.578104][T20208] rtnetlink_rcv_msg+0x7cc/0xb70 [ 432.578136][T20208] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 432.578163][T20208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.578189][T20208] ? ref_tracker_free+0x63a/0x7d0 [ 432.578217][T20208] ? __asan_memcpy+0x40/0x70 [ 432.578241][T20208] ? __pfx_ref_tracker_free+0x10/0x10 [ 432.578279][T20208] netlink_rcv_skb+0x205/0x470 [ 432.578309][T20208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.578339][T20208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.578380][T20208] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.578416][T20208] netlink_unicast+0x82c/0x9e0 [ 432.578452][T20208] ? __pfx_netlink_unicast+0x10/0x10 [ 432.578479][T20208] ? netlink_sendmsg+0x642/0xb30 [ 432.578505][T20208] ? skb_put+0x11b/0x210 [ 432.578538][T20208] netlink_sendmsg+0x805/0xb30 [ 432.578589][T20208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.578637][T20208] ? aa_sock_msg_perm+0xf1/0x1d0 [ 432.578682][T20208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.578703][T20208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.578748][T20208] __sock_sendmsg+0x219/0x270 [ 432.578776][T20208] ____sys_sendmsg+0x505/0x830 [ 432.578803][T20208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.578833][T20208] ? import_iovec+0x74/0xa0 [ 432.578859][T20208] ___sys_sendmsg+0x21f/0x2a0 [ 432.578881][T20208] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.578941][T20208] ? __fget_files+0x2a/0x420 [ 432.578975][T20208] ? __fget_files+0x3a0/0x420 [ 432.579016][T20208] __x64_sys_sendmsg+0x19b/0x260 [ 432.579039][T20208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.579070][T20208] ? __pfx_ksys_write+0x10/0x10 [ 432.579094][T20208] ? rcu_is_watching+0x15/0xb0 [ 432.579119][T20208] ? do_syscall_64+0xbe/0x3b0 [ 432.579151][T20208] do_syscall_64+0xfa/0x3b0 [ 432.579177][T20208] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.579203][T20208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.579222][T20208] ? clear_bhb_loop+0x60/0xb0 [ 432.579246][T20208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.579266][T20208] RIP: 0033:0x7f92a298ebe9 [ 432.579284][T20208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.579301][T20208] RSP: 002b:00007f92a3883038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.579321][T20208] RAX: ffffffffffffffda RBX: 00007f92a2bb5fa0 RCX: 00007f92a298ebe9 [ 432.579335][T20208] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 432.579347][T20208] RBP: 00007f92a3883090 R08: 0000000000000000 R09: 0000000000000000 [ 432.579359][T20208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 432.579371][T20208] R13: 00007f92a2bb6038 R14: 00007f92a2bb5fa0 R15: 00007ffcb97de958 [ 432.579403][T20208] [ 433.025970][T20215] syzkaller0: entered promiscuous mode [ 433.031584][T20215] syzkaller0: entered allmulticast mode [ 433.141026][T20215] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 433.288245][T20223] tipc: Enabling of bearer rejected, failed to enable media [ 433.608636][T20245] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 433.765148][T20251] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5629'. [ 433.777059][T20251] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5629'. [ 433.796373][T20251] bridge_slave_1: left allmulticast mode [ 433.813892][T20251] bridge_slave_1: left promiscuous mode [ 433.834718][T20251] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.865392][T20251] bridge_slave_0: left allmulticast mode [ 433.878201][T20251] bridge_slave_0: left promiscuous mode [ 433.894404][T20251] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.954969][T20262] netlink: 'syz.7.5631': attribute type 10 has an invalid length. [ 434.150932][T20267] syzkaller0: entered promiscuous mode [ 434.156546][T20267] syzkaller0: entered allmulticast mode [ 434.223403][T20269] syzkaller0: entered promiscuous mode [ 434.237599][T20269] syzkaller0: entered allmulticast mode [ 434.281896][T20269] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 434.558299][T20282] syzkaller0: entered promiscuous mode [ 434.565229][T20282] syzkaller0: entered allmulticast mode [ 434.571844][T20287] netlink: 'syz.8.5643': attribute type 21 has an invalid length. [ 434.616089][T20293] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 435.030229][T20311] syzkaller0: entered promiscuous mode [ 435.055221][T20311] syzkaller0: entered allmulticast mode [ 435.272402][T20329] __nla_validate_parse: 4 callbacks suppressed [ 435.272423][T20329] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5645'. [ 435.306555][T20324] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5650'. [ 435.334388][T20333] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 435.357011][T20324] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5650'. [ 435.393375][T20324] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5650'. [ 435.671257][T20347] netlink: 'syz.4.5658': attribute type 21 has an invalid length. [ 435.705088][T20347] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5658'. [ 436.252171][T20377] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 436.639216][T20394] tipc: Enabled bearer , priority 0 [ 436.663535][T20394] syzkaller0: entered promiscuous mode [ 436.707674][T20394] syzkaller0: entered allmulticast mode [ 436.795043][T20394] tipc: Resetting bearer [ 436.844170][T20392] tipc: Resetting bearer [ 436.898771][T20392] tipc: Disabling bearer [ 437.092297][T20421] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 437.199542][T20429] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5687'. [ 437.450542][T20438] syzkaller0: entered promiscuous mode [ 437.456070][T20438] syzkaller0: entered allmulticast mode [ 437.815331][T20458] tipc: Enabling of bearer rejected, already enabled [ 437.827984][T20460] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5699'. [ 437.919576][T20457] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5698'. [ 437.996037][T20463] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 438.117887][T20469] veth3: entered allmulticast mode [ 438.130551][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5702'. [ 438.192933][T20466] netlink: 'syz.4.5702': attribute type 3 has an invalid length. [ 438.228172][T14605] page_pool_release_retry() stalled pool shutdown: id 80, 1 inflight 121 sec [ 438.431836][T20484] netlink: 'syz.7.5704': attribute type 29 has an invalid length. [ 438.449089][T20482] syzkaller0: entered promiscuous mode [ 438.454667][T20482] syzkaller0: entered allmulticast mode [ 438.471605][T20484] netlink: 'syz.7.5704': attribute type 29 has an invalid length. [ 438.968075][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5714'. [ 439.679151][T20543] openvswitch: netlink: Actions may not be safe on all matching packets [ 439.986254][T20551] tipc: Enabling of bearer rejected, failed to enable media [ 440.005129][T20551] syzkaller0: entered promiscuous mode [ 440.011919][T20551] syzkaller0: entered allmulticast mode [ 440.484295][T20574] netlink: 'syz.6.5739': attribute type 10 has an invalid length. [ 440.689606][T20579] veth3: entered allmulticast mode [ 440.699056][T20574] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.708473][T20574] bridge_slave_1: left allmulticast mode [ 440.721689][T20574] bridge_slave_1: left promiscuous mode [ 440.734282][T20574] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.763814][T20574] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 441.053238][T20589] tipc: Enabling of bearer rejected, failed to enable media [ 441.107012][T20591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.267014][T20608] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 441.685210][T20620] veth5: entered allmulticast mode [ 441.763504][T20633] __nla_validate_parse: 36 callbacks suppressed [ 441.763534][T20633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5760'. [ 441.802318][T20635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.882752][T20633] tipc: Enabling of bearer rejected, already enabled [ 441.966835][T20646] tipc: Started in network mode [ 441.991370][T20646] tipc: Node identity 9a6a7500b8bc, cluster identity 4711 [ 442.019916][T20646] tipc: Enabled bearer , priority 0 [ 442.036177][T20646] syzkaller0: entered promiscuous mode [ 442.052512][T20646] syzkaller0: entered allmulticast mode [ 442.104334][T20646] tipc: Resetting bearer [ 442.122569][T20643] tipc: Resetting bearer [ 442.156746][T20643] tipc: Disabling bearer [ 442.226040][T20654] tipc: Enabling of bearer rejected, failed to enable media [ 442.757120][T20682] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5778'. [ 442.779851][T20676] veth23: entered allmulticast mode [ 442.889272][T20687] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5778'. [ 442.931932][T20692] netlink: 'syz.5.5780': attribute type 21 has an invalid length. [ 442.947536][T20692] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5780'. [ 442.980027][T20686] tipc: Started in network mode [ 442.984942][T20686] tipc: Node identity 7e8950b76c01, cluster identity 4711 [ 443.010287][T20686] tipc: Enabled bearer , priority 0 [ 443.039835][T20686] syzkaller0: entered promiscuous mode [ 443.054541][T20686] syzkaller0: entered allmulticast mode [ 443.121938][T20686] tipc: Resetting bearer [ 443.173337][T20685] tipc: Resetting bearer [ 443.239093][T20685] tipc: Disabling bearer [ 443.262884][T20701] netlink: 14560 bytes leftover after parsing attributes in process `syz.6.5784'. [ 443.292759][T20708] tipc: Enabling of bearer rejected, failed to enable media [ 443.769332][T20736] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 443.804110][T20736] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 443.884098][T20742] FAULT_INJECTION: forcing a failure. [ 443.884098][T20742] name failslab, interval 1, probability 0, space 0, times 0 [ 443.898324][T20743] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5792'. [ 443.898362][T20743] netlink: 'syz.7.5792': attribute type 7 has an invalid length. [ 443.898378][T20743] netlink: 'syz.7.5792': attribute type 8 has an invalid length. [ 443.898394][T20743] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5792'. [ 443.968427][T20742] CPU: 1 UID: 0 PID: 20742 Comm: syz.4.5795 Not tainted syzkaller #0 PREEMPT(full) [ 443.968454][T20742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 443.968467][T20742] Call Trace: [ 443.968474][T20742] [ 443.968482][T20742] dump_stack_lvl+0x189/0x250 [ 443.968510][T20742] ? __pfx____ratelimit+0x10/0x10 [ 443.968537][T20742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.968560][T20742] ? __pfx__printk+0x10/0x10 [ 443.968590][T20742] ? __pfx___might_resched+0x10/0x10 [ 443.968609][T20742] ? fs_reclaim_acquire+0x7d/0x100 [ 443.968643][T20742] should_fail_ex+0x414/0x560 [ 443.968675][T20742] should_failslab+0xa8/0x100 [ 443.968705][T20742] __kmalloc_node_noprof+0xd1/0x4e0 [ 443.968731][T20742] ? __pfx___up_read+0x10/0x10 [ 443.968751][T20742] ? crypto_create_tfm_node+0x83/0x3f0 [ 443.968782][T20742] crypto_create_tfm_node+0x83/0x3f0 [ 443.968815][T20742] crypto_spawn_tfm2+0x5c/0x90 [ 443.968838][T20742] xts_init_tfm+0x47/0x160 [ 443.968866][T20742] crypto_create_tfm_node+0x18c/0x3f0 [ 443.968899][T20742] crypto_alloc_tfm_node+0x172/0x3f0 [ 443.968937][T20742] alg_bind+0x2f7/0x570 [ 443.968966][T20742] __sys_bind+0x2c3/0x3e0 [ 443.968996][T20742] ? __pfx___sys_bind+0x10/0x10 [ 443.969034][T20742] ? __pfx_ksys_write+0x10/0x10 [ 443.969068][T20742] __x64_sys_bind+0x7a/0x90 [ 443.969095][T20742] do_syscall_64+0xfa/0x3b0 [ 443.969123][T20742] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.969148][T20742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.969168][T20742] ? clear_bhb_loop+0x60/0xb0 [ 443.969193][T20742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.969219][T20742] RIP: 0033:0x7feeb1b8ebe9 [ 443.969236][T20742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.969253][T20742] RSP: 002b:00007feeb295b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 443.969273][T20742] RAX: ffffffffffffffda RBX: 00007feeb1db6090 RCX: 00007feeb1b8ebe9 [ 443.969288][T20742] RDX: 0000000000000058 RSI: 0000200000000040 RDI: 0000000000000003 [ 443.969300][T20742] RBP: 00007feeb295b090 R08: 0000000000000000 R09: 0000000000000000 [ 443.969312][T20742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.969323][T20742] R13: 00007feeb1db6128 R14: 00007feeb1db6090 R15: 00007ffc39250fa8 [ 443.969354][T20742] [ 445.019480][T20760] tipc: Enabling of bearer rejected, already enabled [ 445.152533][T20769] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5802'. [ 445.386717][T20786] tipc: Enabling of bearer rejected, failed to enable media [ 445.546934][T20799] FAULT_INJECTION: forcing a failure. [ 445.546934][T20799] name failslab, interval 1, probability 0, space 0, times 0 [ 445.616225][T20799] CPU: 0 UID: 0 PID: 20799 Comm: syz.7.5809 Not tainted syzkaller #0 PREEMPT(full) [ 445.616255][T20799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.616269][T20799] Call Trace: [ 445.616277][T20799] [ 445.616286][T20799] dump_stack_lvl+0x189/0x250 [ 445.616317][T20799] ? __pfx____ratelimit+0x10/0x10 [ 445.616348][T20799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.616374][T20799] ? __pfx__printk+0x10/0x10 [ 445.616407][T20799] ? __pfx___might_resched+0x10/0x10 [ 445.616427][T20799] ? fs_reclaim_acquire+0x7d/0x100 [ 445.616466][T20799] should_fail_ex+0x414/0x560 [ 445.616501][T20799] should_failslab+0xa8/0x100 [ 445.616534][T20799] __kmalloc_noprof+0xcb/0x4f0 [ 445.616562][T20799] ? __crypto_alloc_tfmgfp+0x130/0x3e0 [ 445.616598][T20799] __crypto_alloc_tfmgfp+0x130/0x3e0 [ 445.616634][T20799] crypto_spawn_tfm+0x72/0xd0 [ 445.616660][T20799] xts_init_tfm+0x97/0x160 [ 445.616692][T20799] crypto_create_tfm_node+0x18c/0x3f0 [ 445.616729][T20799] crypto_alloc_tfm_node+0x172/0x3f0 [ 445.616770][T20799] alg_bind+0x2f7/0x570 [ 445.616802][T20799] __sys_bind+0x2c3/0x3e0 [ 445.616843][T20799] ? __pfx___sys_bind+0x10/0x10 [ 445.616886][T20799] ? __pfx_ksys_write+0x10/0x10 [ 445.616910][T20799] ? rcu_is_watching+0x15/0xb0 [ 445.616940][T20799] __x64_sys_bind+0x7a/0x90 [ 445.616970][T20799] do_syscall_64+0xfa/0x3b0 [ 445.617000][T20799] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.617029][T20799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.617051][T20799] ? clear_bhb_loop+0x60/0xb0 [ 445.617078][T20799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.617098][T20799] RIP: 0033:0x7f92a298ebe9 [ 445.617117][T20799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.617139][T20799] RSP: 002b:00007f92a3883038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 445.617161][T20799] RAX: ffffffffffffffda RBX: 00007f92a2bb5fa0 RCX: 00007f92a298ebe9 [ 445.617177][T20799] RDX: 0000000000000058 RSI: 0000200000000040 RDI: 0000000000000003 [ 445.617190][T20799] RBP: 00007f92a3883090 R08: 0000000000000000 R09: 0000000000000000 [ 445.617202][T20799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.617214][T20799] R13: 00007f92a2bb6038 R14: 00007f92a2bb5fa0 R15: 00007ffcb97de958 [ 445.617249][T20799] [ 446.257742][T20819] tipc: Enabling of bearer rejected, already enabled [ 446.300435][T20823] netlink: 788 bytes leftover after parsing attributes in process `syz.5.5819'. [ 446.463640][T20832] tipc: Enabled bearer , priority 0 [ 446.491907][T20841] FAULT_INJECTION: forcing a failure. [ 446.491907][T20841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.527453][T20841] CPU: 1 UID: 0 PID: 20841 Comm: syz.5.5824 Not tainted syzkaller #0 PREEMPT(full) [ 446.527482][T20841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.527494][T20841] Call Trace: [ 446.527502][T20841] [ 446.527510][T20841] dump_stack_lvl+0x189/0x250 [ 446.527539][T20841] ? __pfx____ratelimit+0x10/0x10 [ 446.527566][T20841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.527588][T20841] ? __pfx__printk+0x10/0x10 [ 446.527627][T20841] should_fail_ex+0x414/0x560 [ 446.527657][T20841] _copy_to_user+0x31/0xb0 [ 446.527682][T20841] simple_read_from_buffer+0xe1/0x170 [ 446.527714][T20841] proc_fail_nth_read+0x1b3/0x220 [ 446.527739][T20841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 446.527763][T20841] ? rw_verify_area+0x2a6/0x4d0 [ 446.527786][T20841] ? __lock_acquire+0xab9/0xd20 [ 446.527814][T20841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 446.527837][T20841] vfs_read+0x200/0xa30 [ 446.527861][T20841] ? fdget_pos+0x247/0x320 [ 446.527881][T20841] ? __pfx___mutex_lock+0x10/0x10 [ 446.527910][T20841] ? __pfx_vfs_read+0x10/0x10 [ 446.527936][T20841] ? __fget_files+0x2a/0x420 [ 446.527969][T20841] ? __fget_files+0x3a0/0x420 [ 446.527996][T20841] ? __fget_files+0x2a/0x420 [ 446.528033][T20841] ksys_read+0x145/0x250 [ 446.528070][T20841] ? __pfx_ksys_read+0x10/0x10 [ 446.528092][T20841] ? rcu_is_watching+0x15/0xb0 [ 446.528116][T20841] ? do_syscall_64+0xbe/0x3b0 [ 446.528147][T20841] do_syscall_64+0xfa/0x3b0 [ 446.528173][T20841] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.528199][T20841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.528217][T20841] ? clear_bhb_loop+0x60/0xb0 [ 446.528240][T20841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.528258][T20841] RIP: 0033:0x7f147398d5fc [ 446.528275][T20841] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 446.528292][T20841] RSP: 002b:00007f1474833030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 446.528313][T20841] RAX: ffffffffffffffda RBX: 00007f1473bb5fa0 RCX: 00007f147398d5fc [ 446.528326][T20841] RDX: 000000000000000f RSI: 00007f14748330a0 RDI: 0000000000000004 [ 446.528338][T20841] RBP: 00007f1474833090 R08: 0000000000000000 R09: 0000000000000000 [ 446.528349][T20841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.528360][T20841] R13: 00007f1473bb6038 R14: 00007f1473bb5fa0 R15: 00007fff72432478 [ 446.528391][T20841] [ 446.807570][T20837] tipc: Disabling bearer [ 446.855898][T20850] tipc: Enabling of bearer rejected, already enabled [ 447.113995][T20862] tipc: Can't bind to reserved service type 0 [ 447.273345][T20868] netlink: 159784 bytes leftover after parsing attributes in process `syz.7.5835'. [ 447.633595][T20892] tipc: Enabled bearer , priority 0 [ 447.662544][T20891] syzkaller0: entered promiscuous mode [ 447.673007][T20891] syzkaller0: entered allmulticast mode [ 447.689447][T20896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5846'. [ 447.732194][T20897] tipc: Resetting bearer [ 447.756530][T20902] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5847'. [ 447.792673][T20888] tipc: Disabling bearer [ 447.898431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.551274][T20936] tipc: Enabled bearer , priority 0 [ 448.573918][T20936] tipc: Resetting bearer [ 448.638695][T20935] tipc: Disabling bearer [ 448.814378][T20947] syzkaller0: entered promiscuous mode [ 448.843668][T20947] syzkaller0: entered allmulticast mode [ 449.138023][T20963] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5870'. [ 449.229980][T20971] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5872'. [ 449.589055][T20992] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5880'. [ 449.691867][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5883'. [ 449.728432][T20998] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5883'. [ 450.024812][T21004] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5884'. [ 450.170435][T21016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5887'. [ 450.458855][T21037] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 450.527590][T21036] nbd4: detected capacity change from 0 to 127 [ 450.548827][ T5867] block nbd4: Receive control failed (result -32) [ 451.612576][T21092] tipc: Started in network mode [ 451.621835][T21092] tipc: Node identity 128e42a52cf3, cluster identity 4711 [ 451.631991][T21092] tipc: Enabled bearer , priority 0 [ 451.645928][T21092] syzkaller0: entered promiscuous mode [ 451.654016][T21092] syzkaller0: entered allmulticast mode [ 451.696499][T21092] tipc: Resetting bearer [ 451.720700][T21091] tipc: Resetting bearer [ 451.754502][T21091] tipc: Disabling bearer [ 452.334252][T21125] netlink: 'syz.4.5925': attribute type 11 has an invalid length. [ 452.355559][T21125] netlink: 'syz.4.5925': attribute type 11 has an invalid length. [ 452.365200][T21127] __nla_validate_parse: 8 callbacks suppressed [ 452.365217][T21127] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5927'. [ 452.394738][T21125] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5925'. [ 452.468206][T21131] syzkaller0: entered promiscuous mode [ 452.484996][T21131] syzkaller0: entered allmulticast mode [ 452.583788][T21137] netlink: 'syz.4.5931': attribute type 21 has an invalid length. [ 452.600007][T21137] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5931'. [ 452.817812][T21147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5935'. [ 452.835364][T21148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5935'. [ 452.879663][T21147] xfrm1: entered promiscuous mode [ 452.884876][T21147] xfrm1: entered allmulticast mode [ 452.932411][T21155] veth5: entered allmulticast mode [ 453.095165][T21166] netlink: 4552 bytes leftover after parsing attributes in process `syz.8.5943'. [ 453.158144][T21166] netlink: 4552 bytes leftover after parsing attributes in process `syz.8.5943'. [ 453.247103][T21173] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5947'. [ 453.321165][T21177] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5950'. [ 453.337766][T21177] openvswitch: netlink: Unknown nsh attribute 0 [ 453.344659][T21177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.681647][T21199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5955'. [ 453.696564][T21200] netlink: 'syz.8.5956': attribute type 1 has an invalid length. [ 453.705519][T21200] netlink: 'syz.8.5956': attribute type 3 has an invalid length. [ 454.649674][T21260] netlink: 'syz.7.5980': attribute type 21 has an invalid length. [ 454.734623][T21261] netlink: 'syz.5.5979': attribute type 2 has an invalid length. [ 454.736759][ T9] IPVS: starting estimator thread 0... [ 454.854373][T21273] IPVS: using max 26 ests per chain, 62400 per kthread [ 455.155826][T21293] tipc: Enabling of bearer rejected, failed to enable media [ 455.179575][T21293] syzkaller0: entered promiscuous mode [ 455.185107][T21293] syzkaller0: entered allmulticast mode [ 455.582787][T21324] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 455.629811][T21324] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 455.659165][T21324] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 455.984620][T21336] tipc: Enabling of bearer rejected, failed to enable media [ 455.994245][T21336] syzkaller0: entered promiscuous mode [ 455.999902][T21336] syzkaller0: entered allmulticast mode [ 456.129414][T21340] syzkaller0: entered promiscuous mode [ 456.157382][T21340] syzkaller0: entered allmulticast mode [ 457.809374][T21437] __nla_validate_parse: 42 callbacks suppressed [ 457.809395][T21437] netlink: 244 bytes leftover after parsing attributes in process `syz.5.6044'. [ 458.109324][T21451] smc: net device bond0 erased user defined pnetid SYZ0 [ 458.570748][T21468] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6054'. [ 458.675056][T21472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6055'. [ 458.713756][T21472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6055'. [ 458.728025][T21476] netlink: 88 bytes leftover after parsing attributes in process `syz.7.6057'. [ 459.319252][T21494] FAULT_INJECTION: forcing a failure. [ 459.319252][T21494] name failslab, interval 1, probability 0, space 0, times 0 [ 459.357061][T21494] CPU: 0 UID: 0 PID: 21494 Comm: syz.6.6063 Not tainted syzkaller #0 PREEMPT(full) [ 459.357090][T21494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.357101][T21494] Call Trace: [ 459.357108][T21494] [ 459.357120][T21494] dump_stack_lvl+0x189/0x250 [ 459.357148][T21494] ? __pfx____ratelimit+0x10/0x10 [ 459.357176][T21494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.357199][T21494] ? __pfx__printk+0x10/0x10 [ 459.357227][T21494] ? rcu_is_watching+0x15/0xb0 [ 459.357247][T21494] ? trace_fib_table_lookup+0x85/0x200 [ 459.357297][T21494] should_fail_ex+0x414/0x560 [ 459.357326][T21494] should_failslab+0xa8/0x100 [ 459.357355][T21494] kmem_cache_alloc_noprof+0x73/0x3c0 [ 459.357397][T21494] ? dst_alloc+0x105/0x170 [ 459.357417][T21494] ? fib_lookup+0x76/0x440 [ 459.357441][T21494] dst_alloc+0x105/0x170 [ 459.357467][T21494] ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 459.357499][T21494] ? ip_route_output_key_hash+0xde/0x2e0 [ 459.357524][T21494] ip_route_output_key_hash+0x1b9/0x2e0 [ 459.357544][T21494] ? unwind_get_return_address+0x4d/0x90 [ 459.357568][T21494] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 459.357594][T21494] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 459.357634][T21494] ip_route_output_flow+0x2a/0x150 [ 459.357650][T21494] ? security_sk_classify_flow+0x70/0x180 [ 459.357677][T21494] tcp_v4_connect+0x846/0x1a00 [ 459.357711][T21494] ? __entry_text_end+0x303/0x1020b9 [ 459.357742][T21494] ? __pfx_tcp_v4_connect+0x10/0x10 [ 459.357776][T21494] __inet_stream_connect+0x2ae/0xe80 [ 459.357811][T21494] ? __pfx___inet_stream_connect+0x10/0x10 [ 459.357836][T21494] ? __kasan_kmalloc+0x93/0xb0 [ 459.357870][T21494] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 459.357897][T21494] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 459.357927][T21494] tcp_sendmsg_locked+0x4d9b/0x5620 [ 459.357954][T21494] ? tcp_sendmsg_locked+0x511/0x5620 [ 459.357980][T21494] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 459.358033][T21494] ? __lock_acquire+0xab9/0xd20 [ 459.358072][T21494] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 459.358093][T21494] ? __local_bh_enable_ip+0x12d/0x1c0 [ 459.358116][T21494] ? __local_bh_enable_ip+0x12d/0x1c0 [ 459.358147][T21494] tcp_sendmsg+0x2f/0x50 [ 459.358168][T21494] __sock_sendmsg+0x19c/0x270 [ 459.358194][T21494] __sys_sendto+0x3bd/0x520 [ 459.358222][T21494] ? __pfx___sys_sendto+0x10/0x10 [ 459.358244][T21494] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 459.358283][T21494] ? __fget_files+0x3a0/0x420 [ 459.358330][T21494] ? ksys_write+0x22a/0x250 [ 459.358352][T21494] ? __pfx_ksys_write+0x10/0x10 [ 459.358372][T21494] ? rcu_is_watching+0x15/0xb0 [ 459.358393][T21494] __x64_sys_sendto+0xde/0x100 [ 459.358422][T21494] do_syscall_64+0xfa/0x3b0 [ 459.358446][T21494] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.358468][T21494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.358484][T21494] ? clear_bhb_loop+0x60/0xb0 [ 459.358506][T21494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.358521][T21494] RIP: 0033:0x7f5196b8ebe9 [ 459.358537][T21494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.358551][T21494] RSP: 002b:00007f5197a94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 459.358569][T21494] RAX: ffffffffffffffda RBX: 00007f5196db5fa0 RCX: 00007f5196b8ebe9 [ 459.358580][T21494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 459.358589][T21494] RBP: 00007f5197a94090 R08: 0000200000e68000 R09: 0000000000000010 [ 459.358600][T21494] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 459.358611][T21494] R13: 00007f5196db6038 R14: 00007f5196db5fa0 R15: 00007fffbf3e2ef8 [ 459.358639][T21494] [ 459.969653][T21504] syzkaller0: entered promiscuous mode [ 459.975192][T21504] syzkaller0: entered allmulticast mode [ 460.087927][T21504] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 460.166780][T21517] netlink: 'syz.4.6070': attribute type 1 has an invalid length. [ 460.324378][T21522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6074'. [ 460.350284][T21520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6070'. [ 460.376380][T21517] veth25: entered promiscuous mode [ 460.388611][T21522] chnl_net:caif_netlink_parms(): no params data found [ 460.480627][T21529] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 460.554502][T21534] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6078'. [ 460.563679][T21529] bond1: entered promiscuous mode [ 460.563702][T21529] bond1: entered allmulticast mode [ 460.564271][T21529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.587879][T21537] syzkaller1: entered promiscuous mode [ 460.614658][T21537] syzkaller1: entered allmulticast mode [ 460.692731][T21546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.950237][T21556] netlink: 'syz.8.6084': attribute type 21 has an invalid length. [ 460.969984][T21556] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6084'. [ 461.123887][ T5867] Bluetooth: hci4: link tx timeout [ 461.131161][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 461.142158][ T5867] Bluetooth: hci4: link tx timeout [ 461.147442][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 461.173169][T21565] syzkaller0: entered promiscuous mode [ 461.200235][T21565] syzkaller0: entered allmulticast mode [ 461.223249][T21565] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 461.372374][T21572] netlink: 'syz.8.6089': attribute type 1 has an invalid length. [ 461.492012][T21577] syzkaller0: entered promiscuous mode [ 461.527291][T21577] syzkaller0: entered allmulticast mode [ 461.588273][T21578] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6089'. [ 461.603309][T21572] veth9: entered promiscuous mode [ 461.610949][T21587] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 461.849204][ T5867] Bluetooth: hci4: link tx timeout [ 461.854374][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 461.862299][ T5867] Bluetooth: hci4: link tx timeout [ 461.867509][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 462.219970][T21624] netlink: 'syz.6.6102': attribute type 1 has an invalid length. [ 462.345015][T21624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.384730][T21627] bond1: (slave wlan0): Enslaving as an active interface with an up link [ 462.437802][T21635] netlink: 'syz.8.6105': attribute type 1 has an invalid length. [ 462.445930][T21619] vlan2: entered allmulticast mode [ 462.458955][T21619] veth1: entered allmulticast mode [ 462.478226][T21630] syzkaller0: entered promiscuous mode [ 462.483749][T21630] syzkaller0: entered allmulticast mode [ 462.492936][T21630] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 462.551921][T21635] veth11: entered promiscuous mode [ 462.795426][T21642] netlink: 'syz.7.6108': attribute type 10 has an invalid length. [ 462.852990][T21642] team0: Device veth1_macvtap failed to register rx_handler [ 462.921202][T21647] __nla_validate_parse: 3 callbacks suppressed [ 462.921223][T21647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6111'. [ 463.067757][T21654] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6115'. [ 463.086162][T21654] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6115'. [ 463.096981][T21655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6114'. [ 463.160673][T21658] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6113'. [ 463.178268][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 463.260749][T21669] syzkaller0: entered promiscuous mode [ 463.266400][T21669] syzkaller0: entered allmulticast mode [ 463.293026][T21669] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 463.367560][T21671] Bluetooth: MGMT ver 1.23 [ 463.836863][T21699] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6132'. [ 463.870866][T21701] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6133'. [ 463.941261][T21702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6133'. [ 464.337793][T21732] netlink: 'syz.4.6143': attribute type 2 has an invalid length. [ 464.463596][T21735] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6145'. [ 464.645178][T21749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6150'. [ 464.774376][T21744] syzkaller0: entered promiscuous mode [ 464.781918][T21744] syzkaller0: entered allmulticast mode [ 464.950127][T21760] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 466.183802][T21744] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 466.327328][T21769] netlink: 'syz.7.6157': attribute type 10 has an invalid length. [ 466.356226][T21769] team0: Device veth1_macvtap failed to register rx_handler [ 466.713104][T21790] netlink: 'syz.8.6167': attribute type 8 has an invalid length. [ 466.891901][T21801] syzkaller0: entered promiscuous mode [ 466.904402][T21801] syzkaller0: entered allmulticast mode [ 466.924930][T21801] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 467.285659][T21817] veth7: entered allmulticast mode [ 467.383671][T21822] sctp: [Deprecated]: syz.6.6180 (pid 21822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.383671][T21822] Use struct sctp_sack_info instead [ 467.673453][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.697541][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.733842][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.760556][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.097432][T21863] __nla_validate_parse: 3 callbacks suppressed [ 468.097499][T21863] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6198'. [ 468.113470][T21860] pim6reg1: entered promiscuous mode [ 468.124445][T21860] pim6reg1: entered allmulticast mode [ 468.198651][ T5974] IPVS: starting estimator thread 0... [ 468.222266][T21863] gretap1: entered promiscuous mode [ 468.235394][T21863] gretap1: entered allmulticast mode [ 468.308069][T21872] IPVS: using max 28 ests per chain, 67200 per kthread [ 468.524246][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6206'. [ 468.714056][T21901] netlink: 'syz.8.6213': attribute type 7 has an invalid length. [ 468.930891][T21912] netlink: 'syz.5.6218': attribute type 21 has an invalid length. [ 469.096845][T21919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.449703][T21901] : entered promiscuous mode [ 469.456044][T21912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6218'. [ 469.630924][T21923] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6220'. [ 469.729593][T21935] FAULT_INJECTION: forcing a failure. [ 469.729593][T21935] name failslab, interval 1, probability 0, space 0, times 0 [ 469.756343][T21935] CPU: 0 UID: 0 PID: 21935 Comm: syz.8.6225 Not tainted syzkaller #0 PREEMPT(full) [ 469.756372][T21935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 469.756385][T21935] Call Trace: [ 469.756393][T21935] [ 469.756401][T21935] dump_stack_lvl+0x189/0x250 [ 469.756432][T21935] ? __pfx____ratelimit+0x10/0x10 [ 469.756460][T21935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.756484][T21935] ? __pfx__printk+0x10/0x10 [ 469.756518][T21935] ? __pfx___might_resched+0x10/0x10 [ 469.756537][T21935] ? fs_reclaim_acquire+0x7d/0x100 [ 469.756571][T21935] should_fail_ex+0x414/0x560 [ 469.756603][T21935] should_failslab+0xa8/0x100 [ 469.756634][T21935] __kmalloc_noprof+0xcb/0x4f0 [ 469.756660][T21935] ? kfree+0x4d/0x440 [ 469.756682][T21935] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 469.756707][T21935] tomoyo_realpath_from_path+0xe3/0x5d0 [ 469.756740][T21935] ? tomoyo_domain+0xd9/0x130 [ 469.756764][T21935] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 469.756807][T21935] tomoyo_path_number_perm+0x1e8/0x5a0 [ 469.756838][T21935] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 469.756883][T21935] ? __lock_acquire+0xab9/0xd20 [ 469.756934][T21935] ? __fget_files+0x2a/0x420 [ 469.756967][T21935] ? __fget_files+0x2a/0x420 [ 469.756996][T21935] ? __fget_files+0x3a0/0x420 [ 469.757024][T21935] ? __fget_files+0x2a/0x420 [ 469.757058][T21935] security_file_ioctl+0xcb/0x2d0 [ 469.757085][T21935] __se_sys_ioctl+0x47/0x170 [ 469.757114][T21935] do_syscall_64+0xfa/0x3b0 [ 469.757144][T21935] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.757171][T21935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.757197][T21935] ? clear_bhb_loop+0x60/0xb0 [ 469.757221][T21935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.757240][T21935] RIP: 0033:0x7fdef318ebe9 [ 469.757257][T21935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.757274][T21935] RSP: 002b:00007fdef4011038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.757295][T21935] RAX: ffffffffffffffda RBX: 00007fdef33b5fa0 RCX: 00007fdef318ebe9 [ 469.757309][T21935] RDX: 0000200000000040 RSI: 00000000000089f0 RDI: 0000000000000003 [ 469.757322][T21935] RBP: 00007fdef4011090 R08: 0000000000000000 R09: 0000000000000000 [ 469.757333][T21935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.757345][T21935] R13: 00007fdef33b6038 R14: 00007fdef33b5fa0 R15: 00007ffccc02aff8 [ 469.757377][T21935] [ 470.006134][T21935] ERROR: Out of memory at tomoyo_realpath_from_path. [ 470.171717][T21947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6226'. [ 471.433641][T21947] macvlan2: entered allmulticast mode [ 471.459259][T21952] netlink: 112 bytes leftover after parsing attributes in process `syz.6.6228'. [ 471.540129][T21956] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6229'. [ 471.624148][T21961] syzkaller0: entered promiscuous mode [ 471.630807][T21961] syzkaller0: entered allmulticast mode [ 471.793650][T21962] netlink: 'syz.6.6232': attribute type 13 has an invalid length. [ 472.154763][T21962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.384500][T21986] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6239'. [ 472.400839][T21986] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 472.410616][T21986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.539678][T21994] netlink: 'syz.6.6243': attribute type 4 has an invalid length. [ 472.621327][T21998] tipc: Enabled bearer , priority 0 [ 472.631161][T21998] tipc: Resetting bearer [ 472.672393][T21997] tipc: Disabling bearer [ 472.759874][T22004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6246'. [ 472.820254][T22008] netlink: 'syz.7.6248': attribute type 21 has an invalid length. [ 472.828694][T22008] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6248'. [ 473.110312][T22017] veth3: entered promiscuous mode [ 473.118402][T22021] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6249'. [ 473.162012][T22020] syzkaller0: entered promiscuous mode [ 473.168374][T22020] syzkaller0: entered allmulticast mode [ 473.284945][T22028] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 473.329080][T22030] netlink: 'syz.6.6256': attribute type 4 has an invalid length. [ 473.438153][T22040] tipc: Enabled bearer , priority 0 [ 473.476145][T22040] tipc: Resetting bearer [ 473.548510][T22043] netlink: 'syz.4.6259': attribute type 21 has an invalid length. [ 473.556498][T22043] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6259'. [ 473.574093][T22039] tipc: Disabling bearer [ 473.596066][T22044] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 473.608031][T22044] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 473.791026][T22055] veth27: entered allmulticast mode [ 473.843942][T22059] netlink: 'syz.8.6265': attribute type 23 has an invalid length. [ 473.895993][T22061] veth9: entered promiscuous mode [ 473.924838][T22060] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6266'. [ 473.945389][T22065] tipc: Enabling of bearer rejected, already enabled [ 474.139075][T22075] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6272'. [ 474.168437][T22075] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6272'. [ 474.185515][T22075] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6272'. [ 474.551436][T22092] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6279'. [ 474.584378][T22098] veth9: entered promiscuous mode [ 474.666524][T22102] tipc: Enabled bearer , priority 0 [ 474.674266][T22102] syzkaller0: entered promiscuous mode [ 474.682321][T22102] syzkaller0: entered allmulticast mode [ 474.703487][T22102] tipc: Resetting bearer [ 474.713567][T22101] tipc: Enabled bearer , priority 0 [ 474.726408][T22099] tipc: Resetting bearer [ 474.753721][T22099] tipc: Disabling bearer [ 474.768859][T22108] syzkaller0: entered promiscuous mode [ 474.774489][T22108] syzkaller0: entered allmulticast mode [ 474.787207][T22101] syzkaller0: entered promiscuous mode [ 474.800111][T22101] syzkaller0: entered allmulticast mode [ 474.821614][T22101] tipc: Resetting bearer [ 474.839988][T22108] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 474.899652][T22100] tipc: Resetting bearer [ 474.957981][T22100] tipc: Disabling bearer [ 475.175727][T22130] veth0: entered promiscuous mode [ 475.220153][T22130] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6293'. [ 475.261887][T22130] dvmrp0: entered allmulticast mode [ 475.329018][T22130] dvmrp0: left allmulticast mode [ 475.458986][T22129] veth0: left promiscuous mode [ 475.644959][T22158] netlink: 'syz.8.6305': attribute type 10 has an invalid length. [ 475.675374][T22158] team0: Device veth1_macvtap failed to register rx_handler [ 475.950732][T22171] veth3: entered allmulticast mode [ 476.333463][T22194] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6320'. [ 476.720414][T22204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.749217][T22204] team0: Port device bond1 added [ 477.083132][T22227] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 477.175480][T22229] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6332'. [ 477.194356][T22231] netlink: 'syz.4.6334': attribute type 21 has an invalid length. [ 477.450256][T22254] netlink: 'syz.7.6339': attribute type 11 has an invalid length. [ 477.615371][T22263] bridge_slave_0: left allmulticast mode [ 477.663609][T22263] bridge_slave_0: left promiscuous mode [ 477.678888][T22263] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.780049][T22263] bridge_slave_1: left allmulticast mode [ 477.806721][T22263] bridge_slave_1: left promiscuous mode [ 477.847084][T22263] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.875819][T22263] bond0: (slave bond_slave_0): Releasing backup interface [ 477.895041][T22263] bond0: (slave bond_slave_1): Releasing backup interface [ 477.940348][T22263] team0: Port device team_slave_0 removed [ 477.961696][T22263] team0: Port device team_slave_1 removed [ 477.975641][T22263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.994159][T22263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.005831][T22263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.013718][T22263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.215653][T22293] __nla_validate_parse: 8 callbacks suppressed [ 478.215670][T22293] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6348'. [ 478.265509][T22286] syzkaller0: entered promiscuous mode [ 478.271935][T22286] syzkaller0: entered allmulticast mode [ 478.336096][T22299] syzkaller1: entered promiscuous mode [ 478.341877][T22299] syzkaller1: entered allmulticast mode [ 478.346703][ T274] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 478.572960][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 480.029312][T22375] syzkaller1: entered promiscuous mode [ 480.034844][T22375] syzkaller1: entered allmulticast mode [ 489.928257][T22380] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 489.967820][T22383] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6373'. [ 489.990443][T22384] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6374'. [ 490.258356][T22400] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6381'. [ 490.432775][T22411] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 490.624071][T22425] syzkaller1: entered promiscuous mode [ 490.629810][T22425] syzkaller1: entered allmulticast mode [ 490.982284][T22437] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6393'. [ 491.201494][T22450] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6396'. [ 491.356836][T22454] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 491.392442][T22456] FAULT_INJECTION: forcing a failure. [ 491.392442][T22456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.444920][T22456] CPU: 0 UID: 0 PID: 22456 Comm: syz.4.6400 Not tainted syzkaller #0 PREEMPT(full) [ 491.444948][T22456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.444962][T22456] Call Trace: [ 491.444969][T22456] [ 491.444979][T22456] dump_stack_lvl+0x189/0x250 [ 491.445009][T22456] ? __pfx____ratelimit+0x10/0x10 [ 491.445037][T22456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.445080][T22456] ? __pfx__printk+0x10/0x10 [ 491.445110][T22456] ? __might_fault+0xb0/0x130 [ 491.445152][T22456] should_fail_ex+0x414/0x560 [ 491.445186][T22456] _copy_from_user+0x2d/0xb0 [ 491.445211][T22456] ___sys_sendmsg+0x158/0x2a0 [ 491.445235][T22456] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.445299][T22456] ? __fget_files+0x2a/0x420 [ 491.445330][T22456] ? __fget_files+0x3a0/0x420 [ 491.445373][T22456] __x64_sys_sendmsg+0x19b/0x260 [ 491.445398][T22456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.445431][T22456] ? __pfx_ksys_write+0x10/0x10 [ 491.445456][T22456] ? rcu_is_watching+0x15/0xb0 [ 491.445484][T22456] ? do_syscall_64+0xbe/0x3b0 [ 491.445529][T22456] do_syscall_64+0xfa/0x3b0 [ 491.445556][T22456] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.445582][T22456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.445602][T22456] ? clear_bhb_loop+0x60/0xb0 [ 491.445625][T22456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.445644][T22456] RIP: 0033:0x7feeb1b8ebe9 [ 491.445671][T22456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.445688][T22456] RSP: 002b:00007feeb297c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.445709][T22456] RAX: ffffffffffffffda RBX: 00007feeb1db5fa0 RCX: 00007feeb1b8ebe9 [ 491.445724][T22456] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 491.445736][T22456] RBP: 00007feeb297c090 R08: 0000000000000000 R09: 0000000000000000 [ 491.445748][T22456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.445759][T22456] R13: 00007feeb1db6038 R14: 00007feeb1db5fa0 R15: 00007ffc39250fa8 [ 491.445791][T22456] [ 491.670493][T22458] syzkaller1: entered promiscuous mode [ 491.676072][T22458] syzkaller1: entered allmulticast mode [ 491.732530][T22465] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 491.743852][T22467] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.6405'. [ 491.784265][T22467] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.6405'. [ 491.794587][T22467] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.6405'. [ 491.804987][T22467] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.6405'. [ 491.816447][T22467] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.6405'. [ 492.345037][T22499] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 492.484325][T22507] tipc: Enabling of bearer rejected, already enabled [ 492.623816][T22510] syzkaller1: entered promiscuous mode [ 492.643963][T22510] syzkaller1: entered allmulticast mode [ 493.061757][T22539] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 493.102415][T22539] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 493.222944][T22546] tipc: Enabled bearer , priority 0 [ 493.274229][T22546] syzkaller0: entered promiscuous mode [ 493.283837][T22546] syzkaller0: entered allmulticast mode [ 493.300556][T22546] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 493.328971][T22552] tipc: Enabled bearer , priority 0 [ 493.336503][T22552] syzkaller0: entered promiscuous mode [ 493.342952][T22552] syzkaller0: entered allmulticast mode [ 493.354721][T22552] tipc: Resetting bearer [ 493.382239][T22551] tipc: Resetting bearer [ 493.400234][T22551] tipc: Disabling bearer [ 493.436185][T22558] tipc: Resetting bearer [ 493.586048][T22568] FAULT_INJECTION: forcing a failure. [ 493.586048][T22568] name failslab, interval 1, probability 0, space 0, times 0 [ 493.599792][T22568] CPU: 0 UID: 0 PID: 22568 Comm: syz.5.6438 Not tainted syzkaller #0 PREEMPT(full) [ 493.599818][T22568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 493.599829][T22568] Call Trace: [ 493.599836][T22568] [ 493.599844][T22568] dump_stack_lvl+0x189/0x250 [ 493.599871][T22568] ? __pfx____ratelimit+0x10/0x10 [ 493.599896][T22568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.599919][T22568] ? __pfx__printk+0x10/0x10 [ 493.599950][T22568] ? __pfx___might_resched+0x10/0x10 [ 493.599972][T22568] should_fail_ex+0x414/0x560 [ 493.600002][T22568] should_failslab+0xa8/0x100 [ 493.600030][T22568] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 493.600057][T22568] ? __alloc_skb+0x112/0x2d0 [ 493.600089][T22568] __alloc_skb+0x112/0x2d0 [ 493.600121][T22568] netlink_sendmsg+0x5c6/0xb30 [ 493.600157][T22568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.600188][T22568] ? aa_sock_msg_perm+0xf1/0x1d0 [ 493.600219][T22568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.600239][T22568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.600266][T22568] __sock_sendmsg+0x219/0x270 [ 493.600290][T22568] ____sys_sendmsg+0x505/0x830 [ 493.600310][T22568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.600333][T22568] ? import_iovec+0x74/0xa0 [ 493.600356][T22568] ___sys_sendmsg+0x21f/0x2a0 [ 493.600375][T22568] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.600425][T22568] ? __fget_files+0x2a/0x420 [ 493.600450][T22568] ? __fget_files+0x3a0/0x420 [ 493.600487][T22568] __x64_sys_sendmsg+0x19b/0x260 [ 493.600509][T22568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.600537][T22568] ? __pfx_ksys_write+0x10/0x10 [ 493.600559][T22568] ? rcu_is_watching+0x15/0xb0 [ 493.600581][T22568] ? do_syscall_64+0xbe/0x3b0 [ 493.600604][T22568] do_syscall_64+0xfa/0x3b0 [ 493.600626][T22568] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.600644][T22568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.600656][T22568] ? clear_bhb_loop+0x60/0xb0 [ 493.600672][T22568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.600684][T22568] RIP: 0033:0x7f147398ebe9 [ 493.600697][T22568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.600708][T22568] RSP: 002b:00007f1474833038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.600723][T22568] RAX: ffffffffffffffda RBX: 00007f1473bb5fa0 RCX: 00007f147398ebe9 [ 493.600732][T22568] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 493.600740][T22568] RBP: 00007f1474833090 R08: 0000000000000000 R09: 0000000000000000 [ 493.600748][T22568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.600756][T22568] R13: 00007f1473bb6038 R14: 00007f1473bb5fa0 R15: 00007fff72432478 [ 493.600776][T22568] [ 493.605502][T22546] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.878673][T22546] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.965965][T22546] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 493.977884][T22546] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 493.987596][T22546] CPU: 0 UID: 0 PID: 22546 Comm: syz.7.6432 Not tainted syzkaller #0 PREEMPT(full) [ 493.996959][T22546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.007013][T22546] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 494.012747][T22546] Code: 79 76 bb f7 c6 05 b8 21 89 05 01 48 c7 c7 80 9c 9e 8c be 97 05 00 00 48 c7 c2 00 9d 9e 8c e8 ca 50 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 94 df 1e f8 4d 8b 2c 24 4d 39 f5 [ 494.032378][T22546] RSP: 0018:ffffc9001a74e8f8 EFLAGS: 00010206 [ 494.038472][T22546] RAX: ffffffff8a04357e RBX: 000000001fffe1ac RCX: 0000000000080000 [ 494.046464][T22546] RDX: ffffc9000d2b7000 RSI: 000000000007ffff RDI: 0000000000080000 [ 494.054455][T22546] RBP: ffff88802ea9ec20 R08: ffffffff8f537ba7 R09: 1ffffffff1ea6f74 [ 494.062446][T22546] R10: dffffc0000000000 R11: fffffbfff1ea6f75 R12: 00000000ffff0d60 [ 494.070439][T22546] R13: dffffc0000000000 R14: ffff8880770ecc00 R15: 1ffff11005d53d84 [ 494.078423][T22546] FS: 00007f92a38836c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 494.087365][T22546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.093955][T22546] CR2: 00007f14739746a0 CR3: 000000007bfd6000 CR4: 00000000003526f0 [ 494.101934][T22546] Call Trace: [ 494.105226][T22546] [ 494.108182][T22546] inetdev_event+0x2a7/0x15b0 [ 494.112868][T22546] ? __pfx_inetdev_event+0x10/0x10 [ 494.118006][T22546] notifier_call_chain+0x1b3/0x3e0 [ 494.123124][T22546] __dev_notify_flags+0x18d/0x2e0 [ 494.128192][T22546] ? __pfx___dev_notify_flags+0x10/0x10 [ 494.133737][T22546] ? __dev_change_flags+0x4cc/0x6d0 [ 494.138941][T22546] ? __pfx___dev_change_flags+0x10/0x10 [ 494.144507][T22546] ? netif_state_change+0x256/0x3a0 [ 494.149737][T22546] ? __pfx_netif_state_change+0x10/0x10 [ 494.155321][T22546] netif_change_flags+0xe8/0x1a0 [ 494.160282][T22546] do_setlink+0xc55/0x41c0 [ 494.164719][T22546] ? rcu_is_watching+0x15/0xb0 [ 494.169515][T22546] ? __schedule+0x17ae/0x4cc0 [ 494.174240][T22546] ? __lock_acquire+0xab9/0xd20 [ 494.179123][T22546] ? __pfx_do_setlink+0x10/0x10 [ 494.183987][T22546] ? __lock_acquire+0xab9/0xd20 [ 494.188880][T22546] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 494.194796][T22546] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.200035][T22546] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 494.205962][T22546] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 494.212319][T22546] ? rcu_is_watching+0x15/0xb0 [ 494.217096][T22546] ? __mutex_lock+0xd36/0x1360 [ 494.221870][T22546] ? __mutex_lock+0x5b6/0x1360 [ 494.226649][T22546] ? rtnl_newlink+0x8db/0x1c70 [ 494.231418][T22546] ? __pfx___mutex_lock+0x10/0x10 [ 494.236474][T22546] ? ns_capable+0x8a/0xf0 [ 494.240816][T22546] ? rtnl_link_get_net_capable+0x16a/0x350 [ 494.246625][T22546] rtnl_newlink+0x149f/0x1c70 [ 494.251342][T22546] ? netlink_sendmsg+0x805/0xb30 [ 494.256309][T22546] ? __pfx_rtnl_newlink+0x10/0x10 [ 494.261373][T22546] ? kasan_quarantine_put+0xdd/0x220 [ 494.266757][T22546] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.271969][T22546] ? nlmon_xmit+0xb0/0x100 [ 494.276387][T22546] ? kmem_cache_free+0x18f/0x400 [ 494.281358][T22546] ? __local_bh_enable_ip+0x12d/0x1c0 [ 494.286733][T22546] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.291947][T22546] ? __local_bh_enable_ip+0x12d/0x1c0 [ 494.297323][T22546] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 494.303040][T22546] ? __dev_queue_xmit+0x27b/0x3b50 [ 494.308195][T22546] ? __dev_queue_xmit+0x27b/0x3b50 [ 494.313337][T22546] ? __dev_queue_xmit+0x27b/0x3b50 [ 494.318446][T22546] ? __dev_queue_xmit+0x1d79/0x3b50 [ 494.323647][T22546] ? __lock_acquire+0xab9/0xd20 [ 494.328513][T22546] ? __pfx_rtnl_newlink+0x10/0x10 [ 494.333536][T22546] rtnetlink_rcv_msg+0x7cc/0xb70 [ 494.338493][T22546] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 494.343615][T22546] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 494.349079][T22546] ? ref_tracker_free+0x63a/0x7d0 [ 494.354106][T22546] ? __asan_memcpy+0x40/0x70 [ 494.358827][T22546] ? __pfx_ref_tracker_free+0x10/0x10 [ 494.364230][T22546] netlink_rcv_skb+0x205/0x470 [ 494.369001][T22546] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 494.374462][T22546] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.379777][T22546] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.384985][T22546] netlink_unicast+0x82c/0x9e0 [ 494.389756][T22546] ? __pfx_netlink_unicast+0x10/0x10 [ 494.395048][T22546] ? netlink_sendmsg+0x642/0xb30 [ 494.400004][T22546] ? skb_put+0x11b/0x210 [ 494.404265][T22546] netlink_sendmsg+0x805/0xb30 [ 494.409035][T22546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.414339][T22546] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.419303][T22546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.424602][T22546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.429925][T22546] __sock_sendmsg+0x219/0x270 [ 494.434624][T22546] ____sys_sendmsg+0x505/0x830 [ 494.439396][T22546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.444707][T22546] ? import_iovec+0x74/0xa0 [ 494.449209][T22546] ___sys_sendmsg+0x21f/0x2a0 [ 494.453882][T22546] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.459089][T22546] ? __fget_files+0x2a/0x420 [ 494.463690][T22546] ? __fget_files+0x3a0/0x420 [ 494.468379][T22546] __x64_sys_sendmsg+0x19b/0x260 [ 494.473312][T22546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.478779][T22546] ? rcu_is_watching+0x15/0xb0 [ 494.483550][T22546] ? do_syscall_64+0xbe/0x3b0 [ 494.488235][T22546] do_syscall_64+0xfa/0x3b0 [ 494.492739][T22546] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.497973][T22546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.504040][T22546] ? clear_bhb_loop+0x60/0xb0 [ 494.508718][T22546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.514618][T22546] RIP: 0033:0x7f92a298ebe9 [ 494.519032][T22546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.538642][T22546] RSP: 002b:00007f92a3883038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.547062][T22546] RAX: ffffffffffffffda RBX: 00007f92a2bb5fa0 RCX: 00007f92a298ebe9 [ 494.555045][T22546] RDX: 0000000000040014 RSI: 0000200000000140 RDI: 0000000000000003 [ 494.563012][T22546] RBP: 00007f92a2a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 494.571002][T22546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.578968][T22546] R13: 00007f92a2bb6038 R14: 00007f92a2bb5fa0 R15: 00007ffcb97de958 [ 494.586948][T22546] [ 494.589977][T22546] Modules linked in: [ 494.596529][T22546] ---[ end trace 0000000000000000 ]--- [ 494.602645][ T9] tipc: Node number set to 310923447 [ 494.606996][T22546] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 494.628220][T22546] Code: 79 76 bb f7 c6 05 b8 21 89 05 01 48 c7 c7 80 9c 9e 8c be 97 05 00 00 48 c7 c2 00 9d 9e 8c e8 ca 50 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 94 df 1e f8 4d 8b 2c 24 4d 39 f5 [ 494.648263][T22546] RSP: 0018:ffffc9001a74e8f8 EFLAGS: 00010206 [ 494.654433][T22546] RAX: ffffffff8a04357e RBX: 000000001fffe1ac RCX: 0000000000080000 [ 494.665128][T22546] RDX: ffffc9000d2b7000 RSI: 000000000007ffff RDI: 0000000000080000 [ 494.673604][T22546] RBP: ffff88802ea9ec20 R08: ffffffff8f537ba7 R09: 1ffffffff1ea6f74 [ 494.682859][T22546] R10: dffffc0000000000 R11: fffffbfff1ea6f75 R12: 00000000ffff0d60 [ 494.690967][T22546] R13: dffffc0000000000 R14: ffff8880770ecc00 R15: 1ffff11005d53d84 [ 494.699503][T22546] FS: 00007f92a38836c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 494.710007][T22546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.716804][T22546] CR2: 0000001b2e01cff8 CR3: 000000007bfd6000 CR4: 00000000003526f0 [ 494.725208][T22546] Kernel panic - not syncing: Fatal exception [ 494.731686][T22546] Kernel Offset: disabled [ 494.736016][T22546] Rebooting in 86400 seconds..