last executing test programs: 17.900639645s ago: executing program 0 (id=7595): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000040)) 17.644088272s ago: executing program 0 (id=7602): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) 17.505360344s ago: executing program 3 (id=7604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 17.315170577s ago: executing program 2 (id=7608): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x6e21, 0xfffc, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0xbcfbddc4f0d79c8f}}, 0xe8) (async) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0) (async, rerun: 32) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRESOCT=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) pipe(&(0x7f0000000140)) 17.230415131s ago: executing program 3 (id=7609): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0xa, 0x6, 0x301, 0x0, 0x0, {0x4, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc4}, @IPSET_ATTR_MARK={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x84) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 17.062448843s ago: executing program 2 (id=7611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r2, 0x10}, &(0x7f00000000c0)=0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 16.836185009s ago: executing program 2 (id=7615): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xc, @mcast2, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000100bbfe8000000000000000000000000000aa4e200e22"], 0x0) 16.72285192s ago: executing program 4 (id=7616): socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70a000014000000b70300000000000085000000ce000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000001540)='GPL\x00'}, 0x90) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000300)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000380)={@remote, @broadcast, 0x0}, &(0x7f0000000400)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000005c0)={r2, 0xca7, 0xfffffffffffffffc, 0x8}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0x23, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x7, 0xf, 0x0, 0x6, 0x1}, @ldst={0x3, 0x1, 0x2, 0xb, 0x3, 0xffffffffffffffc0, 0x85439871b6d82699}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x40, 0xd, 0x2, 0x5, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x401}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0xe2be, 0xe5, &(0x7f0000000900)=""/229, 0xa9dadc8c94b3ffde, 0x0, '\x00', r3, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x6, &(0x7f0000000a00)=[r0, r4, r0, r0, r0, r0, r0, r5], &(0x7f0000000a40)=[{0x3, 0x4, 0xf, 0x2}, {0x5, 0x4, 0x7, 0x4}, {0x1, 0x3, 0x3}, {0x0, 0x2, 0x3, 0x3}, {0x2, 0x1, 0x6, 0x9}, {0x4, 0x5, 0x0, 0x2}], 0x10, 0x9}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000000500)=@routing={0x4, 0x0, 0x1, 0xb0}, 0x8) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000003d00010300000200000000000100000079a60134a66c2f460e904b702ecc"], 0x14}}, 0x4000) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r10, &(0x7f0000000000)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1) socket$unix(0x1, 0x5, 0x0) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r11, &(0x7f0000000040)={0xfffffffffffffffe, 0x20, 0x4, 0x20, 0x3}, 0x48) 16.660333991s ago: executing program 0 (id=7618): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00c3ff10008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 16.532472407s ago: executing program 2 (id=7619): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 16.482066786s ago: executing program 0 (id=7621): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @loopback, 0x0, 0x3}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709a70000000000000101000000080009003f00000014001f00000000000002000000000000000000011400200000000002000000000000ffff000000000500070000000000060002000100000008000ac2166e4125dfc6f928feb3ed42158b96"], 0x5c}}, 0x0) 16.457197497s ago: executing program 1 (id=7622): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), 0x100, &(0x7f0000000040)={@align=0x7, {0x4, 0xfffd, 0x6, 0x8}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x7}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2deaad1610c63212}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x8c}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x128, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x3a, 0xa8, @random="7ccf634d88a1ec23d9e5291524723fd8c73fb133462f56f7eb95d4245d254dfc0cebaf143ffafff30277fdaca28889211596bd6e4a0a"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xc8, 0xa8, @random="66c7da1c86554ee76082a577809bdd1e45de0a2d634b9b8c54d81226fb5b0c835ecbc222c2cb8f2b648cbd164acd1fab8a35a5fe4ab436cf306c9633346314785b63fb56f59eecf19fc99edf12c9a3606d60af179bfe416bff563af11a775b0e3bdc3d48e64a3ae37655c2430ba34d3a7992c81c87bfff8649f13fa059b9bed3bd4828d9dbccc5d431cd7c3805f838d83743b2a988b4b1f073fbc8aac25ac7795ea52203782767051b70e468ccb7e7ba7c3efca3966998e54dd359038a14bd5e658ccaf3"}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x6c, &(0x7f0000000680)={@remote, @dev, 0x0}, &(0x7f00000006c0)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd8, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x64, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0x2, 0xad, &(0x7f00000005c0)=""/173, 0x41000, 0x0, '\x00', r2, @fallback=0x38, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0xf, 0xffffffff, 0x8}, 0x10, r4, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000a40)=[{0x4, 0x1, 0xe, 0x8}, {0x4, 0x4, 0xd, 0x6}, {0x2, 0x5, 0x8, 0x3}, {0x5, 0x5, 0x1, 0x5}, {0x1, 0x3, 0x7}], 0x10, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x140c, 0x400, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004040}, 0xc800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@bloom_filter={0x1e, 0x6, 0x80000001, 0x9, 0x200, 0x1, 0x4, '\x00', r3, r0, 0x5, 0x5, 0x4, 0x1}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000e00)={r5, &(0x7f0000000d00)='syzkaller\x00', 0x800, &(0x7f0000000d40)={@align=0x8000000000000000, {0x3, 0xfeff, 0xec9f}}, 0x2, &(0x7f0000000d80)={@_ha_fsid}, &(0x7f0000000dc0)=0xffffffff}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000fc0)={{r6, &(0x7f0000000e40)='syzkaller\x00', 0x40002, &(0x7f0000000e80)={@align=0x9, {0x9, 0x9a8, 0x9, 0x9}}, 0x4f9, &(0x7f0000000ec0), &(0x7f0000000f00)=0x9}, {[0x7, 0x101, 0x7fffffff, 0xd9]}, 0x81, 0x76, &(0x7f0000000f40)=""/118}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001040)={@cgroup=r0, r7, 0x37, 0x0, r8, @void, @value=r5}, 0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001080)={0x0, 0xa58, 0x401, 0x7f, 0x1, 0x1000}, &(0x7f00000010c0)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000001100)={0x400, 0xf001, 0x2, 0x2, 0x82, 0x2, 0x7fffffff, 0x5, r9}, &(0x7f0000001140)=0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000011c0)=[0x0], &(0x7f0000001200)=[0x0], 0x0, 0x66, &(0x7f0000001240)=[{}], 0x8, 0x10, &(0x7f0000001280), &(0x7f00000012c0), 0x8, 0x82, 0x8, 0x8, &(0x7f0000001300)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001480)={r10}, 0x4) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, r13, 0x304, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20004900) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000016c0)={r7, 0x58, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000002500)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001700)=@deltfilter={0xda0, 0x2d, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x6, 0x5}, {0xd, 0xf}, {0x1, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x40, 0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x10000}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xfaa0}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast1}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc6}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "d282baaef102b367a3ca6092025081d7"}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xb4}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @broadcast}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x7}]}}]}}, @filter_kind_options=@f_basic={{0xa}, {0xca0, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x9}}, @TCA_BASIC_ACT={0x520, 0x3, [@m_bpf={0x128, 0xf, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x9, 0x3, 0x77, 0x8}, {0xc, 0xff, 0x8a, 0xaf}, {0x100, 0x7f, 0x9, 0x2}, {0x1, 0x6, 0x99, 0x5}, {0xfe0, 0x7, 0x7, 0xfffffff7}, {0xbd, 0x2, 0x0, 0x4}, {0x8, 0x3, 0x80, 0xfc}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0xb1, 0x6, "ff5a96c3f373b35fd4f5ea7fe69795ae4c0e115ff5de9c5b4d6e72811c54c5d92eb78c7243bf931fc7b5d4ca96646ea23cc34f8296deef1c21f989e8853ef95c66dedcb89869c6798fff93dba41cf7041040d83d9cc53c760ecc70267b342ea0f74ae65be7e95fe5ab09205fe8c43ad86a08a7ea432d2091ad49ba7a3c5b4670c19577a8b0201b9ad60af93dc81d15a8fe7c9c578593dcf2e0f732a93d1ef513f410b109a7d178adc9e09873f0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x10c, 0x1e, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x66, 0x8, 0xa, 0x3}, 0x4}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x806}]}, {0xac, 0x6, "dd034803308a211cd0aeeb900fb4614036f15debb45236fe81ba7cb3fbda6a5d0e4cc80c5f82acf204ae14966ce4ce281fa0bb678df1124405927f80add4c9e947d87c6ce944ec938152d6ec75d5d8a80e0a2d8de4158355cff24d7288114cdc4cdec9d8ee5485a19ae86a8e365cd694fafda9a0f3d4a497d38748c116c2f6d074e0355b17655666294550911276b6d963a6ae9d62c9d654bfe68713cd6648ca360e12c4e392b182"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x6c, 0x9, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0xd, 0x6, 0x4, 0x9}, @empty, @multicast2, 0xffffff00, 0x1}}]}, {0x1b, 0x6, "508213132568efd3ade1284844bf0dc8fc364446cadb25"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mirred={0xfc, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xca, 0xff, 0x0, 0x1, 0x7}, 0x3, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xffffffff, 0x10000000, 0x4e37, 0x1}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x127e, 0x5, 0x0, 0x16, 0x4}, 0x1, r2}}]}, {0x6d, 0x6, "107adc312dbc3bc3f3715dcc38fac120cd24021b36e382fcb490d3089435da25fc8fc038c3aa5110f2aa57f1d2528a72c59c0040109b105fb5a4475d4567a94583dd7e30af871574b8c2d231dff43473b990f98ec26a5e29163b8a84634e0cf544a94c6ede971f3845"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x64, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x5d}]}, {0x31, 0x6, "eda4e7b2c56b5e9202bf1d283d79c2fa2fc054e13703986e5472cb73efd59f738d61008cb07b3efcedd81461a3"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x11c, 0x1f, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_PARMS={0x18, 0x1, {0xfff, 0xffffffff, 0x1, 0x4, 0x7}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}]}, {0xb5, 0x6, "f321bbfbcbce81f17877ec46587e6ad6c9dc2a544535e1c102e450261b2f633f6dcbb184f4d0048bfc172dcf6a6fd23feecc16171c4c20da7d15ca80ad4aa59ff809ae16518d51025b71d09de454c7d6ad8ce67b8317d6e844f75d7c7ab7c6a0d475f7d64613b05425503a0cbc123e079dcebad64d6da02a9e03b06e11756d39608e701e9dcc9b9e2ed5a75d9adb041d213a4e429e75f2737f63cab53f3eb38df5b8406523471810cc78d0800fed94c85c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x574, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf16}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1b8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xffff, 0x1, 0x6}, {0x1, 0x6, 0x9, 0x4, 0x6, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x1}, {0x5, 0x7, 0x7, 0x5, 0x3, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x1}, {0x0, 0x5, 0x2, 0x2, 0xa}}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xa, 0x2, "f6a0b8c50641c2f0cc34"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x80}, {{0x4, 0x1, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0xca}, {0x4, 0x6, 0x7}}}, @TCF_EM_META={0xd8, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_VAR="d467fb9e6055db", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="2d5788812a", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="ff9ceca60b4162", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x1}, {0x2, 0x7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff9, 0x4, 0x2}, {0x2, 0x2, 0x2}}}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="54e9e9798b745a24", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x36, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="ec19b805262209", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="f8c25c1dbae4073b06", @TCF_META_TYPE_VAR="b63d5cf8a4", @TCF_META_TYPE_VAR="7ec13fdec749596b0474", @TCF_META_TYPE_VAR="56eb5a", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="a57c017bda297bb4", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="d7480302c33228"]}]}}, @TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0xc, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}]}, @TCA_EMATCH_TREE_LIST={0x3a0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x2, 0x0, 0x0, {{0x401, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x17, 0x5, "e7730c24499c4618a08f15edfa2bc995548c65"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf}]}}, @TCF_EM_CONTAINER={0xa0, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x1}, "e0ebb0205991df4e6a70030d43911279ac6e74eb51f30788ae08ed035bd72ecd40acdffdb13b25acb40cc00b1b3e3e19fa0c595850c19cfe6c43e5bcec29c3748f2ac85e6d8cc3cc59bc81002208de5f87ccac30a9eed1bd2a035146b505a05c9eb6ce27c8bb16db6dcb5569ec28e721a18edf160a2790740c69946921909b2dc28ae0e696ab94c6c668e348d8f3153b55437d"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x400}, {{0x3, 0x1, 0x1, 0x1}, {0x4}}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xdb3, 0x2, 0x6}, {0x6, 0x8, 0x1, "f1fd9492de622c0b"}}}, @TCF_EM_IPT={0x23c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x24, 0x5, "c999be478fcee73de57d10f1dc46f1008dbef35e0b3fdd864b406a97cea3e25a"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0xee, 0x5, "97987ccabdfe02133b9838e4e9b083b2fd43efd5286b4bef780f0a8c4d3414bde755f42b206dbe76a9094917a8caef307b0d9354e5e799d5cbf8c36169c11cc9a3a86cf8e0ff6301fcae3d4398558eb6bea7e85e39534389a778e91c7b70a5f5698402a8c3a1177e5e59f8d3eec14a91f127071a516413900a7a5fc42def8b68e09077ac6474db292b11d0ca67aca3096936c34de3f868cce34d53a3331856e3bd20418590b6affbffc7251d137c852a0aeb06f7f66f9721913b25a0d4c0c1b1028fbb88fd940e5d34fe351a72a881dbbc8e30dd361c15e3a9c22c416ea9451b1b1b0ec3c487dde45a4c"}, @TCA_EM_IPT_MATCH_DATA={0x85, 0x5, "9ca0d6f6ff049a5f78d2e67df9c982fcea50906632b4ba5427e78e23270e380fd547b9d65b9c4d6d843ea57b75fb2a3021722f41c92ff4faf7651366647c02546ac652a666451a738369156555e7e4ea3dd465e31582e60619b0b4b08a2d36acf46b06d985a3cbbdbd7daf5f4c76b516826ad7924c0b116e8cf8bf9e211bcc43ac"}, @TCA_EM_IPT_MATCH_DATA={0x81, 0x5, "854ab4c2e4fbd6e3eb20d03e1141e2d91ff99fe48055c81d4ef3c0760e58f83aa2910e59a9be7ce7f94ce6ca9a90f1c5b73b4b5c88bbf02935445952b80e18279ba50c24a037472d8529cd7127efae310e7e9336eb960948edbc36acb9abb25e4972ac950567d480c9d309c79344c4c6a236cf3d35b8e9410bde788f80"}]}}, @TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0x7, 0x4, 0xfa}, [@TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="7b1007", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="55f78545", @TCF_META_TYPE_INT]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0x10}, {0x0, 0x6}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7ff, 0x7, 0x100}, {{0x2}, {0x4, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa2e0, 0x8, 0x7}, {0xffffffffffffffff, 0x2, 0x2}}}]}]}, @TCA_BASIC_ACT={0x100, 0x3, [@m_ife={0xfc, 0xf, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x80000001, 0x46d, 0x6, 0x2, 0x1}}}, @TCA_IFE_DMAC={0xa, 0x3, @random="a44b5eafd174"}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x10000000, 0x5, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x90}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x0, 0x822, 0x913}}}]}, {0x43, 0x6, "fbd979b7b5002e9e68b462b51078c79110ff420664eec38af4c6a492ca651166f0d8abe13ab881dbe9456cfaefeb4228a6652337db6d5ead2cf76f65e9f541"}, {0xc, 0x7, {0x0, 0xe0fcd1ed61280b8c}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_POLICE={0x48, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x10, 0x8, 0x730, {0x1, 0x2, 0x5, 0x2, 0x8, 0x4d}, {0x8, 0x2, 0x915, 0x337, 0x9, 0x8001}, 0x2, 0x6, 0x7f5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10}]}, @TCA_BASIC_POLICE={0x4}, @TCA_BASIC_POLICE={0x48, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_BASIC_POLICE={0x6c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x0, 0x8, 0x8, {0x5, 0x2, 0x8, 0xfffc, 0x4, 0x9}, {0x2, 0x0, 0x2, 0x3, 0xb, 0xacd}, 0x2, 0x7, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x7fff}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffff00}]}}]}, 0xda0}, 0x1, 0x0, 0x0, 0x4}, 0x24000080) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r0, &(0x7f0000002540)="afe502eba1a086f61130b4c467ebaa5e0b28857beb0c951372eedf6c75655270ee34e140fc25dada723183f0500e815a6241f42037bbef25c91fef2d7a6edc8c45db5ba7b7bcfd77519ad4836d4b11f6297af6439a201690dd6d2676c29b34d7c2454fb51be3315f08636637193f45e562fde2482871bb547c6b880fa0e3624f1d26a7e01dfd1e2282b5e719d232d9d46368c0850bdeb11e917eb11a7eb01383eb5014bf34b594002832418d40d41ae003092ea66857c9", &(0x7f0000002600)=""/236}, 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000002740)={0x6, 'team_slave_1\x00', {0x4}, 0x1}) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002780)=r12, 0x4) ioctl$AUTOFS_IOC_READY(r15, 0x9360, 0x8000000000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000029c0)={0x18, 0xf, &(0x7f00000027c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000002840)='GPL\x00', 0xfad6, 0x21, &(0x7f0000002880)=""/33, 0x41100, 0x79, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000028c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000002900)={0x5, 0xc, 0x100, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002940)=[r0, r7], &(0x7f0000002980)=[{0x5, 0x2, 0x1, 0x7}], 0x10, 0x8b}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000002a80)=r0, 0x4) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r16, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x1c, r13, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r17}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x20008091) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000002c00)={0x2, [0x2, 0xffff]}, 0x8) 16.434404607s ago: executing program 4 (id=7623): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c90000000feffffff01000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 16.360431882s ago: executing program 3 (id=7624): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x20, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 16.325656947s ago: executing program 4 (id=7625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) 16.304034277s ago: executing program 1 (id=7626): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 16.26483336s ago: executing program 0 (id=7627): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2d, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 16.237753249s ago: executing program 2 (id=7628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000080)='X', 0x1}], 0x1}, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) r2 = socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x200800, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7}}}]}, 0x38}}, 0x40880) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x78, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x24008085) syz_emit_ethernet(0x0, 0x0, 0x0) 16.156456882s ago: executing program 3 (id=7629): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) (fail_nth: 3) 16.153215308s ago: executing program 0 (id=7630): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f000000af00), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="99cc6a27d9685c66b6dc476a3dd9c7af61e29d8168b55116c6710445eee400542c40b9319e855c7c6b95a3d67d6b1df6a2a8caf13728d2f90366324e30f5ae53097ce2980d1fcd7ada3d08003577642cd10a0d01d9cd1b4582f4fb018eb90e037334", 0x62}, {&(0x7f0000000980)="437ef70cd5d9cf21c0e515ab0c9a381b21f11c01", 0x14}], 0x2}}], 0x1, 0x20005040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f000000afc0)={&(0x7f000000af40)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000c4) 16.14981935s ago: executing program 4 (id=7631): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x23, 0x5, 0x0) setsockopt$llc_int(r1, 0x10c, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="100000000000000028001280010001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@loopback, 0x1, 0x0, 0x30, 0x0, [{@multicast2}, {@private}, {@multicast2}]}}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r2}, 0x18) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000640)={0x0, 0x2800000000000000, 0xfffffffffffffeff, 0x1}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000a40)={r3, 0x2, 0x8}) 16.120353209s ago: executing program 1 (id=7632): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x92840, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3507, 0x0, 0x3, 0x10, 0x9, 0x0, 0x10001}, {{@in6=@mcast1, 0x4d4, 0x2b}, 0x2, @in6=@empty, 0x0, 0x2, 0x1, 0x6a, 0x7ff, 0x8, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x20, 0xfffffdfc, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000040}, 0x2000c010) 15.947263275s ago: executing program 3 (id=7633): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}}}}, 0x0) 15.928476607s ago: executing program 2 (id=7634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x800) shutdown(r1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1300000056000100000000000000000007"], 0x18}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f00000003c0), &(0x7f0000000500)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r5, 0x2000) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000800060a0b0400000000000000000a000000140000001100010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f00000001c0)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000280)=0x2f) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x2, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff1, 0x5}, {0xd, 0x1}, {0x8, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x40}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4f7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40094) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRES64=r11, @ANYRES16=r13, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0049f7a0c1"], 0x2c}}, 0x40000) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r14}, 0xc) 15.87898118s ago: executing program 1 (id=7635): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/100}}}}}}, 0x0) 15.828387764s ago: executing program 4 (id=7636): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0x100, 0x31, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x51, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x21e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x206, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}, 0x700}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 15.826114638s ago: executing program 3 (id=7637): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x0, [0x3f, 0x1, 0x7, 0x32c2, 0x1000, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x78) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000002ec0)="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", 0x648}, {&(0x7f00000005c0)="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", 0x230}, {&(0x7f0000001640)="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", 0x1cc}], 0x3, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x40) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8c4) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000002280)={0xa24, r11, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x7c4, 0x11d, 0x0, 0x1, [{0x32c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x180, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x7}, {0x6, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x7}, {0x7, 0x5}, {0x3, 0x1}, {}, {0x7, 0xa}, {0x0, 0x3}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x9}, {0x7, 0x9}, {0x4, 0x9}, {0x7}, {0x6, 0x4}, {0x6, 0x1}, {0x2, 0x7}, {0x4, 0x8}, {0x7, 0x9}, {0x5, 0x7}, {0x2, 0x2}, {0x6, 0x3}, {0x2}, {0x1, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x2, 0x9}, {0x7, 0x9}, {0x2, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0xa}, {0x4, 0x2}, {0x4, 0xa}, {0x4, 0x9}, {0x4, 0x1}, {0x3, 0x14}, {0x3, 0x2}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x6, 0x1}, {0x2, 0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x5, 0x8}, {0x1, 0xa}, {0x7, 0x5}, {0x0, 0x6}, {0x3, 0x1a}, {0x0, 0x1}, {0x6, 0x6}, {0x5, 0x8}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x6}, {0x1}, {0x3, 0x3}, {0x3, 0x3}, {0x3}, {0x5, 0x3}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8000, 0x5, 0x8, 0x40, 0x8, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x3, 0x4, 0x80, 0x7fff, 0x3ff, 0x8000, 0x9f]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9765, 0xc, 0x8000, 0x7f, 0x9, 0x8, 0x800, 0x6]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x5, 0x24, 0x9, 0x2, 0x1b, 0x30, 0x2, 0x6c, 0x9, 0xb, 0xc, 0x6c, 0x1, 0x2, 0x12, 0x6]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0xa, 0x5, 0x0, 0x1, 0x3ff, 0x7f5, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x3, 0x0, 0x6, 0x6, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x2}, {0x1, 0x1}, {0x7, 0x8}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x2}, {}, {0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x5, 0x5}, {0x1, 0xa}, {0x1}, {0x4, 0x8}, {0x0, 0x2}, {0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {0x1, 0x1}, {0x2}, {0x2, 0x6}, {0x2, 0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x3, 0x8}, {0x6, 0x5}, {0x7, 0x8}, {0x0, 0xa}, {0x7, 0x5}, {0x6}, {0x0, 0xa}, {0x1, 0x9}, {0x6, 0x1}, {0x4, 0x3}, {0x7, 0xa}, {0x6, 0xa}, {0x5, 0x3}, {0x6, 0x9}, {0x5, 0x8}, {0x5, 0x9}, {}, {0x5, 0x2}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x4, 0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x2, 0x6, 0x16, 0x6c, 0x5, 0x36, 0x16, 0x9, 0x4, 0x12, 0x4, 0x60, 0x1, 0x4, 0x18, 0x48, 0x4, 0x5, 0x1, 0x9, 0x3c, 0x9, 0x3, 0x6c, 0x12, 0x6, 0x9, 0x12, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x4, 0x12, 0x6, 0x4, 0x24, 0x24, 0x6c, 0x3, 0x4, 0x3, 0x12, 0x16, 0x24, 0x12, 0x18, 0x30, 0x18, 0x16, 0x6, 0x24, 0x24, 0x5, 0x61, 0x6, 0x1b, 0x5, 0x3, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xc0b, 0x7, 0x80, 0x5, 0x7, 0x3, 0x3]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x3, 0x7, 0x1, 0xd, 0x9, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x3, 0x48, 0x16, 0x24, 0x30, 0x24, 0x3, 0x9, 0x16, 0x1b, 0x30, 0x1, 0x60, 0x13]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x6, 0x3, 0x0, 0x1, 0x5, 0x5, 0x256]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xb, 0x0, 0x4, 0x16, 0x1b, 0x2, 0xc, 0x6, 0x36, 0x5, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x6}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x1}, {0x6, 0x2}, {0x5, 0x8}, {0x6, 0x9}, {0x1, 0x9}, {0x4, 0x3}, {0x1, 0xa}, {0x4, 0x5}, {}, {0x3, 0x9}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x6}, {0x3, 0x4}, {0x1, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x2, 0x9}, {0x2, 0x1}, {0x7}, {0x5, 0x9}, {0x7, 0x4}, {0x7}, {0x4, 0x6}, {0x4, 0x4}, {0x4, 0x7}, {0x1}, {0x1, 0x4}, {0x1, 0x1}, {}, {0x4, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x5}, {0x5, 0x3}, {0x2, 0x3}, {0x7, 0x1}, {0x3, 0x6}, {0x2, 0x3}, {0x4, 0x1}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x1}, {0x4, 0x2}, {0x5}, {0x6, 0x8}, {0x4, 0x6}, {0x0, 0x2}, {0x4, 0x5}, {0x7, 0x3}, {0x7, 0x7}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x9}, {0x4, 0x9}, {0x6, 0x3}, {0x5, 0x9}, {0x6, 0x3}, {0x5, 0x1}, {0x5, 0x3}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x5}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x6, 0x5, 0xb, 0x4, 0x6c, 0x60, 0x0, 0x2, 0x24, 0x16, 0x2, 0x1b, 0x48, 0xb, 0x5, 0x60, 0x6c, 0x2, 0x0, 0x2, 0xb, 0x3, 0x16, 0x9, 0x18, 0x62, 0x60, 0x24]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x9}, {0x6, 0x2}, {0x7, 0x3}, {}, {0x3, 0xa}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x5}, {0x2, 0x9}, {0x3, 0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x6}, {0x3, 0x1}, {0x2, 0x5}, {0x0, 0x5}, {0x2, 0x4}, {0x7, 0x9}, {0x6, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x4, 0xa}, {0x3, 0xa}, {0x2, 0x6}, {0x0, 0x7}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x4}, {0x5, 0x8}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0x1}, {0x5, 0x5}, {0x7, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x6, 0x1, 0x7fff, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x60]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x88}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x70}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x25}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x40c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1bc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x3, 0x4, 0x7, 0x20, 0x2792, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x40c, 0x81, 0x5, 0x9, 0x0, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x1}, {0x4, 0x8}, {0x6, 0x6}, {0x1, 0x7}, {0x1}, {0x6, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0xa}, {0x4, 0x5}, {0x6, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x8}, {0x6}, {0x6, 0x1}, {0x7, 0x1}, {0x7, 0x4}, {0x6, 0x2}, {0x3, 0x3}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0x5}, {0x6, 0x5}, {0x7, 0x8}, {0x1, 0x7}, {0x2, 0x5}, {0x3, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x3}, {0x6, 0x3}, {0x3, 0x1}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x30, 0x1, 0x36, 0x16, 0x16, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x6, 0xff, 0xb, 0x5, 0x3, 0x60b]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x1, 0x0, 0x7, 0x9, 0x10, 0x0, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x401, 0xfff8, 0x7, 0x7, 0x6, 0x2, 0x6]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x8}, {0x1, 0x9}, {}, {0x1, 0x8}, {0x1, 0xa}, {0x6, 0x6}, {0x4, 0x8}, {0x3, 0x3}, {0x5, 0x5}, {0x1, 0x1}, {0x2, 0xa}, {0x5, 0x3}, {0x4, 0x9}, {0x1, 0x6}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x4, 0x24, 0x18, 0x1b, 0xb, 0x18, 0x48, 0x2f, 0xc, 0x60, 0x6, 0x2, 0x6c, 0x36, 0x1, 0x48, 0x48, 0x36, 0x12]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0xb, 0x9, 0x16, 0x9d, 0x6, 0x1, 0x4, 0x16, 0x4, 0x18, 0x3, 0xc, 0xb, 0x4, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0xc, 0x1b, 0xc, 0x0, 0x30, 0x1b, 0x30, 0x6, 0x1, 0x30, 0x18, 0x12, 0x5, 0x60, 0x6, 0x2, 0x24, 0x3, 0x1b, 0x6c, 0x18, 0x18, 0xc, 0x0, 0x1b, 0x1, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x83f, 0x3, 0x2, 0x6, 0x10, 0xb, 0x7, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xec7, 0x9, 0x80, 0x4, 0x3, 0x9a9d, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x208, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x7}, {0x7, 0x8}, {0x2, 0x6}, {0x4, 0x6}, {0x1, 0x4}, {0x2, 0x5}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x9}, {0x6, 0x2}, {0x6, 0x9}, {0x3, 0x5}, {0x0, 0x3}, {0x3, 0x3}, {0x3, 0x7}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x3}, {0x4, 0x3}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x2}, {0x5}, {0x1, 0x2}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x4}, {0x6, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0xc, 0x9, 0x48, 0x2, 0x36, 0xc, 0x6, 0xb, 0x5, 0x24, 0x2, 0x1, 0x3, 0x1b, 0xb, 0x3f, 0x16, 0x1, 0x12, 0x1, 0x1, 0x18, 0x12, 0x12, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x7, 0x9, 0x8, 0x2, 0x6, 0x48]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x36, 0x1, 0x0, 0x3, 0x1b, 0xa, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x3, 0xa, 0xb, 0x1, 0xf7a9]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x4, 0x1, 0x3, 0xffff, 0x5, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0xa75, 0x5, 0xe25d, 0x200, 0x4, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x2}, {0x6, 0x4}, {0x1, 0x3}, {0x5, 0x6}, {0x1, 0x6}, {0x6, 0xa}, {0x7, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x4, 0x7}, {0x6, 0x8}, {0x0, 0x7}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x7}, {0x6, 0x5}, {0x5, 0x7}, {0x7, 0x1}]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x7}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x2, 0x3}, {0x5, 0x4}, {0x3, 0x7}, {0x1}, {0x5, 0x3}, {}, {0x3, 0x1}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x6}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0x8}, {0x7, 0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x18, 0x36, 0x0, 0x48, 0x1, 0x2, 0xc, 0x30, 0x14, 0x5, 0x9, 0x24, 0x1b, 0x4, 0x36, 0xc]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x2, 0xf5a, 0x6541, 0x6, 0x6, 0x5]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x2, 0x48, 0x6, 0x8a, 0x5d, 0xd12b]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x800, 0xfffd, 0x0, 0xf801, 0x3, 0x8, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1000, 0x6, 0x1, 0x4, 0xe, 0x6, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x4, 0x8}, {0x2}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x1}, {0x1, 0x8}, {0x4, 0x3}, {0x2, 0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x5, 0x4}, {0x5, 0x8}, {0x6, 0x3}, {0x4, 0x7}, {0x3, 0x5}, {0x7, 0x8}, {0x1, 0x5}, {0x7, 0x2}, {0x6}, {0x4, 0x5}, {0x0, 0x4}, {0x3}, {0x2, 0x2}, {0x7, 0x5}, {0x2, 0x1}, {0x6, 0x5}, {0x7, 0x1}, {0x2, 0x9}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x60, 0x24, 0x1b, 0x6, 0x0, 0xb, 0x12, 0x30, 0x36, 0x6, 0x2, 0x6c, 0x12, 0x36, 0x12, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x244, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3d6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x220, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x20, 0xc898, 0x8, 0xe380, 0x3, 0x5, 0x9]}}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x0, 0xfff, 0x7, 0x71, 0xc, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x200, 0xfff8, 0x76, 0x0, 0x1, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x401, 0x2, 0x1, 0xf801, 0x3, 0x3ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0xa639, 0xb, 0xc085, 0x9, 0x0, 0x0, 0x8]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x2, 0xa}, {0x6, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x4, 0x4}, {0x3, 0x2}, {0x4, 0x6}, {0x3, 0x5}, {0x4, 0x9}, {0x0, 0x5}, {0x4, 0x5}, {0x3, 0x1}, {0x6, 0x8}, {0x6, 0x3}, {0x4}, {0x0, 0x1}, {0x2, 0x7}, {0x4, 0x1}, {0x0, 0x7}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0xa}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0x8}, {0x5, 0x7}, {0x7, 0x1}, {0x4, 0x8}, {0x3}, {0x2, 0x9}, {0x4, 0x6}, {0x7}, {0x5}, {0x7, 0x3}, {0x2, 0x2}, {0x2, 0x1}, {0x1, 0x9}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0xa}, {0x5, 0xa}, {0x4, 0x8}, {0x4, 0x8}, {0x2, 0x2}, {0x1, 0x9}, {0x5, 0x9}, {0x1, 0x3}, {0x5, 0x1}, {0x0, 0x8}, {0x3, 0x2}, {0x7, 0x4}, {0x7, 0xa}, {0x1, 0x2}, {0x7, 0x4}, {0x6, 0x4}, {0x5}, {0x3, 0x2}, {0x3, 0x3}, {0x4, 0x5}, {0x1, 0x1}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x5}, {0x1}, {0x7, 0x2}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xd, 0xe0, 0x1, 0x8, 0x3, 0x7, 0xfeff]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x12, 0x24, 0x48, 0xc, 0x6c, 0x16, 0x18, 0x12, 0x13, 0x6, 0x2, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x8, 0x7, 0x200, 0x1ff, 0x6, 0x9, 0x1c]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x2}, {0x0, 0x5}, {0x6, 0x1}, {0x4, 0x3}, {0x5, 0x5}, {0x4, 0x6}, {0x5}, {0x5, 0x3}, {0x5, 0x4}, {0x2, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {0x4, 0x3}, {0x4, 0x1}, {0x4, 0x5}, {0x5}, {0x1, 0x9}, {0x4, 0x3}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x7}, {0x1, 0x6}, {0x5}, {0x5, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x5, 0x8}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x3, 0x8}]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x5}, {0x6, 0x6}, {0x1, 0x6}, {0x2}, {0x4, 0x6}, {0x5, 0x6}, {0x1, 0x9}, {0x5, 0x6}, {0x6, 0x5}, {0x2, 0xa}, {0x7, 0x4}, {0x2, 0x7}, {0x1, 0x1}, {0x4}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x5}, {0x0, 0x2}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {}, {0x2, 0x4}, {0x4}, {0x0, 0x2}, {0x6}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0x9}, {0x1, 0x4}, {0x7, 0xa}, {0x6, 0x6}, {0x4, 0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x1, 0x2}, {0x7, 0x8}, {0x5, 0x4}, {0x1, 0x7}, {0x3, 0x9}, {0x4, 0x6}, {0x7, 0x4}, {0x4, 0x7}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x3, 0x9}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x5, 0x4}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0xa}, {0x7, 0x9}, {0x3, 0x9}, {0x3, 0x8}, {0x2, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1f, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0x6}, {0x5, 0x4}, {0x4, 0x3}, {0x4, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x70}]}]}]}, 0xa24}, 0x1, 0x0, 0x0, 0x8040}, 0xc840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x400c5) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="00001700000000000c001a8008"], 0x2c}}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) 15.685067261s ago: executing program 1 (id=7638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 15.684673238s ago: executing program 4 (id=7639): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25030040000800010000000000100007800c00018008000100", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x150}, 0x20008040) 15.613647907s ago: executing program 1 (id=7640): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2d, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 710.18958ms ago: executing program 32 (id=7630): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f000000af00), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="99cc6a27d9685c66b6dc476a3dd9c7af61e29d8168b55116c6710445eee400542c40b9319e855c7c6b95a3d67d6b1df6a2a8caf13728d2f90366324e30f5ae53097ce2980d1fcd7ada3d08003577642cd10a0d01d9cd1b4582f4fb018eb90e037334", 0x62}, {&(0x7f0000000980)="437ef70cd5d9cf21c0e515ab0c9a381b21f11c01", 0x14}], 0x2}}], 0x1, 0x20005040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f000000afc0)={&(0x7f000000af40)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000c4) 664.422491ms ago: executing program 33 (id=7634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x800) shutdown(r1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1300000056000100000000000000000007"], 0x18}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f00000003c0), &(0x7f0000000500)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r5, 0x2000) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000800060a0b0400000000000000000a000000140000001100010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f00000001c0)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000280)=0x2f) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x2, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff1, 0x5}, {0xd, 0x1}, {0x8, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x40}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4f7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40094) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRES64=r11, @ANYRES16=r13, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0049f7a0c1"], 0x2c}}, 0x40000) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r14}, 0xc) 591.75759ms ago: executing program 34 (id=7637): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x0, [0x3f, 0x1, 0x7, 0x32c2, 0x1000, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x78) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000002ec0)="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", 0x648}, {&(0x7f00000005c0)="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", 0x230}, {&(0x7f0000001640)="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", 0x1cc}], 0x3, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x40) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8c4) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000002280)={0xa24, r11, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x7c4, 0x11d, 0x0, 0x1, [{0x32c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x180, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x7}, {0x6, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x7}, {0x7, 0x5}, {0x3, 0x1}, {}, {0x7, 0xa}, {0x0, 0x3}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x9}, {0x7, 0x9}, {0x4, 0x9}, {0x7}, {0x6, 0x4}, {0x6, 0x1}, {0x2, 0x7}, {0x4, 0x8}, {0x7, 0x9}, {0x5, 0x7}, {0x2, 0x2}, {0x6, 0x3}, {0x2}, {0x1, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x2, 0x9}, {0x7, 0x9}, {0x2, 0x9}, {0x3, 0x4}, {0x3, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0xa}, {0x4, 0x2}, {0x4, 0xa}, {0x4, 0x9}, {0x4, 0x1}, {0x3, 0x14}, {0x3, 0x2}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x6, 0x1}, {0x2, 0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x5, 0x8}, {0x1, 0xa}, {0x7, 0x5}, {0x0, 0x6}, {0x3, 0x1a}, {0x0, 0x1}, {0x6, 0x6}, {0x5, 0x8}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x6}, {0x1}, {0x3, 0x3}, {0x3, 0x3}, {0x3}, {0x5, 0x3}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8000, 0x5, 0x8, 0x40, 0x8, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x3, 0x4, 0x80, 0x7fff, 0x3ff, 0x8000, 0x9f]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9765, 0xc, 0x8000, 0x7f, 0x9, 0x8, 0x800, 0x6]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x5, 0x24, 0x9, 0x2, 0x1b, 0x30, 0x2, 0x6c, 0x9, 0xb, 0xc, 0x6c, 0x1, 0x2, 0x12, 0x6]}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0xa, 0x5, 0x0, 0x1, 0x3ff, 0x7f5, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x3, 0x0, 0x6, 0x6, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x2}, {0x1, 0x1}, {0x7, 0x8}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x2}, {}, {0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x5, 0x5}, {0x1, 0xa}, {0x1}, {0x4, 0x8}, {0x0, 0x2}, {0x4}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {0x1, 0x1}, {0x2}, {0x2, 0x6}, {0x2, 0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x3, 0x8}, {0x6, 0x5}, {0x7, 0x8}, {0x0, 0xa}, {0x7, 0x5}, {0x6}, {0x0, 0xa}, {0x1, 0x9}, {0x6, 0x1}, {0x4, 0x3}, {0x7, 0xa}, {0x6, 0xa}, {0x5, 0x3}, {0x6, 0x9}, {0x5, 0x8}, {0x5, 0x9}, {}, {0x5, 0x2}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x4, 0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x2, 0x6, 0x16, 0x6c, 0x5, 0x36, 0x16, 0x9, 0x4, 0x12, 0x4, 0x60, 0x1, 0x4, 0x18, 0x48, 0x4, 0x5, 0x1, 0x9, 0x3c, 0x9, 0x3, 0x6c, 0x12, 0x6, 0x9, 0x12, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x4, 0x12, 0x6, 0x4, 0x24, 0x24, 0x6c, 0x3, 0x4, 0x3, 0x12, 0x16, 0x24, 0x12, 0x18, 0x30, 0x18, 0x16, 0x6, 0x24, 0x24, 0x5, 0x61, 0x6, 0x1b, 0x5, 0x3, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xc0b, 0x7, 0x80, 0x5, 0x7, 0x3, 0x3]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x3, 0x7, 0x1, 0xd, 0x9, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x3, 0x48, 0x16, 0x24, 0x30, 0x24, 0x3, 0x9, 0x16, 0x1b, 0x30, 0x1, 0x60, 0x13]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x6, 0x3, 0x0, 0x1, 0x5, 0x5, 0x256]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0xb, 0x0, 0x4, 0x16, 0x1b, 0x2, 0xc, 0x6, 0x36, 0x5, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x6}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x1}, {0x6, 0x2}, {0x5, 0x8}, {0x6, 0x9}, {0x1, 0x9}, {0x4, 0x3}, {0x1, 0xa}, {0x4, 0x5}, {}, {0x3, 0x9}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x6}, {0x3, 0x4}, {0x1, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x2, 0x9}, {0x2, 0x1}, {0x7}, {0x5, 0x9}, {0x7, 0x4}, {0x7}, {0x4, 0x6}, {0x4, 0x4}, {0x4, 0x7}, {0x1}, {0x1, 0x4}, {0x1, 0x1}, {}, {0x4, 0xa}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x5}, {0x5, 0x3}, {0x2, 0x3}, {0x7, 0x1}, {0x3, 0x6}, {0x2, 0x3}, {0x4, 0x1}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x1}, {0x4, 0x2}, {0x5}, {0x6, 0x8}, {0x4, 0x6}, {0x0, 0x2}, {0x4, 0x5}, {0x7, 0x3}, {0x7, 0x7}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x9}, {0x4, 0x9}, {0x6, 0x3}, {0x5, 0x9}, {0x6, 0x3}, {0x5, 0x1}, {0x5, 0x3}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x5}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x6, 0x5, 0xb, 0x4, 0x6c, 0x60, 0x0, 0x2, 0x24, 0x16, 0x2, 0x1b, 0x48, 0xb, 0x5, 0x60, 0x6c, 0x2, 0x0, 0x2, 0xb, 0x3, 0x16, 0x9, 0x18, 0x62, 0x60, 0x24]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x9}, {0x6, 0x2}, {0x7, 0x3}, {}, {0x3, 0xa}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x5}, {0x2, 0x9}, {0x3, 0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x6}, {0x3, 0x1}, {0x2, 0x5}, {0x0, 0x5}, {0x2, 0x4}, {0x7, 0x9}, {0x6, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x4, 0xa}, {0x3, 0xa}, {0x2, 0x6}, {0x0, 0x7}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x4}, {0x5, 0x8}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0x1}, {0x5, 0x5}, {0x7, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x6, 0x1, 0x7fff, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x60]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x88}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x70}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x25}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x40c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1bc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x3, 0x4, 0x7, 0x20, 0x2792, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x40c, 0x81, 0x5, 0x9, 0x0, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x1}, {0x4, 0x8}, {0x6, 0x6}, {0x1, 0x7}, {0x1}, {0x6, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x7, 0xa}, {0x4, 0x5}, {0x6, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x8}, {0x6}, {0x6, 0x1}, {0x7, 0x1}, {0x7, 0x4}, {0x6, 0x2}, {0x3, 0x3}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0x5}, {0x6, 0x5}, {0x7, 0x8}, {0x1, 0x7}, {0x2, 0x5}, {0x3, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x3}, {0x6, 0x3}, {0x3, 0x1}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x30, 0x1, 0x36, 0x16, 0x16, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x6, 0xff, 0xb, 0x5, 0x3, 0x60b]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x1, 0x0, 0x7, 0x9, 0x10, 0x0, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x401, 0xfff8, 0x7, 0x7, 0x6, 0x2, 0x6]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x8}, {0x1, 0x9}, {}, {0x1, 0x8}, {0x1, 0xa}, {0x6, 0x6}, {0x4, 0x8}, {0x3, 0x3}, {0x5, 0x5}, {0x1, 0x1}, {0x2, 0xa}, {0x5, 0x3}, {0x4, 0x9}, {0x1, 0x6}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x4, 0x24, 0x18, 0x1b, 0xb, 0x18, 0x48, 0x2f, 0xc, 0x60, 0x6, 0x2, 0x6c, 0x36, 0x1, 0x48, 0x48, 0x36, 0x12]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0xb, 0x9, 0x16, 0x9d, 0x6, 0x1, 0x4, 0x16, 0x4, 0x18, 0x3, 0xc, 0xb, 0x4, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0xc, 0x1b, 0xc, 0x0, 0x30, 0x1b, 0x30, 0x6, 0x1, 0x30, 0x18, 0x12, 0x5, 0x60, 0x6, 0x2, 0x24, 0x3, 0x1b, 0x6c, 0x18, 0x18, 0xc, 0x0, 0x1b, 0x1, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x83f, 0x3, 0x2, 0x6, 0x10, 0xb, 0x7, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xec7, 0x9, 0x80, 0x4, 0x3, 0x9a9d, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x208, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x7}, {0x7, 0x8}, {0x2, 0x6}, {0x4, 0x6}, {0x1, 0x4}, {0x2, 0x5}, {0x0, 0x1}, {0x6, 0x4}, {0x6, 0x9}, {0x6, 0x2}, {0x6, 0x9}, {0x3, 0x5}, {0x0, 0x3}, {0x3, 0x3}, {0x3, 0x7}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x3}, {0x4, 0x3}, {0x7, 0x1}, {0x7, 0x4}, {0x1, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x2}, {0x5}, {0x1, 0x2}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x4}, {0x6, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0xc, 0x9, 0x48, 0x2, 0x36, 0xc, 0x6, 0xb, 0x5, 0x24, 0x2, 0x1, 0x3, 0x1b, 0xb, 0x3f, 0x16, 0x1, 0x12, 0x1, 0x1, 0x18, 0x12, 0x12, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x7, 0x9, 0x8, 0x2, 0x6, 0x48]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x36, 0x1, 0x0, 0x3, 0x1b, 0xa, 0x9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x3, 0xa, 0xb, 0x1, 0xf7a9]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x4, 0x1, 0x3, 0xffff, 0x5, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0xa75, 0x5, 0xe25d, 0x200, 0x4, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x2}, {0x6, 0x4}, {0x1, 0x3}, {0x5, 0x6}, {0x1, 0x6}, {0x6, 0xa}, {0x7, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x4, 0x7}, {0x6, 0x8}, {0x0, 0x7}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x7}, {0x6, 0x5}, {0x5, 0x7}, {0x7, 0x1}]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x7}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x2, 0x3}, {0x5, 0x4}, {0x3, 0x7}, {0x1}, {0x5, 0x3}, {}, {0x3, 0x1}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x6}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0x8}, {0x7, 0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x18, 0x36, 0x0, 0x48, 0x1, 0x2, 0xc, 0x30, 0x14, 0x5, 0x9, 0x24, 0x1b, 0x4, 0x36, 0xc]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x2, 0xf5a, 0x6541, 0x6, 0x6, 0x5]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x2, 0x48, 0x6, 0x8a, 0x5d, 0xd12b]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x800, 0xfffd, 0x0, 0xf801, 0x3, 0x8, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1000, 0x6, 0x1, 0x4, 0xe, 0x6, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x4, 0x8}, {0x2}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x1}, {0x1, 0x8}, {0x4, 0x3}, {0x2, 0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x5, 0x4}, {0x5, 0x8}, {0x6, 0x3}, {0x4, 0x7}, {0x3, 0x5}, {0x7, 0x8}, {0x1, 0x5}, {0x7, 0x2}, {0x6}, {0x4, 0x5}, {0x0, 0x4}, {0x3}, {0x2, 0x2}, {0x7, 0x5}, {0x2, 0x1}, {0x6, 0x5}, {0x7, 0x1}, {0x2, 0x9}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x60, 0x24, 0x1b, 0x6, 0x0, 0xb, 0x12, 0x30, 0x36, 0x6, 0x2, 0x6c, 0x12, 0x36, 0x12, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x244, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3d6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x220, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbf}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x20, 0xc898, 0x8, 0xe380, 0x3, 0x5, 0x9]}}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x0, 0xfff, 0x7, 0x71, 0xc, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x200, 0xfff8, 0x76, 0x0, 0x1, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x401, 0x2, 0x1, 0xf801, 0x3, 0x3ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0xa639, 0xb, 0xc085, 0x9, 0x0, 0x0, 0x8]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x2, 0xa}, {0x6, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x4, 0x4}, {0x3, 0x2}, {0x4, 0x6}, {0x3, 0x5}, {0x4, 0x9}, {0x0, 0x5}, {0x4, 0x5}, {0x3, 0x1}, {0x6, 0x8}, {0x6, 0x3}, {0x4}, {0x0, 0x1}, {0x2, 0x7}, {0x4, 0x1}, {0x0, 0x7}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0xa}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0x8}, {0x5, 0x7}, {0x7, 0x1}, {0x4, 0x8}, {0x3}, {0x2, 0x9}, {0x4, 0x6}, {0x7}, {0x5}, {0x7, 0x3}, {0x2, 0x2}, {0x2, 0x1}, {0x1, 0x9}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0xa}, {0x5, 0xa}, {0x4, 0x8}, {0x4, 0x8}, {0x2, 0x2}, {0x1, 0x9}, {0x5, 0x9}, {0x1, 0x3}, {0x5, 0x1}, {0x0, 0x8}, {0x3, 0x2}, {0x7, 0x4}, {0x7, 0xa}, {0x1, 0x2}, {0x7, 0x4}, {0x6, 0x4}, {0x5}, {0x3, 0x2}, {0x3, 0x3}, {0x4, 0x5}, {0x1, 0x1}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x5}, {0x1}, {0x7, 0x2}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x4}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xd, 0xe0, 0x1, 0x8, 0x3, 0x7, 0xfeff]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x12, 0x24, 0x48, 0xc, 0x6c, 0x16, 0x18, 0x12, 0x13, 0x6, 0x2, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x8, 0x7, 0x200, 0x1ff, 0x6, 0x9, 0x1c]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x2}, {0x0, 0x5}, {0x6, 0x1}, {0x4, 0x3}, {0x5, 0x5}, {0x4, 0x6}, {0x5}, {0x5, 0x3}, {0x5, 0x4}, {0x2, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {0x4, 0x3}, {0x4, 0x1}, {0x4, 0x5}, {0x5}, {0x1, 0x9}, {0x4, 0x3}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x2}, {0x2, 0x7}, {0x1, 0x6}, {0x5}, {0x5, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x5, 0x8}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x3, 0x8}]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x5}, {0x6, 0x6}, {0x1, 0x6}, {0x2}, {0x4, 0x6}, {0x5, 0x6}, {0x1, 0x9}, {0x5, 0x6}, {0x6, 0x5}, {0x2, 0xa}, {0x7, 0x4}, {0x2, 0x7}, {0x1, 0x1}, {0x4}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x5}, {0x0, 0x2}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {}, {0x2, 0x4}, {0x4}, {0x0, 0x2}, {0x6}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0x9}, {0x1, 0x4}, {0x7, 0xa}, {0x6, 0x6}, {0x4, 0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x1, 0x2}, {0x7, 0x8}, {0x5, 0x4}, {0x1, 0x7}, {0x3, 0x9}, {0x4, 0x6}, {0x7, 0x4}, {0x4, 0x7}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x3, 0x9}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x5, 0x4}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0xa}, {0x7, 0x9}, {0x3, 0x9}, {0x3, 0x8}, {0x2, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1f, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0x6}, {0x5, 0x4}, {0x4, 0x3}, {0x4, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x70}]}]}]}, 0xa24}, 0x1, 0x0, 0x0, 0x8040}, 0xc840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x400c5) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="00001700000000000c001a8008"], 0x2c}}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) 138.85539ms ago: executing program 35 (id=7640): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2d, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 0s ago: executing program 36 (id=7639): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25030040000800010000000000100007800c00018008000100", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x150}, 0x20008040) kernel console output (not intermixed with test programs): tered promiscuous mode [ 732.247104][T26782] syzkaller1: entered allmulticast mode [ 732.296277][T26795] FAULT_INJECTION: forcing a failure. [ 732.296277][T26795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.348180][T26795] CPU: 1 UID: 0 PID: 26795 Comm: syz.3.6813 Not tainted syzkaller #0 PREEMPT(full) [ 732.348212][T26795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.348226][T26795] Call Trace: [ 732.348235][T26795] [ 732.348244][T26795] dump_stack_lvl+0xe8/0x150 [ 732.348281][T26795] should_fail_ex+0x412/0x560 [ 732.348319][T26795] _copy_to_user+0x31/0xb0 [ 732.348353][T26795] simple_read_from_buffer+0xe1/0x170 [ 732.348388][T26795] proc_fail_nth_read+0x1bb/0x230 [ 732.348421][T26795] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.348455][T26795] ? rw_verify_area+0x2a6/0x4d0 [ 732.348475][T26795] ? __fget_files+0x2a/0x420 [ 732.348504][T26795] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 732.348535][T26795] vfs_read+0x20c/0xa70 [ 732.348555][T26795] ? fdget_pos+0x246/0x320 [ 732.348591][T26795] ? __pfx___mutex_lock+0x10/0x10 [ 732.348615][T26795] ? __pfx_vfs_read+0x10/0x10 [ 732.348638][T26795] ? __fget_files+0x2a/0x420 [ 732.348674][T26795] ? __fget_files+0x3a0/0x420 [ 732.348703][T26795] ? __fget_files+0x2a/0x420 [ 732.348743][T26795] ksys_read+0x150/0x270 [ 732.348768][T26795] ? __pfx_ksys_read+0x10/0x10 [ 732.348803][T26795] do_syscall_64+0x14d/0xf80 [ 732.348823][T26795] ? trace_irq_disable+0x3b/0x150 [ 732.348854][T26795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.348876][T26795] ? clear_bhb_loop+0x40/0x90 [ 732.348904][T26795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.348926][T26795] RIP: 0033:0x7f773435cfce [ 732.348947][T26795] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 732.348967][T26795] RSP: 002b:00007f773517afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 732.348991][T26795] RAX: ffffffffffffffda RBX: 00007f773517b6c0 RCX: 00007f773435cfce [ 732.349007][T26795] RDX: 000000000000000f RSI: 00007f773517b0a0 RDI: 000000000000000c [ 732.349021][T26795] RBP: 00007f773517b090 R08: 0000000000000000 R09: 0000000000000000 [ 732.349035][T26795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 732.349048][T26795] R13: 00007f7734616038 R14: 00007f7734615fa0 R15: 00007ffcd16e3018 [ 732.349083][T26795] [ 732.746877][T26799] Unsupported ieee802154 address type: 0 [ 732.957405][T26811] ip6gre0: Master is either lo or non-ether device [ 732.966883][T26813] ip6gre0: Master is either lo or non-ether device [ 733.057012][T26816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6821'. [ 733.132643][T26820] set match dimension is over the limit! [ 733.194023][T26816] bond0: entered promiscuous mode [ 733.219676][T26816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.293232][T26828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.301274][T26828] bond0: (slave sit1): The slave device specified does not support setting the MAC address [ 733.313044][T26828] bond0: (slave sit1): Error -95 calling set_mac_address [ 733.617501][T26839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6828'. [ 733.645220][T26835] xt_limit: Overflow, try lower: 271964/0 [ 733.681397][T26843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6828'. [ 733.740802][T26842] netlink: 'syz.3.6829': attribute type 25 has an invalid length. [ 733.779211][T26842] netlink: 'syz.3.6829': attribute type 9 has an invalid length. [ 734.003921][T26857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.106716][T26857] mac80211_hwsim hwsim75 syzkaller0: entered promiscuous mode [ 734.148287][T26857] mac80211_hwsim hwsim75 syzkaller0: entered allmulticast mode [ 734.270746][T26862] veth0_to_team: entered promiscuous mode [ 734.314753][T26862] veth0_to_team: left promiscuous mode [ 734.411934][T26869] wg1 speed is unknown, defaulting to 1000 [ 735.248289][T26908] Cannot find set identified by id 0 to match [ 736.094414][T26955] vcan0: tx drop: invalid sa for name 0x0000080000000000 [ 736.134922][T26955] netlink: 'syz.4.6862': attribute type 1 has an invalid length. [ 736.191321][T26964] __nla_validate_parse: 5 callbacks suppressed [ 736.191342][T26964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6862'. [ 736.270692][T26964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6862'. [ 736.295081][T26955] bond0: entered promiscuous mode [ 736.301240][T26955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.351834][T26913] bond_slave_1: entered promiscuous mode [ 736.421547][T26966] bond0: (slave bridge1): making interface the new active one [ 736.429784][T26969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6863'. [ 736.444601][T26966] bridge1: entered promiscuous mode [ 736.455533][T26966] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 736.472317][T26969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.495568][T26969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.899461][T26937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.746668][T27022] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6882'. [ 739.826336][T27025] mac80211_hwsim hwsim75 syzkaller0: left promiscuous mode [ 740.021203][T27023] wg1 speed is unknown, defaulting to 1000 [ 740.080216][T27037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6886'. [ 740.107552][T27037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.518255][ T51] block nbd2: Receive control failed (result -32) [ 740.762631][T27064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6900'. [ 740.805092][T27073] FAULT_INJECTION: forcing a failure. [ 740.805092][T27073] name failslab, interval 1, probability 0, space 0, times 0 [ 740.847123][T27073] CPU: 1 UID: 0 PID: 27073 Comm: syz.2.6901 Not tainted syzkaller #0 PREEMPT(full) [ 740.847155][T27073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 740.847169][T27073] Call Trace: [ 740.847179][T27073] [ 740.847188][T27073] dump_stack_lvl+0xe8/0x150 [ 740.847226][T27073] should_fail_ex+0x412/0x560 [ 740.847260][T27073] should_failslab+0xa8/0x100 [ 740.847287][T27073] ? skb_clone+0x212/0x3a0 [ 740.847321][T27073] kmem_cache_alloc_noprof+0x87/0x650 [ 740.847365][T27073] skb_clone+0x212/0x3a0 [ 740.847403][T27073] __netlink_deliver_tap+0x404/0x850 [ 740.847457][T27073] ? netlink_deliver_tap+0x2e/0x1b0 [ 740.847486][T27073] netlink_deliver_tap+0x19c/0x1b0 [ 740.847515][T27073] __netlink_sendskb+0x47/0x90 [ 740.847541][T27073] netlink_dump+0xa6f/0xe80 [ 740.847582][T27073] ? __pfx_netlink_dump+0x10/0x10 [ 740.847606][T27073] ? __netlink_lookup+0x7e4/0x8b0 [ 740.847653][T27073] ? netlink_lookup+0x30/0x200 [ 740.847679][T27073] ? netlink_lookup+0x30/0x200 [ 740.847702][T27073] ? netlink_lookup+0x30/0x200 [ 740.847733][T27073] __netlink_dump_start+0x5cb/0x7e0 [ 740.847769][T27073] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 740.847800][T27073] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 740.847832][T27073] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 740.847860][T27073] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 740.847886][T27073] ? ref_tracker_free+0x693/0x840 [ 740.847913][T27073] ? __pfx_rtnl_dumpit+0x10/0x10 [ 740.847940][T27073] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 740.847984][T27073] netlink_rcv_skb+0x232/0x4b0 [ 740.848013][T27073] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 740.848044][T27073] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 740.848090][T27073] ? netlink_deliver_tap+0x2e/0x1b0 [ 740.848127][T27073] netlink_unicast+0x80f/0x9b0 [ 740.848162][T27073] ? __pfx_netlink_unicast+0x10/0x10 [ 740.848190][T27073] ? netlink_sendmsg+0x650/0xb40 [ 740.848216][T27073] ? skb_put+0x11b/0x210 [ 740.848250][T27073] netlink_sendmsg+0x813/0xb40 [ 740.848290][T27073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.848322][T27073] ? aa_sock_msg_perm+0xf1/0x1b0 [ 740.848349][T27073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 740.848375][T27073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.848484][T27073] ____sys_sendmsg+0xa68/0xad0 [ 740.848527][T27073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 740.848571][T27073] ? import_iovec+0x73/0xa0 [ 740.848607][T27073] ___sys_sendmsg+0x2a5/0x360 [ 740.848645][T27073] ? __pfx____sys_sendmsg+0x10/0x10 [ 740.848716][T27073] ? __fget_files+0x2a/0x420 [ 740.848746][T27073] ? __fget_files+0x3a0/0x420 [ 740.848785][T27073] __x64_sys_sendmsg+0x1bd/0x2a0 [ 740.848820][T27073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 740.848863][T27073] ? __pfx_ksys_write+0x10/0x10 [ 740.848900][T27073] do_syscall_64+0x14d/0xf80 [ 740.848921][T27073] ? trace_irq_disable+0x3b/0x150 [ 740.848952][T27073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.848975][T27073] ? clear_bhb_loop+0x40/0x90 [ 740.849003][T27073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.849028][T27073] RIP: 0033:0x7fac2599c799 [ 740.849049][T27073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.849066][T27073] RSP: 002b:00007fac26891028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.849087][T27073] RAX: ffffffffffffffda RBX: 00007fac25c15fa0 RCX: 00007fac2599c799 [ 740.849103][T27073] RDX: 0000000020008000 RSI: 0000200000000840 RDI: 0000000000000004 [ 740.849116][T27073] RBP: 00007fac26891090 R08: 0000000000000000 R09: 0000000000000000 [ 740.849129][T27073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.849140][T27073] R13: 00007fac25c16038 R14: 00007fac25c15fa0 R15: 00007fff2278baa8 [ 740.849176][T27073] [ 741.306338][T27075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6902'. [ 741.633184][T27079] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6903'. [ 741.790643][T27088] vcan0: tx address claim with dlc 0 [ 742.015303][T27102] netlink: 'syz.1.6912': attribute type 16 has an invalid length. [ 742.058514][T27102] netlink: 'syz.1.6912': attribute type 17 has an invalid length. [ 742.109408][T27107] xt_policy: output policy not valid in PREROUTING and INPUT [ 742.237087][T27102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 742.599187][T27134] lo: entered allmulticast mode [ 742.604317][T27133] lo: left allmulticast mode [ 742.858591][T27149] mac80211_hwsim hwsim68 wlan0: Caught tx_queue_len zero misconfig [ 742.969386][T27156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6928'. [ 743.114604][T27159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6930'. [ 743.250081][T27163] netlink: 'syz.0.6931': attribute type 8 has an invalid length. [ 743.307403][T27167] netlink: 'syz.0.6931': attribute type 8 has an invalid length. [ 743.429746][T27162] syzkaller0: entered promiscuous mode [ 743.435289][T27162] syzkaller0: entered allmulticast mode [ 743.468790][T27172] set match dimension is over the limit! [ 743.890894][T27192] netlink: 'syz.2.6940': attribute type 1 has an invalid length. [ 744.052181][T27199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6945'. [ 744.066058][T27199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6945'. [ 744.200771][T27207] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 746.807791][T27190] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 746.822571][T27190] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 746.841781][T27190] bond0: (slave ip6gre1): making interface the new active one [ 746.860395][T27190] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 746.970555][T27225] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 747.194619][T27231] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 747.219307][T27235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6957'. [ 747.230260][T27231] syzkaller0: entered promiscuous mode [ 747.235808][T27231] syzkaller0: entered allmulticast mode [ 747.240930][T27235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6957'. [ 747.254807][T27231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6955'. [ 747.277690][T27238] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6958'. [ 747.291584][T27239] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6958'. [ 747.533922][T27249] wg1 speed is unknown, defaulting to 1000 [ 747.776713][T27265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6964'. [ 747.975558][T27268] vcan0: tx drop: invalid sa for name 0x0000080000000000 [ 748.494213][T27278] netlink: 'syz.1.6967': attribute type 6 has an invalid length. [ 748.511945][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6967'. [ 748.626426][T27274] smc: net device team0 applied user defined pnetid SYZ2 [ 748.636783][T27277] tipc: Started in network mode [ 748.642928][T27277] tipc: Node identity 080211000001, cluster identity 4711 [ 748.653437][T27277] tipc: Enabled bearer , priority 0 [ 748.662358][T27277] mac80211_hwsim hwsim75 syzkaller0: entered promiscuous mode [ 749.178061][T27304] set match dimension is over the limit! [ 749.772358][T18301] tipc: Node number set to 134418688 [ 749.939827][T27343] set match dimension is over the limit! [ 750.312247][T27354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6995'. [ 752.270989][T27310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 752.673717][T27393] set match dimension is over the limit! [ 752.684314][T27392] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.7006'. [ 752.724926][T27392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7006'. [ 752.783833][T27392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 752.805964][T27392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7006'. [ 752.834525][T27399] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7010'. [ 752.869809][T27401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7006'. [ 752.879495][T27401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7006'. [ 752.902455][T27396] syzkaller0: entered promiscuous mode [ 752.908006][T27396] syzkaller0: entered allmulticast mode [ 752.917481][T27401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7006'. [ 752.943315][T27406] netlink: 'syz.1.7006': attribute type 4 has an invalid length. [ 752.983338][T27406] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7006'. [ 753.014186][T27401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.035047][T27401] bond1: (slave bond0): making interface the new active one [ 753.046150][T27401] bond1: (slave bond0): Enslaving as an active interface with an up link [ 753.067018][T27406] .`: renamed from bond0 (while UP) [ 753.111263][ T36] bond1: (slave .`): link status definitely down, disabling slave [ 753.126001][ T36] bond1: now running without any active interface! [ 753.743447][T27429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7018'. [ 754.162391][T27443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7024'. [ 754.265823][T27448] delete_channel: no stack [ 754.341656][T27452] netlink: 'syz.3.7028': attribute type 2 has an invalid length. [ 754.368091][T27452] vþ: entered promiscuous mode [ 754.644132][T27464] IPv6: NLM_F_CREATE should be specified when creating new route [ 756.245904][T27413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 756.652706][T27482] vcan0: tx drop: invalid sa for name 0x0000080000000000 [ 756.656293][T27481] FAULT_INJECTION: forcing a failure. [ 756.656293][T27481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.763201][T27481] CPU: 1 UID: 0 PID: 27481 Comm: syz.3.7037 Not tainted syzkaller #0 PREEMPT(full) [ 756.763232][T27481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.763246][T27481] Call Trace: [ 756.763256][T27481] [ 756.763265][T27481] dump_stack_lvl+0xe8/0x150 [ 756.763417][T27481] should_fail_ex+0x412/0x560 [ 756.763451][T27481] _copy_from_user+0x2d/0xb0 [ 756.763485][T27481] get_timespec64+0x96/0x1b0 [ 756.763514][T27481] ? __pfx_get_timespec64+0x10/0x10 [ 756.763552][T27481] __x64_sys_recvmmsg+0x14b/0x250 [ 756.763590][T27481] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 756.763637][T27481] do_syscall_64+0x14d/0xf80 [ 756.763657][T27481] ? trace_irq_disable+0x3b/0x150 [ 756.763690][T27481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.763715][T27481] ? clear_bhb_loop+0x40/0x90 [ 756.763743][T27481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.763767][T27481] RIP: 0033:0x7f773439c799 [ 756.763788][T27481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.763808][T27481] RSP: 002b:00007f773517b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 756.763832][T27481] RAX: ffffffffffffffda RBX: 00007f7734615fa0 RCX: 00007f773439c799 [ 756.763849][T27481] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 756.763865][T27481] RBP: 00007f773517b090 R08: 0000200000003700 R09: 0000000000000000 [ 756.763880][T27481] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 756.763895][T27481] R13: 00007f7734616038 R14: 00007f7734615fa0 R15: 00007ffcd16e3018 [ 756.763932][T27481] [ 757.059506][T27490] netlink: 'syz.3.7044': attribute type 7 has an invalid length. [ 757.958010][T27529] FAULT_INJECTION: forcing a failure. [ 757.958010][T27529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.977151][T27529] CPU: 0 UID: 0 PID: 27529 Comm: syz.3.7054 Not tainted syzkaller #0 PREEMPT(full) [ 757.977183][T27529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 757.977198][T27529] Call Trace: [ 757.977206][T27529] [ 757.977216][T27529] dump_stack_lvl+0xe8/0x150 [ 757.977254][T27529] should_fail_ex+0x412/0x560 [ 757.977287][T27529] _copy_from_user+0x2d/0xb0 [ 757.977320][T27529] ___sys_recvmsg+0x175/0x590 [ 757.977361][T27529] ? __pfx____sys_recvmsg+0x10/0x10 [ 757.977421][T27529] ? __fget_files+0x3a0/0x420 [ 757.977464][T27529] do_recvmmsg+0x334/0x800 [ 757.977507][T27529] ? __pfx_do_recvmmsg+0x10/0x10 [ 757.977554][T27529] ? _copy_from_user+0x94/0xb0 [ 757.977601][T27529] __x64_sys_recvmmsg+0x1b7/0x250 [ 757.977639][T27529] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 757.977683][T27529] do_syscall_64+0x14d/0xf80 [ 757.977704][T27529] ? trace_irq_disable+0x3b/0x150 [ 757.977734][T27529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.977755][T27529] ? clear_bhb_loop+0x40/0x90 [ 757.977782][T27529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.977804][T27529] RIP: 0033:0x7f773439c799 [ 757.977825][T27529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.977844][T27529] RSP: 002b:00007f773517b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 757.977867][T27529] RAX: ffffffffffffffda RBX: 00007f7734615fa0 RCX: 00007f773439c799 [ 757.977882][T27529] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 757.977897][T27529] RBP: 00007f773517b090 R08: 0000200000003700 R09: 0000000000000000 [ 757.977911][T27529] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 757.977924][T27529] R13: 00007f7734616038 R14: 00007f7734615fa0 R15: 00007ffcd16e3018 [ 757.977958][T27529] [ 758.376951][T27545] netlink: 'syz.2.7059': attribute type 10 has an invalid length. [ 758.544277][T27556] __nla_validate_parse: 5 callbacks suppressed [ 758.544299][T27556] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7061'. [ 758.600788][T27559] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7061'. [ 758.611729][T27558] netlink: 'syz.4.7062': attribute type 10 has an invalid length. [ 758.668164][T27545] wlan1: mtu less than device minimum [ 758.698039][T27545] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 758.741805][T27558] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.749604][T27558] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.782650][T27558] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.789941][T27558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.797530][T27558] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.804799][T27558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.819220][T27561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7063'. [ 758.861894][T27558] .`: (slave bridge0): Enslaving as an active interface with an up link [ 758.880352][T27564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7063'. [ 759.851383][T27573] FAULT_INJECTION: forcing a failure. [ 759.851383][T27573] name fail_futex, interval 1, probability 0, space 0, times 1 [ 759.866279][T27573] CPU: 0 UID: 0 PID: 27573 Comm: syz.4.7067 Not tainted syzkaller #0 PREEMPT(full) [ 759.866311][T27573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 759.866325][T27573] Call Trace: [ 759.866335][T27573] [ 759.866345][T27573] dump_stack_lvl+0xe8/0x150 [ 759.866383][T27573] should_fail_ex+0x412/0x560 [ 759.866419][T27573] get_futex_key+0x1ac/0x1690 [ 759.866457][T27573] ? __pfx_get_futex_key+0x10/0x10 [ 759.866483][T27573] ? __lock_acquire+0x6b5/0x2cf0 [ 759.866522][T27573] futex_wake+0x114/0x580 [ 759.866555][T27573] ? __lock_acquire+0x6b5/0x2cf0 [ 759.866587][T27573] ? __pfx_futex_wake+0x10/0x10 [ 759.866626][T27573] ? exit_mm_release+0x1a/0x30 [ 759.866663][T27573] do_futex+0x395/0x420 [ 759.866695][T27573] ? __pfx_do_futex+0x10/0x10 [ 759.866728][T27573] ? __might_fault+0xaf/0x130 [ 759.866765][T27573] mm_release+0x103/0x290 [ 759.866797][T27573] exit_mm+0x51/0x220 [ 759.866824][T27573] ? unwind_deferred_task_exit+0x67/0xa0 [ 759.866857][T27573] do_exit+0x62e/0x2320 [ 759.866888][T27573] ? __pfx_do_exit+0x10/0x10 [ 759.866914][T27573] ? do_raw_spin_lock+0x12b/0x2f0 [ 759.866947][T27573] do_group_exit+0x21b/0x2d0 [ 759.866969][T27573] ? _raw_spin_unlock_irq+0x23/0x50 [ 759.867007][T27573] get_signal+0x1284/0x1330 [ 759.867057][T27573] arch_do_signal_or_restart+0xbc/0x830 [ 759.867086][T27573] ? __fget_files+0x3a0/0x420 [ 759.867118][T27573] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 759.867152][T27573] ? ksys_write+0x242/0x270 [ 759.867185][T27573] exit_to_user_mode_loop+0x86/0x480 [ 759.867210][T27573] ? rcu_is_watching+0x15/0xb0 [ 759.867246][T27573] do_syscall_64+0x32d/0xf80 [ 759.867267][T27573] ? trace_irq_disable+0x3b/0x150 [ 759.867298][T27573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.867321][T27573] ? clear_bhb_loop+0x40/0x90 [ 759.867348][T27573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.867370][T27573] RIP: 0033:0x7fada339c799 [ 759.867392][T27573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.867411][T27573] RSP: 002b:00007fada417d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 759.867435][T27573] RAX: fffffffffffffe00 RBX: 00007fada3616090 RCX: 00007fada339c799 [ 759.867451][T27573] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000003 [ 759.867466][T27573] RBP: 00007fada417d090 R08: 0000000000000000 R09: 0000000000000000 [ 759.867480][T27573] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 759.867493][T27573] R13: 00007fada3616128 R14: 00007fada3616090 R15: 00007fff71df1338 [ 759.867528][T27573] [ 761.313310][T27549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 761.604542][T27613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7078'. [ 761.644852][T27613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7078'. [ 761.654837][T27611] syzkaller0: entered promiscuous mode [ 761.664612][T27611] syzkaller0: entered allmulticast mode [ 761.729944][T27611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7080'. [ 761.816594][T27625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7085'. [ 761.904912][T27611] team0: Port device team_slave_0 removed [ 762.153494][T27619] wg1 speed is unknown, defaulting to 1000 [ 762.219182][T27637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7087'. [ 762.516564][T27647] Cannot find add_set index 0 as target [ 762.611707][T27629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 763.175625][T27659] syzkaller1: entered promiscuous mode [ 763.203406][T27659] syzkaller1: entered allmulticast mode [ 763.212467][T27673] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7099'. [ 763.225588][T27670] sctp: [Deprecated]: syz.4.7098 (pid 27670) Use of int in max_burst socket option deprecated. [ 763.225588][T27670] Use struct sctp_assoc_value instead [ 763.270975][T27673] mac80211_hwsim hwsim69 syzkaller0: entered promiscuous mode [ 763.304979][T27673] mac80211_hwsim hwsim69 syzkaller0: entered allmulticast mode [ 763.463699][T27685] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20000 [ 764.206799][T27725] __nla_validate_parse: 3 callbacks suppressed [ 764.206821][T27725] netlink: 324 bytes leftover after parsing attributes in process `syz.4.7113'. [ 764.878561][T27733] bond1: option mode: unable to set because the bond device has slaves [ 765.166296][T27745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7122'. [ 765.195902][T27750] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7125'. [ 765.532668][T27768] FAULT_INJECTION: forcing a failure. [ 765.532668][T27768] name failslab, interval 1, probability 0, space 0, times 0 [ 765.546473][T27768] CPU: 0 UID: 0 PID: 27768 Comm: syz.2.7129 Not tainted syzkaller #0 PREEMPT(full) [ 765.546502][T27768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 765.546517][T27768] Call Trace: [ 765.546525][T27768] [ 765.546535][T27768] dump_stack_lvl+0xe8/0x150 [ 765.546572][T27768] should_fail_ex+0x412/0x560 [ 765.546611][T27768] should_failslab+0xa8/0x100 [ 765.546640][T27768] __kmalloc_cache_noprof+0x88/0x660 [ 765.546665][T27768] ? copy_ipcs+0x1f9/0x6c0 [ 765.546694][T27768] copy_ipcs+0x1f9/0x6c0 [ 765.546715][T27768] ? copy_utsname+0x184/0x620 [ 765.546748][T27768] create_new_namespaces+0x210/0x6a0 [ 765.546781][T27768] ? bpf_lsm_capable+0x9/0x20 [ 765.546810][T27768] ? security_capable+0x7e/0x2c0 [ 765.546842][T27768] unshare_nsproxy_namespaces+0x11a/0x160 [ 765.546875][T27768] ksys_unshare+0x51d/0x930 [ 765.546916][T27768] ? __pfx_ksys_unshare+0x10/0x10 [ 765.546951][T27768] ? __pfx_ksys_write+0x10/0x10 [ 765.546984][T27768] __x64_sys_unshare+0x38/0x50 [ 765.547017][T27768] do_syscall_64+0x14d/0xf80 [ 765.547037][T27768] ? trace_irq_disable+0x3b/0x150 [ 765.547067][T27768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.547090][T27768] ? clear_bhb_loop+0x40/0x90 [ 765.547118][T27768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.547140][T27768] RIP: 0033:0x7fac2599c799 [ 765.547162][T27768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.547182][T27768] RSP: 002b:00007fac26870028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 765.547205][T27768] RAX: ffffffffffffffda RBX: 00007fac25c16090 RCX: 00007fac2599c799 [ 765.547223][T27768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 765.547236][T27768] RBP: 00007fac26870090 R08: 0000000000000000 R09: 0000000000000000 [ 765.547250][T27768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.547263][T27768] R13: 00007fac25c16128 R14: 00007fac25c16090 R15: 00007fff2278baa8 [ 765.547298][T27768] [ 765.998608][T27770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7130'. [ 766.033197][T27770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7130'. [ 766.660089][T27791] Unsupported ieee802154 address type: 0 [ 766.689491][T27793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7136'. [ 766.782965][T27795] netlink: 'syz.1.7139': attribute type 7 has an invalid length. [ 766.791679][T27795] netlink: 'syz.1.7139': attribute type 27 has an invalid length. [ 766.914012][T27797] FAULT_INJECTION: forcing a failure. [ 766.914012][T27797] name failslab, interval 1, probability 0, space 0, times 0 [ 766.926935][T27797] CPU: 1 UID: 0 PID: 27797 Comm: syz.3.7140 Not tainted syzkaller #0 PREEMPT(full) [ 766.926966][T27797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 766.926981][T27797] Call Trace: [ 766.926990][T27797] [ 766.927000][T27797] dump_stack_lvl+0xe8/0x150 [ 766.927038][T27797] should_fail_ex+0x412/0x560 [ 766.927069][T27797] should_failslab+0xa8/0x100 [ 766.927099][T27797] __kmalloc_cache_noprof+0x88/0x660 [ 766.927126][T27797] ? alloc_fs_context+0x64/0xd50 [ 766.927166][T27797] alloc_fs_context+0x64/0xd50 [ 766.927209][T27797] mq_init_ns+0x110/0x760 [ 766.927250][T27797] copy_ipcs+0x460/0x6c0 [ 766.927279][T27797] create_new_namespaces+0x210/0x6a0 [ 766.927312][T27797] ? bpf_lsm_capable+0x9/0x20 [ 766.927341][T27797] ? security_capable+0x7e/0x2c0 [ 766.927374][T27797] unshare_nsproxy_namespaces+0x11a/0x160 [ 766.927408][T27797] ksys_unshare+0x51d/0x930 [ 766.927450][T27797] ? __pfx_ksys_unshare+0x10/0x10 [ 766.927490][T27797] ? __pfx_ksys_write+0x10/0x10 [ 766.927524][T27797] __x64_sys_unshare+0x38/0x50 [ 766.927557][T27797] do_syscall_64+0x14d/0xf80 [ 766.927580][T27797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.927603][T27797] ? clear_bhb_loop+0x40/0x90 [ 766.927631][T27797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.927653][T27797] RIP: 0033:0x7f773439c799 [ 766.927674][T27797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.927693][T27797] RSP: 002b:00007f773517b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 766.927718][T27797] RAX: ffffffffffffffda RBX: 00007f7734615fa0 RCX: 00007f773439c799 [ 766.927735][T27797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 766.927749][T27797] RBP: 00007f773517b090 R08: 0000000000000000 R09: 0000000000000000 [ 766.927763][T27797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.927776][T27797] R13: 00007f7734616038 R14: 00007f7734615fa0 R15: 00007ffcd16e3018 [ 766.927812][T27797] [ 768.274944][T27753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 768.687612][T27821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7149'. [ 768.883503][T27835] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7153'. [ 768.926493][T27841] FAULT_INJECTION: forcing a failure. [ 768.926493][T27841] name failslab, interval 1, probability 0, space 0, times 0 [ 768.999773][T27841] CPU: 0 UID: 0 PID: 27841 Comm: syz.4.7154 Not tainted syzkaller #0 PREEMPT(full) [ 768.999806][T27841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.999820][T27841] Call Trace: [ 768.999829][T27841] [ 768.999838][T27841] dump_stack_lvl+0xe8/0x150 [ 768.999874][T27841] should_fail_ex+0x412/0x560 [ 768.999906][T27841] should_failslab+0xa8/0x100 [ 768.999935][T27841] __kmalloc_cache_noprof+0x88/0x660 [ 768.999959][T27841] ? alloc_super+0x5b/0xab0 [ 768.999993][T27841] alloc_super+0x5b/0xab0 [ 769.000033][T27841] ? do_raw_spin_unlock+0xf5/0x210 [ 769.000061][T27841] sget_fc+0x329/0xa40 [ 769.000096][T27841] ? __pfx_set_anon_super_fc+0x10/0x10 [ 769.000117][T27841] ? __pfx_mqueue_fill_super+0x10/0x10 [ 769.000142][T27841] get_tree_nodev+0x2a/0x150 [ 769.000167][T27841] vfs_get_tree+0x92/0x2a0 [ 769.000193][T27841] fc_mount_longterm+0x1c/0x100 [ 769.000220][T27841] mq_init_ns+0x513/0x760 [ 769.000259][T27841] copy_ipcs+0x460/0x6c0 [ 769.000287][T27841] create_new_namespaces+0x210/0x6a0 [ 769.000320][T27841] ? bpf_lsm_capable+0x9/0x20 [ 769.000348][T27841] ? security_capable+0x7e/0x2c0 [ 769.000381][T27841] unshare_nsproxy_namespaces+0x11a/0x160 [ 769.000414][T27841] ksys_unshare+0x51d/0x930 [ 769.000457][T27841] ? __pfx_ksys_unshare+0x10/0x10 [ 769.000491][T27841] ? __pfx_ksys_write+0x10/0x10 [ 769.000524][T27841] __x64_sys_unshare+0x38/0x50 [ 769.000557][T27841] do_syscall_64+0x14d/0xf80 [ 769.000578][T27841] ? trace_irq_disable+0x3b/0x150 [ 769.000609][T27841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.000632][T27841] ? clear_bhb_loop+0x40/0x90 [ 769.000659][T27841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.000681][T27841] RIP: 0033:0x7fada339c799 [ 769.000702][T27841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.000721][T27841] RSP: 002b:00007fada417d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 769.000745][T27841] RAX: ffffffffffffffda RBX: 00007fada3616090 RCX: 00007fada339c799 [ 769.000762][T27841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 769.000775][T27841] RBP: 00007fada417d090 R08: 0000000000000000 R09: 0000000000000000 [ 769.000789][T27841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.000803][T27841] R13: 00007fada3616128 R14: 00007fada3616090 R15: 00007fff71df1338 [ 769.000838][T27841] [ 769.285293][T27845] netlink: 'syz.2.7158': attribute type 10 has an invalid length. [ 769.303139][T27845] wlan1: mtu less than device minimum [ 769.313405][T27845] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 769.476670][T27851] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7160'. [ 769.550670][T27853] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.7161'. [ 769.669347][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7161'. [ 769.701008][T27858] bond1: option mode: unable to set because the bond device has slaves [ 769.739119][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 769.751557][T27858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7161'. [ 769.802210][T27858] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7161'. [ 769.817044][T27862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7164'. [ 769.827007][T27863] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 769.848927][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7161'. [ 769.857883][T27858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7161'. [ 769.907807][T27853] netlink: 'syz.0.7161': attribute type 4 has an invalid length. [ 769.939074][T27853] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7161'. [ 770.039861][T27871] netlink: 'syz.4.7167': attribute type 10 has an invalid length. [ 770.129411][T27871] wlan1: mtu less than device minimum [ 770.134959][T27871] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 770.142917][T27873] netlink: 71 bytes leftover after parsing attributes in process `syz.3.7170'. [ 770.633715][T27907] bond1: option mode: unable to set because the bond device has slaves [ 770.706669][T27907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.735969][T27918] netlink: 'syz.3.7181': attribute type 4 has an invalid length. [ 770.768076][T27907] bond1: (slave bond0): Enslaving as an active interface with a down link [ 770.803185][T27912] IPVS: Unknown mcast interface: pimreg0 [ 771.445044][T27943] mac80211_hwsim hwsim69 syzkaller0: left promiscuous mode [ 771.468696][T27943] mac80211_hwsim hwsim69 syzkaller0: left allmulticast mode [ 771.509206][T27946] netlink: 'syz.2.7192': attribute type 7 has an invalid length. [ 771.540490][T27946] netlink: 'syz.2.7192': attribute type 27 has an invalid length. [ 771.571752][T27946] netlink: 'syz.2.7192': attribute type 7 has an invalid length. [ 771.604815][T27946] netlink: 'syz.2.7192': attribute type 27 has an invalid length. [ 771.895443][T27958] syzkaller0: entered promiscuous mode [ 771.922022][T27958] syzkaller0: entered allmulticast mode [ 772.131936][T27960] netlink: 'syz.1.7195': attribute type 4 has an invalid length. [ 772.655488][T27976] sctp: [Deprecated]: syz.0.7197 (pid 27976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.655488][T27976] Use struct sctp_sack_info instead [ 773.846422][T27966] bond1: option mode: unable to set because the bond device has slaves [ 774.283476][T27992] tap0: tun_chr_ioctl cmd 1074025676 [ 774.292924][T27994] netlink: 'syz.4.7204': attribute type 7 has an invalid length. [ 774.309188][T27994] netlink: 'syz.4.7204': attribute type 27 has an invalid length. [ 774.329019][T27992] tap0: owner set to 0 [ 774.349055][T27994] netlink: 'syz.4.7204': attribute type 7 has an invalid length. [ 774.356951][T27994] netlink: 'syz.4.7204': attribute type 27 has an invalid length. [ 774.427393][T28000] netlink: 'syz.0.7206': attribute type 4 has an invalid length. [ 774.562354][T28003] bond2: (slave bond_slave_1): Device is not our slave [ 774.579306][T28003] bond2: option active_slave: invalid value (bond_slave_1) [ 774.610090][T28003] bond2 (unregistering): Released all slaves [ 774.916069][T28030] netlink: 'syz.4.7216': attribute type 8 has an invalid length. [ 774.924839][T28030] __nla_validate_parse: 19 callbacks suppressed [ 774.924863][T28030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7216'. [ 775.064416][T28038] netlink: 'syz.1.7219': attribute type 7 has an invalid length. [ 775.073571][T28038] netlink: 'syz.1.7219': attribute type 27 has an invalid length. [ 775.082278][T28038] netlink: 'syz.1.7219': attribute type 7 has an invalid length. [ 775.217024][T28044] FAULT_INJECTION: forcing a failure. [ 775.217024][T28044] name failslab, interval 1, probability 0, space 0, times 0 [ 775.230156][T28044] CPU: 1 UID: 0 PID: 28044 Comm: syz.2.7222 Not tainted syzkaller #0 PREEMPT(full) [ 775.230188][T28044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 775.230202][T28044] Call Trace: [ 775.230212][T28044] [ 775.230221][T28044] dump_stack_lvl+0xe8/0x150 [ 775.230259][T28044] should_fail_ex+0x412/0x560 [ 775.230292][T28044] should_failslab+0xa8/0x100 [ 775.230321][T28044] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 775.230360][T28044] ? __alloc_skb+0x1d0/0x7d0 [ 775.230388][T28044] ? ipv4_default_advmss+0x20/0x340 [ 775.230424][T28044] __alloc_skb+0x1d0/0x7d0 [ 775.230459][T28044] tcp_stream_alloc_skb+0x3f/0x580 [ 775.230492][T28044] ? __asan_memset+0x22/0x50 [ 775.230528][T28044] tcp_connect+0x1527/0x5370 [ 775.230567][T28044] ? __lock_acquire+0x6b5/0x2cf0 [ 775.230607][T28044] ? __inet_check_established+0xbfe/0xe30 [ 775.230647][T28044] ? __pfx_tcp_connect+0x10/0x10 [ 775.230696][T28044] ? __asan_memset+0x22/0x50 [ 775.230734][T28044] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 775.230769][T28044] ? sk_setup_caps+0x9ef/0xc40 [ 775.230812][T28044] ? sk_setup_caps+0x29/0xc40 [ 775.230846][T28044] tcp_v4_connect+0x11ea/0x1a90 [ 775.230889][T28044] ? __pfx_tcp_v4_connect+0x10/0x10 [ 775.230923][T28044] __inet_stream_connect+0x25a/0xdd0 [ 775.230966][T28044] ? do_raw_spin_lock+0x12b/0x2f0 [ 775.230992][T28044] ? __pfx___inet_stream_connect+0x10/0x10 [ 775.231030][T28044] ? inet_stream_connect+0x51/0xa0 [ 775.231071][T28044] ? __local_bh_enable_ip+0xd0/0x130 [ 775.231105][T28044] inet_stream_connect+0x66/0xa0 [ 775.231144][T28044] __sys_connect+0x312/0x450 [ 775.231176][T28044] ? __pfx___sys_connect+0x10/0x10 [ 775.231219][T28044] ? __pfx_ksys_write+0x10/0x10 [ 775.231251][T28044] __x64_sys_connect+0x7a/0x90 [ 775.231281][T28044] do_syscall_64+0x14d/0xf80 [ 775.231302][T28044] ? trace_irq_disable+0x3b/0x150 [ 775.231333][T28044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.231356][T28044] ? clear_bhb_loop+0x40/0x90 [ 775.231384][T28044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.231406][T28044] RIP: 0033:0x7fac2599c799 [ 775.231428][T28044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.231447][T28044] RSP: 002b:00007fac26891028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 775.231471][T28044] RAX: ffffffffffffffda RBX: 00007fac25c15fa0 RCX: 00007fac2599c799 [ 775.231488][T28044] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 775.231502][T28044] RBP: 00007fac26891090 R08: 0000000000000000 R09: 0000000000000000 [ 775.231515][T28044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.231539][T28044] R13: 00007fac25c16038 R14: 00007fac25c15fa0 R15: 00007fff2278baa8 [ 775.231591][T28044] [ 775.590142][T28043] 8021q: adding VLAN 0 to HW filter on device bond3 [ 775.786385][T28055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7226'. [ 775.890175][T28056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7226'. [ 776.196827][T28070] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 777.324514][T28083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7235'. [ 777.795319][T28021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 778.232714][T28112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7246'. [ 778.267490][T28112] openvswitch: netlink: IP tunnel dst address not specified [ 778.495658][T28125] validate_nla: 5 callbacks suppressed [ 778.495679][T28125] netlink: 'syz.1.7250': attribute type 10 has an invalid length. [ 778.547114][T28125] wlan1: mtu less than device minimum [ 778.553882][T28125] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 778.593239][T28130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.593268][T28129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.716779][T28136] FAULT_INJECTION: forcing a failure. [ 778.716779][T28136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.752430][T28136] CPU: 1 UID: 0 PID: 28136 Comm: syz.2.7254 Not tainted syzkaller #0 PREEMPT(full) [ 778.752463][T28136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.752477][T28136] Call Trace: [ 778.752494][T28136] [ 778.752504][T28136] dump_stack_lvl+0xe8/0x150 [ 778.752541][T28136] should_fail_ex+0x412/0x560 [ 778.752573][T28136] _copy_from_user+0x2d/0xb0 [ 778.752606][T28136] ___sys_sendmsg+0x1c6/0x360 [ 778.752646][T28136] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.752716][T28136] ? __fget_files+0x2a/0x420 [ 778.752748][T28136] ? __fget_files+0x3a0/0x420 [ 778.752790][T28136] __x64_sys_sendmsg+0x1bd/0x2a0 [ 778.752827][T28136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 778.752869][T28136] ? __pfx_ksys_write+0x10/0x10 [ 778.752906][T28136] do_syscall_64+0x14d/0xf80 [ 778.752926][T28136] ? trace_irq_disable+0x3b/0x150 [ 778.752957][T28136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.752980][T28136] ? clear_bhb_loop+0x40/0x90 [ 778.753007][T28136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.753030][T28136] RIP: 0033:0x7fac2599c799 [ 778.753051][T28136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.753071][T28136] RSP: 002b:00007fac26891028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.753095][T28136] RAX: ffffffffffffffda RBX: 00007fac25c15fa0 RCX: 00007fac2599c799 [ 778.753111][T28136] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 778.753124][T28136] RBP: 00007fac26891090 R08: 0000000000000000 R09: 0000000000000000 [ 778.753138][T28136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.753152][T28136] R13: 00007fac25c16038 R14: 00007fac25c15fa0 R15: 00007fff2278baa8 [ 778.753187][T28136] [ 779.931992][T28182] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7270'. [ 780.951478][T28195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7274'. [ 781.680788][T28134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 781.918533][T28210] xt_recent: hitcount (1056964608) is larger than allowed maximum (65535) [ 781.956003][T28214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7276'. [ 781.989296][T28214] bond1: option mode: unable to set because the bond device has slaves [ 782.022978][T28214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7276'. [ 782.064168][T28214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7276'. [ 782.098952][T28214] netlink: 'syz.1.7276': attribute type 4 has an invalid length. [ 782.117470][T28214] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7276'. [ 782.176166][T28223] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7281'. [ 782.340538][T28231] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7283'. [ 782.541693][T28244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7285'. [ 782.555485][T28244] bridge: RTM_NEWNEIGH with invalid ether address [ 782.594611][T28244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7285'. [ 782.630857][T28244] bridge: RTM_NEWNEIGH with invalid ether address [ 782.944923][T28255] FAULT_INJECTION: forcing a failure. [ 782.944923][T28255] name failslab, interval 1, probability 0, space 0, times 0 [ 782.971685][T28255] CPU: 0 UID: 0 PID: 28255 Comm: syz.2.7287 Not tainted syzkaller #0 PREEMPT(full) [ 782.971717][T28255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 782.971731][T28255] Call Trace: [ 782.971740][T28255] [ 782.971750][T28255] dump_stack_lvl+0xe8/0x150 [ 782.971787][T28255] should_fail_ex+0x412/0x560 [ 782.971820][T28255] should_failslab+0xa8/0x100 [ 782.971847][T28255] ? skb_clone+0x212/0x3a0 [ 782.971880][T28255] kmem_cache_alloc_noprof+0x87/0x650 [ 782.971924][T28255] ? __netlink_lookup+0xc6/0x8b0 [ 782.971961][T28255] skb_clone+0x212/0x3a0 [ 782.971999][T28255] __netlink_deliver_tap+0x404/0x850 [ 782.972040][T28255] ? netlink_deliver_tap+0x2e/0x1b0 [ 782.972070][T28255] netlink_deliver_tap+0x19c/0x1b0 [ 782.972099][T28255] netlink_unicast+0x7e3/0x9b0 [ 782.972133][T28255] ? __pfx_netlink_unicast+0x10/0x10 [ 782.972165][T28255] ? netlink_sendmsg+0x650/0xb40 [ 782.972191][T28255] ? skb_put+0x11b/0x210 [ 782.972225][T28255] netlink_sendmsg+0x813/0xb40 [ 782.972263][T28255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.972296][T28255] ? aa_sock_msg_perm+0xf1/0x1b0 [ 782.972325][T28255] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 782.972350][T28255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.972377][T28255] ____sys_sendmsg+0xa68/0xad0 [ 782.972419][T28255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 782.972461][T28255] ? import_iovec+0x73/0xa0 [ 782.972501][T28255] ___sys_sendmsg+0x2a5/0x360 [ 782.972538][T28255] ? __pfx____sys_sendmsg+0x10/0x10 [ 782.972606][T28255] ? __fget_files+0x2a/0x420 [ 782.972637][T28255] ? __fget_files+0x3a0/0x420 [ 782.972679][T28255] __x64_sys_sendmsg+0x1bd/0x2a0 [ 782.972715][T28255] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 782.972758][T28255] ? __pfx_ksys_write+0x10/0x10 [ 782.972794][T28255] do_syscall_64+0x14d/0xf80 [ 782.972815][T28255] ? trace_irq_disable+0x3b/0x150 [ 782.972847][T28255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.972870][T28255] ? clear_bhb_loop+0x40/0x90 [ 782.972904][T28255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.972927][T28255] RIP: 0033:0x7fac2599c799 [ 782.972948][T28255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.972968][T28255] RSP: 002b:00007fac26891028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.972992][T28255] RAX: ffffffffffffffda RBX: 00007fac25c15fa0 RCX: 00007fac2599c799 [ 782.973009][T28255] RDX: 0000000000008084 RSI: 0000200000000000 RDI: 0000000000000003 [ 782.973024][T28255] RBP: 00007fac26891090 R08: 0000000000000000 R09: 0000000000000000 [ 782.973038][T28255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.973051][T28255] R13: 00007fac25c16038 R14: 00007fac25c15fa0 R15: 00007fff2278baa8 [ 782.973085][T28255] [ 785.335957][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 785.496651][T28239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 785.730924][T28289] __nla_validate_parse: 1 callbacks suppressed [ 785.730944][T28289] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7300'. [ 785.769708][T28289] FAULT_INJECTION: forcing a failure. [ 785.769708][T28289] name failslab, interval 1, probability 0, space 0, times 0 [ 785.804651][T28289] CPU: 1 UID: 0 PID: 28289 Comm: syz.2.7300 Not tainted syzkaller #0 PREEMPT(full) [ 785.804684][T28289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 785.804698][T28289] Call Trace: [ 785.804707][T28289] [ 785.804718][T28289] dump_stack_lvl+0xe8/0x150 [ 785.804755][T28289] should_fail_ex+0x412/0x560 [ 785.804789][T28289] should_failslab+0xa8/0x100 [ 785.804816][T28289] ? skb_clone+0x212/0x3a0 [ 785.804850][T28289] kmem_cache_alloc_noprof+0x87/0x650 [ 785.804897][T28289] skb_clone+0x212/0x3a0 [ 785.804935][T28289] __netlink_deliver_tap+0x404/0x850 [ 785.804978][T28289] ? netlink_deliver_tap+0x2e/0x1b0 [ 785.805008][T28289] netlink_deliver_tap+0x19c/0x1b0 [ 785.805038][T28289] __netlink_sendskb+0x47/0x90 [ 785.805064][T28289] netlink_dump+0xa6f/0xe80 [ 785.805105][T28289] ? __pfx_netlink_dump+0x10/0x10 [ 785.805128][T28289] ? __netlink_lookup+0x7e4/0x8b0 [ 785.805176][T28289] ? netlink_lookup+0x30/0x200 [ 785.805201][T28289] ? netlink_lookup+0x30/0x200 [ 785.805225][T28289] ? netlink_lookup+0x30/0x200 [ 785.805256][T28289] __netlink_dump_start+0x5cb/0x7e0 [ 785.805293][T28289] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 785.805324][T28289] ? __pfx_neigh_dump_info+0x10/0x10 [ 785.805357][T28289] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 785.805385][T28289] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 785.805412][T28289] ? ref_tracker_free+0x693/0x840 [ 785.805439][T28289] ? __pfx_neigh_dump_info+0x10/0x10 [ 785.805487][T28289] netlink_rcv_skb+0x232/0x4b0 [ 785.805516][T28289] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 785.805547][T28289] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 785.805588][T28289] ? netlink_deliver_tap+0x2e/0x1b0 [ 785.805633][T28289] netlink_unicast+0x80f/0x9b0 [ 785.805669][T28289] ? __pfx_netlink_unicast+0x10/0x10 [ 785.805696][T28289] ? netlink_sendmsg+0x650/0xb40 [ 785.805721][T28289] ? skb_put+0x11b/0x210 [ 785.805756][T28289] netlink_sendmsg+0x813/0xb40 [ 785.805796][T28289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 785.805829][T28289] ? aa_sock_msg_perm+0xf1/0x1b0 [ 785.805857][T28289] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 785.805884][T28289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 785.805910][T28289] ____sys_sendmsg+0xa68/0xad0 [ 785.805954][T28289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 785.805997][T28289] ? import_iovec+0x73/0xa0 [ 785.806034][T28289] ___sys_sendmsg+0x2a5/0x360 [ 785.806073][T28289] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.806153][T28289] ? __fget_files+0x2a/0x420 [ 785.806184][T28289] ? __fget_files+0x3a0/0x420 [ 785.806227][T28289] __x64_sys_sendmsg+0x1bd/0x2a0 [ 785.806263][T28289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 785.806307][T28289] ? __pfx_ksys_write+0x10/0x10 [ 785.806344][T28289] do_syscall_64+0x14d/0xf80 [ 785.806365][T28289] ? trace_irq_disable+0x3b/0x150 [ 785.806396][T28289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.806420][T28289] ? clear_bhb_loop+0x40/0x90 [ 785.806447][T28289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.806470][T28289] RIP: 0033:0x7fac2599c799 [ 785.806490][T28289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.806509][T28289] RSP: 002b:00007fac26891028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.806534][T28289] RAX: ffffffffffffffda RBX: 00007fac25c15fa0 RCX: 00007fac2599c799 [ 785.806551][T28289] RDX: 0000000000008084 RSI: 0000200000000000 RDI: 0000000000000003 [ 785.806567][T28289] RBP: 00007fac26891090 R08: 0000000000000000 R09: 0000000000000000 [ 785.806581][T28289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.806594][T28289] R13: 00007fac25c16038 R14: 00007fac25c15fa0 R15: 00007fff2278baa8 [ 785.806637][T28289] [ 786.260598][T28296] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7301'. [ 786.315420][T28298] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7301'. [ 786.421874][T28296] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.429288][T28296] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.864116][T28307] netlink: 'syz.1.7305': attribute type 5 has an invalid length. [ 787.825577][T28356] xt_bpf: check failed: parse error [ 788.028017][T28364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7327'. [ 788.042630][T28363] xt_TCPMSS: Only works on TCP SYN packets [ 788.127642][T28364] team0: Port device team_slave_0 removed [ 788.161885][T28370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7326'. [ 788.194152][T28364] team0: Caught tx_queue_len zero misconfig [ 788.215078][T28364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7327'. [ 788.393696][T28375] Bluetooth: MGMT ver 1.23 [ 788.434167][T28375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7329'. [ 788.487396][T28382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7329'. [ 788.815081][T28393] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7334'. [ 789.637809][T28423] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7345'. [ 789.685047][T28425] netlink: 'syz.4.7346': attribute type 10 has an invalid length. [ 789.723760][T28425] wlan1: mtu less than device minimum [ 789.741910][T28425] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 789.777452][T28428] netlink: 'syz.1.7348': attribute type 1 has an invalid length. [ 789.917149][T28428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.151630][T28443] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000 [ 790.741049][T28471] netlink: 'syz.3.7361': attribute type 7 has an invalid length. [ 790.759557][T28471] netlink: 'syz.3.7361': attribute type 7 has an invalid length. [ 791.014453][T28481] netlink: 'syz.1.7366': attribute type 2 has an invalid length. [ 791.052188][T28481] 9: entered promiscuous mode [ 791.228988][T28497] __nla_validate_parse: 1 callbacks suppressed [ 791.229010][T28497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7367'. [ 791.579405][T28506] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.7373'. [ 791.598940][T28506] netlink: Unknown conntrack attr (0) [ 792.103686][T28528] netlink: 'syz.4.7382': attribute type 1 has an invalid length. [ 792.164370][T28536] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7381'. [ 792.175275][T28528] bond4: entered promiscuous mode [ 792.180947][T28528] 8021q: adding VLAN 0 to HW filter on device bond4 [ 792.222049][T28536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7381'. [ 792.319873][T28545] netlink: 51 bytes leftover after parsing attributes in process `syz.0.7381'. [ 792.470526][T28536] team0: Port device team_slave_0 removed [ 793.263703][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 793.986175][T28481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 794.257983][T28568] syzkaller0: entered promiscuous mode [ 794.264994][T28568] syzkaller0: entered allmulticast mode [ 794.325280][T28574] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7391'. [ 794.444732][T28577] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 794.492043][T28584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7398'. [ 794.543807][T28585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7398'. [ 794.589121][T28590] netlink: 'syz.3.7399': attribute type 4 has an invalid length. [ 794.619247][T28590] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7399'. [ 794.996323][T28607] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7408'. [ 795.377560][T28621] wg1 speed is unknown, defaulting to 1000 [ 796.116980][T28656] mac80211_hwsim hwsim69 syzkaller0: entered promiscuous mode [ 796.149620][T28656] mac80211_hwsim hwsim69 syzkaller0: entered allmulticast mode [ 796.285078][T28663] __nla_validate_parse: 11 callbacks suppressed [ 796.285102][T28663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7428'. [ 796.489479][T28666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7428'. [ 796.541769][T28675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7428'. [ 796.877721][T28688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7438'. [ 796.932900][T25317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.980893][T28690] syzkaller0: entered promiscuous mode [ 796.997910][T28690] syzkaller0: entered allmulticast mode [ 797.010602][T25347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.290338][T28708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7442'. [ 797.444401][T28712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7446'. [ 797.510355][T28713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7446'. [ 798.049443][T25347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.089183][T25346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.845758][T28698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7441'. [ 799.978625][T25333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.046849][T28721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7451'. [ 800.130375][T25347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.167440][T28734] IPVS: set_ctl: invalid protocol: 0 172.20.20.42:20000 [ 800.452216][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 801.030414][T28734] tipc: Enabled bearer , priority 11 [ 801.173722][T25346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.185638][T28750] xt_hashlimit: size too large, truncated to 1048576 [ 801.298744][T28758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7458'. [ 801.533036][T28770] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7460'. [ 801.595384][T28773] netlink: 'syz.1.7463': attribute type 4 has an invalid length. [ 801.615448][T28773] netlink: 'syz.1.7463': attribute type 1 has an invalid length. [ 801.634462][T28773] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7463'. [ 801.651986][T28763] syzkaller0: entered promiscuous mode [ 801.675611][T28763] syzkaller0: entered allmulticast mode [ 801.688474][T28765] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 801.696476][T28765] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 801.704470][T28765] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 801.739206][T28769] sctp: [Deprecated]: syz.3.7462 (pid 28769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 801.739206][T28769] Use struct sctp_sack_info instead [ 801.857412][T28778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7465'. [ 801.923766][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7465'. [ 801.955588][T28782] Cannot find set identified by id 8448 to match [ 802.080634][T28784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7467'. [ 802.114929][T28784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7467'. [ 802.209503][T25346] net_ratelimit: 51 callbacks suppressed [ 802.209525][T25346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.230619][T25317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.316572][T28790] FAULT_INJECTION: forcing a failure. [ 802.316572][T28790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.360466][T28790] CPU: 1 UID: 0 PID: 28790 Comm: syz.0.7468 Not tainted syzkaller #0 PREEMPT(full) [ 802.360496][T28790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 802.360509][T28790] Call Trace: [ 802.360518][T28790] [ 802.360527][T28790] dump_stack_lvl+0xe8/0x150 [ 802.360563][T28790] should_fail_ex+0x412/0x560 [ 802.360591][T28790] _copy_from_user+0x2d/0xb0 [ 802.360622][T28790] ___sys_sendmsg+0x1c6/0x360 [ 802.360659][T28790] ? __pfx____sys_sendmsg+0x10/0x10 [ 802.360722][T28790] ? __fget_files+0x2a/0x420 [ 802.360750][T28790] ? __fget_files+0x3a0/0x420 [ 802.360787][T28790] __x64_sys_sendmsg+0x1bd/0x2a0 [ 802.360820][T28790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 802.360859][T28790] ? __pfx_ksys_write+0x10/0x10 [ 802.360890][T28790] do_syscall_64+0x14d/0xf80 [ 802.360909][T28790] ? trace_irq_disable+0x3b/0x150 [ 802.360938][T28790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.360958][T28790] ? clear_bhb_loop+0x40/0x90 [ 802.360983][T28790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.361003][T28790] RIP: 0033:0x7fcfc139c799 [ 802.361022][T28790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.361040][T28790] RSP: 002b:00007fcfc2299028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 802.361061][T28790] RAX: ffffffffffffffda RBX: 00007fcfc1616090 RCX: 00007fcfc139c799 [ 802.361075][T28790] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 802.361088][T28790] RBP: 00007fcfc2299090 R08: 0000000000000000 R09: 0000000000000000 [ 802.361100][T28790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.361112][T28790] R13: 00007fcfc1616128 R14: 00007fcfc1616090 R15: 00007ffc4c05c188 [ 802.361143][T28790] [ 802.863115][T25317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.019009][T25338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.250901][T18301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.290039][T18301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.081792][T28798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7469'. [ 805.097462][T28798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7469'. [ 805.127559][T28801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7473'. [ 805.140889][T28802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.156688][T28802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.171929][T28802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.211157][T28807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.344574][T28816] FAULT_INJECTION: forcing a failure. [ 805.344574][T28816] name failslab, interval 1, probability 0, space 0, times 0 [ 805.369474][T28816] CPU: 0 UID: 0 PID: 28816 Comm: syz.0.7477 Not tainted syzkaller #0 PREEMPT(full) [ 805.369508][T28816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 805.369524][T28816] Call Trace: [ 805.369533][T28816] [ 805.369544][T28816] dump_stack_lvl+0xe8/0x150 [ 805.369581][T28816] should_fail_ex+0x412/0x560 [ 805.369613][T28816] should_failslab+0xa8/0x100 [ 805.369642][T28816] __kmalloc_cache_noprof+0x88/0x660 [ 805.369665][T28816] ? __pfx_stack_trace_save+0x10/0x10 [ 805.369689][T28816] ? rtnl_newlink+0x136/0x1be0 [ 805.369722][T28816] rtnl_newlink+0x136/0x1be0 [ 805.369751][T28816] ? kasan_save_track+0x4f/0x80 [ 805.369772][T28816] ? kasan_save_track+0x3e/0x80 [ 805.369792][T28816] ? kasan_save_free_info+0x46/0x50 [ 805.369821][T28816] ? __kasan_slab_free+0x5c/0x80 [ 805.369843][T28816] ? kmem_cache_free+0x187/0x630 [ 805.369866][T28816] ? __dev_queue_xmit+0x16d1/0x3890 [ 805.369886][T28816] ? __netlink_deliver_tap+0x5ad/0x850 [ 805.369913][T28816] ? netlink_deliver_tap+0x19c/0x1b0 [ 805.369938][T28816] ? netlink_unicast+0x7e3/0x9b0 [ 805.369959][T28816] ? netlink_sendmsg+0x813/0xb40 [ 805.369987][T28816] ? __pfx_rtnl_newlink+0x10/0x10 [ 805.370013][T28816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.370083][T28816] ? kasan_quarantine_put+0xbb/0x1f0 [ 805.370105][T28816] ? lockdep_hardirqs_on+0x7a/0x110 [ 805.370144][T28816] ? kmem_cache_free+0x187/0x630 [ 805.370166][T28816] ? nlmon_xmit+0xb0/0x100 [ 805.370211][T28816] ? __lock_acquire+0x6b5/0x2cf0 [ 805.370247][T28816] ? __local_bh_enable_ip+0xd0/0x130 [ 805.370276][T28816] ? lockdep_hardirqs_on+0x7a/0x110 [ 805.370310][T28816] ? __dev_queue_xmit+0x277/0x3890 [ 805.370327][T28816] ? __local_bh_enable_ip+0xd0/0x130 [ 805.370351][T28816] ? __dev_queue_xmit+0x277/0x3890 [ 805.370395][T28816] ? __pfx_rtnl_newlink+0x10/0x10 [ 805.370418][T28816] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 805.370444][T28816] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 805.370466][T28816] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 805.370487][T28816] ? ref_tracker_free+0x693/0x840 [ 805.370509][T28816] ? __copy_skb_header+0xa3/0x4a0 [ 805.370538][T28816] ? __pfx_ref_tracker_free+0x10/0x10 [ 805.370568][T28816] netlink_rcv_skb+0x232/0x4b0 [ 805.370591][T28816] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 805.370616][T28816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 805.370647][T28816] ? netlink_deliver_tap+0x2e/0x1b0 [ 805.370675][T28816] netlink_unicast+0x80f/0x9b0 [ 805.370702][T28816] ? __pfx_netlink_unicast+0x10/0x10 [ 805.370724][T28816] ? netlink_sendmsg+0x650/0xb40 [ 805.370745][T28816] ? skb_put+0x11b/0x210 [ 805.370771][T28816] netlink_sendmsg+0x813/0xb40 [ 805.370801][T28816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.370827][T28816] ? aa_sock_msg_perm+0xf1/0x1b0 [ 805.370851][T28816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 805.370871][T28816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.370893][T28816] ____sys_sendmsg+0xa68/0xad0 [ 805.370927][T28816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 805.370961][T28816] ? import_iovec+0x73/0xa0 [ 805.370990][T28816] ___sys_sendmsg+0x2a5/0x360 [ 805.371021][T28816] ? __pfx____sys_sendmsg+0x10/0x10 [ 805.371081][T28816] ? __fget_files+0x2a/0x420 [ 805.371106][T28816] ? __fget_files+0x3a0/0x420 [ 805.371139][T28816] __x64_sys_sendmsg+0x1bd/0x2a0 [ 805.371169][T28816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 805.371203][T28816] ? __pfx_ksys_write+0x10/0x10 [ 805.371231][T28816] do_syscall_64+0x14d/0xf80 [ 805.371247][T28816] ? trace_irq_disable+0x3b/0x150 [ 805.371273][T28816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.371293][T28816] ? clear_bhb_loop+0x40/0x90 [ 805.371315][T28816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.371333][T28816] RIP: 0033:0x7fcfc139c799 [ 805.371354][T28816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.371371][T28816] RSP: 002b:00007fcfc22ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 805.371392][T28816] RAX: ffffffffffffffda RBX: 00007fcfc1615fa0 RCX: 00007fcfc139c799 [ 805.371406][T28816] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 805.371418][T28816] RBP: 00007fcfc22ba090 R08: 0000000000000000 R09: 0000000000000000 [ 805.371429][T28816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.371440][T28816] R13: 00007fcfc1616038 R14: 00007fcfc1615fa0 R15: 00007ffc4c05c188 [ 805.371468][T28816] [ 806.376086][T28839] __nla_validate_parse: 2 callbacks suppressed [ 806.376110][T28839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7486'. [ 806.429667][T28839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7486'. [ 806.713057][T28852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7491'. [ 807.032032][T28870] FAULT_INJECTION: forcing a failure. [ 807.032032][T28870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.075588][T28870] CPU: 1 UID: 0 PID: 28870 Comm: syz.4.7498 Not tainted syzkaller #0 PREEMPT(full) [ 807.075623][T28870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 807.075639][T28870] Call Trace: [ 807.075650][T28870] [ 807.075661][T28870] dump_stack_lvl+0xe8/0x150 [ 807.075706][T28870] should_fail_ex+0x412/0x560 [ 807.075739][T28870] _copy_from_iter+0x1d3/0x1670 [ 807.075772][T28870] ? rcu_is_watching+0x15/0xb0 [ 807.075811][T28870] ? __pfx__copy_from_iter+0x10/0x10 [ 807.075848][T28870] ? netlink_sendmsg+0x650/0xb40 [ 807.075874][T28870] ? skb_put+0x11b/0x210 [ 807.075917][T28870] netlink_sendmsg+0x6c0/0xb40 [ 807.075956][T28870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.075988][T28870] ? aa_sock_msg_perm+0xf1/0x1b0 [ 807.076015][T28870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 807.076041][T28870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.076067][T28870] ____sys_sendmsg+0xa68/0xad0 [ 807.076113][T28870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.076156][T28870] ? import_iovec+0x73/0xa0 [ 807.076191][T28870] ___sys_sendmsg+0x2a5/0x360 [ 807.076231][T28870] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.076301][T28870] ? __fget_files+0x2a/0x420 [ 807.076331][T28870] ? __fget_files+0x3a0/0x420 [ 807.076374][T28870] __x64_sys_sendmsg+0x1bd/0x2a0 [ 807.076410][T28870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 807.076453][T28870] ? __pfx_ksys_write+0x10/0x10 [ 807.076487][T28870] do_syscall_64+0x14d/0xf80 [ 807.076508][T28870] ? trace_irq_disable+0x3b/0x150 [ 807.076538][T28870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.076562][T28870] ? clear_bhb_loop+0x40/0x90 [ 807.076588][T28870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.076611][T28870] RIP: 0033:0x7fada339c799 [ 807.076631][T28870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.076651][T28870] RSP: 002b:00007fada419e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.076674][T28870] RAX: ffffffffffffffda RBX: 00007fada3615fa0 RCX: 00007fada339c799 [ 807.076690][T28870] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 807.076705][T28870] RBP: 00007fada419e090 R08: 0000000000000000 R09: 0000000000000000 [ 807.076719][T28870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.076732][T28870] R13: 00007fada3616038 R14: 00007fada3615fa0 R15: 00007fff71df1338 [ 807.076767][T28870] [ 807.443498][T28873] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7497'. [ 807.610360][T18301] net_ratelimit: 78 callbacks suppressed [ 807.610382][T18301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.686735][T28880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7500'. [ 807.799187][T28880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7500'. [ 807.860115][T28889] xt_hashlimit: size too large, truncated to 1048576 [ 807.879523][T28891] netlink: 'syz.1.7506': attribute type 1 has an invalid length. [ 807.953970][T28901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7506'. [ 807.988252][T28891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 808.163196][T28902] bond2: (slave gretap2): making interface the new active one [ 808.190350][T28902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.217800][T28902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.228550][T28909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7510'. [ 808.238655][T28902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.250787][T28902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.271817][T28902] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 808.307264][T28909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7510'. [ 808.321863][T21933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.345327][T18301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.429705][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.697040][T18301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.820541][T28926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.911598][T28931] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7517'. [ 809.493276][T28969] vlan3: entered promiscuous mode [ 809.498578][T28969] bridge0: entered promiscuous mode [ 809.681681][T28977] FAULT_INJECTION: forcing a failure. [ 809.681681][T28977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.729164][T28977] CPU: 0 UID: 0 PID: 28977 Comm: syz.4.7532 Not tainted syzkaller #0 PREEMPT(full) [ 809.729198][T28977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 809.729213][T28977] Call Trace: [ 809.729223][T28977] [ 809.729233][T28977] dump_stack_lvl+0xe8/0x150 [ 809.729270][T28977] should_fail_ex+0x412/0x560 [ 809.729302][T28977] _copy_from_user+0x2d/0xb0 [ 809.729336][T28977] ___sys_sendmsg+0x1c6/0x360 [ 809.729374][T28977] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.729445][T28977] ? __fget_files+0x2a/0x420 [ 809.729475][T28977] ? __fget_files+0x3a0/0x420 [ 809.729517][T28977] __x64_sys_sendmsg+0x1bd/0x2a0 [ 809.729553][T28977] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 809.729596][T28977] ? __pfx_ksys_write+0x10/0x10 [ 809.729632][T28977] do_syscall_64+0x14d/0xf80 [ 809.729654][T28977] ? trace_irq_disable+0x3b/0x150 [ 809.729685][T28977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.729708][T28977] ? clear_bhb_loop+0x40/0x90 [ 809.729736][T28977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.729758][T28977] RIP: 0033:0x7fada339c799 [ 809.729780][T28977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.729801][T28977] RSP: 002b:00007fada419e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.729825][T28977] RAX: ffffffffffffffda RBX: 00007fada3615fa0 RCX: 00007fada339c799 [ 809.729843][T28977] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 809.729857][T28977] RBP: 00007fada419e090 R08: 0000000000000000 R09: 0000000000000000 [ 809.729871][T28977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.729885][T28977] R13: 00007fada3616038 R14: 00007fada3615fa0 R15: 00007fff71df1338 [ 809.729927][T28977] [ 810.887761][T29033] netlink: 'syz.2.7551': attribute type 7 has an invalid length. [ 810.896669][T29033] netlink: 'syz.2.7551': attribute type 8 has an invalid length. [ 811.041048][T29038] caif0: entered allmulticast mode [ 811.052633][T29043] Cannot find set identified by id 61443 to match [ 811.226561][T29051] FAULT_INJECTION: forcing a failure. [ 811.226561][T29051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.242237][T29051] CPU: 0 UID: 0 PID: 29051 Comm: syz.4.7559 Not tainted syzkaller #0 PREEMPT(full) [ 811.242268][T29051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.242281][T29051] Call Trace: [ 811.242290][T29051] [ 811.242299][T29051] dump_stack_lvl+0xe8/0x150 [ 811.242351][T29051] should_fail_ex+0x412/0x560 [ 811.242381][T29051] _copy_from_user+0x2d/0xb0 [ 811.242414][T29051] ___sys_sendmsg+0x1c6/0x360 [ 811.242452][T29051] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.242521][T29051] ? __fget_files+0x2a/0x420 [ 811.242564][T29051] ? __fget_files+0x3a0/0x420 [ 811.242606][T29051] __x64_sys_sendmsg+0x1bd/0x2a0 [ 811.242642][T29051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 811.242684][T29051] ? __pfx_ksys_write+0x10/0x10 [ 811.242720][T29051] do_syscall_64+0x14d/0xf80 [ 811.242741][T29051] ? trace_irq_disable+0x3b/0x150 [ 811.242772][T29051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.242796][T29051] ? clear_bhb_loop+0x40/0x90 [ 811.242824][T29051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.242847][T29051] RIP: 0033:0x7fada339c799 [ 811.242868][T29051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.242888][T29051] RSP: 002b:00007fada419e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.242912][T29051] RAX: ffffffffffffffda RBX: 00007fada3615fa0 RCX: 00007fada339c799 [ 811.242930][T29051] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 811.242944][T29051] RBP: 00007fada419e090 R08: 0000000000000000 R09: 0000000000000000 [ 811.242958][T29051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.242972][T29051] R13: 00007fada3616038 R14: 00007fada3615fa0 R15: 00007fff71df1338 [ 811.243008][T29051] [ 811.565400][T29054] ip6tnl0: Caught tx_queue_len zero misconfig [ 811.716235][T29060] __nla_validate_parse: 10 callbacks suppressed [ 811.716258][T29060] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.7562'. [ 811.737651][T29060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7562'. [ 811.747300][T29060] bond2: option mode: unable to set because the bond device has slaves [ 811.758688][T29060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7562'. [ 811.791298][T29060] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7562'. [ 811.801111][T29060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7562'. [ 811.826691][T29060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7562'. [ 811.877111][T29066] netlink: 'syz.4.7562': attribute type 4 has an invalid length. [ 811.909557][T29068] netlink: 'syz.0.7564': attribute type 10 has an invalid length. [ 811.917937][T29066] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7562'. [ 811.964022][T29060] bond0: left promiscuous mode [ 811.971934][T29060] bridge1: left promiscuous mode [ 812.006865][T29060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.053756][T29060] bond2: (slave bond0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 812.121626][T29068] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.128935][T29068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.136561][T29068] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.143865][T29068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.205645][T29068] .`: (slave bridge0): Enslaving as an active interface with an up link [ 812.382470][T29078] Cannot find set identified by id 64003 to match [ 812.555338][T29081] tipc: Started in network mode [ 812.560685][T29081] tipc: Node identity ea1ab42b938d, cluster identity 4711 [ 812.568022][T29081] tipc: Enabled bearer , priority 0 [ 812.755214][T29081] syzkaller0: entered promiscuous mode [ 812.790813][T29081] syzkaller0: entered allmulticast mode [ 812.829851][T29081] tipc: Resetting bearer [ 812.861476][T29087] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7574'. [ 812.875324][T29100] netlink: 'syz.2.7576': attribute type 1 has an invalid length. [ 812.963154][T29105] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7576'. [ 813.015185][T29109] net_ratelimit: 4 callbacks suppressed [ 813.015206][T29109] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 813.126979][T29100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 813.149620][T29080] tipc: Resetting bearer [ 813.170466][T29100] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7576'. [ 816.029817][T29080] tipc: Disabling bearer [ 816.084977][T29100] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 816.106183][T29100] bond2: (slave batadv1): making interface the new active one [ 816.117862][T29100] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 816.259614][T18301] tipc: Node number set to 2039985195 [ 816.302347][T29133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.333736][T29133] bond1: (slave bond0): Enslaving as an active interface with a down link [ 816.366266][T29133] netlink: 'syz.1.7580': attribute type 4 has an invalid length. [ 819.162386][T29130] bond1: option mode: unable to set because the bond device has slaves [ 819.185163][T29139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 819.319172][T29145] Cannot find set identified by id 65279 to match [ 819.686708][T29166] __nla_validate_parse: 9 callbacks suppressed [ 819.686729][T29166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7592'. [ 819.958268][T29183] Cannot find set identified by id 65534 to match [ 820.040567][T29187] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.7598'. [ 820.104700][T29187] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.7598'. [ 820.330819][T29200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7605'. [ 820.385743][T29200] Cannot find del_set index 1 as target [ 820.431836][T29204] team0 (unregistering): Port device team_slave_0 removed [ 820.470216][T29204] team0 (unregistering): Port device team_slave_1 removed [ 820.567916][T29211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7609'. [ 820.589486][T29211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.683579][T29211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.388969][T29246] set match dimension is over the limit! [ 821.644907][T29261] netlink: 'syz.4.7631': attribute type 7 has an invalid length. [ 821.680170][T29261] netlink: 'syz.4.7631': attribute type 7 has an invalid length. [ 821.709529][T29261] netlink: 'syz.4.7631': attribute type 10 has an invalid length. [ 821.728125][T29261] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.735636][T29261] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.110478][T29280] tun0: tun_chr_ioctl cmd 1074025675 [ 822.115853][T29280] tun0: persist disabled [ 829.092792][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 837.266993][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 837.278846][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 837.287205][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 837.295819][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 837.304653][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 837.388155][T29289] wg1 speed is unknown, defaulting to 1000 [ 837.396553][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 837.414212][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 837.422776][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 837.452340][T27809] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 837.461438][T29294] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 837.471289][T27809] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 837.482555][T29294] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 837.531784][T29294] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 837.540891][T29294] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 837.551178][T29294] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 837.726984][T29291] wg1 speed is unknown, defaulting to 1000 [ 837.777347][T29293] wg1 speed is unknown, defaulting to 1000 [ 837.790944][T29294] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 837.802070][T29294] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 837.817638][T29294] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 837.826489][T29294] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 837.835799][T29294] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 837.977818][ T5848] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 837.991590][ T5848] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 838.004584][ T5848] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 838.016304][ T5848] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 838.024361][ T5848] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 838.130633][T29300] wg1 speed is unknown, defaulting to 1000 [ 838.207216][T29289] chnl_net:caif_netlink_parms(): no params data found [ 838.247993][T29302] wg1 speed is unknown, defaulting to 1000 [ 838.655534][T29289] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.665046][T29289] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.673559][T29289] bridge_slave_0: entered allmulticast mode [ 838.682657][T29289] bridge_slave_0: entered promiscuous mode [ 838.734058][T29289] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.742927][T29289] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.751511][T29289] bridge_slave_1: entered allmulticast mode [ 838.760999][T29289] bridge_slave_1: entered promiscuous mode [ 838.830871][T29291] chnl_net:caif_netlink_parms(): no params data found [ 838.877114][T29289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.942956][T29289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.027961][T29293] chnl_net:caif_netlink_parms(): no params data found [ 839.112159][T29289] team0: Port device team_slave_0 added [ 839.207960][T29289] team0: Port device team_slave_1 added [ 839.381553][T29289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.388709][T29289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.408840][ T5848] Bluetooth: hci2: command tx timeout [ 839.438814][T29289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.467656][T29302] chnl_net:caif_netlink_parms(): no params data found [ 839.493552][T29300] chnl_net:caif_netlink_parms(): no params data found [ 839.557386][T29289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.566242][T29289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.571485][ T5848] Bluetooth: hci6: command tx timeout [ 839.612480][T29289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.649684][ T5848] Bluetooth: hci7: command tx timeout [ 839.672036][T29291] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.679893][T29291] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.687331][T29291] bridge_slave_0: entered allmulticast mode [ 839.696282][T29291] bridge_slave_0: entered promiscuous mode [ 839.755355][T29291] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.763756][T29291] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.773058][T29291] bridge_slave_1: entered allmulticast mode [ 839.781712][T29291] bridge_slave_1: entered promiscuous mode [ 839.841552][T29293] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.848955][T29293] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.856276][T29293] bridge_slave_0: entered allmulticast mode [ 839.865884][T29293] bridge_slave_0: entered promiscuous mode [ 839.889135][ T5848] Bluetooth: hci8: command tx timeout [ 839.953365][T29293] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.960980][T29293] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.969444][T29293] bridge_slave_1: entered allmulticast mode [ 839.977838][T29293] bridge_slave_1: entered promiscuous mode [ 840.023840][T29289] hsr_slave_0: entered promiscuous mode [ 840.031057][T29289] hsr_slave_1: entered promiscuous mode [ 840.037693][T29289] debugfs: 'hsr0' already exists in 'hsr' [ 840.044567][T29289] Cannot create hsr debugfs directory [ 840.050149][ T5848] Bluetooth: hci9: command tx timeout [ 840.098966][T29291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.173547][T29291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.240123][T29293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.290463][T29302] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.297666][T29302] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.306700][T29302] bridge_slave_0: entered allmulticast mode [ 840.316217][T29302] bridge_slave_0: entered promiscuous mode [ 840.334968][T29300] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.342889][T29300] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.350979][T29300] bridge_slave_0: entered allmulticast mode [ 840.359840][T29300] bridge_slave_0: entered promiscuous mode [ 840.373583][T29293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.391030][T29291] team0: Port device team_slave_0 added [ 840.397717][T29302] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.406780][T29302] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.414679][T29302] bridge_slave_1: entered allmulticast mode [ 840.423777][T29302] bridge_slave_1: entered promiscuous mode [ 840.447755][T29300] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.456029][T29300] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.464415][T29300] bridge_slave_1: entered allmulticast mode [ 840.473567][T29300] bridge_slave_1: entered promiscuous mode [ 840.484390][T29291] team0: Port device team_slave_1 added [ 840.671451][T29300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.685211][T29300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.698000][T29293] team0: Port device team_slave_0 added [ 840.712950][T29293] team0: Port device team_slave_1 added [ 840.721820][T29302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.735840][T29302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.763698][T29291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.771624][T29291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.798510][T29291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.811484][T29291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.819316][T29291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.845630][T29291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.996137][T29300] team0: Port device team_slave_0 added [ 841.004783][T29293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.013566][T29293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.040574][T29293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.054689][T29302] team0: Port device team_slave_0 added [ 841.075887][T29300] team0: Port device team_slave_1 added [ 841.083781][T29293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.091518][T29293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.118092][T29293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.147416][T29302] team0: Port device team_slave_1 added [ 841.217275][T29291] hsr_slave_0: entered promiscuous mode [ 841.224452][T29291] hsr_slave_1: entered promiscuous mode [ 841.231657][T29291] debugfs: 'hsr0' already exists in 'hsr' [ 841.237502][T29291] Cannot create hsr debugfs directory [ 841.354993][T29300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.363393][T29300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.392658][T29300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.435083][T29302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.443490][T29302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.470552][T29302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.483573][T29302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.491599][ T5848] Bluetooth: hci2: command tx timeout [ 841.497204][T29302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.523954][T29302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.564200][T29300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.571716][T29300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.599290][T29300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.617602][T29293] hsr_slave_0: entered promiscuous mode [ 841.625340][T29293] hsr_slave_1: entered promiscuous mode [ 841.632106][T29293] debugfs: 'hsr0' already exists in 'hsr' [ 841.637894][T29293] Cannot create hsr debugfs directory [ 841.652615][ T5848] Bluetooth: hci6: command tx timeout [ 841.729314][ T5848] Bluetooth: hci7: command tx timeout [ 841.822650][T29302] hsr_slave_0: entered promiscuous mode [ 841.832860][T29302] hsr_slave_1: entered promiscuous mode [ 841.843807][T29302] debugfs: 'hsr0' already exists in 'hsr' [ 841.852664][T29302] Cannot create hsr debugfs directory [ 841.969891][ T5848] Bluetooth: hci8: command tx timeout [ 841.986969][T29300] hsr_slave_0: entered promiscuous mode [ 841.995154][T29300] hsr_slave_1: entered promiscuous mode [ 842.003148][T29300] debugfs: 'hsr0' already exists in 'hsr' [ 842.011086][T29300] Cannot create hsr debugfs directory [ 842.131494][ T5848] Bluetooth: hci9: command tx timeout [ 843.579559][ T5848] Bluetooth: hci2: command tx timeout [ 843.740271][ T5848] Bluetooth: hci6: command tx timeout [ 843.810471][ T5848] Bluetooth: hci7: command tx timeout [ 844.058598][ T5848] Bluetooth: hci8: command tx timeout [ 844.209385][ T5848] Bluetooth: hci9: command tx timeout [ 845.649101][ T5848] Bluetooth: hci2: command tx timeout [ 845.809651][ T5848] Bluetooth: hci6: command tx timeout [ 845.890011][ T5848] Bluetooth: hci7: command tx timeout [ 846.129525][ T5848] Bluetooth: hci8: command tx timeout [ 846.297716][ T5848] Bluetooth: hci9: command tx timeout [ 870.059814][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 897.197245][T29294] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 897.219249][T29294] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 897.229897][T29294] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 897.239131][T29294] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 897.250376][T29294] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 897.313802][T29338] wg1 speed is unknown, defaulting to 1000 [ 897.528222][T29338] chnl_net:caif_netlink_parms(): no params data found [ 897.802500][T29338] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.819612][T29338] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.827000][T29338] bridge_slave_0: entered allmulticast mode [ 897.851291][T29338] bridge_slave_0: entered promiscuous mode [ 897.866265][T29338] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.884334][T29294] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 897.895327][T29294] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 897.904533][T27809] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 897.905918][T29294] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 897.922234][T29294] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 897.931452][T29294] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 897.939999][T27809] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 897.949045][T27809] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 897.956884][T27809] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 897.977020][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 897.993604][T29338] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.013034][T29338] bridge_slave_1: entered allmulticast mode [ 898.023552][T29338] bridge_slave_1: entered promiscuous mode [ 898.103115][T29338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.173008][T29338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.262575][T29348] wg1 speed is unknown, defaulting to 1000 [ 898.321228][T29349] wg1 speed is unknown, defaulting to 1000 [ 898.362050][T29338] team0: Port device team_slave_0 added [ 898.455370][ T5848] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 898.465848][ T5848] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 898.475527][ T5848] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 898.487118][ T5848] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 898.495329][ T5848] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 898.506230][T29338] team0: Port device team_slave_1 added [ 898.540285][ T5848] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 898.555242][ T5848] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 898.567271][ T5848] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 898.583392][ T5848] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 898.593139][ T5848] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 898.615474][T29338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.622872][T29338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.649956][T29338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.696684][T29338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.705411][T29338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.732178][T29338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.886630][T29354] wg1 speed is unknown, defaulting to 1000 [ 898.958463][T29355] wg1 speed is unknown, defaulting to 1000 [ 898.970798][T29338] hsr_slave_0: entered promiscuous mode [ 898.977814][T29338] hsr_slave_1: entered promiscuous mode [ 898.985153][T29338] debugfs: 'hsr0' already exists in 'hsr' [ 898.992034][T29338] Cannot create hsr debugfs directory [ 899.330025][ T5848] Bluetooth: hci10: command tx timeout [ 899.402879][T29349] chnl_net:caif_netlink_parms(): no params data found [ 899.464912][T29348] chnl_net:caif_netlink_parms(): no params data found [ 899.964940][T29354] chnl_net:caif_netlink_parms(): no params data found [ 900.033130][T29349] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.041320][T29349] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.048993][ T5848] Bluetooth: hci11: command tx timeout [ 900.050519][ T5848] Bluetooth: hci12: command tx timeout [ 900.056746][T29349] bridge_slave_0: entered allmulticast mode [ 900.073155][T29349] bridge_slave_0: entered promiscuous mode [ 900.089434][T29349] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.096710][T29349] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.107689][T29349] bridge_slave_1: entered allmulticast mode [ 900.120170][T29349] bridge_slave_1: entered promiscuous mode [ 900.144695][T29348] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.158872][T29348] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.166254][T29348] bridge_slave_0: entered allmulticast mode [ 900.177352][T29348] bridge_slave_0: entered promiscuous mode [ 900.201014][T29355] chnl_net:caif_netlink_parms(): no params data found [ 900.296315][T29348] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.304721][T29348] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.313618][T29348] bridge_slave_1: entered allmulticast mode [ 900.325412][T29348] bridge_slave_1: entered promiscuous mode [ 900.443549][T29349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.521220][T29349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.532532][ T5848] Bluetooth: hci13: command tx timeout [ 900.594655][T29348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.610598][ T5848] Bluetooth: hci14: command tx timeout [ 900.681800][T29348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.724792][T29349] team0: Port device team_slave_0 added [ 900.731160][T29354] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.739810][T29354] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.747181][T29354] bridge_slave_0: entered allmulticast mode [ 900.756664][T29354] bridge_slave_0: entered promiscuous mode [ 900.806862][T29349] team0: Port device team_slave_1 added [ 900.826694][T29354] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.834879][T29354] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.843544][T29354] bridge_slave_1: entered allmulticast mode [ 900.854048][T29354] bridge_slave_1: entered promiscuous mode [ 901.027776][T29348] team0: Port device team_slave_0 added [ 901.035478][T29355] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.044847][T29355] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.054262][T29355] bridge_slave_0: entered allmulticast mode [ 901.063467][T29355] bridge_slave_0: entered promiscuous mode [ 901.073596][T29349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.082611][T29349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.116903][T29349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.136352][T29354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.151974][T29348] team0: Port device team_slave_1 added [ 901.159737][T29355] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.166920][T29355] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.180199][T29355] bridge_slave_1: entered allmulticast mode [ 901.188129][T29355] bridge_slave_1: entered promiscuous mode [ 901.215801][T29349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.229530][T29349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.259395][T29349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.301007][T29354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.408770][ T5848] Bluetooth: hci10: command tx timeout [ 901.433248][T29355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.459991][T29355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.491703][T29354] team0: Port device team_slave_0 added [ 901.501136][T29348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.511032][T29348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.539535][T29348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.595702][T29354] team0: Port device team_slave_1 added [ 901.603833][T29348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.613302][T29348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.640706][T29348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.737075][T29355] team0: Port device team_slave_0 added [ 901.754574][T29349] hsr_slave_0: entered promiscuous mode [ 901.762669][T29349] hsr_slave_1: entered promiscuous mode [ 901.770607][T29349] debugfs: 'hsr0' already exists in 'hsr' [ 901.776413][T29349] Cannot create hsr debugfs directory [ 901.803987][T29354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.813166][T29354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.840728][T29354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.854764][T29354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.863052][T29354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.890716][T29354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.908082][T29355] team0: Port device team_slave_1 added [ 901.990613][T29348] hsr_slave_0: entered promiscuous mode [ 901.997733][T29348] hsr_slave_1: entered promiscuous mode [ 902.005576][T29348] debugfs: 'hsr0' already exists in 'hsr' [ 902.012099][T29348] Cannot create hsr debugfs directory [ 902.097794][T29355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.105453][T29355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.137585][ T5848] Bluetooth: hci11: command tx timeout [ 902.137594][ T51] Bluetooth: hci12: command tx timeout [ 902.154247][T29355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.167681][T29355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.174979][T29355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.201800][T29355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.304539][T29354] hsr_slave_0: entered promiscuous mode [ 902.312765][T29354] hsr_slave_1: entered promiscuous mode [ 902.320728][T29354] debugfs: 'hsr0' already exists in 'hsr' [ 902.327697][T29354] Cannot create hsr debugfs directory [ 902.475029][T29355] hsr_slave_0: entered promiscuous mode [ 902.483094][T29355] hsr_slave_1: entered promiscuous mode [ 902.494647][T29355] debugfs: 'hsr0' already exists in 'hsr' [ 902.502020][T29355] Cannot create hsr debugfs directory [ 902.612563][ T5848] Bluetooth: hci13: command tx timeout [ 902.688960][ T5848] Bluetooth: hci14: command tx timeout [ 903.494140][ T5848] Bluetooth: hci10: command tx timeout [ 904.208609][ T5848] Bluetooth: hci11: command tx timeout [ 904.214182][ T5848] Bluetooth: hci12: command tx timeout [ 904.688882][ T5848] Bluetooth: hci13: command tx timeout [ 904.780477][ T5848] Bluetooth: hci14: command tx timeout [ 905.579129][ T5848] Bluetooth: hci10: command tx timeout [ 906.289235][ T5848] Bluetooth: hci12: command tx timeout [ 906.294791][ T5848] Bluetooth: hci11: command tx timeout [ 906.769030][ T5848] Bluetooth: hci13: command tx timeout [ 906.848838][ T5848] Bluetooth: hci14: command tx timeout [ 921.252634][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 923.330423][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 943.810446][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 946.862450][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 957.832325][ T5848] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 957.842884][ T5848] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 957.854099][ T5848] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 957.862867][ T5848] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 957.872443][ T5848] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 957.893121][T27809] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 957.904198][T27809] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 957.913682][T27809] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 957.922944][T27809] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 957.934094][T27809] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 957.990646][T29388] wg1 speed is unknown, defaulting to 1000 [ 958.047232][T29390] wg1 speed is unknown, defaulting to 1000 [ 958.346726][T29388] chnl_net:caif_netlink_parms(): no params data found [ 958.457069][T29390] chnl_net:caif_netlink_parms(): no params data found [ 958.606788][T29388] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.615424][T29388] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.624196][T29388] bridge_slave_0: entered allmulticast mode [ 958.633482][T29388] bridge_slave_0: entered promiscuous mode [ 958.663053][T29388] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.671391][T29388] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.682604][T29388] bridge_slave_1: entered allmulticast mode [ 958.709963][T29388] bridge_slave_1: entered promiscuous mode [ 958.891817][T29390] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.919406][T29390] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.927038][T29390] bridge_slave_0: entered allmulticast mode [ 958.960930][T27809] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 958.971804][T29390] bridge_slave_0: entered promiscuous mode [ 958.972163][T27809] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 958.992176][T27809] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 959.013509][T27809] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 959.025339][T29388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.036861][T27809] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 959.094514][T27809] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 959.098192][T29388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.116308][T27809] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 959.123609][T29390] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.131576][T27809] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 959.140088][T29390] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.147732][T29390] bridge_slave_1: entered allmulticast mode [ 959.154632][T27809] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 959.163346][T27809] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 959.170787][T29390] bridge_slave_1: entered promiscuous mode [ 959.212448][T27809] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 959.222926][T27809] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 959.237031][T27809] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 959.246078][T27809] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 959.254800][T27809] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 959.407123][T29390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.434915][T29388] team0: Port device team_slave_0 added [ 959.455023][T29390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.475300][T29407] wg1 speed is unknown, defaulting to 1000 [ 959.501326][T29388] team0: Port device team_slave_1 added [ 959.524563][T29409] wg1 speed is unknown, defaulting to 1000 [ 959.543084][T29390] team0: Port device team_slave_0 added [ 959.584612][T29411] wg1 speed is unknown, defaulting to 1000 [ 959.603719][T29390] team0: Port device team_slave_1 added [ 959.667399][T29388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.676578][T29388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.703722][T29388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.784255][T29388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.791955][T29388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.823136][T29388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.869331][T29390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.876346][T29390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.903610][T29390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.962046][T29390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.969909][ T5848] Bluetooth: hci16: command tx timeout [ 959.976371][ T5848] Bluetooth: hci15: command tx timeout [ 959.984536][T29390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.011430][T29390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.217669][T29390] hsr_slave_0: entered promiscuous mode [ 960.227709][T29390] hsr_slave_1: entered promiscuous mode [ 960.235153][T29390] debugfs: 'hsr0' already exists in 'hsr' [ 960.241401][T29390] Cannot create hsr debugfs directory [ 960.291713][T29388] hsr_slave_0: entered promiscuous mode [ 960.299702][T29388] hsr_slave_1: entered promiscuous mode [ 960.306381][T29388] debugfs: 'hsr0' already exists in 'hsr' [ 960.312670][T29388] Cannot create hsr debugfs directory [ 960.743851][T29407] chnl_net:caif_netlink_parms(): no params data found [ 960.856228][T29409] chnl_net:caif_netlink_parms(): no params data found [ 960.911942][T29411] chnl_net:caif_netlink_parms(): no params data found [ 961.088790][ T5848] Bluetooth: hci17: command tx timeout [ 961.260736][ T5848] Bluetooth: hci18: command tx timeout [ 961.329834][ T5848] Bluetooth: hci19: command tx timeout [ 961.486612][T29407] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.503058][T29407] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.513375][T29407] bridge_slave_0: entered allmulticast mode [ 961.523395][T29407] bridge_slave_0: entered promiscuous mode [ 961.589793][T29407] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.596994][T29407] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.609459][T29407] bridge_slave_1: entered allmulticast mode [ 961.618054][T29407] bridge_slave_1: entered promiscuous mode [ 961.627239][T29411] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.643984][T29411] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.652875][T29411] bridge_slave_0: entered allmulticast mode [ 961.663226][T29411] bridge_slave_0: entered promiscuous mode [ 961.671854][T29409] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.680512][T29409] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.687917][T29409] bridge_slave_0: entered allmulticast mode [ 961.696957][T29409] bridge_slave_0: entered promiscuous mode [ 961.742387][T29411] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.750800][T29411] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.760094][T29411] bridge_slave_1: entered allmulticast mode [ 961.767691][T29411] bridge_slave_1: entered promiscuous mode [ 961.793470][T29409] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.801686][T29409] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.810399][T29409] bridge_slave_1: entered allmulticast mode [ 961.820917][T29409] bridge_slave_1: entered promiscuous mode [ 961.885411][T29411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.916715][T29407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.942267][T29411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.961520][T29409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.990534][T29407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.036237][T29409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.051158][ T5848] Bluetooth: hci16: command tx timeout [ 962.051373][T27809] Bluetooth: hci15: command tx timeout [ 962.164292][T29411] team0: Port device team_slave_0 added [ 962.199818][T29407] team0: Port device team_slave_0 added [ 962.231646][T29411] team0: Port device team_slave_1 added [ 962.266243][T29409] team0: Port device team_slave_0 added [ 962.276066][T29409] team0: Port device team_slave_1 added [ 962.297169][T29407] team0: Port device team_slave_1 added [ 962.401659][T29411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.409571][T29411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.441278][T29411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.464286][T29409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.472057][T29409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.504099][T29409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.541137][T29411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.548166][T29411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.580071][T29411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.595042][T29409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.604533][T29409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.636846][T29409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.649696][T29407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.656693][T29407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.686773][T29407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.733809][T29407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.747562][T29407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.775995][T29407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.940357][T29409] hsr_slave_0: entered promiscuous mode [ 962.947522][T29409] hsr_slave_1: entered promiscuous mode [ 962.955009][T29409] debugfs: 'hsr0' already exists in 'hsr' [ 962.961246][T29409] Cannot create hsr debugfs directory [ 962.990617][T29411] hsr_slave_0: entered promiscuous mode [ 962.997721][T29411] hsr_slave_1: entered promiscuous mode [ 963.004989][T29411] debugfs: 'hsr0' already exists in 'hsr' [ 963.011718][T29411] Cannot create hsr debugfs directory [ 963.116382][T29407] hsr_slave_0: entered promiscuous mode [ 963.123598][T29407] hsr_slave_1: entered promiscuous mode [ 963.131107][T29407] debugfs: 'hsr0' already exists in 'hsr' [ 963.136902][T29407] Cannot create hsr debugfs directory [ 963.168629][T29433] Bluetooth: hci17: command tx timeout [ 963.329943][T29433] Bluetooth: hci18: command tx timeout [ 963.410093][T29433] Bluetooth: hci19: command tx timeout [ 964.128819][T29433] Bluetooth: hci15: command tx timeout [ 964.128994][T29432] Bluetooth: hci16: command tx timeout [ 964.296795][T29432] Bluetooth: hci7: command 0x0406 tx timeout [ 964.304098][T29433] Bluetooth: hci8: command 0x0406 tx timeout [ 964.311817][T29432] Bluetooth: hci9: command 0x0406 tx timeout [ 964.313003][T29431] Bluetooth: hci2: command 0x0406 tx timeout [ 964.317869][T29432] Bluetooth: hci6: command 0x0406 tx timeout [ 965.249393][T29296] Bluetooth: hci17: command tx timeout [ 965.410741][ T5848] Bluetooth: hci18: command tx timeout [ 965.499221][T29296] Bluetooth: hci19: command tx timeout [ 966.209051][ T5848] Bluetooth: hci16: command tx timeout [ 966.214709][T29296] Bluetooth: hci15: command tx timeout [ 967.330411][T29296] Bluetooth: hci17: command tx timeout [ 967.489334][T29296] Bluetooth: hci18: command tx timeout [ 967.568708][T29296] Bluetooth: hci19: command tx timeout [ 982.690315][ T31] INFO: task syz.0.7630:29260 blocked for more than 143 seconds. [ 982.704843][ T31] Not tainted syzkaller #0 [ 982.711383][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 982.721130][ T31] task:syz.0.7630 state:D stack:26240 pid:29260 tgid:29257 ppid:25634 task_flags:0x480140 flags:0x00080002 [ 982.735053][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 982.740295][ T31] [ 982.749086][ T31] __schedule+0x1585/0x5340 [ 982.753990][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 982.770698][ T31] ? __pfx___schedule+0x10/0x10 [ 982.777159][ T31] ? schedule+0x90/0x360 [ 982.798686][ T31] schedule+0x164/0x360 [ 982.802958][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 982.818621][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 982.824796][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 982.886757][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 982.908339][ T31] nbd_set_size+0x454/0x680 [ 982.916552][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 982.928659][ T31] ? nla_memcpy+0x5b/0xc0 [ 982.933103][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 982.948356][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 982.954199][ T31] ? rcu_is_watching+0x15/0xb0 [ 982.968325][ T31] ? trace_kmalloc+0x2a/0x110 [ 982.973099][ T31] ? __nla_parse+0x40/0x60 [ 982.977549][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 982.984482][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 982.991014][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 982.997185][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 983.002672][ T31] genl_rcv_msg+0x61c/0x7a0 [ 983.007280][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 983.015906][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 983.022386][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 983.027428][ T31] netlink_rcv_skb+0x232/0x4b0 [ 983.032815][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 983.038004][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 983.043848][ T31] ? down_read+0x272/0x2e0 [ 983.048964][ T31] ? genl_rcv+0xd/0x40 [ 983.053104][ T31] genl_rcv+0x28/0x40 [ 983.057159][ T31] netlink_unicast+0x80f/0x9b0 [ 983.062580][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 983.068030][ T31] ? netlink_sendmsg+0x650/0xb40 [ 983.073700][ T31] ? skb_put+0x11b/0x210 [ 983.078037][ T31] netlink_sendmsg+0x813/0xb40 [ 983.083964][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.091436][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 983.096444][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 983.102375][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.107735][ T31] ____sys_sendmsg+0xa68/0xad0 [ 983.113382][ T31] ? futex_unqueue+0x211/0x240 [ 983.118520][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 983.124108][ T31] ? import_iovec+0x73/0xa0 [ 983.132275][ T31] ___sys_sendmsg+0x2a5/0x360 [ 983.137063][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 983.143226][ T31] ? futex_wait+0x29a/0x380 [ 983.147930][ T31] ? __fget_files+0x2a/0x420 [ 983.153351][ T31] ? __fget_files+0x3a0/0x420 [ 983.158127][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 983.163681][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 983.171159][ T31] ? rcu_is_watching+0x15/0xb0 [ 983.176039][ T31] do_syscall_64+0x14d/0xf80 [ 983.181155][ T31] ? trace_irq_disable+0x3b/0x150 [ 983.186271][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.192927][ T31] ? clear_bhb_loop+0x40/0x90 [ 983.197682][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.204552][ T31] RIP: 0033:0x7fcfc139c799 [ 983.209407][ T31] RSP: 002b:00007fcfc22ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 983.217980][ T31] RAX: ffffffffffffffda RBX: 00007fcfc1615fa0 RCX: 00007fcfc139c799 [ 983.226979][ T31] RDX: 00000000040000c4 RSI: 000020000000b000 RDI: 0000000000000004 [ 983.236305][ T31] RBP: 00007fcfc1432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 983.248165][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.263225][ T31] R13: 00007fcfc1616038 R14: 00007fcfc1615fa0 R15: 00007ffc4c05c188 [ 983.273045][ T31] [ 983.276196][ T31] INFO: task syz.2.7634:29267 blocked for more than 143 seconds. [ 983.290419][ T31] Not tainted syzkaller #0 [ 983.295788][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 983.321673][ T31] task:syz.2.7634 state:D stack:24960 pid:29267 tgid:29266 ppid:24335 task_flags:0x400140 flags:0x00080002 [ 983.342891][ T31] Call Trace: [ 983.346258][ T31] [ 983.353304][ T31] __schedule+0x1585/0x5340 [ 983.357955][ T31] ? __pfx___schedule+0x10/0x10 [ 983.363437][ T31] ? schedule+0x90/0x360 [ 983.367762][ T31] schedule+0x164/0x360 [ 983.373536][ T31] schedule_preempt_disabled+0x13/0x30 [ 983.379793][ T31] __mutex_lock+0x7fe/0x1300 [ 983.384558][ T31] ? __mutex_lock+0x5ac/0x1300 [ 983.390048][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 983.394823][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 983.401624][ T31] ? radix_tree_lookup+0x240/0x290 [ 983.406910][ T31] genl_rcv_msg+0x10b/0x7a0 [ 983.413274][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 983.418871][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 983.423981][ T31] netlink_rcv_skb+0x232/0x4b0 [ 983.430113][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 983.435316][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 983.441874][ T31] ? down_read+0x272/0x2e0 [ 983.446374][ T31] ? genl_rcv+0xd/0x40 [ 983.452471][ T31] genl_rcv+0x28/0x40 [ 983.456542][ T31] netlink_unicast+0x80f/0x9b0 [ 983.464879][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 983.470936][ T31] ? netlink_sendmsg+0x650/0xb40 [ 983.476041][ T31] ? skb_put+0x11b/0x210 [ 983.481216][ T31] netlink_sendmsg+0x813/0xb40 [ 983.486077][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.499568][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 983.504604][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 983.511738][ T31] __sys_sendto+0x709/0x7a0 [ 983.516342][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 983.521961][ T31] ? rcu_is_watching+0x15/0xb0 [ 983.526914][ T31] __x64_sys_sendto+0xde/0x100 [ 983.532688][ T31] do_syscall_64+0x14d/0xf80 [ 983.537358][ T31] ? trace_irq_disable+0x3b/0x150 [ 983.543029][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.549610][ T31] ? clear_bhb_loop+0x40/0x90 [ 983.554364][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.562466][ T31] RIP: 0033:0x7fac2595cfce [ 983.566958][ T31] RSP: 002b:00007fac2688fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 983.581942][ T31] RAX: ffffffffffffffda RBX: 00007fac268916c0 RCX: 00007fac2595cfce [ 983.591190][ T31] RDX: 000000000000001c RSI: 00007fac26890000 RDI: 000000000000000d [ 983.599625][ T31] RBP: 0000000000000000 R08: 00007fac2688ff04 R09: 000000000000000c [ 983.607662][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 983.616312][ T31] R13: 00007fac2688ff58 R14: 00007fac26890000 R15: 0000000000000000 [ 983.626282][ T31] [ 983.629770][ T31] INFO: task syz.3.7637:29274 blocked for more than 144 seconds. [ 983.637588][ T31] Not tainted syzkaller #0 [ 983.643417][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 983.654029][ T31] task:syz.3.7637 state:D stack:24680 pid:29274 tgid:29273 ppid:25030 task_flags:0x400140 flags:0x00080002 [ 983.666421][ T31] Call Trace: [ 983.671431][ T31] [ 983.674427][ T31] __schedule+0x1585/0x5340 [ 983.681919][ T31] ? __pfx___schedule+0x10/0x10 [ 983.686866][ T31] ? schedule+0x90/0x360 [ 983.692762][ T31] schedule+0x164/0x360 [ 983.696989][ T31] schedule_preempt_disabled+0x13/0x30 [ 983.703634][ T31] __mutex_lock+0x7fe/0x1300 [ 983.708971][ T31] ? __mutex_lock+0x5ac/0x1300 [ 983.713819][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 983.719123][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 983.724402][ T31] ? radix_tree_lookup+0x240/0x290 [ 983.734334][ T31] genl_rcv_msg+0x10b/0x7a0 [ 983.739663][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 983.744766][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 983.750433][ T31] netlink_rcv_skb+0x232/0x4b0 [ 983.755275][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 983.760827][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 983.766309][ T31] ? down_read+0x272/0x2e0 [ 983.771671][ T31] ? genl_rcv+0xd/0x40 [ 983.775839][ T31] genl_rcv+0x28/0x40 [ 983.783379][ T31] netlink_unicast+0x80f/0x9b0 [ 983.790889][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 983.796260][ T31] ? netlink_sendmsg+0x650/0xb40 [ 983.803239][ T31] ? skb_put+0x11b/0x210 [ 983.807662][ T31] netlink_sendmsg+0x813/0xb40 [ 983.815298][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.821023][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 983.826028][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 983.832228][ T31] __sys_sendto+0x709/0x7a0 [ 983.837290][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 983.844188][ T31] ? exc_page_fault+0x6a/0xc0 [ 983.849569][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 983.854932][ T31] __x64_sys_sendto+0xde/0x100 [ 983.860827][ T31] do_syscall_64+0x14d/0xf80 [ 983.865672][ T31] ? trace_irq_disable+0x3b/0x150 [ 983.871290][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.882004][ T31] ? clear_bhb_loop+0x40/0x90 [ 983.886859][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.895729][ T31] RIP: 0033:0x7f773435cfce [ 983.902876][ T31] RSP: 002b:00007f7735179e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 983.912772][ T31] RAX: ffffffffffffffda RBX: 00007f773517b6c0 RCX: 00007f773435cfce [ 983.921930][ T31] RDX: 0000000000000020 RSI: 00007f773517a000 RDI: 0000000000000007 [ 983.930579][ T31] RBP: 0000000000000000 R08: 00007f7735179f04 R09: 000000000000000c [ 983.939587][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 983.950754][ T31] R13: 00007f7735179f58 R14: 00007f773517a000 R15: 0000000000000000 [ 983.959247][ T31] [ 983.962518][ T31] INFO: task syz.3.7637:29277 blocked for more than 144 seconds. [ 983.974755][ T31] Not tainted syzkaller #0 [ 983.980633][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 983.989814][ T31] task:syz.3.7637 state:D stack:27880 pid:29277 tgid:29273 ppid:25030 task_flags:0x400040 flags:0x00080002 [ 984.005745][ T31] Call Trace: [ 984.011844][ T31] [ 984.014869][ T31] __schedule+0x1585/0x5340 [ 984.020938][ T31] ? __pfx___schedule+0x10/0x10 [ 984.025894][ T31] ? schedule+0x90/0x360 [ 984.030428][ T31] schedule+0x164/0x360 [ 984.034667][ T31] schedule_preempt_disabled+0x13/0x30 [ 984.040633][ T31] __mutex_lock+0x7fe/0x1300 [ 984.045316][ T31] ? __mutex_lock+0x5ac/0x1300 [ 984.050382][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 984.055148][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 984.061600][ T31] ? radix_tree_lookup+0x240/0x290 [ 984.066803][ T31] genl_rcv_msg+0x10b/0x7a0 [ 984.071827][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 984.076933][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 984.082176][ T31] netlink_rcv_skb+0x232/0x4b0 [ 984.087011][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 984.092273][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 984.097648][ T31] ? down_read+0x272/0x2e0 [ 984.102597][ T31] ? genl_rcv+0xd/0x40 [ 984.106742][ T31] genl_rcv+0x28/0x40 [ 984.111348][ T31] netlink_unicast+0x80f/0x9b0 [ 984.116554][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 984.130603][ T31] ? netlink_sendmsg+0x650/0xb40 [ 984.135640][ T31] ? skb_put+0x11b/0x210 [ 984.142535][ T31] netlink_sendmsg+0x813/0xb40 [ 984.147402][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.153916][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 984.160098][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 984.165468][ T31] __sys_sendto+0x709/0x7a0 [ 984.171457][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 984.176599][ T31] ? fd_install+0x94/0x3d0 [ 984.181960][ T31] ? fd_install+0x306/0x3d0 [ 984.186565][ T31] __x64_sys_sendto+0xde/0x100 [ 984.191922][ T31] do_syscall_64+0x14d/0xf80 [ 984.196576][ T31] ? trace_irq_disable+0x3b/0x150 [ 984.202392][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.213759][ T31] ? clear_bhb_loop+0x40/0x90 [ 984.220634][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.226611][ T31] RIP: 0033:0x7f773435cfce [ 984.232587][ T31] RSP: 002b:00007f77325f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 984.243053][ T31] RAX: ffffffffffffffda RBX: 00007f77325f66c0 RCX: 00007f773435cfce [ 984.252102][ T31] RDX: 0000000000000020 RSI: 00007f77325f5000 RDI: 0000000000000008 [ 984.261150][ T31] RBP: 0000000000000000 R08: 00007f77325f4f04 R09: 000000000000000c [ 984.270446][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 984.279601][ T31] R13: 00007f77325f4f58 R14: 00007f77325f5000 R15: 0000000000000000 [ 984.287706][ T31] [ 984.292332][ T31] INFO: task syz.4.7639:29279 blocked for more than 144 seconds. [ 984.320753][ T31] Not tainted syzkaller #0 [ 984.325854][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 984.336965][ T31] task:syz.4.7639 state:D stack:27880 pid:29279 tgid:29278 ppid:24735 task_flags:0x400040 flags:0x00080002 [ 984.351423][ T31] Call Trace: [ 984.354785][ T31] [ 984.357764][ T31] __schedule+0x1585/0x5340 [ 984.363792][ T31] ? __pfx___schedule+0x10/0x10 [ 984.369872][ T31] ? schedule+0x90/0x360 [ 984.374207][ T31] schedule+0x164/0x360 [ 984.380306][ T31] schedule_preempt_disabled+0x13/0x30 [ 984.385943][ T31] __mutex_lock+0x7fe/0x1300 [ 984.391896][ T31] ? __mutex_lock+0x5ac/0x1300 [ 984.396850][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 984.403045][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 984.408166][ T31] ? radix_tree_lookup+0x240/0x290 [ 984.416459][ T31] genl_rcv_msg+0x10b/0x7a0 [ 984.422033][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 984.427231][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 984.433462][ T31] netlink_rcv_skb+0x232/0x4b0 [ 984.439470][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 984.444680][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 984.452447][ T31] ? down_read+0x272/0x2e0 [ 984.456957][ T31] ? genl_rcv+0xd/0x40 [ 984.462277][ T31] genl_rcv+0x28/0x40 [ 984.466354][ T31] netlink_unicast+0x80f/0x9b0 [ 984.472453][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 984.477829][ T31] ? netlink_sendmsg+0x650/0xb40 [ 984.484039][ T31] ? skb_put+0x11b/0x210 [ 984.488971][ T31] netlink_sendmsg+0x813/0xb40 [ 984.493821][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.499731][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 984.504742][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 984.511502][ T31] __sys_sendto+0x709/0x7a0 [ 984.516111][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 984.522445][ T31] ? exc_page_fault+0x6a/0xc0 [ 984.527221][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 984.535378][ T31] __x64_sys_sendto+0xde/0x100 [ 984.542335][ T31] do_syscall_64+0x14d/0xf80 [ 984.546998][ T31] ? trace_irq_disable+0x3b/0x150 [ 984.554479][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.561670][ T31] ? clear_bhb_loop+0x40/0x90 [ 984.566426][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.573547][ T31] RIP: 0033:0x7fada335cfce [ 984.578028][ T31] RSP: 002b:00007fada419ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 984.587637][ T31] RAX: ffffffffffffffda RBX: 00007fada419e6c0 RCX: 00007fada335cfce [ 984.597756][ T31] RDX: 0000000000000020 RSI: 00007fada419d000 RDI: 0000000000000005 [ 984.607074][ T31] RBP: 0000000000000000 R08: 00007fada419cf04 R09: 000000000000000c [ 984.616562][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 984.625848][ T31] R13: 00007fada419cf58 R14: 00007fada419d000 R15: 0000000000000000 [ 984.635052][ T31] [ 984.638169][ T31] INFO: task syz.4.7639:29283 blocked for more than 145 seconds. [ 984.647292][ T31] Not tainted syzkaller #0 [ 984.655649][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 984.665430][ T31] task:syz.4.7639 state:D stack:26440 pid:29283 tgid:29278 ppid:24735 task_flags:0x400040 flags:0x00080002 [ 984.680482][ T31] Call Trace: [ 984.683843][ T31] [ 984.686826][ T31] __schedule+0x1585/0x5340 [ 984.692947][ T31] ? __pfx___schedule+0x10/0x10 [ 984.702195][ T31] ? schedule+0x90/0x360 [ 984.706617][ T31] schedule+0x164/0x360 [ 984.712230][ T31] schedule_preempt_disabled+0x13/0x30 [ 984.717859][ T31] __mutex_lock+0x7fe/0x1300 [ 984.723914][ T31] ? __mutex_lock+0x5ac/0x1300 [ 984.730815][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 984.735600][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 984.741868][ T31] ? radix_tree_lookup+0x240/0x290 [ 984.747061][ T31] genl_rcv_msg+0x10b/0x7a0 [ 984.752821][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 984.761887][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 984.766930][ T31] netlink_rcv_skb+0x232/0x4b0 [ 984.772239][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 984.777351][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 984.784052][ T31] ? down_read+0x272/0x2e0 [ 984.790143][ T31] ? genl_rcv+0xd/0x40 [ 984.794316][ T31] genl_rcv+0x28/0x40 [ 984.799729][ T31] netlink_unicast+0x80f/0x9b0 [ 984.804583][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 984.813200][ T31] ? netlink_sendmsg+0x650/0xb40 [ 984.820341][ T31] ? skb_put+0x11b/0x210 [ 984.824762][ T31] netlink_sendmsg+0x813/0xb40 [ 984.830743][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.836212][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 984.843657][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 984.850112][ T31] __sys_sendto+0x709/0x7a0 [ 984.854699][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 984.863852][ T31] ? fd_install+0x94/0x3d0 [ 984.870685][ T31] ? fd_install+0x306/0x3d0 [ 984.875289][ T31] __x64_sys_sendto+0xde/0x100 [ 984.881061][ T31] do_syscall_64+0x14d/0xf80 [ 984.885732][ T31] ? trace_irq_disable+0x3b/0x150 [ 984.891654][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.897798][ T31] ? clear_bhb_loop+0x40/0x90 [ 984.904895][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.911590][ T31] RIP: 0033:0x7fada335cfce [ 984.916076][ T31] RSP: 002b:00007fada417be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 984.927844][ T31] RAX: ffffffffffffffda RBX: 00007fada417d6c0 RCX: 00007fada335cfce [ 984.940694][ T31] RDX: 000000000000001c RSI: 00007fada417c000 RDI: 0000000000000006 [ 984.950674][ T31] RBP: 0000000000000000 R08: 00007fada417bf04 R09: 000000000000000c [ 984.960956][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 984.969700][ T31] R13: 00007fada417bf58 R14: 00007fada417c000 R15: 0000000000000000 [ 984.977860][ T31] [ 984.983504][ T31] INFO: task syz.1.7640:29282 blocked for more than 145 seconds. [ 984.992066][ T31] Not tainted syzkaller #0 [ 984.997044][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 985.006632][ T31] task:syz.1.7640 state:D stack:27352 pid:29282 tgid:29281 ppid:23942 task_flags:0x400140 flags:0x00080002 [ 985.020865][ T31] Call Trace: [ 985.024204][ T31] [ 985.027183][ T31] __schedule+0x1585/0x5340 [ 985.036595][ T31] ? __pfx___schedule+0x10/0x10 [ 985.042790][ T31] ? schedule+0x90/0x360 [ 985.047131][ T31] schedule+0x164/0x360 [ 985.052196][ T31] schedule_preempt_disabled+0x13/0x30 [ 985.057738][ T31] __mutex_lock+0x7fe/0x1300 [ 985.065821][ T31] ? __mutex_lock+0x5ac/0x1300 [ 985.070907][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 985.075664][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 985.081058][ T31] ? radix_tree_lookup+0x240/0x290 [ 985.086247][ T31] genl_rcv_msg+0x10b/0x7a0 [ 985.096733][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 985.102732][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 985.107765][ T31] netlink_rcv_skb+0x232/0x4b0 [ 985.113278][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 985.119277][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 985.124661][ T31] ? down_read+0x272/0x2e0 [ 985.131237][ T31] ? genl_rcv+0xd/0x40 [ 985.135392][ T31] genl_rcv+0x28/0x40 [ 985.142233][ T31] netlink_unicast+0x80f/0x9b0 [ 985.147088][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 985.153376][ T31] ? netlink_sendmsg+0x650/0xb40 [ 985.159265][ T31] ? skb_put+0x11b/0x210 [ 985.165013][ T31] netlink_sendmsg+0x813/0xb40 [ 985.173666][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 985.185646][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 985.191555][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 985.196918][ T31] __sys_sendto+0x709/0x7a0 [ 985.204061][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 985.209912][ T31] ? exc_page_fault+0x6a/0xc0 [ 985.214667][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 985.220867][ T31] __x64_sys_sendto+0xde/0x100 [ 985.225726][ T31] do_syscall_64+0x14d/0xf80 [ 985.231056][ T31] ? trace_irq_disable+0x3b/0x150 [ 985.236153][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.244610][ T31] ? clear_bhb_loop+0x40/0x90 [ 985.256912][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.269306][ T31] RIP: 0033:0x7fdc79f5cfce [ 985.274116][ T31] RSP: 002b:00007fdc7aed0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 985.284664][ T31] RAX: ffffffffffffffda RBX: 00007fdc7aed26c0 RCX: 00007fdc79f5cfce [ 985.293588][ T31] RDX: 0000000000000020 RSI: 00007fdc7aed1000 RDI: 0000000000000005 [ 985.302406][ T31] RBP: 0000000000000000 R08: 00007fdc7aed0f04 R09: 000000000000000c [ 985.312270][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 985.321492][ T31] R13: 00007fdc7aed0f58 R14: 00007fdc7aed1000 R15: 0000000000000000 [ 985.330861][ T31] [ 985.334027][ T31] [ 985.334027][ T31] Showing all locks held in the system: [ 985.342687][ T31] 1 lock held by ksoftirqd/1/23: [ 985.347684][ T31] 1 lock held by khungtaskd/31: [ 985.353581][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 985.364304][ T31] 2 locks held by klogd/5184: [ 985.370196][ T31] 1 lock held by udevd/5195: [ 985.374846][ T31] 2 locks held by getty/5585: [ 985.379752][ T31] #0: ffff888035ebb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 985.390631][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 985.402118][ T31] 1 lock held by udevd/5885: [ 985.406786][ T31] #0: ffff888026e55358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 985.416960][ T31] 6 locks held by syz.0.7630/29260: [ 985.423286][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.445218][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.455360][ T31] #2: ffff888026e3b278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 985.466843][ T31] #3: ffff888026eac978 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 985.479479][ T31] #4: ffff888026eac318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 985.492995][ T31] #5: ffff888026eac350 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 985.507463][ T31] 2 locks held by syz.2.7634/29267: [ 985.513584][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.523368][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.533365][ T31] 2 locks held by syz.3.7637/29274: [ 985.545396][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.554901][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.565130][ T31] 2 locks held by syz.3.7637/29277: [ 985.574556][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.583690][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.593770][ T31] 2 locks held by syz.4.7639/29279: [ 985.600035][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.609203][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.619161][ T31] 2 locks held by syz.4.7639/29283: [ 985.624413][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.633584][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.643709][ T31] 2 locks held by syz.1.7640/29282: [ 985.657838][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.666979][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.677634][ T31] 2 locks held by syz-executor/29289: [ 985.684096][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.693241][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.703504][ T31] 2 locks held by syz-executor/29291: [ 985.709745][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.718048][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.730552][ T31] 2 locks held by syz-executor/29293: [ 985.736005][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.745130][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.754883][ T31] 2 locks held by syz-executor/29300: [ 985.766859][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.776361][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.787537][ T31] 2 locks held by syz-executor/29302: [ 985.793687][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.802935][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.820337][ T31] 2 locks held by syz-executor/29338: [ 985.827255][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.836429][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.846441][ T31] 2 locks held by syz-executor/29348: [ 985.853426][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.862548][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.879513][ T31] 2 locks held by syz-executor/29349: [ 985.886438][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.900334][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.910138][ T31] 2 locks held by syz-executor/29354: [ 985.915558][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.924876][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.934657][ T31] 2 locks held by syz-executor/29355: [ 985.940575][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.949187][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.959081][ T31] 2 locks held by syz-executor/29388: [ 985.964511][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.974402][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 985.991533][ T31] 2 locks held by syz-executor/29390: [ 985.996976][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 986.006290][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 986.016080][ T31] 2 locks held by syz-executor/29407: [ 986.022660][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 986.032127][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 986.042214][ T31] 2 locks held by syz-executor/29409: [ 986.047644][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 986.057042][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 986.066941][ T31] 2 locks held by syz-executor/29411: [ 986.073136][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 986.082389][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 986.093568][ T31] [ 986.095947][ T31] ============================================= [ 986.095947][ T31] [ 986.112982][ T31] NMI backtrace for cpu 0 [ 986.113005][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 986.113030][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 986.113051][ T31] Call Trace: [ 986.113061][ T31] [ 986.113070][ T31] dump_stack_lvl+0xe8/0x150 [ 986.113106][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 986.113136][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 986.113168][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 986.113200][ T31] sys_info+0x135/0x170 [ 986.113224][ T31] watchdog+0xfd9/0x1030 [ 986.113262][ T31] ? watchdog+0x21a/0x1030 [ 986.113304][ T31] kthread+0x388/0x470 [ 986.113326][ T31] ? __pfx_watchdog+0x10/0x10 [ 986.113357][ T31] ? __pfx_kthread+0x10/0x10 [ 986.113380][ T31] ret_from_fork+0x51e/0xb90 [ 986.113413][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 986.113440][ T31] ? __switch_to+0xc7d/0x1450 [ 986.113469][ T31] ? __pfx_kthread+0x10/0x10 [ 986.113492][ T31] ret_from_fork_asm+0x1a/0x30 [ 986.113542][ T31] [ 986.113551][ T31] Sending NMI from CPU 0 to CPUs 1: [ 986.234641][ C1] NMI backtrace for cpu 1 [ 986.234664][ C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 986.234686][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 986.234699][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 986.234736][ C1] RIP: 0010:deref_stack_reg+0x194/0x230 [ 986.234765][ C1] Code: 39 c3 0f 96 c1 4d 39 c6 0f 97 c2 20 c2 20 ca 80 fa 01 75 46 49 8d 40 08 48 39 d8 0f 97 c1 4c 39 f0 0f 96 c0 20 c8 3c 01 75 30 <4c> 89 c7 49 89 f7 e8 11 08 00 00 49 89 c6 48 8b 5c 24 18 48 89 d8 [ 986.234782][ C1] RSP: 0018:ffffc90000a08860 EFLAGS: 00000202 [ 986.234798][ C1] RAX: ffffc90000ac7a01 RBX: ffffc90000ac0000 RCX: 0000000000000001 [ 986.234811][ C1] RDX: ffffc90000a089c8 RSI: dffffc0000000000 RDI: ffffc90000a08988 [ 986.234825][ C1] RBP: 1ffff92000141131 R08: ffffc90000ac7a50 R09: 0000000000000000 [ 986.234839][ C1] R10: ffffc90000a089d8 R11: fffff5200014113d R12: 1ffff92000141132 [ 986.234853][ C1] R13: 1ffff92000141133 R14: ffffc90000ac8000 R15: ffffc90000a08988 [ 986.234867][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 986.234882][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 986.234895][ C1] CR2: 00007f5a63d0319d CR3: 000000007c6fc000 CR4: 00000000003526f0 [ 986.234911][ C1] Call Trace: [ 986.234919][ C1] [ 986.234933][ C1] unwind_next_frame+0x18c6/0x23c0 [ 986.234964][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 986.234992][ C1] ? batadv_forw_packet_steal+0x14e/0x170 [ 986.235022][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 986.235042][ C1] arch_stack_walk+0x11b/0x150 [ 986.235072][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x6dd/0x7e0 [ 986.235104][ C1] stack_trace_save+0xa9/0x100 [ 986.235123][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 986.235145][ C1] ? stack_trace_save+0xa9/0x100 [ 986.235163][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 986.235183][ C1] kasan_save_track+0x3e/0x80 [ 986.235200][ C1] ? kasan_save_track+0x3e/0x80 [ 986.235216][ C1] ? kasan_save_free_info+0x46/0x50 [ 986.235241][ C1] ? __kasan_slab_free+0x5c/0x80 [ 986.235258][ C1] ? kfree+0x1c1/0x630 [ 986.235284][ C1] ? slab_free_after_rcu_debug+0x5e/0x220 [ 986.235307][ C1] ? rcu_core+0x7cd/0x1070 [ 986.235328][ C1] ? handle_softirqs+0x22a/0x870 [ 986.235350][ C1] ? do_softirq+0x76/0xd0 [ 986.235372][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 986.235394][ C1] ? batadv_forw_packet_steal+0x14e/0x170 [ 986.235440][ C1] kasan_save_free_info+0x46/0x50 [ 986.235465][ C1] __kasan_slab_free+0x5c/0x80 [ 986.235485][ C1] kfree+0x1c1/0x630 [ 986.235509][ C1] ? slab_free_after_rcu_debug+0x5e/0x220 [ 986.235535][ C1] slab_free_after_rcu_debug+0x5e/0x220 [ 986.235559][ C1] ? rcu_core+0x751/0x1070 [ 986.235580][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 986.235603][ C1] rcu_core+0x7cd/0x1070 [ 986.235634][ C1] ? __pfx_rcu_core+0x10/0x10 [ 986.235658][ C1] ? try_to_wake_up+0x7fc/0x1390 [ 986.235683][ C1] handle_softirqs+0x22a/0x870 [ 986.235707][ C1] ? do_softirq+0x76/0xd0 [ 986.235733][ C1] ? batadv_forw_packet_steal+0x14e/0x170 [ 986.235752][ C1] do_softirq+0x76/0xd0 [ 986.235774][ C1] [ 986.235781][ C1] [ 986.235787][ C1] __local_bh_enable_ip+0xf8/0x130 [ 986.235811][ C1] batadv_forw_packet_steal+0x14e/0x170 [ 986.235832][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6dd/0x7e0 [ 986.235867][ C1] ? process_scheduled_works+0xa25/0x1830 [ 986.235892][ C1] process_scheduled_works+0xb02/0x1830 [ 986.235931][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 986.235959][ C1] ? assign_work+0x3d5/0x5e0 [ 986.235984][ C1] worker_thread+0xa50/0xfc0 [ 986.236030][ C1] kthread+0x388/0x470 [ 986.236048][ C1] ? __pfx_worker_thread+0x10/0x10 [ 986.236071][ C1] ? __pfx_kthread+0x10/0x10 [ 986.236089][ C1] ret_from_fork+0x51e/0xb90 [ 986.236113][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 986.236136][ C1] ? __switch_to+0xc7d/0x1450 [ 986.236157][ C1] ? __pfx_kthread+0x10/0x10 [ 986.236175][ C1] ret_from_fork_asm+0x1a/0x30 [ 986.236216][ C1] [ 986.672172][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 986.679187][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 986.688357][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 986.698720][ T31] Call Trace: [ 986.702016][ T31] [ 986.704968][ T31] vpanic+0x56c/0xa60 [ 986.708992][ T31] ? __pfx___schedule+0x10/0x10 [ 986.713923][ T31] ? __pfx_vpanic+0x10/0x10 [ 986.718480][ T31] ? __pfx_console_unlock+0x10/0x10 [ 986.723806][ T31] panic+0xc5/0xd0 [ 986.727577][ T31] ? __pfx_panic+0x10/0x10 [ 986.732022][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 986.737524][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 986.743707][ T31] watchdog+0x1023/0x1030 [ 986.748253][ T31] ? watchdog+0x21a/0x1030 [ 986.752706][ T31] kthread+0x388/0x470 [ 986.756799][ T31] ? __pfx_watchdog+0x10/0x10 [ 986.761545][ T31] ? __pfx_kthread+0x10/0x10 [ 986.766172][ T31] ret_from_fork+0x51e/0xb90 [ 986.770808][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 986.776121][ T31] ? __switch_to+0xc7d/0x1450 [ 986.780942][ T31] ? __pfx_kthread+0x10/0x10 [ 986.785613][ T31] ret_from_fork_asm+0x1a/0x30 [ 986.790904][ T31] [ 986.794686][ T31] Kernel Offset: disabled [ 986.799120][ T31] Rebooting in 86400 seconds..